Domain
gob.mx
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of gob.mx
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
Hosting IPs
—
A/AAAA targets
Subdomains
—
CT + scan + body
Record Types
—
seen in DNS
Observed Certs
—
in our scans
DNS Records
A
207.249.122.223
AAAA
—
MX
—
NS
c.mx-ns.mx, e.mx-ns.mx, i.mx-ns.mx, m.mx-ns.mx, o.mx-ns.mx, x.mx-ns.mx
TXT
_globalsign-domain-verification=bdqn7iUui39qnapy87ZV6M-y7bvYuz9_6c3TliT9SF, v=spf1 -all
CNAME
—
CAA
—
WHOIS / Registration
Registration data planned
Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.
Subdomains
Subdomain enumeration pending
Every subdomain ever issued a TLS cert under this apex — extracted from Certificate Transparency logs, our own scan observations and body references.
Tech Stack
Tech detection pending
Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.
TLS Certificates
Subject: *.crt.gob.mx
Issuer: GeoTrust TLS RSA CA G1
SANs: *.crt.gob.mx, crt.gob.mx
Subject: *.conapred.gob.mx
Issuer: Thawte TLS RSA CA G1
SANs: *.conapred.gob.mx, conapred.gob.mx
Subject: i4ch-capitalhumano.cdmx.gob.mx
Issuer: Sectigo Public Server Authentication CA OV R36
SANs: i4ch-capitalhumano.cdmx.gob.mx, www.i4ch-capitalhumano.cdmx.gob.mx
Subject: *.uat.clouda.sat.gob.mx
Issuer: GlobalSign RSA OV SSL CA 2018
SANs: *.uat.clouda.sat.gob.mx, uat.clouda.sat.gob.mx
Subject: *.cer.clouda.sat.gob.mx
Issuer: AC SAT
SANs: *.cer.clouda.sat.gob.mx
Subject: *.licencias-coahuila.gob.mx
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.licencias-coahuila.gob.mx, licencias-coahuila.gob.mx
Subject: *.imss.gob.mx
Issuer: RapidSSL TLS RSA CA G1
SANs: *.imss.gob.mx, imss.gob.mx
Subject: *.sre.gob.mx
Issuer: GeoTrust SSL CA - G3
SANs: *.sre.gob.mx, sre.gob.mx
Subject: *.cre.gob.mx
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: *.cre.gob.mx, cre.gob.mx, s-cel-qa.cre.gob.mx, s-cel.cre.gob.mx
Subject: sare.navojoa.gob.mx
Issuer: YE2
SANs: sare.navojoa.gob.mx
Subject: mail.capufe.gob.mx
Issuer: Sectigo Public Server Authentication CA OV R36
SANs: autodiscover.capufe.gob.mx, autodiscover.capufe.mx, mail.capufe.gob.mx, mail.capufe.mx
Subject: open.sgm.gob.mx
Issuer: open.sgm.gob.mx
SANs: open.sgm.gob.mx
Subject: www.becas2.nld.gob.mx
Issuer: R12
SANs: *.nld.gob.mx, nld.gob.mx, www.avancesobraspublicas.nld.gob.mx, www.becas2.nld.gob.mx, www.bls1618.nld.gob.mx, www.declaracioninmujer.nld.gob.mx, www.gmambiente1821.nld.gob.mx, www.gturismo2124.nld.gob.mx, www.inmujertransparencia.nld.gob.mx, www.noticias.nld.gob.mx, www.presentacioncapacitacionpersonal.nld.gob.mx, www.talleres.nld.gob.mx, www.trackinginfraestructura.nld.gob.mx, www.transparencia2124.nld.gob.mx, www.transparenciadif.nld.gob.mx
Subject: tsplus.hermosillo.gob.mx
Issuer: YE2
SANs: tsplus.hermosillo.gob.mx
Subject: *.salud.gob.mx
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: *.salud.gob.mx
Subject: dggeyet.sep.gob.mx
Issuer: Entrust OV TLS Issuing RSA CA 2
SANs: dggeyet.sep.gob.mx
Subject: *.opb.gob.mx
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.opb.gob.mx, opb.gob.mx
Subject: *.segey.gob.mx
Issuer: RapidSSL TLS RSA CA G1
SANs: *.segey.gob.mx, segey.gob.mx
Subject: pjbc.gob.mx
Issuer: R12
SANs: *.pjbc.gob.mx, *.poder-judicial-bc.gob.mx, pjbc.gob.mx, poder-judicial-bc.gob.mx
Subject: *.congresoqroo.gob.mx
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.congresoqroo.gob.mx, congresoqroo.gob.mx
Subject: server.chimalhuacan.gob.mx
Issuer: YR1
SANs: server.chimalhuacan.gob.mx
Subject: cni05.sspc.gob.mx
Issuer: GeoTrust TLS RSA CA G1
SANs: cni05.sspc.gob.mx, www.cni05.sspc.gob.mx
Subject: *.conanp.gob.mx
Issuer: Go Daddy Secure Certificate Authority - G2
SANs: *.conanp.gob.mx, conanp.gob.mx
Subject: redsemaforica.saltillo.gob.mx
Issuer: YR2
SANs: redsemaforica.saltillo.gob.mx
Subject: *.pueblacapital.gob.mx
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: *.pueblacapital.gob.mx, pueblacapital.gob.mx
Subject: *.mpiochih.gob.mx
Issuer: Go Daddy Secure Certificate Authority - G2
SANs: *.mpiochih.gob.mx, mpiochih.gob.mx
Subject: *.stps.gob.mx
Issuer: Go Daddy Secure Certificate Authority - G2
SANs: *.stps.gob.mx, stps.gob.mx
Subject: cienciasforestales.inifap.gob.mx
Issuer: ZeroSSL RSA Domain Secure Site CA
SANs: cienciasforestales.inifap.gob.mx
Subject: *.aguascalientes.gob.mx
Issuer: Go Daddy Secure Certificate Authority - G2
SANs: *.aguascalientes.gob.mx, aguascalientes.gob.mx
Subject: mail.correosdemexico.gob.mx
Issuer: Go Daddy Secure Certificate Authority - G2
SANs: autodiscover.correosdemexico.gob.mx, mail.correosdemexico.gob.mx, www.mail.correosdemexico.gob.mx
IPs Citing This Domain
Hosts whose HTML body references this domain. Strong signal for origin/mirror/embed discovery.
67.225.189.7:80
href · ×1
64.23.233.216:443
href · ×1
Origin / IP-Leak
USP
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
| Origin IP | Origin ASN | CDN ASN | Confidence | Reasoning |
|---|---|---|---|---|
| 148.244.138.108 | AS11172 | AS8075 | 95% | cert db2c3ffa… served by 148.244.138.108 (AS11172) carries SAN empleo.gob.mx which currently resolves through Microsoft (AS8075) at 52.167.176.9 |
| 201.161.132.170 | AS16960 | AS13335 | 95% | cert 4edb4151… served by 201.161.132.170 (AS16960) carries SAN puertovallarta.gob.mx which currently resolves through Cloudflare (AS13335) at 104.21.72.248, 172.67.155.236, 2606:4700:3037::ac43:9bec, 2606:4700:3035::6815:48f8 |
| 207.248.61.73 | AS11888 | AS13335 | 95% | cert cae036c5… served by 207.248.61.73 (AS11888) carries SAN web.seducoahuila.gob.mx which currently resolves through Cloudflare (AS13335) at 104.26.12.189, 104.26.13.189, 172.67.71.238, 2606:4700:20::681a:cbd |
| 34.49.64.105 | AS396982 | AS13335 | 95% | cert 9d5cdd79… served by 34.49.64.105 (AS396982) carries SAN poderjudicialcdmx.gob.mx which currently resolves through Cloudflare (AS13335) at 104.19.159.205, 104.18.160.163, 2606:4700::6813:9fcd, 2606:4700::6812:a0a3 |
| 201.131.7.159 | AS28392 | AS14618 | 95% | cert 2091685f… served by 201.131.7.159 (AS28392) carries SAN jalisco.gob.mx which currently resolves through Amazon (AS14618) at 100.57.73.37, 3.218.126.190, 32.193.92.55, 54.146.96.166 |
| 201.131.6.113 | AS28392 | AS14618 | 95% | cert 65015cec… served by 201.131.6.113 (AS28392) carries SAN jalisco.gob.mx which currently resolves through Amazon (AS14618) at 100.57.73.37, 3.218.126.190, 32.193.92.55, 54.146.96.166 |
| 187.174.171.99 | AS8151 | AS19551 | 95% | cert 20224355… served by 187.174.171.99 (AS8151) carries SAN zacatecas.gob.mx which currently resolves through Imperva (AS19551) at 45.60.127.34, 45.60.121.34 |
| 201.131.6.19 | AS28392 | AS14618 | 95% | cert d3f5aa0d… served by 201.131.6.19 (AS28392) carries SAN jalisco.gob.mx which currently resolves through Amazon (AS14618) at 100.57.73.37, 3.218.126.190, 32.193.92.55, 54.146.96.166 |
| 200.33.79.243 | AS22884 | AS209242 | 95% | cert 814cd58c… served by 200.33.79.243 (AS22884) carries SAN morelos.gob.mx which currently resolves through Cloudflare (AS209242) at 198.202.211.1 |
| 201.131.7.35 | AS28392 | AS14618 | 95% | cert 07c26ce6… served by 201.131.7.35 (AS28392) carries SAN jalisco.gob.mx which currently resolves through Amazon (AS14618) at 100.57.73.37, 3.218.126.190, 32.193.92.55, 54.146.96.166 |
| 201.131.7.119 | AS28392 | AS14618 | 95% | cert 06317d9a… served by 201.131.7.119 (AS28392) carries SAN jalisco.gob.mx which currently resolves through Amazon (AS14618) at 32.193.92.55, 54.146.96.166, 107.21.230.62, 3.220.5.182 |
| 189.193.239.25 | AS13999 | AS16509 | 95% | cert 1a8d378d… served by 189.193.239.25 (AS13999) carries SAN guanajuato.gob.mx which currently resolves through Amazon (AS16509) at 3.223.98.140, 174.129.181.241, 100.50.51.92, 52.202.166.125 |
| 187.216.33.91 | AS8151 | AS13335 | 95% | cert 3087d88e… served by 187.216.33.91 (AS8151) carries SAN saltillo.gob.mx which currently resolves through Cloudflare (AS13335) at 104.26.9.116, 104.26.8.116, 172.67.71.202, 2606:4700:20::ac43:47ca |
| 187.217.206.118 | AS8151 | AS8075 | 95% | cert 9905b6cc… served by 187.217.206.118 (AS8151) carries SAN salud-oaxaca.gob.mx which currently resolves through Microsoft (AS8075) at 13.77.161.49 |
| 168.205.4.153 | AS3356 | AS16509 | 95% | cert 31d4a974… served by 168.205.4.153 (AS3356) carries SAN fiscaliamorelos.gob.mx which currently resolves through Amazon (AS16509) at 216.150.1.1 |
| 201.148.65.19 | AS18734 | AS14618 | 95% | cert 1a8d378d… served by 201.148.65.19 (AS18734) carries SAN guanajuato.gob.mx which currently resolves through Amazon (AS14618) at 174.129.181.241, 100.50.51.92, 52.202.166.125, 52.205.66.187 |
| 148.235.6.87 | AS8151 | AS13335 | 95% | cert e2a57bb2… served by 148.235.6.87 (AS8151) carries SAN sepbcs.gob.mx which currently resolves through Cloudflare (AS13335) at 104.21.62.86, 172.67.222.34, 2606:4700:3032::ac43:de22, 2606:4700:3036::6815:3e56 |
| 201.131.6.219 | AS28392 | AS14618 | 95% | cert 5d15d270… served by 201.131.6.219 (AS28392) carries SAN jalisco.gob.mx which currently resolves through Amazon (AS14618) at 107.21.230.62, 3.220.5.182, 34.224.254.0, 13.219.168.45 |
| 189.254.240.18 | AS8151 | AS19551 | 95% | cert 20224355… served by 189.254.240.18 (AS8151) carries SAN zacatecas.gob.mx which currently resolves through Imperva (AS19551) at 45.60.127.34, 45.60.121.34 |
| 201.131.7.115 | AS28392 | AS14618 | 95% | cert e3e26c95… served by 201.131.7.115 (AS28392) carries SAN jalisco.gob.mx which currently resolves through Amazon (AS14618) at 107.21.230.62, 3.220.5.182, 34.224.254.0, 13.219.168.45 |
| 187.251.120.53 | AS22884 | AS13335 | 95% | cert f24ef8cc… served by 187.251.120.53 (AS22884) carries SAN citas.municipiodeoaxaca.gob.mx which currently resolves through Cloudflare (AS13335) at 172.66.166.9, 104.20.40.135, 2606:4700:10::6814:2887, 2606:4700:10::ac42:a609 |
| 201.131.6.170 | AS28392 | AS14618 | 95% | cert c02971a3… served by 201.131.6.170 (AS28392) carries SAN jalisco.gob.mx which currently resolves through Amazon (AS14618) at 107.21.230.62, 3.220.5.182, 34.224.254.0, 13.219.168.45 |
| 187.217.57.234 | AS8151 | AS13335 | 95% | cert 626a8c53… served by 187.217.57.234 (AS8151) carries SAN conade.gob.mx which currently resolves through Cloudflare (AS13335) at 172.67.71.81, 104.26.4.3, 104.26.5.3, 2606:4700:20::681a:403 |
| 201.161.132.172 | AS16960 | AS13335 | 95% | cert 7e440d05… served by 201.161.132.172 (AS16960) carries SAN puertovallarta.gob.mx which currently resolves through Cloudflare (AS13335) at 104.21.72.248, 172.67.155.236, 2606:4700:3037::ac43:9bec, 2606:4700:3033::6815:48f8 |
| 187.216.144.8 | AS8151 | AS13335 | 95% | cert cffbb18e… served by 187.216.144.8 (AS8151) carries SAN corregidora.gob.mx which currently resolves through Cloudflare (AS13335) at 172.67.69.165, 104.26.13.156, 104.26.12.156, 2606:4700:20::681a:d9c |
CT-Log Evidence
Certificates from public Certificate Transparency logs whose subject or SAN names this domain — including historic certs we never observed live.
b80e5ac543850a2d…
google · argon2026h2
Subject: gob.mx
Issuer: GlobalSign RSA OV SSL CA 2018
SANs: gob.mx
Valid: 2025-10-17 18:07:01 → 2026-10-03 21:11:00
b80e5ac543850a2d…
cloudflare · nimbus2026
Subject: gob.mx
Issuer: GlobalSign RSA OV SSL CA 2018
SANs: gob.mx
Valid: 2025-10-17 18:07:01 → 2026-10-03 21:11:00
b80e5ac543850a2d…
google · xenon2026h2
Subject: gob.mx
Issuer: GlobalSign RSA OV SSL CA 2018
SANs: gob.mx
Valid: 2025-10-17 18:07:01 → 2026-10-03 21:11:00
d78a4f389d24209b…
google · argon2026h2
Subject: gob.mx
Issuer: GlobalSign RSA OV SSL CA 2018
SANs: gob.mx
Valid: 2025-10-09 23:32:01 → 2026-10-03 21:11:00
d78a4f389d24209b…
cloudflare · nimbus2026
Subject: gob.mx
Issuer: GlobalSign RSA OV SSL CA 2018
SANs: gob.mx
Valid: 2025-10-09 23:32:01 → 2026-10-03 21:11:00
d78a4f389d24209b…
google · xenon2026h2
Subject: gob.mx
Issuer: GlobalSign RSA OV SSL CA 2018
SANs: gob.mx
Valid: 2025-10-09 23:32:01 → 2026-10-03 21:11:00
16b277e5197eadbb…
google · argon2026h2
Subject: gob.mx
Issuer: GlobalSign RSA OV SSL CA 2018
SANs: gob.mx
Valid: 2025-09-01 21:11:01 → 2026-10-03 21:11:00
16b277e5197eadbb…
cloudflare · nimbus2026
Subject: gob.mx
Issuer: GlobalSign RSA OV SSL CA 2018
SANs: gob.mx
Valid: 2025-09-01 21:11:01 → 2026-10-03 21:11:00
1b2f8cc995d07a64…
google · argon2026h2
Subject: gob.mx
Issuer: GlobalSign RSA OV SSL CA 2018
SANs: gob.mx
Valid: 2025-08-28 18:41:02 → 2026-09-29 18:41:01
1b2f8cc995d07a64…
cloudflare · nimbus2026
Subject: gob.mx
Issuer: GlobalSign RSA OV SSL CA 2018
SANs: gob.mx
Valid: 2025-08-28 18:41:02 → 2026-09-29 18:41:01
Threat Intelligence
Domain threat-intel pending
Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.
History
Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.
| Type | Value | First seen | Last seen |
|---|---|---|---|
| NS | e.mx-ns.mx | 2026-05-26 06:31:58.727 | 2026-05-26 06:31:58.727 |
| TXT | v=spf1 -all | 2026-05-26 06:31:58.727 | 2026-05-26 06:31:58.727 |
| NS | o.mx-ns.mx | 2026-05-26 06:31:58.727 | 2026-05-26 06:31:58.727 |
| NS | i.mx-ns.mx | 2026-05-26 06:31:58.727 | 2026-05-26 06:31:58.727 |
| NS | c.mx-ns.mx | 2026-05-26 06:31:58.727 | 2026-05-26 06:31:58.727 |
| NS | x.mx-ns.mx | 2026-05-26 06:31:58.727 | 2026-05-26 06:31:58.727 |
| TXT | _globalsign-domain-verification=bdqn7iUui39qnapy87ZV6M-y7bvYuz9_6c3TliT9SF | 2026-05-26 06:31:58.727 | 2026-05-26 06:31:58.727 |
| A | 207.249.122.223 | 2026-05-26 06:31:58.727 | 2026-05-26 06:31:58.727 |
| NS | m.mx-ns.mx | 2026-05-26 06:31:58.727 | 2026-05-26 06:31:58.727 |