CONTINUOUS INTERNET TELEMETRY24H DRIFT159 material changesacross 114 domains · +13 vs yesterdayEMAIL DRIFT1 domain switched email providertop destination xn----8sbafg9clhjcp.bgCERT DRIFT1 domains switched issuing CA24hNOW4,396 curated domains not answeringlast probe, steadyERRORS28,581 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED85,476 throttled or blocked our scanner429 rate-limit / 403 bot-blockMOVERgov.brAll nameservers removed (domain is dark)24H DRIFT159 material changesacross 114 domains · +13 vs yesterdayEMAIL DRIFT1 domain switched email providertop destination xn----8sbafg9clhjcp.bgCERT DRIFT1 domains switched issuing CA24hNOW4,396 curated domains not answeringlast probe, steadyERRORS28,581 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED85,476 throttled or blocked our scanner429 rate-limit / 403 bot-blockMOVERgov.brAll nameservers removed (domain is dark)

139.com

Observed Jul 18, 2026, 13:42 UTC (3d ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onChina Mobile Communications Group
Secured byDigiCert
Registered withXin Net Technology Corporation
IPv6 · tranco_40k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat 139.com actually stands on - every host below is a signed observation
139.com
A / AAAA
120.232.169.292409:8c54:813:11c::1:211
China Mobile Communications Groupserves the site
NS
mailns1.10086.cnmailns3.10086.cnmailns2.10086.cn
10086.cnanswers its DNS
MX
mx2.mail.139.commx1.mail.139.commx3.mail.139.com
139.comreceives its email
TLS
*.139.com
DigiCert Incissued its certificate

DNS Records

A 1

  • 120.232.169.29

AAAA 1

  • 2409:8c54:813:11c::1:211

MX 3

  • 10mx2.mail.139.com
  • 5mx1.mail.139.com
  • 20mx3.mail.139.com

TXT 1

  • v=spf1 include:spf.mail.10086.cn ~all

NS 3

  • mailns1.10086.cn
  • mailns3.10086.cn
  • mailns2.10086.cn

SOA 1

  • mailns1.10086.cn hostmaster.mail.10086.cn

TLS Certificates (3)

Common NameIssuerExpires
*.139.com C=US, O=DigiCert Inc, 2.5.4.11=www.digicert.com, CN=RapidSSL TLS RSA CA G1 Fri, 28 Aug 2026 23:59:59 +0000
RapidSSL TLS RSA CA G1 C=US, O=DigiCert Inc, 2.5.4.11=www.digicert.com, CN=DigiCert Global Root G2 Tue, 02 Nov 2027 12:24:33 +0000
DigiCert Global Root G2 C=US, O=DigiCert Inc, 2.5.4.11=www.digicert.com, CN=DigiCert Global Root G2 Fri, 15 Jan 2038 12:00:00 +0000

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for 139.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for 139.com <a href="https://domaindrift.io/t/139.com"> <img src="https://domaindrift.io/badge/139.com.svg" width="300" height="64" alt="DomainDrift signed observations for 139.com"> </a>

Ed25519 Receipt

Receipt ID
e1479407-20b8-4bfd-b37d-3b6125fc55c6
Output Hash
01975c0d2f28a7c7e3aa76b5851560bd2744e2174ff2f45e6ce7904e33903794
Signature
ed25519:4f0dcc353c1229e15d12bd45daa3ea687c2704b4196cae3c20ef6f31cadbb1d07c84ec413342535f16535c7962b25907b4a6ddcc514ff3230e93db320c608301
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser