Domain
co.ke
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of co.ke
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
Hosting IPs
—
A/AAAA targets
Subdomains
—
CT + scan + body
Record Types
—
seen in DNS
Observed Certs
—
in our scans
DNS Records
A
—
AAAA
—
MX
—
NS
—
TXT
—
CNAME
—
CAA
—
WHOIS / Registration
Registration data planned
Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.
Subdomains
Subdomain enumeration pending
Every subdomain ever issued a TLS cert under this apex — extracted from Certificate Transparency logs, our own scan observations and body references.
Tech Stack
Tech detection pending
Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.
TLS Certificates
Subject: *.kiwasco.co.ke
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.kiwasco.co.ke, kiwasco.co.ke
Subject: sales.microtechcloud.co.ke
Issuer: YR1
SANs: appraisal.javahouseafrica.com, crm.shiftechafrica.com, db.shiftechafrica.com, demo.kuzabiz.com, gateway.shiftechafrica.com, hub.shiftechafrica.com, kuzabiz.com, manage.shiftechafrica.com, sales.microtechcloud.co.ke, sales.shiftechafrica.com, school-timetable.shiftechafrica.com, school.shiftechafrica.com, shiftechafrica.com, tasks.microtechcloud.co.ke, tasks.shiftechafrica.com, telematics.shiftechafrica.com, www.kuzabiz.com, www.shiftechafrica.com
Subject: invosync.co.ke
Issuer: YE2
SANs: *.invosync.co.ke, invosync.co.ke
Subject: lecadaventures.co.ke
Issuer: YE2
SANs: lecadaventures.co.ke, www.lecadaventures.co.ke
Subject: cpanel.jerseyworldstore.co.ke
Issuer: cpanel.jerseyworldstore.co.ke
SANs: cpanel.jerseyworldstore.co.ke
Subject: *.adtel.co.ke
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.adtel.co.ke, adtel.co.ke
Subject: kokwo.co.ke
Issuer: YR1
SANs: kokwo.co.ke, www.kokwo.co.ke
Subject: autoconfig.nc-ph-3245.bluewebsafrica.co.ke
Issuer: YR1
SANs: autoconfig.nc-ph-3245.bluewebsafrica.co.ke, autoconfig.server1.bluewebsafrica.co.ke, autodiscover.nc-ph-3245.bluewebsafrica.co.ke, autodiscover.server1.bluewebsafrica.co.ke, cpanel.nc-ph-3245.bluewebsafrica.co.ke, cpanel.server1.bluewebsafrica.co.ke, cpcalendars.nc-ph-3245.bluewebsafrica.co.ke, cpcalendars.server1.bluewebsafrica.co.ke, cpcontacts.nc-ph-3245.bluewebsafrica.co.ke, cpcontacts.server1.bluewebsafrica.co.ke, ipv6.nc-ph-3245.bluewebsafrica.co.ke, ipv6.server1.bluewebsafrica.co.ke, mail.nc-ph-3245.bluewebsafrica.co.ke, mail.server1.bluewebsafrica.co.ke, nc-ph-3245.bluewebsafrica.co.ke, server1.bluewebsafrica.co.ke, webdisk.nc-ph-3245.bluewebsafrica.co.ke, webdisk.server1.bluewebsafrica.co.ke, webmail.nc-ph-3245.bluewebsafrica.co.ke, webmail.server1.bluewebsafrica.co.ke, whm.nc-ph-3245.bluewebsafrica.co.ke, whm.server1.bluewebsafrica.co.ke, www.nc-ph-3245.bluewebsafrica.co.ke, www.server1.bluewebsafrica.co.ke
