Domain
intertrustgroup.com
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of intertrustgroup.com
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
Hosting IPs
27
A/AAAA targets
Subdomains
83
CT + scan + body
Record Types
5
seen in DNS
Observed Certs
8
in our scans
DNS Records
A
204.74.99.100
AAAA
—
MX
10 mxa-0015fd02.gslb.pphosted.com, 10 mxb-0015fd02.gslb.pphosted.com
NS
udns1.cscudns.com, udns2.cscudns.org
TXT
!OY5$k^#tOoZ4^sd7CSm0d6UDGftW7!4mK0B2RsFEaHYzmJGC%iZT$3ILFQfh9G86ngp3jsx8^tPr0YeP7S&CfBvxlsYR369Q4%, 00D70000000JfUU=1TBVo00000002rU, 2YOUIRV3IOX9Z0P5KDJZDA9Z7A5LEP5DBN0NGO04, 3002560, 3zvYe4e2svFsqPQTBkjY7Mhjz0MGl3nMYrtATfxE3ttlSVgGqlp2EG0VWx/qRrWnEPqK6GVi4SIlt/OEQaSeqQ==, 70y1yv7yw5nb1626t10j7q19bhc5xs9y, DLQ332AOUWJYXC0F3WTHN0X7EXPG30OE6F7I12MC, DomainVerification=59N6OI8F58DUXRR8M3EGR6BQFR6CYIBSOUVKWJRVUAMZTVL5MDRDCA7VGC6HOLQK
CNAME
—
CAA
—
WHOIS / Registration
Registration data planned
Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.
Subdomains
Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.
Tech Stack
Tech detection pending
Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.
TLS Certificates
Subject: itg00-hcs-hw1-exp-e-01.intertrustgroup.com
Issuer: Sectigo Public Server Authentication CA OV R36
SANs: intertrustgroup.com, itg00-exp-e-cl01.intertrustgroup.com, itg00-gmx-l78-exp-e-01.intertrustgroup.com, itg00-hcs-hw1-exp-e-01.intertrustgroup.com
Subject: in-chn-cucm-ewe03.uc.in.intertrustgroup.com
Issuer: Sectigo Public Server Authentication CA OV R36
SANs: in-chn-cucm-ewe03.uc.in.intertrustgroup.com, uc.in.intertrustgroup.com
Subject: itg00-gmx-l78-exp-e-01.intertrustgroup.com
Issuer: Sectigo Public Server Authentication CA OV R36
SANs: intertrustgroup.com, itg00-exp-e-cl01.intertrustgroup.com, itg00-gmx-l78-exp-e-01.intertrustgroup.com, itg00-hcs-hw1-exp-e-01.intertrustgroup.com
Subject: itg00-gmx-ih4-exp-e-01.uc.apac.intertrustgroup.com
Issuer: Sectigo Public Server Authentication CA OV R36
SANs: itg00-gmx-ih4-exp-e-01.uc.apac.intertrustgroup.com, itg00-gmx-ih4-exp-e-cl01.uc.apac.intertrustgroup.com, uc.apac.intertrustgroup.com
Subject: in-chn-cucm-ewe03.uc.in.intertrustgroup.com
Issuer: Sectigo Public Server Authentication CA OV R36
SANs: in-chn-cucm-ewe03.uc.in.intertrustgroup.com, uc.in.intertrustgroup.com
Subject: itg00-gmx-ih4-exp-e-01.uc.apac.intertrustgroup.com
Issuer: Sectigo Public Server Authentication CA OV R36
SANs: itg00-gmx-ih4-exp-e-01.uc.apac.intertrustgroup.com, itg00-gmx-ih4-exp-e-cl01.uc.apac.intertrustgroup.com, uc.apac.intertrustgroup.com
Subject: itg00-hcs-hw1-exp-e-01.intertrustgroup.com
Issuer: Sectigo Public Server Authentication CA OV R36
SANs: intertrustgroup.com, itg00-exp-e-cl01.intertrustgroup.com, itg00-gmx-l78-exp-e-01.intertrustgroup.com, itg00-hcs-hw1-exp-e-01.intertrustgroup.com
IPs Citing This Domain
No citing IPs found yet
As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.
