Check-Host.cc

Domain

lw.com

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

Run a live full scan of lw.com

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now
Hosting IPs
56
A/AAAA targets
Subdomains
187
CT + scan + body
Record Types
5
seen in DNS
Observed Certs
14
in our scans

DNS Records

A
136.179.7.156
AAAA
MX
5 mx1.lw.com, 5 mx2.lw.com, 5 mx3.lw.com, 5 mx4.lw.com
NS
dana.lw.com, dbru.br.ns.els-gms.att.net, dmtu.mt.ns.els-gms.att.net
TXT
0741e919-b495-43e6-9aab-1429256f4988, 5D48A3B9055D1324F99121FD04A4F53C3E107583AB8DE87B29F0F318A6AEB957, MS=ms23099369, _2b74p1n068pejm03r7ziznc20n5v3pm, _b7mfy7nwobgjmj7748nyeudbncsifg4, _bk6x8uosfxvxi8607k72ord6ttsdxa1, _gselx81skikoy7suzd59d3tsf6maeho, _jw98g6fjrydq6qe921p5df7iy4z6hrc
CNAME
CAA

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.

Subdomain Resolves to Last seen
www-cd-staging-prod.lw.com 2026-06-19 20:42:48.831
www-cm-prod.lw.com 2026-06-18 14:34:10.399
lwvcscluster.lw.com 2026-07-27 10:02:25.366
reward.lw.com 2026-06-15 09:12:08.070
clinicaltrialprivacy.lw.com 2026-07-23 10:09:54.979
collaborate.eu.lw.com 2026-07-27 00:19:18.651
collaborate.us.lw.com 2026-07-27 00:19:18.651
finweb.lw.com 2026-06-20 05:19:33.092
lwgogrpc.lw.com 2026-06-19 18:33:17.639
lwgoqa.lw.com 2026-07-26 15:42:33.801
lwnhgrpc.lw.com 2026-06-19 18:33:17.639
lwnhgrpcqa.lw.com 2026-07-26 15:42:33.801
myk.lw.com 2026-05-27 09:55:28.497
roomassistdev.lw.com 2026-07-26 16:30:33.973
roomassistqa.lw.com 2026-06-18 14:26:15.733
testfdap.isolation.lw.com 2026-07-28 13:14:14.650
www-cd-qa.reward.lw.com 2026-06-22 03:05:37.507
www-cd-staging-dev.lw.com 2026-06-19 21:12:35.498
www-cm-qa.lw.com 2026-06-19 20:47:45.632
www-si-prod.lw.com 2026-06-19 20:42:48.831
www.lw.com 2026-06-19 13:42:00.179
apimaiprod.lw.com
1970-01-01 00:00:00.000
asia.lw.com
1970-01-01 00:00:00.000
autodiscover.lw.com
1970-01-01 00:00:00.000
bes12.eu.lw.com
1970-01-01 00:00:00.000
bes12.na.lw.com
1970-01-01 00:00:00.000
boardex.isolation.lw.com
1970-01-01 00:00:00.000
communications-read.lw.com 2026-07-22 07:23:51.561
communications.lw.com 2026-07-22 07:23:51.561
contenthubdam.lw.com
1970-01-01 00:00:00.000
dbasa.lw.com
1970-01-01 00:00:00.000
dmz-lvdvcscluster1e.lw.com 2026-07-16 23:40:49.540
dmz-lvdvcscluster2e.lw.com 2026-07-16 23:40:49.540
dmz-lvdvcscluster3e.lw.com 2026-07-16 23:40:49.540
dmz-mndvcscluster1e.lw.com 2026-07-27 10:02:25.366
dmz-mndvcscluster2e.lw.com 2026-07-27 10:02:25.366
dmz-mndvcscluster3e.lw.com 2026-07-27 10:02:25.366
dmz-sgdvcscluster1e.lw.com 2026-06-23 10:45:50.436
dmz-sgdvcscluster2e.lw.com 2026-06-23 10:45:50.436
dmz-sgdvcscluster3e.lw.com 2026-06-23 10:45:50.436
emsapp.lw.com 2026-07-20 21:28:22.302
eu.lw.com
1970-01-01 00:00:00.000
financinggrid.lw.com 2026-06-15 09:12:08.070
finweb.dev.lw.com
1970-01-01 00:00:00.000
finwebtst.lw.com
1970-01-01 00:00:00.000
gdpr.lw.com 2026-06-15 09:12:08.070
gret.lw.com 2026-06-15 09:12:08.070
gsoasavpn.lw.com
1970-01-01 00:00:00.000
kiteworksdev.lw.com 2026-06-17 13:15:17.954
kiteworkstax.dev.lw.com 2026-06-17 13:15:17.954
