Domain
angel.co
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of angel.co
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
Hosting IPs
2
A/AAAA targets
Subdomains
17
CT + scan + body
Record Types
4
seen in DNS
Observed Certs
13
in our scans
DNS Records
A
104.18.14.64, 104.18.15.64
AAAA
—
MX
1 aspmx.l.google.com, 10 alt3.aspmx.l.google.com, 10 alt4.aspmx.l.google.com, 5 alt1.aspmx.l.google.com, 5 alt2.aspmx.l.google.com
NS
amber.ns.cloudflare.com, nick.ns.cloudflare.com
TXT
343512355-6055438, apple-domain-verification=G2TgrjmhmAC2wKD3, google-site-verification=0WkHfe69Yt-Mi0woXYaB7WDj8T0W2oskwMshvMV3f_A, google-site-verification=1EnbqLhI1OCelRJrfWMYH3ebueeNm8M1hcZjIO3nhok, google-site-verification=5yxdwiozCwysBvQeonI7xMuLLA1d9NpNGTKBZAbMuso, google-site-verification=AY-t0Qp-jZuBb16CaPQTT_IRoeE33sA0SZSuu2Q5fd0, google-site-verification=NOzBC9xXQ6t4dJZZxVFPDWwm9XGZ9beSjns_vT3jPSw, google-site-verification=isVyjz-F6djq-a5OgHeDmnwwJwqQCB_uG0lz_wGmKvI
CNAME
—
CAA
—
WHOIS / Registration
Registration data planned
Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.
Subdomains
Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.
| Subdomain | Resolves to | Last seen |
|---|---|---|
| angel.co | 2026-07-27 07:19:40.268 | |
| help.angel.co | 2026-07-17 05:07:33.306 | |
| www.angel.co | 2026-07-27 02:39:25.396 | |
| help.venture.angel.co | 1970-01-01 00:00:00.000 | |
| sso.angel.co | 1970-01-01 00:00:00.000 |
Tech Stack
Tech detection pending
Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.
TLS Certificates
Subject: *.api.uangel.com
Issuer: Sectigo RSA Domain Validation Secure Server CA
SANs: *.api.uangel.com, api.uangel.com
Subject: *.bettercallangel.com
Issuer: *.bettercallangel.com
SANs: *.bettercallangel.com, bettercallangel.com, host, host.gstechla.com, localhost
Subject: smarcangel.com.pe
Issuer: YR1
SANs: smarcangel.com.pe, www.smarcangel.com.pe
Subject: *.mukibangel.com
Issuer: Certum DV TLS G2 R39 CA
SANs: *.mukibangel.com, mukibangel.com
Subject: click.fun88angel.com
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: click.fun88angel.com
Subject: revistaangel.com.br
Issuer: YR1
SANs: revistaangel.com.br, www.revistaangel.com.br
Subject: charmeangel.com
Issuer: YR2
SANs: charmeangel.com, www.charmeangel.com
Subject: www.myautoangel.com
Issuer: YE2
SANs: www.myautoangel.com
Subject: rangel.com.do
Issuer: YR1
SANs: rangel.com.do, www.rangel.com.do
Subject: diabolicangel.com
Issuer: YR1
SANs: admin.diabolicangel.com, diabolicangel.com, mail.diabolicangel.com, webmail.diabolicangel.com, www.diabolicangel.com
Subject: viyu.moonangel.com
Issuer: YR1
SANs: viyu.moonangel.com
Subject: creatorangel.com
Issuer: YE2
SANs: creatorangel.com, www.creatorangel.com
Subject: burningangel.com
Issuer: WE1
SANs: *.burningangel.com, burningangel.com
Subject: pintureriamiguelangel.com
Issuer: YR2
SANs: pintureriamiguelangel.com
Subject: falconfeeds-intake.cybelangel.com
Issuer: WR3
SANs: falconfeeds-intake.cybelangel.com
Subject: *.emailsangel.com
Issuer: YR2
SANs: *.emailsangel.com, emailsangel.com
Subject: wangel.co.za
Issuer: YR1
SANs: *.artisanlocks.co.za, *.samsonhardware.co.za, *.samsonplumbing.co.za, *.samsonsecurity.co.za, *.wangel.co.za, artisanlocks.co.za, samsonhardware.co.za, samsonplumbing.co.za, samsonsecurity.co.za, wangel.co.za
Subject: *.uangel.com
Issuer: Sectigo RSA Domain Validation Secure Server CA
SANs: *.uangel.com, uangel.com
Subject: www.myautoangel.com
Issuer: YE2
SANs: www.myautoangel.com
Subject: preview.coffeeangel.com
Issuer: R12
SANs: preview.coffeeangel.com, www.preview.coffeeangel.com
Subject: *.meyerangel.com
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.meyerangel.com, meyerangel.com
Subject: today.preview.blueangel.co.za
Issuer: YR1
SANs: api.today.preview.blueangel.co.za, paytoday.preview.blueangel.co.za, today.preview.blueangel.co.za
Subject: kyunkyun.twin-angel.com
Issuer: E8
SANs: kyunkyun.twin-angel.com
Subject: transsexualangel.com
Issuer: WE1
SANs: *.transsexualangel.com, transsexualangel.com
Subject: www.myautoangel.com
Issuer: YE2
SANs: www.myautoangel.com
Subject: www.myautoangel.com
Issuer: YE2
SANs: www.myautoangel.com
Subject: home.18thAngel.com
Issuer: home.18thAngel.com
SANs: 0n9lawyg1p84dtmv.myfritz.net, Maze, fritz.box, fritz.nas, home.18thAngel.com, myfritz.box, www.fritz.box, www.fritz.nas, www.myfritz.box
Subject: hevangel.com
Issuer: YE2
SANs: hevangel.com
Subject: FPDLPSRV.archerandangel.com
Issuer: TritonCA
SANs: 192.168.1.124, FPDLPSRV, FPDLPSRV.archerandangel.com
Subject: api.skyangel.com.mx
Issuer: R13
SANs: api.skyangel.com.mx
IPs Citing This Domain
Hosts whose HTML body references this domain. Strong signal for origin/mirror/embed discovery.
51.161.35.166:443
href · ×4
164.90.156.233:443
href · ×4
97.74.85.223:443
href · ×4
143.95.34.41:443
href · ×2
49.12.6.143:443
href · ×2
35.226.88.198:443
href · ×2
52.35.136.74:80
href · ×2
167.99.55.232:80
href · ×2
104.198.142.62:443
href · ×2
167.99.55.232:443
href · ×2
43.239.223.83:8080
href · ×2
198.199.71.199:443
href · ×1
3.143.63.6:80
href · ×1
3.10.20.67:443
href · ×1
92.243.16.28:443
href · ×1
35.182.49.132:80
href · ×1
159.203.157.248:443
href · ×1
54.68.250.124:443
href · ×1
52.206.1.97:80
href · ×1
98.94.211.16:443
href · ×1
34.172.6.97:443
href · ×1
76.223.27.36:443
href · ×1
216.92.88.87:443
href · ×1
52.41.33.44:443
href · ×1
143.198.132.123:80
href · ×1
167.71.93.164:80
href · ×1
35.226.88.198:80
href · ×1
167.99.51.45:80
href · ×1
192.241.156.193:443
href · ×1
13.234.167.63:443
href · ×1
45.55.55.176:80
href · ×1
13.126.240.141:80
href · ×1
34.210.196.48:443
href · ×1
44.194.18.214:443
href · ×1
35.190.82.87:80
href · ×1
130.211.199.177:80
href · ×1
104.234.167.171:443
href · ×1
52.47.53.204:443
href · ×1
44.254.146.143:443
href · ×1
67.205.149.122:443
href · ×1
35.153.182.41:80
href · ×1
45.252.190.185:8080
href · ×1
54.183.183.85:80
href · ×1
13.248.152.144:443
href · ×1
34.8.233.28:443
href · ×1
206.189.171.79:443
href · ×1
4.236.184.174:443
href · ×1
Origin / IP-Leak
USP
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
No origin-IP leaks detected (yet)
Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.
Threat Intelligence
Domain threat-intel pending
Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.
History
Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.
| Type | Value | First seen | Last seen |
|---|---|---|---|
| TXT | google-site-verification=isVyjz-F6djq-a5OgHeDmnwwJwqQCB_uG0lz_wGmKvI | 2026-05-26 02:22:42.939 | 2026-07-27 07:19:40.268 |
| A | 104.18.14.64 | 2026-05-26 02:22:42.939 | 2026-07-27 07:19:40.268 |
| TXT | google-site-verification=AY-t0Qp-jZuBb16CaPQTT_IRoeE33sA0SZSuu2Q5fd0 | 2026-05-26 02:22:42.939 | 2026-07-27 07:19:40.268 |
| TXT | google-site-verification=5yxdwiozCwysBvQeonI7xMuLLA1d9NpNGTKBZAbMuso | 2026-05-26 02:22:42.939 | 2026-07-27 07:19:40.268 |
| TXT | google-site-verification=NOzBC9xXQ6t4dJZZxVFPDWwm9XGZ9beSjns_vT3jPSw | 2026-05-26 02:22:42.939 | 2026-07-27 07:19:40.268 |
| TXT | 343512355-6055438 | 2026-05-26 02:22:42.939 | 2026-07-27 07:19:40.268 |
| TXT | google-site-verification=0WkHfe69Yt-Mi0woXYaB7WDj8T0W2oskwMshvMV3f_A | 2026-05-26 02:22:42.939 | 2026-07-27 07:19:40.268 |
| NS | amber.ns.cloudflare.com | 2026-05-26 02:22:42.939 | 2026-07-27 07:19:40.268 |
| TXT | segment-site-verification=paAiRwNSu7WW0kNdyq4LzL4VjD935cFU | 2026-05-26 02:22:42.939 | 2026-07-27 07:19:40.268 |
| TXT | v=spf1 include:_spf.google.com -all | 2026-05-26 02:22:42.939 | 2026-07-27 07:19:40.268 |
| TXT | pardot853403=1d652582b22f4f6319ea39c371258f9358aef73510763b9e5d82efb7d7c62f21 | 2026-05-26 02:22:42.939 | 2026-07-27 07:19:40.268 |
| MX | 5 alt2.aspmx.l.google.com | 2026-05-26 02:22:42.939 | 2026-07-27 07:19:40.268 |
| A | 104.18.15.64 | 2026-05-26 02:22:42.939 | 2026-07-27 07:19:40.268 |
| TXT | google-site-verification=tTpZs3oPUOpIxnIGaFsvD1O3wEfcnvz4qAF7C5BgfKo | 2026-05-26 02:22:42.939 | 2026-07-27 07:19:40.268 |
| MX | 10 alt4.aspmx.l.google.com | 2026-05-26 02:22:42.939 | 2026-07-27 07:19:40.268 |
| MX | 1 aspmx.l.google.com | 2026-05-26 02:22:42.939 | 2026-07-27 07:19:40.268 |
| MX | 5 alt1.aspmx.l.google.com | 2026-05-26 02:22:42.939 | 2026-07-27 07:19:40.268 |
| NS | nick.ns.cloudflare.com | 2026-05-26 02:22:42.939 | 2026-07-27 07:19:40.268 |
| TXT | apple-domain-verification=G2TgrjmhmAC2wKD3 | 2026-05-26 02:22:42.939 | 2026-07-27 07:19:40.268 |
| TXT | hcp-domain-verification=879e5126ad2ecf29a90d15f4d762240b80b2147d72d3b71ffae6f74aec40bf73 | 2026-05-26 02:22:42.939 | 2026-07-27 07:19:40.268 |
| MX | 10 alt3.aspmx.l.google.com | 2026-05-26 02:22:42.939 | 2026-07-27 07:19:40.268 |
| TXT | google-site-verification=1EnbqLhI1OCelRJrfWMYH3ebueeNm8M1hcZjIO3nhok | 2026-05-26 02:22:42.939 | 2026-07-27 07:19:40.268 |