Domain
buffer.com
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of buffer.com
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
Hosting IPs
16
A/AAAA targets
Subdomains
105
CT + scan + body
Record Types
5
seen in DNS
Observed Certs
52
in our scans
DNS Records
A
104.18.98.118, 104.18.99.118
AAAA
2606:4700::6812:6276, 2606:4700::6812:6376
MX
1 aspmx.l.google.com, 10 alt3.aspmx.l.google.com, 10 alt4.aspmx.l.google.com, 5 alt1.aspmx.l.google.com, 5 alt2.aspmx.l.google.com
NS
dom.ns.cloudflare.com, tess.ns.cloudflare.com
TXT
183374251-11850589, 1password-site-verification=HD5MBSOQ2ZAYLC55FI3SHX7IP4, B37AB95EC3, facebook-domain-verification=7cr8hfn0y878zjxzgt4hbknwhxuk5y, google-site-verification=142Thz3s7mzQJSHORKyyk0QndKtfKg9DakzAiCX6mDA, google-site-verification=2cyRtTXa49V-EbiOs0W-MqSfKfp_smVNFF76A9YguLQ, google-site-verification=3aAc3sRkZQKuVjCNI_RbHVKkmv-r4lhLXRlvHMR4_l8, google-site-verification=LLI4gMxLVK41gPBfxcDZqgyaUxFSMhsDE70-r-pXzso
CNAME
—
CAA
—
WHOIS / Registration
Registration data planned
Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.
Subdomains
Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.
| Subdomain | Resolves to | Last seen |
|---|---|---|
| account.dev.buffer.com | 2026-05-26 16:13:34.106 | |
| analyze.buffer.com | 2026-06-01 05:40:28.013 | |
| api.buffer.com | 2026-06-17 00:54:13.082 | |
| api.dev.buffer.com | 2026-06-17 01:42:51.463 | |
| buffer.com | 2026-07-26 10:29:05.614 | |
| dev.buffer.com | 2026-06-01 05:40:28.013 | |
| features.buffer.com | 2026-07-26 10:29:05.614 | |
| publish.buffer.com | 2026-06-01 05:40:28.013 | |
| reply.buffer.com | 2026-06-01 05:40:28.013 | |
| scraper.buffer.com | 2026-06-15 00:23:13.348 | |
| vpn.buffer.com | 2026-06-15 02:43:51.423 | |
| www.buffer.com | 2026-06-16 21:27:43.355 | |
| scraper.dev.buffer.com | 2026-05-27 03:33:47.863 | |
| account.branches.dev.buffer.com | 1970-01-01 00:00:00.000 | |
| account.buffer.com | 1970-01-01 00:00:00.000 | |
| admin-next.branches.dev.buffer.com | 1970-01-01 00:00:00.000 | |
| admin-next.dev.buffer.com | 1970-01-01 00:00:00.000 | |
| admin.buffer.com | 1970-01-01 00:00:00.000 | |
| amplify-analyze.buffer.com | 1970-01-01 00:00:00.000 | |
| analyze-api.buffer.com | 1970-01-01 00:00:00.000 | |
| analyze-api.dev.buffer.com | 1970-01-01 00:00:00.000 | |
| analyze.branches.dev.buffer.com | 1970-01-01 00:00:00.000 | |
| analyze.dev.buffer.com | 1970-01-01 00:00:00.000 | |
| auth.dev.buffer.com | 1970-01-01 00:00:00.000 | |
| backup-scraper.buffer.com | 1970-01-01 00:00:00.000 | |
| branches.dev.buffer.com | 1970-01-01 00:00:00.000 | |
| branchesss.dev.buffer.com | 1970-01-01 00:00:00.000 | |
| button.buffer.com | 1970-01-01 00:00:00.000 | |
| callbacks.buffer.com | 1970-01-01 00:00:00.000 | |
| callbacks.dev.buffer.com | 1970-01-01 00:00:00.000 | |
