Domain
dwt.com
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of dwt.com
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
Hosting IPs
39
A/AAAA targets
Subdomains
71
CT + scan + body
Record Types
5
seen in DNS
Observed Certs
4
in our scans
DNS Records
A
68.220.40.173
AAAA
—
MX
10 us-smtp-inbound-1.mimecast.com, 10 us-smtp-inbound-2.mimecast.com
NS
ns10.dnsmadeeasy.com, ns11.dnsmadeeasy.com, ns12.dnsmadeeasy.com, ns13.dnsmadeeasy.com, ns14.dnsmadeeasy.com, ns15.dnsmadeeasy.com
TXT
3JJArGNuBpOJIKMY, ZOOM_verify_NomldQJlTMakeEBI9JxCVw, adobe-idp-site-verification=4b9a88bd53c28af41a0aa0db6172858d8b84627e22cef9a152cfb72b1f1a3c1f, apple-domain-verification=3JJArGNuBpOJIKMY, apple-domain-verification=ZH_p5QYiPKfJTdPpBalHqXJymdHovvArZ9newju_hPc, atlassian-domain-verification=GoKDZfM1QcAVi5efV/3HPc5G8rvD6X9QDSIx4DQICHoBcVaQvFWkRTnn4Lhj/xBg, box-domain-verification=4692e9e52c6e3c8781b2866952f157029eaec59cda091f1b02080a12aad25c3e, ciscocidomainverification=2df8147b7f55caa23373acbc261ebb5b9f7440012b23afbd17fdf9ee411ad945
CNAME
—
CAA
—
WHOIS / Registration
Registration data planned
Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.
Subdomains
Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.
| Subdomain | Resolves to | Last seen |
|---|---|---|
| autodiscover.dwt.com | 2026-06-15 00:39:07.757 | |
| internalcareers.dwt.com | 2026-06-21 05:09:18.448 | |
| collaborate.dwt.com | 2026-07-27 00:19:18.651 | |
| foundation.dwt.com | 2026-07-25 01:04:40.245 | |
| foundationstaging.dwt.com | 2026-06-16 18:29:25.681 | |
| identity.dwt.com | 2026-05-26 21:14:49.898 | |
| www.dwt.com | 2026-05-27 04:39:33.428 | |
| 1nps-inf01-dc1.dwt.com | 1970-01-01 00:00:00.000 | |
| activesync.dwt.com | 2026-06-15 00:39:07.757 | |
| careers.dwt.com | 2026-06-05 19:55:46.565 | |
| denovo.dwt.com | 2026-06-15 02:31:36.631 | |
| diversity.dwt.com | 1970-01-01 00:00:00.000 | |
| dwt.com | 2026-07-23 05:12:43.663 | |
| foodbev.dwt.com | 2026-07-23 05:12:43.663 | |
| haven-dev.dwt.com | 2026-06-21 05:29:51.024 | |
| haven-qa.dwt.com | 2026-06-21 05:29:51.024 | |
| haven-stage.dwt.com | 2026-06-21 05:29:51.024 | |
| haven.dwt.com | 2026-05-31 11:47:40.828 | |
| info.dwt.com | 1970-01-01 00:00:00.000 | |
| paylocity.dwt.com | 2026-07-24 01:14:33.255 | |
| roomfinder-dev.dwt.com | 1970-01-01 00:00:00.000 | |
| roomfinder.dwt.com | 1970-01-01 00:00:00.000 | |
| securityaudit.dwt.com | 1970-01-01 00:00:00.000 | |
| selfapply.dwt.com | 2026-06-03 04:17:35.538 | |
| smtp.dwt.com | 2026-06-15 00:39:07.757 | |
| vilms.dwt.com | 2026-05-26 21:00:42.449 | |
| vpneast.dwt.com | 1970-01-01 00:00:00.000 | |
| vpneast1.dwt.com | 2026-07-21 06:54:34.791 | |
| vpnwest2.dwt.com | 2026-07-21 06:54:34.791 | |
| vpnwest3.dwt.com | 2026-07-21 06:54:34.791 | |
| webmail.dwt.com | 2026-06-15 00:39:07.757 | |
| www.1nps-inf01-dc1.dwt.com | 1970-01-01 00:00:00.000 | |
| www.haven-dev.dwt.com | 1970-01-01 00:00:00.000 | |
| www.haven.dwt.com | 1970-01-01 00:00:00.000 | |
| www.identity.dwt.com | 1970-01-01 00:00:00.000 | |
| www.roomfinder.dwt.com | 1970-01-01 00:00:00.000 | |
| www.securityaudit.dwt.com | 1970-01-01 00:00:00.000 | |
| www.selfapply.dwt.com | 1970-01-01 00:00:00.000 | |
| www.vilms.dwt.com | 1970-01-01 00:00:00.000 | |
| www.vpneast1.dwt.com | 1970-01-01 00:00:00.000 | |
| www.webmail.dwt.com | 1970-01-01 00:00:00.000 |
Tech Stack
Tech detection pending
Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.
TLS Certificates
Subject: dr.hkdwt.com
Issuer: Encryption Everywhere DV TLS CA - G2
SANs: dr.hkdwt.com
Subject: *.carusseldwt.com
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.carusseldwt.com, carusseldwt.com
Subject: vpneast1.dwt.com
Issuer: Go Daddy Secure Certificate Authority - G2
SANs: vpneast.dwt.com, vpneast1.dwt.com, vpnwest2.dwt.com, vpnwest3.dwt.com, www.vpneast1.dwt.com
Subject: *.carusseldwt.com
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.carusseldwt.com, carusseldwt.com
Subject: module.api.uat.opel.carusseldwt.com
Issuer: R12
SANs: module.api.uat.opel.carusseldwt.com
Subject: webmail.dwt.com
Issuer: Go Daddy Secure Certificate Authority - G2
SANs: activesync.dwt.com, autodiscover.centurypacificlp.com, autodiscover.dwt.com, smtp.centurypacificlp.com, smtp.dwt.com, webmail.centurypacificlp.com, webmail.dwt.com, www.webmail.dwt.com
Subject: affk.qhdydwt.com
Issuer: TrustAsia DV TLS RSA CA 2025
SANs: affk.qhdydwt.com
Subject: autodiscover.mail.carusseldwt.com
Issuer: R12
SANs: autodiscover.mail.carusseldwt.com
Subject: *.carusseldwt.com
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.carusseldwt.com, carusseldwt.com
Subject: identity.dwt.com
Issuer: Go Daddy Secure Certificate Authority - G2
SANs: identity.dwt.com, www.identity.dwt.com
Subject: vilms.dwt.com
Issuer: Go Daddy Secure Certificate Authority - G2
SANs: vilms.dwt.com, www.vilms.dwt.com
Subject: parked.wbdwt.com
Issuer: parked.wbdwt.com
SANs: parked.wbdwt.com
Subject: module.api.staging.carusseldwt.com
Issuer: R12
SANs: module.api.staging.carusseldwt.com
Subject: www.idwt.com.cn
Issuer: E7
SANs: www.idwt.com.cn
IPs Citing This Domain
No citing IPs found yet
As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.
