Loading today’s stories
Build1 distinct publisher3 min readUpdated
RuntimeWire traced one Google Cloud IP to 160 verified hostnames on company-controlled domains. The evidence is thin on who wrote the code and precise on who owns the deployment layer.
The Engineer · Build desk
Compiled by The EngineerSomething wrong?How this is made
RuntimeWire started from a single Google Cloud address, 34.111.179.208, and finished with 160 Replit-verified hostnames mapped to 63 companies in the Y Combinator directory as of 18 August 2026 [1] [3] [8]. The 62 companies other than Replit itself have raised approximately $1.91 billion in disclosed funding [2], which shifts the question of whether AI coding platforms touch production from vendor testimony to public DNS.
The method is worth reading before the conclusion. An IP match alone was not enough, because shared cloud addresses serve unrelated customers, so RuntimeWire required two signals: the hostname resolving to the Replit-linked address, and a TXT record beginning with `replit-verify=` on the hostname or its root domain [9]. That TXT record exists to prove control of a custom domain during a Replit deployment [10]. So the finding is narrow and hard: somebody with write access to a company's DNS zone authorized a Replit-hosted endpoint. RuntimeWire is explicit that the records cannot show whether Replit's AI agent wrote the code [7].
Fountain is the legible case. Public DNS puts `start.fountain.com` and `tools.fountain.com` on the Replit-linked address while the rest of Fountain's public product infrastructure sits with other providers [11]. That split is the shape of the whole dataset: tools, portals, landing pages and application components attached to real domains, not a replacement for the primary engineering stack [7].
The capital is concentrated. Roughly three-quarters of the external funding sits with the 10 best-funded companies [6], about $1.4 billion of the $1.91 billion total [14], against an average of roughly $30.8 million per company across all 62 [13]. Aspire says it has raised more than $300 million in equity and debt; Fountain about $219 million; GiveCampus approximately $191 million; Instawork $160 million; Pelago $151 million after its 2024 Series C; Shepherd $67 million after a March 2026 round; Tavus about $64 million; SafetyWing $47 million [12]. Qventus has announced investments of $100 million and $105 million since 2022, the latter including a debt component RuntimeWire excluded from its equity calculation [15]. Of the 63 companies, YC lists 57 as active, five as inactive and one as acquired [4]. Include Replit's own roughly $878 million and the cluster totals about $2.79 billion [5].
The operator consequence is not the funding number. It is that RuntimeWire found the platform absent from the public technology stacks of companies whose domains point at it [16]. A procurement inventory or an architecture diagram would not surface these endpoints; a zone file audit would. Each of those hostnames is a dependency on one vendor's custom-domain publishing layer, provisioned by whoever held DNS access, which is a different risk profile from a prototyping tool nobody can reach from the open internet.
Two things to check. First, your own zones, for `replit-verify=` TXT records you did not approve, and for any hostname resolving to a deployment layer you have never had an availability conversation about. Second, whether the endpoints belonging to the five inactive companies and the one acquired one keep resolving [4], because abandoned custom domains pointed at live shared infrastructure are the part of this pattern that ages badly.
Follow any of these and your For You feed starts watching them — no settings page required.
Ranked by verification strength, evidence, and original report placement.
RuntimeWire found at least 62 Y Combinator companies other than Replit serving custom domains through the platform on August 18, 2026.
Together those 62 companies have raised approximately $1.91 billion in disclosed funding.
RuntimeWire verified 160 Replit-verified hostnames associated with 63 companies in the Y Combinator directory, including Replit itself.
Of the 63 companies, YC lists 57 as active, five as inactive and one as acquired.
Including Replit's roughly $878 million in disclosed financing, the cluster accounts for approximately $2.79 billion raised.
Roughly three-quarters of the external capital is concentrated among the 10 best-funded companies in the cluster.
Evidence-backed comparisons of source perspectives and observed adoption signals. Read the methodology
Which Builder, Operator, and Investor concerns the observed source mix emphasized—not a truth score.
Evidence, demonstrated adoption, hype gap, incentives, and confidence are assessed independently, each on its own current evidence. How these are measured.
Reproducible DNS method, single unreplicated publisher
The two-signal method (Replit deployment-layer A record plus replit-verify= TXT) is specified precisely enough to be re-run, and the seed IP, hostname counts and a worked example are disclosed, which is stronger than typical vendor-adoption reporting. It is capped by there being exactly one publisher, which is also the party that ran the scan: no independent replication, no confirmation from Replit or the named companies, and funding totals the publisher itself calls approximate and unaudited.
Broad endpoint presence, unmeasured depth
Adoption is real and observable at breadth: 160 verified hostnames across 62 funded YC companies on domains those companies control, which requires DNS-level authorization. Depth is what the supplied material cannot measure — the publisher documents endpoint-level uses (landing pages, tools, portals, components) beside other providers, and concedes some records may be abandoned or employee-published rather than centrally approved, so this falls well short of core-stack dependence.
Headline outruns the records it rests on
The framing that DNS puts Replit 'inside' 62 funded startups is modestly overstated relative to what the records establish: authorized third-party endpoints on corporate domains, with no evidence of AI authorship, central approval, live traffic, or core-stack use. The overstatement is limited because the same report supplies the corrections itself — explicit limits on authorship, the Fountain counter-illustration, and the unaudited nature of the funding totals — rather than leaving them to a reader.
Publisher-generated dataset, no disclosures supplied
The only account is original research by the outlet publishing it, which creates a structural incentive to present the dataset at its most impressive scale — hence the headline capital aggregate — and the piece also amplifies the vendor's enterprise-adoption narrative by tying the finding to Replit's founders and enterprise push. Against that, the report volunteers methodological limits and excludes a debt component from one funding figure. No sponsorship, commercial relationship or vendor cooperation is disclosed either way in the supplied material, so this is scored on framing choices only.
Method credible, corroboration absent
Confidence is moderate: the mechanical facts (IP, TXT verification, hostname and company counts, named example) are specific, internally consistent and independently checkable, so the existence of the footprint is likely accurate. It is held down by single-publisher sourcing with no replication or subject response, approximate funding arithmetic, an unknown share of stale records, and a truncated source body that cuts off mid-sentence in the enterprise-push section.
build
Replit's new black-box pen tests hand the findings to the agent that wrote the code1 distinct publisher
leadership
Every's 30 people, four products and one cloned editor: the self-driving company in practice1 distinct publisher
invest
Touchmark opens a forwards market for tokens because finance cannot forecast them1 distinct publisher
build
Unsloth's 10% quant claim is really about which machines can run a 27B model1 distinct publisher
Distinct publishers with included, body-backed reporting in this cluster.
1 article · August 17, 2026