{
  "story_id": "3d74054f25d6496ea786ec8b1a63785f",
  "desk": "domaindrift-news",
  "revision": 1,
  "published_at": "2026-10-05T19:11:17.846Z",
  "content_hash": "b4df36cb9718511786a886d2df243e6b3c2699e52bcb91f86ebd128ecd4b22b3",
  "hash_basis": "sha256 over `headline\\ndek\\nprose`, plus `\\n` + the canonical citations JSON when any source is placed, plus `\\n#blog` for blogs",
  "basis": {
    "headline": "82 domains migrated DNS to kirklanddc.com at 3.9x baseline, host on parking warning list",
    "dek": "Eighty-two internet domains shifted their DNS provider to kirklanddc.com over the seven days ending 5 October 2026, at nearly four times normal weekly rates.",
    "prose": "Eighty-two domains migrated their DNS provider to kirklanddc.com in the seven days ending 2026-10-05, a rate 3.9 times the recent weekly baseline for this host.\n\nkirklanddc.com is included on the public MISP warning list for parking domain nameservers [^4]. The DNS providers that domains migrated away from during this surge, including koaladns.com and magpiedns.com, also appear on the same MISP parking domain nameserver warning list [^4].\n\nPublic records show kirklanddc.com was first registered in 2015, carries client transfer prohibited status, and used topdns.com regional nameservers as of November 2025 [^1]. Public malware and DNS scanning services have indexed entries for kirklanddc.com nameservers; no confirmed malicious activity is documented in the sampled results [^2][^3].\n\nThe entity that operates kirklanddc.com and authorised these incoming DNS migrations is not known. It is also not known whether the 82 migrated domains share common ownership, prior use history or activity type.\n\nThis article was drafted by an automated system from a DRM3 Research investigation. The full research file, its sources and how it was made: https://research.drm3.network/p/pkg_20261005_b8d78b44",
    "cited": "[{\"statement\":\"Whois kirklanddc.com. kirklanddc.com · Registered On: 2015-12-17 · Expires On: 2028-12-17 · Updated On: 2025-11-26 · Status: client transfer prohibited · Name Servers: ns-canada.topdns.com ns-uk.topdns.com ns-usa.topdns.com · Registrar Information · Registrar: Internet Domain Service BS Corp ·\",\"source\":\"whois.com\",\"instrument\":\"\",\"claim_key\":null,\"url\":\"https://www.whois.com/whois/kirklanddc.com\"},{\"statement\":\"ns2.kirklanddc.com - MalwareURL. See listings of malicious URLs by DNS name server at MalwareURL.com\",\"source\":\"malwareurl.com\",\"instrument\":\"\",\"claim_key\":null,\"url\":\"https://www.malwareurl.com/ns_listing.php?ns=ns2.kirklanddc.com\"},{\"statement\":\"Ns1.Kirklanddc.com DNS - Nameserver Whois Information .... Copyright © 2012-2026 Myip.ms. All rights reserved. Updated: 03 March 2026 All or part of the information on this site may be quoted and reproduced by disclosing the source properly (making a link to the Myip.ms)\",\"source\":\"myip.ms\",\"instrument\":\"\",\"claim_key\":null,\"url\":\"https://myip.ms/view/dns/3011442/ns1.kirklanddc.com\"},{\"statement\":\"misp-warninglists/lists/parking-domain-ns/list.json at main · MISP/misp-warninglists. "ibspark.com",     "kirklanddc.com",     "koaladns.com",     "magpiedns.com",     "malkm.com",     "markmonitor.com",     "mijndomein.nl",     "milesmx.com",     "mytrafficmanagement.com",     "name.com",     &quot\",\"source\":\"github.com\",\"instrument\":\"\",\"claim_key\":null,\"url\":\"https://github.com/MISP/misp-warninglists/blob/main/lists/parking-domain-ns/list.json\"}]",
    "kind": "news"
  },
  "receipt_verify": "Ed25519 over the dot-joined string `slice_hash.cursor_from.cursor_to.view.view_version.row_count`; public_key and sig are base64url of the raw 32-byte key / 64-byte signature",
  "receipt": {
    "slice_hash": "c7d6abf88c490d836318924625481f453d871f5969b6e466f42944e3815f58b4",
    "cursor_from": "ingest:raw_newsroomfloor.stories:c7d6abf88c490d83",
    "cursor_to": "ingest:raw_newsroomfloor.stories:c7d6abf88c490d83",
    "view": "ingest:raw_newsroomfloor.stories",
    "view_version": "1",
    "row_count": 1,
    "hash_basis": "sha256 over the JSON array of {insertId, json} rows as received (normalized wire shape), computed before the BigQuery forward",
    "credits": 0.01,
    "price_per_100_rows_written": 1,
    "sig": "y_dTFyl5mP44RE_NNtWA2pStHGV4_oK8xYaFDkXBOvHdfNtSklpysX6wcz_xTEqJj8c1lFM29eQB1lrl_E4tDg",
    "public_key": "bMUigy8O0jOnBxQ4Sc-5lwhIZ8LQVAhxMbR7qESVuUE",
    "signer_path": "lakehouse/data-extract/v1",
    "alg": "Ed25519",
    "signed": true
  },
  "receipt_note": "the ingest door's signed receipt for this revision, verbatim as the door returned it",
  "generation_chain": "written by a human-directed session at the desk; the revision trail is that record",
  "cited_facts": [
    {
      "statement": "Whois kirklanddc.com. kirklanddc.com · Registered On: 2015-12-17 · Expires On: 2028-12-17 · Updated On: 2025-11-26 · Status: client transfer prohibited · Name Servers: ns-canada.topdns.com ns-uk.topdns.com ns-usa.topdns.com · Registrar Information · Registrar: Internet Domain Service BS Corp ·",
      "source": "whois.com",
      "instrument": "",
      "claim_key": null,
      "url": "https://www.whois.com/whois/kirklanddc.com"
    },
    {
      "statement": "ns2.kirklanddc.com - MalwareURL. See listings of malicious URLs by DNS name server at MalwareURL.com",
      "source": "malwareurl.com",
      "instrument": "",
      "claim_key": null,
      "url": "https://www.malwareurl.com/ns_listing.php?ns=ns2.kirklanddc.com"
    },
    {
      "statement": "Ns1.Kirklanddc.com DNS - Nameserver Whois Information .... Copyright © 2012-2026 Myip.ms. All rights reserved. Updated: 03 March 2026 All or part of the information on this site may be quoted and reproduced by disclosing the source properly (making a link to the Myip.ms)",
      "source": "myip.ms",
      "instrument": "",
      "claim_key": null,
      "url": "https://myip.ms/view/dns/3011442/ns1.kirklanddc.com"
    },
    {
      "statement": "misp-warninglists/lists/parking-domain-ns/list.json at main · MISP/misp-warninglists. "ibspark.com",     "kirklanddc.com",     "koaladns.com",     "magpiedns.com",     "malkm.com",     "markmonitor.com",     "mijndomein.nl",     "milesmx.com",     "mytrafficmanagement.com",     "name.com",     &quot",
      "source": "github.com",
      "instrument": "",
      "claim_key": null,
      "url": "https://github.com/MISP/misp-warninglists/blob/main/lists/parking-domain-ns/list.json"
    }
  ],
  "note": "A signature proves who filed this and that it has not changed since. It never makes a claim true."
}