Domain
replit.com
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of replit.com
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
Hosting IPs
50
A/AAAA targets
Subdomains
115
CT + scan + body
Record Types
6
seen in DNS
Observed Certs
15
in our scans
DNS Records
A
104.18.35.46, 172.64.152.210
AAAA
2606:4700:4401::ac40:98d2, 2a06:98c1:3100::6812:232e, 2a06:98c1:3104::6812:232e, 2a06:98c1:310d::ac40:98d2
MX
1 aspmx.l.google.com, 10 alt3.aspmx.l.google.com, 10 alt4.aspmx.l.google.com, 5 alt1.aspmx.l.google.com, 5 alt2.aspmx.l.google.com
NS
cody.ns.cloudflare.com, ivy.ns.cloudflare.com
TXT
0884E3BE55, DirectFedAuthUrl=https://replit.okta.com/app/replit_azureadsso_1/exksx5wamp7rEh3nr697/sso/saml, MS=ms35422583, apple-domain-verification=uLsMFHVul7j71UcF, cursor-domain-verification-edemj4=2gX336i5tvTBZZIwgVt3ZRSvw, google-site-verification=2eFj2PUq8oNwVoyk1ey4IihGeHWH8NM47UTqPme4tjY, google-site-verification=4KBO_7NbQUjkLK0AQn_XpOcjLctZCNM77_mhfMhK8I4, google-site-verification=695zd6IMIHv3Z4CwSjfDB0UhQijU-jAXeK_S_qZORpQ
CNAME
—
CAA
—
WHOIS / Registration
Registration data planned
Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.
Subdomains
Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.
Tech Stack
Tech detection pending
Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.
TLS Certificates
Subject: agent-eval.replit.com
Issuer: WR3
SANs: agent-eval.replit.com
Subject: chateau.everpure-usw1.platform-everpure.replit.com
Issuer: YR1
SANs: chateau.everpure-usw1.platform-everpure.replit.com
Subject: modelfarm.us-east1.platform.replit.com
Issuer: WR3
SANs: modelfarm.us-east1.platform.replit.com
Subject: chateau.vista-usc1.platform-vista.replit.com
Issuer: YR2
SANs: chateau.vista-usc1.platform-vista.replit.com
Subject: zipper.kirk.platform.replit.com
Issuer: WR3
SANs: zipper.kirk.platform.replit.com
Subject: zipper.mark.platform-replit.replit.com
Issuer: WR3
SANs: zipper.mark.platform-replit.replit.com
Subject: zipper.accelerant-usc1.platform-accelerant.replit.com
Issuer: WR3
SANs: zipper.accelerant-usc1.platform-accelerant.replit.com
Subject: taskman.spock.platform.replit.com
Issuer: YR2
SANs: taskman.spock.platform.replit.com
Subject: chateau.rp-replit-usc1.platform-rp-replit.replit.com
Issuer: YR2
SANs: chateau.rp-replit-usc1.platform-rp-replit.replit.com
Subject: taskman.archer.platform.replit.com
Issuer: YR1
SANs: taskman.archer.platform.replit.com
Subject: zipper.sisko.platform.replit.com
Issuer: WR3
SANs: zipper.sisko.platform.replit.com
Subject: chateau.archer.platform.replit.com
Issuer: R13
SANs: chateau.archer.platform.replit.com
Subject: eval2.ukg-usc1.platform-ukg.replit.com
Issuer: WR3
SANs: eval2.ukg-usc1.platform-ukg.replit.com
Subject: taskman.youlend-euw1.platform-youlend.replit.com
Issuer: YR2
SANs: taskman.youlend-euw1.platform-youlend.replit.com
Subject: chateau.mark.platform-replit.replit.com
Issuer: R13
SANs: chateau.mark.platform-replit.replit.com
Subject: taskman.okta-usw1.platform-okta.replit.com
Issuer: YR1
SANs: taskman.okta-usw1.platform-okta.replit.com
Subject: NrocServerProxy
Issuer: NrocProxy
SANs: *.1min.ai, *.chatbotapp.ai, *.oaiusercontent.com, *.sharepoint.com, 1min.ai, account.topazlabs.com, account.voicemod.net, af.articleforge.com, ai-writer.com, ai.egain.cloud, ai.invideo.io, aichatapp.ai, aihumanize.io, ailessonplan.com, aipoemgenerator.org, aiwritingpal.com, allenai.org, api.anthropic.com, api.business.githubcopilot.com, api2.cursor.sh, app-eu1.hubspot.com, app-na1.hubspotdocuments.com, app.attio.com, app.beehiiv.com, app.boords.com, app.botpress.cloud, app.chat360.io, app.chatbot.com, app.chatling.ai, app.copilotly.com, app.copy.ai, app.fastbots.ai, app.fireflies.ai, app.fyxer.com, app.glean.com, app.gokite.ai, app.grammarly.com, app.heygen.com, app.hubspot.com, app.instantly.ai, app.iokoo.co, app.jasper.ai, app.jinnify.ai, app.klingai.com, app.koah.ai, app.leonardo.ai, app.manychat.com, app.napkin.ai, app.neuroflash.com, app.otterly.ai, app.quickchat.ai, app.raffle.ai, app.read.ai, app.snoooz.ai, app.speechify.com, app.synthesia.io, app.taplio.com, app.transpond.io, app.uizard.io, app.wonderchat.io, app.wordplay.ai, app.wordtune.com, app.writecream.com, app.writeme.ai, app.writer.com, app.writerx.co, app.writesonic.com, app.zomani.ai, archie-app.8base.com, archie.8base.com, arena.ai, articlefiesta.com, artlist.io, askaichat.app, async.com, attio.com, bearly.ai, beyondwords.io, bolt.new, boords.com, botpress.com, bottalk.io, brainly.com, bubble.io, build.fillout.com, character.ai, chat.aichatapp.ai, chat.chatbot.app, chat.chaton.ai, chat.deepseek.com, chat.mistral.ai, chat.qwen.ai, chat.webllm.ai, chatbot.app, chatbotapp.ai, chatgpt.com, chatjimmy.ai, chatling.ai, chaton.ai, chatty.net, chatx.ai, claude.ai, clawbot.ai, clip.opus.pro, cloud.yellow.ai, coda.grammarly.com, codepal.ai, console.groq.com, copilot.cloud.microsoft, copilot.microsoft.com, copymonkey.ai, creator.voiceflow.com, dashboard.browse.ai, dashboard.gptforwork.com, dashboard.mintlify.com, dashboard.scale.com, dashboard.searchatlas.com, decisioninsights.ai, deevid.ai, deliciousai.com, designer.microsoft.com, docs.gokite.ai, docsbot.ai, dream-machine.lumalabs.ai, duck.ai, durable.com, edgeservices.bing.com, eightfold.ai, elevenlabs.io, eu.smith.langchain.com, eu1-app.outplayhq.com, fastbots.ai, fellow.ai, files.oaiusercontent.com, filmora.wondershare.com, fireflies.ai, firefly.adobe.com, forethought.ai, framer.com, gamma.app, gemini.google.com, gencraft.com, genny.lovo.ai, gliacloud.com, go.anyword.com, go.socrates.im, gokite.ai, gptexcel.uk, gptforwork.com, graph.microsoft.com, grok.com, grokipedia.com, groq.com, heygpt.chat, hpanel.hostinger.com, hub.yarnit.app, huggingface.co, imglarger.com, imgupscaler.com, instantly.ai, invideo.io, ivy.ai, jules.google.com, julius.ai, justdone.com, kaiber.ai, labs.google, leonardo.ai, lovable.dev, lovo.ai, lumalabs.ai, lumo.proton.me, m365.cloud.microsoft, manychat.com, meetami.ai, meetbetty.ai, mermaid.ai, metadata.io, mindtrip.ai, monica.im, my.writefull.com, nexverse.ai, notebooklm.google, notebooklm.google.com, notegpt.io, numerous.ai, ollama.com, openart.ai, openclaw.ai, openrouter.ai, otter.ai, otterly.ai, outlook.office.com, outplay.ai, panel.ai-writer.com, panel.tiledesk.com, picsart.com, platform.claude.com, platform.metadata.io, platform.thrads.ai, play.aidungeon.com, playground.allenai.org, push.clients6.google.com, quickchat.ai, quillbot.com, quiq.com, quizlet.com, raffle.ai, readalong.ai, replit.com, sales.meetami.ai, scale.com, scite.ai, searchatlas.com, sharepoint.com, shopcircle.co, sider.ai, slidebazaar.com, smilee.io, smith.langchain.com, smodin.io, snoooz.ai, socrates.im, solvely.ai, sourcegraph.com, sparkbase.ai, speechify.com, stablediffusionweb.com, studio.ai21.com, studio.wellsaidlabs.com, substrate.office.com, suno.ai, suno.com, sync.beatoven.ai, tactiq.io, taplio.com, tiledesk.com, toolkit.artlist.io, transpond.io, uizard.io, undetectable.ai, use.ai, vsco.co, warmer.ai, web.descript.com, webllm.mlc.ai, windsurf.