Origin / IP-Leak
USP
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
| Origin IP | Origin ASN | CDN ASN | Confidence | Reasoning |
|---|---|---|---|---|
| 155.46.185.19 | AS57187 | AS13335 | 95% | cert 69638167… served by 155.46.185.19 (AS57187) carries SAN documents.intertrustgroup.com which currently resolves through Cloudflare (AS13335) at 104.18.29.118, 104.18.28.118 |
| 180.87.138.214 | AS6453 | AS8075 | 95% | cert f1576a08… served by 180.87.138.214 (AS6453) carries SAN uc.apac.intertrustgroup.com which currently resolves through Microsoft (AS8075) at 150.171.109.100, 2603:1061:14:63::1 |
| 155.46.181.19 | AS15830 | AS13335 | 95% | cert 69638167… served by 155.46.181.19 (AS15830) carries SAN documents.intertrustgroup.com which currently resolves through Cloudflare (AS13335) at 104.18.29.118, 104.18.28.118 |
| 155.46.178.19 | AS7381 | AS13335 | 95% | cert 37086c00… served by 155.46.178.19 (AS7381) carries SAN documents.intertrustgroup.com which currently resolves through Cloudflare (AS13335) at 104.18.29.118, 104.18.28.118 |
| 155.46.183.32 | AS8681 | AS13335 | 95% | cert 9a24fc48… served by 155.46.183.32 (AS8681) carries SAN documents.intertrustgroup.com which currently resolves through Cloudflare (AS13335) at 104.18.29.118, 104.18.28.118 |
| 155.46.188.19 | AS15533 | AS13335 | 95% | cert 69638167… served by 155.46.188.19 (AS15533) carries SAN documents.intertrustgroup.com which currently resolves through Cloudflare (AS13335) at 104.18.29.118, 104.18.28.118 |
CT-Log Evidence
Certificates from public Certificate Transparency logs whose subject or SAN names this domain — including historic certs we never observed live.
a81ea2f1c150d833…
google · xenon2026h2
Subject: intertrustgroup.com
Issuer: Sectigo Public Server Authentication CA OV R36
SANs: intertrustgroup.com, www.intertrustgroup.com
Valid: 2025-11-13 00:00:00 → 2026-11-13 23:59:59
f51cd9b24441e8c2…
google · xenon2026h2
Subject: intertrustgroup.com
Issuer: Sectigo Public Server Authentication CA OV R36
SANs: intertrustgroup.com, www.intertrustgroup.com
Valid: 2025-11-13 00:00:00 → 2026-11-13 23:59:59
Threat Intelligence
Domain threat-intel pending
Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.
History
Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.
