CONTINUOUS INTERNET TELEMETRY24H DRIFT2,400 material changesacross 2,165 domains · -998 vs yesterdayDNS DRIFT15 domains changed DNS providertop destination cloudflare.com · -12 vs yesterdayEMAIL DRIFT5 domains switched email providertop destination google.com · -1 vs yesterdayCERT DRIFT5 domains switched issuing CA24h · -2 vs yesterdayNOW3,329 curated domains not answering-6,389 vs yesterdayERRORS10,906 responded with an errorlast probe · 5xx / 404 / 429 / 40324H DRIFT2,400 material changesacross 2,165 domains · -998 vs yesterdayDNS DRIFT15 domains changed DNS providertop destination cloudflare.com · -12 vs yesterdayEMAIL DRIFT5 domains switched email providertop destination google.com · -1 vs yesterdayCERT DRIFT5 domains switched issuing CA24h · -2 vs yesterdayNOW3,329 curated domains not answering-6,389 vs yesterdayERRORS10,906 responded with an errorlast probe · 5xx / 404 / 429 / 403

zto.com

Observed 2026-07-13T17:33:02.219Z (4h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onCloudflare
Registered witheName Technology Co., Ltd.
11 subdomains · logistics_expanded
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat zto.com actually stands on - every host below is a signed observation
zto.com
A / AAAA
115.231.25.229
Cloudflareserves the site
NS
ns4.dnsv4.comns3.dnsv4.com
dnsv4.comanswers its DNS
MX
mx1.qiye.aliyun.commx3.qiye.aliyun.commx2.qiye.aliyun.com
aliyun.comreceives its email

HTTPS probe

redirect Redirecting (3xx) 301 → https://www.zto.com
HTTP status301
Servercloudflare
TLS protocolHTTP/2
TLS issuernot observed
Behind Cloudflareyes
Response time640 ms
DNS resolutionNOERROR
Redirect chain
https://www.zto.com

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 1

  • 115.231.25.229

MX 3

  • 5mx1.qiye.aliyun.com
  • 15mx3.qiye.aliyun.com
  • 10mx2.qiye.aliyun.com

TXT 9

  • MS=4C1735CA3C8ED0DB77FB4A1C2254708EA3B57509
  • MS=ms35066655
  • OSSRH-88627
  • rvslq36r5rrfj6qcyrcdkvs67cwc3l2m
  • apple-domain-verification=3xUUhc7LlL6J71Cj
  • _k6fm53s112wfg1cexk634i7w2vyha9v
  • MS=ms28395172
  • MS=ms87017374
  • v=spf1 include:spf.qiye.aliyun.com -all

NS 2

  • ns4.dnsv4.com
  • ns3.dnsv4.com

SOA 1

  • ns3.dnsv4.com enterprise2dnsadmin.dnspod.com

TLS Certificates (0)

None.

Subdomains (11)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for zto.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for zto.com <a href="https://domaindrift.io/t/zto.com"> <img src="https://domaindrift.io/badge/zto.com.svg" width="300" height="64" alt="DomainDrift signed observations for zto.com"> </a>

Ed25519 Receipt

Receipt ID
07c0213e-1fe8-4402-a4c4-845f380bcf63
Output Hash
5fd907b84cb20d535b6af29fbe174dd208d8a18d8fc3e023eebb737bc8818889
Signature
ed25519:5a6efea3d339afd9b16690d360abf1a9902def922efd992380a9d90ce9d3b68243f755cacf3cd09c9ab75d6c5ff2643936195e431cf8c648c9e57c46608bb80b
Public Key
ed25519:d610d74ef18f683e5beb859d241d5e67dff0c122e8928b06bec1c2476f4ba27b
Parent
(genesis)
Plane
fast
Verify this in your browser