com, wonderchat.io, wordplay.ai, workflos.ai, woxo.tech, writeme.ai, writer.com, writersbrew.app, writerx.co, writesonic.com, writier.io, ws.chatgpt.com, ws.readspeaker.com, www.3daistudio.com, www.acrolinx.com, www.admaster.cc, www.adventuregen.ai, www.ai21.com, www.aiisajoke.com, www.ailessonplan.com, www.aipoemgenerator.org, www.aiwritingpal.com, www.anyword.com, www.articleforge.com, www.ashbyhq.com, www.baidu.com, www.bearly.ai, www.beatoven.ai, www.beautiful.ai, www.beehiiv.com, www.beforesunset.ai, www.bettersynonyms.com, www.bingapis.com, www.bridged.media, www.browse.ai, www.cadent.com, www.canva.com, www.capcut.com, www.chat360.io, www.chatai.com, www.chatbot.com, www.chegg.com, www.cm.com, www.coframe.com, www.coloringbook.ai, www.commoninja.com, www.copilotly.com, www.copy.ai, www.coursehero.com, www.deepl.com, www.descript.com, www.digitalgenius.com, www.dola.com, www.doubao.com, www.egain.com, www.fillout.com, www.fotor.com, www.framer.com, www.freeconvert.com, www.freepik.com, www.fyxer.com, www.genspark.ai, www.getmerlin.in, www.getvera.ai, www.gokite.ai, www.grammarly.com, www.granola.ai, www.hostinger.com, www.humanizeai.pro, www.imglarger.com, www.jasper.ai, www.kaiber.ai, www.kimi.com, www.klaviyo.com, www.koahlabs.com, www.krikey.ai, www.labs.google, www.langchain.com, www.learnwise.ai, www.maxai.co, www.mermaidchart.com, www.midjourney.com, www.mintlify.com, www.monica.im, www.moonshot.ai, www.moonshot.cn, www.nexverse.ai, www.notion.so, www.octaneai.com, www.octocom.ai, www.ollama.com, www.opus.pro, www.otterly.ai, www.outrank.so, www.paradox.ai, www.pisano.com, www.pixa.com, www.quinta.im, www.rabbitholes.ai, www.read.ai, www.readspeaker.com, www.roomgpt.io, www.semrush.com, www.sharpennotes.com, www.shopbox.ai, www.smartling.com, www.suno.ai, www.synthesia.io, www.thrad.ai, www.tidio.com, www.topazlabs.com, www.veed.io, www.voiceflow.com, www.voicemod.net, www.vsco.co, www.wellsaid.io, www.wordtune.com, www.workmagic.io, www.writecream.com, www.writefull.com, www.yarnit.app, www.yeschat.ai, www.zeg.ai, www.zerogpt.com, www.zoovu.com, x.writefull.com, yellow.ai, zevbot.com, zomani.ai, zoovu.com
Subject: taskman.sisko.platform.replit.com
Issuer: YR1
SANs: taskman.sisko.platform.replit.com
Subject: chateau.riker.platform.replit.com
Issuer: R13
SANs: chateau.riker.platform.replit.com
Subject: chateau.pike.platform.replit.com
Issuer: R13
SANs: chateau.pike.platform.replit.com
Subject: chateau.visa-use4.platform-visa.replit.com
Issuer: YR2
SANs: chateau.visa-use4.platform-visa.replit.com
Subject: zipper.mark.platform-replit.replit.com
Issuer: WR3
SANs: zipper.mark.platform-replit.replit.com
Subject: eval.duolingo-usc1.platform-duolingo.replit.com
Issuer: WR3
SANs: eval.duolingo-usc1.platform-duolingo.replit.com
Subject: zipper.pike.platform.replit.com
Issuer: WR3
SANs: zipper.pike.platform.replit.com
Subject: zipper.riker.platform.replit.com
Issuer: WR3
SANs: zipper.riker.platform.replit.com
Subject: zipper.infra-staging.platform-infra-staging.replit.com
Issuer: WR3
SANs: zipper.infra-staging.platform-infra-staging.replit.com
Subject: eval2.worf.platform.replit.com
Issuer: WR3
SANs: eval2.worf.platform.replit.com
Subject: chateau.mark.platform-replit.replit.com
Issuer: R13
SANs: chateau.mark.platform-replit.replit.com
Subject: zipper.archer.platform.replit.com
Issuer: WR3
SANs: zipper.archer.platform.replit.com
IPs Citing This Domain
Hosts whose HTML body references this domain. Strong signal for origin/mirror/embed discovery.
