Domain
googleusercontent.com
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of googleusercontent.com
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
Hosting IPs
—
A/AAAA targets
Subdomains
—
CT + scan + body
Record Types
—
seen in DNS
Observed Certs
—
in our scans
DNS Records
A
142.250.180.1, 142.251.110.132, 142.251.168.132, 142.251.209.225, 142.251.39.129, 172.217.171.97, 172.217.20.65, 172.217.23.225
AAAA
2a00:1450:4001:c15::84, 2a00:1450:4001:c21::84, 2a00:1450:4001:c25::84, 2a00:1450:400c:c00::84, 2a00:1450:400c:c0c::84, 2a00:1450:400c:c1d::84, 2a00:1450:400e:807::2001, 2a00:1450:400e:809::2001
MX
—
NS
ns1.google.com, ns2.google.com, ns3.google.com, ns4.google.com
TXT
v=spf1 include:_spf.google.com ?all
CNAME
—
CAA
0 issue "pki.goog"
WHOIS / Registration
Registration data planned
Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.
Subdomains
Subdomain enumeration pending
Every subdomain ever issued a TLS cert under this apex — extracted from Certificate Transparency logs, our own scan observations and body references.
Tech Stack
Tech detection pending
Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.
TLS Certificates
Subject: 89.125.73.34.bc.googleusercontent.com
Issuer: 89.125.73.34.bc.googleusercontent.com
SANs: 89.125.73.34.bc.googleusercontent.com
Subject: DNS Filter Proxy
Issuer: Company DNS Filter CA
SANs: *.apple.com, *.fotoscapes.com, *.ggpht.com, *.google.com, *.googleapis.com, *.googleusercontent.com, *.gstatic.com, *.samsung.com, *.samsungapps.com, *.samsungcloud.com, *.yimg.com, *.ytimg.com, apple.com, ggpht.com, googleapis.com, googleusercontent.com, gstatic.com, samsungcloud.com, samsungpay.com
Subject: 253.123.95.34.bc.googleusercontent.com
Issuer: WR3
SANs: 253.123.95.34.bc.googleusercontent.com
Subject: 145.56.245.35.bc.googleusercontent.com
Issuer: 145.56.245.35.bc.googleusercontent.com
SANs: 145.56.245.35.bc.googleusercontent.com
Subject: 238.220.51.34.bc.googleusercontent.com
Issuer: minica root ca 3372bb
SANs: 238.220.51.34.bc.googleusercontent.com
Subject: 64.113.45.34.bc.googleusercontent.com
Issuer: 64.113.45.34.bc.googleusercontent.com
SANs: 64.113.45.34.bc.googleusercontent.com
Subject: 200.66.23.34.bc.googleusercontent.com
Issuer: 200.66.23.34.bc.googleusercontent.com
SANs: 200.66.23.34.bc.googleusercontent.com
Subject: 45.20.227.35.bc.googleusercontent.com
Issuer: 45.20.227.35.bc.googleusercontent.com
SANs: 45.20.227.35.bc.googleusercontent.com
Subject: 115.122.229.35.bc.googleusercontent.com
Issuer: 115.122.229.35.bc.googleusercontent.com
SANs: 115.122.229.35.bc.googleusercontent.com
Subject: 145.56.245.35.bc.googleusercontent.com
Issuer: 145.56.245.35.bc.googleusercontent.com
SANs: 145.56.245.35.bc.googleusercontent.com
Subject: 117.44.160.34.bc.googleusercontent.com
Issuer: OptumInternalIssuingCA2
SANs: 117.44.160.34.bc.googleusercontent.com, uhc-payer-product-mcp-client-dev.optum.com, uhc-payer-product-mcp-client-stage.optum.com, uhc-payer-product-mcp-server-dev.optum.com, uhc-payer-product-mcp-server-stage.optum.com, uhc-payer-product-mcp-ui-dev.optum.com, uhc-payer-product-mcp-ui-stage.optum.com
IPs Citing This Domain
Hosts whose HTML body references this domain. Strong signal for origin/mirror/embed discovery.
