CONTINUOUS INTERNET TELEMETRY24H DRIFT3,080 material changesacross 2,832 domains · -318 vs yesterdayDNS DRIFT16 domains changed DNS providertop destination cloudflare.com · -11 vs yesterdayEMAIL DRIFT5 domains switched email providertop destination google.com · -1 vs yesterdayCERT DRIFT5 domains switched issuing CA24h · -2 vs yesterdayNOW3,321 curated domains not answering-6,397 vs yesterdayERRORS10,913 responded with an errorlast probe · 5xx / 404 / 429 / 40324H DRIFT3,080 material changesacross 2,832 domains · -318 vs yesterdayDNS DRIFT16 domains changed DNS providertop destination cloudflare.com · -11 vs yesterdayEMAIL DRIFT5 domains switched email providertop destination google.com · -1 vs yesterdayCERT DRIFT5 domains switched issuing CA24h · -2 vs yesterdayNOW3,321 curated domains not answering-6,397 vs yesterdayERRORS10,913 responded with an errorlast probe · 5xx / 404 / 429 / 403

whois.co.kr

Observed 2026-07-13T01:40:10.457Z (19h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onCloudflare
Also usesGoogle Search Console
19 subdomains · tranco_20k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat whois.co.kr actually stands on - every host below is a signed observation
whois.co.kr
A / AAAA
139.150.81.40
Cloudflareserves the site
NS
a7-64.akam.neta20-67.akam.neta1-190.akam.neta13-67.akam.net+2 more
akam.netanswers its DNS
MX
alws.aspmx.whoisworks.comalf1.aspmx.whoisworks.comalf2.aspmx.whoisworks.com
whoisworks.comreceives its email

HTTPS probe

redirect Redirecting (3xx) 302 → https://member.whois.co.kr/sso/?tpf=check_login&agent_auth_key=98017d73e2c97fb59aa4e892a3bb08b9&current_url=https%3A%2F%2Fwhois.co.kr
HTTP status302
Servercloudflare
TLS protocolHTTP/2
TLS issuernot observed
Behind Cloudflareyes
Response time1178 ms
DNS resolutionNOERROR
Redirect chain
https://member.whois.co.kr/sso/?tpf=check_login&agent_auth_key=98017d73e2c97fb59aa4e892a3bb08b9&current_url=https%3A%2F%2Fwhois.co.kr

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 1

  • 139.150.81.40

MX 3

  • 10alws.aspmx.whoisworks.com
  • 10alf1.aspmx.whoisworks.com
  • 10alf2.aspmx.whoisworks.com

TXT 5

  • v=spf1 ip4:101.101.166.219 ip4:129.154.218.135 include:spf1.whoisworks.com include:email.ncloud.com include:_spf.whoismail.net ~all
  • google-site-verification=BPnuxjT4GlJw1WKpKS0vQ94hLDPzJm0x7uwDmR7aHNg
  • mailer.domain.verification=1K2keFz9jmnMh0TRwn9tfZX7ShwMG5
  • MS=ms43440226
  • v=DMARC1; p=none; aspf=r;

NS 6

  • a7-64.akam.net
  • a20-67.akam.net
  • a1-190.akam.net
  • a13-67.akam.net
  • a26-65.akam.net
  • a4-67.akam.net

SOA 1

  • a1-190.akam.net dmanager.whois.co.kr

TLS Certificates (0)

None.

Subdomains (19)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for whois.co.kr. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for whois.co.kr <a href="https://domaindrift.io/t/whois.co.kr"> <img src="https://domaindrift.io/badge/whois.co.kr.svg" width="300" height="64" alt="DomainDrift signed observations for whois.co.kr"> </a>

Ed25519 Receipt

Receipt ID
0e182607-4289-47d0-b49d-00b5d920fd05
Output Hash
d4107ce357ae2da7942b1b9f236afbef5d2834a7353615686af3132f548ce2ec
Signature
ed25519:e0755e5617a93c067d4a7af8cd363e7b060f3c3b900bf608a1b4c7550b3019f9e6c6c7c4d1799f57c47be268ad834d600eaa2bfa6fccd549d75073986bf0650a
Public Key
ed25519:d610d74ef18f683e5beb859d241d5e67dff0c122e8928b06bec1c2476f4ba27b
Parent
(genesis)
Plane
fast
Verify this in your browser