Domain

domain.com

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

DNS Check HTTP Check Run Full Scan .com TLD

Run a live full scan of domain.com

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now

Hosting IPs

—

A/AAAA targets

Subdomains

—

CT + scan + body

Record Types

—

seen in DNS

Observed Certs

—

in our scans

DNS Records

104.18.42.197, 172.64.145.59

AAAA

—

10 domain-com.mail.protection.outlook.com

lee.ns.cloudflare.com, sarah.ns.cloudflare.com

TXT

MS=ms38008831, google-site-verification=1aIdxE8tG_8BUCMClWep8Z33AIxgsL91plweqqCuNZU, google-site-verification=6yo2U5h4HWauPMM18625PLBIoodHnjC1iwLvfzKvdoM, google-site-verification=XATcOZfH8l89guCpLLPRWURuOhFhSVrTkrPTAfVdvhk, google-site-verification=aY0fAnTB0vuNNw_ySRYQ3C8CFMZ8Yqy1k-qzu04uMug, google-site-verification=zlpN6bg9OaBJVw4Lv4-1fZ2wHekVqEnEGBXwuonNpBM, v=spf1 ip4:38.113.1.0/24 ip4:38.113.20.0/24 ip4:12.45.243.128/26 ip4:65.254.224.0/19 ip4:209.17.115.0/24 ip4:64.69.218.0/24 ip4:35.89.44.32/29 ip4:44.202.169.32/29 ip4:216.40.32.0/20 ip4:64.99.180.0/24 ip4:64.99.140.0/24 ip4:216.40.45.0/27 include:spf.protection.outlook.com include:_spf.hostedemail.com include:spf.websitewelcome.com include:_spf.salesforce.com include:_spf.google.com include:_spf.qualtrics.com -all

CNAME

—

CAA

—

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.

Subdomain	Resolves to	Last seen
account.domain.com	172.67.198.128 2606:4700:3032::ac43:c680 2606:4700:3034::6815:3476 2606:4700:3035::6815:3476 +2	2026-07-29 15:04:37.386
shop.domain.com	52.14.77.205 52.32.7.199 52.201.182.149 172.64.145.59 +1	2026-07-29 15:04:37.386
app-gateway.builder-svcs.domain.com	172.64.155.125 104.18.32.131 2606:4700:4409::ac40:9b7d 2606:4700:4402::6812:2083	2026-07-24 07:59:57.729
app-gateway.dev.builder-svcs.domain.com	172.64.155.125 104.18.32.131 2606:4700:4409::ac40:9b7d 2606:4700:4402::6812:2083	2026-07-26 22:38:01.264
app.uat.builder-svcs.domain.com	172.64.155.125 104.18.32.131 2a06:98c1:3101::ac40:9b7d 2a06:98c1:310b::6812:2083	2026-06-03 02:47:58.488
buildit.uat.builder-svcs.domain.com	104.18.32.131 172.64.155.125 2606:4700:4409::ac40:9b7d 2606:4700:4402::6812:2083	2026-07-27 04:46:41.294
editor.builder-svcs.domain.com	104.18.32.131 172.64.155.125 2a06:98c1:310b::6812:2083 2a06:98c1:3101::ac40:9b7d	2026-06-16 10:06:53.283
identity.domain.com	104.18.38.140 172.64.149.116 2606:4700:4405::6812:268c 2606:4700:440d::ac40:9574	2026-07-23 11:28:24.667
mylinks.domain.com	104.18.35.34 172.64.152.222 2a06:98c1:310a::6812:2322 2a06:98c1:3106::ac40:98de	2026-06-23 05:47:17.303
re-api.qa.builder-svcs.domain.com	172.64.155.125 104.18.32.131 2606:4700:4402::6812:2083 2606:4700:4409::ac40:9b7d	2026-07-20 08:52:39.431
smart-blog.dev.builder-svcs.domain.com	104.18.32.131 172.64.155.125 2a06:98c1:310b::6812:2083 2a06:98c1:3101::ac40:9b7d	2026-06-15 01:43:09.777
smart-blog.qa.builder-svcs.domain.com	104.18.32.131 172.64.155.125 2606:4700:4409::ac40:9b7d 2606:4700:4402::6812:2083	2026-07-26 12:40:14.841
smart-blog.uat.builder-svcs.domain.com	172.64.155.125 104.18.32.131 2606:4700:4409::ac40:9b7d 2606:4700:4402::6812:2083	2026-07-23 10:40:09.175
static-editor.builder-svcs.domain.com	104.18.32.131 172.64.155.125 2606:4700:4409::ac40:9b7d 2606:4700:4402::6812:2083	2026-07-23 16:06:24.173
blog.domain.com	172.64.145.59 104.18.42.197 66.11.225.178	2026-07-29 15:04:37.386
email.domain.com	172.64.145.59 104.18.42.197 66.96.162.48	2026-07-27 02:11:56.466
images.domain.com	172.64.145.59 104.18.42.197 65.254.244.180	2026-07-29 15:04:37.386
origin.domain.com	104.18.42.197 172.64.145.59 65.254.244.180	2026-07-29 15:04:37.386
panel.domain.com	172.64.145.59 66.96.162.92 104.18.42.197	2026-07-29 15:04:37.386
secure.domain.com	65.254.244.180 104.18.42.197 172.64.145.59	2026-07-29 15:04:37.386
test.domain.com	66.96.162.92 172.64.145.59 104.18.42.197	2026-07-29 15:04:37.386
web.domain.com	66.96.162.92 172.64.145.59 104.18.42.197	2026-07-29 15:04:37.386
cn.domain.com	45.113.123.45 45.113.123.46	2026-06-16 16:01:01.321
dashboard.domain.com	75.126.211.99 192.185.178.102	2026-07-29 15:04:37.386
dev.registration.domain.com	172.64.145.59 104.18.42.197	2026-06-02 23:16:52.385
domain.com	104.18.42.197 172.64.145.59	2026-07-28 10:29:13.532
mx.domain.com	66.96.140.72 66.96.140.73	2026-07-29 15:04:37.386
registration.domain.com	104.18.42.197 172.64.145.59	2026-06-21 17:18:09.109
registration.stage.domain.com	52.3.253.130 54.166.118.172	2026-06-16 21:12:35.215
status.domain.com	172.64.145.59 104.18.42.197	2026-07-29 15:04:37.386
www.domain.com	172.64.145.59 104.18.42.197	2026-07-29 15:04:37.386
0.domain.com		1970-01-01 00:00:00.000
103-7-58-96.domain.com		1970-01-01 00:00:00.000
acme.domain.com		1970-01-01 00:00:00.000
admin.domain.com		1970-01-01 00:00:00.000
aldenitv.domain.com		1970-01-01 00:00:00.000
api.domain.com	64.85.73.70	2026-07-29 15:04:37.386
artalk.domain.com		1970-01-01 00:00:00.000
autodiscover.domain.com		1970-01-01 00:00:00.000
belmontcipa.domain.com		1970-01-01 00:00:00.000
bensondiary.domain.com		1970-01-01 00:00:00.000
billing.domain.com	64.85.73.60	2026-07-29 15:04:37.386
blog-api.dev.builder-svcs.domain.com		1970-01-01 00:00:00.000
blog-api.qa.builder-svcs.domain.com		1970-01-01 00:00:00.000
blog-api.uat.builder-svcs.domain.com		1970-01-01 00:00:00.000
bounce.domain.com	64.85.73.100	2026-07-29 15:04:37.386
builder-svcs.domain.com		1970-01-01 00:00:00.000
builders-stg.domain.com		1970-01-01 00:00:00.000
buildit.builder-svcs.domain.com		1970-01-01 00:00:00.000
cardada-dk01.domain.com		1970-01-01 00:00:00.000
cdn.domain.com		1970-01-01 00:00:00.000
checkout.domain.com	66.96.162.92	2026-07-29 15:04:37.386
coming-soon.uat.builder-svcs.domain.com		1970-01-01 00:00:00.000
cp.domain.com	72.5.54.50	2026-07-29 15:04:37.386
cpanel.domain.com		1970-01-01 00:00:00.000
cpanel.megatest.domain.com		1970-01-01 00:00:00.000
cpcalendars.domain.com		1970-01-01 00:00:00.000
cpcontacts.domain.com		1970-01-01 00:00:00.000
data-hub.domain.com		1970-01-01 00:00:00.000
debian.domain.com	66.96.162.92	2026-06-22 15:11:14.268
default.domain.com	66.96.162.92	2026-07-28 10:59:00.670
dev.cap.domain.com		1970-01-01 00:00:00.000
dev.sr.cap.domain.com		1970-01-01 00:00:00.000
do-fra1-wpages-farm-05.domain.com		1970-01-01 00:00:00.000
do3.domain.com		1970-01-01 00:00:00.000
domain.domain.com		1970-01-01 00:00:00.000
droplet01.domain.com		1970-01-01 00:00:00.000
droplet06.domain.com		1970-01-01 00:00:00.000
droplet10.domain.com		1970-01-01 00:00:00.000
dysw.domain.com		1970-01-01 00:00:00.000
ecs.prod.cap.domain.com		1970-01-01 00:00:00.000
editor.uat.builder-svcs.domain.com		1970-01-01 00:00:00.000
example.domain.com		1970-01-01 00:00:00.000
example.test.domain.com		1970-01-01 00:00:00.000
express-editor.dev.builder-svcs.domain.com		1970-01-01 00:00:00.000
express-editor.qa.builder-svcs.domain.com		1970-01-01 00:00:00.000
express-editor.uat.builder-svcs.domain.com		1970-01-01 00:00:00.000
focusvs.domain.com		1970-01-01 00:00:00.000
freesmi.domain.com		1970-01-01 00:00:00.000
ftp.domain.com	66.96.162.96	2026-07-29 15:04:37.386
host.domain.com		1970-01-01 00:00:00.000
hosting-tri.domain.com		1970-01-01 00:00:00.000
hostname.domain.com	127.0.0.1	2026-07-27 14:59:09.817
hostname2.domain.com		1970-01-01 00:00:00.000
imap.domain.com	66.96.162.96	2026-07-29 15:04:37.386
img02-mail.domain.com		1970-01-01 00:00:00.000
internal.domain.com	66.96.162.92	2026-07-29 15:04:37.386
ipbrick.domain.com		1970-01-01 00:00:00.000
jobeehouse.domain.com		1970-01-01 00:00:00.000
journey.domain.com		1970-01-01 00:00:00.000
m.domain.com	66.150.120.131	2026-07-29 15:04:37.386
mail.domain.com	72.5.54.21	2026-07-29 15:04:37.386
mail.megatest.domain.com		1970-01-01 00:00:00.000
mail2.domain.com	72.5.54.127	2026-07-29 15:04:37.386
manage.vip.domain.com		1970-01-01 00:00:00.000
megatest.domain.com		1970-01-01 00:00:00.000
my.domain.com	127.0.0.1	2026-07-29 15:04:37.386
myapp.domain.com		1970-01-01 00:00:00.000
newgreen.domain.com		1970-01-01 00:00:00.000
nexus.domain.com	66.96.162.92	2026-07-29 15:04:37.386
nginx.domain.com		1970-01-01 00:00:00.000
ns1.domain.com	172.64.52.73	2026-07-29 15:04:37.386
ns2.domain.com	172.64.53.117	2026-07-29 15:04:37.386
ns3.domain.com	172.64.52.73	2026-07-29 15:04:37.386
ovh1.domain.com		1970-01-01 00:00:00.000
ovh8.domain.com		1970-01-01 00:00:00.000
pop.domain.com	66.96.162.96	2026-07-29 15:04:37.386
portfolio.domain.com		1970-01-01 00:00:00.000
preview-editor.builder-svcs.domain.com		1970-01-01 00:00:00.000
prod.cap.domain.com		1970-01-01 00:00:00.000
proxy.domain.com		1970-01-01 00:00:00.000
proxy2.domain.com		1970-01-01 00:00:00.000
proxyreserv.domain.com		1970-01-01 00:00:00.000
qa.cap.domain.com		1970-01-01 00:00:00.000
r90.domain.com		1970-01-01 00:00:00.000
re-api.dev.builder-svcs.domain.com		1970-01-01 00:00:00.000
re-api.uat.builder-svcs.domain.com		1970-01-01 00:00:00.000
registration.qa.cap.domain.com		1970-01-01 00:00:00.000
s2.domain.com		1970-01-01 00:00:00.000
server.domain.com	127.0.0.1	2026-07-28 19:48:54.308

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

46.17.63.136:443 5847d4dda299…

Subject: my.domain.com

Issuer: my.domain.com

SANs: my.domain.com

61.129.159.204:443 56840fc4b4bf…

Subject: non-existent-domain.com

Issuer: non-existent-domain.com

SANs: non-existent-domain.com

23.208.65.93:443 d8d244e39236…

Subject: domain.com.au

Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1

SANs: *.allhomes.com.au, *.apm.com.au, *.apmpricefinder.com.au, *.bidtracker.com.au, *.commercialrealestate.com.au, *.commercialview.com.au, *.domain.com.au, *.domainhomepriceguide.com.au, *.domaininsights.com.au, *.domainstatic.com.au, *.homepriceguide.com.au, *.leadscope.com.au, *.pdslive.com.au, *.pricefinder.com.au, *.qa.allhomes.com.au, *.realtimeagent.com.au, *.reviewproperty.com.au, *.stag.bidtracker.com.au, *.stag.realtimeagent.com.au, *.test.bidtracker.com.au, *.test.realtimeagent.com.au, *.theweeklyreview.com.au, *.vmonline.com.au, bidtracker.com.au, domain.com.au, leadscope.com.au, pdslive.com.au, pricefinder.com.au, realtimeagent.com.au

213.35.127.152:443 c4acb4216023…

Subject: www.domain.com

Issuer: www.domain.com

SANs: www.domain.com

121.194.14.146:443 56840fc4b4bf…

Subject: non-existent-domain.com

Issuer: non-existent-domain.com

SANs: non-existent-domain.com

38.244.215.196:443 521196dbee0f…

Subject: server.domain.com

Issuer: server.domain.com

SANs: server.domain.com

37.1.198.124:443 406e9f226757…

Subject: server.domain.com

Issuer: server.domain.com

SANs: server.domain.com

216.70.104.64:8443 1a2a2222825b…

Subject: chd6-zmz5.accessdomain.com

Issuer: YR2

SANs: chd6-zmz5.accessdomain.com

220.128.136.109:443 76c41dc9a3fb…

Subject: mydomain.com

Issuer: mydomain.com

SANs: mydomain.com

70.32.90.37:8443 0a766dd2c9af…

Subject: m5kj-ph62.accessdomain.com

Issuer: YR2

SANs: m5kj-ph62.accessdomain.com

61.221.83.247:443 490ed14f71aa…

Subject: mydomain.com

Issuer: mydomain.com

SANs: mydomain.com

110.249.209.205:9443 56840fc4b4bf…

Subject: non-existent-domain.com

Issuer: non-existent-domain.com

SANs: non-existent-domain.com

61.129.159.208:443 56840fc4b4bf…

Subject: non-existent-domain.com

Issuer: non-existent-domain.com

SANs: non-existent-domain.com

123.129.198.247:443 56840fc4b4bf…

Subject: non-existent-domain.com

Issuer: non-existent-domain.com

SANs: non-existent-domain.com

188.190.3.250:8443 da8b21ea3067…

Subject: my.domain.com

Issuer: my.domain.com

SANs: my.domain.com

45.77.171.38:443 a570cc5f7356…

Subject: bet6dfakedomain.com

Issuer: bet6dfakedomain.com

SANs: bet6dfakedomain.com

70.32.94.16:8443 d90fcca9616d…

Subject: 7n7x-2jdk.accessdomain.com

Issuer: YR2

SANs: 7n7x-2jdk.accessdomain.com

125.19.165.43:443 efbbc475a2b9…

Subject: KJHI-BGO103-IN-RTR1490.yourdomain.com

Issuer: KJHI-BGO103-IN-RTR1490.yourdomain.com

SANs: KJHI-BGO103-IN-RTR1490.yourdomain.com

5.45.68.25:443 90867f4a2fe7…

Subject: server.domain.com

Issuer: server.domain.com

SANs: server.domain.com

74.220.199.59:443 0319c86dc56e…

Subject: *.fastdomain.com

Issuer: Sectigo Public Server Authentication CA DV R36

SANs: *.fastdomain.com, fastdomain.com

60.250.110.161:443 449f4b3b55e6…

Subject: mydomain.com

Issuer: mydomain.com

SANs: mydomain.com

92.4.99.251:443 717559d17cb9…

Subject: example.domain.com

Issuer: canary-apigw

SANs: example.domain.com

38.180.117.42:443 f87074f52218…

Subject: server.domain.com

Issuer: server.domain.com

SANs: server.domain.com

64.207.145.49:8443 ec3b264503ae…

Subject: k2hp-ljxy.accessdomain.com

Issuer: YR1

SANs: k2hp-ljxy.accessdomain.com

72.47.208.184:443 d1fc89fa9989…

Subject: cm56-ls2v.accessdomain.com

Issuer: YR1

SANs: cm56-ls2v.accessdomain.com

23.62.65.179:443 d8d244e39236…

Subject: domain.com.au

Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1

37.1.217.12:443 e08a6ddf3ca5…

Subject: server.domain.com

Issuer: server.domain.com

SANs: server.domain.com

37.1.214.168:443 645bfc1cdcf1…

Subject: server.domain.com

Issuer: server.domain.com

SANs: server.domain.com

64.207.176.227:8443 fac809cb38e5…

Subject: xmf6-vz6t.accessdomain.com

Issuer: YR1

SANs: xmf6-vz6t.accessdomain.com

149.33.43.179:443 7ba856e30fe7…

Subject: server.domain.com

Issuer: server.domain.com

SANs: server.domain.com

IPs Citing This Domain

Hosts whose HTML body references this domain. Strong signal for origin/mirror/embed discovery.

103.186.1.23:443 href · ×36

120.78.0.10:443 href · ×15

129.212.208.52:443 href · ×10

144.91.103.226:443 href · ×10

172.236.156.104:80 href · ×10

213.199.56.120:80 href · ×10

178.128.31.106:443 href · ×10

103.39.237.103:443 href · ×10

185.26.236.91:443 href · ×7

185.76.79.115:443 href · ×7

82.23.146.164:443 href · ×7

142.93.41.147:443 href · ×6

167.179.97.63:7001 href · ×6

79.99.40.97:443 href · ×6

84.200.89.185:443 href · ×6

188.190.17.251:443 href · ×5

193.235.147.156:443 href · ×5

185.26.236.201:443 href · ×5

34.150.71.37:80 href · ×5

188.190.17.173:443 href · ×5

212.81.47.227:443 href · ×5

162.252.175.158:443 href · ×5

188.190.26.98:443 href · ×5

81.91.176.119:443 href · ×5

185.26.236.221:443 href · ×5

178.156.180.188:443 href · ×5

151.80.237.62:443 href · ×4

82.38.60.172:80 href · ×4

5.78.150.78:443 href · ×4

188.190.17.210:443 href · ×4

185.195.65.207:443 href · ×4

5.78.188.44:443 href · ×4

185.26.236.115:443 href · ×4

151.241.99.151:443 href · ×3

151.241.99.162:443 href · ×3

185.195.65.228:443 href · ×3

188.190.5.197:443 href · ×3

151.241.99.157:443 href · ×3

151.241.99.81:443 href · ×3

37.235.55.126:443 href · ×3

151.241.99.174:443 href · ×3

46.17.57.186:443 href · ×3

192.71.227.179:443 href · ×3

45.61.130.144:443 href · ×3

45.61.130.128:443 href · ×3

143.244.130.141:8080 href · ×2

13.53.131.79:80 href · ×2

40.27.47.165:443 href · ×2

45.79.187.31:80 href · ×2

43.110.21.220:8081 href · ×2

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

Origin IP	Origin ASN	CDN ASN	Confidence	Reasoning
185.219.42.24	AS211642	AS13335	95%	cert b23668f1… served by 185.219.42.24 (AS211642) carries SAN domain.com which currently resolves through Cloudflare (AS13335) at 104.18.42.197, 172.64.145.59
111.47.215.145	AS9808	AS13335	95%	cert 4811fe8a… served by 111.47.215.145 (AS9808) carries SAN domain.com which currently resolves through Cloudflare (AS13335) at 104.18.42.197, 172.64.145.59
151.186.79.133	AS36692	AS13335	95%	cert 11e62125… served by 151.186.79.133 (AS36692) carries SAN domain.com which currently resolves through Cloudflare (AS13335) at 104.18.42.197, 172.64.145.59
103.168.54.65	AS149143	AS13335	95%	cert 686d4635… served by 103.168.54.65 (AS149143) carries SAN domain.com which currently resolves through Cloudflare (AS13335) at 104.18.42.197, 172.64.145.59
94.26.240.169	AS49505	AS13335	95%	cert 2196e8c7… served by 94.26.240.169 (AS49505) carries SAN domain.com which currently resolves through Cloudflare (AS13335) at 104.18.42.197, 172.64.145.59
103.168.55.121	AS149143	AS13335	95%	cert 686d4635… served by 103.168.55.121 (AS149143) carries SAN domain.com which currently resolves through Cloudflare (AS13335) at 104.18.42.197, 172.64.145.59
103.168.54.243	AS149143	AS13335	95%	cert 686d4635… served by 103.168.54.243 (AS149143) carries SAN domain.com which currently resolves through Cloudflare (AS13335) at 104.18.42.197, 172.64.145.59
92.63.194.25	AS29182	AS13335	95%	cert 67a5e0a0… served by 92.63.194.25 (AS29182) carries SAN domain.com which currently resolves through Cloudflare (AS13335) at 104.18.42.197, 172.64.145.59
103.168.54.160	AS149143	AS13335	95%	cert 686d4635… served by 103.168.54.160 (AS149143) carries SAN domain.com which currently resolves through Cloudflare (AS13335) at 104.18.42.197, 172.64.145.59
65.254.244.177	AS29873	AS13335	95%	cert 22a425b5… served by 65.254.244.177 (AS29873) carries SAN domain.com which currently resolves through Cloudflare (AS13335) at 104.18.42.197, 172.64.145.59
87.236.177.127	AS207728	AS13335	95%	cert 44268d6a… served by 87.236.177.127 (AS207728) carries SAN domain.com which currently resolves through Cloudflare (AS13335) at 104.18.42.197, 172.64.145.59
66.96.162.49	AS29873	AS13335	95%	cert 22a425b5… served by 66.96.162.49 (AS29873) carries SAN domain.com which currently resolves through Cloudflare (AS13335) at 104.18.42.197, 172.64.145.59
45.81.227.211	AS204601	AS13335	95%	cert 0e7d044b… served by 45.81.227.211 (AS204601) carries SAN domain.com which currently resolves through Cloudflare (AS13335) at 104.18.42.197, 172.64.145.59
213.35.127.152	AS31898	AS13335	95%	cert c4acb421… served by 213.35.127.152 (AS31898) carries SAN www.domain.com which currently resolves through Cloudflare (AS13335) at 104.18.42.197, 172.64.145.59
103.168.54.96	AS149143	AS13335	95%	cert 686d4635… served by 103.168.54.96 (AS149143) carries SAN domain.com which currently resolves through Cloudflare (AS13335) at 104.18.42.197, 172.64.145.59
36.112.90.196	AS4847	AS13335	95%	cert 4811fe8a… served by 36.112.90.196 (AS4847) carries SAN domain.com which currently resolves through Cloudflare (AS13335) at 104.18.42.197, 172.64.145.59
5.9.28.75	AS24940	AS13335	95%	cert 14bcd408… served by 5.9.28.75 (AS24940) carries SAN domain.com which currently resolves through Cloudflare (AS13335) at 104.18.42.197, 172.64.145.59
66.90.110.202	AS30058	AS13335	95%	cert 3bee24b8… served by 66.90.110.202 (AS30058) carries SAN domain.com which currently resolves through Cloudflare (AS13335) at 104.18.42.197, 172.64.145.59
65.254.244.181	AS29873	AS13335	95%	cert 22a425b5… served by 65.254.244.181 (AS29873) carries SAN domain.com which currently resolves through Cloudflare (AS13335) at 104.18.42.197, 172.64.145.59
103.168.54.188	AS149143	AS13335	95%	cert 686d4635… served by 103.168.54.188 (AS149143) carries SAN domain.com which currently resolves through Cloudflare (AS13335) at 104.18.42.197, 172.64.145.59
45.88.104.73	AS204601	AS13335	95%	cert 2ef5f2fa… served by 45.88.104.73 (AS204601) carries SAN domain.com which currently resolves through Cloudflare (AS13335) at 104.18.42.197, 172.64.145.59
103.168.54.141	AS149143	AS13335	95%	cert 686d4635… served by 103.168.54.141 (AS149143) carries SAN domain.com which currently resolves through Cloudflare (AS13335) at 104.18.42.197, 172.64.145.59
192.236.145.67	AS54290	AS13335	95%	cert 3d5b1324… served by 192.236.145.67 (AS54290) carries SAN domain.com which currently resolves through Cloudflare (AS13335) at 104.18.42.197, 172.64.145.59
103.90.189.126	AS4808	AS13335	95%	cert 4811fe8a… served by 103.90.189.126 (AS4808) carries SAN domain.com which currently resolves through Cloudflare (AS13335) at 104.18.42.197, 172.64.145.59
65.254.244.182	AS29873	AS13335	95%	cert 22a425b5… served by 65.254.244.182 (AS29873) carries SAN domain.com which currently resolves through Cloudflare (AS13335) at 104.18.42.197, 172.64.145.59

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.

Type	Value	First seen	Last seen
A	172.64.145.59	2026-05-25 21:54:03.363	2026-07-28 10:29:13.532
A	104.18.42.197	2026-05-25 21:54:03.363	2026-07-28 10:29:13.532
TXT	google-site-verification=zlpN6bg9OaBJVw4Lv4-1fZ2wHekVqEnEGBXwuonNpBM	2026-05-26 02:22:42.939	2026-07-28 10:29:13.532
TXT	MS=ms38008831	2026-05-26 02:22:42.939	2026-07-28 10:29:13.532
TXT	google-site-verification=aY0fAnTB0vuNNw_ySRYQ3C8CFMZ8Yqy1k-qzu04uMug	2026-05-26 02:22:42.939	2026-07-28 10:29:13.532
NS	lee.ns.cloudflare.com	2026-05-26 02:22:42.939	2026-07-28 10:29:13.532
TXT	google-site-verification=XATcOZfH8l89guCpLLPRWURuOhFhSVrTkrPTAfVdvhk	2026-05-26 02:22:42.939	2026-07-28 10:29:13.532
NS	sarah.ns.cloudflare.com	2026-05-26 02:22:42.939	2026-07-28 10:29:13.532
TXT	google-site-verification=6yo2U5h4HWauPMM18625PLBIoodHnjC1iwLvfzKvdoM	2026-05-26 02:22:42.939	2026-07-28 10:29:13.532
TXT	google-site-verification=1aIdxE8tG_8BUCMClWep8Z33AIxgsL91plweqqCuNZU	2026-05-26 02:22:42.939	2026-07-28 10:29:13.532
TXT	v=spf1 ip4:38.113.1.0/24 ip4:38.113.20.0/24 ip4:12.45.243.128/26 ip4:65.254.224.0/19 ip4:209.17.115.0/24 ip4:64.69.218.0/24 ip4:35.89.44.32/29 ip4:44.202.169.32/29 ip4:216.40.32.0/20 ip4:64.99.180.0/24 ip4:64.99.140.0/24 ip4:216.40.45.0/27 include:spf.protection.outlook.com include:_spf.hostedemail.com include:spf.websitewelcome.com include:_spf.salesforce.com include:_spf.google.com include:_spf.qualtrics.com -all	2026-05-26 02:22:42.939	2026-07-28 10:29:13.532
MX	10 domain-com.mail.protection.outlook.com	2026-05-26 02:22:42.939	2026-07-28 10:29:13.532