194.35.120.138:443
href · ×2
162.251.123.144:443
href · ×1
193.19.177.205:443
href · ×1
79.99.45.231:80
href · ×1
217.142.135.58:8888
href · ×1
67.23.251.67:80
href · ×1
46.105.167.224:80
href · ×1
18.219.19.92:80
href · ×1
81.171.7.67:80
href · ×1
95.217.187.71:8081
href · ×1
162.251.123.144:80
href · ×1
51.161.47.103:80
href · ×1
Origin / IP-Leak
USP
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
| Origin IP | Origin ASN | CDN ASN | Confidence | Reasoning |
|---|---|---|---|---|
| 38.25.121.215 | AS265691 | AS15169 | 95% | cert 3a787270… served by 38.25.121.215 (AS265691) carries SAN play-lh.googleusercontent.com which currently resolves through Google (AS15169) at 142.251.39.150, 2a00:1450:400e:804::2016, 172.217.23.246, 2a00:1450:400e:809::2016 |
| 202.234.250.205 | AS4713 | AS15169 | 95% | cert 3a787270… served by 202.234.250.205 (AS4713) carries SAN play-lh.googleusercontent.com which currently resolves through Google (AS15169) at 142.251.39.150, 2a00:1450:400e:804::2016, 172.217.23.246, 2a00:1450:400e:809::2016 |
| 72.47.49.109 | AS19108 | AS15169 | 95% | cert 3a787270… served by 72.47.49.109 (AS19108) carries SAN play-lh.googleusercontent.com which currently resolves through Google (AS15169) at 142.251.39.150, 2a00:1450:400e:804::2016, 172.217.23.246, 2a00:1450:400e:809::2016 |
| 125.11.188.78 | AS9824 | AS15169 | 95% | cert 3a787270… served by 125.11.188.78 (AS9824) carries SAN play-lh.googleusercontent.com which currently resolves through Google (AS15169) at 142.251.39.150, 2a00:1450:400e:804::2016, 172.217.23.246, 2a00:1450:400e:809::2016 |
| 110.164.22.13 | AS45758 | AS15169 | 95% | cert 3a787270… served by 110.164.22.13 (AS45758) carries SAN play-lh.googleusercontent.com which currently resolves through Google (AS15169) at 142.251.39.150, 2a00:1450:400e:804::2016, 172.217.23.246, 2a00:1450:400e:809::2016 |
| 202.179.116.12 | AS9534 | AS15169 | 95% | cert 3a787270… served by 202.179.116.12 (AS9534) carries SAN play-lh.googleusercontent.com which currently resolves through Google (AS15169) at 142.251.39.150, 2a00:1450:400e:804::2016, 172.217.23.246, 2a00:1450:400e:809::2016 |
| 177.129.87.137 | AS262393 | AS15169 | 95% | cert 3a787270… served by 177.129.87.137 (AS262393) carries SAN play-lh.googleusercontent.com which currently resolves through Google (AS15169) at 142.251.39.150, 2a00:1450:400e:804::2016, 172.217.23.246, 2a00:1450:400e:809::2016 |
| 181.106.71.15 | AS7303 | AS15169 | 95% | cert 3a787270… served by 181.106.71.15 (AS7303) carries SAN play-lh.googleusercontent.com which currently resolves through Google (AS15169) at 142.251.39.150, 2a00:1450:400e:804::2016, 172.217.23.246, 2a00:1450:400e:809::2016 |
| 117.236.234.204 | AS9829 | AS15169 | 95% | cert 3ebef45c… served by 117.236.234.204 (AS9829) carries SAN play-lh.googleusercontent.com which currently resolves through Google (AS15169) at 2a00:1450:400e:804::2016, 142.251.39.150, 2a00:1450:400e:806::2016, 2a00:1450:4017:822::2016 |
| 179.40.133.73 | AS22927 | AS15169 | 95% | cert 3ebef45c… served by 179.40.133.73 (AS22927) carries SAN play-lh.googleusercontent.com which currently resolves through Google (AS15169) at 2a00:1450:400e:804::2016, 142.251.39.150, 2a00:1450:400e:806::2016, 2a00:1450:4017:822::2016 |
| 150.129.106.158 | AS45916 | AS15169 | 95% | cert 3a787270… served by 150.129.106.158 (AS45916) carries SAN play-lh.googleusercontent.com which currently resolves through Google (AS15169) at 2a00:1450:400e:804::2016, 142.251.39.150, 2a00:1450:400e:806::2016, 2a00:1450:4017:822::2016 |
| 31.46.18.17 | AS5483 | AS15169 | 95% | cert 3ebef45c… served by 31.46.18.17 (AS5483) carries SAN play-lh.googleusercontent.com which currently resolves through Google (AS15169) at 2a00:1450:400e:804::2016, 142.251.39.150, 2a00:1450:400e:806::2016, 2a00:1450:4017:822::2016 |