| clean.buffer.com | 2026-07-26 02:55:49.974 | |
| components.buffer.com | 1970-01-01 00:00:00.000 | |
| content.publish.buffer.com | 1970-01-01 00:00:00.000 | |
| debugger.buffer.com | 1970-01-01 00:00:00.000 | |
| discourse.buffer.com | 1970-01-01 00:00:00.000 | |
| engage.branches.dev.buffer.com | 1970-01-01 00:00:00.000 | |
| engage.buffer.com | 1970-01-01 00:00:00.000 | |
| engage.dev.buffer.com | 1970-01-01 00:00:00.000 | |
| graph.buffer.com | 1970-01-01 00:00:00.000 | |
| graph.dev.buffer.com | 1970-01-01 00:00:00.000 | |
| images.buffer.com | 1970-01-01 00:00:00.000 | |
| images.dev.buffer.com | 1970-01-01 00:00:00.000 | |
| internal.buffer.com | 1970-01-01 00:00:00.000 | |
| legacy-web.dev.buffer.com | 1970-01-01 00:00:00.000 | |
| links.buffer.com | 1970-01-01 00:00:00.000 | |
| links.dev.buffer.com | 1970-01-01 00:00:00.000 | |
| login.branches.dev.buffer.com | 1970-01-01 00:00:00.000 | |
| login.buffer.com | 1970-01-01 00:00:00.000 | |
| login.dev.buffer.com | 1970-01-01 00:00:00.000 | |
| looker.buffer.com | 1970-01-01 00:00:00.000 | |
| marketing.mbranches.dev.buffer.com | 1970-01-01 00:00:00.000 | |
| mbranches.dev.buffer.com | 1970-01-01 00:00:00.000 | |
| open-api.buffer.com | 1970-01-01 00:00:00.000 | |
| open-api.dev.buffer.com | 1970-01-01 00:00:00.000 | |
| pablo.buffer.com | 1970-01-01 00:00:00.000 | |
| pancakes.buffer.com | 1970-01-01 00:00:00.000 | |
| prod-bibes.api.buffer.com | 1970-01-01 00:00:00.000 | |
| prod-bibes.auth.buffer.com | 1970-01-01 00:00:00.000 | |
| prod-bibes.callbacks.buffer.com | 1970-01-01 00:00:00.000 | |
| prod-bibes.test-analyze.buffer.com | 1970-01-01 00:00:00.000 | |
| prod-bibes.webhooks.buffer.com | 1970-01-01 00:00:00.000 | |
| publish-cdn.buffer.com | 1970-01-01 00:00:00.000 | |
| publish.branches.dev.buffer.com | 1970-01-01 00:00:00.000 | |
| publish.dev.buffer.com | 1970-01-01 00:00:00.000 | |
| sa.buffer.com | 1970-01-01 00:00:00.000 | |
| sapi.buffer.com | 1970-01-01 00:00:00.000 | |
| segment-analytics.buffer.com | 1970-01-01 00:00:00.000 | |
| segment-api.buffer.com | 1970-01-01 00:00:00.000 | |
| staging-bibes.api.dev.buffer.com | 1970-01-01 00:00:00.000 | |
| staging-bibes.callbacks.dev.buffer.com | 1970-01-01 00:00:00.000 | |
| start-page.branches.dev.buffer.com | 1970-01-01 00:00:00.000 | |
| start-page.buffer.com | 1970-01-01 00:00:00.000 | |
| start-page.dev.buffer.com | 1970-01-01 00:00:00.000 | |
| suggestions.buffer.com | 1970-01-01 00:00:00.000 | |
| test-analyze.buffer.com | 1970-01-01 00:00:00.000 | |
| test.buffer.com | 1970-01-01 00:00:00.000 | |
| webhooks.buffer.com | 1970-01-01 00:00:00.000 | |
| webhooks.dev.buffer.com | 1970-01-01 00:00:00.000 |
Tech Stack
Tech detection pending
Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.
