Domain

40054984.workers.dev

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

DNS Check HTTP Check Run Full Scan .dev TLD

Run a live full scan of 40054984.workers.dev

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now

Hosting IPs

A/AAAA targets

Subdomains

CT + scan + body

Record Types

seen in DNS

Observed Certs

in our scans

DNS Records

—

AAAA

—

mia.ns.cloudflare.com, venkat.ns.cloudflare.com

TXT

—

CNAME

—

CAA

—

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.

Subdomain	Resolves to	Last seen
vless.40054984.workers.dev	188.114.97.0 2a06:98c1:3121::3 2a06:98c1:3120:: 188.114.96.3 +4	2026-08-28 09:39:50.777
worker-dark-snow-02b6.40054984.workers.dev	2a06:98c1:3121::4 188.114.97.0 2a06:98c1:3120:: 188.114.96.3 +4	2026-08-22 23:49:37.750
xsjcloud.40054984.workers.dev	188.114.97.0 2a06:98c1:3121::3 2a06:98c1:3120:: 188.114.96.3 +4	2026-08-22 02:00:49.774
vlees.40054984.workers.dev	188.114.97.0 2a06:98c1:3121::3 188.114.96.3 188.114.97.3 +2	2026-08-22 19:00:49.808
cf-worker-ws-dev.40054984.workers.dev	188.114.96.0 2a06:98c1:3121:: 188.114.97.0 2a06:98c1:3120::	2026-08-07 05:21:02.603
woker-vless.40054984.workers.dev	188.114.97.3 2a06:98c1:3121:: 2a06:98c1:3120:: 188.114.96.3	2026-08-27 05:22:00.422
worker-young-brook-1a6b.40054984.workers.dev	188.114.96.0 2a06:98c1:3120::3 188.114.97.0 2a06:98c1:3121::3	2026-08-10 04:25:43.685
40054984.workers.dev	DNS pending	—

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

Certificate observations pending

TLS certs naming this domain in subject or SANs will appear here as our scan-layer catches them.

IPs Citing This Domain

No citing IPs found yet

As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

No origin-IP leaks detected (yet)

Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.

CT-Log Evidence

Certificates from public Certificate Transparency logs whose subject or SAN names this domain — including historic certs we never observed live.

f858aa361200a202… digicert · wyvern2026h2

Subject: 40054984.workers.dev

Issuer: WE1

SANs: 40054984.workers.dev, *.worker-dark-snow-02b6.40054984.workers.dev

Valid: 2026-08-12 04:45:52 → 2026-11-10 05:45:32

f772f2eb4c039834… digicert · wyvern2026h2

Subject: 40054984.workers.dev

Issuer: WR1

SANs: 40054984.workers.dev, *.worker-dark-snow-02b6.40054984.workers.dev

Valid: 2026-08-12 04:45:15 → 2026-11-10 05:44:53

5049b83a16229ac1… digicert · wyvern2026h2

Subject: 40054984.workers.dev

Issuer: WE1

SANs: 40054984.workers.dev, *.worker-dark-snow-02b6.40054984.workers.dev

Valid: 2026-08-12 04:21:10 → 2026-11-10 05:20:55

e1792b81ee505280… digicert · wyvern2026h2

Subject: 40054984.workers.dev

Issuer: WR1

SANs: 40054984.workers.dev, *.worker-dark-snow-02b6.40054984.workers.dev

Valid: 2026-08-12 04:20:48 → 2026-11-10 05:17:54

d9ccfd6d21ad8791… digicert · wyvern2026h2

Subject: 40054984.workers.dev

Issuer: WE1

SANs: 40054984.workers.dev, *.vless.40054984.workers.dev

Valid: 2026-08-11 14:13:56 → 2026-11-09 15:13:18

e9137b88cf3b2876… digicert · wyvern2026h2

Subject: 40054984.workers.dev

Issuer: WR1

SANs: 40054984.workers.dev, *.vless.40054984.workers.dev

Valid: 2026-08-11 14:13:11 → 2026-11-09 15:12:42

3f8014694ad1cfbb… digicert · wyvern2026h2

Subject: 40054984.workers.dev

Issuer: WE1

SANs: 40054984.workers.dev, *.vless.40054984.workers.dev

Valid: 2026-08-11 14:00:01 → 2026-11-09 14:59:45

96d616d8cb2c9490… digicert · wyvern2026h2

Subject: 40054984.workers.dev

Issuer: WR1

SANs: 40054984.workers.dev, *.vless.40054984.workers.dev

Valid: 2026-08-11 13:59:38 → 2026-11-09 14:57:14

4e8116934d848c79… digicert · wyvern2026h2

Subject: 40054984.workers.dev

Issuer: WE1

SANs: 40054984.workers.dev, *.xsjcloud.40054984.workers.dev

Valid: 2026-08-11 02:59:58 → 2026-11-09 03:59:30

f0406549be1e622d… digicert · wyvern2026h2

Subject: 40054984.workers.dev

Issuer: WR1

SANs: 40054984.workers.dev, *.xsjcloud.40054984.workers.dev

Valid: 2026-08-11 02:59:24 → 2026-11-09 03:59:04

4cd0980c02a83288… digicert · wyvern2026h2

Subject: 40054984.workers.dev

Issuer: WE1

SANs: 40054984.workers.dev, *.xsjcloud.40054984.workers.dev

Valid: 2026-08-11 02:23:30 → 2026-11-09 03:23:17

1a56230045b42b2a… digicert · wyvern2026h2

Subject: 40054984.workers.dev

Issuer: WR1

SANs: 40054984.workers.dev, *.xsjcloud.40054984.workers.dev

Valid: 2026-08-11 02:23:10 → 2026-11-09 03:20:39

e10d7a8819fed641… google · argon2026h2

Subject: 40054984.workers.dev

Issuer: WE1

SANs: 40054984.workers.dev, *.worker-young-brook-1a6b.40054984.workers.dev

Valid: 2026-08-09 02:30:36 → 2026-11-07 03:30:33

f463002ea004b540… digicert · wyvern2026h2

Subject: 40054984.workers.dev

Issuer: WR1

SANs: 40054984.workers.dev, *.worker-young-brook-1a6b.40054984.workers.dev

Valid: 2026-08-09 02:30:26 → 2026-11-07 03:28:04

470f426b8c00b1cd… digicert · wyvern2026h2

Subject: 40054984.workers.dev

Issuer: WR1

SANs: 40054984.workers.dev, *.cf-worker-ws-dev.40054984.workers.dev

Valid: 2026-08-06 20:07:15 → 2026-11-04 21:05:36

0285ddceedf6e12b… digicert · wyvern2026h2

Subject: 40054984.workers.dev

Issuer: WE1

SANs: 40054984.workers.dev, *.woker-vless.40054984.workers.dev

Valid: 2026-08-05 05:25:49 → 2026-11-03 06:25:18

22aa9496d8131d78… google · xenon2026h2

Subject: 40054984.workers.dev

Issuer: WE1

SANs: 40054984.workers.dev, *.worker-dark-snow-02b6.40054984.workers.dev

Valid: 2026-06-14 03:18:55 → 2026-09-12 04:18:37

163fe1877c81a525… google · xenon2026h2

Subject: 40054984.workers.dev

Issuer: WR1

SANs: 40054984.workers.dev, *.worker-dark-snow-02b6.40054984.workers.dev

Valid: 2026-06-14 03:02:33 → 2026-09-12 03:59:46

9b8e03b10a70dfb2… google · xenon2026h2

Subject: 40054984.workers.dev

Issuer: WR1

SANs: 40054984.workers.dev, *.vless.40054984.workers.dev

Valid: 2026-06-13 13:26:53 → 2026-09-11 14:26:31

8c41f239501579a4… google · xenon2026h2

Subject: 40054984.workers.dev

Issuer: WR1

SANs: 40054984.workers.dev, *.vless.40054984.workers.dev

Valid: 2026-06-13 13:18:47 → 2026-09-11 14:16:09

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.

Type	Value	First seen	Last seen
NS	mia.ns.cloudflare.com	2026-06-19 15:53:28.334	2026-08-28 09:39:50.777
NS	venkat.ns.cloudflare.com	2026-06-19 15:53:28.334	2026-08-28 09:39:50.777