| 62.75.23.143 | AS12713 | AS15169 | 95% | cert 3ebef45c… served by 62.75.23.143 (AS12713) carries SAN play-lh.googleusercontent.com which currently resolves through Google (AS15169) at 2a00:1450:400e:804::2016, 142.251.39.150, 2a00:1450:400e:806::2016, 2a00:1450:4017:822::2016 |
| 187.84.16.110 | AS53051 | AS15169 | 95% | cert 3ebef45c… served by 187.84.16.110 (AS53051) carries SAN play-lh.googleusercontent.com which currently resolves through Google (AS15169) at 2a00:1450:400e:804::2016, 142.251.39.150, 2a00:1450:400e:806::2016, 2a00:1450:4017:822::2016 |
| 177.129.16.77 | AS262807 | AS15169 | 95% | cert 3ebef45c… served by 177.129.16.77 (AS262807) carries SAN play-lh.googleusercontent.com which currently resolves through Google (AS15169) at 2a00:1450:400e:804::2016, 142.251.39.150, 2a00:1450:400e:806::2016, 2a00:1450:4017:822::2016 |
| 201.0.225.90 | AS27699 | AS15169 | 95% | cert 3a787270… served by 201.0.225.90 (AS27699) carries SAN play-lh.googleusercontent.com which currently resolves through Google (AS15169) at 2a00:1450:400e:806::2016, 142.251.39.150, 2a00:1450:400e:804::2016, 2a00:1450:4017:822::2016 |
| 90.222.207.85 | AS5607 | AS15169 | 95% | cert 3ebef45c… served by 90.222.207.85 (AS5607) carries SAN play-lh.googleusercontent.com which currently resolves through Google (AS15169) at 2a00:1450:400e:806::2016, 142.251.39.150, 2a00:1450:400e:804::2016, 2a00:1450:4017:822::2016 |
| 2.228.46.205 | AS12874 | AS15169 | 95% | cert 3ebef45c… served by 2.228.46.205 (AS12874) carries SAN play-lh.googleusercontent.com which currently resolves through Google (AS15169) at 2a00:1450:400e:804::2016, 142.251.39.150, 2a00:1450:4017:822::2016, 2a00:1450:400e:811::2016 |
| 105.73.187.13 | AS36884 | AS15169 | 95% | cert 3ebef45c… served by 105.73.187.13 (AS36884) carries SAN play-lh.googleusercontent.com which currently resolves through Google (AS15169) at 2a00:1450:400e:804::2016, 142.251.39.150, 2a00:1450:4017:822::2016, 2a00:1450:400e:811::2016 |
| 186.232.120.142 | AS263055 | AS15169 | 95% | cert 3ebef45c… served by 186.232.120.142 (AS263055) carries SAN play-lh.googleusercontent.com which currently resolves through Google (AS15169) at 2a00:1450:400e:804::2016, 142.251.39.150, 2a00:1450:4017:822::2016, 2a00:1450:400e:811::2016 |
| 201.46.252.13 | AS28573 | AS15169 | 95% | cert 3ebef45c… served by 201.46.252.13 (AS28573) carries SAN play-lh.googleusercontent.com which currently resolves through Google (AS15169) at 2a00:1450:400e:804::2016, 142.251.39.150, 2a00:1450:4017:822::2016, 2a00:1450:400e:811::2016 |
| 79.142.198.140 | AS44291 | AS15169 | 95% | cert 3ebef45c… served by 79.142.198.140 (AS44291) carries SAN play-lh.googleusercontent.com which currently resolves through Google (AS15169) at 2a00:1450:400e:804::2016, 142.251.39.150, 2a00:1450:4017:822::2016, 2a00:1450:400e:811::2016 |
| 223.223.158.44 | AS45775 | AS15169 | 95% | cert 3ebef45c… served by 223.223.158.44 (AS45775) carries SAN play-lh.googleusercontent.com which currently resolves through Google (AS15169) at 2a00:1450:400e:804::2016, 142.251.39.150, 2a00:1450:4017:822::2016, 2a00:1450:400e:811::2016 |
| 187.7.224.158 | AS8167 | AS15169 | 95% | cert 3ebef45c… served by 187.7.224.158 (AS8167) carries SAN play-lh.googleusercontent.com which currently resolves through Google (AS15169) at 2a00:1450:400e:804::2016, 142.251.39.150, 2a00:1450:4017:822::2016, 2a00:1450:400e:811::2016 |
| 110.164.40.237 | AS45758 | AS15169 | 95% | cert 3ebef45c… served by 110.164.40.237 (AS45758) carries SAN play-lh.googleusercontent.com which currently resolves through Google (AS15169) at 2a00:1450:400e:804::2016, 142.251.39.150, 2a00:1450:4017:822::2016, 2a00:1450:400e:811::2016 |
Threat Intelligence
Domain threat-intel pending
Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.
