Domain
statcounter.com
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of statcounter.com
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
Hosting IPs
4
A/AAAA targets
Subdomains
164
CT + scan + body
Record Types
4
seen in DNS
Observed Certs
22
in our scans
DNS Records
A
104.20.23.96, 172.66.169.241
AAAA
—
MX
10 mx1.emailsrvr.com, 20 mx2.emailsrvr.com
NS
may.ns.cloudflare.com, tim.ns.cloudflare.com
TXT
ahrefs-site-verification_14d4ae9ccc16cc9e361fa891d32120f3ad8eab86c6818614de901b8a4ca435ae, google-site-verification=MLRWvWsORoFSQBqHgNOI7370e5MiCDelxcbcwEPa4dc, google-site-verification=rKm8utYfD4Q_648eELMGLqI31fUdoxXpJggEd6Q6cfs, sh73h1rrbl8lrjm645rectkng3, v=spf1 a mx ip4:45.33.40.107 ip4:67.215.253.128/25 ip4:23.29.125.232/29 ip4:67.19.248.186 ip4:67.19.76.74 ip4:91.208.16.0/24 ip4:91.208.19.0/24 include:emailsrvr.com ~all
CNAME
—
CAA
—
WHOIS / Registration
Registration data planned
Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.
Subdomains
Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.
| Subdomain | Resolves to | Last seen |
|---|---|---|
| api.statcounter.com | 2026-06-14 22:36:55.780 | |
| blog.statcounter.com | 2026-06-15 12:12:17.615 | |
| c.statcounter.com | 2026-07-28 19:11:54.346 | |
| c1.statcounter.com | 2026-07-25 19:04:40.391 | |
| c10.statcounter.com | 2026-07-28 07:55:33.540 | |
| c11.statcounter.com | 2026-06-18 16:05:33.665 | |
| c12.statcounter.com | 2026-07-24 02:35:42.567 | |
| c13.statcounter.com | 2026-06-14 22:08:58.337 | |
| c14.statcounter.com | 2026-07-27 00:54:54.678 | |
| c15.statcounter.com | 2026-05-27 12:41:52.029 | |
| c16.statcounter.com | 2026-07-27 23:12:42.147 | |
| c17.statcounter.com | 2026-07-25 06:34:36.452 | |
| c18.statcounter.com | 2026-07-26 14:02:50.272 | |
| c19.statcounter.com | 2026-05-27 07:12:48.604 | |
| c2.statcounter.com | 2026-07-17 05:58:17.649 | |
| c20.statcounter.com | 2026-06-17 19:35:12.297 | |
| c21.statcounter.com | 2026-07-26 18:48:18.133 | |
| c22.statcounter.com | 2026-05-27 08:36:38.549 | |
| c23.statcounter.com | 2026-07-22 20:51:41.591 | |
| c24.statcounter.com | 2026-07-19 05:49:02.105 | |
| c25.statcounter.com | 2026-06-21 04:43:06.971 | |
| c26.statcounter.com | 2026-07-26 17:56:24.590 | |
| c27.statcounter.com | 2026-06-23 16:57:25.829 | |
| c28.statcounter.com | 2026-06-16 08:45:03.061 | |
| c29.statcounter.com | 2026-05-26 23:09:50.095 | |
| c3.statcounter.com | 2026-07-28 00:00:54.884 | |
| c31.statcounter.com | 2026-06-21 22:47:14.795 | |
| c32.statcounter.com | 2026-07-18 19:52:20.432 | |
| c33.statcounter.com | 2026-07-24 12:55:03.870 | |
| c34.statcounter.com | 2026-07-27 01:56:40.851 | |
| c36.statcounter.com | 2026-05-26 22:14:46.475 | |
| c37.statcounter.com | 2026-07-27 14:49:39.372 | |
| c38.statcounter.com | 2026-07-23 09:10:34.818 | |
| c39.statcounter.com | 2026-06-14 22:23:29.853 | |
| c4.statcounter.com | 2026-07-23 13:12:17.432 | |
| c40.statcounter.com | 2026-06-18 14:03:50.234 | |
| c41.statcounter.com | 2026-06-19 01:12:28.458 | |
| c42.statcounter.com | 2026-07-24 08:29:50.548 | |
| c45.statcounter.com | 2026-07-24 05:14:15.293 | |
| c5.statcounter.com | 2026-05-26 03:59:06.816 | |
| c6.statcounter.com | 2026-07-23 21:02:03.241 | |
| c7.statcounter.com | 2026-07-28 12:04:07.574 | |
| c8.statcounter.com | 2026-07-26 11:37:21.574 | |
| gs.statcounter.com | 2026-07-27 04:33:55.661 | |
| maps.statcounter.com | 2026-07-19 18:12:20.455 | |
| my.statcounter.com | 2026-07-26 14:36:44.369 | |
| secure.statcounter.com | 2026-07-26 18:04:46.919 | |
| statcounter.com | 2026-07-28 20:23:38.809 | |
| www.statcounter.com | 2026-07-28 19:39:40.097 | |
| c0.statcounter.com | 1970-01-01 00:00:00.000 | |
| ceph.us-dallas.statcounter.com | 2026-07-17 22:38:42.382 | |
| cloud.us-dallas.statcounter.com | 1970-01-01 00:00:00.000 | |
| grafana.us-dallas.statcounter.com | 1970-01-01 00:00:00.000 | |
| horizon.us-dallas.statcounter.com | 1970-01-01 00:00:00.000 | |
| jenkins.dcd.statcounter.com | 1970-01-01 00:00:00.000 | |
| monitor.us-dallas.statcounter.com | 1970-01-01 00:00:00.000 | |
| us-dallas.statcounter.com | 2026-07-25 11:11:23.829 | |
| us-tampa.statcounter.com | 1970-01-01 00:00:00.000 |
Tech Stack
Tech detection pending
Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.
TLS Certificates
Subject: statcounter.com
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.statcounter.com, *.us-dallas.statcounter.com, *.us-tampa.statcounter.com, statcounter.com
Subject: maps.statcounter.com
Issuer: YR1
SANs: maps.statcounter.com
Subject: statcounter.com
Issuer: Sectigo RSA Domain Validation Secure Server CA
SANs: *.statcounter.com, *.us-dallas.statcounter.com, *.us-tampa.statcounter.com, statcounter.com
Subject: statcounter.com
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.statcounter.com, *.us-dallas.statcounter.com, *.us-tampa.statcounter.com, statcounter.com
Subject: estatcounter.com
Issuer: ZeroSSL RSA DV SSL CA 2
SANs: estatcounter.com, www.estatcounter.com
Subject: statcounter.com
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.statcounter.com, *.us-dallas.statcounter.com, *.us-tampa.statcounter.com, statcounter.com
Subject: statcounter.com
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.statcounter.com, *.us-dallas.statcounter.com, *.us-tampa.statcounter.com, statcounter.com
Subject: statcounter.com
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.statcounter.com, *.us-dallas.statcounter.com, *.us-tampa.statcounter.com, statcounter.com
Subject: blog.statcounter.com
Issuer: R12
SANs: blog.statcounter.com
Subject: ceph.us-dallas.statcounter.com
Issuer: E7
SANs: ceph.us-dallas.statcounter.com
Subject: statcounter.com
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.statcounter.com, *.us-dallas.statcounter.com, *.us-tampa.statcounter.com, statcounter.com
Subject: statcounter.com
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.statcounter.com, *.us-dallas.statcounter.com, *.us-tampa.statcounter.com, statcounter.com
Subject: statcounter.com
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.statcounter.com, *.us-dallas.statcounter.com, *.us-tampa.statcounter.com, statcounter.com
Subject: statcounter.com
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.statcounter.com, *.us-dallas.statcounter.com, *.us-tampa.statcounter.com, statcounter.com
Subject: statcounter.com
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.statcounter.com, *.us-dallas.statcounter.com, *.us-tampa.statcounter.com, statcounter.com
Subject: statcounter.com
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.statcounter.com, *.us-dallas.statcounter.com, *.us-tampa.statcounter.com, statcounter.com
Subject: statcounter.com
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.statcounter.com, *.us-dallas.statcounter.com, *.us-tampa.statcounter.com, statcounter.com
IPs Citing This Domain
No citing IPs found yet
As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.
Origin / IP-Leak
USP
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
| Origin IP | Origin ASN | CDN ASN | Confidence | Reasoning |
|---|---|---|---|---|
| 91.208.19.139 | AS29802 | AS13335 | 95% | cert 8e6c99d2… served by 91.208.19.139 (AS29802) carries SAN statcounter.com which currently resolves through Cloudflare (AS13335) at 104.20.23.96, 172.66.169.241 |
| 91.208.19.185 | AS29802 | AS13335 | 95% | cert cbda56f4… served by 91.208.19.185 (AS29802) carries SAN statcounter.com which currently resolves through Cloudflare (AS13335) at 104.20.23.96, 172.66.169.241 |
| 91.208.19.180 | AS29802 | AS13335 | 95% | cert cbda56f4… served by 91.208.19.180 (AS29802) carries SAN statcounter.com which currently resolves through Cloudflare (AS13335) at 104.20.23.96, 172.66.169.241 |
| 91.208.16.188 | AS29802 | AS13335 | 95% | cert cbda56f4… served by 91.208.16.188 (AS29802) carries SAN statcounter.com which currently resolves through Cloudflare (AS13335) at 104.20.23.96, 172.66.169.241 |
| 91.208.19.188 | AS29802 | AS13335 | 95% | cert cbda56f4… served by 91.208.19.188 (AS29802) carries SAN statcounter.com which currently resolves through Cloudflare (AS13335) at 104.20.23.96, 172.66.169.241 |
| 91.208.19.136 | AS29802 | AS13335 | 95% | cert cbda56f4… served by 91.208.19.136 (AS29802) carries SAN statcounter.com which currently resolves through Cloudflare (AS13335) at 104.20.23.96, 172.66.169.241 |
| 91.208.16.186 | AS29802 | AS13335 | 95% | cert cbda56f4… served by 91.208.16.186 (AS29802) carries SAN statcounter.com which currently resolves through Cloudflare (AS13335) at 104.20.23.96, 172.66.169.241 |
| 91.208.19.128 | AS29802 | AS13335 | 95% | cert cbda56f4… served by 91.208.19.128 (AS29802) carries SAN statcounter.com which currently resolves through Cloudflare (AS13335) at 104.20.23.96, 172.66.169.241 |
| 91.208.19.183 | AS29802 | AS13335 | 95% | cert cbda56f4… served by 91.208.19.183 (AS29802) carries SAN statcounter.com which currently resolves through Cloudflare (AS13335) at 104.20.23.96, 172.66.169.241 |
| 91.208.16.109 | AS29802 | AS13335 | 95% | cert cbda56f4… served by 91.208.16.109 (AS29802) carries SAN statcounter.com which currently resolves through Cloudflare (AS13335) at 104.20.23.96, 172.66.169.241 |
| 91.208.16.108 | AS29802 | AS13335 | 95% | cert cbda56f4… served by 91.208.16.108 (AS29802) carries SAN statcounter.com which currently resolves through Cloudflare (AS13335) at 104.20.23.96, 172.66.169.241 |
Threat Intelligence
Domain threat-intel pending
Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.
History
Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.
| Type | Value | First seen | Last seen |
|---|---|---|---|
| A | 104.20.23.96 | 2026-05-25 22:00:50.546 | 2026-07-28 20:23:38.809 |
| A | 172.66.169.241 | 2026-05-25 22:00:50.546 | 2026-07-28 20:23:38.809 |
| MX | 20 mx2.emailsrvr.com | 2026-05-25 22:05:29.416 | 2026-07-28 20:23:38.809 |
| TXT | sh73h1rrbl8lrjm645rectkng3 | 2026-05-25 22:05:29.416 | 2026-07-28 20:23:38.809 |
| TXT | ahrefs-site-verification_14d4ae9ccc16cc9e361fa891d32120f3ad8eab86c6818614de901b8a4ca435ae | 2026-05-25 22:05:29.416 | 2026-07-28 20:23:38.809 |
| NS | tim.ns.cloudflare.com | 2026-05-25 22:05:29.416 | 2026-07-28 20:23:38.809 |
| TXT | google-site-verification=MLRWvWsORoFSQBqHgNOI7370e5MiCDelxcbcwEPa4dc | 2026-05-25 22:05:29.416 | 2026-07-28 20:23:38.809 |
| NS | may.ns.cloudflare.com | 2026-05-25 22:05:29.416 | 2026-07-28 20:23:38.809 |
| TXT | google-site-verification=rKm8utYfD4Q_648eELMGLqI31fUdoxXpJggEd6Q6cfs | 2026-05-25 22:05:29.416 | 2026-07-28 20:23:38.809 |
| TXT | v=spf1 a mx ip4:45.33.40.107 ip4:67.215.253.128/25 ip4:23.29.125.232/29 ip4:67.19.248.186 ip4:67.19.76.74 ip4:91.208.16.0/24 ip4:91.208.19.0/24 include:emailsrvr.com ~all | 2026-05-25 22:05:29.416 | 2026-07-28 20:23:38.809 |
| MX | 10 mx1.emailsrvr.com | 2026-05-25 22:05:29.416 | 2026-07-28 20:23:38.809 |