Domain
gov.sa
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of gov.sa
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
Hosting IPs
—
A/AAAA targets
Subdomains
—
CT + scan + body
Record Types
—
seen in DNS
Observed Certs
—
in our scans
DNS Records
A
—
AAAA
—
MX
—
NS
—
TXT
—
CNAME
—
CAA
—
WHOIS / Registration
Registration data planned
Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.
Subdomains
Subdomain enumeration pending
Every subdomain ever issued a TLS cert under this apex — extracted from Certificate Transparency logs, our own scan observations and body references.
Tech Stack
Tech detection pending
Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.
TLS Certificates
Certificate observations pending
TLS certs naming this domain in subject or SANs will appear here as our scan-layer catches them.
IPs Citing This Domain
No citing IPs found yet
As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.
Origin / IP-Leak
USP
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
| Origin IP | Origin ASN | CDN ASN | Confidence | Reasoning |
|---|---|---|---|---|
| 37.76.253.199 | AS35753 | AS13335 | 95% | cert e264a5cc… served by 37.76.253.199 (AS35753) carries SAN misa.gov.sa which currently resolves through Cloudflare (AS13335) at 162.159.135.42, 2606:4700:7::a29f:862a, 2606:4700:7::a29f:872a |
| 37.76.253.215 | AS35753 | AS13335 | 95% | cert d1990923… served by 37.76.253.215 (AS35753) carries SAN misa.gov.sa which currently resolves through Cloudflare (AS13335) at 162.159.135.42, 2606:4700:7::a29f:862a, 2606:4700:7::a29f:872a |
| 37.76.253.195 | AS35753 | AS13335 | 95% | cert d1990923… served by 37.76.253.195 (AS35753) carries SAN misa.gov.sa which currently resolves through Cloudflare (AS13335) at 162.159.135.42, 2606:4700:7::a29f:862a, 2606:4700:7::a29f:872a |
| 8.228.194.171 | AS396982 | AS13335 | 95% | cert f2eb6e4b… served by 8.228.194.171 (AS396982) carries SAN nelc.gov.sa which currently resolves through Cloudflare (AS13335) at 172.65.90.47, 172.65.90.46, 2606:4700:78::90:0:300, 2606:4700:78::90:0:301 |
| 158.101.235.111 | AS31898 | AS8075 | 95% | cert 824745d4… served by 158.101.235.111 (AS31898) carries SAN sta.gov.sa which currently resolves through Microsoft (AS8075) at 2620:1ec:bdf::35, 13.107.246.35 |
| 8.228.211.100 | AS396982 | AS8075 | 95% | cert 1f6d49b1… served by 8.228.211.100 (AS396982) carries SAN autodiscover.awqaf.gov.sa which currently resolves through Microsoft (AS8075) at 40.98.16.77, 2603:1026:c03:6829::8, 2603:1026:c03:6827::8, 2603:1026:c03:645a::8 |
| 34.36.110.42 | AS396982 | AS45102 | 95% | cert 9e70d3a9… served by 34.36.110.42 (AS396982) carries SAN ef.gov.sa which currently resolves through Alibaba (AS45102) at 8.213.30.60, 8.213.18.251, 240b:400c:8:e505:9547:220d:113a:f126, 240b:400c:8:e508:c600:4c9d:ba6d:cfb8 |
| 34.166.155.165 | AS396982 | AS13335 | 95% | cert f2eb6e4b… served by 34.166.155.165 (AS396982) carries SAN nelc.gov.sa which currently resolves through Cloudflare (AS13335) at 172.65.90.47, 172.65.90.46, 2606:4700:78::90:0:300, 2606:4700:78::90:0:301 |
| 34.166.244.139 | AS396982 | AS8075 | 95% | cert 1f6d49b1… served by 34.166.244.139 (AS396982) carries SAN autodiscover.awqaf.gov.sa which currently resolves through Microsoft (AS8075) at 52.98.178.248, 2603:1026:c11:a::8, 2603:1026:900:29::4c, 2603:1026:900::75 |
| 141.147.136.173 | AS31898 | AS8075 | 95% | cert b0e3ca47… served by 141.147.136.173 (AS31898) carries SAN sta.gov.sa which currently resolves through Microsoft (AS8075) at 2620:1ec:bdf::35, 13.107.246.35 |
| 80.225.74.211 | AS31898 | AS45102 | 95% | cert 59d9f467… served by 80.225.74.211 (AS31898) carries SAN ssp.gov.sa which currently resolves through Alibaba (AS45102) at 8.213.25.1, 8.213.21.171 |
| 81.208.173.22 | AS31898 | AS8075 | 95% | cert 824745d4… served by 81.208.173.22 (AS31898) carries SAN sta.gov.sa which currently resolves through Microsoft (AS8075) at 2620:1ec:bdf::35, 13.107.246.35 |
| 34.166.226.219 | AS396982 | AS13335 | 95% | cert 4c0febe5… served by 34.166.226.219 (AS396982) carries SAN taqeem.gov.sa which currently resolves through Cloudflare (AS13335) at 162.159.141.77, 2606:4700:7::149, 2a06:98c1:58::149 |
| 178.20.148.89 | AS29684 | AS13335 | 95% | cert 5176650b… served by 178.20.148.89 (AS29684) carries SAN hef.gov.sa which currently resolves through Cloudflare (AS13335) at 104.21.63.45, 172.67.143.177, 2606:4700:3031::6815:3f2d, 2606:4700:3031::ac43:8fb1 |
| 185.131.79.1 | AS49833 | AS13335 | 95% | cert d6f1b51b… served by 185.131.79.1 (AS49833) carries SAN api-doc.ncm.gov.sa which currently resolves through Cloudflare (AS13335) at 188.114.97.3, 188.114.96.3, 2a06:98c1:3120::3, 2a06:98c1:3121::3 |
| 86.60.117.181 | AS25233 | AS13335 | 95% | cert 96f5e8b9… served by 86.60.117.181 (AS25233) carries SAN www.hrsd.gov.sa which currently resolves through Cloudflare (AS13335) at 104.21.22.50, 172.67.202.241, 2606:4700:3033::ac43:caf1, 2606:4700:3034::6815:1632 |
| 185.118.121.30 | AS3311 | AS8075 | 95% | cert a1aaa20d… served by 185.118.121.30 (AS3311) carries SAN tvtc.gov.sa which currently resolves through Microsoft (AS8075) at 132.220.26.128 |
| 37.224.16.49 | AS25019 | AS45102 | 95% | cert a4a0bcd5… served by 37.224.16.49 (AS25019) carries SAN mawani.gov.sa which currently resolves through Alibaba (AS45102) at 8.213.84.173, 2a00:1ef8:2:4::10 |
| 144.24.216.222 | AS31898 | AS13335 | 95% | cert 62098f41… served by 144.24.216.222 (AS31898) carries SAN oracletest.samf.gov.sa which currently resolves through Cloudflare (AS13335) at 188.114.97.3, 188.114.96.3, 2606:4700:3031::ac43:9f5c, 2606:4700:3037::6815:52a3 |
| 130.214.209.230 | AS35039 | AS45102 | 95% | cert 74b9f4d4… served by 130.214.209.230 (AS35039) carries SAN mos.gov.sa which currently resolves through Alibaba (AS45102) at 8.213.22.223 |
| 37.224.16.50 | AS25019 | AS45102 | 95% | cert 8c280231… served by 37.224.16.50 (AS25019) carries SAN mawani.gov.sa which currently resolves through Alibaba (AS45102) at 8.213.84.173, 2a00:1ef8:2:4::10 |
| 35.252.40.33 | AS396982 | AS8075 | 95% | cert 1f6d49b1… served by 35.252.40.33 (AS396982) carries SAN autodiscover.awqaf.gov.sa which currently resolves through Microsoft (AS8075) at 40.99.205.8, 2603:1026:c11:9::8, 2603:1026:900:29::63, 2603:1026:900:29::7 |
| 34.49.21.47 | AS396982 | AS13335 | 95% | cert c3a91f3d… served by 34.49.21.47 (AS396982) carries SAN api-dev.nelc.gov.sa which currently resolves through Cloudflare (AS13335) at 172.65.90.47, 172.65.90.46, 2606:4700:78::90:0:300, 2606:4700:78::90:0:301 |
| 37.224.16.51 | AS25019 | AS45102 | 95% | cert a4a0bcd5… served by 37.224.16.51 (AS25019) carries SAN mawani.gov.sa which currently resolves through Alibaba (AS45102) at 8.213.84.173, 2a00:1ef8:2:4::10 |
| 5.149.133.219 | AS35753 | AS13335 | 95% | cert c929d91b… served by 5.149.133.219 (AS35753) carries SAN dgda.gov.sa which currently resolves through Cloudflare (AS13335) at 104.18.40.162, 172.64.147.94, 2a06:98c1:3107::6812:28a2, 2606:4700:4401::ac40:935e |
Threat Intelligence
Domain threat-intel pending
Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.
History
Domain timeline pending
Passive-DNS history accumulates as our forward-DNS crawler observes A/AAAA/MX/NS/TXT records over time.