who.is

Observed Jul 18, 2026, 13:26 UTC (2d ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now

Runs onAmazon

Email byGoogle Workspace

Secured byAmazon

Also usesGoogle Search Console

tranco_40k

Every line above is a signed observation. Check the math at the bottom of the page.

INFRASTRUCTURE MAPwhat who.is actually stands on - every host below is a signed observation

who.is

A / AAAA

18.211.38.8100.49.211.89

Amazonserves the site

ns-1048.awsdns-03.orgns-1741.awsdns-25.co.ukns-232.awsdns-29.comns-540.awsdns-03.net

awsdns-03.org + awsdns-25.co.uk + moreanswers its DNS

smtp.google.com

Google Workspacereceives its email

TLS

who.is

Amazonissued its certificate

DNS Records

A 2

18.211.38.8
100.49.211.89

MX 1

1smtp.google.com

TXT 5

google-site-verification=5ixNJSwVDHBWHAGNHND7kyYj-IB1sGL-rmtq1Aoeplo
google-site-verification=7H-RfKJUsS1WHpODWcpJEJgF7lktM1GepxdhUq7phcQ
google-site-verification=oLW2qDgn-fqfI5FbmSTvDUXCLVKWL85jSwCJ3dRgSBM
v=spf1 include:_spf.google.com include:retailSPF.smtp.com ?all
v=DMARC1; p=none;

NS 4

ns-1048.awsdns-03.org
ns-1741.awsdns-25.co.uk
ns-232.awsdns-29.com
ns-540.awsdns-03.net

SOA 1

ns-1048.awsdns-03.org awsdns-hostmaster.amazon.com

TLS Certificates (3)

Common Name	Issuer	Expires
`who.is`	C=US, O=Amazon, CN=Amazon RSA 2048 M01	Mon, 18 Jan 2027 23:59:59 +0000
`Amazon RSA 2048 M01`	C=US, O=Amazon, CN=Amazon Root CA 1	Fri, 23 Aug 2030 22:21:28 +0000
`Amazon Root CA 1`	C=US, ST=Arizona, L=Scottsdale, O=Starfield Technologies, Inc., CN=Starfield Services Root Certificate Authority - G2	Thu, 31 Dec 2037 01:00:00 +0000

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for who.is. It updates itself. It attests a signed observation - not that the site is safe.

<a href="https://domaindrift.io/t/who.is">
  <img src="https://domaindrift.io/badge/who.is.svg"
       width="300" height="64" alt="DomainDrift signed observations for who.is">
</a>

Ed25519 Receipt

Receipt ID: f53afb0e-4015-4273-af3f-313d8819a52f
Output Hash: feddf8741ac05336b7fbb5d61875b561ddfb4f6c8af65b99c31b75222f2ee11e
Signature: ed25519:06a9df72520c1383589509d3a5cb01508f72ea0e25db46f6e0d5bd8134258eb2486e80ee50bd7bd5ee96fd58e525407646700b5fc323b47338ebb9d1e2c15d02
Public Key: ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent: (genesis)
Plane: fast

Verify this in your browser

Permalink: https://domaindrift.io/t/who.is