up.education
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of up.education
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
DNS Records
WHOIS / Registration
Registration data planned
Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.
Subdomains
Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.
| Subdomain | Resolves to | Last seen |
|---|---|---|
| landbasedtraining.up.education | 2026-06-22 15:52:01.737 | |
| utas3.up.education | 2026-07-18 05:25:39.600 | |
| bulkenrol-uat.up.education | 2026-06-18 06:06:08.648 | |
| formassets.up.education | 2026-06-20 00:59:24.807 | |
| bulkenrol.up.education | 2026-06-18 06:18:50.517 | |
| onboard.up.education | 2026-06-19 20:21:20.212 | |
| payment.up.education | 2026-07-17 22:15:33.762 | |
| publicapi-uat.up.education | 2026-06-20 00:59:24.807 | |
| publicapi.up.education | 2026-06-18 15:59:19.990 | |
| remotesupport.up.education | 2026-06-03 11:56:45.046 | |
| studentstart.up.education | 2026-06-19 22:45:59.617 | |
| support.up.education | 2026-06-19 18:17:27.862 | |
| www-uat.up.education | 2026-06-20 15:06:27.004 | |
| www.up.education | 2026-06-20 15:03:18.881 | |
| apply.up.education | 2026-07-19 15:00:30.002 | |
| apprenticeship-dev.up.education | 1970-01-01 00:00:00.000 | |
| apprenticeship-test.up.education | 1970-01-01 00:00:00.000 | |
| auckland2.up.education | 1970-01-01 00:00:00.000 | |
| aut.up.education | 1970-01-01 00:00:00.000 | |
| buildersacademy.up.education | 1970-01-01 00:00:00.000 | |
| bulkenrol-dev.up.education | 1970-01-01 00:00:00.000 | |
| byod-print.up.education | 2026-05-26 16:13:34.106 | |
| byod.up.education | 2026-05-26 11:16:03.290 | |
| elite.up.education | 1970-01-01 00:00:00.000 | |
| elite2.up.education | 1970-01-01 00:00:00.000 | |
| faceandbeauty.up.education | 1970-01-01 00:00:00.000 | |
| healthcareacademy2.up.education | 1970-01-01 00:00:00.000 | |
| info.up.education | 1970-01-01 00:00:00.000 | |
| internationalcollege.up.education | 1970-01-01 00:00:00.000 | |
| nzcm.up.education | 1970-01-01 00:00:00.000 | |
| nzcm2.up.education | 1970-01-01 00:00:00.000 | |
| nztertiarycollege.up.education | 1970-01-01 00:00:00.000 | |
| payment-test.up.education | 1970-01-01 00:00:00.000 | |
| printers.up.education | 2026-05-26 11:16:03.290 | |
| soe.up.education | 1970-01-01 00:00:00.000 | |
| soe2.up.education | 1970-01-01 00:00:00.000 | |
| studentservices-dev.up.education | 1970-01-01 00:00:00.000 | |
| swinburne2.up.education | 1970-01-01 00:00:00.000 | |
| test.bulk.enrol.up.education | 1970-01-01 00:00:00.000 | |
| up.education | 2026-06-14 23:37:38.836 | |
| utas.up.education | 1970-01-01 00:00:00.000 | |
| utas2.up.education | 1970-01-01 00:00:00.000 | |
| vocational.up.education | 2026-07-28 01:29:26.112 | |
| wgtn2.up.education | 1970-01-01 00:00:00.000 | |
| wgtn3.up.education | 1970-01-01 00:00:00.000 | |
| www-test.up.education | 1970-01-01 00:00:00.000 | |
| www.aut.up.education | 1970-01-01 00:00:00.000 | |
| www.utas.up.education | 1970-01-01 00:00:00.000 |
Tech Stack
Tech detection pending
Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.
TLS Certificates
IPs Citing This Domain
No citing IPs found yet
As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.
Origin / IP-Leak
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
| Origin IP | Origin ASN | CDN ASN | Confidence | Reasoning |
|---|---|---|---|---|
| 202.74.220.99 | AS45177 | AS8075 | 95% | cert f9c6385c… served by 202.74.220.99 (AS45177) carries SAN up.education which currently resolves through Microsoft (AS8075) at 13.70.72.34 |
Threat Intelligence
Domain threat-intel pending
Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.
History
Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.
| Type | Value | First seen | Last seen |
|---|---|---|---|
| TXT | AHpMycaww00Cz23cBnauvyJ8csH/kYsifE2zWz7GHJzrA6GHgLXPOukarZXi2gRROFPaA4pA4bviNAAdcZQH/g== | 2026-05-26 16:13:34.106 | 2026-06-14 23:37:38.836 |
| NS | ns2-09.azure-dns.net | 2026-05-26 16:13:34.106 | 2026-06-14 23:37:38.836 |
| NS | ns4-09.azure-dns.info | 2026-05-26 16:13:34.106 | 2026-06-14 23:37:38.836 |
| TXT | openai-domain-verification=dv-yf0zq5FChO6nBhIXtV1DHzBL | 2026-05-26 16:13:34.106 | 2026-06-14 23:37:38.836 |
| TXT | autodesk-domain-verification=MnyQ4KjOdcsBVfemmYcU | 2026-05-26 16:13:34.106 | 2026-06-14 23:37:38.836 |
| TXT | synthesia-domain-verification-50hswx=wNygO0vj0rDszchfVIbOGAdl3 | 2026-05-26 16:13:34.106 | 2026-06-14 23:37:38.836 |
| TXT | v=spf1 include:mailgun.org include:spf.protection.outlook.com include:_spf.mlsend.com include:amazonses.com include:mail.zendesk.com ip4:203.30.138.246 include:spf1.up.education include:spf2.up.education -all | 2026-05-26 16:13:34.106 | 2026-06-14 23:37:38.836 |
| TXT | cursor-domain-verification-9pcha5=mHrwl24wXSpOntcwyFN3iqWBR | 2026-05-26 16:13:34.106 | 2026-06-14 23:37:38.836 |
| MX | 10 up-education.mail.protection.outlook.com | 2026-05-26 16:13:34.106 | 2026-06-14 23:37:38.836 |
| A | 13.70.72.34 | 2026-05-26 16:13:34.106 | 2026-06-14 23:37:38.836 |
| NS | ns3-09.azure-dns.org | 2026-05-26 16:13:34.106 | 2026-06-14 23:37:38.836 |
| TXT | miro-verification=f6ed140d6ded6b54265bda320084a2aa66ce64a6 | 2026-05-26 16:13:34.106 | 2026-06-14 23:37:38.836 |
| TXT | atlassian-domain-verification=9X2FWijPtBbBCWHorNP3ikwQlOikPIJxGgzRucSkT1zTC6ii4zBmnBK0KgaZxYNZ | 2026-05-26 16:13:34.106 | 2026-06-14 23:37:38.836 |
| TXT | ZOOM_verify_c7keX1blD3r4Q9p8K6Ed4J | 2026-05-26 16:13:34.106 | 2026-06-14 23:37:38.836 |
| SRV | _sipfederationtls._tcp 100 1 5061 sipfed.online.lync.com | 2026-05-26 16:13:34.106 | 2026-06-14 23:37:38.836 |
| NS | ns1-09.azure-dns.com | 2026-05-26 16:13:34.106 | 2026-06-14 23:37:38.836 |
| TXT | apple-domain-verification=G0M8AHaRVbawU9Bm | 2026-05-26 16:13:34.106 | 2026-06-14 23:37:38.836 |