amref.ac.ke

Observed Jul 24, 2026, 15:50 UTC (13h ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation — watch it for 5-minute checks.

Verify this receipt yourself + Watch this domain

Up right now

Secured byLet's Encrypt

Also usesGoogle Search Console

2 subdomains · tranco

Every line above is a signed observation. Check the math at the bottom of the page.

INFRASTRUCTURE MAPwhat amref.ac.ke actually stands on - every host below is a signed observation

amref.ac.ke

A / AAAA

173.231.207.30

unattributedserves the site

david.ns.cloudflare.comlinda.ns.cloudflare.com

cloudflare.comanswers its DNS

amref-mx1.titanhq.comamref-mx2.titanhq.cominbound-ea.msgafrica.cominbound-na.msgafrica.com

titanhq.com + msgafrica.comreceives its email

TLS

mail.amref.ac.ke

Let's Encryptissued its certificate

DNS Records

A 1

173.231.207.30

MX 4

0amref-mx1.titanhq.com
0amref-mx2.titanhq.com
20inbound-ea.msgafrica.com
20inbound-na.msgafrica.com

TXT 7

MS=ms50311558
MS=ms63435222
d365mktkey=GHDtUmOdfJghk9NJWHHayHKiKx1xb3qz6MGI1FmExNIx
d365mktkey=KxK4Epe1ncbVawYmNyt9adcWvYmoDaiiuXCxjQz21ugx
google-site-verification=pbzB6Ol9zjqagddX2MOYa_H4ShHX-XHbVA8FS6rRYu8
v=spf1 ip4:197.136.17.101 include:spf.protection.outlook.com include:spf.emailsignatures365.com include:spf.pepea.co ip4:3.68.153.135 ip4:3.67.239.12 -all
v=DMARC1;p=reject;pct=100;rua=mailto:dmarc_agg@vali.email;ruf=mailto:it.dmarc@amref.org

NS 2

david.ns.cloudflare.com
linda.ns.cloudflare.com

SOA 1

david.ns.cloudflare.com dns.cloudflare.com

TLS Certificates (3)

Common Name	Issuer	Expires
`mail.amref.ac.ke`	C=US, O=Let's Encrypt, CN=YR2	Mon, 31 Aug 2026 14:10:00 +0000
`YR2`	C=US, O=ISRG, CN=Root YR	Sat, 02 Sep 2028 23:59:59 +0000
`Root YR`	C=US, O=Internet Security Research Group, CN=ISRG Root X1	Thu, 02 Sep 2032 23:59:59 +0000

Subdomains (2)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for amref.ac.ke. It updates itself. It attests a signed observation - not that the site is safe.

<a href="https://domaindrift.io/t/amref.ac.ke">
  <img src="https://domaindrift.io/badge/amref.ac.ke.svg"
       width="300" height="64" alt="DomainDrift signed observations for amref.ac.ke">
</a>

Ed25519 Receipt

Receipt ID: rcpt_9710cab836867da6
Output Hash: 031e5ba0274110bae0cf3c0455b0137070ae50d9f073797ab5f7cb6c5e762088
Signature: ed25519:7053a70eb38c637d062da4672b028d5690991ca29882cbe1c12571ca48fa2855b8937667316037cae0f931d84f6a80652a75461a72befd5d483ad6eaa05d3f03
Public Key: ed25519:4859bb613d650e12dd7478cc307c73a8712fabc115a9dc59f65534ed3c09a8f9
Parent: (genesis)
Plane: fast

Verify this in your browser

Permalink: https://domaindrift.io/t/amref.ac.ke