Domain
git.io
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of git.io
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
Hosting IPs
6
A/AAAA targets
Subdomains
15
CT + scan + body
Record Types
3
seen in DNS
Observed Certs
4
in our scans
DNS Records
A
140.82.112.21, 140.82.112.22, 140.82.113.21, 140.82.113.22, 140.82.114.21, 140.82.114.22
AAAA
—
MX
—
NS
dns1.p09.nsone.net, dns2.p09.nsone.net, dns3.p09.nsone.net, dns4.p09.nsone.net
TXT
—
CNAME
—
CAA
0 issue "digicert.com", 0 issue "letsencrypt.org", 0 issue "sectigo.com"
WHOIS / Registration
Registration data planned
Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.
Subdomains
Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.
| Subdomain | Resolves to | Last seen |
|---|---|---|
| git.io | 2026-07-28 20:14:18.483 | |
| acme-test.git.io | 1970-01-01 00:00:00.000 | |
| www.git.io | 1970-01-01 00:00:00.000 |
Tech Stack
Tech detection pending
Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.
TLS Certificates
Subject: *.ladadigit.io
Issuer: GlobalSign GCC R6 AlphaSSL CA 2025
SANs: *.ladadigit.io, ladadigit.io
Subject: *.logit.io
Issuer: RapidSSL TLS RSA CA G1
SANs: *.logit.io, logit.io
Subject: git.ionitd.com
Issuer: YE1
SANs: git.ionitd.com
Subject: git.ioit.su
Issuer: R12
SANs: git.ioit.su
Subject: *.logit.io
Issuer: RapidSSL TLS RSA CA G1
SANs: *.logit.io, logit.io
Subject: *.singit.io
Issuer: Amazon RSA 2048 M01
SANs: *.singit.io
Subject: *.singit.io
Issuer: Amazon RSA 2048 M01
SANs: *.singit.io
Subject: *.logit.io
Issuer: RapidSSL TLS RSA CA G1
SANs: *.logit.io, logit.io
Subject: *.singit.io
Issuer: Amazon RSA 2048 M01
SANs: *.singit.io
Subject: *.singit.io
Issuer: Amazon RSA 2048 M01
SANs: *.singit.io
Subject: dogit.io
Issuer: Amazon RSA 2048 M03
SANs: *.dogit.io, dogit.io
Subject: *.singit.io
Issuer: Amazon RSA 2048 M01
SANs: *.singit.io
Subject: google.com
Issuer: google.com
SANs: *, *.appspot.com, *.blogblog.com, *.blogspot.com, *.chrome.com, *.chromium.org, *.fastly.net, *.feedburner.com, *.gcr.io, *.ggpht.com, *.git.io, *.github.com, *.github.io, *.githubstatus.com, *.githubusercontent.com, *.gmail.com, *.gmodules.com, *.golang.org, *.google-analytics.com, *.google.ca, *.google.com, *.google.com.hk, *.google.hk, *.googleadservices.com, *.googleapis.com, *.googleartproject.com, *.googleblog.com, *.googlecode.com, *.googledrive.com, *.googlegroups.com, *.googlehosted.com, *.googlemail.com, *.googlesource.com, *.googlestore.com, *.googleusercontent.com, *.gstatic.com, *.recaptcha.net, *.webmproject.org, appspot.com, blogger.com, blogspot.com, chrome.com, chromium.org, git.io, github.com, githubstatus.com, githubusercontent.com, gmail.com, golang.org, google-analytics.com, google.com, google.com.hk, google.hk, googleadservices.com, googlecode.com, googlesource.com
Subject: connect-vendor.lgit.io
Issuer: E8
SANs: connect-vendor.lgit.io
Subject: auth.magnify.indigit.io
Issuer: E6
SANs: auth.magnify.indigit.io
Subject: *.ladadigit.io
Issuer: GlobalSign GCC R6 AlphaSSL CA 2025
SANs: *.ladadigit.io, ladadigit.io
Subject: *.singit.io
Issuer: Amazon RSA 2048 M01
SANs: *.singit.io
Subject: *.singit.io
Issuer: Amazon RSA 2048 M01
SANs: *.singit.io
Subject: *.singit.io
Issuer: Amazon RSA 2048 M01
SANs: *.singit.io
Subject: *.ladadigit.io
Issuer: GlobalSign GCC R6 AlphaSSL CA 2025
SANs: *.ladadigit.io, ladadigit.io
Subject: *.singit.io
Issuer: Amazon RSA 2048 M01
SANs: *.singit.io
Subject: *.logit.io
Issuer: RapidSSL TLS RSA CA G1
SANs: *.logit.io, logit.io
Subject: *.logit.io
Issuer: RapidSSL TLS RSA CA G1
SANs: *.logit.io, logit.io
Subject: *.2digit.io
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.2digit.io, 2digit.io
Subject: *.logit.io
Issuer: RapidSSL TLS RSA CA G1
SANs: *.logit.io, logit.io
Subject: *.singit.io
Issuer: Amazon RSA 2048 M01
SANs: *.singit.io
Subject: *.singit.io
Issuer: Amazon RSA 2048 M01
SANs: *.singit.io
Subject: outpost.cgit.io
Issuer: E8
SANs: outpost.cgit.io
Subject: *.singit.io
Issuer: Amazon RSA 2048 M01
SANs: *.singit.io
Subject: lghnhcmg01.lgit.io
Issuer: R12
SANs: lghnhcmg01.lgit.io
IPs Citing This Domain
Hosts whose HTML body references this domain. Strong signal for origin/mirror/embed discovery.
45.142.167.153:443
href · ×6
103.88.46.137:443
href · ×6
45.80.189.150:443
href · ×6
103.192.225.232:443
href · ×6
78.142.194.123:465
href · ×6
78.142.194.41:443
href · ×6
45.141.44.5:465
href · ×6
45.141.44.224:443
href · ×6
45.80.189.79:443
href · ×6
185.49.34.178:443
href · ×6
185.49.34.135:465
href · ×6
103.88.46.245:465
href · ×6
45.141.44.221:443
href · ×4
103.88.46.176:443
href · ×4
45.141.44.192:465
href · ×4
193.8.125.245:465
href · ×4
103.192.225.233:443
href · ×4
45.90.208.232:465
href · ×4
185.37.253.207:443
href · ×4
103.88.46.129:443
href · ×4
104.245.14.16:465
href · ×4
185.254.73.231:443
href · ×4
103.88.46.105:443
href · ×4
78.142.194.111:443
href · ×4
103.88.46.35:443
href · ×4
78.142.194.88:443
href · ×4
45.80.189.120:465
href · ×4
45.142.167.79:443
href · ×4
94.124.118.150:443
href · ×4
45.80.189.80:465
href · ×4
45.13.196.72:465
href · ×4
193.8.124.216:443
href · ×4
185.37.253.178:443
href · ×4
45.80.189.171:465
href · ×4
45.80.189.201:443
href · ×4
121.41.221.223:80
href · ×4
103.192.225.237:465
href · ×4
103.88.46.28:465
href · ×4
45.80.189.218:443
href · ×4
157.119.102.64:443
href · ×4
45.13.197.155:465
href · ×4
103.88.46.171:443
href · ×4
45.142.167.41:465
href · ×4
103.88.46.175:443
href · ×4
45.139.194.26:443
href · ×4
45.141.44.65:443
href · ×4
94.124.118.244:465
href · ×4
104.245.14.120:465
href · ×4
45.139.194.93:443
href · ×4
185.254.73.127:465
href · ×4
Origin / IP-Leak
USP
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
No origin-IP leaks detected (yet)
Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.
Threat Intelligence
Domain threat-intel pending
Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.
History
Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.
| Type | Value | First seen | Last seen |
|---|---|---|---|
| A | 140.82.114.21 | 2026-05-25 21:54:50.392 | 2026-07-28 15:14:01.364 |
| A | 140.82.114.22 | 2026-05-25 22:00:50.546 | 2026-07-28 20:14:18.483 |
| A | 140.82.112.22 | 2026-05-25 22:02:50.525 | 2026-07-28 16:28:19.762 |
| NS | dns4.p09.nsone.net | 2026-05-25 22:05:29.416 | 2026-07-28 20:14:18.483 |
| NS | dns3.p09.nsone.net | 2026-05-25 22:05:29.416 | 2026-07-28 20:14:18.483 |
| NS | dns2.p09.nsone.net | 2026-05-25 22:05:29.416 | 2026-07-28 20:14:18.483 |
| A | 140.82.113.21 | 2026-05-25 22:05:29.416 | 2026-07-28 20:05:38.639 |
| NS | dns1.p09.nsone.net | 2026-05-25 22:05:29.416 | 2026-07-28 20:14:18.483 |
| CAA | 0 issue "sectigo.com" | 2026-05-26 00:03:35.658 | 2026-07-28 20:14:18.483 |
| A | 140.82.112.21 | 2026-05-26 00:03:35.658 | 2026-07-28 17:49:52.713 |
| CAA | 0 issue "digicert.com" | 2026-05-26 00:03:35.658 | 2026-07-28 20:14:18.483 |
| CAA | 0 issue "letsencrypt.org" | 2026-05-26 00:03:35.658 | 2026-07-28 20:14:18.483 |
| A | 140.82.113.22 | 2026-05-26 00:07:44.959 | 2026-07-28 18:45:26.399 |