kiteworkstax.lw.com
1970-01-01 00:00:00.000
lists.lw.com
1970-01-01 00:00:00.000
lstasia.lw.com
1970-01-01 00:00:00.000
lsteu.lw.com
1970-01-01 00:00:00.000
lstus.lw.com
1970-01-01 00:00:00.000
lvdasa.lw.com 2026-06-17 02:03:42.404
lvdasaremotevpn.lw.com
1970-01-01 00:00:00.000
lvdasavpn.lw.com 2026-07-15 23:41:06.319
lvdia.lw.com 2026-05-31 03:31:40.761
lvdravendb01.lw.com
1970-01-01 00:00:00.000
lvdravendb02.lw.com
1970-01-01 00:00:00.000
lvdravendb03.lw.com
1970-01-01 00:00:00.000
lvdravendb21.lw.com
1970-01-01 00:00:00.000
lvdravendb22.lw.com
1970-01-01 00:00:00.000
lvdravendb23.lw.com
1970-01-01 00:00:00.000
lvdvcsclustere.lw.com
1970-01-01 00:00:00.000
lvdvcse.lw.com 2026-07-23 05:00:43.448
lvdvcse2.lw.com 2026-07-23 05:00:43.448
lvdvcse3.lw.com 2026-07-23 05:00:43.448
lvdvcsecluster.lw.com 2026-07-23 05:00:43.448
lvdvcsevid.lw.com
1970-01-01 00:00:00.000
lw.com 2026-07-27 10:02:25.366
lwgosigr.lw.com
1970-01-01 00:00:00.000
lwgosigrqa.lw.com
1970-01-01 00:00:00.000
lwmeetingpoll.lw.com 2026-06-14 22:23:29.853
lwnhgrpcdev.lw.com
1970-01-01 00:00:00.000
lwnhsigr.lw.com
1970-01-01 00:00:00.000
lwnhsigrqa.lw.com
1970-01-01 00:00:00.000
mail.eu.lw.com
1970-01-01 00:00:00.000
me.lw.com
1970-01-01 00:00:00.000
mndasavpn.lw.com
1970-01-01 00:00:00.000
mndvcsclustere.lw.com
1970-01-01 00:00:00.000
mx.isolation.lw.com 2026-07-20 22:06:12.886
na.lw.com
1970-01-01 00:00:00.000
ravendbcluster.lw.com
1970-01-01 00:00:00.000
remote.eu.lw.com
1970-01-01 00:00:00.000
report.lw.com
1970-01-01 00:00:00.000
roomassist.lw.com
1970-01-01 00:00:00.000
sgdvcsclustere.lw.com
1970-01-01 00:00:00.000
survey.lw.com
1970-01-01 00:00:00.000
test.lw.com
1970-01-01 00:00:00.000
testweb.lw.com
1970-01-01 00:00:00.000
uaefreezone.lw.com
1970-01-01 00:00:00.000
uageu.lw.com
1970-01-01 00:00:00.000
uageu2.lw.com
1970-01-01 00:00:00.000
vsaap.lw.com 2026-05-26 03:50:49.068
vsaeu.lw.com
1970-01-01 00:00:00.000
webexemergency.lw.com
1970-01-01 00:00:00.000
wow.lw.com 2026-06-15 09:12:08.070
www-cd-dev.lw.com
1970-01-01 00:00:00.000
www-cd-prod.reward.lw.com
1970-01-01 00:00:00.000
www-cm-dev.lw.com
1970-01-01 00:00:00.000
www-cm-dev.reward.lw.com
1970-01-01 00:00:00.000
www-cm-prod.reward.lw.com
1970-01-01 00:00:00.000
www-cm-qa.reward.lw.com
1970-01-01 00:00:00.000
www-cm-staging-dev.lw.com
1970-01-01 00:00:00.000
www.bes12.eu.lw.com
1970-01-01 00:00:00.000
www.bes12.na.lw.com
1970-01-01 00:00:00.000
www.emsapp.lw.com
1970-01-01 00:00:00.000
www.kiteworksdev.lw.com
1970-01-01 00:00:00.000
www.kiteworkstax.dev.lw.com
1970-01-01 00:00:00.000
www.kiteworkstax.lw.com
1970-01-01 00:00:00.000
www.lstasia.lw.com
1970-01-01 00:00:00.000
www.lsteu.lw.com
1970-01-01 00:00:00.000
www.lstus.lw.com
1970-01-01 00:00:00.000
www.lwmeetingpoll.lw.com
1970-01-01 00:00:00.000
www.report.lw.com
1970-01-01 00:00:00.000

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

Certificate observations pending

TLS certs naming this domain in subject or SANs will appear here as our scan-layer catches them.

