Domain

dig.qa

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

DNS Check HTTP Check Run Full Scan .qa TLD

Run a live full scan of dig.qa

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now

Hosting IPs

A/AAAA targets

Subdomains

CT + scan + body

Record Types

seen in DNS

Observed Certs

in our scans

DNS Records

104.18.4.71, 104.18.5.71

AAAA

2606:4700::6812:447, 2606:4700::6812:547

0 dig-qa.mail.protection.outlook.com

david.ns.cloudflare.com, sandy.ns.cloudflare.com

TXT

478zlxkf7lxclrs8q3xy7sbxmfh6r8bm, 842p1d2pv48b6yn1d500xt54tb2rjmkx, Foxit-domain-verification=dd38cb78e075b1914143800c00fe24f4, MS=59378A6478E0F0C21CCA7B126C330DD8A2D97165, MS=ms73886649, MS=ms76406472, ZOOM_verify_HnU4dau0T8enEFGyAoE-Xg, apple-domain-verification=alTyShBNdu81mY2w

CNAME

—

CAA

—

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.

Subdomain	Resolves to	Last seen
dig.qa	104.18.4.71 2606:4700::6812:447 2606:4700::6812:547 104.18.5.71	2026-07-20 09:20:19.361
qib.dig.qa	104.18.5.71 104.18.4.71 2606:4700::6812:447 2606:4700::6812:547	2026-07-24 05:51:59.155
qinsurance.dig.qa	104.18.5.71 104.18.4.71 2606:4700::6812:447 2606:4700::6812:547	2026-07-24 05:51:59.155
gp.dig.qa	37.211.178.226	2026-07-20 09:20:19.361
gpdr.dig.qa	37.186.57.194	2026-07-20 09:20:19.361
on.dig.qa		1970-01-01 00:00:00.000

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

184.31.147.36:443 49167da70888…

Subject: apidev.dig.qacitizensbank.com

Issuer: Sectigo Public Server Authentication CA EV R40

SANs: api.dev.qacitizensbank.com, apidev.dig.qacitizensbank.com, apiqa.dig.qacitizensbank.com, apisbng.dig.qacitizensbank.com, apisit.dig.qacitizensbank.com, apistage.dig.qacitizensbank.com, apiuat.dig.qacitizensbank.com

104.104.178.138:443 49167da70888…

Subject: apidev.dig.qacitizensbank.com

Issuer: Sectigo Public Server Authentication CA EV R40

184.87.251.138:443 49167da70888…

Subject: apidev.dig.qacitizensbank.com

Issuer: Sectigo Public Server Authentication CA EV R40

23.58.45.12:443 49167da70888…

Subject: apidev.dig.qacitizensbank.com

Issuer: Sectigo Public Server Authentication CA EV R40

23.195.179.17:443 49167da70888…

Subject: apidev.dig.qacitizensbank.com

Issuer: Sectigo Public Server Authentication CA EV R40

104.71.114.138:443 49167da70888…

Subject: apidev.dig.qacitizensbank.com

Issuer: Sectigo Public Server Authentication CA EV R40

104.75.97.159:443 49167da70888…

Subject: apidev.dig.qacitizensbank.com

Issuer: Sectigo Public Server Authentication CA EV R40

104.88.179.36:443 49167da70888…

Subject: apidev.dig.qacitizensbank.com

Issuer: Sectigo Public Server Authentication CA EV R40

69.192.94.52:443 49167da70888…

Subject: apidev.dig.qacitizensbank.com

Issuer: Sectigo Public Server Authentication CA EV R40

104.71.168.200:443 49167da70888…

Subject: apidev.dig.qacitizensbank.com

Issuer: Sectigo Public Server Authentication CA EV R40

23.12.123.159:443 49167da70888…

Subject: apidev.dig.qacitizensbank.com

Issuer: Sectigo Public Server Authentication CA EV R40

77.235.145.62:443 c3ea8ed2034d…

Subject: *.dig.qa

Issuer: GlobalSign GCC R3 DV TLS CA 2020

SANs: *.dig.qa, dig.qa, gp.dig.qa, gpdr.dig.qa

23.223.179.36:443 49167da70888…

Subject: apidev.dig.qacitizensbank.com

Issuer: Sectigo Public Server Authentication CA EV R40

23.35.6.226:443 49167da70888…

Subject: apidev.dig.qacitizensbank.com

Issuer: Sectigo Public Server Authentication CA EV R40

23.192.255.215:443 49167da70888…

Subject: apidev.dig.qacitizensbank.com

Issuer: Sectigo Public Server Authentication CA EV R40

104.104.162.188:443 49167da70888…

Subject: apidev.dig.qacitizensbank.com

Issuer: Sectigo Public Server Authentication CA EV R40

23.216.114.185:443 49167da70888…

Subject: apidev.dig.qacitizensbank.com

Issuer: Sectigo Public Server Authentication CA EV R40

2.17.77.18:443 49167da70888…

Subject: apidev.dig.qacitizensbank.com

Issuer: Sectigo Public Server Authentication CA EV R40

184.28.197.137:443 49167da70888…

Subject: apidev.dig.qacitizensbank.com

Issuer: Sectigo Public Server Authentication CA EV R40

184.24.136.184:443 49167da70888…

Subject: apidev.dig.qacitizensbank.com

Issuer: Sectigo Public Server Authentication CA EV R40

104.103.98.212:443 49167da70888…

Subject: apidev.dig.qacitizensbank.com

Issuer: Sectigo Public Server Authentication CA EV R40

23.12.18.205:443 49167da70888…

Subject: apidev.dig.qacitizensbank.com

Issuer: Sectigo Public Server Authentication CA EV R40

104.103.163.36:443 49167da70888…

Subject: apidev.dig.qacitizensbank.com

Issuer: Sectigo Public Server Authentication CA EV R40

37.211.178.226:443 c3ea8ed2034d…

Subject: *.dig.qa

Issuer: GlobalSign GCC R3 DV TLS CA 2020

SANs: *.dig.qa, dig.qa, gp.dig.qa, gpdr.dig.qa

94.249.82.165:443 c3ea8ed2034d…

Subject: *.dig.qa

Issuer: GlobalSign GCC R3 DV TLS CA 2020

SANs: *.dig.qa, dig.qa, gp.dig.qa, gpdr.dig.qa

94.249.82.165:443 c3ea8ed2034d…

Subject: *.dig.qa

Issuer: GlobalSign GCC R3 DV TLS CA 2020

SANs: *.dig.qa, dig.qa, gp.dig.qa, gpdr.dig.qa

77.235.145.62:443 c3ea8ed2034d…

Subject: *.dig.qa

Issuer: GlobalSign GCC R3 DV TLS CA 2020

SANs: *.dig.qa, dig.qa, gp.dig.qa, gpdr.dig.qa

IPs Citing This Domain

No citing IPs found yet

As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

Origin IP	Origin ASN	CDN ASN	Confidence	Reasoning
37.211.178.226	AS8781	AS13335	95%	cert c3ea8ed2… served by 37.211.178.226 (AS8781) carries SAN dig.qa which currently resolves through Cloudflare (AS13335) at 104.18.5.71, 104.18.4.71, 2606:4700::6812:547, 2606:4700::6812:447
94.249.82.165	AS8376	AS13335	95%	cert c3ea8ed2… served by 94.249.82.165 (AS8376) carries SAN dig.qa which currently resolves through Cloudflare (AS13335) at 104.18.5.71, 104.18.4.71, 2606:4700::6812:547, 2606:4700::6812:447
77.235.145.62	AS42334	AS13335	95%	cert c3ea8ed2… served by 77.235.145.62 (AS42334) carries SAN dig.qa which currently resolves through Cloudflare (AS13335) at 104.18.5.71, 104.18.4.71, 2606:4700::6812:547, 2606:4700::6812:447

CT-Log Evidence

Certificates from public Certificate Transparency logs whose subject or SAN names this domain — including historic certs we never observed live.

bf0998ffbc2aced6… google · argon2026h2

Subject: *.dig.qa

Issuer: GlobalSign GCC R3 DV TLS CA 2020

SANs: *.dig.qa, gp.dig.qa, gpdr.dig.qa, dig.qa

Valid: 2025-10-05 09:19:55 → 2026-11-06 09:19:54

c3ea8ed2034d795b… cloudflare · nimbus2026

Subject: *.dig.qa

Issuer: GlobalSign GCC R3 DV TLS CA 2020

SANs: *.dig.qa, gp.dig.qa, gpdr.dig.qa, dig.qa

Valid: 2025-10-05 09:19:55 → 2026-11-06 09:19:54

bf0998ffbc2aced6… cloudflare · nimbus2026

Subject: *.dig.qa

Issuer: GlobalSign GCC R3 DV TLS CA 2020

SANs: *.dig.qa, gp.dig.qa, gpdr.dig.qa, dig.qa

Valid: 2025-10-05 09:19:55 → 2026-11-06 09:19:54

c3ea8ed2034d795b… google · xenon2026h2

Subject: *.dig.qa

Issuer: GlobalSign GCC R3 DV TLS CA 2020

SANs: *.dig.qa, gp.dig.qa, gpdr.dig.qa, dig.qa

Valid: 2025-10-05 09:19:55 → 2026-11-06 09:19:54

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Domain timeline pending

Passive-DNS history accumulates as our forward-DNS crawler observes A/AAAA/MX/NS/TXT records over time.