theintercept.com

Observed Jul 18, 2026, 12:25 UTC (3d ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now

Runs onAutomattic

Email byProtonMail

Secured byLet's Encrypt

Registered withGandi SAS

Also usesFacebook/MetaGoogle Search Console

1 subdomain · push_legacy

Every line above is a signed observation. Check the math at the bottom of the page.

INFRASTRUCTURE MAPwhat theintercept.com actually stands on - every host below is a signed observation

theintercept.com

A / AAAA

192.0.66.199

Automatticserves the site

dora.ns.cloudflare.comlamar.ns.cloudflare.com

cloudflare.comanswers its DNS

mail.protonmail.chmailsec.protonmail.ch

ProtonMailreceives its email

TLS

theintercept.com

Let's Encryptissued its certificate

DNS Records

A 1

192.0.66.199

MX 2

10mail.protonmail.ch
20mailsec.protonmail.ch

TXT 6

apple-domain-verification=nuWNBRgq7Tbv7H4V
facebook-domain-verification=o4e91x4ku9ni6lkevwxuz63bgud0r4
protonmail-verification=92f35641de8e4632b9a6df3dee851ac3ab3bfa64
google-site-verification=ia8pDB7xsp05F2zwBWCjiU_jk6uvoi-gztZ5QUE0B1I
v=spf1 include:_spf.protonmail.ch include:_spf.psm.knowbe4.com mx ~all
v=DMARC1; p=none

NS 2

dora.ns.cloudflare.com
lamar.ns.cloudflare.com

SOA 1

dora.ns.cloudflare.com dns.cloudflare.com

TLS Certificates (4)

Common Name	Issuer	Expires
`theintercept.com`	C=US, O=Let's Encrypt, CN=YE1	Thu, 24 Sep 2026 05:08:24 +0000
`YE1`	C=US, O=ISRG, CN=Root YE	Sat, 02 Sep 2028 23:59:59 +0000
`Root YE`	C=US, O=Internet Security Research Group, CN=ISRG Root X2	Thu, 02 Sep 2032 23:59:59 +0000
`ISRG Root X2`	C=US, O=Internet Security Research Group, CN=ISRG Root X1	Thu, 02 Sep 2032 23:59:59 +0000

Subdomains (1)

www.theintercept.com

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for theintercept.com. It updates itself. It attests a signed observation - not that the site is safe.

<a href="https://domaindrift.io/t/theintercept.com">
  <img src="https://domaindrift.io/badge/theintercept.com.svg"
       width="300" height="64" alt="DomainDrift signed observations for theintercept.com">
</a>

Ed25519 Receipt

Receipt ID: 04d29330-da7a-4b50-aa7d-3328e89203a5
Output Hash: 1641086858acf65e10b6f5dac1ced873a37c1c884565d7f363663fcc6a2fb509
Signature: ed25519:aa34595c9671714d67618243ce60e5788276eb83173915f96854df4867626014d32dea3c9c0c7c136cb928609988e9aef8005a114a6ebef0c36ac07d8af5ac08
Public Key: ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent: (genesis)
Plane: fast

Verify this in your browser

Permalink: https://domaindrift.io/t/theintercept.com