| Type | Value | First seen | Last seen |
|---|---|---|---|
| TXT | T6qGAfCMj8iKFNeR7ZJQeZ1pNN81Rz0eXv3pJk0CgvQ= | 2026-05-26 10:13:19.307 | 2026-07-21 09:30:34.743 |
| A | 204.74.99.100 | 2026-05-26 10:13:19.307 | 2026-07-21 09:30:34.743 |
| TXT | smartsheet-site-validation=C_Oi4NT-ojbs4OELEDOsuCv6D3541Oiw | 2026-05-26 10:13:19.307 | 2026-07-21 09:30:34.743 |
| TXT | adobe-sign-verification=ae4de6c763e07ac771696e454c0a96d4 | 2026-05-26 10:13:19.307 | 2026-07-21 09:30:34.743 |
| SRV | _sips._tcp 10 10 5061 itg00-gmx-l78-exp-e-01.intertrustgroup.com | 2026-05-26 10:13:19.307 | 2026-07-21 09:30:34.743 |
| NS | udns1.cscudns.com | 2026-05-26 10:13:19.307 | 2026-07-21 09:30:34.743 |
| TXT | hibp-verify=dweb_qtudmielb3kgi3vrauh3yd67 | 2026-05-26 10:13:19.307 | 2026-07-21 09:30:34.743 |
| TXT | 00D70000000JfUU=1TBVo00000002rU | 2026-05-26 10:13:19.307 | 2026-07-21 09:30:34.743 |
| TXT | box-domain-verification=89338c8ff3a93956702eab097c35b82b131f7a339330e8ba71d897fdc2c57d36 | 2026-05-26 10:13:19.307 | 2026-07-21 09:30:34.743 |
| TXT | 70y1yv7yw5nb1626t10j7q19bhc5xs9y | 2026-05-26 10:13:19.307 | 2026-07-21 09:30:34.743 |
| SRV | _sips._tcp 10 10 5061 itg00-hcs-hw1-exp-02.intertrustgroup.com | 2026-05-26 10:13:19.307 | 2026-07-21 09:30:34.743 |
| TXT | NOSQJ3K8M1YVT3IK6CNDBLV0Q38U75ETN6XFXFOJ | 2026-05-26 10:13:19.307 | 2026-07-21 09:30:34.743 |
| TXT | knowbe4-site-verification=5a4061ee0f9469402e535e166fe01d1c | 2026-05-26 10:13:19.307 | 2026-07-21 09:30:34.743 |
| TXT | DomainVerification=59N6OI8F58DUXRR8M3EGR6BQFR6CYIBSOUVKWJRVUAMZTVL5MDRDCA7VGC6HOLQK | 2026-05-26 10:13:19.307 | 2026-07-21 09:30:34.743 |
| TXT | ddwzjg4j9ygq7rwmcnq9fr7kp4rtjrmn | 2026-05-26 10:13:19.307 | 2026-07-21 09:30:34.743 |
| SRV | _sip._tcp 10 10 5060 itg00-hcs-hw1-exp-02.intertrustgroup.com | 2026-05-26 10:13:19.307 | 2026-07-21 09:30:34.743 |
| TXT | cisco-ci-domain-verification=4eba95a2097efd57aba0d62d4209b16974e429f28ba4fd98824fc58ee35c2e35 | 2026-05-26 10:13:19.307 | 2026-07-21 09:30:34.743 |
| TXT | 3zvYe4e2svFsqPQTBkjY7Mhjz0MGl3nMYrtATfxE3ttlSVgGqlp2EG0VWx/qRrWnEPqK6GVi4SIlt/OEQaSeqQ== | 2026-05-26 10:13:19.307 | 2026-07-21 09:30:34.743 |
| TXT | 2YOUIRV3IOX9Z0P5KDJZDA9Z7A5LEP5DBN0NGO04 | 2026-05-26 10:13:19.307 | 2026-07-21 09:30:34.743 |
| NS | udns2.cscudns.org | 2026-05-26 10:13:19.307 | 2026-07-21 09:30:34.743 |