TLS Certificates
Subject: googlebuffer.com
Issuer: E7
SANs: *.googlebuffer.com, googlebuffer.com
Subject: *.skybuffer.com
Issuer: Sectigo RSA Domain Validation Secure Server CA
SANs: *.skybuffer.com, skybuffer.com
Subject: buffer.com
Issuer: YE2
SANs: buffer.com, debugger.buffer.com
Subject: *.skybuffer.com
Issuer: Sectigo RSA Domain Validation Secure Server CA
SANs: *.skybuffer.com, skybuffer.com
Subject: www.investbuffer.com
Issuer: YR2
SANs: www.investbuffer.com
Subject: *.geobuffer.com
Issuer: Go Daddy Secure Certificate Authority - G2
SANs: *.geobuffer.com, geobuffer.com
Subject: www.investbuffer.com
Issuer: R12
SANs: www.investbuffer.com
Subject: buffer.com
Issuer: Amazon RSA 2048 M04
SANs: buffer.com, www.buffer.com
Subject: *.prod-bibes.webhooks.buffer.com
Issuer: Amazon RSA 2048 M04
SANs: *.prod-bibes.webhooks.buffer.com
Subject: looker.buffer.com
Issuer: Amazon RSA 2048 M01
SANs: looker.buffer.com
Subject: vpn.buffer.com
Issuer: Amazon RSA 2048 M04
SANs: vpn.buffer.com
Subject: scraper.buffer.com
Issuer: Amazon RSA 2048 M01
SANs: scraper.buffer.com
Subject: api-mrssfeed.bitsbuffer.com
Issuer: E7
SANs: api-mrssfeed.bitsbuffer.com
Subject: *.skybuffer.com
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.skybuffer.com, skybuffer.com
Subject: *.skybuffer.com
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.skybuffer.com, skybuffer.com
Subject: *.prod-bibes.webhooks.buffer.com
Issuer: Amazon RSA 2048 M04
SANs: *.prod-bibes.webhooks.buffer.com
Subject: publish.buffer.com
Issuer: Amazon RSA 2048 M01
SANs: publish.buffer.com
Subject: scraper.dev.buffer.com
Issuer: Amazon RSA 2048 M04
SANs: scraper.dev.buffer.com
Subject: *.prod-bibes.webhooks.buffer.com
Issuer: Amazon RSA 2048 M04
SANs: *.prod-bibes.webhooks.buffer.com
Subject: googlebuffer.com
Issuer: E7
SANs: *.googlebuffer.com, googlebuffer.com
Subject: scraper.buffer.com
Issuer: Amazon RSA 2048 M01
SANs: scraper.buffer.com
Subject: *.skybuffer.com
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.skybuffer.com, skybuffer.com
Subject: account.dev.buffer.com
Issuer: Amazon RSA 2048 M01
SANs: account.dev.buffer.com
Subject: publish.buffer.com
Issuer: Amazon RSA 2048 M01
SANs: publish.buffer.com
Subject: *.skybuffer.com
Issuer: Sectigo RSA Domain Validation Secure Server CA
SANs: *.skybuffer.com, skybuffer.com
Subject: *.skybuffer.com
Issuer: Sectigo RSA Domain Validation Secure Server CA
SANs: *.skybuffer.com, skybuffer.com
Subject: buffer.com
Issuer: Amazon RSA 2048 M04
SANs: buffer.com, www.buffer.com
IPs Citing This Domain
Hosts whose HTML body references this domain. Strong signal for origin/mirror/embed discovery.
47.79.226.18:443
href · ×3
187.1.111.97:80
href · ×2
174.138.10.204:443
href · ×2
34.16.153.25:443
href · ×2
111.230.42.156:443
href · ×1
123.56.169.116:443
href · ×1
3.109.32.38:80
href · ×1
107.175.62.19:443
href · ×1
188.165.5.122:443
href · ×1
Origin / IP-Leak
USP
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
No origin-IP leaks detected (yet)
Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.
Threat Intelligence
Domain threat-intel pending
Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.
History
Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.