76.22.122.3:80
href · ×28
64.46.102.245:443
href · ×16
87.106.4.9:443
href · ×8
146.56.249.109:443
href · ×5
119.28.25.237:443
href · ×4
43.165.177.202:8080
href · ×4
167.71.118.9:443
href · ×4
103.193.80.51:8888
href · ×4
135.181.157.148:443
href · ×4
104.168.62.101:443
href · ×3
47.79.226.18:443
href · ×3
143.244.142.212:443
href · ×2
136.111.95.114:443
href · ×2
5.75.229.153:80
href · ×2
34.198.6.41:80
href · ×2
43.129.50.70:443
href · ×2
34.95.79.199:80
href · ×2
139.59.3.178:443
href · ×2
34.86.209.231:80
href · ×2
65.109.230.3:443
href · ×2
54.157.160.126:80
href · ×2
52.209.212.55:80
href · ×2
192.144.14.51:443
href · ×2
100.49.70.243:80
href · ×2
56.228.22.105:443
href · ×2
96.235.178.188:80
href · ×2
44.226.89.38:80
href · ×2
74.208.197.180:443
href · ×2
3.11.115.126:80
href · ×2
108.132.41.37:80
href · ×2
83.228.225.129:443
href · ×2
124.158.178.34:443
href · ×2
104.238.234.63:443
href · ×2
45.77.120.194:443
href · ×2
3.84.228.108:80
href · ×2
118.89.145.65:443
href · ×2
3.11.20.44:80
href · ×2
54.39.213.233:80
href · ×2
167.172.44.219:5000
href · ×2
18.222.168.166:443
href · ×2
103.7.54.219:80
href · ×2
45.141.100.94:443
href · ×2
3.122.44.162:443
href · ×2
92.205.161.87:443
href · ×2
8.233.216.251:443
href · ×2
13.234.11.140:443
href · ×2
34.54.44.124:443
href · ×2
178.128.191.23:443
href · ×2
38.247.145.204:80
href · ×2
52.7.85.239:80
href · ×2
Origin / IP-Leak
USP
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
No origin-IP leaks detected (yet)
Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.
Threat Intelligence
Domain threat-intel pending
Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.
History
Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.
| Type | Value | First seen | Last seen |
|---|---|---|---|
| AAAA | 2a06:98c1:3100::6812:232e | 2026-05-25 21:56:50.553 | 2026-06-22 18:49:38.151 |
| A | 104.18.35.46 | 2026-05-25 21:56:50.553 | 2026-07-28 20:14:18.483 |
| A | 172.64.152.210 | 2026-05-25 21:56:50.553 | 2026-07-28 20:14:18.483 |
| AAAA | 2a06:98c1:310d::ac40:98d2 | 2026-05-25 21:56:50.553 | 2026-06-22 18:49:38.151 |
| TXT | google-site-verification=695zd6IMIHv3Z4CwSjfDB0UhQijU-jAXeK_S_qZORpQ | 2026-05-25 22:07:29.493 | 2026-07-28 20:14:18.483 |
| TXT | google-site-verification=O7YiuiIJWgGIWwKGeyve032q3H0snMblb9EvenRYvEQ | 2026-05-25 22:07:29.493 | 2026-07-28 20:14:18.483 |
| TXT | apple-domain-verification=uLsMFHVul7j71UcF | 2026-05-25 22:07:29.493 | 2026-07-28 20:14:18.483 |
| TXT | google-site-verification=XRdtkVX85bZp0qlmUCQZ_85dIpvTUl25mMKU93aCwBQ | 2026-05-25 22:07:29.493 | 2026-07-28 20:14:18.483 |
| TXT | cursor-domain-verification-edemj4=2gX336i5tvTBZZIwgVt3ZRSvw | 2026-05-25 22:07:29.493 | 2026-07-28 20:14:18.483 |
| TXT | google-site-verification=DP-fJzRwB9uUbocK3bPna9QHDG7mfafcJyQ5Va5VRmY | 2026-05-25 22:07:29.493 | 2026-07-28 20:14:18.483 |
| TXT | h1-domain-verification=uPVqQVG6FAUNrGb5KTmfyntNYiUjf9msCdhocPXaaB35W5vs | 2026-05-25 22:07:29.493 | 2026-07-28 20:14:18.483 |