Subject: srv1.epzstaff.co.ke
Issuer: YR2
SANs: srv1.epzstaff.co.ke
Subject: clareorganizationskenya.kuzza.co.ke
Issuer: YE2
SANs: clareorganizationskenya.kuzza.co.ke
Subject: openproject.mzizi.co.ke
Issuer: YE2
SANs: openproject.mzizi.co.ke
Subject: *.kengen.co.ke
Issuer: GeoTrust TLS RSA CA G1
SANs: *.kengen.co.ke, mail.kengen.co.ke
Subject: adamsarcade.co.ke
Issuer: YR1
SANs: adamsarcade.co.ke
Subject: *.posta.co.ke
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.posta.co.ke, posta.co.ke
Subject: nga.ceenoteservices.co.ke
Issuer: E6
SANs: adminnga.ceenoteservices.co.ke, nga.ceenoteservices.co.ke, www.adminnga.ceenoteservices.co.ke, www.nga.ceenoteservices.co.ke
Subject: afyarad.africaafya.co.ke
Issuer: YR1
SANs: afyarad.africaafya.co.ke, auth.africaafya.co.ke
Subject: www.kamundu.sasini.co.ke
Issuer: YR2
SANs: kamundu.sasini.co.ke, www.kamundu.sasini.co.ke
Subject: n8n.agilecloud.co.ke
Issuer: YE2
SANs: n8n.agilecloud.co.ke
Subject: paradox.co.ke
Issuer: YR2
SANs: paradox.co.ke
Subject: api.quickbox.co.ke
Issuer: YE1
SANs: api.quickbox.co.ke
Subject: mindfest.co.ke
Issuer: E7
SANs: mindfest.co.ke
Subject: nawalinks.htkl.co.ke
Issuer: YE1
SANs: nawalinks.htkl.co.ke
Subject: edenn.co.ke
Issuer: R12
SANs: edenn.co.ke, www.edenn.co.ke
Subject: gis.mombasawater.co.ke
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: gis.mombasawater.co.ke, www.gis.mombasawater.co.ke
Subject: aquametrics.bingwagroup.co.ke
Issuer: YE2
SANs: aquametrics.bingwagroup.co.ke
Subject: uat.odda.co.ke
Issuer: YE2
SANs: uat.odda.co.ke
Subject: cfaokenya.co.ke
Issuer: cfaokenya.co.ke
SANs: cfaokenya.co.ke, cpanel.cfaokenya.co.ke, cpcalendars.cfaokenya.co.ke, cpcontacts.cfaokenya.co.ke, mail.cfaokenya.co.ke, webdisk.cfaokenya.co.ke, webmail.cfaokenya.co.ke, www.cfaokenya.co.ke
Subject: airbnbs.grandtek.co.ke
Issuer: YE2
SANs: airbnbs.grandtek.co.ke
Subject: magazine.urbangreen.co.ke
Issuer: YE1
SANs: magazine.urbangreen.co.ke
Subject: bodahela.co.ke
Issuer: YR2
SANs: bodahela.co.ke, www.bodahela.co.ke
IPs Citing This Domain
No citing IPs found yet
As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.