IPs Citing This Domain

No citing IPs found yet

As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

No origin-IP leaks detected (yet)

Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.

CT-Log Evidence

Certificates from public Certificate Transparency logs whose subject or SAN names this domain — including historic certs we never observed live.

c5349d89f2fe52fd… google · xenon2026h2
Subject: LVDVCSeCluster.lw.com
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: LVDVCSeCluster.lw.com, lvdvcse3.lw.com, lvdvcse2.lw.com, lvdvcse.lw.com, test.lw.com, lw.com
Valid: 2026-02-03 00:00:00 → 2026-09-04 23:59:59
d9399c9e24ce1811… google · xenon2026h2
Subject: LVDVCSeCluster.lw.com
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: LVDVCSeCluster.lw.com, lvdvcse3.lw.com, lvdvcse2.lw.com, lvdvcse.lw.com, test.lw.com, lw.com
Valid: 2026-02-03 00:00:00 → 2026-09-04 23:59:59
90e7a6ace976a7a1… google · argon2026h2
Subject: LW.COM
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: LW.COM, ch.lw.com, de.lw.com, fr.lw.com, m.lw.com, t.lw.com, ws.lw.com, www.lw.com
Valid: 2025-10-20 00:00:00 → 2026-11-20 23:59:59
aeeaaed430c2512c… google · argon2026h2
Subject: LW.COM
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: LW.COM, ch.lw.com, de.lw.com, fr.lw.com, m.lw.com, t.lw.com, ws.lw.com, www.lw.com
Valid: 2025-10-20 00:00:00 → 2026-11-20 23:59:59
90e7a6ace976a7a1… cloudflare · nimbus2026
Subject: LW.COM
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: LW.COM, ch.lw.com, de.lw.com, fr.lw.com, m.lw.com, t.lw.com, ws.lw.com, www.lw.com
Valid: 2025-10-20 00:00:00 → 2026-11-20 23:59:59
aeeaaed430c2512c… cloudflare · nimbus2026
Subject: LW.COM
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: LW.COM, ch.lw.com, de.lw.com, fr.lw.com, m.lw.com, t.lw.com, ws.lw.com, www.lw.com
Valid: 2025-10-20 00:00:00 → 2026-11-20 23:59:59
2624091a03cda8ea… google · argon2026h2
Subject: LVDVCSeCluster.lw.com
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: LVDVCSeCluster.lw.com, lvdvcse3.lw.com, lvdvcse2.lw.com, lvdvcse.lw.com, test.lw.com, lw.com
Valid: 2025-08-13 00:00:00 → 2026-09-04 23:59:59

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.

