CONTINUOUS INTERNET TELEMETRY24H DRIFT3,236 material changesacross 2,818 domains · -162 vs yesterdayDNS DRIFT22 domains changed DNS providertop destination digicertdns.com + digicertdns.net · -5 vs yesterdayEMAIL DRIFT5 domains switched email providertop destination 365cool.com · -1 vs yesterdayCERT DRIFT8 domains switched issuing CA24h · +1 vs yesterdayNOW3,307 curated domains not answering-6,411 vs yesterdayERRORS10,962 responded with an errorlast probe · 5xx / 404 / 429 / 40324H DRIFT3,236 material changesacross 2,818 domains · -162 vs yesterdayDNS DRIFT22 domains changed DNS providertop destination digicertdns.com + digicertdns.net · -5 vs yesterdayEMAIL DRIFT5 domains switched email providertop destination 365cool.com · -1 vs yesterdayCERT DRIFT8 domains switched issuing CA24h · +1 vs yesterdayNOW3,307 curated domains not answering-6,411 vs yesterdayERRORS10,962 responded with an errorlast probe · 5xx / 404 / 429 / 403

139.com

Observed 2026-07-12T11:21:35.955Z (20h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onCloudflare
Registered withXin Net Technology Corporation
IPv6 · tranco_40k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat 139.com actually stands on - every host below is a signed observation
139.com
A / AAAA
120.232.169.292409:8c54:813:11c::1:211
Cloudflareserves the site
NS
mailns1.10086.cnmailns2.10086.cnmailns3.10086.cn
10086.cnanswers its DNS
MX
mx1.mail.139.commx3.mail.139.commx2.mail.139.com
139.comreceives its email

HTTPS probe

redirect Redirecting (3xx) 301 → https://mail.10086.cn/
HTTP status301
Servercloudflare
TLS protocolHTTP/2
TLS issuernot observed
Behind Cloudflareyes
Response time1553 ms
DNS resolutionNOERROR
Redirect chain
https://mail.10086.cn/

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 1

  • 120.232.169.29

AAAA 1

  • 2409:8c54:813:11c::1:211

MX 3

  • 5mx1.mail.139.com
  • 20mx3.mail.139.com
  • 10mx2.mail.139.com

TXT 1

  • v=spf1 include:spf.mail.10086.cn ~all

NS 3

  • mailns1.10086.cn
  • mailns2.10086.cn
  • mailns3.10086.cn

SOA 1

  • mailns1.10086.cn hostmaster.mail.10086.cn

TLS Certificates (0)

None.

Subdomains (8)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for 139.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for 139.com <a href="https://domaindrift.io/t/139.com"> <img src="https://domaindrift.io/badge/139.com.svg" width="300" height="64" alt="DomainDrift signed observations for 139.com"> </a>

Ed25519 Receipt

Receipt ID
beecc81e-661e-40b5-a967-78c3e8b43c61
Output Hash
01792443c75ecb23fb6fee4d30e230ff68297749669d0c22c73b8082d339f67b
Signature
ed25519:e251dd3102a19d5a5e00717670f1c2df6e3abb3a64cfa7001e554c90c201e008aea0c46fe5467d26a1caf20a084a53dcba150fae06df1f03d98971f306b0750f
Public Key
ed25519:d610d74ef18f683e5beb859d241d5e67dff0c122e8928b06bec1c2476f4ba27b
Parent
(genesis)
Plane
fast
Verify this in your browser