auth.bot
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of auth.bot
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
DNS Records
WHOIS / Registration
Registration data planned
Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.
Subdomains
Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.
| Subdomain | Resolves to | Last seen |
|---|---|---|
| app.mira.oidc.auth.bot | 2026-06-18 09:27:17.030 | |
| auth.bot | 2026-07-27 09:51:46.319 | |
| oidc.auth.bot | 2026-07-21 18:32:07.021 | |
| passage.auth.bot | 2026-07-27 14:59:09.817 | |
| login.ds.auth.bot | 2026-07-23 10:49:17.562 | |
| static.ds.auth.bot | 2026-07-27 09:51:46.319 | |
| api.auth.bot | 2026-07-28 01:21:37.947 | |
| clerk.auth.bot | 2026-06-23 05:12:58.629 | |
| cloudflareaccess.auth.bot | 2026-06-20 04:43:28.122 | |
| emily.oidc.auth.bot | 2026-06-04 04:03:51.494 | |
| fingerprint.auth.bot | 2026-06-03 13:08:32.671 | |
| fingerprint.worker.auth.bot | 2026-06-18 01:44:49.693 | |
| frontend-api-clerk.app.auth.bot | 2026-06-04 01:34:40.502 | |
| mira.oidc.auth.bot | 2026-06-18 09:27:17.030 | |
| p.idp.auth.bot | 2026-06-03 15:27:33.469 | |
| pages.auth.bot | 2026-07-20 14:16:54.329 | |
| sso.auth.bot | 2026-07-26 18:22:19.896 | |
| uuid.auth.bot | 2026-07-22 17:00:39.010 | |
| web-auth-jwt.auth.bot | 2026-07-20 09:29:15.756 | |
| widget.auth.bot | 2026-07-27 08:41:28.195 | |
| a0.auth.bot | 1970-01-01 00:00:00.000 | |
| adam.pages.auth.bot | 1970-01-01 00:00:00.000 | |
| aione.oidc.auth.bot | 1970-01-01 00:00:00.000 | |
| app.aione.oidc.auth.bot | 1970-01-01 00:00:00.000 | |
| app.auth.bot | 1970-01-01 00:00:00.000 | |
| black-ds.auth.bot | 1970-01-01 00:00:00.000 | |
| ds.auth.bot | 1970-01-01 00:00:00.000 | |
| login.auth.bot | 1970-01-01 00:00:00.000 | |
| o.auth.bot | 1970-01-01 00:00:00.000 | |
| ps.auth.bot | 1970-01-01 00:00:00.000 | |
| reg.oidc.auth.bot | 1970-01-01 00:00:00.000 | |
| test-beta-oidc.auth.bot | 1970-01-01 00:00:00.000 | |
| train.oidc.auth.bot | 1970-01-01 00:00:00.000 | |
| webcontainer.auth.bot | 1970-01-01 00:00:00.000 |
Tech Stack
Tech detection pending
Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.
TLS Certificates
IPs Citing This Domain
No citing IPs found yet
As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.
Origin / IP-Leak
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
No origin-IP leaks detected (yet)
Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.
Threat Intelligence
Domain threat-intel pending
Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.
History
Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.
| Type | Value | First seen | Last seen |
|---|---|---|---|
| TXT | v=spf1 include:_spf.mx.cloudflare.net ~all | 2026-06-04 01:34:40.502 | 2026-07-27 09:51:46.319 |
| TXT | apple-domain-verification=HWAA6BvJCS2vyMev | 2026-06-04 01:34:40.502 | 2026-07-27 09:51:46.319 |
| AAAA | 2606:4700::6812:b0d | 2026-06-04 01:34:40.502 | 2026-06-04 01:34:40.502 |
| MX | 41 route3.mx.cloudflare.net | 2026-06-04 01:34:40.502 | 2026-07-27 09:51:46.319 |
| A | 188.114.97.3 | 2026-06-04 01:34:40.502 | 2026-07-26 18:40:00.782 |
| MX | 39 route1.mx.cloudflare.net | 2026-06-04 01:34:40.502 | 2026-07-27 09:51:46.319 |
| NS | ns1.localsecurity.org | 2026-06-04 01:34:40.502 | 2026-07-27 09:51:46.319 |
| NS | ns2.localsecurity.org | 2026-06-04 01:34:40.502 | 2026-07-27 09:51:46.319 |
| AAAA | 2606:4700::6812:a0d | 2026-06-04 01:34:40.502 | 2026-06-04 01:34:40.502 |
| TXT | google-site-verification=4q_jJWg9yaaMtP_4oAw8hkfbPkLyCuFVwJXyZ7dmJ-w | 2026-06-04 01:34:40.502 | 2026-07-27 09:51:46.319 |
| A | 188.114.96.3 | 2026-06-04 01:34:40.502 | 2026-07-26 18:40:00.782 |
| MX | 4 route2.mx.cloudflare.net | 2026-06-04 01:34:40.502 | 2026-07-27 09:51:46.319 |
| AAAA | 2a06:98c1:3120:: | 2026-06-16 09:03:46.062 | 2026-07-27 09:51:46.319 |
| A | 188.114.96.0 | 2026-06-16 09:03:46.062 | 2026-07-27 09:51:46.319 |
| A | 188.114.97.0 | 2026-06-16 09:03:46.062 | 2026-07-27 09:51:46.319 |
| AAAA | 2a06:98c1:3121:: | 2026-06-16 09:03:46.062 | 2026-07-27 09:51:46.319 |