North Korea's 40+ .kp Domain Websites Intermittently Unavailable Since 20th
Since the 20th of this month, over 40 .kp domain websites operated by North Korean officials and companies, including KCNA, Rodong Sinmun, and Air Koryo, have experienced issues, frequently becoming inaccessible or disconnecting again after a period of recovery.
Affected websites include the Ministry of Foreign Affairs, KCNA, Rodong Sinmun, Minju Joson, Naenara, and Air Koryo, all using the North Korean national domain .kp; from around 11 AM to 7 PM on the 20th, access was continuously unavailable or unstable, with a brief recovery around 8 PM that evening, followed by intermittent disconnections.
Network monitoring service Telecom Observer detected nearly 6 hours of disruption in North Korea's border gateway protocol routing infrastructure on the 20th, from approximately 1810 to 2350 GMT; intermittent faults continued on the 21st, with some websites like KCNA and Rodong Sinmun accessible after 0043 GMT, but connections remained unstable.
South Korean cybersecurity company STEALIEN analyzed that the simultaneous failure of most websites is not simply due to a surge in traffic. The servers managing North Korean website domains are concentrated in the same communication line segment in China; if there is an issue with that line, it can lead to simultaneous outages. Possible causes include line faults or distributed denial-of-service attacks, but there is no public evidence confirming a hacker attack.
Similar interruptions have occurred in North Korea's internet in the past, with some historical cases related to external attacks or internal power and routing issues; during this incident, external access from South Korea, the United States, and other locations was blocked, and North Korean officials have not publicly explained the reasons.
Funding and resource flow towards network routing monitoring and fault diagnosis has temporarily interrupted North Korea's external propaganda and information export; the beneficiaries are observers relying on alternative information channels, while the pressured parties are North Korean officials and related agencies that depend on .kp domain sites for external communication.
Source: Public Information
ABAB AI Insight
North Korea's .kp websites have long relied on limited external routing and centralized server hosting. Historical records show that its internet has repeatedly experienced interruptions due to routing instability, power issues, or external events; after the 2014 Sony Pictures incident, there was a large-scale offline occurrence, and a similar suspected attack caused an interruption in January 2022.
In terms of capital and resource pathways, North Korea concentrates its external propaganda sites on a single country domain and external communication lines, with routing and domain servers primarily accessed through Chinese lines; the motivation is to maintain centralized control and low-cost operations, but a single point of failure at the line or BGP level can render dozens of official sites simultaneously unavailable. This incident saw routing interruptions and subsequent intermittent recoveries.
This is similar to cases where some highly centralized hosted national-level propaganda networks experience simultaneous outages under external line or routing failures, and it resembles the batch unavailability pattern seen in the early internet when relying on a single upstream supplier; North Korea is currently in a phase where its external information export is transitioning from limited connectivity to continuously fragile exposure.
Essentially, this represents a restructuring of the industry chain: shifting the constraints on the availability of external information release from content production to external routing and hosting lines, so that a single line or BGP issue can cut off access to most official sites; the cause is the high concentration of .kp domain servers and routing, relying on limited external connections, where any upstream interruption or internal power issue amplifies into simultaneous access failures.
ABAB News · Cognitive Laws
Single line dependence equals batch unavailability
Concentrated hosting of national domains amplifies single point failures
From content control to routing fragility, is a shift in the constraints of information export