Domain
thegraph.com
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of thegraph.com
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
Hosting IPs
10
A/AAAA targets
Subdomains
73
CT + scan + body
Record Types
6
seen in DNS
Observed Certs
96
in our scans
DNS Records
A
104.18.40.31, 172.64.147.225
AAAA
2606:4700:4406::ac40:93e1, 2606:4700:4407::6812:281f, 2a06:98c1:3109::6812:281f, 2a06:98c1:310c::ac40:93e1
MX
10 aspmx.l.google.com, 20 alt1.aspmx.l.google.com, 30 alt2.aspmx.l.google.com, 40 aspmx2.googlemail.com, 50 aspmx3.googlemail.com
NS
joel.ns.cloudflare.com, veda.ns.cloudflare.com
TXT
1a0e392a-23db-42cd-a07b-d45341c3a7f3=3d703d6e433844c557deb60533634319187821e9c37b962b654e72b009644171, 9f491415-2c51-4d29-ab92-5dc08516d895=3d703d6e433844c557deb60533634319187821e9c37b962b654e72b009644171, daf5eb31-b8f5-4106-ba57-add532c5f324=3d703d6e433844c557deb60533634319187821e9c37b962b654e72b009644171, google-site-verification=FxqYKHkQuX2Nh6v2y0L4TcLp_PZY00pE8HWJfdyhs7g, google-site-verification=jfHf_oGw8G8IJ8t9UQnFOgJD2oI4h5cNO8Mr4IV7ZOw, google-site-verification=n59umrONCb10ZFWTh-r9UN8WBxlrbRuE5_sV6d7OO8A, google-site-verification=pCh8BnHIfJ6-D60vGhG9kpjMSQ8chtPoMSTAJaiceR4, v=spf1 include:_spf.google.com -all
CNAME
—
CAA
0 issue "amazon.com", 0 issue "comodoca.com", 0 issue "digicert.com; cansignhttpexchanges=yes", 0 issue "letsencrypt.org", 0 issue "pki.goog; cansignhttpexchanges=yes", 0 issue "ssl.com", 0 issuewild "comodoca.com", 0 issuewild "digicert.com; cansignhttpexchanges=yes"
WHOIS / Registration
Registration data planned
Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.
Subdomains
Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.
| Subdomain | Resolves to | Last seen |
|---|---|---|
| api.thegraph.com | 2026-07-26 15:25:52.748 | |
| thegraph.com | 2026-07-26 23:03:30.936 | |
| api.subscriptions.thegraph.com | 2026-07-26 23:03:30.936 | |
| hidden.staging.thegraph.com | 2026-07-20 06:30:41.930 | |
| ipfs.thegraph.com | 2026-07-22 01:16:37.722 | |
| network.thegraph.com | 2026-07-23 23:47:16.625 | |
| networks-registry.thegraph.com | 2026-07-24 19:30:33.020 | |
| newtestnet.thegraph.com | 2026-06-23 14:28:20.646 | |
| playground.amp.thegraph.com | 2026-07-20 05:06:24.057 | |
| subgraph-mcp.x402.staging.thegraph.com | 2026-07-24 00:06:53.164 | |
| subgraph-mcp.x402.thegraph.com | 2026-07-24 00:37:48.287 | |
| testnet.thegraph.com | 2026-07-23 23:47:16.625 | |
| www.thegraph.com | 2026-07-18 23:26:17.406 | |
| basecamp.thegraph.com | 2026-07-17 01:54:58.553 | |
| alpha.thegraph.com | 1970-01-01 00:00:00.000 | |
| api-rate-limit.staging.thegraph.com | 1970-01-01 00:00:00.000 | |
| api-testnet.grc-20.thegraph.com | 2026-07-27 01:27:44.536 | |
| api.production.thegraph.com | 1970-01-01 00:00:00.000 | |
| api.subscriptions.testnet.thegraph.com | 1970-01-01 00:00:00.000 | |
| api3.network.thegraph.com | 1970-01-01 00:00:00.000 | |
| beta-indexer-1.staging.thegraph.com | 1970-01-01 00:00:00.000 | |
| cli.thegraph.com | 1970-01-01 00:00:00.000 | |