| TXT | hubspot-developer-verification=YmYwYmMxNDYtYzlhZC00NDM2LWE2ZTYtZDQ1OGMwYzEyZDM5 | 2026-05-25 22:07:29.493 | 2026-07-28 20:14:18.483 |
| TXT | DirectFedAuthUrl=https://replit.okta.com/app/replit_azureadsso_1/exksx5wamp7rEh3nr697/sso/saml | 2026-05-25 22:07:29.493 | 2026-07-28 20:14:18.483 |
| TXT | v=spf1 include:%{i}._ip.%{h}._ehlo.%{d}._spf.vali.email include:mail.zendesk.com ~all | 2026-05-25 22:07:29.493 | 2026-07-28 20:14:18.483 |
| TXT | google-site-verification=RCbB6ZTTT6Hv2vlhCJC4Z3o7Mji1dEfwxpXjTDNpYs4 | 2026-05-25 22:07:29.493 | 2026-07-28 20:14:18.483 |
| TXT | google-site-verification=YOV7SAe0y6kDKaTl0XANhp6c5I2CwasyBU5iA9teS04 | 2026-05-25 22:07:29.493 | 2026-07-28 20:14:18.483 |
| TXT | google-site-verification=VV8iSdOlHFMvultKvCzfJdMusqPM4rkmMqqh6N6LfP4 | 2026-05-25 22:07:29.493 | 2026-07-28 20:14:18.483 |
| TXT | rippling-domain-verification=63fe8275bf4a543c | 2026-05-25 22:07:29.493 | 2026-07-28 20:14:18.483 |
| TXT | google-site-verification=NBYUJd8s1bJdUq9JvB8tMGgHQag15RK39-lIY4Jm_js | 2026-05-25 22:07:29.493 | 2026-07-28 20:14:18.483 |
| TXT | google-site-verification=EG3T6CJsNGzTLj3MCQcnCDUtxxAyuKzvvtXxye1qHvQ | 2026-05-25 22:07:29.493 | 2026-07-28 20:14:18.483 |
| TXT | hcp-domain-verification=cc2805a4fd6ecb57d086eb6300237ad6165ad0f7932f1abdd491d274e6bc6515 | 2026-05-25 22:07:29.493 | 2026-07-28 20:14:18.483 |
| MX | 5 alt2.aspmx.l.google.com | 2026-05-25 22:07:29.493 | 2026-07-28 20:14:18.483 |
| MX | 10 alt4.aspmx.l.google.com | 2026-05-25 22:07:29.493 | 2026-07-28 20:14:18.483 |
| TXT | google-site-verification=QTIsUwbJ4v14tyaeqz0ZXkEXXJK0JrsmmYbYPuWy9qM | 2026-05-25 22:07:29.493 | 2026-07-28 20:14:18.483 |
| NS | cody.ns.cloudflare.com | 2026-05-25 22:07:29.493 | 2026-07-28 20:14:18.483 |
| MX | 1 aspmx.l.google.com | 2026-05-25 22:07:29.493 | 2026-07-28 20:14:18.483 |
| TXT | 0884E3BE55 | 2026-05-25 22:07:29.493 | 2026-07-28 20:14:18.483 |
| TXT | google-site-verification=2eFj2PUq8oNwVoyk1ey4IihGeHWH8NM47UTqPme4tjY | 2026-05-25 22:07:29.493 | 2026-07-28 20:14:18.483 |
| TXT | google-site-verification=ACL5WW4yVfT2C-XydaDdX3t7T2KPRR8xdoGP1lGhY6M | 2026-05-25 22:07:29.493 | 2026-07-28 20:14:18.483 |
| MX | 5 alt1.aspmx.l.google.com | 2026-05-25 22:07:29.493 | 2026-07-28 20:14:18.483 |
| NS | ivy.ns.cloudflare.com | 2026-05-25 22:07:29.493 | 2026-07-28 20:14:18.483 |
| TXT | google-site-verification=JRQzX48NdytWPYVPNN896Lu-kGeLcPmFTuii9tXVML8 | 2026-05-25 22:07:29.493 | 2026-07-28 20:14:18.483 |
| MX | 10 alt3.aspmx.l.google.com | 2026-05-25 22:07:29.493 | 2026-07-28 20:14:18.483 |
| TXT | MS=ms35422583 | 2026-05-25 22:07:29.493 | 2026-07-28 20:14:18.483 |
| SRV | _sipfederationtls._tcp 100 1 5061 sipfed.online.lync.com | 2026-05-26 00:12:34.719 | 2026-07-28 20:14:18.483 |
| AAAA | 2a06:98c1:3104::6812:232e | 2026-06-22 19:49:34.157 | 2026-07-28 20:14:18.483 |
| AAAA | 2606:4700:4401::ac40:98d2 | 2026-06-22 19:49:34.157 | 2026-07-28 20:14:18.483 |
| TXT | google-site-verification=4KBO_7NbQUjkLK0AQn_XpOcjLctZCNM77_mhfMhK8I4 | 2026-07-23 20:41:55.542 | 2026-07-28 20:14:18.483 |