Domain

devtools.hmgroup.tech

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

DNS Check HTTP Check Run Full Scan .tech TLD

Run a live full scan of devtools.hmgroup.tech

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now

Hosting IPs

—

A/AAAA targets

Subdomains

—

CT + scan + body

Record Types

—

seen in DNS

Observed Certs

—

in our scans

DNS Records

104.70.89.8, 23.206.235.246, 23.218.64.2, 23.222.66.10

AAAA

2a02:26f0:1180:198::3db, 2a02:26f0:1180:199::3db, 2a02:26f0:480:588::3db, 2a02:26f0:480:5b0::3db

—

TXT

—

CNAME

—

CAA

—

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Subdomain enumeration pending

Every subdomain ever issued a TLS cert under this apex — extracted from Certificate Transparency logs, our own scan observations and body references.

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

173.223.128.7:443 90097bae4d1c…

Subject: www.cosstores.com

Issuer: GeoTrust TLS RSA CA G1

SANs: acc.social.arket.com, acc.social.cosstores.com, acc.social.hm.com, acc.social.itsapark.com, acc.social.monki.com, acc.social.stories.com, acc.social.weekday.com, amd-privacy.hmgroup.com, api.appeaser.hmgroup.tech, arket.com, arketcafe.com, beta.arket.com, beta.cosstores.com, beta.monki.com, beta.stories.com, beta.weekday.com, cll.arket.com, cll.cosstores.com, cll.monki.com, cll.stories.com, cll.weekday.com, cosresell.com, cosstores.com, devtools-hub.hmgroup.tech, devtools.hmgroup.tech, emarketing.weekday.com, files.arket.com, files.cheapmonday.com, files.cosstores.com, files.monki.com, files.stories.com, files.weekday.com, int-images.stories.com, int-privacy.hmgroup.com, itsapark.com, lp.arket.com, lp.cosstores.com, lp.monki.com, lp.stories.com, lp.weekday.com, lsl-api.hmgroup.com, lsl-callback.hmgroup.com, lsl-internal-api.hmgroup.com, lsl-job.hmgroup.com, lsl.hmgroup.com, monki.com, press.arket.com, privacy.hmgroup.com, shop.weekday.com, social.itsapark.com, speakup.hmgroup.com, star.hmgroup.com, stories.com, syt-images.stories.com, test.social.cosstores.com, test.social.hm.com, test.social.itsapark.com, test.social.monki.com, test.social.stories.com, test.social.weekday.com, weekday.com, www.arketcafe.com, www.cheapmonday.com, www.cosstores.com, www.speakup.hmgroup.com

96.7.183.9:443 90097bae4d1c…

Subject: www.cosstores.com

Issuer: GeoTrust TLS RSA CA G1

23.47.9.21:443 90097bae4d1c…

Subject: www.cosstores.com

Issuer: GeoTrust TLS RSA CA G1

23.214.68.14:443 90097bae4d1c…

Subject: www.cosstores.com

Issuer: GeoTrust TLS RSA CA G1

23.52.5.4:443 90097bae4d1c…

Subject: www.cosstores.com

Issuer: GeoTrust TLS RSA CA G1

23.193.17.24:443 90097bae4d1c…

Subject: www.cosstores.com

Issuer: GeoTrust TLS RSA CA G1

184.28.33.32:443 90097bae4d1c…

Subject: www.cosstores.com

Issuer: GeoTrust TLS RSA CA G1

23.216.15.31:443 90097bae4d1c…

Subject: www.cosstores.com

Issuer: GeoTrust TLS RSA CA G1

184.27.18.254:443 90097bae4d1c…

Subject: www.cosstores.com

Issuer: GeoTrust TLS RSA CA G1

104.76.135.101:443 90097bae4d1c…

Subject: www.cosstores.com

Issuer: GeoTrust TLS RSA CA G1

23.221.69.35:443 90097bae4d1c…

Subject: www.cosstores.com

Issuer: GeoTrust TLS RSA CA G1

IPs Citing This Domain

No citing IPs found yet

As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

No origin-IP leaks detected (yet)

Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.

CT-Log Evidence

Certificates from public Certificate Transparency logs whose subject or SAN names this domain — including historic certs we never observed live.

91398aefbb7ab29a… cloudflare · nimbus2026

Subject: www.cosstores.com

Issuer: GeoTrust TLS RSA CA G1

SANs: www.cosstores.com, acc.social.arket.com, acc.social.cosstores.com, acc.social.hm.com, acc.social.itsapark.com, acc.social.monki.com, acc.social.pleat.com, acc.social.stories.com, acc.social.weekday.com, amd-privacy.hmgroup.com, api.appeaser.hmgroup.tech, arket.com, arketcafe.com, beta.arket.com, beta.cosstores.com, beta.monki.com, beta.stories.com, beta.weekday.com, cll.arket.com, cll.cosstores.com, cll.monki.com, cll.stories.com, cll.weekday.com, cosresell.com, cosstores.com, devtools-hub.hmgroup.tech, devtools.hmgroup.tech, emarketing.weekday.com, files.arket.com, files.cheapmonday.com, files.cosstores.com, files.monki.com, files.stories.com, files.weekday.com, image.cosstores.com, int-images.stories.com, int-privacy.hmgroup.com, itsapark.com, lp.arket.com, lp.cosstores.com, lp.monki.com, lp.stories.com, lp.weekday.com, lsl-api.hmgroup.com, lsl-callback.hmgroup.com, lsl-internal-api.hmgroup.com, lsl-job.hmgroup.com, lsl.hmgroup.com, monki.com, pleat.com, press.arket.com, privacy.hmgroup.com, shop.weekday.com, social.itsapark.com, speakup.hmgroup.com, star.hmgroup.com, stories.com, syt-images.stories.com, test.social.cosstores.com, test.social.hm.com, test.social.itsapark.com, test.social.monki.com, test.social.pleat.com, test.social.stories.com, test.social.weekday.com, weekday.com, www.arketcafe.com, www.cheapmonday.com, www.pleat.com, www.speakup.hmgroup.com

Valid: 2025-09-26 00:00:00 → 2026-09-25 23:59:59

91398aefbb7ab29a… google · argon2026h2

Subject: www.cosstores.com

Issuer: GeoTrust TLS RSA CA G1

Valid: 2025-09-26 00:00:00 → 2026-09-25 23:59:59

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.

Type	Value	First seen	Last seen
A	23.222.66.10	2026-07-16 17:34:17.194	2026-07-23 04:29:01.304
AAAA	2a02:26f0:1180:199::3db	2026-07-16 17:34:17.194	2026-07-23 04:29:01.304
AAAA	2a02:26f0:1180:198::3db	2026-07-16 17:34:17.194	2026-07-23 04:29:01.304
A	104.70.89.8	2026-07-17 07:17:49.513	2026-07-17 07:17:49.513
A	23.218.64.2	2026-07-17 11:30:52.065	2026-07-22 22:04:08.189
A	23.206.235.246	2026-07-19 18:58:13.056	2026-07-19 18:58:13.056
AAAA	2a02:26f0:480:588::3db	2026-07-21 16:41:31.643	2026-07-21 16:41:31.643
AAAA	2a02:26f0:480:5b0::3db	2026-07-21 16:41:31.643	2026-07-21 16:41:31.643