Domain
ws.org
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of ws.org
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
Hosting IPs
1
A/AAAA targets
Subdomains
31
CT + scan + body
Record Types
2
seen in DNS
Observed Certs
23
in our scans
DNS Records
A
208.91.197.39
AAAA
—
MX
—
NS
dns010.d.register.com, dns046.a.register.com, dns053.c.register.com, dns158.b.register.com
TXT
—
CNAME
—
CAA
—
WHOIS / Registration
Registration data planned
Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.
Subdomains
Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.
| Subdomain | Resolves to | Last seen |
|---|---|---|
| ac.th.ws.org | 2026-07-21 11:51:30.555 | |
| bd-04.ws.org | 1970-01-01 00:00:00.000 | |
| codex.ws.org | 1970-01-01 00:00:00.000 | |
| ftp.iij.ad.jp.ws.org | 1970-01-01 00:00:00.000 | |
| gateway.ws.org | 2026-06-19 13:10:32.177 | |
| gricne.ws.org | 2026-06-19 13:26:28.376 | |
| home.ws.org | 1970-01-01 00:00:00.000 | |
| ipvcenter.ws.org | 2026-06-20 18:22:08.200 | |
| jigsaw.ws.org | 1970-01-01 00:00:00.000 | |
| jp.ws.org | 1970-01-01 00:00:00.000 | |
| ku.ac.th.ws.org | 1970-01-01 00:00:00.000 | |
| login.ws.org | 2026-07-28 16:20:40.086 | |
| mobile.ws.org | 1970-01-01 00:00:00.000 | |
| nao-33.ws.org | 2026-06-22 08:25:01.243 | |
| new-videofeeds.ws.org | 1970-01-01 00:00:00.000 | |
| newvcenter.ws.org | 2026-06-04 11:11:21.716 | |
| office.ws.org | 1970-01-01 00:00:00.000 | |
| ptna-20.ws.org | 2026-06-19 01:06:23.675 | |
| scouts.ws.org | 1970-01-01 00:00:00.000 | |
| secureaccess.ws.org | 2026-06-19 16:40:35.466 | |
| service.soap.ws.org | 1970-01-01 00:00:00.000 | |
| td-10.ws.org | 2026-06-20 03:21:46.912 | |
| uncluker.ws.org | 1970-01-01 00:00:00.000 | |
| webhook.ws.org | 1970-01-01 00:00:00.000 | |
| webvpn.ws.org | 1970-01-01 00:00:00.000 | |
| ws.org | 2026-06-20 15:58:51.896 | |
| www-ceus.ws.org | 2026-07-19 13:51:00.628 | |
| www.dada.ws.org | 1970-01-01 00:00:00.000 | |
| www.ws.org | 2026-06-15 19:21:27.907 |
Tech Stack
Tech detection pending
Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.
TLS Certificates
Subject: cpcalendars.curadebtreviews.org
Issuer: YR1
SANs: cpanel.curadebtreviews.org, cpcalendars.curadebtreviews.org, cpcontacts.curadebtreviews.org, curadebtreviews.org, mail.curadebtreviews.org, webdisk.curadebtreviews.org, webmail.curadebtreviews.org, www.curadebtreviews.org
Subject: cignews.org
Issuer: Encryption Everywhere DV TLS CA - G2
SANs: cignews.org, www.cignews.org
Subject: dev1.centrecountypaws.org
Issuer: YR2
SANs: dev1.centrecountypaws.org
Subject: crowdnews.org
Issuer: YR1
SANs: crowdnews.org, www.crowdnews.org
Subject: *.foundationaws.org
Issuer: Amazon RSA 2048 M04
SANs: *.foundationaws.org
Subject: cpcontacts.msviews.org
Issuer: YR2
SANs: autodiscover.msviews.org, cpanel.msviews.org, cpcalendars.msviews.org, cpcontacts.msviews.org, mail.msviews.org, msviews.org, webdisk.msviews.org, webmail.msviews.org, www.msviews.org
Subject: dmw.hawaiidws.org
Issuer: Sectigo Public Server Authentication CA OV E36
SANs: dmw.hawaiidws.org, www.dmw.hawaiidws.org
Subject: dillonnews.org
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: dillonnews.org, www.dillonnews.org
Subject: graphs.routeviews.org
Issuer: YE2
SANs: graphs.routeviews.org
Subject: api.nexnews.org
Issuer: api.nexnews.org
SANs: api.nexnews.org
Subject: remote.gaws.org.au
Issuer: Sectigo RSA Domain Validation Secure Server CA
SANs: remote.gaws.org.au, www.remote.gaws.org.au
Subject: mluws.org
Issuer: mluws.org
SANs: mluws.org
Subject: unbnews.org
Issuer: YR1
SANs: unbnews.org, www.unbnews.org
Subject: primallabsreviews.org
Issuer: R13
SANs: primallabsreviews.org, www.primallabsreviews.org
Subject: mobile.hawaiidws.org
Issuer: GoDaddy TLS Intermediate CA DV - R1v1
SANs: mobile.hawaiidws.org, www.mobile.hawaiidws.org
Subject: guilianofellows.org
Issuer: YR2
SANs: guilianofellows.org, www.guilianofellows.org
Subject: *.newconews.org
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.newconews.org, newconews.org
Subject: oananews.org
Issuer: YR1
SANs: oananews.org
Subject: vpn3.saws.org
Issuer: Go Daddy Secure Certificate Authority - G2
SANs: vpn3.saws.org, www.vpn3.saws.org
Subject: cloud.mpi-sws.org
Issuer: GEANT TLS RSA 1
SANs: calendar.mpi-sws.org, cloud.mpi-sws.org, owncloud.mpi-sws.org
Subject: www.apews.org
Issuer: www.apews.org
SANs: www.apews.org
Subject: lists.readersupportednews.org
Issuer: lists.readersupportednews.org
SANs: lists.readersupportednews.org
Subject: stampede.routeviews.org
Issuer: YE2
SANs: stampede.routeviews.org
Subject: barnesvilleareanews.org
Issuer: YR1
SANs: barnesvilleareanews.org, barnesvillenews.org, www.barnesvilleareanews.org, www.barnesvillenews.org
Subject: builder.wsws.org
Issuer: R10
SANs: builder.wsws.org, proxy.builder.wsws.org
Subject: rootbsd.tetlows.org
Issuer: YE1
SANs: rootbsd.tetlows.org
Subject: monitoringsoftwarereviews.org
Issuer: YE2
SANs: monitoringsoftwarereviews.org, www.monitoringsoftwarereviews.org
Subject: server.ontrendnews.org
Issuer: YR1
SANs: server.ontrendnews.org
Subject: svn.mpi-sws.org
Issuer: GEANT TLS RSA 1
SANs: svn.dps.mpi-sws.org, svn.ds.mpi-sws.org, svn.fcs.mpi-sws.org, svn.fp.mpi-sws.org, svn.gummadi.mpi-sws.org, svn.mpi-sws.org, svn.nl.mpi-sws.org, svn.ns.mpi-sws.org, svn.rse.mpi-sws.org, svn.sws.mpi-sws.org
Subject: nazarnews.org
Issuer: YR2
SANs: nazarnews.org, www.nazarnews.org
IPs Citing This Domain
No citing IPs found yet
As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.
Origin / IP-Leak
USP
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
No origin-IP leaks detected (yet)
Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.
Threat Intelligence
Domain threat-intel pending
Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.
History
Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.
| Type | Value | First seen | Last seen |
|---|---|---|---|
| NS | dns158.b.register.com | 2026-06-20 15:58:51.896 | 2026-06-20 15:58:51.896 |
| A | 208.91.197.39 | 2026-06-20 15:58:51.896 | 2026-06-20 15:58:51.896 |
| NS | dns046.a.register.com | 2026-06-20 15:58:51.896 | 2026-06-20 15:58:51.896 |
| NS | dns010.d.register.com | 2026-06-20 15:58:51.896 | 2026-06-20 15:58:51.896 |
| NS | dns053.c.register.com | 2026-06-20 15:58:51.896 | 2026-06-20 15:58:51.896 |