Domain

forcepoint.net

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

DNS Check HTTP Check Run Full Scan .net TLD

Run a live full scan of forcepoint.net

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now

Hosting IPs

A/AAAA targets

Subdomains

CT + scan + body

Record Types

seen in DNS

Observed Certs

in our scans

DNS Records

23.185.0.4

AAAA

2620:12a:8000::4, 2620:12a:8001::4

10 cluster-a.mailcontrol.com, 10 cluster-j.mailcontrol.com

ns-a.blackspider.com, ns-g.blackspider.com, ns-r.blackspider.com

TXT

1bb10abfcd9e44fdbf61b6a221e20031

CNAME

—

CAA

—

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.

Subdomain	Resolves to	Last seen
scim.cloud-web.services.forcepoint.net	13.135.223.126 3.9.234.168 51.24.33.96 16.61.92.152 +2	2026-06-06 03:15:29.645
hybrid-web.global.forcepoint.net	85.115.33.150 85.115.56.150 85.115.58.150 157.167.61.150	2026-07-28 07:00:33.211
iq.global.forcepoint.net	85.115.33.169 85.115.56.169 85.115.58.169 157.167.61.169	2026-07-28 07:00:33.211
webdefence.global.forcepoint.net	85.115.33.180 85.115.56.180 85.115.58.180 157.167.61.180	2026-07-28 07:00:33.211
forcepoint.net	23.185.0.4 2620:12a:8000::4 2620:12a:8001::4	2026-07-28 07:00:33.211
www.forcepoint.net	23.185.0.4 2620:12a:8000::4 2620:12a:8001::4	2026-06-20 16:59:36.518
efficacy.forcepoint.net	10.86.1.233 10.86.1.232	2026-06-20 02:04:04.719
http-euw1.aws.efc.forcepoint.net	10.145.1.22 10.145.3.4	2026-07-16 04:05:32.646
http-public-euw1.aws.efc.forcepoint.net	54.220.232.51 63.35.34.42	2026-07-16 04:05:32.646
admin.forcepoint.net	85.115.52.220	2026-06-20 16:59:36.518
bluesky.forcepoint.net	85.115.52.220	2026-06-20 16:59:36.518
cdk.forcepoint.net	85.115.52.220	2026-06-20 16:59:36.518
cdp-dev-uk.aws.services.forcepoint.net		1970-01-01 00:00:00.000
dev-rd.forcepoint.net		1970-01-01 00:00:00.000
dev.services.forcepoint.net		1970-01-01 00:00:00.000
dev.tsc.forcepoint.net		1970-01-01 00:00:00.000
download.global.forcepoint.net	85.115.56.154	2026-06-20 16:59:36.518
infra-dev.forcepoint.net		1970-01-01 00:00:00.000
pki.forcepoint.net	85.115.52.220	2026-06-20 16:59:36.518
portal.forcepoint.net		1970-01-01 00:00:00.000
rbi.dev.forcepoint.net		1970-01-01 00:00:00.000
scim-wsc2220update.cdp-dev-uk.aws.services.forcepoint.net		1970-01-01 00:00:00.000
scim-wsc2533fixpo.cdp-dev-uk.aws.services.forcepoint.net		1970-01-01 00:00:00.000
scim-wsc6434depend.cdp-dev-uk.aws.services.forcepoint.net		1970-01-01 00:00:00.000
scim-wsc6434resolv.cdp-dev-uk.aws.services.forcepoint.net		1970-01-01 00:00:00.000
sync.forcepoint.net		1970-01-01 00:00:00.000
www.scim.cloud-web.services.forcepoint.net		1970-01-01 00:00:00.000

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

116.50.58.169:443 85b3fbad84dc…

Subject: *.blackspider.com

Issuer: Sectigo Public Server Authentication CA OV R36

SANs: *.blackspider.com, *.forcepoint.net, *.hybrid-web.global.blackspider.com, *.hybrid-web.global.forcepoint.net, *.iq.global.forcepoint.net, *.iq.global.websense.net, *.webdefence.global.blackspider.com, *.webdefence.global.forcepoint.net, blackspider.com, forcepoint.net, hybrid-web.global.blackspider.com, hybrid-web.global.forcepoint.net, iq.global.forcepoint.net, iq.global.websense.net, webdefence.global.blackspider.com, webdefence.global.forcepoint.net

