Domain
mozilla.net
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of mozilla.net
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
Hosting IPs
—
A/AAAA targets
Subdomains
—
CT + scan + body
Record Types
—
seen in DNS
Observed Certs
—
in our scans
DNS Records
A
—
AAAA
—
MX
1 aspmx.l.google.com, 10 alt3.aspmx.l.google.com, 10 alt4.aspmx.l.google.com, 5 alt1.aspmx.l.google.com, 5 alt2.aspmx.l.google.com
NS
ns1-240.akam.net, ns4-64.akam.net, ns5-65.akam.net, ns7-66.akam.net
TXT
_bbrkqmphbarjmnnwgj4ozxxe57qzw3w, google-site-verification=PFugIdWufVHs28w5mr_gORsgu7RZr9En5EeuBvOGOxI, google-site-verification=f3eAyJobWKjb2OxH2ZLdp44_Rt6wrk5yAg2jiE99ExM, v=spf1 include:_spf.mozilla.com ~all
CNAME
—
CAA
0 iodef "mailto:foxsec+caaiodef@mozilla.com", 0 issue "amazon.com", 0 issue "comodoca.com", 0 issue "digicert.com", 0 issue "letsencrypt.org", 0 issue "pki.goog", 0 issue "sectigo.com"
WHOIS / Registration
Registration data planned
Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.
Subdomains
Subdomain enumeration pending
Every subdomain ever issued a TLS cert under this apex — extracted from Certificate Transparency logs, our own scan observations and body references.
Tech Stack
Tech detection pending
Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.
TLS Certificates
Subject: download-installer.cdn.mozilla.net
Issuer: download-installer.cdn.mozilla.net
SANs: download-installer.cdn.mozilla.net
IPs Citing This Domain
No citing IPs found yet
As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.
Origin / IP-Leak
USP
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
| Origin IP | Origin ASN | CDN ASN | Confidence | Reasoning |
|---|---|---|---|---|
| 91.124.40.33 | AS205489 | AS54113 | 95% | cert 24126dde… served by 91.124.40.33 (AS205489) carries SAN download-installer.cdn.mozilla.net which currently resolves through Fastly (AS54113) at 151.101.131.19, 151.101.3.19, 151.101.195.19, 151.101.67.19 |
| 89.144.50.83 | AS216416 | AS54113 | 95% | cert 24126dde… served by 89.144.50.83 (AS216416) carries SAN download-installer.cdn.mozilla.net which currently resolves through Fastly (AS54113) at 151.101.131.19, 151.101.3.19, 2a04:4e42::787, 151.101.195.19 |
| 2.26.252.47 | AS210457 | AS54113 | 95% | cert 24126dde… served by 2.26.252.47 (AS210457) carries SAN download-installer.cdn.mozilla.net which currently resolves through Fastly (AS54113) at 151.101.131.19, 151.101.3.19, 2a04:4e42::787, 151.101.195.19 |
| 85.93.21.252 | AS216416 | AS54113 | 95% | cert 24126dde… served by 85.93.21.252 (AS216416) carries SAN download-installer.cdn.mozilla.net which currently resolves through Fastly (AS54113) at 151.101.131.19, 151.101.3.19, 2a04:4e42::787, 151.101.195.19 |
| 85.93.21.138 | AS216416 | AS54113 | 95% | cert 24126dde… served by 85.93.21.138 (AS216416) carries SAN download-installer.cdn.mozilla.net which currently resolves through Fastly (AS54113) at 151.101.131.19, 151.101.3.19, 2a04:4e42::787, 151.101.195.19 |
| 185.164.32.235 | AS200698 | AS54113 | 95% | cert 24126dde… served by 185.164.32.235 (AS200698) carries SAN download-installer.cdn.mozilla.net which currently resolves through Fastly (AS54113) at 151.101.131.19, 151.101.3.19, 2a04:4e42::787, 151.101.195.19 |
| 216.173.71.173 | AS42532 | AS54113 | 95% | cert 24126dde… served by 216.173.71.173 (AS42532) carries SAN download-installer.cdn.mozilla.net which currently resolves through Fastly (AS54113) at 146.75.123.19, 2a04:4e42::787, 2a04:4e42:600::787, 2a04:4e42:400::787 |
