Top-Level Domain
.app
Aggregated statistics for the top-level domain
Apex domains
842,035
we've enumerated
Subdomains seen
2,006,932
CT + DNS + brute
TLS certs
25,178
naming .app
Hosting ASNs
15
distinct origins
Domain Distribution
Apex domains with the most known subdomains — large orgs, telecoms, hosters.
| Apex | Subdomains |
|---|---|
| gurudesk.app | 25,087 |
| scaleoffice.app | 17,424 |
| blacksky.app | 12,703 |
| looker.app | 11,493 |
| netify.app | 8,232 |
| staging-eventguest.app | 6,629 |
| nordstromaws.app | 5,663 |
| teststage.app | 4,697 |
| myhelm.app | 4,095 |
| diploi.app | 3,916 |
| hyperzod.app | 3,546 |
| heroui.app | 3,485 |
| invtr.app | 3,345 |
| pomerium.app | 3,326 |
| payloadcms.app | 3,136 |
| rialtic.app | 3,094 |
| tronic.app | 3,032 |
| mikhmon.app | 2,869 |
| firestack.app | 2,808 |
| forento.app | 2,779 |
| censeo.app | 2,538 |
| wasmer.app | 2,234 |
| duke-energy.app | 2,198 |
| glassdoor.app | 2,172 |
| aktiv.app | 2,138 |
| hackclub.app | 2,078 |
| coralclub.app | 2,034 |
| secureserverlogin.app | 2,025 |
| free.app | 2,006 |
| zalopay.app | 1,994 |
| wed.app | 1,987 |
| nordstrom.app | 1,932 |
| smartwyre.app | 1,918 |
| se.app | 1,829 |
| luetjenburg-region.app | 1,684 |
| anterior.app | 1,584 |
| begin.app | 1,541 |
| langgoens.app | 1,471 |
| edirekt.app | 1,436 |
| airlst-pages.app | 1,275 |
| amazonoperations.app | 1,248 |
| bessy.app | 1,239 |
| devpush.app | 1,152 |
| us-west-2.aws.snowflake.app | 1,043 |
| pdgo.app | 1,033 |
| turnosweb.app | 1,030 |
| ada.app | 1,021 |
| dixio.app | 1,002 |
| mystoodio.app | 995 |
| sb.app | 976 |
Top Certificate Issuers
| Issuer (CA) | Certs |
|---|---|
| Let's Encrypt | 9,552 |
| Amazon | 6,398 |
| WR3 | 1,890 |
| YE1 | 1,026 |
| YE2 | 942 |
| YR1 | 829 |
| Cloudflare | 795 |
| YR2 | 790 |
| Sectigo | 732 |
| ZeroSSL | 639 |
| GoDaddy | 470 |
| DigiCert | 274 |
| GlobalSign | 150 |
| LiteSSL | 31 |
| Certum | 31 |
Top Hosting ASNs
| ASN | Name | .app domains |
|---|---|---|
| AS16509 | Amazon.com | 187,331 |
| AS13335 | Cloudflare | 88,798 |
| AS15169 | Google LLC | 39,999 |
| AS8075 | Microsoft | 21,353 |
| AS396982 | Google Cloud | 18,573 |
| AS47846 | — | 18,297 |
| AS42807 | — | 16,975 |
| AS14061 | DigitalOcean | 15,452 |
| AS24940 | Hetzner Online | 15,220 |
| AS61969 | — | 10,867 |
| AS54113 | Fastly, Inc. | 9,656 |
| AS31898 | Oracle Cloud Infrastructure | 7,534 |
| AS47583 | Hostinger International | 6,465 |
| AS16276 | OVHcloud | 6,462 |
| AS20940 | Akamai Technologies | 6,421 |
Tech-Stack Distribution
No Wappalyzer detections
Body-fetcher hasn't covered enough .app sites yet for stack patterns to emerge.
Most-resolved apex domains
Apexes resolving to the most distinct A/AAAA records — popularity proxy.
| Apex | Distinct IPs |
|---|---|
| 99envios.app | 2,085 |
| 30win.app | 407 |
| anamnese.app | 265 |
| myjar.app | 187 |
| framer.app | 152 |
| upcities.app | 138 |
| fishbowlinventory.app | 133 |
| cdn.feedbucket.app | 118 |
| aware.app | 117 |
| givingafoundation.app | 116 |
| orbweaver.app | 108 |
| www.365.app | 100 |
| dotwork.app | 90 |
| avday.app | 84 |
| afomin-1.dev.structure.app | 83 |
| apsmirnov-1.dev.structure.app | 82 |
| bsky.app | 81 |
| shapediver.app | 81 |
| justwc.app | 79 |
| img2.howardmedia.app | 77 |
| rambox.app | 76 |
| cdn.facil-iti.app | 75 |
| beta.heirroom.app | 75 |
| kgrishin-1.dev.structure.app | 75 |
| 33alfa.app | 71 |
Threat-intel hits
| Feed | Category | Domains |
|---|---|---|
| openphish | phishing | 1,865 |
ℹ Coverage will improve significantly once CZDS zone-file access is granted for this TLD.