| Type | Value | First seen | Last seen |
|---|---|---|---|
| TXT | 183374251-11850589 | 2026-05-26 05:35:32.793 | 2026-07-26 10:29:05.614 |
| TXT | prtoolkit-verification=03646c6d6d2ac0f380012c074391bce38a2a9608fac40fa63b65013268e60491 | 2026-05-26 05:35:32.793 | 2026-07-26 10:29:05.614 |
| NS | dom.ns.cloudflare.com | 2026-05-26 05:35:32.793 | 2026-07-26 10:29:05.614 |
| AAAA | 2606:4700::6812:6276 | 2026-05-26 05:35:32.793 | 2026-07-26 10:29:05.614 |
| A | 104.18.99.118 | 2026-05-26 05:35:32.793 | 2026-07-26 10:29:05.614 |
| TXT | segment-site-verification=e7Zo5L9jKVjVcKRFi1acX9nyEQOnl6z3 | 2026-05-26 05:35:32.793 | 2026-07-26 10:29:05.614 |
| TXT | google-site-verification=hD-bBRWeNejlB37u_tZThoEBoyq3JcLLqog3Rl5Eqs8 | 2026-05-26 05:35:32.793 | 2026-07-26 10:29:05.614 |
| A | 104.18.98.118 | 2026-05-26 05:35:32.793 | 2026-07-26 10:29:05.614 |
| AAAA | 2606:4700::6812:6376 | 2026-05-26 05:35:32.793 | 2026-07-26 10:29:05.614 |
| TXT | facebook-domain-verification=7cr8hfn0y878zjxzgt4hbknwhxuk5y | 2026-05-26 05:35:32.793 | 2026-07-26 10:29:05.614 |
| TXT | google-site-verification=x9nCBH6uz8yQAOEqpV3TqMnL9gI9nj1Iqz5OTJCi8Xg | 2026-05-26 05:35:32.793 | 2026-07-26 10:29:05.614 |
| NS | tess.ns.cloudflare.com | 2026-05-26 05:35:32.793 | 2026-07-26 10:29:05.614 |
| TXT | google-site-verification=LLI4gMxLVK41gPBfxcDZqgyaUxFSMhsDE70-r-pXzso | 2026-05-26 05:35:32.793 | 2026-07-26 10:29:05.614 |
| TXT | google-site-verification=gET2bT39fxReuQ0vLGbVvA9TyxZOmEbpePtAX7xY6oA | 2026-05-26 05:35:32.793 | 2026-07-26 10:29:05.614 |
| TXT | v=spf1 include:helpscoutemail.com include:_spf.google.com include:mail.zendesk.com ~all | 2026-05-26 05:35:32.793 | 2026-07-26 10:29:05.614 |
| TXT | google-site-verification=jpDzphFKQHfOP1m86Lu3xA2lyx4wZwx2DILni2KvWFc | 2026-05-26 05:35:32.793 | 2026-07-26 10:29:05.614 |
| TXT | google-site-verification=2cyRtTXa49V-EbiOs0W-MqSfKfp_smVNFF76A9YguLQ | 2026-05-26 05:35:32.793 | 2026-07-26 10:29:05.614 |
| MX | 5 alt2.aspmx.l.google.com | 2026-05-26 05:35:32.793 | 2026-07-26 10:29:05.614 |
| TXT | hj=232078-02102021 | 2026-05-26 05:35:32.793 | 2026-07-26 10:29:05.614 |
| MX | 10 alt4.aspmx.l.google.com | 2026-05-26 05:35:32.793 | 2026-07-26 10:29:05.614 |
| MX | 1 aspmx.l.google.com | 2026-05-26 05:35:32.793 | 2026-07-26 10:29:05.614 |
| TXT | google-site-verification=Y09tg5UAyuUXsF8PZ-W92iDQaq9DVNJpuwwGiAZ4Sug | 2026-05-26 05:35:32.793 | 2026-07-26 10:29:05.614 |
| MX | 10 alt3.aspmx.l.google.com | 2026-05-26 05:35:32.793 | 2026-07-26 10:29:05.614 |
| TXT | B37AB95EC3 | 2026-05-26 05:35:32.793 | 2026-07-26 10:29:05.614 |
| MX | 5 alt1.aspmx.l.google.com | 2026-05-26 05:35:32.793 | 2026-07-26 10:29:05.614 |
| TXT | google-site-verification=3aAc3sRkZQKuVjCNI_RbHVKkmv-r4lhLXRlvHMR4_l8 | 2026-05-26 05:35:32.793 | 2026-07-26 10:29:05.614 |
| TXT | google-site-verification=142Thz3s7mzQJSHORKyyk0QndKtfKg9DakzAiCX6mDA | 2026-05-26 05:35:32.793 | 2026-07-26 10:29:05.614 |
| TXT | stripe-verification=436470f5c9a974d3045706507ca0deef5fc07b3d82d6456180bce09ef19e13b6 | 2026-05-26 05:35:32.793 | 2026-07-26 10:29:05.614 |
| TXT | 1password-site-verification=HD5MBSOQ2ZAYLC55FI3SHX7IP4 | 2026-07-15 20:04:13.980 | 2026-07-26 10:29:05.614 |