CONTINUOUS INTERNET TELEMETRY24H DRIFT9,163 material changesacross 8,753 domains · last 24h · -1,252 vs yesterdayDNS DRIFT575 domains changed DNS providertop destination cloudflare.com · -84 vs yesterdayEMAIL DRIFT144 domains switched email providertop destination google.com · -23 vs yesterdayCERT DRIFT191 domains switched issuing CA24h · -28 vs yesterdayNOW440 curated domains not reachable-263 vs yesterdaySITE ERRORS17,331 sites serving errorslast probe · 5xx / 404 / TLSBOT DEFENSEbot defense observed on 96,857 sites429 rate-limit / 403 bot-block, a posture signal

sf-express.com

Observed Jul 24, 2026, 02:42 UTC (30m ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation — watch it for 5-minute checks.

Not responding
Registered withBeijing Brandma International Networking Technology Ltd.
Also usesGoogle Search Console
logistics_expanded
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat sf-express.com actually stands on - every host below is a signed observation
sf-express.com
NS
ns3.dnsv5.comns4.dnsv5.com
dnsv5.comanswers its DNS
MX
tchkmx01.sf-express.comhwgzmx01.sf-express.comtcgzmx01.sf-express.com
sf-express.comreceives its email

DNS Records

MX 3

  • 10tchkmx01.sf-express.com
  • 20hwgzmx01.sf-express.com
  • 20tcgzmx01.sf-express.com

TXT 8

  • idt05kb8avepm0i336f07j9ehs
  • b17f9875b2c1474ca14803e9f1d5a379
  • kjntl9qbbf86k33z1kcrw479ntgd8m3d
  • google-site-verification=E-COEmW0EgAZjj_vUhLs9Mnl8FIiDgebknY0Ro6Yf9M
  • v=spf1 include:spf.sf-express.com include:servicemail.sf-express.com include:spf-relay.sf-express.com include:spf-pmg.sf-express.com include:spf.qiye.aliyun.com -all
  • MS=ms46463947
  • eigjauao697g1ofmj07q6iml6n
  • v=DMARC1;p=quarantine;ruf=mailto:sf_rua@sf-express.com;rua=mailto:sf_ruf@sf-express.com

NS 2

  • ns3.dnsv5.com
  • ns4.dnsv5.com

SOA 1

  • ns3.dnsv5.com enterprise3dnsadmin.dnspod.com

SRV 2

  • expe.sf-express.com:5060 p10
  • expe.sf-express.com:5061 p10

TLS Certificates (0)

None.

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for sf-express.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for sf-express.com <a href="https://domaindrift.io/t/sf-express.com"> <img src="https://domaindrift.io/badge/sf-express.com.svg" width="300" height="64" alt="DomainDrift signed observations for sf-express.com"> </a>

Ed25519 Receipt

Receipt ID
rcpt_b17b087f42ef0845
Output Hash
9d3c32bb42bf660f5ada5b8464657091a6b628c22df6b4cafa68a0be676d1b3f
Signature
ed25519:33e398008d8412c68da42220e85968ac14a3f0091b300d2c0b4f372653ca61de71cd9224ed3a4c2bb0e0aa5d320fa10edd3cee012de80143b1bb680e8605b609
Public Key
ed25519:4859bb613d650e12dd7478cc307c73a8712fabc115a9dc59f65534ed3c09a8f9
Parent
(genesis)
Plane
fast
Verify this in your browser