Domain
firstlight.ai
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of firstlight.ai
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
Hosting IPs
—
A/AAAA targets
Subdomains
—
CT + scan + body
Record Types
—
seen in DNS
Observed Certs
—
in our scans
DNS Records
A
198.202.211.1
AAAA
—
MX
1 aspmx.l.google.com, 10 alt3.aspmx.l.google.com, 10 alt4.aspmx.l.google.com, 5 alt1.aspmx.l.google.com, 5 alt2.aspmx.l.google.com
NS
ns-1466.awsdns-55.org, ns-1864.awsdns-41.co.uk, ns-423.awsdns-52.com, ns-528.awsdns-02.net
TXT
apple-domain-verification=b2yXICffbPZtGuue, v=spf1 include:_spf.google.com include:spf.protection.outlook.com include:spf.tmes.trendmicro.com include:spf.zohomail360.in include:21036454.spf04.hubspotemail.net include:et._spf.pardot.com include:servers.mcsv.net ~all
CNAME
—
CAA
—
WHOIS / Registration
Registration data planned
Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.
Subdomains
Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.
Tech Stack
Tech detection pending
Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.
TLS Certificates
Subject: live-metadata.aha-stag.firstlight.ai
Issuer: WR3
SANs: live-metadata.aha-stag.firstlight.ai
Subject: heartbeat-service.api.cignal.firstlight.ai
Issuer: WR3
SANs: heartbeat-service.api.cignal.firstlight.ai
Subject: search-cdn.api.ahacms.firstlight.ai
Issuer: WR3
SANs: search-cdn.api.ahacms.firstlight.ai
Subject: transform-svc-tm.ctrl-stag.firstlight.ai
Issuer: WR3
SANs: transform-svc-tm.ctrl-stag.firstlight.ai
Subject: aha-smarttv-ui-2k16.api.aha.firstlight.ai
Issuer: WR3
SANs: aha-smarttv-ui-2k16.api.aha.firstlight.ai
Subject: bookmark-cloud.api.pldt.firstlight.ai
Issuer: WR3
SANs: bookmark-cloud.api.pldt.firstlight.ai
Subject: sitemap-generator.api.pldt.firstlight.ai
Issuer: WR3
SANs: sitemap-generator.api.pldt.firstlight.ai
Subject: config-service-cdn.api.product.firstlight.ai
Issuer: WR3
SANs: config-service-cdn.api.product.firstlight.ai
Subject: config-service.api.product.firstlight.ai
Issuer: WR3
SANs: config-service.api.product.firstlight.ai
Subject: user-catalog.api.aha.firstlight.ai
Issuer: WR3
SANs: user-catalog.api.aha.firstlight.ai
Subject: sstv-cdf-feed.api.ahacms.firstlight.ai
Issuer: WR3
SANs: sstv-cdf-feed.api.ahacms.firstlight.ai
Subject: image-resizer-cloud-cdn.api.product.firstlight.ai
Issuer: WR3
SANs: image-resizer-cloud-cdn.api.product.firstlight.ai
Subject: config-service.aha-stag.firstlight.ai
Issuer: WR3
SANs: config-service.aha-stag.firstlight.ai
Subject: image-resizer-cloud-cdn.api.aha.firstlight.ai
Issuer: WR3
SANs: image-resizer-cloud-cdn.api.aha.firstlight.ai
Subject: admin-search-service.ahacms-stag.firstlight.ai
Issuer: WR3
SANs: admin-search-service.ahacms-stag.firstlight.ai
Subject: config-service.pldt-stag.firstlight.ai
Issuer: WR3
SANs: config-service.pldt-stag.firstlight.ai
Subject: data-store-5.api.pldt.firstlight.ai
Issuer: WR3
SANs: data-store-5.api.pldt.firstlight.ai
Subject: device-register-preview.api.pldt.firstlight.ai
Issuer: WR3
SANs: device-register-preview.api.pldt.firstlight.ai
Subject: image-metadata-cloud.api.ahacms.firstlight.ai
Issuer: WR3
SANs: image-metadata-cloud.api.ahacms.firstlight.ai
Subject: cgldashflixshortsstreamingpoc-cdn.pldt-stag.firstlight.ai
Issuer: WR3
SANs: cgldashflixshortsstreamingpoc-cdn.pldt-stag.firstlight.ai
Subject: vod-wf-yesvodsrcstag-deploy.ctrl-stag.firstlight.ai
Issuer: WR3
SANs: vod-wf-yesvodsrcstag-deploy.ctrl-stag.firstlight.ai
Subject: gma-data-feed.api.aha.firstlight.ai
Issuer: WR3
SANs: gma-data-feed.api.aha.firstlight.ai
Subject: live-metadata.api.aha.firstlight.ai
Issuer: WR3
SANs: live-metadata.api.aha.firstlight.ai
Subject: favorite-service.api.cignal.firstlight.ai
Issuer: WR3
SANs: favorite-service.api.cignal.firstlight.ai
Subject: data-store-pers-cdn.aha-stag.firstlight.ai
Issuer: WR3
SANs: data-store-pers-cdn.aha-stag.firstlight.ai
Subject: recom-data-pub-srv.api.aha.firstlight.ai
Issuer: WR3
SANs: recom-data-pub-srv.api.aha.firstlight.ai
Subject: auth.api.product.firstlight.ai
Issuer: WR3
SANs: auth.api.product.firstlight.ai
Subject: recommendation-engine.ahacms-stag.firstlight.ai
Issuer: WR3
SANs: recommendation-engine.ahacms-stag.firstlight.ai
Subject: catalog-service-cdn.aha-stag.firstlight.ai
Issuer: WR3
SANs: catalog-service-cdn.aha-stag.firstlight.ai
Subject: device-register-service.api.ahaedge.firstlight.ai
Issuer: WR3
SANs: device-register-service.api.ahaedge.firstlight.ai
IPs Citing This Domain
No citing IPs found yet
As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.
Origin / IP-Leak
USP
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
No origin-IP leaks detected (yet)
Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.
CT-Log Evidence
Certificates from public Certificate Transparency logs whose subject or SAN names this domain — including historic certs we never observed live.
8f8fd660b2d9d555…
sectigo · elephant2026h1
Subject: quickplay.com
Issuer: R13
SANs: firstlight.ai, firstlight.video, firstlightmedia.ai, firstlightmedia.ca, firstlightmedia.stream, firstlightmedia.tv, firstlightmedia.us, firstlightmedia.video, quickplay.biz, quickplay.ca, quickplay.com, www.firstlight.ai, www.firstlight.video, www.firstlightmedia.ai, www.firstlightmedia.ca, www.firstlightmedia.stream, www.firstlightmedia.tv, www.firstlightmedia.us, www.firstlightmedia.video, www.quickplay.biz, www.quickplay.ca, www.quickplay.com
Valid: 2026-01-08 00:49:13 → 2026-04-08 00:49:12
5b001a8fbba74ace…
sectigo · elephant2026h1
Subject: www.firstlight.video
Issuer: R13
SANs: firstlight.ai, firstlight.video, firstlightmedia.ai, firstlightmedia.ca, firstlightmedia.stream, firstlightmedia.tv, firstlightmedia.us, firstlightmedia.video, quickplay.biz, quickplay.ca, quickplay.com, www.firstlight.ai, www.firstlight.video, www.firstlightmedia.ai, www.firstlightmedia.ca, www.firstlightmedia.stream, www.firstlightmedia.tv, www.firstlightmedia.us, www.firstlightmedia.video, www.quickplay.biz, www.quickplay.ca, www.quickplay.com
Valid: 2025-11-08 00:48:55 → 2026-02-06 00:48:54
Threat Intelligence
Domain threat-intel pending
Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.
History
Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.
| Type | Value | First seen | Last seen |
|---|---|---|---|
| NS | ns-1864.awsdns-41.co.uk | 2026-06-02 02:09:23.865 | 2026-06-03 22:21:28.970 |
| NS | ns-423.awsdns-52.com | 2026-06-02 02:09:23.865 | 2026-06-03 22:21:28.970 |
| TXT | v=spf1 include:_spf.google.com include:spf.protection.outlook.com include:spf.tmes.trendmicro.com include:spf.zohomail360.in include:21036454.spf04.hubspotemail.net include:et._spf.pardot.com include:servers.mcsv.net ~all | 2026-06-02 02:09:23.865 | 2026-06-03 22:21:28.970 |
| TXT | apple-domain-verification=b2yXICffbPZtGuue | 2026-06-02 02:09:23.865 | 2026-06-03 22:21:28.970 |
| MX | 5 alt2.aspmx.l.google.com | 2026-06-02 02:09:23.865 | 2026-06-03 22:21:28.970 |
| MX | 10 alt4.aspmx.l.google.com | 2026-06-02 02:09:23.865 | 2026-06-03 22:21:28.970 |
| MX | 1 aspmx.l.google.com | 2026-06-02 02:09:23.865 | 2026-06-03 22:21:28.970 |
| MX | 5 alt1.aspmx.l.google.com | 2026-06-02 02:09:23.865 | 2026-06-03 22:21:28.970 |
| A | 198.202.211.1 | 2026-06-02 02:09:23.865 | 2026-06-03 22:21:28.970 |
| MX | 10 alt3.aspmx.l.google.com | 2026-06-02 02:09:23.865 | 2026-06-03 22:21:28.970 |
| NS | ns-1466.awsdns-55.org | 2026-06-02 02:09:23.865 | 2026-06-03 22:21:28.970 |
| NS | ns-528.awsdns-02.net | 2026-06-02 02:09:23.865 | 2026-06-03 22:21:28.970 |