bot.or.th

Observed Aug 11, 2026, 06:29 UTC (5d ago). Every field below was attested with an Ed25519 signature at scan time.

This reading of bot.or.th was taken 5d ago

bot.or.th is on the survey sweep, which works its way across the whole catalog rather than returning to one name on a schedule. Putting bot.or.th under watch moves it to the fast lane, where DomainDrift re-checks it about every 5 minutes and signs each reading, so a change becomes a dated event within minutes instead of waiting for the sweep to come round.

Watch bot.or.th Watching a domain needs a DRM3 account. The reading above stays free and public either way.
Not responding
Email byProofpoint
Also usesMicrosoft 365OneTrustGlobalSignGoogle Search Console
tranco
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat bot.or.th actually stands on - every host below is a signed observation
bot.or.th
NS
ns1.inet.co.thns2.inet.co.thhouse.violin.co.thtechno.violin.co.th
co.thanswers its DNS
MX
mxa-0050d802.gslb.pphosted.commxb-0050d802.gslb.pphosted.com
Proofpointreceives its email

DNS Records

MX 2

  • 20mxa-0050d802.gslb.pphosted.com
  • 20mxb-0050d802.gslb.pphosted.com

TXT 7

  • MS=ms69861832
  • 725F798FC4BD448B9BEE72BD6861AD86
  • onetrust-domain-verification=3e24175e688f4054bccfbc8970944cf6
  • globalsign-domain-verification=5120f154a090eb74a6a725ad8cd3960c
  • google-site-verification=E4hiLCk05VqyXX4Y8l8mfSmLSHwnZd8dv7lPoI-HyNY
  • 14B7VBUqxjLlhlcd/UBBEgb8OKK3VF15JMVHH5sG0fSF0cXZUv9cjdUSv/73K/hjd5kufKhTgy10coGXaDQvMw==
  • v=spf1 ip4:202.90.4.20 ip4:202.90.4.38 ip4:202.90.4.24 ip4:202.90.4.25 ip4:202.90.7.140 ip4:202.90.4.31 ip4:202.90.4.32 ip4:202.90.4.33 ip4:202.90.4.36 ip4:202.90.6.183 ip4:202.90.4.115 ip4:202.90.4.116 ip4:202.90.4.117 ip4:202.90.4.118 include:spf.protection.outlook.com include:spf-0050d802.pphosted.com -all

NS 4

  • ns1.inet.co.th
  • ns2.inet.co.th
  • house.violin.co.th
  • techno.violin.co.th

SOA 1

  • ns01.inet.co.th hostmaster.inet.co.th

CAA 5

  • issue "comodoca.com"
  • issue "digicert.com"
  • issue "globalsign.com"
  • issue "pki.goog"
  • issue "thaidigitalid.com"

DMARC_RECORDS 1

  • v=DMARC1; p=reject; sp=reject; fo=1; ruf=mailto:DMARCReport@bot.or.th,mailto:dmarc-8669138199@email-security.zerofox.com; rua=mailto:DMARCReport@bot.or.th; adkim=s; aspf=r; rf=afrf;

TLS Certificates (0)

None.

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; the only network request the check makes is for the published public keys.

Verify this receipt

Ed25519 Receipt

Receipt ID
rcpt_e846194f35e970e4
Output Hash
df22352eb12760d850c1958f298d11ae241df9cb285d92c0f2d7fea8d7553cfe
Signature
ed25519:8521b10e520df32cdcb89923ffa6f9fa0c36a2b9f1f823a203b03150434d159710a93ae61d9de2254466423c0ff6e1e939a26bd4c6563509cae9f8f290dc2102
Public Key
ed25519:4859bb613d650e12dd7478cc307c73a8712fabc115a9dc59f65534ed3c09a8f9
Parent
(genesis)
Plane
fast
Verify this in your browser
CONTINUOUS INTERNET TELEMETRY24H DRIFT45,216 material changesacross 43,496 domains · 24h to ~40m ago · +1,709 vs yesterdayROTATION62 domains moved DNS from magpiedns.com to koaladns.com, 57 moved backa rotation loop, not a migration · 24hNOW495 curated domains not reachablelast probe, steadySITE ERRORS36,307 sites serving errorslast probe · 5xx / 404 / TLSBOT DEFENSEbot defense observed on 117,451 sites429 rate-limit / 403 bot-block, a posture signal