| 151.246.199.224 | AS205489 | AS54113 | 95% | cert 24126dde… served by 151.246.199.224 (AS205489) carries SAN download-installer.cdn.mozilla.net which currently resolves through Fastly (AS54113) at 146.75.123.19, 2a04:4e42::787, 2a04:4e42:600::787, 2a04:4e42:400::787 |
| 185.47.142.109 | AS216416 | AS54113 | 95% | cert 24126dde… served by 185.47.142.109 (AS216416) carries SAN download-installer.cdn.mozilla.net which currently resolves through Fastly (AS54113) at 151.101.131.19, 151.101.3.19, 2a04:4e42::787, 151.101.195.19 |
| 64.83.46.149 | AS979 | AS54113 | 95% | cert 24126dde… served by 64.83.46.149 (AS979) carries SAN download-installer.cdn.mozilla.net which currently resolves through Fastly (AS54113) at 146.75.123.19, 2a04:4e42::787, 2a04:4e42:600::787, 2a04:4e42:400::787 |
| 188.137.230.38 | AS211381 | AS54113 | 95% | cert 24126dde… served by 188.137.230.38 (AS211381) carries SAN download-installer.cdn.mozilla.net which currently resolves through Fastly (AS54113) at 151.101.131.19, 151.101.3.19, 2a04:4e42::787, 151.101.195.19 |
| 191.40.0.110 | AS138997 | AS54113 | 95% | cert 24126dde… served by 191.40.0.110 (AS138997) carries SAN download-installer.cdn.mozilla.net which currently resolves through Fastly (AS54113) at 151.101.131.19, 151.101.3.19, 2a04:4e42::787, 151.101.195.19 |
| 144.31.237.191 | AS212743 | AS54113 | 95% | cert 24126dde… served by 144.31.237.191 (AS212743) carries SAN download-installer.cdn.mozilla.net which currently resolves through Fastly (AS54113) at 146.75.123.19, 2a04:4e42::787, 2a04:4e42:600::787, 2a04:4e42:400::787 |
| 213.182.214.9 | AS205489 | AS54113 | 95% | cert 24126dde… served by 213.182.214.9 (AS205489) carries SAN download-installer.cdn.mozilla.net which currently resolves through Fastly (AS54113) at 151.101.131.19, 151.101.3.19, 2a04:4e42::787, 151.101.195.19 |
| 194.59.223.194 | AS205489 | AS54113 | 95% | cert 24126dde… served by 194.59.223.194 (AS205489) carries SAN download-installer.cdn.mozilla.net which currently resolves through Fastly (AS54113) at 151.101.131.19, 151.101.3.19, 2a04:4e42::787, 151.101.195.19 |
| 107.174.243.8 | AS36352 | AS54113 | 95% | cert 24126dde… served by 107.174.243.8 (AS36352) carries SAN download-installer.cdn.mozilla.net which currently resolves through Fastly (AS54113) at 151.101.131.19, 151.101.3.19, 2a04:4e42::787, 151.101.195.19 |
| 173.242.116.168 | AS25820 | AS54113 | 95% | cert 24126dde… served by 173.242.116.168 (AS25820) carries SAN download-installer.cdn.mozilla.net which currently resolves through Fastly (AS54113) at 151.101.131.19, 151.101.3.19, 2a04:4e42::787, 151.101.195.19 |
| 45.5.79.41 | AS265680 | AS54113 | 95% | cert 24126dde… served by 45.5.79.41 (AS265680) carries SAN download-installer.cdn.mozilla.net which currently resolves through Fastly (AS54113) at 151.101.131.19, 151.101.3.19, 2a04:4e42::787, 151.101.195.19 |
| 5.175.219.113 | AS216416 | AS54113 | 95% | cert 24126dde… served by 5.175.219.113 (AS216416) carries SAN download-installer.cdn.mozilla.net which currently resolves through Fastly (AS54113) at 151.101.131.19, 151.101.3.19, 2a04:4e42::787, 151.101.195.19 |
| 91.108.248.49 | AS57043 | AS54113 | 95% | cert 24126dde… served by 91.108.248.49 (AS57043) carries SAN download-installer.cdn.mozilla.net which currently resolves through Fastly (AS54113) at 151.101.131.19, 151.101.3.19, 2a04:4e42::787, 151.101.195.19 |
| 82.115.49.172 | AS39318 | AS54113 | 95% | cert 24126dde… served by 82.115.49.172 (AS39318) carries SAN download-installer.cdn.mozilla.net which currently resolves through Fastly (AS54113) at 151.101.131.19, 151.101.3.19, 2a04:4e42::787, 151.101.195.19 |
| 89.37.185.136 | AS26383 | AS54113 | 95% | cert 24126dde… served by 89.37.185.136 (AS26383) carries SAN download-installer.cdn.mozilla.net which currently resolves through Fastly (AS54113) at 151.101.131.19, 151.101.3.19, 2a04:4e42::787, 151.101.195.19 |
| 193.56.188.127 | AS9002 | AS54113 | 95% | cert 24126dde… served by 193.56.188.127 (AS9002) carries SAN download-installer.cdn.mozilla.net which currently resolves through Fastly (AS54113) at 151.101.131.19, 151.101.3.19, 2a04:4e42::787, 151.101.195.19 |
| 109.172.6.69 | AS29182 | AS54113 | 95% | cert 24126dde… served by 109.172.6.69 (AS29182) carries SAN download-installer.cdn.mozilla.net which currently resolves through Fastly (AS54113) at 151.101.131.19, 151.101.3.19, 2a04:4e42::787, 151.101.195.19 |
| 192.220.34.177 | AS2914 | AS54113 | 95% | cert 24126dde… served by 192.220.34.177 (AS2914) carries SAN download-installer.cdn.mozilla.net which currently resolves through Fastly (AS54113) at 151.101.131.19, 151.101.3.19, 151.101.195.19, 151.101.67.19 |
Threat Intelligence
Domain threat-intel pending
Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.
History
Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.
| Type | Value | First seen | Last seen |
|---|---|---|---|
| CAA | 0 issue "sectigo.com" | 2026-06-04 23:51:53.290 | 2026-07-15 20:04:13.980 |
| NS | ns4-64.akam.net | 2026-06-04 23:51:53.290 | 2026-07-15 20:04:13.980 |
| NS | ns5-65.akam.net | 2026-06-04 23:51:53.290 | 2026-07-15 20:04:13.980 |
| TXT | v=spf1 include:_spf.mozilla.com ~all | 2026-06-04 23:51:53.290 | 2026-07-15 20:04:13.980 |
| TXT | google-site-verification=f3eAyJobWKjb2OxH2ZLdp44_Rt6wrk5yAg2jiE99ExM | 2026-06-04 23:51:53.290 | 2026-07-15 20:04:13.980 |
| CAA | 0 issue "amazon.com" | 2026-06-04 23:51:53.290 | 2026-07-15 20:04:13.980 |
| NS | ns7-66.akam.net | 2026-06-04 23:51:53.290 | 2026-07-15 20:04:13.980 |
| CAA | 0 issue "digicert.com" | 2026-06-04 23:51:53.290 | 2026-07-15 20:04:13.980 |
| CAA | 0 issue "pki.goog" | 2026-06-04 23:51:53.290 | 2026-07-15 20:04:13.980 |
| MX | 5 alt2.aspmx.l.google.com | 2026-06-04 23:51:53.290 | 2026-07-15 20:04:13.980 |
| TXT | _bbrkqmphbarjmnnwgj4ozxxe57qzw3w | 2026-06-04 23:51:53.290 | 2026-07-15 20:04:13.980 |
| MX | 10 alt4.aspmx.l.google.com | 2026-06-04 23:51:53.290 | 2026-07-15 20:04:13.980 |
| TXT | google-site-verification=PFugIdWufVHs28w5mr_gORsgu7RZr9En5EeuBvOGOxI | 2026-06-04 23:51:53.290 | 2026-07-15 20:04:13.980 |
| MX | 1 aspmx.l.google.com | 2026-06-04 23:51:53.290 | 2026-07-15 20:04:13.980 |
| MX | 5 alt1.aspmx.l.google.com | 2026-06-04 23:51:53.290 | 2026-07-15 20:04:13.980 |
| NS | ns1-240.akam.net | 2026-06-04 23:51:53.290 | 2026-07-15 20:04:13.980 |
| CAA | 0 iodef "mailto:foxsec+caaiodef@mozilla.com" | 2026-06-04 23:51:53.290 | 2026-07-15 20:04:13.980 |
| MX | 10 alt3.aspmx.l.google.com | 2026-06-04 23:51:53.290 | 2026-07-15 20:04:13.980 |
| CAA | 0 issue "letsencrypt.org" | 2026-06-04 23:51:53.290 | 2026-07-15 20:04:13.980 |
| CAA | 0 issue "comodoca.com" | 2026-06-04 23:51:53.290 | 2026-07-15 20:04:13.980 |