Type Value First seen Last seen
TXT docker-verification=7e4b8972-e926-4ad6-9fd5-6b70072a2fd0 2026-05-26 06:59:09.753 2026-07-27 10:02:25.366
TXT _jw98g6fjrydq6qe921p5df7iy4z6hrc 2026-05-26 06:59:09.753 2026-07-27 10:02:25.366
SRV _sips._tcp 10 10 5061 lvdvcsevid.lw.com 2026-05-26 06:59:09.753 2026-07-27 10:02:25.366
TXT gdfm4lzhz7nh4ypkvycnbyrfqjr8sbkk 2026-05-26 06:59:09.753 2026-07-27 10:02:25.366
SRV _sipfederationtls._tcp 0 0 5061 sip.lw.com 2026-05-26 06:59:09.753 2026-07-27 10:02:25.366
SRV _sip._tcp 10 10 5060 Mndvcsevid.lw.com 2026-05-26 06:59:09.753 2026-07-27 10:02:25.366
SRV _sips._tcp 10 10 5061 Mndvcsevid.lw.com 2026-05-26 06:59:09.753 2026-07-27 10:02:25.366
TXT vmware-cloud-verification-c0350bef-6c3c-40db-8da6-712388c0b766 2026-05-26 06:59:09.753 2026-07-27 10:02:25.366
TXT 5D48A3B9055D1324F99121FD04A4F53C3E107583AB8DE87B29F0F318A6AEB957 2026-05-26 06:59:09.753 2026-07-27 10:02:25.366
TXT jetbrains-domain-verification=5y6w3c8qsaxd6wwh2r349fwtz 2026-05-26 06:59:09.753 2026-07-27 10:02:25.366
TXT _b7mfy7nwobgjmj7748nyeudbncsifg4 2026-05-26 06:59:09.753 2026-07-27 10:02:25.366
TXT _bk6x8uosfxvxi8607k72ord6ttsdxa1 2026-05-26 06:59:09.753 2026-07-27 10:02:25.366
TXT perplexity-ai-domain-verification-c07vp3=rzxdTegBdIMmvCJ1EdoHSF3WP 2026-05-26 06:59:09.753 2026-07-27 10:02:25.366
TXT _2b74p1n068pejm03r7ziznc20n5v3pm 2026-05-26 06:59:09.753 2026-07-27 10:02:25.366
NS dmtu.mt.ns.els-gms.att.net 2026-05-26 06:59:09.753 2026-07-27 10:02:25.366
TXT openai-domain-verification=dv-aAfsjsWBp6QRRhF3lP8pULOr 2026-05-26 06:59:09.753 2026-07-27 10:02:25.366
TXT msfpkey=370rdrkyehmdy9fsclcf0zew0 2026-05-26 06:59:09.753 2026-07-27 10:02:25.366
A 136.179.7.156 2026-05-26 06:59:09.753 2026-07-27 10:02:25.366
TXT opjonoas2oqsooge9mieek38d2 2026-05-26 06:59:09.753 2026-07-27 10:02:25.366
SRV _sip._tcp 10 10 5060 lvdvcsevid.lw.com 2026-05-26 06:59:09.753 2026-07-27 10:02:25.366
TXT launchdarkly-domain-verification=6a7afc4a-e6ce-4c04-bceb-46e1a710bcda 2026-05-26 06:59:09.753 2026-07-27 10:02:25.366
TXT onetrust-domain-verification=ec15d8cdbfef41fb8b14bc079a334807 2026-05-26 06:59:09.753 2026-07-27 10:02:25.366
TXT atlassian-domain-verification=xazBn2nTf9eCYVaKcdD4Ao/6HHhw7P3ncButBSoUEVAFEq/GaIFu7plw6hhY5eGo 2026-05-26 06:59:09.753 2026-07-27 10:02:25.366
MX 5 mx3.lw.com 2026-05-26 06:59:09.753 2026-07-27 10:02:25.366
TXT box-domain-verification=df317b32f400e630ac7dec3b211cc184e9da5b840c2b6c0e95029b7d128972d1 2026-05-26 06:59:09.753 2026-07-27 10:02:25.366
MX 5 mx4.lw.com 2026-05-26 06:59:09.753 2026-07-27 10:02:25.366
TXT 0741e919-b495-43e6-9aab-1429256f4988 2026-05-26 06:59:09.753 2026-07-27 10:02:25.366
NS dbru.br.ns.els-gms.att.net 2026-05-26 06:59:09.753 2026-07-27 10:02:25.366
TXT airtable-verification=bccf8e2dd7227bce21b812b26a48ad33 2026-05-26 06:59:09.753 2026-07-27 10:02:25.366
MX 5 mx1.lw.com 2026-05-26 06:59:09.753 2026-07-27 10:02:25.366
TXT monday-com-verification=GzuS8haskwenfzOGp98UGxXuVgaG_u8PSkwc-FGe7J8 2026-05-26 06:59:09.753 2026-07-27 10:02:25.366
NS dana.lw.com 2026-05-26 06:59:09.753 2026-07-27 10:02:25.366
TXT MS=ms23099369 2026-05-26 06:59:09.753 2026-07-27 10:02:25.366
TXT docusign=536a9640-6555-4bd2-9656-27bcb30b823f 2026-05-26 06:59:09.753 2026-07-27 10:02:25.366
TXT docusign=847456f8-9c1c-48ed-9b1a-59eacea32f41 2026-05-26 06:59:09.753 2026-07-27 10:02:25.366
TXT v=spf1 mx a ip4:136.179.7.175 ip4:136.179.7.176 -all 2026-05-26 06:59:09.753 2026-07-16 23:40:49.540
MX 5 mx2.lw.com 2026-05-26 06:59:09.753 2026-07-27 10:02:25.366
TXT _gselx81skikoy7suzd59d3tsf6maeho 2026-05-26 06:59:09.753 2026-07-27 10:02:25.366
TXT v=spf1 mx a ip4:136.179.7.175 ip4:136.179.7.176 ip4:136.179.7.177 ip4:136.179.7.178 -all 2026-07-23 05:00:43.448 2026-07-27 10:02:25.366