Domain

dig.qa

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

DNS Check HTTP Check Run Full Scan .qa TLD

Run a live full scan of dig.qa

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now

Hosting IPs

A/AAAA targets

Subdomains

CT + scan + body

Record Types

seen in DNS

Observed Certs

in our scans

DNS Records

104.18.4.71, 104.18.5.71

AAAA

2606:4700::6812:447, 2606:4700::6812:547

0 dig-qa.mail.protection.outlook.com

david.ns.cloudflare.com, sandy.ns.cloudflare.com

TXT

478zlxkf7lxclrs8q3xy7sbxmfh6r8bm, 842p1d2pv48b6yn1d500xt54tb2rjmkx, Foxit-domain-verification=dd38cb78e075b1914143800c00fe24f4, MS=59378A6478E0F0C21CCA7B126C330DD8A2D97165, MS=ms73886649, MS=ms76406472, ZOOM_verify_HnU4dau0T8enEFGyAoE-Xg, apple-domain-verification=alTyShBNdu81mY2w

CNAME

—

CAA

—

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.

Subdomain	Resolves to	Last seen
dig.qa	104.18.4.71 2606:4700::6812:447 2606:4700::6812:547 104.18.5.71	2026-07-20 09:20:19.361
qib.dig.qa	104.18.5.71 104.18.4.71 2606:4700::6812:447 2606:4700::6812:547	2026-07-24 05:51:59.155
qinsurance.dig.qa	104.18.5.71 104.18.4.71 2606:4700::6812:447 2606:4700::6812:547	2026-07-24 05:51:59.155
gp.dig.qa	37.211.178.226	2026-07-20 09:20:19.361
gpdr.dig.qa	37.186.57.194	2026-07-20 09:20:19.361
on.dig.qa		1970-01-01 00:00:00.000

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

184.31.147.36:443 49167da70888…

Subject: apidev.dig.qacitizensbank.com

Issuer: Sectigo Public Server Authentication CA EV R40

SANs: api.dev.qacitizensbank.com, apidev.dig.qacitizensbank.com, apiqa.dig.qacitizensbank.com, apisbng.dig.qacitizensbank.com, apisit.dig.qacitizensbank.com, apistage.dig.qacitizensbank.com, apiuat.dig.qacitizensbank.com

104.104.178.138:443 49167da70888…

Subject: apidev.dig.qacitizensbank.com

Issuer: Sectigo Public Server Authentication CA EV R40

184.87.251.138:443 49167da70888…

Subject: apidev.dig.qacitizensbank.com

Issuer: Sectigo Public Server Authentication CA EV R40

23.58.45.12:443 49167da70888…

Subject: apidev.dig.qacitizensbank.com

Issuer: Sectigo Public Server Authentication CA EV R40

23.195.179.17:443 49167da70888…

Subject: apidev.dig.qacitizensbank.com

Issuer: Sectigo Public Server Authentication CA EV R40

104.71.114.138:443 49167da70888…

Subject: apidev.dig.qacitizensbank.com

Issuer: Sectigo Public Server Authentication CA EV R40

104.75.97.159:443 49167da70888…

Subject: apidev.dig.qacitizensbank.com

Issuer: Sectigo Public Server Authentication CA EV R40

104.88.179.36:443 49167da70888…

Subject: apidev.dig.qacitizensbank.com

Issuer: Sectigo Public Server Authentication CA EV R40

69.192.94.52:443 49167da70888…

Subject: apidev.dig.qacitizensbank.com

Issuer: Sectigo Public Server Authentication CA EV R40

104.71.168.200:443 49167da70888…

Subject: apidev.dig.qacitizensbank.com

Issuer: Sectigo Public Server Authentication CA EV R40

23.12.123.159:443 49167da70888…

Subject: apidev.dig.qacitizensbank.com

Issuer: Sectigo Public Server Authentication CA EV R40

77.235.145.62:443 c3ea8ed2034d…

Subject: *.dig.qa

Issuer: GlobalSign GCC R3 DV TLS CA 2020

SANs: *.dig.qa, dig.qa, gp.dig.qa, gpdr.dig.qa

23.223.179.36:443 49167da70888…

Subject: apidev.dig.qacitizensbank.com

Issuer: Sectigo Public Server Authentication CA EV R40

23.35.6.226:443 49167da70888…

Subject: apidev.dig.qacitizensbank.com

Issuer: Sectigo Public Server Authentication CA EV R40

23.192.255.215:443 49167da70888…

Subject: apidev.dig.qacitizensbank.com

Issuer: Sectigo Public Server Authentication CA EV R40

104.104.162.188:443 49167da70888…

Subject: apidev.dig.qacitizensbank.com

Issuer: Sectigo Public Server Authentication CA EV R40

23.216.114.185:443 49167da70888…

Subject: apidev.dig.qacitizensbank.com

Issuer: Sectigo Public Server Authentication CA EV R40

2.17.77.18:443 49167da70888…

Subject: apidev.dig.qacitizensbank.com

Issuer: Sectigo Public Server Authentication CA EV R40

184.28.197.137:443 49167da70888…

Subject: apidev.dig.qacitizensbank.com

Issuer: Sectigo Public Server Authentication CA EV R40

184.24.136.184:443 49167da70888…

Subject: apidev.dig.qacitizensbank.com

Issuer: Sectigo Public Server Authentication CA EV R40

104.103.98.212:443 49167da70888…

Subject: apidev.dig.qacitizensbank.com

Issuer: Sectigo Public Server Authentication CA EV R40

23.12.18.205:443 49167da70888…

Subject: apidev.dig.qacitizensbank.com

Issuer: Sectigo Public Server Authentication CA EV R40

104.103.163.36:443 49167da70888…

Subject: apidev.dig.qacitizensbank.com

Issuer: Sectigo Public Server Authentication CA EV R40

37.211.178.226:443 c3ea8ed2034d…

Subject: *.dig.qa

Issuer: GlobalSign GCC R3 DV TLS CA 2020

SANs: *.dig.qa, dig.qa, gp.dig.qa, gpdr.dig.qa

94.249.82.165:443 c3ea8ed2034d…

Subject: *.dig.qa

Issuer: GlobalSign GCC R3 DV TLS CA 2020

SANs: *.dig.qa, dig.qa, gp.dig.qa, gpdr.dig.qa

94.249.82.165:443 c3ea8ed2034d…

Subject: *.dig.qa

Issuer: GlobalSign GCC R3 DV TLS CA 2020

SANs: *.dig.qa, dig.qa, gp.dig.qa, gpdr.dig.qa

77.235.145.62:443 c3ea8ed2034d…

Subject: *.dig.qa

Issuer: GlobalSign GCC R3 DV TLS CA 2020

SANs: *.dig.qa, dig.qa, gp.dig.qa, gpdr.dig.qa

IPs Citing This Domain

No citing IPs found yet

As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

No origin-IP leaks detected (yet)

Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.

Type	Value	First seen	Last seen
TXT	apple-domain-verification=alTyShBNdu81mY2w	2026-05-26 20:46:08.549	2026-07-20 09:20:19.361
NS	david.ns.cloudflare.com	2026-05-26 20:46:08.549	2026-07-20 09:20:19.361
TXT	google-site-verification=57Qi9_ZIul7UXyQComuBucrugg-glqbplfIe5slAlMY	2026-05-26 20:46:08.549	2026-07-20 09:20:19.361
TXT	842p1d2pv48b6yn1d500xt54tb2rjmkx	2026-05-26 20:46:08.549	2026-07-20 09:20:19.361
TXT	facebook-domain-verification=zf3spqc4o8gfpinua9u55b7lro5zhu	2026-05-26 20:46:08.549	2026-07-20 09:20:19.361
TXT	v=spf1 a mx ip4:78.100.87.82 include:spf.protection.outlook.com include:email.freshdesk.com ~all	2026-05-26 20:46:08.549	2026-07-20 09:20:19.361
A	104.18.5.71	2026-05-26 20:46:08.549	2026-07-20 09:20:19.361
TXT	fcOR79OXf9vOQrVcptaJ94T/arF4MBBF3sHABBU3qNmP3s5h9nvQSsugfkqL5M2aZVzSJmCPPbnKau5ZVGKRQQ==	2026-05-26 20:46:08.549	2026-07-20 09:20:19.361
AAAA	2606:4700::6812:547	2026-05-26 20:46:08.549	2026-07-20 09:20:19.361
NS	sandy.ns.cloudflare.com	2026-05-26 20:46:08.549	2026-07-20 09:20:19.361
TXT	MS=ms73886649	2026-05-26 20:46:08.549	2026-07-20 09:20:19.361
TXT	MS=ms76406472	2026-05-26 20:46:08.549	2026-07-20 09:20:19.361
TXT	ZOOM_verify_HnU4dau0T8enEFGyAoE-Xg	2026-05-26 20:46:08.549	2026-07-20 09:20:19.361
TXT	Foxit-domain-verification=dd38cb78e075b1914143800c00fe24f4	2026-05-26 20:46:08.549	2026-07-20 09:20:19.361
MX	0 dig-qa.mail.protection.outlook.com	2026-05-26 20:46:08.549	2026-07-20 09:20:19.361
AAAA	2606:4700::6812:447	2026-05-26 20:46:08.549	2026-07-20 09:20:19.361
TXT	MS=59378A6478E0F0C21CCA7B126C330DD8A2D97165	2026-05-26 20:46:08.549	2026-07-20 09:20:19.361
TXT	478zlxkf7lxclrs8q3xy7sbxmfh6r8bm	2026-05-26 20:46:08.549	2026-07-20 09:20:19.361
A	104.18.4.71	2026-05-26 20:46:08.549	2026-07-20 09:20:19.361