Origin / IP-Leak
USP
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
| Origin IP | Origin ASN | CDN ASN | Confidence | Reasoning |
|---|---|---|---|---|
| 184.84.106.140 | AS55836 | AS13335 | 95% | cert 8e01f4b9… served by 184.84.106.140 (AS55836) carries SAN collaborate.dwt.com which currently resolves through Cloudflare (AS13335) at 104.18.20.188, 104.18.21.188 |
| 104.85.144.193 | AS55836 | AS13335 | 95% | cert 8e01f4b9… served by 104.85.144.193 (AS55836) carries SAN collaborate.dwt.com which currently resolves through Cloudflare (AS13335) at 104.18.20.188, 104.18.21.188 |
| 155.46.185.19 | AS57187 | AS13335 | 95% | cert 69638167… served by 155.46.185.19 (AS57187) carries SAN collaborate.dwt.com which currently resolves through Cloudflare (AS13335) at 104.18.20.188, 104.18.21.188 |
| 155.46.181.19 | AS15830 | AS13335 | 95% | cert 69638167… served by 155.46.181.19 (AS15830) carries SAN collaborate.dwt.com which currently resolves through Cloudflare (AS13335) at 104.18.20.188, 104.18.21.188 |
| 155.46.178.19 | AS7381 | AS13335 | 95% | cert 37086c00… served by 155.46.178.19 (AS7381) carries SAN collaborate.dwt.com which currently resolves through Cloudflare (AS13335) at 104.18.20.188, 104.18.21.188 |
| 155.46.183.32 | AS8681 | AS13335 | 95% | cert 9a24fc48… served by 155.46.183.32 (AS8681) carries SAN collaborate.dwt.com which currently resolves through Cloudflare (AS13335) at 104.18.20.188, 104.18.21.188 |
| 155.46.188.19 | AS15533 | AS13335 | 95% | cert 69638167… served by 155.46.188.19 (AS15533) carries SAN collaborate.dwt.com which currently resolves through Cloudflare (AS13335) at 104.18.20.188, 104.18.21.188 |
Threat Intelligence
Domain threat-intel pending
Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.
History
Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.
| Type | Value | First seen | Last seen |
|---|---|---|---|
| TXT | v=spf1 a include:us._netblocks.mimecast.com include:_spf.concurcompleat.com include:spf.rpost.net include:servers.mcsv.net include:spf.protection.outlook.com ~all | 2026-06-15 02:31:36.631 | 2026-07-23 05:12:43.663 |
| TXT | box-domain-verification=4692e9e52c6e3c8781b2866952f157029eaec59cda091f1b02080a12aad25c3e | 2026-06-15 02:31:36.631 | 2026-07-23 05:12:43.663 |
| TXT | docusign=548b6ec6-34a8-4829-8c2f-f4312163ac28 | 2026-06-15 02:31:36.631 | 2026-07-23 05:12:43.663 |
| TXT | nq6jnpq8e3hsep5b8up3mrv4bu | 2026-06-15 02:31:36.631 | 2026-07-23 05:12:43.663 |
| MX | 10 us-smtp-inbound-2.mimecast.com | 2026-06-15 02:31:36.631 | 2026-07-23 05:12:43.663 |
| TXT | ZOOM_verify_NomldQJlTMakeEBI9JxCVw | 2026-06-15 02:31:36.631 | 2026-07-23 05:12:43.663 |
| A | 68.220.40.173 | 2026-06-15 02:31:36.631 | 2026-07-23 05:12:43.663 |
| SRV | _sips._tcp 1 0 5061 vcse1-app01-dc1.dwt.com | 2026-06-15 02:31:36.631 | 2026-07-23 05:12:43.663 |
