Domain

shift.io

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

DNS Check HTTP Check Run Full Scan .io TLD

Run a live full scan of shift.io

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now

Hosting IPs

—

A/AAAA targets

Subdomains

—

CT + scan + body

Record Types

—

seen in DNS

Observed Certs

—

in our scans

DNS Records

198.202.211.1

AAAA

—

1 aspmx.l.google.com, 10 aspmx2.googlemail.com, 10 aspmx3.googlemail.com, 5 alt1.aspmx.l.google.com, 5 alt2.aspmx.l.google.com

ns-1018.awsdns-63.net, ns-1377.awsdns-44.org, ns-1545.awsdns-01.co.uk, ns-245.awsdns-30.com

TXT

00de0000000zqd8mak, MS=ms57493431, MS=ms84112898, ZOOM_verify_2I5FPBd0QVmUVNFUjstNDQ, apple-domain-verification=zGlUTW8ZZihEIGCN, atlassian-domain-verification=EfgULbgEIrrLmUHn+O+khDnHsCB1IUv85NjiCjpnD3cu4T1flenDn1ZPrASXjeWh, cisco-ci-domain-verification=15450cac299c7f5dd37cf2193897cfe873514bd1c4ab76dc84d640da9ad82700, google-site-verification=0U49rPlbn4tOMSAuyCRBTcy16PqkEAxGjFugpqBbX1g

CNAME

—

CAA

—

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.

Subdomain	Resolves to	Last seen
preview-docs-cf.shift.io	18.238.243.127 2600:9000:28eb:ea00:19:cce1:a900:93a1 2600:9000:28eb:8e00:19:cce1:a900:93a1 2600:9000:28eb:3200:19:cce1:a900:93a1 +67	2026-06-22 19:21:57.688
app.shift.io	3.174.46.19 2600:9000:2646:c400:2:8198:a080:93a1 2600:9000:2646:ca00:2:8198:a080:93a1 2600:9000:2646:d400:2:8198:a080:93a1 +8	2026-05-26 13:48:04.681
app-beta.shift.io	18.239.69.82 3.174.46.115 3.174.46.107 3.174.46.18 +4	2026-06-22 19:21:57.688
api.shift.io	18.214.124.73 34.224.35.239 52.204.249.112 52.206.120.88	2026-05-26 13:48:04.681
engineering.shift.io	104.18.40.47 172.64.147.209 2a06:98c1:310d::6812:282f 2606:4700:4401::ac40:93d1	2026-07-23 10:40:09.175
info.shift.io	199.60.103.227 2606:2c40::c73c:67e3 2606:2c40::c73c:671d 199.60.103.29	2026-06-22 19:21:57.688
internal.shift.io	3.221.243.249 3.222.62.163 23.20.188.51 54.237.101.124	2026-05-27 07:50:23.553
sso.shift.io	104.18.37.18 172.64.150.238 2a06:98c1:3101::6812:2512 2606:4700:4403::ac40:96ee	2026-06-20 09:28:28.272
www.shift.io	198.202.211.1 2620:cb:2000::1	2026-07-15 22:59:37.265
app-alpha.shift.io	198.202.211.1	2026-06-04 06:39:24.032
documents-cdn.shift.io	34.120.19.26	2026-07-26 22:30:25.369
get.shift.io		1970-01-01 00:00:00.000
iris.internal.shift.io		1970-01-01 00:00:00.000
marketing-assets.shift.io		1970-01-01 00:00:00.000
marketing-bucket.shift.io		1970-01-01 00:00:00.000
marketingbucket.shift.io		1970-01-01 00:00:00.000
munki.internal.shift.io		1970-01-01 00:00:00.000
sandbox.internal.shift.io		1970-01-01 00:00:00.000
shift.io	198.202.211.1	2026-07-15 22:59:37.265
shrub.shift.io		1970-01-01 00:00:00.000

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

Certificate observations pending

TLS certs naming this domain in subject or SANs will appear here as our scan-layer catches them.

IPs Citing This Domain

Hosts whose HTML body references this domain. Strong signal for origin/mirror/embed discovery.

44.198.98.63:443 href · ×2

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

No origin-IP leaks detected (yet)

Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Domain timeline pending

Passive-DNS history accumulates as our forward-DNS crawler observes A/AAAA/MX/NS/TXT records over time.