weforum.org
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of weforum.org
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
DNS Records
WHOIS / Registration
Registration data planned
Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.
Subdomains
Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.
Tech Stack
Tech detection pending
Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.
TLS Certificates
IPs Citing This Domain
No citing IPs found yet
As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.
Origin / IP-Leak
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
| Origin IP | Origin ASN | CDN ASN | Confidence | Reasoning |
|---|---|---|---|---|
| 49.44.99.62 | AS55836 | AS16509 | 95% | cert b755f36c… served by 49.44.99.62 (AS55836) carries SAN weforum.org which currently resolves through Amazon (AS16509) at 52.210.211.221, 34.251.126.39, 52.212.173.134 |
| 23.46.101.244 | AS17639 | AS16509 | 95% | cert 8e26bd98… served by 23.46.101.244 (AS17639) carries SAN image.e.weforum.org which currently resolves through Amazon (AS16509) at 2600:9000:2090:7000:3:cf9f:b2c0:93a1, 2600:9000:2090:7e00:3:cf9f:b2c0:93a1, 18.238.243.91, 2600:9000:2090:1000:3:cf9f:b2c0:93a1 |
| 144.34.237.140 | AS25820 | AS16509 | 95% | cert b755f36c… served by 144.34.237.140 (AS25820) carries SAN weforum.org which currently resolves through Amazon (AS16509) at 52.210.211.221, 52.212.173.134 |
CT-Log Evidence
Certificates from public Certificate Transparency logs whose subject or SAN names this domain — including historic certs we never observed live.
Threat Intelligence
Domain threat-intel pending
Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.
History
Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.
| Type | Value | First seen | Last seen |
|---|---|---|---|
| A | 63.34.175.160 | 2026-05-26 21:52:25.161 | 2026-05-27 02:40:25.073 |
| TXT | docusign=af7aeb30-e49c-4b7a-98d8-6b127f9bb275 | 2026-05-26 21:52:25.161 | 2026-07-27 07:28:02.530 |
| TXT | protonmail-verification=9a5678880a3d8a138adef690b172b83011aa72c9 | 2026-05-26 21:52:25.161 | 2026-07-27 07:28:02.530 |
| TXT | canva-site-verification=0Y_UJA27aPqQYo5C8ZlN5A | 2026-05-26 21:52:25.161 | 2026-07-27 07:28:02.530 |
| NS | ns-108.awsdns-13.com | 2026-05-26 21:52:25.161 | 2026-07-27 07:28:02.530 |
| TXT | hcp-domain-verification=8df8c1bab58a33a3c4a18d55d756be6feecb16f1bc9ff97c4c5b56c24cf39b2f | 2026-05-26 21:52:25.161 | 2026-07-27 07:28:02.530 |
| TXT | Dynatrace-site-verification=b6992eee-7248-43a9-97cb-ac9543820831__nf3vvnhs7i6bjl7jpgv9tusloj | 2026-05-26 21:52:25.161 | 2026-07-27 07:28:02.530 |
| TXT | trend-micro-v1-domain-verification.207d3dea181fe697f7b7baf200bc0723=215960e6-4609-4d83-afa4-7cb2bbe6eed3 | 2026-05-26 21:52:25.161 | 2026-07-27 07:28:02.530 |
| TXT | logmein-verification-code=4e3aa1a0-ba3c-408d-8415-2773f0cc7317 | 2026-05-26 21:52:25.161 | 2026-07-27 07:28:02.530 |
| TXT | 21561668a4c58d5dbb50486afe176195ca06a4bd | 2026-05-26 21:52:25.161 | 2026-07-27 07:28:02.530 |
| TXT | 0v44yrz5mz7w4362rxvcphy6vcsz567b | 2026-05-26 21:52:25.161 | 2026-07-27 07:28:02.530 |
| TXT | openai-domain-verification=dv-2ERIqAfMx5ObZD0xf5vGDQQq | 2026-05-26 21:52:25.161 | 2026-07-27 07:28:02.530 |
| TXT | pp-verification=6d09c4db-136f-45b0-a876-ee9894ecb227 | 2026-05-26 21:52:25.161 | 2026-07-27 07:28:02.530 |
| TXT | anthropic-domain-verification-qjr70f=mgOKfC1hzNUdmIcpJ70llX4Pa | 2026-05-26 21:52:25.161 | 2026-07-27 07:28:02.530 |
| TXT | atlassian-domain-verification=KdxYDGkL7ybHsaieC01/GdZSKLeYss2GazxPERg1ibVNnJHIJzyiwmu2H42NRyNr | 2026-05-26 21:52:25.161 | 2026-07-27 07:28:02.530 |
| TXT | pardot586733=df6859a87f543a1aef8e961fa54c4edf37e797ba9695931a6a5a0c41979a8a65 | 2026-05-26 21:52:25.161 | 2026-07-27 07:28:02.530 |
| TXT | google-site-verification=9UJ64WqmFileahOWizp4xsqS6ocCgUwkPfk7R5gKgFE | 2026-05-26 21:52:25.161 | 2026-07-27 07:28:02.530 |
| TXT | onetrust-domain-verification=4706964004d842ff8e3e998cfb9e95ee | 2026-05-26 21:52:25.161 | 2026-07-27 07:28:02.530 |
| TXT | sending_domain586733=f770af487ef2e5a0f69363082f6c4cc3e0def8a8c660f71eea5acd311e7d31a2 | 2026-05-26 21:52:25.161 | 2026-07-27 07:28:02.530 |
| NS | ns-757.awsdns-30.net | 2026-05-26 21:52:25.161 | 2026-07-27 07:28:02.530 |
| TXT | GIC0y5UuCphNvp5+zdLo3uM9hZCeTKMji/uUwKekuROTMgqPELHboLHV/cXBvIJXsO64CXJZim+NeI7inlxwyg== | 2026-05-26 21:52:25.161 | 2026-07-27 07:28:02.530 |
| NS | ns-1550.awsdns-01.co.uk | 2026-05-26 21:52:25.161 | 2026-07-27 07:28:02.530 |
| TXT | sending_domain1023261=d2791adae2bac175e941031c1faea3ebf7d8d0f9bec255c60a22235e31d4564d | 2026-05-26 21:52:25.161 | 2026-07-27 07:28:02.530 |
| TXT | wrike-verification=MTA5NjQyNzpiNmM1MDkzNjVjYmFlMjI0ZjQwZGVjMjdiZGIzZDYzNTNiZjU0YzhiMDM5NTBiNWNiNmFlYjEyMTM5Nzg2N2M2 | 2026-05-26 21:52:25.161 | 2026-07-27 07:28:02.530 |
| TXT | apple-domain-verification=OQWui0o3waVdBNot | 2026-05-26 21:52:25.161 | 2026-07-27 07:28:02.530 |
| NS | ns-1240.awsdns-27.org | 2026-05-26 21:52:25.161 | 2026-07-27 07:28:02.530 |
| TXT | pardot1023261=931c4279794fd4a47b5a396730efb1ef52c243049f80e03a88d020a4a8a674be | 2026-05-26 21:52:25.161 | 2026-07-27 07:28:02.530 |
| MX | 10 mxb-0029f101.gslb.pphosted.com | 2026-05-26 21:52:25.161 | 2026-07-27 07:28:02.530 |
| TXT | adobe-idp-site-verification=d267447c-3316-4c5a-bd63-b478cf4d2581 | 2026-05-26 21:52:25.161 | 2026-07-27 07:28:02.530 |
| TXT | v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com +include:%{l}._spf.%{d} -all | 2026-05-26 21:52:25.161 | 2026-07-27 07:28:02.530 |
| MX | 10 mxa-0029f101.gslb.pphosted.com | 2026-05-26 21:52:25.161 | 2026-07-27 07:28:02.530 |
| TXT | _y0a8jocbfw3junt02mldp6b2xl3t8ek | 2026-05-26 21:52:25.161 | 2026-07-27 07:28:02.530 |
| TXT | Dynatrace-site-verification=6fb4cdfa-6d51-4c6b-ba72-32ca31fbd8e9__65807dga6ljd8ga1lhllenjl9n | 2026-05-26 21:52:25.161 | 2026-07-27 07:28:02.530 |
| TXT | MS=ms20688131 | 2026-05-26 21:52:25.161 | 2026-07-27 07:28:02.530 |
| TXT | 058b7f7c-f1a8-4151-bf33-7c1253b8250c | 2026-05-26 21:52:25.161 | 2026-07-27 07:28:02.530 |
| A | 52.19.141.189 | 2026-05-26 21:52:25.161 | 2026-05-27 02:40:25.073 |
| TXT | asv=30cf3d98cd231922c304e2ea205690bf | 2026-05-26 21:52:25.161 | 2026-07-27 07:28:02.530 |
| TXT | mixpanel-domain-verify=af7b2ab9-ba7e-4dfb-ae38-8553aaf28806 | 2026-05-26 21:52:25.161 | 2026-07-27 07:28:02.530 |
| TXT | docusign=1fdc429f-b194-4a68-8321-3ed07f170b16 | 2026-05-26 21:52:25.161 | 2026-07-27 07:28:02.530 |
| TXT | jamf-site-verification=yXqbk6NIBKAgo92DtNK8Qw | 2026-07-15 20:04:13.980 | 2026-07-27 07:28:02.530 |
| A | 52.212.173.134 | 2026-07-15 20:04:13.980 | 2026-07-19 01:04:24.930 |
| A | 52.210.211.221 | 2026-07-15 20:04:13.980 | 2026-07-23 16:15:21.667 |
| A | 34.251.126.39 | 2026-07-19 18:35:22.146 | 2026-07-27 07:28:02.530 |
| A | 52.16.184.217 | 2026-07-23 23:57:22.039 | 2026-07-27 07:28:02.530 |