Domain
whop.com
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of whop.com
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
Hosting IPs
37
A/AAAA targets
Subdomains
92
CT + scan + body
Record Types
6
seen in DNS
Observed Certs
49
in our scans
DNS Records
A
104.18.2.215, 104.18.3.215, 216.230.86.65
AAAA
2606:4700::6812:2d7, 2606:4700::6812:3d7
MX
1 aspmx.l.google.com, 10 alt3.aspmx.l.google.com, 10 alt4.aspmx.l.google.com, 5 alt1.aspmx.l.google.com, 5 alt2.aspmx.l.google.com
NS
miguel.ns.cloudflare.com, sureena.ns.cloudflare.com
TXT
CKO=cli_sc22ziksox2utpbihetjhm5r6e, _af5peo5jgt9gmxvjls0bzqfqb6yvul2, anthropic-domain-verification-yd4x4h=W6Yu3cKiHxrUqWqnde6LBWg36, apple-domain-verification=G1cooE5KAb1A6bv0, cloudflare_dashboard_sso=9c188a20b0c42e6fc79b570d02508b7f, cursor-domain-verification-3jkwas=5CfhQs0St00ohJYpcnORXhQPt, facebook-domain-verification=qxpzbhdam8zadvpraqhdq1nnhf5r5d, google-site-verification=-oYXSTMAKqMUu_XXNKqg0_A0smq0OriK60ox5UP7sW0
CNAME
—
CAA
0 issue "amazon.com", 0 issue "comodoca.com", 0 issue "digicert.com; cansignhttpexchanges=yes", 0 issue "letsencrypt.org", 0 issue "pki.goog; cansignhttpexchanges=yes", 0 issue "ssl.com", 0 issuewild "amazon.com", 0 issuewild "comodoca.com"
WHOIS / Registration
Registration data planned
Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.
Subdomains
Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.
| Subdomain | Resolves to | Last seen |
|---|---|---|
| whop.com | 2026-07-27 05:00:22.431 | |
| access.api.whop.com | 2026-06-04 00:51:55.829 | |
| api.whop.com | 2026-06-04 01:25:28.971 | |
| data.whop.com | 2026-06-04 03:42:34.067 | |
| email.emails.whop.com | 2026-06-17 11:42:04.291 | |
| img-v2-prod.whop.com | 2026-05-26 03:46:08.458 | |
| img-v2-rough.whop.com | 2026-06-14 23:07:05.130 | |
| img-v2-staging.whop.com | 2026-05-26 17:42:34.522 | |
| notion.whop.com | 2026-06-05 23:22:40.621 | |
| whop-admin-staging-v2.whop.com | 2026-06-22 20:52:41.475 | |
| whop-api-prod-v2.whop.com | 2026-06-02 22:07:58.109 | |
| whop-rails-components-prod-v2.whop.com | 2026-06-21 18:16:45.055 | |
| whop-rails-prod-v2.whop.com | 2026-06-03 04:17:35.538 | |
| ws-rough.whop.com | 2026-05-26 21:47:48.579 | |
| ws-staging.whop.com | 2026-06-17 05:13:13.356 | |
| www.book.whop.com | 2026-07-27 22:46:00.384 | |
| www.whop.com | 2026-05-27 10:09:22.383 | |
| partnerships.whop.com | 2026-07-18 07:35:06.509 | |
| 0-0-0.canary.elements.whop.com | 2026-07-21 00:17:53.604 | |
| 0-0-1.canary.elements.whop.com | 2026-07-19 04:09:04.184 | |
| 0-0-3-beta-2.elements.whop.com | 2026-07-19 16:39:47.908 | |
| 0-0-4-beta-0.elements.whop.com | 2026-07-24 19:58:10.908 | |
| 0-0-5-beta-9.elements.whop.com | 2026-06-18 22:32:39.036 | |
| chat.app.whop.com | 2026-06-16 04:59:52.413 | |
| discord.app.whop.com | 2026-06-22 05:32:32.396 | |
| docs.whop.com | 2026-07-25 21:15:34.189 | |
| files.app.whop.com | 2026-06-18 14:39:01.325 | |
| marketing.core.whop.com | 2026-07-22 05:46:32.513 | |
| mastermind.app.whop.com | 2026-06-05 22:04:03.681 | |
| prod-ecs-api.whop.com | 2026-06-22 20:57:38.426 | |
| prod-ecs.whop.com | 2026-06-14 22:52:09.672 | |
| sandbox.whop.com | 2026-07-27 23:37:58.007 | |
| www.notion.whop.com | 2026-06-18 15:30:18.151 | |
| 0-0-0.elements.whop.com | 1970-01-01 00:00:00.000 | |
| 0-0-0.pay.whop.com | 1970-01-01 00:00:00.000 | |
| 0-0-10.elements.whop.com | 1970-01-01 00:00:00.000 | |
| 0-0-3.elements.whop.com | 1970-01-01 00:00:00.000 | |
| 0-0-4.elements.whop.com | 1970-01-01 00:00:00.000 | |
| 0-0-5-beta-0.elements.whop.com | 1970-01-01 00:00:00.000 | |
| 0-0-5-beta-5.elements.whop.com | 1970-01-01 00:00:00.000 | |
| agent.api.whop.com | 1970-01-01 00:00:00.000 | |
| api2.whop.com | 1970-01-01 00:00:00.000 | |
| auth-staging.whop.com | 1970-01-01 00:00:00.000 | |
| brand.whop.com | 1970-01-01 00:00:00.000 | |
| core.core.whop.com | 1970-01-01 00:00:00.000 | |
| courses.app.whop.com | 1970-01-01 00:00:00.000 | |
| dev-staging.whop.com | 1970-01-01 00:00:00.000 | |
| entry.app.whop.com | 1970-01-01 00:00:00.000 | |
| feed-v2.whop.com | 1970-01-01 00:00:00.000 | |
| feed.api.whop.com | 1970-01-01 00:00:00.000 | |
| highered.whop.com | 1970-01-01 00:00:00.000 | |
| hub.core.whop.com | 1970-01-01 00:00:00.000 | |
| intf-7njkgt4imd639.experiences.whop.com | 1970-01-01 00:00:00.000 | |
| js.whop.com | 1970-01-01 00:00:00.000 | |
| landing-page.whop.com | 1970-01-01 00:00:00.000 | |
| network.whop.com | 1970-01-01 00:00:00.000 | |
| onboarding.whop.com | 1970-01-01 00:00:00.000 | |
| prod-v2.whop.com | 1970-01-01 00:00:00.000 | |
| r2.whop.com | 1970-01-01 00:00:00.000 | |
| rough-v2.whop.com | 1970-01-01 00:00:00.000 | |
| staging-ecs.whop.com | 1970-01-01 00:00:00.000 | |
| staging-v2.whop.com | 1970-01-01 00:00:00.000 | |
| staging.whop.com | 1970-01-01 00:00:00.000 | |
| webapp.app.whop.com | 1970-01-01 00:00:00.000 | |
| whop-api-canary-staging-v2.whop.com | 1970-01-01 00:00:00.000 | |
| whop-api-staging-v2.whop.com | 1970-01-01 00:00:00.000 | |
| whop-rails-canary-staging-v2.whop.com | 1970-01-01 00:00:00.000 | |
| whop-rails-components-rough-v2.whop.com | 1970-01-01 00:00:00.000 | |
| whop-rails-staging-v2.whop.com | 1970-01-01 00:00:00.000 | |
| wiki.whop.com | 1970-01-01 00:00:00.000 |
Tech Stack
Tech detection pending
Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.
TLS Certificates
Subject: *.iwhop.com
Issuer: GeoTrust G2 TLS CN RSA4096 SHA256 2022 CA1
SANs: *.iwhop.com, iwhop.com
Subject: *.iwhop.com
Issuer: GeoTrust G2 TLS CN RSA4096 SHA256 2022 CA1
SANs: *.iwhop.com, iwhop.com
Subject: ws-staging.whop.com
Issuer: Amazon RSA 2048 M04
SANs: ws-staging.whop.com
Subject: *.slowhop.com
Issuer: Amazon RSA 2048 M04
SANs: *.slowhop.com, slowhop.com
Subject: img-v2-rough.whop.com
Issuer: Amazon RSA 2048 M03
SANs: img-v2-rough.whop.com
Subject: prod-ecs.whop.com
Issuer: Amazon RSA 2048 M04
SANs: prod-ecs.whop.com
Subject: *.iwhop.com
Issuer: GeoTrust G2 TLS CN RSA4096 SHA256 2022 CA1
SANs: *.iwhop.com, iwhop.com
Subject: *.iwhop.com
Issuer: GeoTrust G2 TLS CN RSA4096 SHA256 2022 CA1
SANs: *.iwhop.com, iwhop.com
Subject: rough-v2.whop.com
Issuer: Amazon RSA 2048 M04
SANs: rough-v2.whop.com
Subject: ws-staging.whop.com
Issuer: Amazon RSA 2048 M04
SANs: ws-staging.whop.com
Subject: ws-rough.whop.com
Issuer: Amazon RSA 2048 M02
SANs: ws-rough.whop.com
Subject: ws-staging.whop.com
Issuer: Amazon RSA 2048 M04
SANs: ws-staging.whop.com
Subject: img-v2-staging.whop.com
Issuer: Amazon RSA 2048 M01
SANs: img-v2-staging.whop.com
Subject: img-v2-staging.whop.com
Issuer: Amazon RSA 2048 M01
SANs: img-v2-staging.whop.com
Subject: img-v2-prod.whop.com
Issuer: Amazon RSA 2048 M01
SANs: img-v2-prod.whop.com
IPs Citing This Domain
Hosts whose HTML body references this domain. Strong signal for origin/mirror/embed discovery.
66.179.248.55:80
href · ×8
188.166.147.220:443
href · ×6
66.179.248.55:443
href · ×4
45.61.54.15:80
href · ×4
141.94.78.68:443
href · ×4
89.124.77.162:443
href · ×3
143.198.111.232:443
href · ×3
104.196.124.12:443
href · ×2
39.102.32.84:443
href · ×2
68.183.117.188:443
href · ×2
167.71.135.243:443
href · ×2
168.144.47.238:80
href · ×2
178.104.54.61:443
href · ×2
143.198.115.234:443
href · ×2
178.156.134.187:443
href · ×2
157.230.56.211:80
href · ×2
68.183.117.188:80
href · ×2
78.141.209.128:80
href · ×2
195.210.29.160:8080
href · ×1
44.200.211.48:443
href · ×1
45.76.227.42:443
href · ×1
35.243.211.131:80
href · ×1
152.53.198.54:80
href · ×1
46.101.183.133:80
href · ×1
194.113.211.140:443
href · ×1
Origin / IP-Leak
USP
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
No origin-IP leaks detected (yet)
Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.
Threat Intelligence
Domain threat-intel pending
Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.
History
Domain timeline pending
Passive-DNS history accumulates as our forward-DNS crawler observes A/AAAA/MX/NS/TXT records over time.