Domain
com.br
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of com.br
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
Hosting IPs
—
A/AAAA targets
Subdomains
—
CT + scan + body
Record Types
—
seen in DNS
Observed Certs
—
in our scans
DNS Records
A
—
AAAA
—
MX
—
NS
—
TXT
—
CNAME
—
CAA
—
WHOIS / Registration
Registration data planned
Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.
Subdomains
Subdomain enumeration pending
Every subdomain ever issued a TLS cert under this apex — extracted from Certificate Transparency logs, our own scan observations and body references.
Tech Stack
Tech detection pending
Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.
TLS Certificates
Subject: *.lawoffice.com.br
Issuer: GoDaddy TLS Intermediate CA DV - R1v1
SANs: *.lawoffice.com.br, lawoffice.com.br
Subject: prod.tanobolso.com.br
Issuer: YR2
SANs: prod.tanobolso.com.br, tanobolso.com.br, www.tanobolso.com.br
Subject: ginfvl.ncksa.com.br
Issuer: YR2
SANs: ginfvl.ncksa.com.br
Subject: apihttp.disparopro.com.br
Issuer: YE1
SANs: apihttp.disparopro.com.br
Subject: aaronturatv.com.br
Issuer: R3
SANs: aaronturatv.com.br
Subject: sicmobi2.sicredi.com.br
Issuer: DigiCert Global G3 TLS ECC SHA384 2020 CA1
SANs: sicmobi2.sicredi.com.br
Subject: *.iftnet.com.br
Issuer: E6
SANs: *.braile.com.br, *.evotelecom.com.br, *.iftnet.com.br, *.iftnet.net.br, *.lupemaengenharia.com.br, *.matsuda.com.br, *.multipluscard.com.br
Subject: marceloauler.com.br
Issuer: YE1
SANs: marceloauler.com.br, www.marceloauler.com.br
Subject: br14.dialhost.com.br
Issuer: YR2
SANs: autoconfig.br14.dialhost.com.br, autodiscover.br14.dialhost.com.br, br14.dialhost.com.br, cpanel.br14.dialhost.com.br, cpcalendars.br14.dialhost.com.br, cpcontacts.br14.dialhost.com.br, ipv6.br14.dialhost.com.br, mail.br14.dialhost.com.br, webdisk.br14.dialhost.com.br, webmail.br14.dialhost.com.br, whm.br14.dialhost.com.br, www.br14.dialhost.com.br
Subject: *.webvpn.com.br
Issuer: AlphaSSL CA - SHA256 - G2
SANs: *.webvpn.com.br, webvpn.com.br
Subject: *.lab.embratelcloud.com.br
Issuer: RapidSSL SHA256 CA
SANs: *.lab.embratelcloud.com.br
Subject: grid171b.mailgrid.com.br
Issuer: YR1
SANs: grid171b.mailgrid.com.br
Subject: boxmarketing.com.br
Issuer: YE2
SANs: boxmarketing.com.br
Subject: *.hapvida.com.br
Issuer: Go Daddy Secure Certificate Authority - G2
SANs: *.hapvida.com.br, hapvida.com.br
Subject: www.safra.com.br
Issuer: DigiCert Global G3 TLS ECC SHA384 2020 CA1
SANs: api-ibpf.safra.com.br, api-ibpj.safra.com.br, api-ipj.safra.com.br, api-log-ibpj.safra.com.br, api-log-ipj.safra.com.br, api-ofw.safra.com.br, api-psc.safracorretora.com.br, api-sp2.safrapay.com.br, api.safra.com.br, api.safracredenciadora.com.br, api.safrafinanceira.com.br, apiext-bi.safra.com.br, asgard.safra.com.br, atualizacaocadastral.safra.com.br, autonomosafrapay.com.br, cartoes.safra.com.br, consignado.safra.com.br, corpspscm01mt.safra.com.br, corretora.safra.com.br, dwl.safraempresas.com.br, epfweb.safra.com.br, fei.safrafinanceira.com.br, financeira.safra.com.br, fol.jsafra.com.br, formula-safrafinanceira.com.br, fundos.safra.com.br, investimentos.safra.com.br, jsafra.com.br, lignetsafra.com.br, md.safra.com.br, negociacao.jsafra.com.br, negociacao.safracorretora.com.br, negociacaom.jsafra.com.br, pes.safra.com.br, plataforma.safracorretora.com.br, portalrhexterno.safra.com.br, rocket.safra.com.br, safra.com.br, safraasset.com.br, safrabi.com.br, safracorretora.com.br, safraempresas.com.br, safrafinanceira.com.br, safrafinanciamentos.com.br, safrajuridico.safra.com.br, safranegocios.com.br, safrapay.com.br, scdnetweb.safra.com.br, spa-sp2.safrapay.com.br, static.safra.com.br, staticext-bi.safra.com.br, storage.formula-safrafinanceira.com.br, streamer1.jsafra.com.br, streamer2.jsafra.com.br, streamerm1.jsafra.com.br, streamerm2.jsafra.com.br, trabalheconosco.safra.com.br, traineesafra.com.br, www.autonomosafrapay.com.br, www.chat.safra.com.br, www.emerald.com.br, www.formula-safrafinanceira.com.br, www.ib.safra.com.br, www.institutojsafra.com.br, www.jsafiduciaria.com.br, www.lignetsafra.com.br, www.michelesafradesign.com.br, www.safra.com.br, www.safraasset.com.br, www.safraassetmanagement.com.br, www.safrabi.com.br, www.safracorretora.com.br, www.safraempresas.com.br, www.safrafinanceira.com.br, www.safrafinanciamentos.com.br, www.safrainvestimentos.com.br, www.safrajuridico.com.br, www.safraleasing.com.br, www.safranegocios.com.br, www.safranet.com.br, www.safrapay.com.br, www.safraprivate.com.br, www.safrawallet.com.br, www.safrawealth.com.br, www.safrawealthmanagement.com.br, www.traineesafra.com.br, www9.safraempresas.com.br, wwws.jsafra.com.br, wwws.lignetsafra.com.br, wwws.safra.com.br, wwws.safraempresas.com.br, wwws.safrajuridico.com.br
Subject: webconsulta.sumerbol.com.br
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: webautorizador.sumerbol.com.br, webconsulta.sumerbol.com.br, webconvenio.sumerbol.com.br
Subject: *.locaweb.com.br
Issuer: AlphaSSL CA - SHA256 - G2
SANs: *.locaweb.com.br, locaweb.com.br
Subject: *.worldnet.com.br
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.worldnet.com.br, worldnet.com.br
Subject: sso.truechange.com.br
Issuer: WR3
SANs: sso.truechange.com.br
Subject: fiesta.guilhermer.com.br
Issuer: R3
SANs: fiesta.guilhermer.com.br, www.fiesta.guilhermer.com.br
Subject: vps-4468765.rnwebmaster.com.br
Issuer: YR1
SANs: autoconfig.vps-4468765.rnwebmaster.com.br, autodiscover.vps-4468765.rnwebmaster.com.br, cpanel.vps-4468765.rnwebmaster.com.br, cpcalendars.vps-4468765.rnwebmaster.com.br, cpcontacts.vps-4468765.rnwebmaster.com.br, ipv6.vps-4468765.rnwebmaster.com.br, mail.vps-4468765.rnwebmaster.com.br, vps-4468765.rnwebmaster.com.br, webdisk.vps-4468765.rnwebmaster.com.br, webmail.vps-4468765.rnwebmaster.com.br, whm.vps-4468765.rnwebmaster.com.br, www.vps-4468765.rnwebmaster.com.br
Subject: *.grupotriangulo.com.br
Issuer: Thawte TLS RSA CA G1
SANs: *.grupotriangulo.com.br, grupotriangulo.com.br
Subject: cafefacil.com.br
Issuer: YR1
SANs: cafefacil.com.br, www.cafefacil.com.br
Subject: vps44027.publiccloud.com.br
Issuer: vps44027.publiccloud.com.br
SANs: vps44027.publiccloud.com.br
Subject: *.constel.com.br
Issuer: GlobalSign GCC R6 AlphaSSL CA 2025
SANs: *.constel.com.br, constel.com.br
Subject: ensineatividades.com.br
Issuer: YR1
SANs: *.ensineatividades.com.br, *.ensineconcursos.com.br, ensineatividades.com.br, ensineconcursos.com.br
Subject: vpn.aksell.com.br
Issuer: YE1
SANs: vpn.aksell.com.br
Subject: api.opencon.com.br
Issuer: YE1
SANs: api.opencon.com.br
Subject: mdvr.viptech.com.br
Issuer: mdvr.viptech.com.br
SANs: 170.150.191.14, mdvr.viptech.com.br
Subject: folkspag.com.br
Issuer: folkspag.com.br
SANs: *.folkspag.com.br, folkspag.com.br
IPs Citing This Domain
No citing IPs found yet
As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.