Origin / IP-Leak
USP
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
| Origin IP | Origin ASN | CDN ASN | Confidence | Reasoning |
|---|---|---|---|---|
| 176.58.124.127 | AS63949 | AS13335 | 95% | cert 897c5bf0… served by 176.58.124.127 (AS63949) carries SAN visionplus.co.ke which currently resolves through Cloudflare (AS13335) at 188.114.96.0, 188.114.97.0, 2a06:98c1:3120::3, 2a06:98c1:3121::3 |
| 34.63.55.199 | AS396982 | AS13335 | 95% | cert 9996ad40… served by 34.63.55.199 (AS396982) carries SAN mail.zurubnb.co.ke which currently resolves through Cloudflare (AS13335) at 188.114.97.3, 188.114.96.3, 2606:4700:3037::ac43:a9b7, 2606:4700:3031::6815:273f |
| 172.104.246.197 | AS63949 | AS13335 | 95% | cert 8ace8d50… served by 172.104.246.197 (AS63949) carries SAN petstore.co.ke which currently resolves through Cloudflare (AS13335) at 172.67.185.167, 104.21.19.78, 2606:4700:3037::ac43:b9a7, 2606:4700:3036::6815:134e |
| 164.90.224.139 | AS14061 | AS13335 | 95% | cert e4e37648… served by 164.90.224.139 (AS14061) carries SAN wizglobal.co.ke which currently resolves through Cloudflare (AS13335) at 104.26.13.192, 104.26.12.192, 172.67.72.186, 2606:4700:20::ac43:48ba |
| 196.43.211.145 | AS37319 | AS19551 | 95% | cert 5416b176… served by 196.43.211.145 (AS37319) carries SAN gtbank.co.ke which currently resolves through Imperva (AS19551) at 45.60.52.99, 45.60.46.99 |
| 68.183.252.82 | AS14061 | AS13335 | 95% | cert c9607176… served by 68.183.252.82 (AS14061) carries SAN catalystteambuilding.co.ke which currently resolves through Cloudflare (AS13335) at 172.66.0.96, 2a06:98c1:58::60, 2606:4700:7::60, 162.159.140.98 |
| 102.68.87.34 | AS327813 | AS54113 | 95% | cert dd7ed43c… served by 102.68.87.34 (AS327813) carries SAN attendance.lmn.co.ke which currently resolves through Fastly (AS54113) at 2620:0:890::100, 199.36.158.100 |
| 209.38.160.63 | AS14061 | AS13335 | 95% | cert 7cbd2ef4… served by 209.38.160.63 (AS14061) carries SAN popotepayments.co.ke which currently resolves through Cloudflare (AS13335) at 172.66.0.96, 2a06:98c1:58::60, 2606:4700:7::60, 162.159.140.98 |
| 196.201.212.64 | AS33771 | AS19551 | 95% | cert 575e0570… served by 196.201.212.64 (AS33771) carries SAN fafanuka.safaricom.co.ke which currently resolves through Imperva (AS19551) at 45.223.20.17 |
| 207.180.235.213 | AS51167 | AS13335 | 95% | cert b395072d… served by 207.180.235.213 (AS51167) carries SAN carbon.mobityres.co.ke which currently resolves through Cloudflare (AS13335) at 172.67.175.88, 104.21.91.159, 2606:4700:3035::ac43:af58, 2606:4700:3030::6815:5b9f |
| 172.105.121.152 | AS63949 | AS13335 | 95% | cert fa278973… served by 172.105.121.152 (AS63949) carries SAN api.tafaanalytics.co.ke which currently resolves through Cloudflare (AS13335) at 104.21.95.93, 172.67.144.20, 2606:4700:3037::ac43:9014, 2606:4700:3035::6815:5f5d |
| 165.227.155.170 | AS14061 | AS13335 | 95% | cert e4e37648… served by 165.227.155.170 (AS14061) carries SAN wizglobal.co.ke which currently resolves through Cloudflare (AS13335) at 104.26.13.192, 104.26.12.192, 172.67.72.186, 2606:4700:20::ac43:48ba |
| 139.84.245.84 | AS20473 | AS13335 | 95% | cert f29bb8d3… served by 139.84.245.84 (AS20473) carries SAN admin.tshanic.co.ke which currently resolves through Cloudflare (AS13335) at 104.21.1.152, 172.67.129.114, 2606:4700:3037::6815:198, 2606:4700:3033::ac43:8172 |
| 158.160.178.114 | AS200350 | AS16509 | 95% | cert 86b374bb… served by 158.160.178.114 (AS200350) carries SAN aviasales.co.ke which currently resolves through Amazon (AS16509) at 13.32.121.31, 13.32.121.119, 13.32.121.12, 13.32.121.62 |
| 138.68.171.125 | AS14061 | AS13335 | 95% | cert 1a2e3fba… served by 138.68.171.125 (AS14061) carries SAN m-pesaplus.co.ke which currently resolves through Cloudflare (AS13335) at 172.66.0.96, 2a06:98c1:58::60, 2606:4700:7::60, 162.159.140.98 |
| 188.68.54.251 | AS197540 | AS13335 | 95% | cert 03bcdad0… served by 188.68.54.251 (AS197540) carries SAN hapapoint.co.ke which currently resolves through Cloudflare (AS13335) at 172.67.149.187, 104.21.29.197, 2606:4700:3033::6815:1dc5, 2606:4700:3033::ac43:95bb |
| 144.126.230.116 | AS14061 | AS13335 | 95% | cert 7cbd2ef4… served by 144.126.230.116 (AS14061) carries SAN popotepayments.co.ke which currently resolves through Cloudflare (AS13335) at 172.66.0.96, 2a06:98c1:58::60, 2606:4700:7::60, 162.159.140.98 |
| 62.24.104.67 | AS12455 | AS8075 | 95% | cert af07ba48… served by 62.24.104.67 (AS12455) carries SAN autodiscover.telkom.co.ke which currently resolves through Microsoft (AS8075) at 40.98.16.23, 52.98.151.88, 40.104.62.184, 40.104.62.152 |
| 192.210.188.36 | AS36352 | AS13335 | 95% | cert 6d113742… served by 192.210.188.36 (AS36352) carries SAN dpc.purenetsolutions.co.ke which currently resolves through Cloudflare (AS13335) at 104.21.73.200, 172.67.165.207, 2606:4700:3034::6815:49c8, 2606:4700:3034::ac43:a5cf |
| 68.183.221.128 | AS14061 | AS13335 | 95% | cert 8f193c30… served by 68.183.221.128 (AS14061) carries SAN amazons.co.ke which currently resolves through Cloudflare (AS13335) at 104.21.61.70, 172.67.207.53, 2606:4700:3035::ac43:cf35, 2606:4700:3030::6815:3d46 |
| 194.163.162.249 | AS51167 | AS13335 | 95% | cert f48490c3… served by 194.163.162.249 (AS51167) carries SAN aphiaapp.co.ke which currently resolves through Cloudflare (AS13335) at 188.114.96.0, 2a06:98c1:3121::, 2a06:98c1:3120::, 188.114.97.0 |
| 185.113.249.153 | AS16276 | AS13335 | 95% | cert 0148172f… served by 185.113.249.153 (AS16276) carries SAN thibitisha.co.ke which currently resolves through Cloudflare (AS13335) at 188.114.96.0, 2a06:98c1:3121::, 2a06:98c1:3120::, 188.114.97.0 |
| 45.150.188.226 | AS329272 | AS13335 | 95% | cert 37a142f0… served by 45.150.188.226 (AS329272) carries SAN admin.ticketmojo.co.ke which currently resolves through Cloudflare (AS13335) at 172.67.157.143, 104.21.40.227, 2606:4700:3037::ac43:9d8f, 2606:4700:3034::6815:28e3 |
| 178.18.251.29 | AS51167 | AS13335 | 95% | cert e63c9a08… served by 178.18.251.29 (AS51167) carries SAN admin.novastack.co.ke which currently resolves through Cloudflare (AS13335) at 188.114.97.3, 188.114.96.3, 2606:4700:3031::6815:213e, 2606:4700:3036::ac43:9f44 |
| 217.76.63.226 | AS51167 | AS13335 | 95% | cert 9ad94cdb… served by 217.76.63.226 (AS51167) carries SAN cpanel.southfitness.co.ke which currently resolves through Cloudflare (AS13335) at 104.21.69.60, 172.67.205.205, 2606:4700:3034::6815:453c, 2606:4700:3036::ac43:cdcd |
Threat Intelligence
Domain threat-intel pending
Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.
History
Domain timeline pending
Passive-DNS history accumulates as our forward-DNS crawler observes A/AAAA/MX/NS/TXT records over time.