express.com

Observed 2026-07-12T19:01:48.945Z (6h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now

Runs onCloudflare

Also uses1PasswordGoogle Search ConsoleAtlassian

13 subdomains · fashion_luxury

Every line above is a signed observation. Check the math at the bottom of the page.

INFRASTRUCTURE MAPwhat express.com actually stands on - every host below is a signed observation

express.com

A / AAAA

173.222.162.190173.222.162.137173.222.162.139173.222.162.144+4 more

Cloudflareserves the site

ns1-147.akam.netusw6.akam.netuse1.akam.neteur2.akam.net+4 more

akam.netanswers its DNS

mx1.express.iphmx.commx2.express.iphmx.com

iphmx.comreceives its email

HTTPS probe

redirect Redirecting (3xx) 301 → https://www.express.com/

HTTP status301

Servercloudflare

TLS protocolHTTP/2

TLS issuernot observed

Behind Cloudflareyes

Response time61 ms

DNS resolutionNOERROR

Redirect chain

https://www.express.com/

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 8

173.222.162.190
173.222.162.137
173.222.162.139
173.222.162.144
173.222.162.176
173.222.162.160
173.222.162.161
173.222.162.148

MX 2

10mx1.express.iphmx.com
10mx2.express.iphmx.com

TXT 20

adobe-idp-site-verification=c770e8a5-330a-4b58-8e9a-6f620e2b373f
1password-site-verification=ERHWU3II4ZBKREXCZ4U2KDTDBU
sK7N/wnQcL96jzBCF49hlIz5u4eym4rojRIQfXqFWq5jY4wjPgF51xZU3H0+QcVlqbSTqXVKmrCizXRG5CSKIg==
firebase=exp-ecomm-sandbox
V0FH10H/fc7iqVjLGLFGQiWHSBfiGoZi/aMBY29mwJzx6TzOWU6pMUhbfrxnpCw5XTKWZ4L8ok0AOVHflDAknA==
firebase=exp-ecomm-prod
apple-domain-verification=2l1KDOoBIEhgcQ2Z
jamf-site-verification=gipzSlpw9UPSwWo-vRUBsg
00D5f000005URAS=1TBPQ00000004lB
dtm-domain-verification=rLMEXmOsQTg3HmrK1edqqZJwxF4cJlooxy9LyMt1krc

NS 8

ns1-147.akam.net
usw6.akam.net
use1.akam.net
eur2.akam.net
use5.akam.net
eur6.akam.net
eur5.akam.net
ns1-114.akam.net

SOA 1

ns1-114.akam.net hostmaster.akamai.com

TLS Certificates (0)

None.

Subdomains (13)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for express.com. It updates itself. It attests a signed observation - not that the site is safe.

<a href="https://domaindrift.io/t/express.com">
  <img src="https://domaindrift.io/badge/express.com.svg"
       width="300" height="64" alt="DomainDrift signed observations for express.com">
</a>

Ed25519 Receipt

Receipt ID: 966a586a-f46b-43ba-b261-2083043aeb1b
Output Hash: cb65c093d5e8aafc56fd224496c0a8340464b5365a73279232385a0e3275c18e
Signature: ed25519:1d7e2c782b8aaef06a9988fbbaffe00da053416b2d8582d8b576a4039ea3c7c80c09bf746f4418170bfeaab35683cebec57d4b8dfc4846d60d861346a1a6fb0f
Public Key: ed25519:d610d74ef18f683e5beb859d241d5e67dff0c122e8928b06bec1c2476f4ba27b
Parent: (genesis)
Plane: fast

Verify this in your browser

Permalink: https://domaindrift.io/t/express.com