ups.com
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of ups.com
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
DNS Records
WHOIS / Registration
Registration data planned
Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.
Subdomains
Subdomain enumeration pending
Every subdomain ever issued a TLS cert under this apex — extracted from Certificate Transparency logs, our own scan observations and body references.
Tech Stack
Tech detection pending
Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.
TLS Certificates
IPs Citing This Domain
Hosts whose HTML body references this domain. Strong signal for origin/mirror/embed discovery.
Origin / IP-Leak
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
| Origin IP | Origin ASN | CDN ASN | Confidence | Reasoning |
|---|---|---|---|---|
| 175.99.112.223 | AS9924 | AS20940 | 95% | cert f833f1d6… served by 175.99.112.223 (AS9924) carries SAN onlinetools.ups.com which currently resolves through Akamai (AS20940) at 104.85.1.63, 2600:1408:c400:989::aef, 2600:1408:c400:98c::aef, 2a02:26f0:1180:19f::aef |
| 115.146.117.48 | AS55818 | AS20940 | 95% | cert f833f1d6… served by 115.146.117.48 (AS55818) carries SAN onlinetools.ups.com which currently resolves through Akamai (AS20940) at 104.85.1.63, 2a02:26f0:1180:19f::aef, 2a02:26f0:1180:19b::aef, 184.30.157.16 |
| 115.146.117.48 | AS55818 | AS16625 | 95% | cert f833f1d6… served by 115.146.117.48 (AS55818) carries SAN onlinetoolsuat.ups.com which currently resolves through Akamai (AS16625) at 23.222.200.252, 2a02:26f0:480:59b::aef, 2a02:26f0:480:5a3::aef, 2a02:26f0:1180:19f::aef |
| 23.200.130.98 | AS4775 | AS20940 | 95% | cert eee81f35… served by 23.200.130.98 (AS4775) carries SAN billpay.ups.com which currently resolves through Akamai (AS20940) at 2a02:26f0:1180:19c::353a, 2a02:26f0:1180:183::353a, 104.85.1.159, 2600:1408:c400:391::353a |
| 23.200.130.98 | AS4775 | AS16625 | 95% | cert eee81f35… served by 23.200.130.98 (AS4775) carries SAN assets.ups.com which currently resolves through Akamai (AS16625) at 23.221.254.31, 2a02:26f0:1180:183::353a, 2a02:26f0:1180:19c::353a, 104.85.1.159 |
| 23.192.97.6 | AS9498 | AS20940 | 95% | cert f833f1d6… served by 23.192.97.6 (AS9498) carries SAN onlinetools.ups.com which currently resolves through Akamai (AS20940) at 104.85.1.63, 2a02:26f0:1180:19f::aef, 2a02:26f0:1180:19b::aef, 184.30.157.16 |
| 115.146.118.94 | AS55818 | AS20940 | 95% | cert eee81f35… served by 115.146.118.94 (AS55818) carries SAN billpay.ups.com which currently resolves through Akamai (AS20940) at 2a02:26f0:1180:183::353a, 23.210.18.98, 2a02:26f0:1180:19c::353a, 104.85.1.159 |
| 115.146.118.94 | AS55818 | AS16625 | 95% | cert eee81f35… served by 115.146.118.94 (AS55818) carries SAN assets.ups.com which currently resolves through Akamai (AS16625) at 184.30.158.65, 2a02:26f0:1180:183::353a, 2a02:26f0:1180:19c::353a, 104.85.1.159 |
| 23.40.253.103 | AS9299 | AS20940 | 95% | cert 403670ff… served by 23.40.253.103 (AS9299) carries SAN assets.ups.com which currently resolves through Akamai (AS20940) at 104.85.1.159, 2a02:26f0:1180:183::353a, 2a02:26f0:1180:19c::353a, 2a02:26f0:dc:380::353a |
| 23.40.253.103 | AS9299 | AS13335 | 95% | cert 403670ff… served by 23.40.253.103 (AS9299) carries SAN solutions.ups.com which currently resolves through Cloudflare (AS13335) at 104.17.71.206, 104.17.70.206, 104.17.74.206, 104.17.73.206 |
| 23.40.253.103 | AS9299 | AS16625 | 95% | cert 403670ff… served by 23.40.253.103 (AS9299) carries SAN exporttoolkit.ups.com which currently resolves through Akamai (AS16625) at 23.209.58.58, 2a02:26f0:480:58e::37c9, 2a02:26f0:480:59f::37c9, 104.85.1.81 |
| 104.88.157.62 | AS577 | AS16625 | 95% | cert 403670ff… served by 104.88.157.62 (AS577) carries SAN campusship.ups.com which currently resolves through Akamai (AS16625) at 2.23.246.96, 2600:1408:ec00:28b::353a, 2600:1408:ec00:298::353a, 104.85.1.159 |
| 104.88.157.62 | AS577 | AS20940 | 95% | cert 403670ff… served by 104.88.157.62 (AS577) carries SAN assets.ups.com which currently resolves through Akamai (AS20940) at 104.85.1.159, 2a02:26f0:1180:183::353a, 2a02:26f0:1180:19c::353a, 2.23.246.96 |
| 104.88.157.62 | AS577 | AS13335 | 95% | cert 403670ff… served by 104.88.157.62 (AS577) carries SAN solutions.ups.com which currently resolves through Cloudflare (AS13335) at 104.17.71.206, 104.17.70.206, 104.17.74.206, 104.17.73.206 |
| 212.55.190.81 | AS12849 | AS20940 | 95% | cert 403670ff… served by 212.55.190.81 (AS12849) carries SAN billpay.ups.com which currently resolves through Akamai (AS20940) at 104.85.1.159, 2a02:26f0:1180:183::353a, 2a02:26f0:1180:19c::353a, 2.23.246.96 |
| 212.55.190.81 | AS12849 | AS16625 | 95% | cert 403670ff… served by 212.55.190.81 (AS12849) carries SAN assets.ups.com which currently resolves through Akamai (AS16625) at 23.222.126.44, 2a02:26f0:1180:183::353a, 2a02:26f0:1180:19c::353a, 104.85.1.159 |
| 212.55.190.81 | AS12849 | AS13335 | 95% | cert 403670ff… served by 212.55.190.81 (AS12849) carries SAN solutions.ups.com which currently resolves through Cloudflare (AS13335) at 104.17.71.206, 104.17.70.206, 104.17.74.206, 104.17.73.206 |
| 23.53.213.25 | AS45899 | AS20940 | 95% | cert f833f1d6… served by 23.53.213.25 (AS45899) carries SAN onlinetools.ups.com which currently resolves through Akamai (AS20940) at 104.85.1.63, 2a02:26f0:1180:19b::aef, 2a02:26f0:1180:19f::aef, 184.30.157.16 |
| 184.84.161.132 | AS7545 | AS20940 | 95% | cert 403670ff… served by 184.84.161.132 (AS7545) carries SAN assets.ups.com which currently resolves through Akamai (AS20940) at 104.85.1.159, 2a02:26f0:1180:183::353a, 2a02:26f0:1180:19c::353a, 2.23.246.96 |
| 184.84.161.132 | AS7545 | AS13335 | 95% | cert 403670ff… served by 184.84.161.132 (AS7545) carries SAN solutions.ups.com which currently resolves through Cloudflare (AS13335) at 104.17.71.206, 104.17.70.206, 104.17.74.206, 104.17.73.206 |
| 184.84.161.132 | AS7545 | AS16625 | 95% | cert 403670ff… served by 184.84.161.132 (AS7545) carries SAN billpay.ups.com which currently resolves through Akamai (AS16625) at 23.56.210.88, 2a02:26f0:1180:183::353a, 2a02:26f0:1180:19c::353a, 104.85.1.159 |
| 139.175.166.93 | AS4780 | AS16625 | 95% | cert eee81f35… served by 139.175.166.93 (AS4780) carries SAN www.apps.ups.com which currently resolves through Akamai (AS16625) at 184.30.157.167, 104.85.1.81 |
| 139.175.166.93 | AS4780 | AS20940 | 95% | cert eee81f35… served by 139.175.166.93 (AS4780) carries SAN assets.ups.com which currently resolves through Akamai (AS20940) at 104.85.1.159, 2a02:26f0:1180:183::353a, 2a02:26f0:1180:19c::353a, 2.23.246.96 |
| 171.236.61.27 | AS7552 | AS16625 | 95% | cert f833f1d6… served by 171.236.61.27 (AS7552) carries SAN onlinetools.ups.com which currently resolves through Akamai (AS16625) at 184.30.157.16, 2a02:26f0:1180:19b::aef, 2a02:26f0:1180:19f::aef, 2600:141b:1c00:27a3::aef |
| 23.208.64.219 | AS9498 | AS20940 | 95% | cert f833f1d6… served by 23.208.64.219 (AS9498) carries SAN onlinetools.ups.com which currently resolves through Akamai (AS20940) at 104.85.1.63, 2a02:26f0:1180:19b::aef, 2a02:26f0:1180:19f::aef, 23.34.125.19 |
Threat Intelligence
Domain threat-intel pending
Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.
History
Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.
| Type | Value | First seen | Last seen |
|---|---|---|---|
| TXT | ms-domain-verification=80c37544-9962-4dd8-8bf1-06ea029a5e1b | 2026-05-31 06:29:40.814 | 2026-07-24 13:45:01.874 |
| TXT | _rydlwrwlr54u9u772rfeonu2s6ptkou | 2026-05-31 06:29:40.814 | 2026-07-24 13:45:01.874 |
| TXT | docusign=22f44e31-1d36-4570-85e3-f80bebf73583 | 2026-05-31 06:29:40.814 | 2026-07-24 13:45:01.874 |
| MX | 10 mxb-002b8001.gslb.pphosted.com | 2026-05-31 06:29:40.814 | 2026-07-24 13:45:01.874 |
| TXT | unity-sso-verification=bbc1ce19-da05-4eb6-b261-673b0a7d17b3 | 2026-05-31 06:29:40.814 | 2026-07-24 13:45:01.874 |
| NS | nsb.ups.com | 2026-05-31 06:29:40.814 | 2026-07-24 13:45:01.874 |
| TXT | postman-domain-verification=b3daf24645d4a3a9a800b43265ead7ff38254b1facc357e3e3399321fcc10737cbfff3206ff8299c770e3ee795953355966498445792e26413f98d8d938a1c49 | 2026-05-31 06:29:40.814 | 2026-07-24 13:45:01.874 |
| TXT | onetrust-domain-verification=a72ec7481ed44f258ff6a26c7d39ec29 | 2026-05-31 06:29:40.814 | 2026-07-24 13:45:01.874 |
| CAA | 128 issue "ica.cz" | 2026-05-31 06:29:40.814 | 2026-07-24 13:45:01.874 |
| TXT | wPLi4qnnaEKeqRySYuFzWZw8p1H87l3LBJwHQJo+/qiD93TE/IsBr9rO/UI89488KEvWgwXs5j/8vjvXvP2NBQ== | 2026-05-31 06:29:40.814 | 2026-07-24 13:45:01.874 |
| A | 153.2.228.130 | 2026-05-31 06:29:40.814 | 2026-07-24 13:45:01.874 |
| TXT | _p81wgziq3en9j1y08bgl22enp2zxtja | 2026-05-31 06:29:40.814 | 2026-07-24 13:45:01.874 |
| TXT | onetrust-domain-verification=ca76068e041d442dabdc2eb32bda9440 | 2026-05-31 06:29:40.814 | 2026-07-24 13:45:01.874 |
| TXT | globalsign-domain-verification=59f05bd80057c98bf0a778055999d8e2 | 2026-05-31 06:29:40.814 | 2026-07-24 13:45:01.874 |
| TXT | wiz-domain-verification=be49a81b664f5e86a985ef6fc12c2f48f155f9ff2b24602666069347859a6e1e | 2026-05-31 06:29:40.814 | 2026-07-24 13:45:01.874 |
| TXT | apple-domain-verification=edIJCYjoGulFOG0z | 2026-05-31 06:29:40.814 | 2026-07-24 13:45:01.874 |
| MX | 10 mxa-002b8001.gslb.pphosted.com | 2026-05-31 06:29:40.814 | 2026-07-24 13:45:01.874 |
| CAA | 128 issue "digicert.com" | 2026-05-31 06:29:40.814 | 2026-07-24 13:45:01.874 |
| A | 153.2.224.130 | 2026-05-31 06:29:40.814 | 2026-07-24 13:45:01.874 |
| TXT | smartsheet-site-validation=3y1yM9Y8zl3Zpj3gXBHCwLmiOaRpheST | 2026-05-31 06:29:40.814 | 2026-07-24 13:45:01.874 |
| TXT | canva-site-verification=0t2T76468Fz8XdjfppeuCA | 2026-05-31 06:29:40.814 | 2026-07-24 13:45:01.874 |
| TXT | docusign=c4f64023-709f-42ad-b67a-ef340b6ee64e | 2026-05-31 06:29:40.814 | 2026-07-24 13:45:01.874 |
| CAA | 128 issue "globalsign.com" | 2026-05-31 06:29:40.814 | 2026-07-24 13:45:01.874 |
| TXT | adobe-idp-site-verification=eef08e93-4fdf-4906-a2e7-ac21e5d6e7be | 2026-05-31 06:29:40.814 | 2026-07-24 13:45:01.874 |
| TXT | jamf-site-verification=hw8-VnJi2jXZlB8d_Ycx3A | 2026-05-31 06:29:40.814 | 2026-07-24 13:45:01.874 |
| TXT | google-site-verification=Ql2LZ5Cjd3SbzB_fnwvH8Aa7ycNDWIMrnDk_fGxqElo | 2026-05-31 06:29:40.814 | 2026-07-24 13:45:01.874 |
| TXT | cisco-ci-domain-verification=4cee9d0ed8d9970a23624898d87e2a01b9e48b154d568878bb0f7a5824192a04 | 2026-05-31 06:29:40.814 | 2026-07-24 13:45:01.874 |
| NS | cmtu.mt.ns.els-gms.att.net | 2026-05-31 06:29:40.814 | 2026-07-24 13:45:01.874 |
| TXT | google-site-verification=wjCOQ4ZX-dXduhHgn7A_BORRu-m4uE7UaF-8WrLTDwg | 2026-05-31 06:29:40.814 | 2026-07-24 13:45:01.874 |
| TXT | docusign=6ba49f2d-39c3-4314-9d71-effdc9bd2256 | 2026-05-31 06:29:40.814 | 2026-07-24 13:45:01.874 |
| NS | auth2.dns.cogentco.com | 2026-05-31 06:29:40.814 | 2026-07-24 13:45:01.874 |
| TXT | google-site-verification=9463fifxtUPXABeIJw2wUUmoIgqt9HTbadpS54HHuu4 | 2026-05-31 06:29:40.814 | 2026-07-24 13:45:01.874 |
| TXT | docusign=d4cfe06f-650e-4c4c-a946-acaaacb806ab | 2026-05-31 06:29:40.814 | 2026-07-24 13:45:01.874 |
| NS | nsa.ups.com | 2026-05-31 06:29:40.814 | 2026-07-24 13:45:01.874 |
| TXT | h1-domain-verification=UGPvQeXGCssoY6xN93tCEsSTLLFQAyLnasVUvrr5nnUMpHi6 | 2026-05-31 06:29:40.814 | 2026-07-24 13:45:01.874 |
| SRV | _sipfederationtls._tcp 0 0 5061 sipfed.online.lync.com | 2026-05-31 06:29:40.814 | 2026-07-24 13:45:01.874 |
| TXT | Dynatrace-site-verification=6804e173-b6f7-434a-9911-d4785de89104__jkn9ikqla8c2cmf8a2741f8mbm | 2026-05-31 06:29:40.814 | 2026-07-24 13:45:01.874 |
| TXT | omnissa-connect-verification-fe419b26-eeb6-47f5-ba4b-1aff2e77c373 | 2026-05-31 06:29:40.814 | 2026-07-24 13:45:01.874 |
| TXT | v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com include:spf-002b8001.pphosted.com include:spf-002b8002.pphosted.com include:spf-002b8003.pphosted.com include:spf-002b8004.pphosted.com -all | 2026-05-31 06:29:40.814 | 2026-07-24 13:45:01.874 |
| TXT | Dynatrace-site-verification=6c7493f5-c875-49a2-b56a-7d444ceabfd5__3mv8veqcrv2adtrqj9cjqesrbi | 2026-05-31 06:29:40.814 | 2026-07-24 13:45:01.874 |
| NS | cbru.br.ns.els-gms.att.net | 2026-05-31 06:29:40.814 | 2026-07-24 13:45:01.874 |
| TXT | pendo-domain-verification=yZLjrrOQ9UdildMdEUAwGAjIWeE | 2026-05-31 06:29:40.814 | 2026-07-24 13:45:01.874 |
| TXT | globalsign-domain-verification=e7f81fe8aa411bfe441765ebffb8b397 | 2026-05-31 06:29:40.814 | 2026-07-24 13:45:01.874 |
| NS | auth1.dns.cogentco.com | 2026-05-31 06:29:40.814 | 2026-07-24 13:45:01.874 |
| CAA | 128 issue "sectigo.com" | 2026-06-15 15:31:37.028 | 2026-07-24 13:45:01.874 |
| TXT | cursor-domain-verification-5ste0z=9ydNYa0ZYgeK18m6isp3LRfQn | 2026-06-15 15:31:37.028 | 2026-07-24 13:45:01.874 |
| TXT | globalsign-domain-verification=o_rYP25V4fPfqOIJK_jAWgqTa6eAzMQpU0BiIQ-ocz | 2026-06-18 20:08:37.450 | 2026-07-24 13:45:01.874 |