CONTINUOUS INTERNET TELEMETRY24H DRIFT3,860 material changesacross 3,413 domains · last 24h · -6,555 vs yesterdayDNS DRIFT210 domains changed DNS providertop destination cloudflare.com · -449 vs yesterdayEMAIL DRIFT36 domains switched email providertop destination google.com · -131 vs yesterdayCERT DRIFT47 domains switched issuing CA24h · -172 vs yesterdayNOW498 curated domains not reachable-205 vs yesterdaySITE ERRORS17,249 sites serving errorslast probe · 5xx / 404 / TLSBOT DEFENSEbot defense observed on 98,083 sites429 rate-limit / 403 bot-block, a posture signal

twitter.co.ke

Observed Jul 24, 2026, 02:56 UTC (14h ago). Every field below was attested with an Ed25519 signature at scan time. Catalog observation, re-checked on rotation — watch it for 5-minute checks.

Not responding
Runs onSawaSawa
push_legacy
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat twitter.co.ke actually stands on - every host below is a signed observation
twitter.co.ke
A / AAAA
197.234.237.185
SawaSawaserves the site
NS
ns3.sawasawa.comns1.sawasawa.comns4.sawasawa.comatlas.sawasawa.com+1 more
sawasawa.comanswers its DNS
MX
c.mx.sawasawa.coma.mx.sawasawa.comb.mx.sawasawa.comd.mx.sawasawa.com
sawasawa.comreceives its email

DNS Records

A 1

  • 197.234.237.185

MX 4

  • 20c.mx.sawasawa.com
  • 10a.mx.sawasawa.com
  • 10b.mx.sawasawa.com
  • 30d.mx.sawasawa.com

TXT 2

  • v=spf1 a:mail.twitter.co.ke ip4:197.234.237.185 a:atlas.sawasawa.com -all
  • v=DMARC1; p=none

NS 5

  • ns3.sawasawa.com
  • ns1.sawasawa.com
  • ns4.sawasawa.com
  • atlas.sawasawa.com
  • ns2.sawasawa.com

SOA 1

  • ns3.sawasawa.com hostmaster.sawasawa.com

TLS Certificates (0)

None.

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for twitter.co.ke. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for twitter.co.ke <a href="https://domaindrift.io/t/twitter.co.ke"> <img src="https://domaindrift.io/badge/twitter.co.ke.svg" width="300" height="64" alt="DomainDrift signed observations for twitter.co.ke"> </a>

Ed25519 Receipt

Receipt ID
rcpt_9413432927132569
Output Hash
f9f1538617da86010f1ae6435cf42d45d86faf445e6428174e2bd83548331bc9
Signature
ed25519:47f26ec65522a0122af0a15194f730a53e750d8aee364de3faed0d879c9cbe34f58403fb8e368aa017bb687b0f29b4f35bbe68f1720ce295be3751a953170e0c
Public Key
ed25519:4859bb613d650e12dd7478cc307c73a8712fabc115a9dc59f65534ed3c09a8f9
Parent
(genesis)
Plane
fast
Verify this in your browser