Domain
co.at
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of co.at
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
Hosting IPs
—
A/AAAA targets
Subdomains
—
CT + scan + body
Record Types
—
seen in DNS
Observed Certs
—
in our scans
DNS Records
A
—
AAAA
—
MX
—
NS
—
TXT
—
CNAME
—
CAA
—
WHOIS / Registration
Registration data planned
Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.
Subdomains
Subdomain enumeration pending
Every subdomain ever issued a TLS cert under this apex — extracted from Certificate Transparency logs, our own scan observations and body references.
Tech Stack
Tech detection pending
Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.
TLS Certificates
Subject: chat.gaia.co.at
Issuer: YE1
SANs: chat.gaia.co.at
Subject: aadtungw2.facc.co.at
Issuer: CAISRV1
SANs: 10.58.1.207, 213.174.241.18, aadtungw2.facc.co.at, aadtungw2.facc.com
Subject: ts.liu.co.at
Issuer: YR2
SANs: ts.liu.co.at
Subject: mx1.mailhost.co.at
Issuer: mx1.mailhost.co.at
SANs: mx1.mailhost.co.at
Subject: *.infoniqa.co.at
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.infoniqa.co.at, infoniqa.co.at
Subject: clunier.webpoint.co.at
Issuer: YE1
SANs: clunier.webpoint.co.at
Subject: moveco.at
Issuer: YR1
SANs: moveco.at, www.moveco.at
Subject: *.efg.co.at
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.efg.co.at, efg.co.at
Subject: ixi.vsl.co.at
Issuer: GlobalSign GCC R3 DV TLS CA 2020
SANs: ixi.vsl.co.at, syn.vsl.co.at, synf.vsl.co.at
Subject: maierhofer.co.at
Issuer: YR2
SANs: maierhofer.co.at, www.maierhofer.co.at
Subject: vps.bits.co.at
Issuer: YR1
SANs: vps.bits.co.at
Subject: *.rainer.co.at
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.rainer.co.at, rainer.co.at
Subject: *.zentrale.walch.co.at
Issuer: RapidSSL TLS RSA CA G1
SANs: *.zentrale.walch.co.at, zentrale.walch.co.at
Subject: *.tip.co.at
Issuer: Go Daddy Secure Certificate Authority - G2
SANs: *.tip.co.at, tip.co.at
Subject: *.infoniqa.co.at
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.infoniqa.co.at, infoniqa.co.at
Subject: support.ibs-data.co.at
Issuer: Sectigo RSA Domain Validation Secure Server CA
SANs: support.ibs-data.co.at, www.support.ibs-data.co.at
Subject: rdp.kurzmann.co.at
Issuer: R10
SANs: autodiscover.kurzmann.co.at, rdp.kurzmann.co.at
Subject: *.kallco.at
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.kallco.at, kallco.at
Subject: *.ikk.co.at
Issuer: GlobalSign GCC R6 AlphaSSL CA 2025
SANs: *.ikk.co.at, ikk.co.at
Subject: *.egos.co.at
Issuer: Go Daddy Secure Certificate Authority - G2
SANs: *.egos.co.at, egos.co.at
Subject: soundaround.co.at
Issuer: YR1
SANs: *.soundaround.co.at, soundaround.co.at
Subject: vps-web2.bits.co.at
Issuer: YR1
SANs: vps-web2.bits.co.at
Subject: vz01.holub.co.at
Issuer: YE1
SANs: vz01.holub.co.at
Subject: vpn.jung.co.at
Issuer: YR1
SANs: vpn.jung.co.at
Subject: gruenbeck.co.at
Issuer: RapidSSL TLS RSA CA G1
SANs: gruenbeck.co.at, www.gruenbeck.co.at
Subject: mail.werbung-co.at
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: mail.werbung-co.at, www.mail.werbung-co.at
Subject: *.infoniqa.co.at
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.infoniqa.co.at, infoniqa.co.at
Subject: work.co.at
Issuer: YR2
SANs: work.co.at, www.work.co.at
Subject: alpina.co.at
Issuer: YR2
SANs: alpina.co.at, www.alpina.co.at
Subject: *.feratel.co.at
Issuer: Thawte TLS RSA CA G1
SANs: *.feratel.co.at, feratel.co.at
IPs Citing This Domain
No citing IPs found yet
As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.
Origin / IP-Leak
USP
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
| Origin IP | Origin ASN | CDN ASN | Confidence | Reasoning |
|---|---|---|---|---|
| 80.79.123.107 | AS34702 | AS54113 | 95% | cert 2e69232e… served by 80.79.123.107 (AS34702) carries SAN pinterest.co.at which currently resolves through Fastly (AS54113) at 151.101.64.84, 151.101.128.84, 151.101.192.84, 151.101.0.84 |
| 62.240.131.99 | AS51265 | AS8075 | 95% | cert 6630f802… served by 62.240.131.99 (AS51265) carries SAN autodiscover.vsl.co.at which currently resolves through Microsoft (AS8075) at 40.99.205.24, 40.99.205.56, 52.98.232.40, 52.97.200.184 |
| 134.209.83.160 | AS14061 | AS54113 | 95% | cert 2e69232e… served by 134.209.83.160 (AS14061) carries SAN pinterest.co.at which currently resolves through Fastly (AS54113) at 151.101.64.84, 151.101.128.84, 151.101.192.84, 151.101.0.84 |
| 42.125.200.234 | AS10010 | AS54113 | 95% | cert c38e9689… served by 42.125.200.234 (AS10010) carries SAN pinterest.co.at which currently resolves through Fastly (AS54113) at 151.101.64.84, 151.101.128.84, 151.101.192.84, 151.101.0.84 |
| 139.175.165.32 | AS4780 | AS54113 | 95% | cert c38e9689… served by 139.175.165.32 (AS4780) carries SAN pinterest.co.at which currently resolves through Fastly (AS54113) at 151.101.64.84, 151.101.128.84, 151.101.192.84, 151.101.0.84 |
| 45.84.123.123 | AS9009 | AS54113 | 95% | cert 2e69232e… served by 45.84.123.123 (AS9009) carries SAN pinterest.co.at which currently resolves through Fastly (AS54113) at 151.101.64.84, 151.101.128.84, 151.101.192.84, 151.101.0.84 |
| 193.118.59.112 | AS21859 | AS54113 | 95% | cert 2e69232e… served by 193.118.59.112 (AS21859) carries SAN pinterest.co.at which currently resolves through Fastly (AS54113) at 151.101.64.84, 151.101.128.84, 151.101.192.84, 151.101.0.84 |
| 185.218.195.54 | AS213468 | AS54113 | 95% | cert 2e69232e… served by 185.218.195.54 (AS213468) carries SAN pinterest.co.at which currently resolves through Fastly (AS54113) at 151.101.64.84, 151.101.128.84, 151.101.192.84, 151.101.0.84 |
| 130.17.18.56 | AS16003 | AS54113 | 95% | cert 2e69232e… served by 130.17.18.56 (AS16003) carries SAN pinterest.co.at which currently resolves through Fastly (AS54113) at 151.101.64.84, 151.101.128.84, 151.101.192.84, 151.101.0.84 |
| 45.129.181.51 | AS197540 | AS16509 | 95% | cert 03e408d5… served by 45.129.181.51 (AS197540) carries SAN nvidia.co.at which currently resolves through Amazon (AS16509) at 34.194.97.138, 34.200.2.98 |
| 23.251.43.119 | AS62610 | AS54113 | 95% | cert 2e69232e… served by 23.251.43.119 (AS62610) carries SAN pinterest.co.at which currently resolves through Fastly (AS54113) at 151.101.64.84, 151.101.128.84, 151.101.192.84, 151.101.0.84 |
| 144.31.111.30 | AS207513 | AS54113 | 95% | cert 2e69232e… served by 144.31.111.30 (AS207513) carries SAN pinterest.co.at which currently resolves through Fastly (AS54113) at 151.101.64.84, 151.101.128.84, 151.101.192.84, 151.101.0.84 |
| 104.85.148.14 | AS55836 | AS16625 | 95% | cert 35d27e00… served by 104.85.148.14 (AS55836) carries SAN www.laufen.co.at which currently resolves through Akamai (AS16625) at 23.222.50.105, 2a02:26f0:1180:182::302a, 2a02:26f0:1180:184::302a |
| 2.26.88.16 | AS207957 | AS54113 | 95% | cert 2e69232e… served by 2.26.88.16 (AS207957) carries SAN pinterest.co.at which currently resolves through Fastly (AS54113) at 151.101.64.84, 151.101.128.84, 151.101.192.84, 151.101.0.84 |
| 80.79.123.82 | AS34702 | AS54113 | 95% | cert c38e9689… served by 80.79.123.82 (AS34702) carries SAN pinterest.co.at which currently resolves through Fastly (AS54113) at 151.101.64.84, 151.101.128.84, 151.101.192.84, 151.101.0.84 |
| 193.178.169.48 | AS216071 | AS16509 | 95% | cert 5a1c8666… served by 193.178.169.48 (AS216071) carries SAN nvidia.co.at which currently resolves through Amazon (AS16509) at 34.194.97.138, 34.200.2.98 |
| 86.110.36.131 | AS212238 | AS54113 | 95% | cert 2e69232e… served by 86.110.36.131 (AS212238) carries SAN pinterest.co.at which currently resolves through Fastly (AS54113) at 151.101.64.84, 151.101.128.84, 151.101.192.84, 151.101.0.84 |
| 35.245.39.88 | AS396982 | AS20940 | 95% | cert 7d1eb810… served by 35.245.39.88 (AS396982) carries SAN stubhub.co.at which currently resolves through Akamai (AS20940) at 23.15.178.194, 23.15.178.193, 2.19.195.82, 2.19.195.75 |
| 45.152.52.71 | AS48362 | AS13335 | 95% | cert 8191f9ad… served by 45.152.52.71 (AS48362) carries SAN tip.co.at which currently resolves through Cloudflare (AS13335) at 104.21.44.194, 172.67.203.65, 2606:4700:3034::ac43:cb41, 2606:4700:3035::6815:2cc2 |
| 45.152.52.76 | AS48362 | AS13335 | 95% | cert 8191f9ad… served by 45.152.52.76 (AS48362) carries SAN tip.co.at which currently resolves through Cloudflare (AS13335) at 104.21.44.194, 172.67.203.65, 2606:4700:3034::ac43:cb41, 2606:4700:3035::6815:2cc2 |
| 35.194.76.213 | AS396982 | AS20940 | 95% | cert 7d1eb810… served by 35.194.76.213 (AS396982) carries SAN stubhub.co.at which currently resolves through Akamai (AS20940) at 2.16.27.89, 2.16.27.75, 2.19.96.11, 2.19.96.130 |
| 35.221.19.241 | AS396982 | AS20940 | 95% | cert 7d1eb810… served by 35.221.19.241 (AS396982) carries SAN stubhub.co.at which currently resolves through Akamai (AS20940) at 2.19.96.11, 2.19.96.130 |
| 45.152.52.89 | AS48362 | AS13335 | 95% | cert f2580894… served by 45.152.52.89 (AS48362) carries SAN tip.co.at which currently resolves through Cloudflare (AS13335) at 104.21.44.194, 172.67.203.65, 2606:4700:3036::6815:2cc2, 2606:4700:3034::ac43:cb41 |
| 80.92.125.85 | AS34347 | AS8075 | 95% | cert c90d03f8… served by 80.92.125.85 (AS34347) carries SAN autodiscover.zanger.co.at which currently resolves through Microsoft (AS8075) at 40.99.204.248, 40.99.204.200, 52.98.232.8, 40.99.204.216 |
| 213.33.97.235 | AS8447 | AS8075 | 95% | cert 0dac695e… served by 213.33.97.235 (AS8447) carries SAN autodiscover.itworks.co.at which currently resolves through Microsoft (AS8075) at 2603:1026:c0d:82b::8, 52.98.152.184, 2603:1026:c0d:c06::8, 2603:1026:c0d:82c::8 |
Threat Intelligence
Domain threat-intel pending
Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.
History
Domain timeline pending
Passive-DNS history accumulates as our forward-DNS crawler observes A/AAAA/MX/NS/TXT records over time.