| codex.thegraph.com | 1970-01-01 00:00:00.000 | |
| deployments.alpha.thegraph.com | 1970-01-01 00:00:00.000 | |
| dev.thegraph.com | 1970-01-01 00:00:00.000 | |
| docs.hypergraph.thegraph.com | 1970-01-01 00:00:00.000 | |
| eth.thegraph.com | 1970-01-01 00:00:00.000 | |
| events.thegraph.com | 1970-01-01 00:00:00.000 | |
| explorer.testnet.thegraph.com | 1970-01-01 00:00:00.000 | |
| forum.thegraph.com | 1970-01-01 00:00:00.000 | |
| gateway.amp.staging.thegraph.com | 1970-01-01 00:00:00.000 | |
| gateway.amp.thegraph.com | 2026-07-22 12:53:47.409 | |
| gateway.testnet.thegraph.com | 1970-01-01 00:00:00.000 | |
| graph-gateway-prometheus.network.thegraph.com | 1970-01-01 00:00:00.000 | |
| grt-supply-api.thegraph.com | 1970-01-01 00:00:00.000 | |
| ipfs.testnet.thegraph.com | 1970-01-01 00:00:00.000 | |
| ipfsgw.testnet.thegraph.com | 1970-01-01 00:00:00.000 | |
| ipfsrepl.testnet.thegraph.com | 1970-01-01 00:00:00.000 | |
| ipfsup.testnet.thegraph.com | 1970-01-01 00:00:00.000 | |
| jupyterhub.thegraph.com | 1970-01-01 00:00:00.000 | |
| kibana.thegraph.com | 1970-01-01 00:00:00.000 | |
| logpush.thegraph.com | 1970-01-01 00:00:00.000 | |
| loki-logs-prometheus.thegraph.com | 1970-01-01 00:00:00.000 | |
| pinata.thegraph.com | 1970-01-01 00:00:00.000 | |
| privy.thegraph.com | 1970-01-01 00:00:00.000 | |
| prometheus.staging.thegraph.com | 1970-01-01 00:00:00.000 | |
| radicle.staging.thegraph.com | 1970-01-01 00:00:00.000 | |
| radicle.thegraph.com | 1970-01-01 00:00:00.000 | |
| storybook.thegraph.com | 1970-01-01 00:00:00.000 | |
| tap-aggregator.testnet.thegraph.com | 1970-01-01 00:00:00.000 | |
| token-api.mcp.thegraph.com | 1970-01-01 00:00:00.000 | |
| token-api.thegraph.com | 1970-01-01 00:00:00.000 | |
| ws.api.staging.thegraph.com | 1970-01-01 00:00:00.000 | |
| ws.api.thegraph.com | 1970-01-01 00:00:00.000 |
Tech Stack
Tech detection pending
Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.
TLS Certificates
Subject: mindthegraph.com
Issuer: Amazon RSA 2048 M03
SANs: *.dev.mindthegraph.com, *.mindthegraph.com, *.staging.mindthegraph.com, dev.mindthegraph.com, mindthegraph.com, staging.mindthegraph.com
Subject: mindthegraph.com
Issuer: Amazon RSA 2048 M02
SANs: *.dev.mindthegraph.com, *.mindthegraph.com, *.staging.mindthegraph.com, dev.mindthegraph.com, mindthegraph.com, staging.mindthegraph.com
Subject: mindthegraph.com
Issuer: Amazon RSA 2048 M02
SANs: *.dev.mindthegraph.com, *.mindthegraph.com, *.staging.mindthegraph.com, dev.mindthegraph.com, mindthegraph.com, staging.mindthegraph.com
IPs Citing This Domain
Hosts whose HTML body references this domain. Strong signal for origin/mirror/embed discovery.
Origin / IP-Leak
USP
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
No origin-IP leaks detected (yet)
Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.
Threat Intelligence
Domain threat-intel pending
Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.
History
Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.
| Type | Value | First seen | Last seen |
|---|---|---|---|
| MX | 40 aspmx2.googlemail.com | 2026-05-26 05:47:23.589 | 2026-07-26 23:03:30.936 |
| CAA | 0 issue "comodoca.com" | 2026-05-26 05:47:23.589 | 2026-07-26 23:03:30.936 |
| MX | 20 alt1.aspmx.l.google.com | 2026-05-26 05:47:23.589 | 2026-07-26 23:03:30.936 |
| NS | joel.ns.cloudflare.com | 2026-05-26 05:47:23.589 | 2026-07-26 23:03:30.936 |
| AAAA | 2606:4700:4406::ac40:93e1 | 2026-05-26 05:47:23.589 | 2026-06-15 00:54:33.538 |
| MX | 30 alt2.aspmx.l.google.com | 2026-05-26 05:47:23.589 | 2026-07-26 23:03:30.936 |
| CAA | 0 issue "amazon.com" | 2026-05-26 05:47:23.589 | 2026-07-26 23:03:30.936 |
| TXT | daf5eb31-b8f5-4106-ba57-add532c5f324=3d703d6e433844c557deb60533634319187821e9c37b962b654e72b009644171 | 2026-05-26 05:47:23.589 | 2026-07-26 23:03:30.936 |
| A | 104.18.40.31 | 2026-05-26 05:47:23.589 | 2026-07-26 23:03:30.936 |
| MX | 10 aspmx.l.google.com | 2026-05-26 05:47:23.589 | 2026-07-26 23:03:30.936 |
| A | 172.64.147.225 | 2026-05-26 05:47:23.589 | 2026-07-26 23:03:30.936 |
| NS | veda.ns.cloudflare.com | 2026-05-26 05:47:23.589 | 2026-07-26 23:03:30.936 |
| CAA | 0 issue "ssl.com" | 2026-05-26 05:47:23.589 | 2026-07-26 23:03:30.936 |
| TXT | v=spf1 include:_spf.google.com -all | 2026-05-26 05:47:23.589 | 2026-07-26 23:03:30.936 |
| CAA | 0 issuewild "digicert.com; cansignhttpexchanges=yes" | 2026-05-26 05:47:23.589 | 2026-07-26 23:03:30.936 |
| TXT | google-site-verification=jfHf_oGw8G8IJ8t9UQnFOgJD2oI4h5cNO8Mr4IV7ZOw | 2026-05-26 05:47:23.589 | 2026-07-26 23:03:30.936 |
| CAA | 0 issuewild "ssl.com" | 2026-05-26 05:47:23.589 | 2026-07-26 23:03:30.936 |
| MX | 50 aspmx3.googlemail.com | 2026-05-26 05:47:23.589 | 2026-07-26 23:03:30.936 |
| TXT | 1a0e392a-23db-42cd-a07b-d45341c3a7f3=3d703d6e433844c557deb60533634319187821e9c37b962b654e72b009644171 | 2026-05-26 05:47:23.589 | 2026-07-26 23:03:30.936 |
| CAA | 0 issue "digicert.com; cansignhttpexchanges=yes" | 2026-05-26 05:47:23.589 | 2026-07-26 23:03:30.936 |
| TXT | google-site-verification=n59umrONCb10ZFWTh-r9UN8WBxlrbRuE5_sV6d7OO8A | 2026-05-26 05:47:23.589 | 2026-07-26 23:03:30.936 |
| CAA | 0 issuewild "comodoca.com" | 2026-05-26 05:47:23.589 | 2026-07-26 23:03:30.936 |
| TXT | google-site-verification=FxqYKHkQuX2Nh6v2y0L4TcLp_PZY00pE8HWJfdyhs7g | 2026-05-26 05:47:23.589 | 2026-07-26 23:03:30.936 |
| CAA | 0 issuewild "letsencrypt.org" | 2026-05-26 05:47:23.589 | 2026-07-26 23:03:30.936 |
| CAA | 0 issuewild "pki.goog; cansignhttpexchanges=yes" | 2026-05-26 05:47:23.589 | 2026-07-26 23:03:30.936 |
| CAA | 0 issue "pki.goog; cansignhttpexchanges=yes" | 2026-05-26 05:47:23.589 | 2026-07-26 23:03:30.936 |
| CAA | 0 issue "letsencrypt.org" | 2026-05-26 05:47:23.589 | 2026-07-26 23:03:30.936 |
| TXT | google-site-verification=pCh8BnHIfJ6-D60vGhG9kpjMSQ8chtPoMSTAJaiceR4 | 2026-05-26 05:47:23.589 | 2026-07-26 23:03:30.936 |
| AAAA | 2a06:98c1:3109::6812:281f | 2026-05-26 05:47:23.589 | 2026-06-15 00:54:33.538 |
| TXT | 9f491415-2c51-4d29-ab92-5dc08516d895=3d703d6e433844c557deb60533634319187821e9c37b962b654e72b009644171 | 2026-05-26 05:47:23.589 | 2026-07-26 23:03:30.936 |
| AAAA | 2606:4700:4407::6812:281f | 2026-06-22 19:46:07.000 | 2026-07-26 23:03:30.936 |
| AAAA | 2a06:98c1:310c::ac40:93e1 | 2026-06-22 19:46:07.000 | 2026-07-26 23:03:30.936 |