CONTINUOUS INTERNET TELEMETRY24H DRIFT3,593 material changesacross 3,116 domains · +195 vs yesterdayDNS DRIFT27 domains changed DNS providertop destination cloudflare.comEMAIL DRIFT6 domains switched email providertop destination sendgw.comCERT DRIFT8 domains switched issuing CA24h · +1 vs yesterdayNOW9,710 curated domains not answeringlast probe, steady24H DRIFT3,593 material changesacross 3,116 domains · +195 vs yesterdayDNS DRIFT27 domains changed DNS providertop destination cloudflare.comEMAIL DRIFT6 domains switched email providertop destination sendgw.comCERT DRIFT8 domains switched issuing CA24h · +1 vs yesterdayNOW9,710 curated domains not answeringlast probe, steady

booking.co.ke

Observed 2026-07-11T16:23:59.420413047+00:00 (1d ago). Every field below was attested with an Ed25519 signature at scan time.

Not responding
Runs onAmazon
push_legacy
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat booking.co.ke actually stands on - every host below is a signed observation
booking.co.ke
A / AAAA
76.223.81.77
Amazonserves the site
NS
ns-1288.awsdns-33.orgns-1959.awsdns-52.co.ukns-508.awsdns-63.comns-716.awsdns-25.net
awsdns-33.org + awsdns-52.co.uk + moreanswers its DNS

DNS Records

A 1

  • 76.223.81.77

TXT 2

  • v=spf1 -all
  • v=DMARC1; p=reject; rua=mailto:dmarc_rua@emaildefense.proofpoint.com,mailto:booking@dmarc.postmastery.eu; ruf=mailto:dmarc_ruf@emaildefense.proofpoint.com

NS 4

  • ns-1288.awsdns-33.org
  • ns-1959.awsdns-52.co.uk
  • ns-508.awsdns-63.com
  • ns-716.awsdns-25.net

SOA 1

  • ns-1288.awsdns-33.org awsdns-hostmaster.amazon.com

TLS Certificates (0)

None.

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for booking.co.ke. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for booking.co.ke <a href="https://domaindrift.io/t/booking.co.ke"> <img src="https://domaindrift.io/badge/booking.co.ke.svg" width="300" height="64" alt="DomainDrift signed observations for booking.co.ke"> </a>

Ed25519 Receipt

Receipt ID
9adcf825-2ea1-4dd0-b1ef-8bb8c2dfca5a
Output Hash
796dc267e9c89a4a3df8ef201e798e73e06e685c4965e80e59fd14b435194848
Signature
ed25519:debc9a8cbd1ed5246b9dfed34c17bf1d01032b40e4afb5d5a96ca301cbf89bed6cd76ec540558c8516bb902089f101bf576288140641ae934109a28f10628d0d
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser