replit.com
Domain report: WHOIS, DNS, hosting, SSL and safety. Checked .
Online · 200SafeSSL: 38 days left15 years oldTranco #3717
85
replit.com was registered on 2 Sep 2011 via Nom-iq Ltd. dba COM LAUDE and the registry expiry is 2 Sep 2029. WHOIS data came from RDAP at https://rdap.verisign.com/com/v1/domain/replit.com.
replit.com publishes 2 nameservers. DNSSEC is not signed.
replit.com has 2 IPv4 addresses (104.18.35.46, 172.64.152.210) and 2 IPv6 addresses (2606:4700:4401::ac40:98d2, 2a06:98c1:3104::6812:232e). The geolocation database places 104.18.35.46 in Toronto, Canada.
The TLS certificate from WE1 is valid and has 38 days left (TLS 1.3). The homepage answered HTTP 200.
Tech detection named Cloudflare, Cloudflare Bot Management, Envoy, Express, HSTS, HTTP/3, Node.js, React, RxJS, Snowplow Analytics and hCaptcha. The fingerprints ran on the homepage that was already downloaded.
No safety warning was recorded for replit.com in the checks that ran.
Domain · RDAP/WHOIS
replit.com was registered on 2 Sep 2011 via Nom-iq Ltd. dba COM LAUDE. The registry returned 3 status values and 2 nameservers from https://rdap.verisign.com/com/v1/domain/replit.com.
| Registered | since 2 Sep 2011 |
|---|---|
| Created | 2 September 2011 |
| Updated | 22 September 2025 |
| Expires | 2 September 2029 |
| Registrar | Nom-iq Ltd. dba COM LAUDE |
| Status | client delete prohibited, client transfer prohibited, client update prohibited |
| Nameservers | cody.ns.cloudflare.com, ivy.ns.cloudflare.com |
| DNSSEC | no |
| Source | https://rdap.verisign.com/com/v1/domain/replit.com |
replit.com carries the status "client delete prohibited". The registrar has asked the registry to refuse a delete. This is an EPP status on the domain object. It does not say the website is safe, and it does not name the person who registered it.
replit.com carries the status "client transfer prohibited". The registrar has asked the registry to refuse a transfer to another registrar. The status is a lock on the domain object. It is not evidence about the content of the site.
replit.com carries the status "client update prohibited". The registrar has asked the registry to refuse updates to the domain object. Contact and nameserver changes wait until the lock is lifted by the registrar of record.
Nameserver cody.ns.cloudflare.com is published for replit.com in the registration record from https://rdap.verisign.com/com/v1/domain/replit.com.
Nameserver ivy.ns.cloudflare.com is published for replit.com in the registration record from https://rdap.verisign.com/com/v1/domain/replit.com.
DNS
replit.com has 4 address records, 5 mail exchangers and 2 nameservers, measured at 1.1.1.1:53.
| A | 104.18.35.46, 172.64.152.210 |
|---|---|
| AAAA | 2606:4700:4401::ac40:98d2, 2a06:98c1:3104::6812:232e |
| NS | cody.ns.cloudflare.com, ivy.ns.cloudflare.com |
| MX | aspmx.l.google.com (1) Google, alt1.aspmx.l.google.com (5) Google, alt2.aspmx.l.google.com (5) Google, alt3.aspmx.l.google.com (10) Google, alt4.aspmx.l.google.com (10) Google |
| SPF | absent |
| DMARC | present |
| CAA | — |
| Wildcard | off |
| DNSSEC | not signed |
| Resolver | 1.1.1.1:53 |
The DMARC text record at _dmarc.replit.com is "v=DMARC1; p=reject; rua=mailto:[email protected]; fo=1".
IPv4 address 104.18.35.46 answers for replit.com at resolver 1.1.1.1:53.
IPv4 address 172.64.152.210 answers for replit.com at resolver 1.1.1.1:53.
IPv6 address 2606:4700:4401::ac40:98d2 answers for replit.com at resolver 1.1.1.1:53.
IPv6 address 2a06:98c1:3104::6812:232e answers for replit.com at resolver 1.1.1.1:53.
Mail exchanger aspmx.l.google.com has preference 1. The host is recognised as Google.
Mail exchanger alt1.aspmx.l.google.com has preference 5. The host is recognised as Google.
Mail exchanger alt2.aspmx.l.google.com has preference 5. The host is recognised as Google.
Mail exchanger alt3.aspmx.l.google.com has preference 10. The host is recognised as Google.
Mail exchanger alt4.aspmx.l.google.com has preference 10. The host is recognised as Google.
Hosting and geo
replit.com is placed in Toronto, Canada by the local geolocation database (db-ip).
| Address | 104.18.35.46 |
|---|---|
| Country | Canada |
| City | Toronto |
| Source | db-ip |
SSL/TLS
The certificate for replit.com is valid, with 38 days left and 2 subject alternative names. Source: tls:443.
| Issuer | WE1 |
|---|---|
| Subject | replit.com |
| Valid from | 10 September 2026 |
| Valid until | 9 December 2026 |
| Days left | 38 |
| SAN count | 2 |
| Protocol | TLS 1.3 |
| Source | tls:443 |
Subject alternative names: *.replit.com, replit.com.
Tech stack
Tech detection checked the fetched homepage and named 11 products. Source: wappalyzergo.
- Cloudflare · CDN
- Cloudflare Bot Management · Security
- Envoy · Reverse proxies
- Express · Web frameworks, Web servers
- HSTS · Security
- HTTP/3 · Miscellaneous
- Node.js · Programming languages
- React · JavaScript frameworks
- RxJS · JavaScript frameworks
- Snowplow Analytics · Analytics, IaaS
- hCaptcha · Security
Cloudflare is filed under CDN.
Cloudflare Bot Management is filed under Security.
Envoy is filed under Reverse proxies.
Express is filed under Web frameworks, Web servers.
HSTS is filed under Security.
HTTP/3 is filed under Miscellaneous.
Node.js is filed under Programming languages.
React is filed under JavaScript frameworks.
RxJS is filed under JavaScript frameworks.
Snowplow Analytics is filed under Analytics, IaaS.
hCaptcha is filed under Security.
On-page checks
The homepage returned HTTP 200 in 37 ms. The target title is 35 characters and the page has 1 H1 heading.
| Status | 200 |
|---|---|
| TTFB | 37 ms |
| Title length | 35 yes |
| Quoted title | "AI App and Website Builder | Replit" |
| Meta description | "Describe what you want. Replit builds it. Get a working app or website in minutes. No coding required." yes |
| H1 count | 1 |
| HSTS | yes yes |
| CSP | yes |
| X-Frame-Options | DENY |
| Robots meta | — |
| Canonical | https://replit.com/ |
| Language | en |
| Links | 104 |
| Images | 17 |
| Favicon | yes |
The quoted title and meta description are measurements of the other site. They are not this page's title or description.
Security
Family DNS for replit.com is clear, and URLhaus is clear. Source: family DNS and local lists.
| Family DNS | clear |
|---|---|
| URLhaus | clear |
| UT1 | — |
| Web Risk | not run |
| Source | family DNS and local lists |
| HSTS | yes |
| CSP | yes |
Google Web Risk did not run. No API key is configured, and this report does not invent a clean result from that service.
Score breakdown
Availability 25 of 25. DNS answer plus a homepage status in the 2xx or 3xx range.
TLS 20 of 20. A valid certificate, with extra points when it has at least 14 days left.
DNS hygiene 5 of 20. SPF, DMARC, CAA, and DNSSEC are five points each.
Security headers 15 of 15. HSTS, CSP, and X-Frame-Options or CSP frame-ancestors.
Safety lists 15 of 15. Points only when the checks ran and came back clean. Unknown is not clean.
Domain age 5 of 5. Five points at one year, two points at 30 days.
Change history
First checked on 30 October 2026; changes will appear here.
Questions
Is replit.com safe?
The checks that ran did not produce a safety warning, and a score is not a promise that the site is safe.
Who hosts replit.com?
replit.com is placed in Toronto, Canada.
When does replit.com expire?
replit.com expires on 2 September 2029 according to https://rdap.verisign.com/com/v1/domain/replit.com.
Who owns replit.com?
The registry did not return a person or a company for replit.com. RDAP often redacts the registrant. The registrar on file is Nom-iq Ltd. dba COM LAUDE.
Sources
- RDAP source https://rdap.verisign.com/com/v1/domain/replit.com at 2026-10-30T14:11:49Z
- DNS source 1.1.1.1:53 at 2026-10-30T14:11:49Z
- TLS source tls:443 at 2026-10-30T14:11:49Z
- HTTP source https://replit.com/ at 2026-10-30T14:11:49Z
- Tech source wappalyzergo at 2026-10-30T14:11:49Z
- Geo source db-ip at 2026-10-30T14:11:49Z
- Safety source family DNS and local lists at 2026-10-30T14:11:49Z
Related reports
No other indexable reports share this TLD, host, or registrar yet.
Owner of this site?
Ask for a correction or for the report to be removed from search. Public DNS facts stay on the page. An optional badge is not inserted for you.
How to read this report
The sentences under each heading are filled from the latest snapshot. If a collector had nothing to say, that sentence is left out. The target site's own title and meta description, when shown, are quoted as measurements. They are not this page's title. Change history only lists a difference between two snapshots, so the first check starts the clock and later edits are the history. A malware blocklist is the only reason the homepage body is skipped. That fact stays on the report. It does not by itself drop the page from the sitemap or from related-report links.