| TXT | v=spf1 ip4:213.39.27.90 ip4:103.53.153.220 ip4:165.160.32.0/23 ip4:165.160.33.34 ip4:165.160.33.240 ip4:148.163.149.210 ip4:148.163.153.200 include:spfhost.messageprovider.com ip4:52.210.213.17/32 ip4:63.33.151.107/32 ip4:5.61.112.0/21 include:spf.protection.outlook.com include:web.shared.mysmtp.com include:spf.odmad.quest-on-demand.com ip4:103.225.106.1 ip4:199.200.24.190 ip4:156.55.124.190 ip4:217.73.9.211 ip4:217.73.9.212 ip4:217.73.9.213 ip4:217.73.9.214 ip4:217.73.9.215 ip4:217.73.9.216 ip4:217.73.9.217 ip4:37.34.53.131 ip4:37.34.53.132 ip4:83.149.67.64/27 ip4:212.78.179.196 ip4:3.120.181.192/28 ~all | 2026-05-26 10:13:19.307 | 2026-06-14 23:22:00.742 |
| SRV | _sip._tcp 10 10 5060 itg00-gmx-l78-exp-e-01.intertrustgroup.com | 2026-05-26 10:13:19.307 | 2026-07-21 09:30:34.743 |
| TXT | LXCASBFIM1SMPOQODGQZWQR97ALM2WG2B72VGOHY | 2026-05-26 10:13:19.307 | 2026-07-21 09:30:34.743 |
| MX | 10 mxa-0015fd02.gslb.pphosted.com | 2026-05-26 10:13:19.307 | 2026-07-21 09:30:34.743 |
| TXT | anthropic-domain-verification-m8vx2w=OvWLG5boJDpqucNnMI7BdVn0t | 2026-05-26 10:13:19.307 | 2026-07-21 09:30:34.743 |
| TXT | 3002560 | 2026-05-26 10:13:19.307 | 2026-07-21 09:30:34.743 |
| TXT | JTLU8VPX46NY13Y3YBFSWG0URZLVX5USENVU8G5B | 2026-05-26 10:13:19.307 | 2026-07-21 09:30:34.743 |
| TXT | DLQ332AOUWJYXC0F3WTHN0X7EXPG30OE6F7I12MC | 2026-05-26 10:13:19.307 | 2026-07-21 09:30:34.743 |
| SRV | _sipfederationtls._tcp 100 1 5061 sipfed.online.lync.com | 2026-05-26 10:13:19.307 | 2026-07-21 09:30:34.743 |
| MX | 10 mxb-0015fd02.gslb.pphosted.com | 2026-05-26 10:13:19.307 | 2026-07-21 09:30:34.743 |
| TXT | v=DKIM1;k=rsa;p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsegq/NrAw3h1M/4oBB1haUNvT7Gp2m4tOj+EUv+vbI2Mn9BpG97mk45aF5H1FcDdbimC9IEO7779MiwUwwm94y8cUg/ldTSqXRxdGCQMR4mBzn871xtQQVvRzTPJMUMnn4J5brn7yTrAPrV9MgLq4CfV6dZxSFHVjFqN8s6duwpj1s0aSB7MGY8df4GekZZPZQ8sQBv17yKrb2D6CdjIWdidgPKe4tvwB/JhOQSomwETRFHMiGv3pk5ymwcjCRmcyA1GMSGuKa8rHEx9cqP1mdtKlX0M+HisRe/nEirKq4GDzLpcvf8o+2Fm8r1vuQLiI4zTHgCfvGQd589fnDUFtwIDAQAB; | 2026-05-26 10:13:19.307 | 2026-07-21 09:30:34.743 |
| TXT | !OY5$k^#tOoZ4^sd7CSm0d6UDGftW7!4mK0B2RsFEaHYzmJGC%iZT$3ILFQfh9G86ngp3jsx8^tPr0YeP7S&CfBvxlsYR369Q4% | 2026-05-26 10:13:19.307 | 2026-07-21 09:30:34.743 |
| TXT | v=spf1 ip4:213.39.27.90 ip4:103.53.153.220 ip4:165.160.32.0/23 ip4:165.160.33.34 ip4:165.160.33.240 ip4:148.163.149.210 ip4:148.163.153.200 include:spfhost.messageprovider.com ip4:52.210.213.17/32 ip4:63.33.151.107/32 ip4:5.61.112.0/21 include:spf.protection.outlook.com include:web.shared.mysmtp.com include:spf.odmad.quest-on-demand.com ip4:103.225.106.1 ip4:199.200.24.190 ip4:156.55.124.190 ip4:217.73.9.211 ip4:217.73.9.212/30 ip4:217.73.9.216/31 ip4:37.34.53.131 ip4:37.34.53.132 ip4:83.149.67.64/27 ip4:212.78.179.196 ip4:3.120.181.192/28 ip4:149.72.129.151 ip4:149.72.76.214 ip4:159.183.40.141 ip4:168.245.120.248 ip4:168.245.24.116 ip4:50.31.62.204 ~all | 2026-06-25 22:02:38.381 | 2026-07-21 09:30:34.743 |