CONTINUOUS INTERNET TELEMETRY24H DRIFT1,193 material changesacross 712 domains · last 24h · -9,222 vs yesterdayDNS DRIFT25 domains changed DNS providertop destination cloudflare.com · -634 vs yesterdayEMAIL DRIFT6 domains switched email providertop destination google.com · -161 vs yesterdayCERT DRIFT5 domains switched issuing CA24h · -214 vs yesterdayNOW411 curated domains not reachable-292 vs yesterdaySITE ERRORS17,575 sites serving errorslast probe · 5xx / 404 / TLSBOT DEFENSEbot defense observed on 100,838 sites429 rate-limit / 403 bot-block, a posture signal

antfin.com

Observed Jul 24, 2026, 06:50 UTC (16h ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation — watch it for 5-minute checks.

Not responding
Signed observation on record.
IPv6 · tranco
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat antfin.com actually stands on - every host below is a signed observation
antfin.com
A / AAAA
110.75.130.45110.76.8.2552400:b200:1005:3030::27c2400:b200:1005:3030::247
2400serves the site
NS
ns1.alipay.comns3.alipay.comns4.alipay.comns2.alipay.com
alipay.comanswers its DNS
MX
mx3.qiye.aliyun.commx1.qiye.aliyun.commx2.qiye.aliyun.com
aliyun.comreceives its email

DNS Records

A 2

  • 110.75.130.45
  • 110.76.8.255

AAAA 2

  • 2400:b200:1005:3030::27c
  • 2400:b200:1005:3030::247

MX 3

  • 15mx3.qiye.aliyun.com
  • 5mx1.qiye.aliyun.com
  • 10mx2.qiye.aliyun.com

TXT 2

  • v=spf1 include:spf.qiye.aliyun.com include:spf1.staff.mail.aliyun.com -all
  • v=DMARC1; p=quarantine; rua=mailto:pub_officesec_antmail@antgroup-inc.com; ruf=mailto:pub_officesec_antmail@antgroup-inc.com

NS 4

  • ns1.alipay.com
  • ns3.alipay.com
  • ns4.alipay.com
  • ns2.alipay.com

SOA 1

  • ns1.alipay.com hm.alipay.com.antfin.com

TLS Certificates (0)

None.

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for antfin.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for antfin.com <a href="https://domaindrift.io/t/antfin.com"> <img src="https://domaindrift.io/badge/antfin.com.svg" width="300" height="64" alt="DomainDrift signed observations for antfin.com"> </a>

Ed25519 Receipt

Receipt ID
rcpt_34b41a19ba07454c
Output Hash
0bc2c65dc058074a5b37accffe01f6a4b0bfa8ad572fcadbde2d10ef1176d708
Signature
ed25519:f7fe0db1a7fe2663e30dcbd3e90febda6b1c68d28f206961299416e4b8409d868fd3e94c0b3428315a250c9534516f1d61565d6e8b8c187d207d3aee2d054b0f
Public Key
ed25519:4859bb613d650e12dd7478cc307c73a8712fabc115a9dc59f65534ed3c09a8f9
Parent
(genesis)
Plane
fast
Verify this in your browser