Domain
dirtt.com
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of dirtt.com
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
Hosting IPs
—
A/AAAA targets
Subdomains
—
CT + scan + body
Record Types
—
seen in DNS
Observed Certs
—
in our scans
DNS Records
A
18.64.211.45, 18.64.211.47, 18.64.211.56, 18.64.211.63
AAAA
2600:9000:20a2:1800:15:e8b9:c00:93a1, 2600:9000:20a2:1c00:15:e8b9:c00:93a1, 2600:9000:20a2:4800:15:e8b9:c00:93a1, 2600:9000:20a2:5800:15:e8b9:c00:93a1, 2600:9000:20a2:6800:15:e8b9:c00:93a1, 2600:9000:20a2:7800:15:e8b9:c00:93a1, 2600:9000:20a2:b800:15:e8b9:c00:93a1, 2600:9000:20a2:c200:15:e8b9:c00:93a1
MX
10 us-smtp-inbound-1.mimecast.com, 20 us-smtp-inbound-2.mimecast.com, 5 mx0a-00adb502.pphosted.com, 6 mx0b-00adb502.pphosted.com
NS
edns4.ultradns.biz, edns4.ultradns.com, edns4.ultradns.net, edns4.ultradns.org
TXT
0ed1fe018a16ef6f7bf35740e69934e4a0f24b9ba4, 76itifi2q6ftmlsbruh1ghtmft, MS=ms20373097, NSp4PHLctObzANNmXcojBoEgfneAcc8L3YS6Fjsp4nK8pL0Dma+feEBuCIp5HcyfG06b39aod57ZIq+3PmE70Q==, OWd20p0qhMvEo5xWEpy1M6/YUC9xNUpsUpANDRn67pHnHB+RDOOzP9WFfFpISdRMP41BrXN83SZHuMkjy/liig==, ahrefs-site-verification_7b299b79a4804c0e65499eb3ca53276366b6d7bc4108f15cc995aa50afc6207a, anthropic-domain-verification-50ej2k=cDpFaZ9tBQ1eywL8ybbAxXXeR, apple-domain-verification=31X9nESQBsIN8vUG
CNAME
—
CAA
0 iodef "itsecurity@dirtt.com", 0 issue "amazon.com", 0 issue "digicert.com", 0 issue "globalsign.com", 0 issue "godaddy.com", 0 issue "letsencrypt.org", 0 issue "pki.goog", 0 issue "sectigo.com"
WHOIS / Registration
Registration data planned
Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.
Subdomains
Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.
| Subdomain | Resolves to | Last seen |
|---|---|---|
| dev-fedex-quote.dirtt.com | 2026-06-23 00:25:20.285 | |
| dirtt.com | 2026-06-19 06:51:59.833 | |
| dev.nexus.dirtt.com | 2026-06-14 23:37:38.836 | |
| nexus.dirtt.com | 2026-06-14 23:37:38.836 | |
| preprod.nexus.dirtt.com | 2026-06-14 23:37:38.836 | |
| qa.nexus.dirtt.com | 2026-06-14 23:37:38.836 | |
| webapps.dirtt.com | 2026-06-14 23:37:38.836 | |
| dev-splitter.api.dirtt.com | 2026-07-19 09:16:04.855 | |
| dev-update.api.dirtt.com | 2026-07-19 22:31:49.575 | |
| swarm.api.dirtt.com | 2026-06-03 20:11:53.631 | |
| dam.dirtt.com | 1970-01-01 00:00:00.000 | |
| dev-download-installers.api.dirtt.com | 1970-01-01 00:00:00.000 | |
| dev-swarm.api.dirtt.com | 1970-01-01 00:00:00.000 | |
| forge.api.dirtt.com | 1970-01-01 00:00:00.000 | |
| legal.dirtt.com | 2026-07-20 11:02:17.624 | |
| splitter.api.dirtt.com | 1970-01-01 00:00:00.000 | |
| staging-fedex-quote.dirtt.com | 1970-01-01 00:00:00.000 | |
| staging-ice-link.api.dirtt.com | 1970-01-01 00:00:00.000 | |
| staging-swarm.api.dirtt.com | 1970-01-01 00:00:00.000 | |
| staging-update.api.dirtt.com | 1970-01-01 00:00:00.000 | |
| www.nexus.dirtt.com | 1970-01-01 00:00:00.000 |
Tech Stack
Tech detection pending
Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.
TLS Certificates
Certificate observations pending
TLS certs naming this domain in subject or SANs will appear here as our scan-layer catches them.
IPs Citing This Domain
No citing IPs found yet
As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.
Origin / IP-Leak
USP
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
No origin-IP leaks detected (yet)
Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.
Threat Intelligence
Domain threat-intel pending
Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.
History
Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.
| Type | Value | First seen | Last seen |
|---|---|---|---|
| NS | edns4.ultradns.net | 2026-06-19 06:51:59.833 | 2026-06-19 06:51:59.833 |
| TXT | facebook-domain-verification=7i6cn8ddfpdt72iz9dpznvphcwwai7 | 2026-06-19 06:51:59.833 | 2026-06-19 06:51:59.833 |
| TXT | autodesk-domain-verification=w0wtKBQHYZvA1ddWe93K | 2026-06-19 06:51:59.833 | 2026-06-19 06:51:59.833 |
| TXT | apple-domain-verification=31X9nESQBsIN8vUG | 2026-06-19 06:51:59.833 | 2026-06-19 06:51:59.833 |
| AAAA | 2600:9000:20a2:6800:15:e8b9:c00:93a1 | 2026-06-19 06:51:59.833 | 2026-06-19 06:51:59.833 |
| CAA | 0 issue "sectigo.com" | 2026-06-19 06:51:59.833 | 2026-06-19 06:51:59.833 |
| A | 18.64.211.45 | 2026-06-19 06:51:59.833 | 2026-06-19 06:51:59.833 |
| A | 18.64.211.63 | 2026-06-19 06:51:59.833 | 2026-06-19 06:51:59.833 |
| AAAA | 2600:9000:20a2:7800:15:e8b9:c00:93a1 | 2026-06-19 06:51:59.833 | 2026-06-19 06:51:59.833 |
| NS | edns4.ultradns.com | 2026-06-19 06:51:59.833 | 2026-06-19 06:51:59.833 |
| MX | 20 us-smtp-inbound-2.mimecast.com | 2026-06-19 06:51:59.833 | 2026-06-19 06:51:59.833 |
| AAAA | 2600:9000:20a2:c200:15:e8b9:c00:93a1 | 2026-06-19 06:51:59.833 | 2026-06-19 06:51:59.833 |
| TXT | oscs3arvbfeevbrvro4lbuil39 | 2026-06-19 06:51:59.833 | 2026-06-19 06:51:59.833 |
| TXT | MS=ms20373097 | 2026-06-19 06:51:59.833 | 2026-06-19 06:51:59.833 |
| TXT | 76itifi2q6ftmlsbruh1ghtmft | 2026-06-19 06:51:59.833 | 2026-06-19 06:51:59.833 |
| NS | edns4.ultradns.biz | 2026-06-19 06:51:59.833 | 2026-06-19 06:51:59.833 |
| NS | edns4.ultradns.org | 2026-06-19 06:51:59.833 | 2026-06-19 06:51:59.833 |
| TXT | g7ualf59beqv7vuil1ntsf0h7g | 2026-06-19 06:51:59.833 | 2026-06-19 06:51:59.833 |
| TXT | t3fb1sb9pe7bl08bhv3k0ka1r0 | 2026-06-19 06:51:59.833 | 2026-06-19 06:51:59.833 |
| TXT | bd9c6c58-b71a-4497-9fe1-005101c01fae | 2026-06-19 06:51:59.833 | 2026-06-19 06:51:59.833 |
| TXT | v=spf1 include:alo9nauw._spf._d.mim.ec include:spf-00adb502.pphosted.com ~all | 2026-06-19 06:51:59.833 | 2026-06-19 06:51:59.833 |
| TXT | dhp12l84k5pi6oscq7ja2nlr6d | 2026-06-19 06:51:59.833 | 2026-06-19 06:51:59.833 |
| MX | 10 us-smtp-inbound-1.mimecast.com | 2026-06-19 06:51:59.833 | 2026-06-19 06:51:59.833 |
| MX | 5 mx0a-00adb502.pphosted.com | 2026-06-19 06:51:59.833 | 2026-06-19 06:51:59.833 |
| CAA | 0 issue "amazon.com" | 2026-06-19 06:51:59.833 | 2026-06-19 06:51:59.833 |
| TXT | docusign=6eb10ca5-eca8-4030-8378-ded3ff64f8db | 2026-06-19 06:51:59.833 | 2026-06-19 06:51:59.833 |
| TXT | autodesk-domain-verification=stI8kjhHgD6SK4avNTVQ | 2026-06-19 06:51:59.833 | 2026-06-19 06:51:59.833 |
| AAAA | 2600:9000:20a2:1c00:15:e8b9:c00:93a1 | 2026-06-19 06:51:59.833 | 2026-06-19 06:51:59.833 |
| CAA | 0 iodef "itsecurity@dirtt.com" | 2026-06-19 06:51:59.833 | 2026-06-19 06:51:59.833 |
| AAAA | 2600:9000:20a2:4800:15:e8b9:c00:93a1 | 2026-06-19 06:51:59.833 | 2026-06-19 06:51:59.833 |
| AAAA | 2600:9000:20a2:1800:15:e8b9:c00:93a1 | 2026-06-19 06:51:59.833 | 2026-06-19 06:51:59.833 |
| TXT | atlassian-domain-verification=6vb1EaWBWsJSAyONIWQaBACtXdthJ63O4FxMdRex/3djd994Pa06UxK4Qp1yR0UN | 2026-06-19 06:51:59.833 | 2026-06-19 06:51:59.833 |
| MX | 6 mx0b-00adb502.pphosted.com | 2026-06-19 06:51:59.833 | 2026-06-19 06:51:59.833 |
| TXT | ahrefs-site-verification_7b299b79a4804c0e65499eb3ca53276366b6d7bc4108f15cc995aa50afc6207a | 2026-06-19 06:51:59.833 | 2026-06-19 06:51:59.833 |
| TXT | anthropic-domain-verification-50ej2k=cDpFaZ9tBQ1eywL8ybbAxXXeR | 2026-06-19 06:51:59.833 | 2026-06-19 06:51:59.833 |
| AAAA | 2600:9000:20a2:b800:15:e8b9:c00:93a1 | 2026-06-19 06:51:59.833 | 2026-06-19 06:51:59.833 |
| CAA | 0 issue "digicert.com" | 2026-06-19 06:51:59.833 | 2026-06-19 06:51:59.833 |
| CAA | 0 issue "pki.goog" | 2026-06-19 06:51:59.833 | 2026-06-19 06:51:59.833 |
| A | 18.64.211.56 | 2026-06-19 06:51:59.833 | 2026-06-19 06:51:59.833 |
| AAAA | 2600:9000:20a2:5800:15:e8b9:c00:93a1 | 2026-06-19 06:51:59.833 | 2026-06-19 06:51:59.833 |
| TXT | ck0grhndnn60cqaru8b3qm5ttq | 2026-06-19 06:51:59.833 | 2026-06-19 06:51:59.833 |
| TXT | OWd20p0qhMvEo5xWEpy1M6/YUC9xNUpsUpANDRn67pHnHB+RDOOzP9WFfFpISdRMP41BrXN83SZHuMkjy/liig== | 2026-06-19 06:51:59.833 | 2026-06-19 06:51:59.833 |
| SRV | _sipfederationtls._tcp 100 1 5061 sipfed.online.lync.com | 2026-06-19 06:51:59.833 | 2026-06-19 06:51:59.833 |
| TXT | miro-verification=248b0c883c977742c7065bbbe6fb13a6c649c3ad | 2026-06-19 06:51:59.833 | 2026-06-19 06:51:59.833 |
| CAA | 0 issue "letsencrypt.org" | 2026-06-19 06:51:59.833 | 2026-06-19 06:51:59.833 |
| CAA | 0 issue "globalsign.com" | 2026-06-19 06:51:59.833 | 2026-06-19 06:51:59.833 |
| TXT | NSp4PHLctObzANNmXcojBoEgfneAcc8L3YS6Fjsp4nK8pL0Dma+feEBuCIp5HcyfG06b39aod57ZIq+3PmE70Q== | 2026-06-19 06:51:59.833 | 2026-06-19 06:51:59.833 |
| CAA | 0 issue "godaddy.com" | 2026-06-19 06:51:59.833 | 2026-06-19 06:51:59.833 |
| A | 18.64.211.47 | 2026-06-19 06:51:59.833 | 2026-06-19 06:51:59.833 |
| TXT | 0ed1fe018a16ef6f7bf35740e69934e4a0f24b9ba4 | 2026-06-19 06:51:59.833 | 2026-06-19 06:51:59.833 |