Domain
substack.com
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of substack.com
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
Hosting IPs
—
A/AAAA targets
Subdomains
—
CT + scan + body
Record Types
—
seen in DNS
Observed Certs
—
in our scans
DNS Records
A
104.18.37.200, 172.64.150.56
AAAA
2606:4700:4400::ac40:9638, 2606:4700:4401::ac40:9638, 2606:4700:4404::6812:25c8, 2606:4700:440b::6812:25c8
MX
10 mxa.mailgun.org, 10 mxb.mailgun.org
NS
ali.ns.cloudflare.com, lee.ns.cloudflare.com
TXT
facebook-domain-verification=8vbxp2ntmkudc6is3h5r840c9fwo7f, google-site-verification=4V_X38Yf0J4VJcWFwtG38bOS1nkOWeIWJhticlMgNQE, google-site-verification=DAkdykID6WqQM6tT7IfSu9_uB7-qIdB039MA_C3T3eA, google-site-verification=FfNIQIxsRHpj3Y7E_d3N6GFqGgWDZ-sfYojqCilwtqE, google-site-verification=SXEl7_p4SBszcanSWwVc_3-RFky80c0-94janbeeWI4, google-site-verification=vQEKLOUDfKNOQAv9W3EUMiRD6e5ibAEPhc2yCzP7big, tiktok-developers-site-verification=7PgqCAJ52ILLOqf2KELd8uaRfJpuzaLQ, tiktok-developers-site-verification=A9XRSo8lWy5CPFJ0bqI04KCpUZGAAq7p
CNAME
—
CAA
—
WHOIS / Registration
Registration data planned
Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.
Subdomains
Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.
| Subdomain | Resolves to | Last seen |
|---|---|---|
| cdn.substack.com | 2026-07-18 18:02:27.067 | |
| account.substack.com | 2026-07-18 18:02:27.067 | |
| accounts.substack.com | 2026-07-18 18:02:27.067 | |
| admin.substack.com | 2026-07-18 18:02:27.067 | |
| administrator.substack.com | 2026-07-18 18:02:27.067 | |
| aicentral.substack.com | 2026-07-27 15:17:07.527 | |
| aidetox.substack.com | 2026-06-20 21:49:21.644 | |
| aimaker.substack.com | 2026-07-26 04:05:32.050 | |
| alertmanager.substack.com | 2026-07-18 18:02:27.067 | |
| alpha.substack.com | 2026-07-18 18:02:27.067 | |
| api-v1.substack.com | 2026-07-18 18:02:27.067 | |
| api-v2.substack.com | 2026-07-18 18:02:27.067 | |
| api.substack.com | 2026-07-18 18:02:27.067 | |
| api1.substack.com | 2026-07-18 18:02:27.067 | |
| api2.substack.com | 2026-07-18 18:02:27.067 | |
| app.substack.com | 2026-07-18 18:02:27.067 | |
| apps.substack.com | 2026-07-18 18:02:27.067 | |
| archive.substack.com | 2026-07-18 18:02:27.067 | |
| argocd.substack.com | 2026-07-18 18:02:27.067 | |
| arkhaven.substack.com | 2026-07-27 15:17:07.527 | |
| artifactory.substack.com | 2026-07-18 18:02:27.067 | |
| assets.substack.com | 2026-07-18 18:02:27.067 | |
| astralcodexten.substack.com | 2026-07-17 08:28:39.270 | |
| auth.substack.com | 2026-07-18 18:02:27.067 | |
| autoconfig.substack.com | 2026-07-18 18:02:27.067 | |
| autodiscover.substack.com | 2026-07-18 18:02:27.067 | |
| backup.substack.com | 2026-07-18 18:02:27.067 | |
| backups.substack.com | 2026-07-18 18:02:27.067 | |
| balancer.substack.com | 2026-07-18 18:02:27.067 | |
| bamboo.substack.com | 2026-07-18 18:02:27.067 | |
| bastion.substack.com | 2026-07-18 18:02:27.067 | |
| beta.substack.com | 2026-07-18 18:02:27.067 | |
| billing.substack.com | 2026-07-18 18:02:27.067 | |
| bitbucket.substack.com | 2026-07-18 18:02:27.067 | |
| bitsandatoms.substack.com | 2026-07-16 17:42:25.951 | |
| bjt2n3904.substack.com | 2026-07-26 03:31:29.946 | |
| blog.substack.com | 2026-07-18 18:02:27.067 | |
| bounce.substack.com | 2026-07-18 18:02:27.067 | |
