Domain
com.gt
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of com.gt
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
Hosting IPs
—
A/AAAA targets
Subdomains
—
CT + scan + body
Record Types
—
seen in DNS
Observed Certs
—
in our scans
DNS Records
A
—
AAAA
—
MX
—
NS
—
TXT
—
CNAME
—
CAA
—
WHOIS / Registration
Registration data planned
Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.
Subdomains
Subdomain enumeration pending
Every subdomain ever issued a TLS cert under this apex — extracted from Certificate Transparency logs, our own scan observations and body references.
Tech Stack
Tech detection pending
Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.
TLS Certificates
Subject: dubaicenter.com.gt
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: dubaicenter.com.gt, www.dubaicenter.com.gt
Subject: vpnc.icasa.com.gt
Issuer: PoC_Root_CA
SANs: 200.6.194.188, vpnc.icasa.com.gt
Subject: savegroup.com.gt
Issuer: YE1
SANs: api.savegroup.com.gt, savegroup.com.gt, www.savegroup.com.gt
Subject: lansier.com.gt
Issuer: YE1
SANs: lansier.com.gt, www.lansier.com.gt
Subject: freedomtelecom.com.gt
Issuer: YR2
SANs: freedomtelecom.com.gt, www.freedomtelecom.com.gt
Subject: credivertice.com.gt
Issuer: credivertice.com.gt
SANs: credivertice.com.gt
Subject: storage.prolaserguatemala.com.gt
Issuer: YE1
SANs: storage.prolaserguatemala.com.gt
Subject: *.cloud.com.gt
Issuer: RapidSSL TLS RSA CA G1
SANs: *.cloud.com.gt, cloud.com.gt
Subject: prueba.puntomedico.com.gt
Issuer: prueba.puntomedico.com.gt
SANs: prueba.puntomedico.com.gt, www.prueba.puntomedico.com.gt
Subject: apps.aquaverso.com.gt
Issuer: ZeroSSL RSA DV SSL CA 2
SANs: 34.70.255.213, apps.aquaverso.com.gt
Subject: chiquifarma.com.gt
Issuer: YE1
SANs: chiquifarma.com.gt, www.chiquifarma.com.gt
Subject: *.icasa.com.gt
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: *.icasa.com.gt, icasa.com.gt
Subject: hmltest.promedic.com.gt
Issuer: YE1
SANs: hmltest.promedic.com.gt
Subject: quiniela-staff.com.gt
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: quiniela-staff.com.gt, www.quiniela-staff.com.gt
Subject: app.prolaserguatemala.com.gt
Issuer: YR2
SANs: app.prolaserguatemala.com.gt
Subject: *.gyt.com.gt
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: *.gyt.com.gt, gyt.com.gt
Subject: login.prodynamics.com.gt
Issuer: YR1
SANs: login.prodynamics.com.gt
Subject: *.msviajes.com.gt
Issuer: YR2
SANs: *.msviajes.com.gt, msviajes.com.gt
Subject: api-dev-cloud.cenam.claro.com.gt
Issuer: WR3
SANs: api-dev-cloud.cenam.claro.com.gt
Subject: bec.com.gt
Issuer: YE1
SANs: bec.com.gt, mail.bec.com.gt, mta-sts.bec.com.gt, www.bec.com.gt
Subject: mail.pruebas.grupodispersa.com.gt
Issuer: YR2
SANs: mail.pruebas.grupodispersa.com.gt, pruebas.grupodispersa.com.gt
Subject: mail.transtel.com.gt
Issuer: mail.transtel.com.gt
SANs: mail.transtel.com.gt
Subject: masseyferguson.com.gt
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: masseyferguson.com.gt, www.masseyferguson.com.gt
Subject: *.mapfre.com.gt
Issuer: GeoTrust TLS RSA CA G1
SANs: *.mapfre.com.gt, mapfre.com.gt, www.mapfre.com.gt
Subject: mail.vci.com.gt
Issuer: mail.vci.com.gt
SANs: mail.vci.com.gt
Subject: rp.com.gt
Issuer: YE2
SANs: *.rp.com.gt, rp.com.gt
Subject: busesparatodos.com.gt
Issuer: YR2
SANs: busesparatodos.com.gt, www.busesparatodos.com.gt
Subject: api-galaxycel.supersistemas.com.gt
Issuer: YR1
SANs: api-galaxycel.supersistemas.com.gt
Subject: aula-virtual.todosmazate.com.gt
Issuer: YE1
SANs: aula-virtual.todosmazate.com.gt
Subject: drriley.com.gt
Issuer: YE2
SANs: drriley.com.gt, gastro-experts.com, www.drriley.com.gt, www.gastro-experts.com
IPs Citing This Domain
No citing IPs found yet
As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.
Origin / IP-Leak
USP
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
| Origin IP | Origin ASN | CDN ASN | Confidence | Reasoning |
|---|---|---|---|---|
| 23.212.126.218 | AS7713 | AS16625 | 95% | cert 04a37cf1… served by 23.212.126.218 (AS7713) carries SAN www.kelloggs.com.gt which currently resolves through Akamai (AS16625) at 23.222.55.136, 23.13.175.55, 92.122.62.40 |
| 23.60.180.171 | AS4775 | AS20940 | 95% | cert e5010b44… served by 23.60.180.171 (AS4775) carries SAN www.mouser.com.gt which currently resolves through Akamai (AS20940) at 104.85.0.22, 2.23.244.173, 23.222.200.55, 23.210.16.174 |
| 23.39.232.37 | AS7713 | AS20940 | 95% | cert e5010b44… served by 23.39.232.37 (AS7713) carries SAN www.mouser.com.gt which currently resolves through Akamai (AS20940) at 104.85.0.22, 23.197.44.19, 2.23.244.173, 23.220.128.22 |
| 104.65.82.120 | AS55836 | AS16625 | 95% | cert 693634c0… served by 104.65.82.120 (AS55836) carries SAN stage65.kelloggs.com.gt which currently resolves through Akamai (AS16625) at 23.222.51.26 |
| 23.62.232.223 | AS3786 | AS16625 | 95% | cert 534496b3… served by 23.62.232.223 (AS3786) carries SAN miplan.specialk.com.gt which currently resolves through Akamai (AS16625) at 23.222.38.93, 92.123.164.55 |
| 104.101.28.44 | AS4818 | AS16625 | 95% | cert e5010b44… served by 104.101.28.44 (AS4818) carries SAN www.mouser.com.gt which currently resolves through Akamai (AS16625) at 184.30.156.107, 104.85.0.22, 23.221.240.172, 23.58.104.172 |
| 190.242.184.35 | AS27910 | AS13335 | 95% | cert 86bea2f6… served by 190.242.184.35 (AS27910) carries SAN bi.com.gt which currently resolves through Cloudflare (AS13335) at 172.66.154.78, 104.20.17.226, 2606:4700:10::ac42:9a4e, 2606:4700:10::6814:11e2 |
| 23.8.147.241 | AS17639 | AS16625 | 95% | cert 0417d1a9… served by 23.8.147.241 (AS17639) carries SAN www.nexcare.3m.com.gt which currently resolves through Akamai (AS16625) at 23.13.165.224, 2a02:26f0:1700:392::34fe, 2a02:26f0:1700:382::34fe |
| 122.222.40.27 | AS2519 | AS20940 | 95% | cert e5010b44… served by 122.222.40.27 (AS2519) carries SAN www.mouser.com.gt which currently resolves through Akamai (AS20940) at 104.85.0.22, 23.58.104.172, 2.23.244.173 |
| 176.52.139.30 | AS136907 | AS16509 | 95% | cert 0f8ca56f… served by 176.52.139.30 (AS136907) carries SAN micoope.com.gt which currently resolves through Amazon (AS16509) at 52.1.53.61 |
| 181.174.126.71 | AS23243 | AS19551 | 95% | cert adc50fad… served by 181.174.126.71 (AS23243) carries SAN gestor.tigobusiness.com.gt which currently resolves through Imperva (AS19551) at 45.223.165.119 |
| 168.194.74.155 | AS264764 | AS13335 | 95% | cert d524aed3… served by 168.194.74.155 (AS264764) carries SAN export.com.gt which currently resolves through Cloudflare (AS13335) at 104.26.7.19, 104.26.6.19, 172.67.74.218 |
| 190.56.243.232 | AS14754 | AS13335 | 95% | cert 86bea2f6… served by 190.56.243.232 (AS14754) carries SAN bi.com.gt which currently resolves through Cloudflare (AS13335) at 172.66.154.78, 104.20.17.226, 2606:4700:10::ac42:9a4e, 2606:4700:10::6814:11e2 |
| 181.199.211.183 | AS12956 | AS8075 | 95% | cert f298fd42… served by 181.199.211.183 (AS12956) carries SAN unisuper.com.gt which currently resolves through Microsoft (AS8075) at 52.176.2.229 |
| 190.56.243.228 | AS14754 | AS13335 | 95% | cert 86bea2f6… served by 190.56.243.228 (AS14754) carries SAN bi.com.gt which currently resolves through Cloudflare (AS13335) at 172.66.154.78, 104.20.17.226, 2606:4700:10::ac42:9a4e, 2606:4700:10::6814:11e2 |
| 168.194.74.154 | AS264764 | AS13335 | 95% | cert 5baa15cd… served by 168.194.74.154 (AS264764) carries SAN export.com.gt which currently resolves through Cloudflare (AS13335) at 104.26.7.19, 104.26.6.19, 172.67.74.218 |
| 173.249.40.50 | AS51167 | AS13335 | 95% | cert b81120b8… served by 173.249.40.50 (AS51167) carries SAN guateapp.com.gt which currently resolves through Cloudflare (AS13335) at 188.114.97.3, 188.114.96.3, 2a06:98c1:3120::3, 2a06:98c1:3121::3 |
| 202.58.11.48 | AS24247 | AS13335 | 95% | cert 90677439… served by 202.58.11.48 (AS24247) carries SAN www.intertek.com.gt which currently resolves through Cloudflare (AS13335) at 172.64.152.112, 104.18.35.144, 2a06:98c1:310b::ac40:9870, 2606:4700:4404::6812:2390 |
| 181.114.2.116 | AS52286 | AS13335 | 95% | cert 568b0684… served by 181.114.2.116 (AS52286) carries SAN trecsa.com.gt which currently resolves through Cloudflare (AS13335) at 188.114.97.3, 188.114.96.3, 2606:4700:20::681a:91a, 2606:4700:20::ac43:44e4 |
| 12.5.163.52 | AS32368 | AS16625 | 95% | cert 5967bfe6… served by 12.5.163.52 (AS32368) carries SAN www.mouser.com.gt which currently resolves through Akamai (AS16625) at 2.23.244.173, 88.221.168.21 |
| 12.5.163.196 | AS32368 | AS20940 | 95% | cert d26e0345… served by 12.5.163.196 (AS32368) carries SAN www.mouserpre.com.gt which currently resolves through Akamai (AS20940) at 184.86.103.221, 184.86.103.223 |
| 168.110.111.111 | AS31898 | AS16509 | 95% | cert 9833b131… served by 168.110.111.111 (AS31898) carries SAN ws.airbnb.com.gt which currently resolves through Amazon (AS16509) at 98.85.171.226, 54.90.191.231 |
| 216.238.71.165 | AS20473 | AS13335 | 95% | cert a293dd07… served by 216.238.71.165 (AS20473) carries SAN syt.com.gt which currently resolves through Cloudflare (AS13335) at 104.21.38.205, 172.67.138.83, 2a06:98c1:3120::3, 2a06:98c1:3121::3 |
| 138.197.85.99 | AS14061 | AS13335 | 95% | cert 16a8b61b… served by 138.197.85.99 (AS14061) carries SAN ventas.yamaha.com.gt which currently resolves through Cloudflare (AS13335) at 104.21.86.92, 172.67.217.103, 2606:4700:3031::ac43:d967, 2606:4700:3037::6815:565c |
| 101.44.27.101 | AS136907 | AS13335 | 95% | cert e04ef5f2… served by 101.44.27.101 (AS136907) carries SAN parquemateo.com.gt which currently resolves through Cloudflare (AS13335) at 104.21.78.127, 172.67.221.195, 2606:4700:3035::ac43:ddc3, 2606:4700:3037::6815:4e7f |
Threat Intelligence
Domain threat-intel pending
Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.
History
Domain timeline pending
Passive-DNS history accumulates as our forward-DNS crawler observes A/AAAA/MX/NS/TXT records over time.