CONTINUOUS INTERNET TELEMETRY24H DRIFT1,367 material changesacross 891 domains · last 24h · +560 vs yesterdayDNS DRIFT18 domains changed DNS providertop destination cloudflare.comEMAIL DRIFT2 domains switched email providertop destination hostmetro.comCERT DRIFT2 domains switched issuing CA24hNOW470 curated domains not reachable+48 vs yesterdaySITE ERRORS17,637 sites serving errorslast probe · 5xx / 404 / TLSBOT DEFENSEbot defense observed on 101,310 sites429 rate-limit / 403 bot-block, a posture signal

bookingholdings.com

Observed Jul 24, 2026, 17:54 UTC (1d ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation — watch it for 5-minute checks.

Up right now
Runs onCloudflare
Email byProofpoint
Secured byDigiCert
Registered withMarkMonitor Inc.
Also usesGoogle Search ConsoleAtlassianDocuSign
1 subdomain · push_legacy
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat bookingholdings.com actually stands on - every host below is a signed observation
bookingholdings.com
A / AAAA
141.193.213.10141.193.213.11
Cloudflareserves the site
NS
dns1.p09.nsone.netdns2.p09.nsone.netdns3.p09.nsone.netdns4.p09.nsone.net
nsone.netanswers its DNS
MX
mxa-001adf01.gslb.pphosted.commxb-001adf01.gslb.pphosted.com
Proofpointreceives its email
TLS
www.bookingholdings.com
DigiCert Incissued its certificate

DNS Records

A 2

  • 141.193.213.10
  • 141.193.213.11

MX 2

  • 10mxa-001adf01.gslb.pphosted.com
  • 10mxb-001adf01.gslb.pphosted.com

TXT 24

  • hsWjebk/uF192Yofllr8vkGg5ww7Wjiq2mxLq4lX0ls81tIgNYyyj3p8ekrFm2WgDXKYs5/CtrPC6Yq47SATUg==
  • v=spf1 include:_spf.google.com include:mail.zendesk.com a:b.spf.service-now.com a:c.spf.service-now.com a:d.spf.service-now.com include:everbridge.net ip4:66.159.248.25 ip4:66.159.239.250 ~all
  • google-site-verification=XlnH8Vvgec1FS7FjZQnhri044vhYeVAvQpMC7whj2o0
  • MS=ms21742344
  • workplace-domain-verification=3aq4nyyeUbWaJXUO2iTNNju3ehe18v
  • atlassian-domain-verification=Wx6HsTNGfCzO15kBSyKijXn7rzM5g4Mh6Fw07IFADOCob4Z+dKDAopr2DV0nXmbD
  • knowbe4-site-verification=f9a8fdc816d329dd9a408d59591b7367
  • docusign=7df73f5d-c143-4f80-8da6-322ad3a24c6e
  • docusign=f52aa925-d31d-48ab-a7cb-37973a9e348b
  • onetrust-domain-verification=0eff141b3cc144a3bc87b6851d734336

NS 4

  • dns1.p09.nsone.net
  • dns2.p09.nsone.net
  • dns3.p09.nsone.net
  • dns4.p09.nsone.net

SOA 1

  • dns1.p09.nsone.net hostmaster.nsone.net

TLS Certificates (3)

Common NameIssuerExpires
www.bookingholdings.com C=US, O=DigiCert Inc, 2.5.4.11=www.digicert.com, CN=GeoTrust TLS RSA CA G1 Fri, 26 Mar 2027 23:59:59 +0000
GeoTrust TLS RSA CA G1 C=US, O=DigiCert Inc, 2.5.4.11=www.digicert.com, CN=DigiCert Global Root G2 Tue, 02 Nov 2027 12:23:37 +0000
DigiCert Global Root G2 C=US, O=DigiCert Inc, 2.5.4.11=www.digicert.com, CN=DigiCert Global Root CA Sun, 09 Nov 2031 23:59:59 +0000

Subdomains (1)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for bookingholdings.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for bookingholdings.com <a href="https://domaindrift.io/t/bookingholdings.com"> <img src="https://domaindrift.io/badge/bookingholdings.com.svg" width="300" height="64" alt="DomainDrift signed observations for bookingholdings.com"> </a>

Ed25519 Receipt

Receipt ID
rcpt_e41edded8d882a7d
Output Hash
184b9a89ade6bf53b10696285816911121e0764289e53bf1225b1f9aa3b529f1
Signature
ed25519:ee6bff6366c49c328c9f34a322ea4ae1539b7b916d2dad747a2c885a2b1503e3ad118b012d11592be856faa66745801ba2df7aa6c9a886e0bee83c76c01da408
Public Key
ed25519:4859bb613d650e12dd7478cc307c73a8712fabc115a9dc59f65534ed3c09a8f9
Parent
(genesis)
Plane
fast
Verify this in your browser