| build.substack.com | 2026-07-18 18:02:27.067 | |
| buy.substack.com | 2026-07-18 18:02:27.067 | |
| cache.substack.com | 2026-07-18 18:02:27.067 | |
| cacti.substack.com | 2026-07-18 18:02:27.067 | |
| canary.substack.com | 2026-07-18 18:02:27.067 | |
| cart.substack.com | 2026-07-18 18:02:27.067 | |
| castalialibrary.substack.com | 2026-07-27 15:17:07.527 | |
| cd.substack.com | 2026-07-18 18:02:27.067 | |
| checkout.substack.com | 2026-07-18 18:02:27.067 | |
| ci.substack.com | 2026-07-18 18:02:27.067 | |
| circleci.substack.com | 2026-07-18 18:02:27.067 | |
| community.substack.com | 2026-07-18 18:02:27.067 | |
| confluence.substack.com | 2026-07-18 18:02:27.067 | |
| console.substack.com | 2026-07-27 03:05:22.074 | |
| control.substack.com | 2026-07-18 18:02:27.067 | |
| corp.substack.com | 2026-07-18 18:02:27.067 | |
| cp.substack.com | 2026-07-18 18:02:27.067 | |
| cpanel.substack.com | 2026-07-18 18:02:27.067 | |
| dashboard.substack.com | 2026-07-18 18:02:27.067 | |
| database.substack.com | 2026-07-18 18:02:27.067 | |
| datadog.substack.com | 2026-07-18 18:02:27.067 | |
| davekarpf.substack.com | 2026-07-23 02:03:34.131 | |
| db.substack.com | 2026-07-18 18:02:27.067 | |
| demo.substack.com | 2026-07-18 18:02:27.067 | |
| deploy.substack.com | 2026-07-18 18:02:27.067 | |
| dev.substack.com | 2026-07-18 18:02:27.067 | |
| develop.substack.com | 2026-07-18 18:02:27.067 | |
| development.substack.com | 2026-07-18 18:02:27.067 | |
| directadmin.substack.com | 2026-07-18 18:02:27.067 | |
| dl.substack.com | 2026-07-18 18:02:27.067 | |
| dns.substack.com | 2026-07-18 18:02:27.067 | |
| dns1.substack.com | 2026-07-18 18:02:27.067 | |
| dns2.substack.com | 2026-07-18 18:02:27.067 | |
| docker.substack.com | 2026-07-18 18:02:27.067 | |
| docs.substack.com | 2026-07-18 18:02:27.067 | |
| documentation.substack.com | 2026-07-18 18:02:27.067 | |
| downloads.substack.com | 2026-07-18 18:02:27.067 | |
| edge.substack.com | 2026-07-18 18:02:27.067 | |
| elastic.substack.com | 2026-07-18 18:02:27.067 | |
| encrypt.substack.com | 2026-07-18 18:02:27.067 | |
| es.substack.com | 2026-07-18 18:02:27.067 | |
| events.substack.com | 2026-07-18 18:02:27.067 | |
| exchange.substack.com | 2026-07-18 18:02:27.067 | |
| fandompulse.substack.com | 2026-07-27 15:17:07.527 | |
| files.substack.com | 2026-07-18 18:02:27.067 | |
| firewall.substack.com | 2026-07-18 18:02:27.067 | |
| fleawar.substack.com | 2026-06-23 03:58:47.751 | |
| forum.substack.com | 2026-07-18 18:02:27.067 | |
| ftp.substack.com | 2026-07-18 18:02:27.067 | |
| fw.substack.com | 2026-07-18 18:02:27.067 | |
| gamithra.substack.com | 2026-07-21 05:35:48.278 | |
| gateway.substack.com | 2026-07-18 18:02:27.067 | |
| gatewaze.substack.com | 2026-07-26 06:49:47.584 | |
| git.substack.com | 2026-07-18 18:02:27.067 | |
| gitea.substack.com | 2026-07-18 18:02:27.067 | |
| github.substack.com | 2026-07-18 18:02:27.067 | |
| gitlab.substack.com | 2026-07-18 18:02:27.067 | |
| givealltheheart.substack.com | 2026-06-20 20:35:02.791 | |
| grafana.substack.com | 2026-07-18 18:02:27.067 | |
| graphite.substack.com | 2026-07-18 18:02:27.067 | |
| graphql.substack.com | 2026-07-18 18:02:27.067 | |
| grocto.substack.com | 2026-07-17 05:00:49.128 | |
| grpc.substack.com | 2026-07-18 18:02:27.067 | |
| gw.substack.com | 2026-07-18 18:02:27.067 | |
| harbor.substack.com | 2026-07-18 18:02:27.067 | |
| heathercoxrichardson.substack.com | 2026-07-17 02:27:17.666 | |
| help.substack.com | 2026-07-18 18:02:27.067 | |
| home.substack.com | 2026-07-18 18:02:27.067 | |
| hypatiaai.substack.com | 2026-07-19 01:17:10.890 | |
| icinga.substack.com | 2026-07-18 18:02:27.067 | |
| id.substack.com | 2026-07-18 18:02:27.067 | |
| idp.substack.com | 2026-07-18 18:02:27.067 | |
| images.substack.com | 2026-07-18 18:02:27.067 | |
| imap.substack.com | 2026-07-18 18:02:27.067 | |
| imap2.substack.com | 2026-07-18 18:02:27.067 | |
| img.substack.com | 2026-07-18 18:02:27.067 | |
| internal.substack.com | 2026-07-18 18:02:27.067 | |
| intranet.substack.com | 2026-07-18 18:02:27.067 | |
| invoice.substack.com | 2026-07-18 18:02:27.067 | |
| janahan.substack.com | 2026-07-21 11:11:58.401 | |
| jenkins.substack.com | 2026-07-18 18:02:27.067 | |
| jira.substack.com | 2026-07-18 18:02:27.067 |
Tech Stack
Tech detection pending
Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.
TLS Certificates
Subject: substack.com
Issuer: substack.com
SANs: substack.com
IPs Citing This Domain
Hosts whose HTML body references this domain. Strong signal for origin/mirror/embed discovery.
173.255.193.129:80
href · ×10
135.125.205.171:443
href · ×6
143.244.181.192:443
href · ×4
165.101.65.40:443
href · ×4
51.75.249.14:80
href · ×3
67.222.8.247:80
href · ×3
67.222.8.247:443
href · ×3
34.54.88.54:443
href · ×3
34.149.27.149:443
href · ×3
173.236.195.43:443
href · ×3
208.113.200.52:443
href · ×3
40.117.81.55:80
href · ×3
46.23.93.173:443
href · ×3
43.130.68.177:443
href · ×3
107.175.91.130:443
href · ×3
80.78.18.198:443
href · ×2
89.238.91.222:443
href · ×2
44.212.192.50:80
href · ×2
98.83.101.99:443
href · ×2
67.205.166.31:8080
href · ×2
3.219.70.244:80
href · ×2
45.145.103.103:443
href · ×2
18.116.122.143:443
href · ×2
204.168.230.5:443
href · ×2
74.207.230.134:443
href · ×2
3.220.161.22:80
href · ×2
3.123.181.92:80
href · ×1
86.248.203.196:443
href · ×1
173.72.53.2:443
href · ×1
13.200.244.108:443
href · ×1
206.189.220.37:80
href · ×1
45.33.55.90:443
href · ×1
64.119.8.21:443
href · ×1
199.180.114.27:443
href · ×1
153.75.246.114:443
href · ×1
45.77.149.30:443
href · ×1
8.219.86.227:443
href · ×1
167.233.57.242:443
href · ×1
74.208.149.211:443
href · ×1
104.193.141.165:80
href · ×1
216.92.199.211:80
href · ×1
160.251.166.255:443
href · ×1
24.199.100.133:443
href · ×1
5.75.145.72:443
href · ×1
3.134.228.55:80
href · ×1
100.48.40.99:443
href · ×1
3.79.2.90:443
href · ×1
83.137.196.49:443
href · ×1
63.141.231.91:8080
href · ×1
79.96.36.154:443
href · ×1
Origin / IP-Leak
USP
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
No origin-IP leaks detected (yet)
Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.
CT-Log Evidence
Certificates from public Certificate Transparency logs whose subject or SAN names this domain — including historic certs we never observed live.
7182fe6e985841ac…
cloudflare · nimbus2026
Subject: substack.com
Issuer: Amazon RSA 2048 M03
SANs: substack.com, *.substack.com
Valid: 2025-08-06 00:00:00 → 2026-09-03 23:59:59
Threat Intelligence
Domain threat-intel pending
Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.
History
Domain timeline pending
Passive-DNS history accumulates as our forward-DNS crawler observes A/AAAA/MX/NS/TXT records over time.