lyondell.com

Observed 2026-07-12T17:22:09.003Z (6h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now

Runs onCloudflare

Email byMicrosoft 365

Also usesDocuSignGoogle Search Console

2 subdomains · fortune_500

Every line above is a signed observation. Check the math at the bottom of the page.

INFRASTRUCTURE MAPwhat lyondell.com actually stands on - every host below is a signed observation

lyondell.com

A / AAAA

217.114.94.2

Cloudflareserves the site

ns3-09.azure-dns.orgns2-09.azure-dns.netns1-09.azure-dns.comns4-09.azure-dns.info

azure-dns.org + azure-dns.net + moreanswers its DNS

dti.lyondell.com.inbound10.mxlogic.netlyondellbasell-com.mail.protection.outlook.comdit.lyondell.com.inbound10.mxlogicmx.net

Microsoft 365receives its email

HTTPS probe

redirect Redirecting (3xx) 301 → https://www.lyondell.com/

HTTP status301

Servercloudflare

TLS protocolHTTP/3

TLS issuernot observed

Behind Cloudflareyes

Response time56 ms

DNS resolutionNOERROR

Redirect chain

https://www.lyondell.com/

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 1

217.114.94.2

MX 3

10dti.lyondell.com.inbound10.mxlogic.net
10lyondellbasell-com.mail.protection.outlook.com
10dit.lyondell.com.inbound10.mxlogicmx.net

TXT 7

docusign=2a3626e4-61eb-4799-bd77-ed31cf0d9c67
google-site-verification=0kD2hf7QVcS7rbJ7Svy36GeX6UsBG8LDdqgIBl8WJVE
MS=ms57081934
v=spf1 include:spf.protection.outlook.com ~all
cisco-ci-domain-verification=193f2acba23472340722705013871449d982cd4fdf6ad8f06acf47374e5ecbfb
logmein-verification-code=1d12339b-b0a1-4c66-b309-9ab0e76de4b9
v=DMARC1; p=quarantine; pct=100

NS 4

ns3-09.azure-dns.org
ns2-09.azure-dns.net
ns1-09.azure-dns.com
ns4-09.azure-dns.info

SOA 1

ns1-09.azure-dns.com azuredns-hostmaster.microsoft.com

TLS Certificates (0)

None.

Subdomains (2)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what Connor observes and signs for lyondell.com. It updates itself. It attests a signed observation - not that the site is safe.

<a href="https://domaindrift.io/t/lyondell.com">
  <img src="https://domaindrift.io/badge/lyondell.com.svg"
       width="300" height="64" alt="Connor signed observations for lyondell.com">
</a>

Ed25519 Receipt

Receipt ID: f172027b-2e81-42f1-9eba-a97ca88d95ac
Output Hash: b7a96dcb9edeb053c6c876ec68b4532dcb88a373a222e68a00af88073b10f844
Signature: ed25519:3129b0cc2e61e9aecc74703c5a8edaca015b4812c04c6f6b9a31d2e41df1f90a477de8a4216e31148bbb3aed949c4803e95074b28fec1a21ad3d345ddcda920c
Public Key: ed25519:d610d74ef18f683e5beb859d241d5e67dff0c122e8928b06bec1c2476f4ba27b
Parent: (genesis)
Plane: fast

Verify this in your browser

Permalink: https://domaindrift.io/t/lyondell.com