CONTINUOUS INTERNET TELEMETRY24H DRIFT1,558 material changesacross 1,361 domains · +136 vs yesterdayDNS DRIFT17 domains changed DNS providertop destination parity.domains · -4 vs yesterdayEMAIL DRIFT5 domains switched email providertop destination pphosted.comNOW719 curated domains not answeringlast probe, steadyERRORS3,199 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED7,906 throttled or blocked our scanner429 rate-limit / 403 bot-blockMOVERtiktok.comDMARC enforcement downgraded: p=reject → no DMARC record24H DRIFT1,558 material changesacross 1,361 domains · +136 vs yesterdayDNS DRIFT17 domains changed DNS providertop destination parity.domains · -4 vs yesterdayEMAIL DRIFT5 domains switched email providertop destination pphosted.comNOW719 curated domains not answeringlast probe, steadyERRORS3,199 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED7,906 throttled or blocked our scanner429 rate-limit / 403 bot-blockMOVERtiktok.comDMARC enforcement downgraded: p=reject → no DMARC record

theyworkforyou.com

Observed 2026-07-17T14:16:48.791771405+00:00 (12h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Email byGoogle (SPF sender)
Secured byLet's Encrypt
Registered withTucows Domains Inc.
Also usesFacebook/MetaGoogle Search Console
IPv6 · 6 subdomains · tranco_40k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat theyworkforyou.com actually stands on - every host below is a signed observation
theyworkforyou.com
A / AAAA
176.126.245.1893.93.130.1502a00:1098:a2::3b2a00:1098:a2::38
2a00serves the site
NS
ns1.ukcod.org.ukns2.dns-engine.comns2.ukcod.org.ukns5.dns-engine.com+4 more
ukcod.org.uk + dns-engine.comanswers its DNS
MX
mx1.ukcod.org.ukmx0.mysociety.orgmx0.ukcod.org.ukmx1.mysociety.org
Google (SPF sender)receives its email
TLS
www.theyworkforyou.com
Let's Encryptissued its certificate

DNS Records

A 2

  • 176.126.245.18
  • 93.93.130.150

AAAA 2

  • 2a00:1098:a2::3b
  • 2a00:1098:a2::38

MX 4

  • 10mx1.ukcod.org.uk
  • 20mx0.mysociety.org
  • 10mx0.ukcod.org.uk
  • 20mx1.mysociety.org

TXT 4

  • facebook-domain-verification=n1sc0zil6qfifzpwdos4ktjx5br54k
  • v=spf1 include:_spf.google.com include:_spf.ukcod.org.uk ~all
  • google-site-verification=md1SBiLfeX1HaAX2KMckiNSeUTNHKk0S0pfDQmB8rq0
  • v=DMARC1; p=none; pct=100; rua=mailto:re+tnha8iqv6mt@dmarc.postmarkapp.com; sp=none; aspf=r;

NS 8

  • ns1.ukcod.org.uk
  • ns2.dns-engine.com
  • ns2.ukcod.org.uk
  • ns5.dns-engine.com
  • ns4.dns-engine.com
  • ns1.dns-engine.com
  • ns3.dns-engine.com
  • ns0.ukcod.org.uk

SOA 1

  • ns0.ukcod.org.uk hostmaster.ukcod.org.uk

TLS Certificates (2)

Common NameIssuerExpires
www.theyworkforyou.com C=US, O=Let's Encrypt, CN=R13 Sun, 16 Aug 2026 06:45:53 +0000
R13 C=US, O=Internet Security Research Group, CN=ISRG Root X1 Fri, 12 Mar 2027 23:59:59 +0000

Subdomains (6)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for theyworkforyou.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for theyworkforyou.com <a href="https://domaindrift.io/t/theyworkforyou.com"> <img src="https://domaindrift.io/badge/theyworkforyou.com.svg" width="300" height="64" alt="DomainDrift signed observations for theyworkforyou.com"> </a>

Ed25519 Receipt

Receipt ID
3b10ea54-d5ad-4171-ab44-4f3b458d2acc
Output Hash
a7b7052d5edaf79442a94759aff4ee4eebce7edf18e50c3b7f06357377adab44
Signature
ed25519:db4f44f8948325903bcc3019b8eccfb68014413d9fed04589e61239508d3292c6da20c0b4a6af8a2edbe26db5b35d2cbb25029001dea357fc58ab54fc109ee0c
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser