CONTINUOUS INTERNET TELEMETRY24H DRIFT2,522 material changesacross 2,301 domains · -29 vs yesterdayDNS DRIFT15 domains changed DNS providertop destination cloudflare.com · -1 vs yesterdayEMAIL DRIFT5 domains switched email providertop destination google.comCERT DRIFT2 domains switched issuing CA24h · -3 vs yesterdayNOW3,329 curated domains not answeringlast probe, steadyERRORS10,919 responded with an errorlast probe · 5xx / 404 / 429 / 40324H DRIFT2,522 material changesacross 2,301 domains · -29 vs yesterdayDNS DRIFT15 domains changed DNS providertop destination cloudflare.com · -1 vs yesterdayEMAIL DRIFT5 domains switched email providertop destination google.comCERT DRIFT2 domains switched issuing CA24h · -3 vs yesterdayNOW3,329 curated domains not answeringlast probe, steadyERRORS10,919 responded with an errorlast probe · 5xx / 404 / 429 / 403

whois.com

Observed 2026-07-13T00:06:37.698105557+00:00 (1d ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onLiquid Web
Email byGoogle Workspace
Secured bySectigo
Registered withPDR Ltd. d/b/a PublicDomainRegistry.com
Also usesGoogle Search Console
push_legacy
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat whois.com actually stands on - every host below is a signed observation
whois.com
A / AAAA
173.199.130.30
Liquid Webserves the site
NS
anastasia.ns.cloudflare.comroman.ns.cloudflare.com
cloudflare.comanswers its DNS
MX
aspmx.l.google.comaspmx2.googlemail.comaspmx3.googlemail.comalt1.aspmx.l.google.com+1 more
Google Workspacereceives its email
TLS
*.whois.com
Sectigo Limitedissued its certificate

DNS Records

A 1

  • 173.199.130.30

MX 5

  • 1aspmx.l.google.com
  • 10aspmx2.googlemail.com
  • 10aspmx3.googlemail.com
  • 5alt1.aspmx.l.google.com
  • 5alt2.aspmx.l.google.com

TXT 3

  • google-site-verification=Giqr4_Nj9d0LjT-k9L39RCF5g781i69QREatausPiZk
  • v=spf1 include:_spf.google.com include:_spf.myorderbox.com ip4:50.28.62.145 ip4:67.225.163.176 ~all
  • v=DMARC1; p=none

NS 2

  • anastasia.ns.cloudflare.com
  • roman.ns.cloudflare.com

SOA 1

  • anastasia.ns.cloudflare.com dns.cloudflare.com

TLS Certificates (2)

Common NameIssuerExpires
*.whois.com C=GB, O=Sectigo Limited, CN=Sectigo Public Server Authentication CA DV R36 Thu, 22 Oct 2026 23:59:59 +0000
Sectigo Public Server Authentication CA DV R36 C=GB, O=Sectigo Limited, CN=Sectigo Public Server Authentication Root R46 Fri, 21 Mar 2036 23:59:59 +0000

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for whois.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for whois.com <a href="https://domaindrift.io/t/whois.com"> <img src="https://domaindrift.io/badge/whois.com.svg" width="300" height="64" alt="DomainDrift signed observations for whois.com"> </a>

Ed25519 Receipt

Receipt ID
a2f8667f-31f7-48ff-bf83-ac270186ca69
Output Hash
6869678ecb1465e85c9047756f8bbabfce41adbc3810440b57e3e382c3dfa11e
Signature
ed25519:6948c6979c8cff9192c96061e62bd7a6de33396c158c9f8261e1b1af5bd06e7dc8064e51f61128e02ecad0197673b4128af8a3012867b17ef26d853b552bce0c
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser