Domain
uber.com
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of uber.com
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
Hosting IPs
—
A/AAAA targets
Subdomains
—
CT + scan + body
Record Types
—
seen in DNS
Observed Certs
—
in our scans
DNS Records
A
104.36.194.4, 104.36.194.80, 69.48.216.4, 69.48.216.66, 69.48.216.73
AAAA
—
MX
10 alt3.aspmx.l.google.com, 10 alt4.aspmx.l.google.com, 2 aspmx.l.google.com, 5 alt1.aspmx.l.google.com, 5 alt2.aspmx.l.google.com
NS
edns126.ultradns.biz, edns126.ultradns.com, edns126.ultradns.net, edns126.ultradns.org
TXT
AD5-G1R-7NJ, Dynatrace-site-verification=95915cac-be11-4e1a-81b7-9580122d59d1__vrv8sf7b41uebre15lgg3c5tko, MS=607A6B094E5395250B2F88D76D42FFB6DC2C18A4, SFMC-4eGhjXSll4RESL8vyX0CBVbTfffzejZShsyAXBrT, _26a8qlr3df4hbl6zve94e918z0g5wud, _pgze0p8hg7pyp30yid9q2dokz00180z, apple-domain-verification=Da2R4Md5eAUVUg038WJnE-_ifFtCwYYc_Dlmx3EaPsU, apple-domain-verification=NGLGgklojeSRTo9T
CNAME
—
CAA
—
WHOIS / Registration
Registration data planned
Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.
Subdomains
Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.
| Subdomain | Resolves to | Last seen |
|---|---|---|
| ak04a6qc.uber.com | 2026-06-23 02:44:24.025 | |
| image.et.uber.com | 2026-07-28 14:37:33.901 | |
| merchants.uber.com | 2026-06-16 15:52:29.577 | |
| uber.com | 2026-07-25 23:55:45.481 | |
| www.uber.com | 2026-07-28 02:49:11.393 | |
| base.uber.com | 2026-07-19 07:40:28.341 | |
| contact.uber.com | 2026-06-06 02:52:02.871 | |
| m.uber.com | 2026-06-18 07:48:42.446 | |
| biz-stage.uber.com | 2026-06-17 15:42:03.402 | |
| bizsys.uber.com | 2026-07-23 03:57:18.268 | |
| brand.uber.com | 2026-06-16 20:44:34.340 | |
| p.uber.com | 2026-07-24 17:42:30.133 | |
| qr.uber.com | 2026-07-24 17:42:30.133 | |
| restaurant.uber.com | 2026-07-27 01:11:34.779 | |
| tb-static.uber.com | 2026-06-15 17:01:41.803 | |
| account.uber.com | 2026-05-26 23:50:17.379 | |
| amex.sandbox.tokenizer.uber.com | 1970-01-01 00:00:00.000 | |
| api-asterisk.uber.com | 2026-06-22 20:42:37.559 | |
| assets.uber.com | 1970-01-01 00:00:00.000 | |
| cfe.uber.com | 1970-01-01 00:00:00.000 | |
| citi.sandbox.tokenizer.uber.com | 1970-01-01 00:00:00.000 | |
| citi.signature.production.tokenizer.uber.com | 1970-01-01 00:00:00.000 | |
| click.et.uber.com | 1970-01-01 00:00:00.000 | |
| dba.usuppliers.uber.com | 1970-01-01 00:00:00.000 | |
| developer.uber.com | 2026-07-28 01:38:51.183 | |
| drivers.uber.com | 2026-05-27 14:53:15.108 | |
| email.mgm.uber.com | 2026-06-23 02:29:43.031 | |
| encrypt.citi.sandbox.tokenizer.uber.com | 1970-01-01 00:00:00.000 | |
| eng.uber.com | 2026-07-24 06:24:36.530 | |
| gighub-telephony.uber.com | 1970-01-01 00:00:00.000 | |
| groove.uber.com | 1970-01-01 00:00:00.000 | |
| hopping-bunny-hop-test.uber.com | 1970-01-01 00:00:00.000 | |
| hopping-bunny-test.uber.com | 1970-01-01 00:00:00.000 | |
| hopping-hare-test.uber.com | 1970-01-01 00:00:00.000 | |
| in.gighub.uber.com | 1970-01-01 00:00:00.000 | |
| investor.uber.com | 1970-01-01 00:00:00.000 | |
| jobs.uber.com | 1970-01-01 00:00:00.000 | |
| lab.usuppliers.uber.com | 1970-01-01 00:00:00.000 | |
| livekit.oci-dubai.uber.com | 1970-01-01 00:00:00.000 | |
| nationsbenefit.prod.tokenizer.uber.com | 1970-01-01 00:00:00.000 | |
| nationsbenefit.sandbox.tokenizer.uber.com | 1970-01-01 00:00:00.000 | |
| org.uber.com | 1970-01-01 00:00:00.000 | |
| peopletech-stage.uber.com | 1970-01-01 00:00:00.000 | |
| peopletech.uber.com | 1970-01-01 00:00:00.000 | |
| pilot.ucollect.uber.com | 1970-01-01 00:00:00.000 | |
| qprevents.uber.com | 1970-01-01 00:00:00.000 | |
| restauranthelp.uber.com | 1970-01-01 00:00:00.000 | |
| rtsp-staging1.uber.com | 2026-06-22 08:22:00.067 | |
| sbx.usuppliers.uber.com | 1970-01-01 00:00:00.000 | |
| scaledsolutions-asmt-staging.uber.com | 1970-01-01 00:00:00.000 | |
| scaledsolutions-asmt.uber.com | 1970-01-01 00:00:00.000 | |
| sd6gx58d.uber.com | 1970-01-01 00:00:00.000 | |
| sip-asterisk.uber.com | 2026-06-04 14:43:55.936 | |
| sit.usuppliers.uber.com | 1970-01-01 00:00:00.000 | |
| sli.uber.com | 1970-01-01 00:00:00.000 | |
| staging-in.gighub.uber.com | 1970-01-01 00:00:00.000 | |
| staging-pilot.ucollect.uber.com | 1970-01-01 00:00:00.000 | |
| staging-us.gighub.uber.com | 1970-01-01 00:00:00.000 | |
| tbgs-static.uber.com | 2026-06-03 16:25:43.556 | |
| tbs-static.uber.com | 1970-01-01 00:00:00.000 | |
| tracking.ibm.uber.com | 2026-06-16 00:41:01.117 | |
| uat.usuppliers.uber.com | 1970-01-01 00:00:00.000 | |
| us.gighub.uber.com | 1970-01-01 00:00:00.000 | |
| usuppliers.uber.com | 1970-01-01 00:00:00.000 | |
| www.nationsbenefit.prod.tokenizer.uber.com | 1970-01-01 00:00:00.000 | |
| www.nationsbenefit.sandbox.tokenizer.uber.com | 1970-01-01 00:00:00.000 | |
| www.usuppliers.uber.com | 1970-01-01 00:00:00.000 | |
| z.uber.com | 1970-01-01 00:00:00.000 |
Tech Stack
Tech detection pending
Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.
TLS Certificates
Subject: insurance.xminsuber.com
Issuer: WoTrus DV Server CA [Run by the Issuer]
SANs: insurance.xminsuber.com, www.insurance.xminsuber.com
Subject: www.drdeuber.com
Issuer: YR2
SANs: drdeuber.com, www.drdeuber.com
Subject: ekuber.com
Issuer: YR2
SANs: ekuber.com, www.ekuber.com
Subject: mail.luuber.com
Issuer: R11
SANs: mail.luuber.com, mail.moreepicnicraces.com.au
Subject: externmail.weingut-huber.com
Issuer: Certum DV TLS G2 R39 CA
SANs: autodiscover.weingut-huber.com, externmail.weingut-huber.com
Subject: cookuber.com
Issuer: YR2
SANs: cookuber.com, www.cookuber.com
Subject: server.wuber.com
Issuer: YR2
SANs: server.wuber.com
Subject: loki-gateway.prod.kubershmuber.com
Issuer: WR3
SANs: loki-gateway.prod.kubershmuber.com
Subject: admin.halluber.com
Issuer: YE1
SANs: admin.halluber.com
Subject: autoconfig.server1.edtuber.com
Issuer: YR1
SANs: autoconfig.server1.edtuber.com, autodiscover.server1.edtuber.com, cpanel.server1.edtuber.com, cpcalendars.server1.edtuber.com, cpcontacts.server1.edtuber.com, ipv6.server1.edtuber.com, mail.server1.edtuber.com, server1.edtuber.com, webdisk.server1.edtuber.com, webmail.server1.edtuber.com, whm.server1.edtuber.com, www.server1.edtuber.com
Subject: remote.neuhuber.com
Issuer: GlobalSign GCC R3 DV TLS CA 2020
SANs: autodiscover.neuhuber.com, mail.neuhuber.com, owa.neuhuber.com, remote.neuhuber.com, www.neuhuber.com
Subject: cnta.clarknuber.com
Issuer: Go Daddy Secure Certificate Authority - G2
SANs: cnta.clarknuber.com, www.cnta.clarknuber.com
Subject: sra-am.huber.com
Issuer: Go Daddy Secure Certificate Authority - G2
SANs: sra-am-dr.huber.com, sra-am.huber.com, sra-ap-dr.huber.com, sra-ap.huber.com, sra-eu-dr.huber.com, sra-eu.huber.com, sra.ap.huber.com, www.sra-am.huber.com
Subject: zahn-zauber.com
Issuer: YE1
SANs: www.zahn-zauber.com, zahn-zauber.com
Subject: crypticcuber.com
Issuer: YR2
SANs: crypticcuber.com, www.crypticcuber.com
Subject: loki-gateway.dev-auth.kubershmuber.com
Issuer: WR3
SANs: loki-gateway.dev-auth.kubershmuber.com
Subject: schmidhuber.com
Issuer: YR2
SANs: schmidhuber.com, www.schmidhuber.com
Subject: remote.neuhuber.com
Issuer: GlobalSign GCC R3 DV TLS CA 2020
SANs: autodiscover.neuhuber.com, mail.neuhuber.com, owa.neuhuber.com, remote.neuhuber.com, www.neuhuber.com
Subject: hiltzlauber.com
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: hiltzlauber.com, www.hiltzlauber.com
Subject: api-asterisk.uber.com
Issuer: WR3
SANs: api-asterisk.uber.com
Subject: *.ai-tuber.com
Issuer: Amazon RSA 2048 M04
SANs: *.ai-tuber.com
Subject: rtsp-staging1.uber.com
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: rtsp-staging1.uber.com
Subject: chruber.com
Issuer: R3
SANs: chruber.com, escarpmentwellness.com, frozenstrains.com, kushector.com, www.kushector.com
Subject: dolphin-cave-admin.dev-auth.kubershmuber.com
Issuer: WR3
SANs: dolphin-cave-admin.dev-auth.kubershmuber.com
Subject: apidev.yektuber.com
Issuer: E8
SANs: apidev.yektuber.com
Subject: rogershuber.com
Issuer: R12
SANs: rogershuber.com, www.rogershuber.com
Subject: weshuber.com
Issuer: R13
SANs: kith.weshuber.com, weshuber.com
Subject: labrador-admin.prod-ew1.kubershmuber.com
Issuer: WR3
SANs: labrador-admin.prod-ew1.kubershmuber.com
Subject: grafana.prod-eu.kubershmuber.com
Issuer: WR3
SANs: grafana.prod-eu.kubershmuber.com
Subject: ketovtuber.com
Issuer: YR1
SANs: ketovtuber.com, www.ketovtuber.com
IPs Citing This Domain
Hosts whose HTML body references this domain. Strong signal for origin/mirror/embed discovery.
Origin / IP-Leak
USP
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
| Origin IP | Origin ASN | CDN ASN | Confidence | Reasoning |
|---|---|---|---|---|
| 23.46.101.244 | AS17639 | AS16625 | 95% | cert 8e26bd98… served by 23.46.101.244 (AS17639) carries SAN image.et.uber.com which currently resolves through Akamai (AS16625) at 88.221.71.159, 23.222.41.94 |
Threat Intelligence
Domain threat-intel pending
Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.
History
Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.
| Type | Value | First seen | Last seen |
|---|---|---|---|
| TXT | atlassian-domain-verification=M5S2mTVz1nn58QsIgP0q4BLRplQvKva5IHHG5usoAYecrD00FTI5zR2tzAmNnI9L | 2026-05-26 18:18:52.742 | 2026-07-25 23:55:45.481 |
| MX | 10 alt3.aspmx.l.google.com | 2026-05-26 18:18:52.742 | 2026-07-25 23:55:45.481 |
| TXT | _pgze0p8hg7pyp30yid9q2dokz00180z | 2026-05-26 18:18:52.742 | 2026-05-26 18:18:52.742 |
| TXT | Dynatrace-site-verification=95915cac-be11-4e1a-81b7-9580122d59d1__vrv8sf7b41uebre15lgg3c5tko | 2026-05-26 18:18:52.742 | 2026-07-25 23:55:45.481 |
| TXT | google-site-verification=bywbMPdGdGaSev-nAuHwbdYjZziw9oPeGkOgBD5UyK0 | 2026-05-26 18:18:52.742 | 2026-07-25 23:55:45.481 |
| TXT | SFMC-4eGhjXSll4RESL8vyX0CBVbTfffzejZShsyAXBrT | 2026-05-26 18:18:52.742 | 2026-07-25 23:55:45.481 |
| TXT | atlassian-sending-domain-verification=0302bdf3-f835-4464-979d-7beeda0dbe97 | 2026-05-26 18:18:52.742 | 2026-07-25 23:55:45.481 |
| TXT | atlassian-domain-verification=MMotF76tU47LiNcsEf06+lzKmWly4PgbYpYZqHy3a9YdTdY4S43ay72YkkxTmzff | 2026-05-26 18:18:52.742 | 2026-07-25 23:55:45.481 |
| TXT | beautifulai-site-verification=ed0fad99-1b20-4963-ab5b-538f0f915117 | 2026-05-26 18:18:52.742 | 2026-07-25 23:55:45.481 |
| TXT | stripe-verification=79f7b9921824c7fd1cd4ffc20fc10f662a5322317c8290f124b4e18d9ebd19e0 | 2026-05-26 18:18:52.742 | 2026-07-25 23:55:45.481 |
| TXT | paloaltonetworks-site-verification=f567a8ba5a35da704fb1e540c1e50bbaa33bc2ea6b87193c22e1c9ae29348b2a | 2026-05-26 18:18:52.742 | 2026-07-25 23:55:45.481 |
| TXT | duo_sso_verification=EArnP8qJQk9QUv3i30tGmhVOfsuivQxEgBlNLIF8EaD3ZimeyV2Iq5rBJQHWcaUMl | 2026-05-26 18:18:52.742 | 2026-07-25 23:55:45.481 |
| TXT | dtm-domain-verification=EtPupN9aHsJIAtWeUzmu_aAa6o5BQsvO73iDfQIKkx4 | 2026-05-26 18:18:52.742 | 2026-07-25 23:55:45.481 |
| TXT | notion-domain-verification=ReKaEX54F5cGF2V3IKgyilPZF3TjQ34Iua63ng0LHDC | 2026-05-26 18:18:52.742 | 2026-07-25 23:55:45.481 |
| TXT | docker-verification=e121526a-c4bd-4829-8f6b-c4a3c93f0029 | 2026-05-26 18:18:52.742 | 2026-07-25 23:55:45.481 |
| TXT | MS=607A6B094E5395250B2F88D76D42FFB6DC2C18A4 | 2026-05-26 18:18:52.742 | 2026-07-25 23:55:45.481 |
| TXT | mandrill_verify.UYz1FLL51N9Ky3RCgCUZGQ | 2026-05-26 18:18:52.742 | 2026-07-25 23:55:45.481 |
| TXT | hpe-greenlake-domain-verification=6553304837784b7232736d71514737737353622d6854354e343534554c71754f | 2026-05-26 18:18:52.742 | 2026-07-25 23:55:45.481 |
| TXT | apple-domain-verification=Da2R4Md5eAUVUg038WJnE-_ifFtCwYYc_Dlmx3EaPsU | 2026-05-26 18:18:52.742 | 2026-07-25 23:55:45.481 |
| TXT | crz6wwryflvvfk4kvk5lqfk78p02dc7m | 2026-05-26 18:18:52.742 | 2026-07-25 23:55:45.481 |
| TXT | postman-domain-verification=4c640467e16a94ba218b31f435eb42e0749d16ab4168939f9ad5eb4ec3abb91cd63ca90ef5ccd3e4a8f4049444c3a267225ffde0ea6a9c8d84bb6e904034a1cc | 2026-05-26 18:18:52.742 | 2026-07-25 23:55:45.481 |
| TXT | google-site-verification=p21addAHCLTiBqVhN6P3leSJNO2ob8edJtQbICdXCj8 | 2026-05-26 18:18:52.742 | 2026-07-25 23:55:45.481 |
| TXT | uber-site-verification=56157b0f-0f5f-4bdc-8a64-9c313ac173a5 | 2026-05-26 18:18:52.742 | 2026-07-25 23:55:45.481 |
| A | 69.48.216.66 | 2026-05-26 18:18:52.742 | 2026-05-26 18:18:52.742 |
| TXT | google-site-verification=9kwu-dlf_JSf0XtaHK2xK-Cowpra8TnHbfTRCa7NBk0 | 2026-05-26 18:18:52.742 | 2026-07-25 23:55:45.481 |
| TXT | mixpanel-domain-verify=a35ee3f7-3848-4a0b-822e-d429b507c0c6 | 2026-05-26 18:18:52.742 | 2026-07-25 23:55:45.481 |
| TXT | duo_sso_verification=efpKKW3WtEX7Ln6CBDAQyyNA5mwOU0KxFopDN2LtcawWUcGa6BByYIq5LG69lDrq | 2026-05-26 18:18:52.742 | 2026-07-25 23:55:45.481 |
| TXT | workplace-domain-verification=HhUs1CkDiWsL4Nlmkdb6IOVjrebKb1 | 2026-05-26 18:18:52.742 | 2026-07-25 23:55:45.481 |
| MX | 2 aspmx.l.google.com | 2026-05-26 18:18:52.742 | 2026-07-25 23:55:45.481 |
| TXT | lovable_verification=workspace_01jz0y1v0ff9cv8hsxkbvawqhx | 2026-05-26 18:18:52.742 | 2026-07-25 23:55:45.481 |
| TXT | ca3-ffffa27c6ab6493ba5e2ffd4f8961467 | 2026-05-26 18:18:52.742 | 2026-07-25 23:55:45.481 |
| NS | edns126.ultradns.com | 2026-05-26 18:18:52.742 | 2026-07-25 23:55:45.481 |
| NS | edns126.ultradns.org | 2026-05-26 18:18:52.742 | 2026-07-25 23:55:45.481 |
| NS | edns126.ultradns.biz | 2026-05-26 18:18:52.742 | 2026-07-25 23:55:45.481 |
| TXT | apple-domain-verification=NGLGgklojeSRTo9T | 2026-05-26 18:18:52.742 | 2026-07-25 23:55:45.481 |
| TXT | openai-domain-verification=dv-wtb3VIyo0DtnGsiQN4DnZ4c7 | 2026-05-26 18:18:52.742 | 2026-07-25 23:55:45.481 |
| TXT | google-site-verification=yHvJ7x6qUkjrzRfaPzSO5Iu42eP70uSS0Q88xPFBbSU | 2026-05-26 18:18:52.742 | 2026-07-25 23:55:45.481 |
| TXT | docusign=ce93a9f0-d430-4abb-aee8-ec66524c1f12 | 2026-05-26 18:18:52.742 | 2026-07-25 23:55:45.481 |
| TXT | AD5-G1R-7NJ | 2026-05-26 18:18:52.742 | 2026-07-25 23:55:45.481 |
| TXT | facebook-domain-verification=fgnbsxqefhg2pzugzl4vcw82ylgagg | 2026-05-26 18:18:52.742 | 2026-07-25 23:55:45.481 |
| TXT | f621e431-a485-4094-8587-2f76f441ccab | 2026-05-26 18:18:52.742 | 2026-07-25 23:55:45.481 |
| MX | 5 alt2.aspmx.l.google.com | 2026-05-26 18:18:52.742 | 2026-07-25 23:55:45.481 |
| TXT | docusign=635f0402-4f58-42de-8e07-e1da6d8a971a | 2026-05-26 18:18:52.742 | 2026-07-25 23:55:45.481 |
| TXT | c9s6q2+D+iTzxyax7z2ol/gbj0Rqq8Loojleaq22ZDM= | 2026-05-26 18:18:52.742 | 2026-07-25 23:55:45.481 |
| MX | 10 alt4.aspmx.l.google.com | 2026-05-26 18:18:52.742 | 2026-07-25 23:55:45.481 |
| TXT | autodesk-domain-verification=wa1khlrPnOY-93pE5_nH | 2026-05-26 18:18:52.742 | 2026-07-25 23:55:45.481 |
| MX | 5 alt1.aspmx.l.google.com | 2026-05-26 18:18:52.742 | 2026-07-25 23:55:45.481 |
| TXT | v=spf1 include:uber.com._nspf.vali.email include:%{i}._ip.%{h}._ehlo.%{d}._spf.vali.email include:mailgun.org ~all | 2026-05-26 18:18:52.742 | 2026-07-25 23:55:45.481 |
| NS | edns126.ultradns.net | 2026-05-26 18:18:52.742 | 2026-07-25 23:55:45.481 |
| TXT | mandrill_verify.5Qnmy5yihDZ4mJwXJ0VP7w | 2026-05-26 18:18:52.742 | 2026-07-25 23:55:45.481 |
| TXT | _26a8qlr3df4hbl6zve94e918z0g5wud | 2026-07-15 20:04:13.980 | 2026-07-25 23:55:45.481 |
| A | 69.48.216.73 | 2026-07-15 20:04:13.980 | 2026-07-15 20:04:13.980 |
| TXT | tiktok-developers-site-verification=cCZKENHfoFc48Ks8x4K7IMa9NCyD1ggk | 2026-07-15 20:04:13.980 | 2026-07-25 23:55:45.481 |
| A | 104.36.194.80 | 2026-07-18 15:36:47.008 | 2026-07-18 15:36:47.008 |
| A | 69.48.216.4 | 2026-07-25 23:47:14.097 | 2026-07-25 23:47:14.097 |
| A | 104.36.194.4 | 2026-07-25 23:55:45.481 | 2026-07-25 23:55:45.481 |