Domain
gab.com
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of gab.com
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
Hosting IPs
12
A/AAAA targets
Subdomains
20
CT + scan + body
Record Types
6
seen in DNS
Observed Certs
15
in our scans
DNS Records
A
104.16.114.65, 104.17.101.61
AAAA
2606:4700::6810:7241, 2606:4700::6811:653d
MX
10 mail.protonmail.ch, 20 mailsec.protonmail.ch
NS
elmo.ns.cloudflare.com, sue.ns.cloudflare.com
TXT
ca3-56e3739f7f644cdaaa0e7edc903cf648, google-site-verification=I40VLOSX3s7i4a7Smh-4JaLHVESDyNvD5RF6HGg8Ih8, google-site-verification=b4G4_9mb32fVnzA3BbF8HteJ6X6oLjnze1vIPj9Z2bg, postman-domain-verification=23fc5fd6e1d939f434ac805949855b2a308d8bf7d885f9b3ca07305283ea7a132b85e000d7dd8d1732589ecb29099d1b2b895ab1a7a2cf316d27fcf287832790, protonmail-verification=96ca5019e36fc3a6dc5c4399efabe68792e55cc7, v=spf1 mx a a:mailer.gab.com ip4:72.35.70.68 ip4:72.35.70.69 ip4:72.35.70.70 include:_spf.protonmail.ch ~all
CNAME
—
CAA
0 issue "comodoca.com", 0 issue "digicert.com; cansignhttpexchanges=yes", 0 issue "letsencrypt.org", 0 issue "pki.goog; cansignhttpexchanges=yes", 0 issue "ssl.com", 0 issuewild "comodoca.com", 0 issuewild "digicert.com; cansignhttpexchanges=yes", 0 issuewild "letsencrypt.org"
WHOIS / Registration
Registration data planned
Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.
Subdomains
Subdomain enumeration pending
Every subdomain ever issued a TLS cert under this apex — extracted from Certificate Transparency logs, our own scan observations and body references.
Tech Stack
Tech detection pending
Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.
TLS Certificates
Subject: mr-mohamedragab.com
Issuer: YE1
SANs: mr-mohamedragab.com, www.mr-mohamedragab.com
Subject: *.givegab.com
Issuer: R3
SANs: *.givegab.com
Subject: *.givegab.com
Issuer: R3
SANs: *.givegab.com
Subject: media.gab.com
Issuer: E6
SANs: media.gab.com
Subject: rehabgab.com
Issuer: Go Daddy Secure Certificate Authority - G2
SANs: rehabgab.com, www.rehabgab.com
Subject: api.saas-3mpc-gab.com
Issuer: E7
SANs: api.audit-3mpc-gab.com, api.saas-3mpc-gab.com
Subject: *.givegab.com
Issuer: R3
SANs: *.givegab.com
Subject: *.givegab.com
Issuer: R3
SANs: *.givegab.com
Subject: *.givegab.com
Issuer: R3
SANs: *.givegab.com
Subject: *.givegab.com
Issuer: R3
SANs: *.givegab.com
Subject: *.givegab.com
Issuer: R3
SANs: *.givegab.com
Subject: cloud.vanitygab.com
Issuer: YR1
SANs: cloud.vanitygab.com, vanitygab.com
Subject: *.givegab.com
Issuer: R3
SANs: *.givegab.com
Subject: *.givegab.com
Issuer: R3
SANs: *.givegab.com
Subject: codex.urbangab.com
Issuer: WR3
SANs: codex.urbangab.com
Subject: *.givegab.com
Issuer: R3
SANs: *.givegab.com
Subject: *.givegab.com
Issuer: R3
SANs: *.givegab.com
Subject: *.givegab.com
Issuer: R3
SANs: *.givegab.com
Subject: *.givegab.com
Issuer: R3
SANs: *.givegab.com
Subject: grafana.jasgab.com.br
Issuer: YE1
SANs: grafana.jasgab.com.br
Subject: server5.melgab.com
Issuer: server5.melgab.com
SANs: 213.246.109.161, mail.melgab.com, melgab.com, server5.melgab.com, webmail.melgab.com
Subject: k6gab.com
Issuer: R12
SANs: k6gab.com, www.k6gab.com
Subject: dev.fragab.com
Issuer: ZeroSSL ECC DV SSL CA 2
SANs: dev.fragab.com, dev.fragab.de, dev.fragab.net
Subject: h5.hanmingab.com
Issuer: R13
SANs: h5.hanmingab.com
Subject: *.odoo-gab.com
Issuer: GlobalSign GCC R6 AlphaSSL CA 2025
SANs: *.odoo-gab.com, odoo-gab.com
Subject: backup.offspringab.com
Issuer: R12
SANs: backup.offspringab.com
Subject: mail.mmagab.com
Issuer: R12
SANs: mail.mmagab.com, mmagab.com, www.mmagab.com
Subject: *.vpgab.com
Issuer: Thawte TLS RSA CA G1
SANs: *.vpgab.com, vpgab.com
Subject: dev.fragab.com
Issuer: ZeroSSL ECC DV SSL CA 2
SANs: dev.fragab.com, dev.fragab.de, dev.fragab.net
Subject: api.hagab.com
Issuer: Telia RSA OV CA v4
SANs: api.hagab.com
IPs Citing This Domain
No citing IPs found yet
As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.
Origin / IP-Leak
USP
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
| Origin IP | Origin ASN | CDN ASN | Confidence | Reasoning |
|---|---|---|---|---|
| 77.246.101.239 | AS216071 | AS13335 | 95% | cert 440261ac… served by 77.246.101.239 (AS216071) carries SAN gab.com which currently resolves through Cloudflare (AS13335) at 104.17.101.61, 104.16.114.65, 2606:4700::6811:653d, 2606:4700::6810:7241 |
| 45.88.203.3 | AS42651 | AS13335 | 95% | cert dcf4337e… served by 45.88.203.3 (AS42651) carries SAN media.gab.com which currently resolves through Cloudflare (AS13335) at 104.17.101.61, 104.16.114.65, 2606:4700::6811:653d, 2606:4700::6810:7241 |
Threat Intelligence
Domain threat-intel pending
Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.
History
Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.
| Type | Value | First seen | Last seen |
|---|---|---|---|
| A | 104.17.101.61 | 2026-05-26 03:19:32.089 | 2026-07-28 12:35:28.535 |
| TXT | protonmail-verification=96ca5019e36fc3a6dc5c4399efabe68792e55cc7 | 2026-05-26 03:19:32.089 | 2026-07-28 12:35:28.535 |
| NS | elmo.ns.cloudflare.com | 2026-05-26 03:19:32.089 | 2026-07-28 12:35:28.535 |
| TXT | ca3-56e3739f7f644cdaaa0e7edc903cf648 | 2026-05-26 03:19:32.089 | 2026-07-28 12:35:28.535 |
| AAAA | 2606:4700::6810:7241 | 2026-05-26 03:19:32.089 | 2026-07-28 12:35:28.535 |
| TXT | google-site-verification=I40VLOSX3s7i4a7Smh-4JaLHVESDyNvD5RF6HGg8Ih8 | 2026-05-26 03:19:32.089 | 2026-07-28 12:35:28.535 |
| CAA | 0 issue "ssl.com" | 2026-05-26 03:19:32.089 | 2026-07-28 12:35:28.535 |
| TXT | postman-domain-verification=23fc5fd6e1d939f434ac805949855b2a308d8bf7d885f9b3ca07305283ea7a132b85e000d7dd8d1732589ecb29099d1b2b895ab1a7a2cf316d27fcf287832790 | 2026-05-26 03:19:32.089 | 2026-07-28 12:35:28.535 |
| A | 104.16.114.65 | 2026-05-26 03:19:32.089 | 2026-07-28 12:35:28.535 |
| NS | sue.ns.cloudflare.com | 2026-05-26 03:19:32.089 | 2026-07-28 12:35:28.535 |
| MX | 20 mailsec.protonmail.ch | 2026-05-26 03:19:32.089 | 2026-07-28 12:35:28.535 |
| CAA | 0 issuewild "digicert.com; cansignhttpexchanges=yes" | 2026-05-26 03:19:32.089 | 2026-07-28 12:35:28.535 |
| CAA | 0 issuewild "ssl.com" | 2026-05-26 03:19:32.089 | 2026-07-28 12:35:28.535 |
| AAAA | 2606:4700::6811:653d | 2026-05-26 03:19:32.089 | 2026-07-28 12:35:28.535 |
| MX | 10 mail.protonmail.ch | 2026-05-26 03:19:32.089 | 2026-07-28 12:35:28.535 |
| TXT | v=spf1 mx a a:mailer.gab.com ip4:72.35.70.68 ip4:72.35.70.69 ip4:72.35.70.70 include:_spf.protonmail.ch ~all | 2026-05-26 03:19:32.089 | 2026-07-28 12:35:28.535 |
| CAA | 0 issue "digicert.com; cansignhttpexchanges=yes" | 2026-05-26 03:19:32.089 | 2026-07-28 12:35:28.535 |
| CAA | 0 issuewild "comodoca.com" | 2026-05-26 03:19:32.089 | 2026-07-28 12:35:28.535 |
| CAA | 0 issuewild "letsencrypt.org" | 2026-05-26 03:19:32.089 | 2026-07-28 12:35:28.535 |
| CAA | 0 issuewild "pki.goog; cansignhttpexchanges=yes" | 2026-05-26 03:19:32.089 | 2026-07-28 12:35:28.535 |
| CAA | 0 issue "letsencrypt.org" | 2026-05-26 03:19:32.089 | 2026-07-28 12:35:28.535 |
| CAA | 0 issue "comodoca.com" | 2026-05-26 03:19:32.089 | 2026-07-28 12:35:28.535 |
| CAA | 0 issue "pki.goog; cansignhttpexchanges=yes" | 2026-05-26 03:19:32.089 | 2026-07-28 12:35:28.535 |
| TXT | google-site-verification=b4G4_9mb32fVnzA3BbF8HteJ6X6oLjnze1vIPj9Z2bg | 2026-06-16 07:52:00.718 | 2026-07-28 12:35:28.535 |