| TXT | 3JJArGNuBpOJIKMY | 2026-06-15 02:31:36.631 | 2026-07-23 05:12:43.663 |
| TXT | dropbox-domain-verification=u2i31tf6n8v8 | 2026-06-15 02:31:36.631 | 2026-07-23 05:12:43.663 |
| TXT | apple-domain-verification=3JJArGNuBpOJIKMY | 2026-06-15 02:31:36.631 | 2026-07-23 05:12:43.663 |
| TXT | d1LyibkR1t9+uqp5/yBXC98xTpOi69DLRcrh1vyWAk5m6pI7q8ZPbJ1F/MBMJkpQ0QbXSmsnvW30fn+Kz6N76Q== | 2026-06-15 02:31:36.631 | 2026-07-23 05:12:43.663 |
| TXT | atlassian-domain-verification=GoKDZfM1QcAVi5efV/3HPc5G8rvD6X9QDSIx4DQICHoBcVaQvFWkRTnn4Lhj/xBg | 2026-06-15 02:31:36.631 | 2026-07-23 05:12:43.663 |
| SRV | _sips._tcp 10 10 5061 wbx-inf05-dc1.dwt.com | 2026-06-15 02:31:36.631 | 2026-07-23 05:12:43.663 |
| TXT | google-site-verification=qT7YmHKWsi0utASh5KKvWMs5tpT3ez81RTWyZcLXbtU | 2026-06-15 02:31:36.631 | 2026-07-23 05:12:43.663 |
| NS | ns15.dnsmadeeasy.com | 2026-06-15 02:31:36.631 | 2026-07-23 05:12:43.663 |
| TXT | ciscocidomainverification=2df8147b7f55caa23373acbc261ebb5b9f7440012b23afbd17fdf9ee411ad945 | 2026-06-15 02:31:36.631 | 2026-07-23 05:12:43.663 |
| MX | 10 us-smtp-inbound-1.mimecast.com | 2026-06-15 02:31:36.631 | 2026-07-23 05:12:43.663 |
| SRV | _sipfederationtls._tcp 100 0 5061 im.dwt.com | 2026-06-15 02:31:36.631 | 2026-07-23 05:12:43.663 |
| NS | ns14.dnsmadeeasy.com | 2026-06-15 02:31:36.631 | 2026-07-23 05:12:43.663 |
| TXT | smartsheet-site-validation=O699tIJyS4PwsJ9jIpfC-gXXV4TWzoLi | 2026-06-15 02:31:36.631 | 2026-07-23 05:12:43.663 |
| NS | ns12.dnsmadeeasy.com | 2026-06-15 02:31:36.631 | 2026-07-23 05:12:43.663 |
| TXT | google-site-verification=tzXOBVPV_Pd_W1z7m87CfoNN2tbcd4YiGGb1KB8pONk | 2026-06-15 02:31:36.631 | 2026-07-23 05:12:43.663 |
| SRV | _sips._tcp 10 10 5061 wbx-inf06-dc1.dwt.com | 2026-06-15 02:31:36.631 | 2026-07-23 05:12:43.663 |
| NS | ns13.dnsmadeeasy.com | 2026-06-15 02:31:36.631 | 2026-07-23 05:12:43.663 |
| TXT | apple-domain-verification=ZH_p5QYiPKfJTdPpBalHqXJymdHovvArZ9newju_hPc | 2026-06-15 02:31:36.631 | 2026-07-23 05:12:43.663 |
| TXT | ok5ml3dul46a2sge2hp2pn3n4n | 2026-06-15 02:31:36.631 | 2026-07-23 05:12:43.663 |
| SRV | _sip._tcp 1 0 5060 vcse1-app01-dc1.dwt.com | 2026-06-15 02:31:36.631 | 2026-07-23 05:12:43.663 |
| TXT | adobe-idp-site-verification=4b9a88bd53c28af41a0aa0db6172858d8b84627e22cef9a152cfb72b1f1a3c1f | 2026-06-15 02:31:36.631 | 2026-07-23 05:12:43.663 |
| NS | ns10.dnsmadeeasy.com | 2026-06-15 02:31:36.631 | 2026-07-23 05:12:43.663 |
| SRV | _sipfederationtls._tcp 0 0 5061 sfbaccess.dwt.com | 2026-06-15 02:31:36.631 | 2026-07-23 05:12:43.663 |
| TXT | google-site-verification=UBjw87BrZxfcuA6q0eKLodYirbMNobIHFph0Ibn_DrU | 2026-06-15 02:31:36.631 | 2026-07-23 05:12:43.663 |
| NS | ns11.dnsmadeeasy.com | 2026-06-15 02:31:36.631 | 2026-07-23 05:12:43.663 |
| TXT | google-site-verification=_Sj7UazHvQCLSz-47yEDdU6AHmMnhOjeNB4wuuSnqn0 | 2026-06-15 02:31:36.631 | 2026-07-23 05:12:43.663 |