CONTINUOUS INTERNET TELEMETRY24H DRIFT3,254 material changesacross 2,894 domains · -144 vs yesterdayDNS DRIFT21 domains changed DNS providertop destination cloudflare.com · -6 vs yesterdayEMAIL DRIFT4 domains switched email providertop destination reyrey.com · -2 vs yesterdayCERT DRIFT7 domains switched issuing CA24hNOW3,302 curated domains not answering-6,416 vs yesterdayERRORS10,967 responded with an errorlast probe · 5xx / 404 / 429 / 40324H DRIFT3,254 material changesacross 2,894 domains · -144 vs yesterdayDNS DRIFT21 domains changed DNS providertop destination cloudflare.com · -6 vs yesterdayEMAIL DRIFT4 domains switched email providertop destination reyrey.com · -2 vs yesterdayCERT DRIFT7 domains switched issuing CA24hNOW3,302 curated domains not answering-6,416 vs yesterdayERRORS10,967 responded with an errorlast probe · 5xx / 404 / 429 / 403

wyndham.com

Observed 2026-07-13T00:01:34.658138874+00:00 (9h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onAmazon
Email byProofpoint
Secured byAmazon
Registered withNetwork Solutions, LLC
Also usesGoogle Search ConsoleFacebook/MetaAtlassian
hospitality
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat wyndham.com actually stands on - every host below is a signed observation
wyndham.com
A / AAAA
167.124.104.41
Amazonserves the site
NS
ns3.level3.netauth20.ns.wcom.comns4.level3.netauth40.ns.uu.net
level3.net + wcom.com + moreanswers its DNS
MX
mxa-0030af02.gslb.pphosted.commxb-0030af02.gslb.pphosted.com
Proofpointreceives its email
TLS
www.wyndhamhotelgroup.com
Amazonissued its certificate

DNS Records

A 1

  • 167.124.104.41

MX 2

  • 10mxa-0030af02.gslb.pphosted.com
  • 10mxb-0030af02.gslb.pphosted.com

TXT 23

  • t=y o=~
  • v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDFS2AGClesk63SE8wNRTIaU/ElHwnCuluzoIceqWyy6JzpvYJmJQ5AQfHP+5PjNmf0b7CqMF6B8GV39x2lMQ9ufDGh8UnNgAEv7NLMiR6EW34ro8HqorsUG1V1qtfk9XLAR+NyNV719TW1meja2Bi7kaBxjiFPGBXu14vASBx7uQIDAQAB
  • SFMC-bauvadPzXgdmS4rn6J6MHtqZVpSB5xNq13FU3nSB
  • SFMC-NVAxDk3AN8LLQo_StP9ipzy9IP3J0Qj68FareX94
  • Adobe-sign-verification=6fc3a1c951234ee54204c4eb0c9a64f
  • SFMC-qIunP5F0-6nb76l9dxl0m8dhzIN0JQm6cMJ-BuYL
  • spf.data2gold.com
  • adobe-idp-site-verification=d0294530fc963bb25626944e81308535eb786a62e81255378f80b3b8034a90c8
  • google-site-verification=pVpHUWGpvJsOs5IVcIj53rJdEhSkqUXK4JoKLyMZaD4
  • _r21w6m0plo871bh6j18mq9scrqpj34d

NS 4

  • ns3.level3.net
  • auth20.ns.wcom.com
  • ns4.level3.net
  • auth40.ns.uu.net

SOA 1

  • ns9.customer.level3.net.wyndham.com postmaster.ns3.level3.net

TLS Certificates (3)

Common NameIssuerExpires
www.wyndhamhotelgroup.com C=US, O=Amazon, CN=Amazon RSA 2048 M04 Thu, 03 Dec 2026 23:59:59 +0000
Amazon RSA 2048 M04 C=US, O=Amazon, CN=Amazon Root CA 1 Fri, 23 Aug 2030 22:26:35 +0000
Amazon Root CA 1 C=US, ST=Arizona, L=Scottsdale, O=Starfield Technologies, Inc., CN=Starfield Services Root Certificate Authority - G2 Thu, 31 Dec 2037 01:00:00 +0000

Subdomains (0)

None observed.

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for wyndham.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for wyndham.com <a href="https://domaindrift.io/t/wyndham.com"> <img src="https://domaindrift.io/badge/wyndham.com.svg" width="300" height="64" alt="DomainDrift signed observations for wyndham.com"> </a>

Ed25519 Receipt

Receipt ID
d361ac14-05ba-4c34-8caa-c9d9aa0adf59
Output Hash
d6e72a973005b6a5f601de1284ce987a621c58656d7718e1254c0b4413c36411
Signature
ed25519:475215e50aa0c30ed782c2579594cf05f604693364d31eff044d2cd4972aa511708a0daf19520a9dca2533f6a104c0ca821e784400b637efcd4c8203e25b7c0c
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser