shell:$ nslookup -timeout=2 -retry=1 'mpa.ekyc.web.oat.m-pesa.com'
Server:		1.1.1.1
Address:	1.1.1.1#53

Non-authoritative answer:
mpa.ekyc.web.oat.m-pesa.com	canonical name = d2dbetdv101rp7.cloudfront.net.
Name:	d2dbetdv101rp7.cloudfront.net
Address: 54.192.55.3
Name:	d2dbetdv101rp7.cloudfront.net
Address: 54.192.55.56
Name:	d2dbetdv101rp7.cloudfront.net
Address: 54.192.55.121
Name:	d2dbetdv101rp7.cloudfront.net
Address: 54.192.55.95