Domain
figma.com
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of figma.com
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
Hosting IPs
—
A/AAAA targets
Subdomains
—
CT + scan + body
Record Types
—
seen in DNS
Observed Certs
—
in our scans
DNS Records
A
—
AAAA
—
MX
—
NS
—
TXT
—
CNAME
—
CAA
—
WHOIS / Registration
Registration data planned
Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.
Subdomains
Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.
| Subdomain | Resolves to | Last seen |
|---|---|---|
| www.figma.com | 2026-07-28 10:19:39.346 | |
| figma.com | 2026-07-28 04:18:08.089 | |
| mcp.figma.com | 2026-07-28 10:01:01.980 | |
| embed.figma.com | 2026-06-19 02:03:00.671 | |
| cortex-trace-viewer.staging.figma.com | 2026-07-17 01:13:06.842 | |
| bcp.figma.com | 2026-06-23 18:39:48.707 | |
| s3-alpha-sig.figma.com | 2026-07-18 06:01:33.340 | |
| staging.figma.com | 2026-06-23 21:05:35.853 | |
| config.figma.com | 2026-07-23 23:36:58.303 | |
| consent.figma.com | 2026-06-22 19:46:07.000 | |
| info.figma.com | 2026-06-22 19:46:07.000 | |
| staging-admin.figma.com | 2026-07-18 05:42:49.193 | |
| www.staging-admin.figma.com | 2026-07-18 05:42:49.193 | |
| code-eval-reports.staging.figma.com | 2026-05-26 07:41:30.460 | |
| cortex-trace-viewer.prod.figma.com | 2026-07-17 06:07:43.972 | |
| internal-figmate-store.figma.com | 2026-07-25 15:04:44.900 | |
| store.figma.com | 2026-07-27 07:54:05.840 | |
| brand.figma.com | 1970-01-01 00:00:00.000 | |
| gh-broker.figma.com | 1970-01-01 00:00:00.000 | |
| psxid.figma.com | 1970-01-01 00:00:00.000 | |
| schemavirtual2022.figma.com | 1970-01-01 00:00:00.000 | |
| tools.staging.figma.com | 1970-01-01 00:00:00.000 |
Tech Stack
Tech detection pending
Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.
TLS Certificates
Certificate observations pending
TLS certs naming this domain in subject or SANs will appear here as our scan-layer catches them.
IPs Citing This Domain
Hosts whose HTML body references this domain. Strong signal for origin/mirror/embed discovery.
185.198.27.169:8080
href · ×2
49.235.139.91:80
href · ×2
106.53.15.165:80
href · ×1
8.138.28.135:80
href · ×1
114.132.172.225:443
href · ×1
1.12.249.156:80
href · ×1
144.168.56.89:8080
href · ×1
144.168.56.89:443
href · ×1
163.5.53.21:443
href · ×1
81.163.30.71:443
href · ×1
141.94.77.250:443
href · ×1
117.72.25.25:80
href · ×1
114.132.172.225:8080
href · ×1
167.172.75.227:80
href · ×1
45.192.97.191:443
href · ×1
117.72.25.25:443
href · ×1
52.205.20.180:443
href · ×1
82.114.229.122:80
href · ×1
175.24.179.4:443
href · ×1
Origin / IP-Leak
USP
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
No origin-IP leaks detected (yet)
Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.
CT-Log Evidence
Certificates from public Certificate Transparency logs whose subject or SAN names this domain — including historic certs we never observed live.
956258870a412636…
google · xenon2026h2
Subject: *.figma.com
Issuer: Amazon RSA 2048 M04
SANs: *.figma.com, figma.com
Valid: 2026-03-18 00:00:00 → 2026-10-01 23:59:59
eb4939a699bbce12…
google · xenon2026h2
Subject: *.figma.com
Issuer: Amazon RSA 2048 M01
SANs: *.figma.com, figma.com
Valid: 2026-03-07 00:00:00 → 2026-09-20 23:59:59
0100bbf6bead07cd…
google · xenon2026h2
Subject: *.figma.com
Issuer: Amazon RSA 2048 M01
SANs: *.figma.com, figma.com
Valid: 2026-03-05 00:00:00 → 2026-09-18 23:59:59
680084cfe152a158…
google · xenon2026h2
Subject: *.figma.com
Issuer: Amazon RSA 2048 M01
SANs: *.figma.com, figma.com
Valid: 2026-03-05 00:00:00 → 2026-09-18 23:59:59
Threat Intelligence
Domain threat-intel pending
Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.
History
Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.
| Type | Value | First seen | Last seen |
|---|---|---|---|
| TXT | v=spf1 a include:_spf.google.com ip4:149.72.216.165 ip4:167.89.79.69 ip4:167.89.87.53 ip4:168.245.25.177 ip4:167.89.97.206 include:mail.zendesk.com include:mg-spf.greenhouse.io -all | 2026-05-26 00:07:44.959 | 2026-07-28 04:18:08.089 |
| TXT | notion-domain-verification=geo971ObbpRnpoT5ZZ73OOXXFxDMUKS0v5PdfY2W20M | 2026-05-26 00:07:44.959 | 2026-07-28 04:18:08.089 |
| NS | ns-912.awsdns-50.net | 2026-05-26 00:07:44.959 | 2026-07-28 04:18:08.089 |
| NS | ns-326.awsdns-40.com | 2026-05-26 00:07:44.959 | 2026-07-28 04:18:08.089 |
| TXT | reachdesk-verification=blmLE2KVMUfpn0pQJUhEbNmcZhtV3APBlujc8UQoeKoT8ffJZ2AQIlMkQtjbZVA0 | 2026-05-26 00:07:44.959 | 2026-07-28 04:18:08.089 |
| TXT | MS=ms46247837 | 2026-05-26 00:07:44.959 | 2026-07-28 04:18:08.089 |
| NS | ns-1657.awsdns-15.co.uk | 2026-05-26 00:07:44.959 | 2026-07-28 04:18:08.089 |
| TXT | segment-site-verification=z2vlLwo9wlSRgpA1gJtKG7Cf7hXGU8ck | 2026-05-26 00:07:44.959 | 2026-07-28 04:18:08.089 |
| TXT | google-site-verification=rCFXO7IrgLapurW3LCjK3g10AK27Mu0dMoqL-0yW8wY | 2026-05-26 00:07:44.959 | 2026-07-28 04:18:08.089 |
| TXT | twilio-domain-verification=6fde6edbfa6565710633cad4ef9e6f16 | 2026-05-26 00:07:44.959 | 2026-07-28 04:18:08.089 |
| TXT | cursor-domain-verification-cvxp0h=ZYVC7GrCWXWBT8QrWSy3lnmoH | 2026-05-26 00:07:44.959 | 2026-07-28 04:18:08.089 |
| TXT | shopify-verification-code=W6bLm0nIDEt0NPjQ0RiAjioCy5vKJP | 2026-05-26 00:07:44.959 | 2026-07-28 04:18:08.089 |
| MX | 10 aspmx3.googlemail.com | 2026-05-26 00:07:44.959 | 2026-07-28 04:18:08.089 |
| TXT | postman-domain-verification=210f61d6c10b3191b254a11856eb960fbca3f02290a007849d4da5460f94b5b3ed2639e6774646700ed3d901432cba790f80b29f3d9d0e44614a53d72553ab0d | 2026-05-26 00:07:44.959 | 2026-07-28 04:18:08.089 |
| TXT | mongodb-site-verification=sjpVUW9hVx0Fo7xU1OggxAwNUJIEbFXt | 2026-05-26 00:07:44.959 | 2026-07-28 04:18:08.089 |
| TXT | 1password-site-verification=LUTCLEML6JDMHACYUXWAJAOV74 | 2026-05-26 00:07:44.959 | 2026-07-28 04:18:08.089 |
| TXT | MS=ms23440957 | 2026-05-26 00:07:44.959 | 2026-07-28 04:18:08.089 |
| TXT | drift-domain-verification=1dcdd2801b99b27623f8d35030ff747cc591acd43ff39054869a54dd645ee0f8 | 2026-05-26 00:07:44.959 | 2026-07-28 04:18:08.089 |
| TXT | zapier-domain-verification-challenge=eb661d6f-ce23-49fa-a618-3f0f99e90ca8 | 2026-05-26 00:07:44.959 | 2026-07-28 04:18:08.089 |
| TXT | dropbox-domain-verification=u0lztjyam5gd | 2026-05-26 00:07:44.959 | 2026-07-28 04:18:08.089 |
| TXT | adobe-idp-site-verification=8761b40fa7a309149c45c025ecf2d2eea8fb4ecb489194cce3e2efede17c781e | 2026-05-26 00:07:44.959 | 2026-07-28 04:18:08.089 |
| A | 18.173.205.18 | 2026-05-26 00:07:44.959 | 2026-06-23 20:48:47.478 |
| TXT | stripe-verification=60dc440f0fb540a3a80e4bb56aa675cd75849fd66b427bc012ea67e1f2f4d026 | 2026-05-26 00:07:44.959 | 2026-07-28 04:18:08.089 |
| TXT | bzagy7hkzg | 2026-05-26 00:07:44.959 | 2026-07-28 04:18:08.089 |
| CAA | 0 issue "pki.goog; cansignhttpexchanges=yes" | 2026-05-26 00:07:44.959 | 2026-07-28 04:18:08.089 |
| TXT | wiz-domain-verification=cf7889d49aaa81b869ae25fdca5d98760b6e62f8b3dcdbd31428f6766df6df59 | 2026-05-26 00:07:44.959 | 2026-07-28 04:18:08.089 |
| CAA | 0 issue "letsencrypt.org" | 2026-05-26 00:07:44.959 | 2026-07-28 04:18:08.089 |
| CAA | 0 iodef "mailto:security@figma.com" | 2026-05-26 00:07:44.959 | 2026-07-28 04:18:08.089 |
| TXT | google-site-verification=A9O3cWeQxmKPiLAY-3s7WfVVpktBZCTxlIMU-eDz5Xs | 2026-05-26 00:07:44.959 | 2026-07-28 04:18:08.089 |
| TXT | anthropic-domain-verification-4rt01s=L6y4AArUwEXaF4KxpmWGKAKXI | 2026-05-26 00:07:44.959 | 2026-07-28 04:18:08.089 |
| TXT | openai-domain-verification=dv-JGOTRvDBX9eV2Gk8RyduugId | 2026-05-26 00:07:44.959 | 2026-07-28 04:18:08.089 |
| TXT | apple-domain-verification=1IOgJXKcT9knvlrK | 2026-05-26 00:07:44.959 | 2026-07-28 04:18:08.089 |
| CAA | 0 issue "amazonaws.com" | 2026-05-26 00:07:44.959 | 2026-07-28 04:18:08.089 |
| A | 18.173.205.115 | 2026-05-26 00:07:44.959 | 2026-06-23 20:48:47.478 |
| TXT | stripe-verification=E34C635DB81C09C3DB472AF2F6A6AA9C9BD6E615BB4987601C23914790BDE50C | 2026-05-26 00:07:44.959 | 2026-07-28 04:18:08.089 |
| A | 18.173.205.77 | 2026-05-26 00:07:44.959 | 2026-06-23 20:48:47.478 |
| A | 18.173.205.100 | 2026-05-26 00:07:44.959 | 2026-06-23 20:48:47.478 |
| TXT | linear-domain-verification=6mrgp34zky3d | 2026-05-26 00:07:44.959 | 2026-06-15 16:23:59.037 |
| TXT | v=MCPv1; k=ed25519; p=xG82hehTGzTY42rScErytNIf7E+qNqxT7L6bvuTAU4A= | 2026-05-26 00:07:44.959 | 2026-07-28 04:18:08.089 |
| TXT | google-site-verification=RGkyUdk1Vglm9VUITzietBk9EpJLNF690eAPGADZAO8 | 2026-05-26 00:07:44.959 | 2026-07-28 04:18:08.089 |
| TXT | google-site-verification=TUp2QwBcCejFVJKwyvEFK4yMNoQgQy5W0cIvuf66Mvs | 2026-05-26 00:07:44.959 | 2026-07-28 04:18:08.089 |
| MX | 10 aspmx2.googlemail.com | 2026-05-26 00:07:44.959 | 2026-07-28 04:18:08.089 |
| TXT | gc-ai-domain-verification-af1e5b=9rPoWvCtOGSMSPWRfd3aNrrCz | 2026-05-26 00:07:44.959 | 2026-07-28 04:18:08.089 |
| TXT | jamf-site-verification=FDySinqVSqqLh2C3KPBE1g | 2026-05-26 00:07:44.959 | 2026-07-28 04:18:08.089 |
| TXT | google-site-verification=56-T7QBpEBj_eJAQEeNBiiDaKx2ylEDgBH0heMnXYkU | 2026-05-26 00:07:44.959 | 2026-07-28 04:18:08.089 |
| NS | ns-1239.awsdns-26.org | 2026-05-26 00:07:44.959 | 2026-07-28 04:18:08.089 |
| MX | 5 alt2.aspmx.l.google.com | 2026-05-26 00:07:44.959 | 2026-07-28 04:18:08.089 |
| TXT | gradle-verification=QB4JUU586IL6KC3JVC3N0U5CNU10H | 2026-05-26 00:07:44.959 | 2026-07-28 04:18:08.089 |
| TXT | atlassian-domain-verification=oDxpYa6fakpgoavsUf0n1AppTm13MnKzy2d01eAF1xtr9jA58AKXqtjU68cCkFtJ | 2026-05-26 00:07:44.959 | 2026-07-28 04:18:08.089 |
| MX | 1 aspmx.l.google.com | 2026-05-26 00:07:44.959 | 2026-07-28 04:18:08.089 |
| TXT | docusign=f6914af5-107a-4dfa-9793-e34a09f627f0 | 2026-05-26 00:07:44.959 | 2026-07-28 04:18:08.089 |
| MX | 5 alt1.aspmx.l.google.com | 2026-05-26 00:07:44.959 | 2026-07-28 04:18:08.089 |
| TXT | ZOOM_verify_vCQSjij2TCG8TawaqXfiMQ | 2026-05-26 00:07:44.959 | 2026-07-28 04:18:08.089 |
| TXT | figma-domain-verification=39be13b4a7b58a195f2f21f08e89010fd0e725ba1486664057a14988dac09557-1744290303 | 2026-05-26 00:07:44.959 | 2026-07-28 04:18:08.089 |
| TXT | google-site-verification=nB1tDMUrIaTGOd9dydIEsFV5x1dbAIouhQ0VutHrzlU | 2026-05-26 00:07:44.959 | 2026-07-28 04:18:08.089 |
| TXT | google-site-verification=HaMs8wg-gbgQs2hFJuwU_ciNQK_YobMtJ5hizbD2BZQ | 2026-05-26 00:07:44.959 | 2026-07-28 04:18:08.089 |
| A | 54.192.97.71 | 2026-05-26 03:55:34.463 | 2026-06-22 20:45:42.777 |
| A | 54.192.97.105 | 2026-05-26 03:55:34.463 | 2026-06-22 20:45:42.777 |
| A | 54.192.97.90 | 2026-05-26 03:55:34.463 | 2026-06-22 20:45:42.777 |
| A | 54.192.97.49 | 2026-05-26 03:55:34.463 | 2026-06-22 20:45:42.777 |
| A | 18.239.36.110 | 2026-06-04 21:24:28.349 | 2026-07-27 20:51:25.313 |
| A | 18.239.36.39 | 2026-06-04 21:24:28.349 | 2026-07-27 20:51:25.313 |
| A | 18.239.36.35 | 2026-06-04 21:24:28.349 | 2026-07-27 20:51:25.313 |
| A | 18.239.36.36 | 2026-06-04 21:24:28.349 | 2026-07-27 20:51:25.313 |
| TXT | linear-domain-verification=5wvb3h3uh9xv | 2026-06-17 17:19:57.117 | 2026-07-28 04:18:08.089 |
| TXT | decagon-domain-verification-7ddqfp=9iCyjPaUwRA8hgPJua5GQcuzu | 2026-07-15 20:04:13.980 | 2026-07-28 04:18:08.089 |
| A | 52.222.214.113 | 2026-07-15 20:04:13.980 | 2026-07-15 20:04:13.980 |
| A | 52.222.214.27 | 2026-07-15 20:04:13.980 | 2026-07-15 20:04:13.980 |
| A | 52.222.214.46 | 2026-07-15 20:04:13.980 | 2026-07-15 20:04:13.980 |
| A | 52.222.214.18 | 2026-07-15 20:04:13.980 | 2026-07-15 20:04:13.980 |
| TXT | cloudflare_dashboard_sso=9b4d3b2aa5748ef37a36cc90e9b58d2e | 2026-07-25 11:37:35.289 | 2026-07-28 04:18:08.089 |
| A | 108.156.60.82 | 2026-07-28 04:18:08.089 | 2026-07-28 04:18:08.089 |
| A | 108.156.60.60 | 2026-07-28 04:18:08.089 | 2026-07-28 04:18:08.089 |
| A | 108.156.60.49 | 2026-07-28 04:18:08.089 | 2026-07-28 04:18:08.089 |
| A | 108.156.60.81 | 2026-07-28 04:18:08.089 | 2026-07-28 04:18:08.089 |