lch.com

Observed Aug 12, 2026, 03:43 UTC (5d ago). Every field below was attested with an Ed25519 signature at scan time.

This reading of lch.com was taken 5d ago

lch.com is on the survey sweep, which works its way across the whole catalog rather than returning to one name on a schedule. Putting lch.com under watch moves it to the fast lane, where DomainDrift re-checks it about every 5 minutes and signs each reading, so a change becomes a dated event within minutes instead of waiting for the sweep to come round.

Watch lch.com Watching a domain needs a DRM3 account. The reading above stays free and public either way.

Verify this receipt yourself + Watch this domain

Up right now

Email byMimecast

Secured byGoogle Trust Services

Also usesMicrosoft 365AdobeDocuSignGoogle Search ConsoleSalesforce Pardot

tranco

Every line above is a signed observation. Check the math at the bottom of the page.

DRIFT

Steady. No change on record for lch.com in the last day; this reading matches the one before it. The steady record is signed like every other reading. Watch it to catch the next move the moment it lands.

INFRASTRUCTURE MAPwhat lch.com actually stands on - every host below is a signed observation

lch.com

A / AAAA

172.64.149.173104.18.38.83

unattributedserves the site

kayleigh.ns.cloudflare.compiers.ns.cloudflare.com

cloudflare.comanswers its DNS

eu-smtp-inbound-1.mimecast.comeu-smtp-inbound-2.mimecast.com

Mimecastreceives its email

TLS

lch.com

Google Trust Servicesissued its certificate

DNS Records

A 2

172.64.149.173
104.18.38.83

MX 2

10eu-smtp-inbound-1.mimecast.com
20eu-smtp-inbound-2.mimecast.com

TXT 16

3ZHhXXNGGKO2GqVVk8r2L3EymXAC11kGc1N8ZrjheuahOAw9y1Jhn23IxR8Yq7Oj+EMp8Huhe8EKIoNO1CLYtw==
MS=ms59890653
T0H0E12995
adobe-idp-site-verification=3bf3c8984ed423d40f2a29872e239c789c12c160bbbcd43e3f48bf2bd138c754
docusign=5c00381f-bb50-47b7-a47a-3e2aace9f7ee
google-site-verification=1uvdBlbGwhSvPMJKr6AtNdLdzATSWmavRr4O4w5y2eM
pardot55482=f20004e2d49752dd006bb844b1afc67ad5f299fc0e1b1e8947a4090d0add6b61
pardot6522=38fabf9a2af87002f16e0e70a3ba16e8bf117cf8da80bbf53cb9794b80a323f6
pardot6522=3966c8b6323c589e58ed56e86c12efdbab10a9d8aad63a7b14e9a5a26053d49c
pardot6522=baaf07fd32712ec38c877ebb7ddd70d1306cd7581251447aa3d8214a7345fe3a

NS 2

kayleigh.ns.cloudflare.com
piers.ns.cloudflare.com

SOA 1

kayleigh.ns.cloudflare.com dns.cloudflare.com

MCP_RECORDS 1

v=spf1 -all

DMARC_RECORDS 1

v=DMARC1; p=reject; rua=mailto:rua@lseg.com; ruf=mailto:ruf@lseg.com; fo=1

BIMI_RECORDS 1

v=spf1 -all

MTA_STS_RECORDS 1

v=spf1 -all

TLS Certificates (3)

Common Name	Issuer	Expires
`lch.com`	C=US, O=Google Trust Services, CN=WE1	Tue, 03 Nov 2026 01:52:25 +0000
`WE1`	C=US, O=Google Trust Services LLC, CN=GTS Root R4	Tue, 20 Feb 2029 14:00:00 +0000
`GTS Root R4`	C=BE, O=GlobalSign nv-sa, 2.5.4.11=Root CA, CN=GlobalSign Root CA	Fri, 28 Jan 2028 00:00:42 +0000

Subdomains (0)

None observed.

WILDCARD DNSobserved 2026-08-17 03:45 UTC

DomainDrift asked this domain for one hostname that nobody ever registered, and it answered. A domain that answers invented hostnames is running wildcard DNS. It is common and usually deliberate. A SaaS platform gives every customer a subdomain this way. How the check works

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; the only network request the check makes is for the published public keys.

Verify this receipt

Ed25519 Receipt

Receipt ID: rcpt_eb2ddc55c40e02ab
Output Hash: 2a28269af5bab5d1b30400346547110474148684a6ad0a87b147474d9f802e25
Signature: ed25519:e126bed41ac053ba0c8fabd6ef5b2d397865fc55419691f72a97f86527b6834a7c1c901d71ebac770319b460e3a630f4657315d0bd96086a541fca56938c7a04
Public Key: ed25519:4859bb613d650e12dd7478cc307c73a8712fabc115a9dc59f65534ed3c09a8f9
Parent: (genesis)
Plane: fast

Verify this in your browser

Permalink: https://domaindrift.io/t/lch.com