CONTINUOUS INTERNET TELEMETRY24H DRIFT35,866 material changesacross 35,253 domains · 24h to ~3h ago · -4,994 vs yesterdayNOW560 curated domains not reachablelast probe, steadySITE ERRORS34,531 sites serving errorslast probe · 5xx / 404 / TLSBOT DEFENSEbot defense observed on 156,763 sites429 rate-limit / 403 bot-block, a posture signal

upexpress.com

Observed Jul 25, 2026, 08:39 UTC (8d ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation - watch it for 5-minute checks.

Up right now
Email byMicrosoft 365
Secured byEntrust Limited
IPv6 · 3 subdomains · tranco
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat upexpress.com actually stands on - every host below is a signed observation
upexpress.com
A / AAAA
23.13.164.652600:1408:ec00:1086::37f32600:1408:ec00:108b::37f3
2600serves the site
NS
ns3.metrolinx.comns1.metrolinx.comns2.metrolinx.com
metrolinx.comanswers its DNS
MX
metrolinx-com.mail.protection.outlook.com
Microsoft 365receives its email
TLS
www.gotransit.com
Entrust Limitedissued its certificate

DNS Records

A 1

  • 23.13.164.65

AAAA 2

  • 2600:1408:ec00:1086::37f3
  • 2600:1408:ec00:108b::37f3

MX 1

  • 10metrolinx-com.mail.protection.outlook.com

TXT 7

  • oyGtUaiA5IMaCJrIj+wMLcpspP8rcAX//M8L9ZWYZu68Q9TDjFO+dDahJzJ/FCIXdIL4xrd8PsE/zRYXSDzN8Q==
  • adobe-idp-site-verification=1d7d8b23-c570-4e14-b806-a6d85e8e2626
  • 5UEXhoBxwdxXWtHssg2hayYFFwmGejQ4BmONoOmFxTbmvn1CtRTW15Wgd03Mm/Ssf8MJUcdgmuCyit08//iGgw==
  • MS=ms82624499
  • v=spf1 ip4:158.106.77.208 include:spf.protection.outlook.com include:spf.messagelabs.com -all
  • wcoPMX0CpAZkxunJx2l/1G/8xNE9Cl5pKnD9zKzNhOWP27yrN0tzJk9eptoiY+K7rEjv6Ayr1+RAIhC91XaSWA==
  • v=DMARC1; p=quarantine; pct=100; rua=mailto:dmarc.qua@upexpress.com

NS 3

  • ns3.metrolinx.com
  • ns1.metrolinx.com
  • ns2.metrolinx.com

SOA 1

  • ns1.metrolinx.com infoblox\.team.metrolinx.com

TLS Certificates (4)

Common NameIssuerExpires
www.gotransit.com C=CA, O=Entrust Limited, CN=Entrust OV TLS Issuing ECC CA 2 Sat, 19 Dec 2026 23:59:59 +0000
Entrust OV TLS Issuing ECC CA 2 C=GB, O=Sectigo Limited, CN=Sectigo Public Server Authentication Root E46 Fri, 10 Dec 2027 23:59:59 +0000
Sectigo Public Server Authentication Root E46 C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust ECC Certification Authority Mon, 18 Jan 2038 23:59:59 +0000
USERTrust ECC Certification Authority C=US, ST=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust ECC Certification Authority Mon, 18 Jan 2038 23:59:59 +0000

Subdomains (3)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for upexpress.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for upexpress.com <a href="https://domaindrift.io/t/upexpress.com"> <img src="https://domaindrift.io/badge/upexpress.com.svg" width="300" height="64" alt="DomainDrift signed observations for upexpress.com"> </a>

Ed25519 Receipt

Receipt ID
rcpt_f9227bb8a64636da
Output Hash
512714363b192760ef813b5d80b6e89f860beba18c7036b837ef564ff19475fa
Signature
ed25519:d0ac676ecc17f22cce15851aa60b50615a464f37f1dc02b2206ba4b2349d4ab998a8622475e2e35d72be843a38c8e65fe8422c65d6cd1eb8059eb407a6a72604
Public Key
ed25519:4859bb613d650e12dd7478cc307c73a8712fabc115a9dc59f65534ed3c09a8f9
Parent
(genesis)
Plane
fast
Verify this in your browser