Origin / IP-Leak
USP
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
| Origin IP | Origin ASN | CDN ASN | Confidence | Reasoning |
|---|---|---|---|---|
| 211.25.121.161 | AS9930 | AS16625 | 95% | cert cac722bb… served by 211.25.121.161 (AS9930) carries SAN m.msccruzeiros.com.br which currently resolves through Akamai (AS16625) at 23.220.113.171, 23.62.11.225, 184.30.157.254, 23.193.237.251 |
| 69.49.241.42 | AS31898 | AS13335 | 95% | cert 490a628e… served by 69.49.241.42 (AS31898) carries SAN hostgator.com.br which currently resolves through Cloudflare (AS13335) at 172.66.43.218, 172.66.40.38, 2606:4700:3108::ac42:2bda, 2606:4700:3108::ac42:2826 |
| 157.197.145.180 | AS6619 | AS16509 | 95% | cert e03f84c3… served by 157.197.145.180 (AS6619) carries SAN imusica.com.br which currently resolves through Amazon (AS16509) at 3.173.161.111, 3.173.161.11, 3.173.161.85, 3.173.161.42 |
| 162.241.203.204 | AS31898 | AS13335 | 95% | cert 490a628e… served by 162.241.203.204 (AS31898) carries SAN hostgator.com.br which currently resolves through Cloudflare (AS13335) at 172.66.43.218, 172.66.40.38, 2606:4700:3108::ac42:2bda, 2606:4700:3108::ac42:2826 |
| 23.212.126.218 | AS7713 | AS16625 | 95% | cert 04a37cf1… served by 23.212.126.218 (AS7713) carries SAN www.kelloggs.com.br which currently resolves through Akamai (AS16625) at 23.222.55.136, 92.122.62.40, 23.207.142.28, 23.13.175.55 |
| 200.98.80.186 | AS7162 | AS16509 | 95% | cert 70e6c919… served by 200.98.80.186 (AS7162) carries SAN fsist.com.br which currently resolves through Amazon (AS16509) at 54.232.198.103 |
| 189.3.18.82 | AS4230 | AS13335 | 95% | cert 8cda1e7b… served by 189.3.18.82 (AS4230) carries SAN ciaathletica.com.br which currently resolves through Cloudflare (AS13335) at 188.114.96.0, 2a06:98c1:3121::, 2a06:98c1:3120::, 188.114.97.0 |
| 168.138.149.60 | AS31898 | AS13335 | 95% | cert 8ede935d… served by 168.138.149.60 (AS31898) carries SAN maisatheneu.com.br which currently resolves through Cloudflare (AS13335) at 188.114.97.3, 2a06:98c1:3121::, 2a06:98c1:3120::, 188.114.96.3 |
| 168.75.69.244 | AS31898 | AS13335 | 95% | cert 9b5e47e4… served by 168.75.69.244 (AS31898) carries SAN danubiabruschi.clickmassa.com.br which currently resolves through Cloudflare (AS13335) at 172.67.71.150, 104.26.7.225, 104.26.6.225, 2606:4700:20::ac43:4796 |
| 162.214.158.74 | AS46606 | AS13335 | 95% | cert 078164fc… served by 162.214.158.74 (AS46606) carries SAN centraldedenuncia.com.br which currently resolves through Cloudflare (AS13335) at 188.114.96.0, 2a06:98c1:3121::, 2a06:98c1:3120::, 188.114.97.0 |
| 150.230.160.247 | AS31898 | AS20940 | 95% | cert dfae2928… served by 150.230.160.247 (AS31898) carries SAN viverebrasil.com.br which currently resolves through Akamai (AS20940) at 2.16.169.136, 2.16.169.131 |
| 50.116.87.149 | AS31898 | AS13335 | 95% | cert 490a628e… served by 50.116.87.149 (AS31898) carries SAN hostgator.com.br which currently resolves through Cloudflare (AS13335) at 172.66.43.218, 172.66.40.38, 2606:4700:3108::ac42:2bda, 2606:4700:3108::ac42:2826 |
| 162.241.61.234 | AS31898 | AS13335 | 95% | cert 490a628e… served by 162.241.61.234 (AS31898) carries SAN hostgator.com.br which currently resolves through Cloudflare (AS13335) at 172.66.43.218, 172.66.40.38, 2606:4700:3108::ac42:2bda, 2606:4700:3108::ac42:2826 |
| 144.22.234.32 | AS31898 | AS8075 | 95% | cert e54e4bf9… served by 144.22.234.32 (AS31898) carries SAN fairfax.com.br which currently resolves through Microsoft (AS8075) at 20.8.132.166 |
| 23.53.210.11 | AS45899 | AS16625 | 95% | cert 39b33491… served by 23.53.210.11 (AS45899) carries SAN image.relacionamentosicredi.com.br which currently resolves through Akamai (AS16625) at 23.220.113.160, 2a02:26f0:fe00:190::2c1c, 2a02:26f0:fe00:188::2c1c, 88.221.170.91 |
| 122.222.40.115 | AS2519 | AS16625 | 95% | cert 9a13bffd… served by 122.222.40.115 (AS2519) carries SAN secure.new.royalcaribbean.com.br which currently resolves through Akamai (AS16625) at 2.23.244.117, 104.85.0.201, 23.221.252.84, 184.30.156.93 |
| 122.222.40.115 | AS2519 | AS20940 | 95% | cert 9a13bffd… served by 122.222.40.115 (AS2519) carries SAN secure.royalcaribbean.com.br which currently resolves through Akamai (AS20940) at 104.85.0.201, 184.30.156.93, 23.56.162.114, 23.214.208.205 |
| 134.209.216.183 | AS14061 | AS13335 | 95% | cert d544fb2a… served by 134.209.216.183 (AS14061) carries SAN plataformamunicipal.com.br which currently resolves through Cloudflare (AS13335) at 172.67.182.23, 104.21.51.154, 2606:4700:3036::ac43:b617, 2606:4700:3031::6815:339a |
| 129.151.39.40 | AS31898 | AS16509 | 95% | cert afdd464f… served by 129.151.39.40 (AS31898) carries SAN plusoftomni.com.br which currently resolves through Amazon (AS16509) at 54.94.248.51 |
| 72.244.130.68 | AS270439 | AS13335 | 95% | cert fb93e13a… served by 72.244.130.68 (AS270439) carries SAN app.bolsim.com.br which currently resolves through Cloudflare (AS13335) at 172.67.149.66, 104.21.29.142, 2606:4700:3032::6815:1d8e, 2606:4700:3036::ac43:9542 |
| 23.12.210.146 | AS9498 | AS16625 | 95% | cert ef1642f8… served by 23.12.210.146 (AS9498) carries SAN image.info.veloe.com.br which currently resolves through Akamai (AS16625) at 184.24.21.74, 2a02:26f0:fe00:193::1621, 2a02:26f0:fe00:199::1621, 2a02:26f0:1180:688::1621 |
| 143.244.207.208 | AS14061 | AS16625 | 95% | cert 00399d76… served by 143.244.207.208 (AS14061) carries SAN marriott.com.br which currently resolves through Akamai (AS16625) at 184.30.156.126, 104.99.232.124, 2.20.168.117, 23.52.180.103 |
| 141.95.24.164 | AS16276 | AS13335 | 95% | cert 0b736bc3… served by 141.95.24.164 (AS16276) carries SAN eracloud.com.br which currently resolves through Cloudflare (AS13335) at 172.67.177.46, 104.21.64.62, 2606:4700:3032::ac43:b12e, 2606:4700:3034::6815:403e |
| 50.116.112.128 | AS31898 | AS13335 | 95% | cert 490a628e… served by 50.116.112.128 (AS31898) carries SAN hostgator.com.br which currently resolves through Cloudflare (AS13335) at 172.66.43.218, 172.66.40.38, 2606:4700:3108::ac42:2bda, 2606:4700:3108::ac42:2826 |
| 162.241.62.77 | AS31898 | AS13335 | 95% | cert 490a628e… served by 162.241.62.77 (AS31898) carries SAN hostgator.com.br which currently resolves through Cloudflare (AS13335) at 172.66.43.218, 172.66.40.38, 2606:4700:3108::ac42:2bda, 2606:4700:3108::ac42:2826 |
Threat Intelligence
Domain threat-intel pending
Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.
History
Domain timeline pending
Passive-DNS history accumulates as our forward-DNS crawler observes A/AAAA/MX/NS/TXT records over time.