History
Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.
| Type | Value | First seen | Last seen |
|---|---|---|---|
| AAAA | 2a00:1450:400c:c00::84 | 2026-05-26 03:07:47.855 | 2026-05-27 11:16:08.370 |
| NS | ns2.google.com | 2026-05-26 03:07:47.855 | 2026-07-28 19:31:00.676 |
| NS | ns4.google.com | 2026-05-26 03:07:47.855 | 2026-07-28 19:31:00.676 |
| TXT | v=spf1 include:_spf.google.com ?all | 2026-05-26 03:07:47.855 | 2026-07-28 19:31:00.676 |
| NS | ns3.google.com | 2026-05-26 03:07:47.855 | 2026-07-28 19:31:00.676 |
| NS | ns1.google.com | 2026-05-26 03:07:47.855 | 2026-07-28 19:31:00.676 |
| CAA | 0 issue "pki.goog" | 2026-05-26 03:07:47.855 | 2026-07-28 19:31:00.676 |
| A | 173.194.76.132 | 2026-05-26 03:07:47.855 | 2026-05-27 12:59:06.588 |
| AAAA | 2a00:1450:400c:c0c::84 | 2026-05-26 11:33:13.424 | 2026-05-27 12:59:06.588 |
| A | 192.178.183.132 | 2026-05-26 11:33:13.424 | 2026-05-26 11:51:50.538 |
| AAAA | 2a00:1450:4001:c25::84 | 2026-05-26 11:51:50.538 | 2026-05-26 11:51:50.538 |
| AAAA | 2a00:1450:4001:c21::84 | 2026-05-26 18:41:28.250 | 2026-05-26 18:41:28.250 |
| A | 142.251.168.132 | 2026-05-26 18:41:28.250 | 2026-05-27 02:58:25.327 |
| AAAA | 2a00:1450:400c:c1d::84 | 2026-05-27 02:58:25.327 | 2026-05-27 02:58:25.327 |
| AAAA | 2a00:1450:4025:401::84 | 2026-06-15 12:16:18.952 | 2026-06-15 12:16:18.952 |
| A | 142.251.209.225 | 2026-06-15 12:16:18.952 | 2026-06-15 12:16:18.952 |
| A | 142.251.39.129 | 2026-06-15 13:14:09.725 | 2026-07-15 20:04:13.980 |
| AAAA | 2a00:1450:400e:807::2001 | 2026-06-15 13:14:09.725 | 2026-07-15 20:04:13.980 |
| AAAA | 2a00:1450:400e:80b::2001 | 2026-06-17 19:31:59.974 | 2026-06-24 00:12:22.073 |
| A | 142.251.110.132 | 2026-06-17 19:31:59.974 | 2026-06-17 19:31:59.974 |
| A | 74.125.206.132 | 2026-06-21 12:40:55.957 | 2026-06-21 12:40:55.957 |
| AAAA | 2a00:1450:400e:813::2001 | 2026-06-21 12:40:55.957 | 2026-06-21 12:40:55.957 |
| A | 172.217.171.97 | 2026-06-24 00:09:24.930 | 2026-06-24 00:12:22.073 |
| A | 142.250.180.1 | 2026-07-17 16:17:23.228 | 2026-07-28 19:31:00.676 |
| AAAA | 2a00:1450:400e:809::2001 | 2026-07-17 16:17:23.228 | 2026-07-28 19:31:00.676 |
| AAAA | 2a00:1450:4017:806::2001 | 2026-07-21 15:07:11.688 | 2026-07-21 15:07:11.688 |
| A | 172.217.20.65 | 2026-07-21 15:07:11.688 | 2026-07-21 15:07:11.688 |
| A | 172.217.23.225 | 2026-07-21 21:52:37.258 | 2026-07-21 21:52:37.258 |
| AAAA | 2a00:1450:4001:c15::84 | 2026-07-27 20:33:50.982 | 2026-07-27 20:33:50.982 |
| A | 66.102.1.132 | 2026-07-28 14:19:27.748 | 2026-07-28 14:19:27.748 |