CONTINUOUS INTERNET TELEMETRY24H DRIFT1,923 material changesacross 1,742 domains · -155 vs yesterdayDNS DRIFT17 domains changed DNS providertop destination alidns.com · +2 vs yesterdayEMAIL DRIFT8 domains switched email providertop destination google.comCERT DRIFT46 domains switched issuing CA24hNOW2,077 curated domains not answering+951 vs yesterdayERRORS14,600 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED38,289 throttled or blocked our scanner429 rate-limit / 403 bot-block24H DRIFT1,923 material changesacross 1,742 domains · -155 vs yesterdayDNS DRIFT17 domains changed DNS providertop destination alidns.com · +2 vs yesterdayEMAIL DRIFT8 domains switched email providertop destination google.comCERT DRIFT46 domains switched issuing CA24hNOW2,077 curated domains not answering+951 vs yesterdayERRORS14,600 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED38,289 throttled or blocked our scanner429 rate-limit / 403 bot-block

lw.com

Observed Jul 18, 2026, 12:07 UTC (23h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onSWITCH
Secured byDigiCert
Registered withSafeNames Ltd.
Also usesAtlassianDocuSignDocker
7 subdomains · legal_expanded
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat lw.com actually stands on - every host below is a signed observation
lw.com
A / AAAA
136.179.7.156
SWITCHserves the site
NS
dmtu.mt.ns.els-gms.att.netdbru.br.ns.els-gms.att.netdana.lw.com
att.net + lw.comanswers its DNS
MX
mx3.lw.commx2.lw.commx4.lw.commx1.lw.com
lw.comreceives its email
TLS
LW.COM
DigiCert Incissued its certificate

DNS Records

A 1

  • 136.179.7.156

MX 4

  • 5mx3.lw.com
  • 5mx2.lw.com
  • 5mx4.lw.com
  • 5mx1.lw.com

TXT 26

  • msfpkey=370rdrkyehmdy9fsclcf0zew0
  • launchdarkly-domain-verification=6a7afc4a-e6ce-4c04-bceb-46e1a710bcda
  • atlassian-domain-verification=xazBn2nTf9eCYVaKcdD4Ao/6HHhw7P3ncButBSoUEVAFEq/GaIFu7plw6hhY5eGo
  • openai-domain-verification=dv-aAfsjsWBp6QRRhF3lP8pULOr
  • v=spf1 mx a ip4:136.179.7.175 ip4:136.179.7.176 -all
  • docusign=536a9640-6555-4bd2-9656-27bcb30b823f
  • airtable-verification=bccf8e2dd7227bce21b812b26a48ad33
  • monday-com-verification=GzuS8haskwenfzOGp98UGxXuVgaG_u8PSkwc-FGe7J8
  • _bk6x8uosfxvxi8607k72ord6ttsdxa1
  • jetbrains-domain-verification=5y6w3c8qsaxd6wwh2r349fwtz

NS 3

  • dmtu.mt.ns.els-gms.att.net
  • dbru.br.ns.els-gms.att.net
  • dana.lw.com

SOA 1

  • dana.lw.com postmaster.lw.com

SRV 4

  • lvdvcsevid.lw.com:5060 p10
  • Mndvcsevid.lw.com:5060 p10
  • Mndvcsevid.lw.com:5061 p10
  • lvdvcsevid.lw.com:5061 p10

TLS Certificates (2)

Common NameIssuerExpires
LW.COM C=US, O=DigiCert Inc, CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1 Fri, 20 Nov 2026 23:59:59 +0000
DigiCert Global G2 TLS RSA SHA256 2020 CA1 C=US, O=DigiCert Inc, 2.5.4.11=www.digicert.com, CN=DigiCert Global Root G2 Sat, 29 Mar 2031 23:59:59 +0000

Subdomains (7)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for lw.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for lw.com <a href="https://domaindrift.io/t/lw.com"> <img src="https://domaindrift.io/badge/lw.com.svg" width="300" height="64" alt="DomainDrift signed observations for lw.com"> </a>

Ed25519 Receipt

Receipt ID
d5f82202-4540-4a24-ac09-f7122be10e31
Output Hash
fcd1d1effc4b7c702c0a7ff342333114dcb73eec1036c7cead3061991de5f22b
Signature
ed25519:bc257caf23090bb19dc3dd083e456901e92d02e68273622ab82d4c1ac5a3d56046638019288fd9379725171113e54b71f67bbfee568d17e7c7aa2c09e1b8330a
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser