Domain
web.dev
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of web.dev
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
Hosting IPs
107
A/AAAA targets
Subdomains
20
CT + scan + body
Record Types
5
seen in DNS
Observed Certs
43
in our scans
DNS Records
A
216.239.32.27
AAAA
2001:4860:4802:32::1b
MX
—
NS
ns1.zdns.google, ns2.zdns.google, ns3.zdns.google, ns4.zdns.google
TXT
google-site-verification=1KUpoM0U9uMGLkzIL1CaCnZDapQByrD74Wr92wrYZdA
CNAME
—
CAA
0 issue "letsencrypt.org", 0 issue "pki.goog"
WHOIS / Registration
Registration data planned
Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.
Subdomains
Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.
| Subdomain | Resolves to | Last seen |
|---|---|---|
| pagespeed.web.dev | 2026-07-27 12:21:18.087 | |
| web.dev | 2026-07-28 20:05:38.639 |
Tech Stack
Tech detection pending
Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.
TLS Certificates
Subject: serverweb.dev
Issuer: YE2
SANs: serverweb.dev
Subject: adtbuzz.secweb.dev
Issuer: E8
SANs: adtbuzz.secweb.dev
Subject: pgweb.dev.api.yedi.app
Issuer: WR3
SANs: pgweb.dev.api.yedi.app
Subject: web.dev
Issuer: casa-SRV-CERTCA-CA
SANs: *.bsb.aero, *.carrasco.aero, *.corpam.com.ar, *.dev.aa2000.com.ar, *.dev.bsb.aero, *.dev.carrasco.aero, *.dev.corpam.com.ar, *.dev.nat.aero, *.dev.tagsa.aero, *.dev.tca.aero, *.dev.tce.aero, *.dev.tcu.aero, *.dev.unitecblue.com.ar, *.dev.zvartnots.aero, *.nat.aero, *.stage.aa2000.com.ar, *.stage.bsb.aero, *.stage.carrasco.aero, *.stage.corpam.com.ar, *.stage.nat.aero, *.stage.tagsa.aero, *.stage.tca.aero, *.stage.tce.aero, *.stage.tcu.aero, *.stage.unitecblue.com.ar, *.stage.zvartnots.aero, *.tagsa.aero, *.tca.aero, *.tce.aero, *.tcu.aero, *.unitecblue.com.ar, *.zvartnots.aero, web.dev
Subject: n8n.iaweb.dev
Issuer: YE1
SANs: n8n.iaweb.dev
Subject: bookfilmcrewcom.stag.tempweb.dev
Issuer: YR1
SANs: bookfilmcrewcom.stag.tempweb.dev
Subject: energarde.jkweb.dev
Issuer: YR2
SANs: energarde.jkweb.dev
Subject: bazalt.acc.h1web.dev
Issuer: YE1
SANs: bazalt.acc.h1web.dev
Subject: efremovweb.dev
Issuer: YE2
SANs: efremovweb.dev, www.efremovweb.dev
Subject: web.devops-testing.123preview.com
Issuer: R3
SANs: web.devops-testing.123preview.com
Subject: maciek2.revoweb.dev
Issuer: YE2
SANs: maciek2.revoweb.dev
Subject: siafintech.ln.nfweb.dev
Issuer: YE1
SANs: *.siafintech.ln.nfweb.dev, siafintech.ln.nfweb.dev
Subject: metabase.dev.client.textbookweb.devsti.me
Issuer: YR1
SANs: metabase.dev.client.textbookweb.devsti.me, www.metabase.dev.client.textbookweb.devsti.me
Subject: xteinweb.dev.colchonessunmoon.com
Issuer: YE1
SANs: xteinweb.dev.colchonessunmoon.com
Subject: stg-voyager3-web.dev-appleworld.com
Issuer: WR3
SANs: stg-voyager3-web.dev-appleworld.com
Subject: access.signatureweb.dev
Issuer: R12
SANs: access.signatureweb.dev
Subject: dissel.sw6.acc.h1web.dev
Issuer: E8
SANs: dissel.sw6.acc.h1web.dev
Subject: gfce-web.devx-testing.agency
Issuer: YR1
SANs: gfce-web.devx-testing.agency
Subject: staging.championweb.dev
Issuer: WR3
SANs: staging.championweb.dev
Subject: api-media.airweb.dev
Issuer: WR3
SANs: api-media.airweb.dev
Subject: amplifygpobeta.ccweb.dev
Issuer: YE1
SANs: amplifygpobeta.ccweb.dev
Subject: blake.signatureweb.dev
Issuer: E8
SANs: blake.signatureweb.dev
Subject: web.dev.privateer.studio
Issuer: WR3
SANs: web.dev.privateer.studio
Subject: boilermarkt.live.h1web.dev
Issuer: YE1
SANs: boilermarkt.live.h1web.dev
Subject: bf2.ctrlweb.dev
Issuer: YR1
SANs: badges.educrm.ca, bf2.ctrlweb.dev, reine-marie.ctrlweb.dev
Subject: *.smweb.dev
Issuer: YR2
SANs: *.smweb.dev
Subject: web.dev.recon.kolomoni.net
Issuer: YE1
SANs: web.dev.recon.kolomoni.net
Subject: cloud.nevoweb.dev
Issuer: E7
SANs: cloud.nevoweb.dev
Subject: pa-relay.thietkeweb.dev
Issuer: YR2
SANs: pa-relay.thietkeweb.dev
Subject: web.devant.ai
Issuer: YR1
SANs: web.devant.ai
IPs Citing This Domain
Hosts whose HTML body references this domain. Strong signal for origin/mirror/embed discovery.
209.38.108.184:443
href · ×5
143.198.133.253:443
href · ×3
35.216.219.119:80
href · ×3
159.69.153.188:443
href · ×2
66.94.103.100:443
href · ×2
34.117.151.154:443
href · ×2
62.146.232.190:443
href · ×2
49.13.194.178:443
href · ×2
5.26.240.134:80
href · ×2
8.163.96.88:80
href · ×2
178.242.160.241:80
href · ×2
96.32.52.95:443
href · ×2
98.89.38.130:443
href · ×2
34.192.12.127:443
href · ×2
34.81.115.189:80
href · ×2
54.90.25.89:80
href · ×2
34.107.227.141:443
href · ×2
3.96.197.86:80
href · ×1
52.20.49.6:443
href · ×1
219.75.254.150:80
href · ×1
24.144.95.180:80
href · ×1
134.65.206.6:443
href · ×1
34.223.215.214:443
href · ×1
217.18.62.41:443
href · ×1
64.90.53.116:443
href · ×1
34.223.215.214:80
href · ×1
137.184.88.16:443
href · ×1
194.206.239.2:443
href · ×1
217.160.215.198:443
href · ×1
91.99.182.92:443
href · ×1
34.95.65.4:443
href · ×1
194.13.81.73:8081
href · ×1
117.72.209.199:80
href · ×1
5.63.54.206:443
href · ×1
18.211.162.202:80
href · ×1
18.163.178.179:443
href · ×1
3.96.212.191:80
href · ×1
98.82.91.136:443
href · ×1
85.234.159.76:8443
href · ×1
13.40.147.6:80
href · ×1
35.154.63.28:443
href · ×1
18.211.162.202:443
href · ×1
46.224.186.29:443
href · ×1
167.235.230.3:443
href · ×1
3.233.183.49:443
href · ×1
35.86.18.140:443
href · ×1
109.120.138.23:443
href · ×1
104.248.125.192:443
href · ×1
209.38.178.193:443
href · ×1
13.126.150.128:80
href · ×1
Origin / IP-Leak
USP
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
No origin-IP leaks detected (yet)
Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.
Threat Intelligence
Domain threat-intel pending
Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.
History
Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.
| Type | Value | First seen | Last seen |
|---|---|---|---|
| TXT | google-site-verification=1KUpoM0U9uMGLkzIL1CaCnZDapQByrD74Wr92wrYZdA | 2026-05-26 05:18:44.431 | 2026-07-28 20:05:38.639 |
| A | 216.239.32.27 | 2026-05-26 05:18:44.431 | 2026-07-28 20:05:38.639 |
| NS | ns4.zdns.google | 2026-05-26 05:18:44.431 | 2026-07-28 20:05:38.639 |
| NS | ns2.zdns.google | 2026-05-26 05:18:44.431 | 2026-07-28 20:05:38.639 |
| AAAA | 2001:4860:4802:32::1b | 2026-05-26 05:18:44.431 | 2026-07-28 20:05:38.639 |
| NS | ns3.zdns.google | 2026-05-26 05:18:44.431 | 2026-07-28 20:05:38.639 |
| NS | ns1.zdns.google | 2026-05-26 05:18:44.431 | 2026-07-28 20:05:38.639 |
| CAA | 0 issue "pki.goog" | 2026-05-26 05:18:44.431 | 2026-07-28 20:05:38.639 |
| CAA | 0 issue "letsencrypt.org" | 2026-05-26 05:18:44.431 | 2026-07-28 20:05:38.639 |