157.167.61.182:443 85b3fbad84dc…

Subject: *.blackspider.com

Issuer: Sectigo Public Server Authentication CA OV R36

157.167.83.182:443 85b3fbad84dc…

Subject: *.blackspider.com

Issuer: Sectigo Public Server Authentication CA OV R36

157.167.60.169:443 85b3fbad84dc…

Subject: *.blackspider.com

Issuer: Sectigo Public Server Authentication CA OV R36

157.167.28.182:443 85b3fbad84dc…

Subject: *.blackspider.com

Issuer: Sectigo Public Server Authentication CA OV R36

157.167.130.169:443 85b3fbad84dc…

Subject: *.blackspider.com

Issuer: Sectigo Public Server Authentication CA OV R36

157.167.20.161:443 85b3fbad84dc…

Subject: *.blackspider.com

Issuer: Sectigo Public Server Authentication CA OV R36

157.167.76.171:443 85b3fbad84dc…

Subject: *.blackspider.com

Issuer: Sectigo Public Server Authentication CA OV R36

157.167.78.169:443 85b3fbad84dc…

Subject: *.blackspider.com

Issuer: Sectigo Public Server Authentication CA OV R36

157.167.130.171:443 85b3fbad84dc…

Subject: *.blackspider.com

Issuer: Sectigo Public Server Authentication CA OV R36

192.151.178.169:443 85b3fbad84dc…

Subject: *.blackspider.com

Issuer: Sectigo Public Server Authentication CA OV R36

157.167.90.161:443 85b3fbad84dc…

Subject: *.blackspider.com

Issuer: Sectigo Public Server Authentication CA OV R36

208.87.236.182:443 85b3fbad84dc…

Subject: *.blackspider.com

Issuer: Sectigo Public Server Authentication CA OV R36

157.167.88.182:443 85b3fbad84dc…

Subject: *.blackspider.com

Issuer: Sectigo Public Server Authentication CA OV R36

157.167.58.171:443 85b3fbad84dc…

Subject: *.blackspider.com

Issuer: Sectigo Public Server Authentication CA OV R36

157.167.117.171:443 85b3fbad84dc…

Subject: *.blackspider.com

Issuer: Sectigo Public Server Authentication CA OV R36

157.167.19.182:443 85b3fbad84dc…

Subject: *.blackspider.com

Issuer: Sectigo Public Server Authentication CA OV R36

116.50.62.182:443 85b3fbad84dc…

Subject: *.blackspider.com

Issuer: Sectigo Public Server Authentication CA OV R36

208.87.234.172:443 85b3fbad84dc…

Subject: *.blackspider.com

Issuer: Sectigo Public Server Authentication CA OV R36

157.167.109.182:443 85b3fbad84dc…

Subject: *.blackspider.com

Issuer: Sectigo Public Server Authentication CA OV R36

85.115.45.171:443 85b3fbad84dc…

Subject: *.blackspider.com

Issuer: Sectigo Public Server Authentication CA OV R36

208.87.234.182:443 85b3fbad84dc…

Subject: *.blackspider.com

Issuer: Sectigo Public Server Authentication CA OV R36

157.167.87.171:443 85b3fbad84dc…

Subject: *.blackspider.com

Issuer: Sectigo Public Server Authentication CA OV R36

157.167.11.171:443 85b3fbad84dc…

Subject: *.blackspider.com

Issuer: Sectigo Public Server Authentication CA OV R36

157.167.37.161:443 85b3fbad84dc…

Subject: *.blackspider.com

Issuer: Sectigo Public Server Authentication CA OV R36

157.167.46.182:443 85b3fbad84dc…

Subject: *.blackspider.com

Issuer: Sectigo Public Server Authentication CA OV R36

157.167.111.182:443 85b3fbad84dc…

Subject: *.blackspider.com

Issuer: Sectigo Public Server Authentication CA OV R36

157.167.85.169:443 85b3fbad84dc…

Subject: *.blackspider.com

Issuer: Sectigo Public Server Authentication CA OV R36

157.167.102.171:443 85b3fbad84dc…

Subject: *.blackspider.com

Issuer: Sectigo Public Server Authentication CA OV R36

157.167.104.182:443 85b3fbad84dc…

Subject: *.blackspider.com

Issuer: Sectigo Public Server Authentication CA OV R36

IPs Citing This Domain

No citing IPs found yet

As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

Origin IP	Origin ASN	CDN ASN	Confidence	Reasoning
157.167.110.171	AS44444	AS54113	95%	cert 85b3fbad… served by 157.167.110.171 (AS44444) carries SAN forcepoint.net which currently resolves through Fastly (AS54113) at 2620:12a:8001::4, 2620:12a:8000::4, 23.185.0.4
157.167.60.171	AS44444	AS54113	95%	cert 85b3fbad… served by 157.167.60.171 (AS44444) carries SAN forcepoint.net which currently resolves through Fastly (AS54113) at 2620:12a:8001::4, 2620:12a:8000::4, 23.185.0.4
157.167.60.161	AS44444	AS54113	95%	cert 85b3fbad… served by 157.167.60.161 (AS44444) carries SAN forcepoint.net which currently resolves through Fastly (AS54113) at 2620:12a:8001::4, 2620:12a:8000::4, 23.185.0.4
157.167.123.169	AS44444	AS54113	95%	cert 85b3fbad… served by 157.167.123.169 (AS44444) carries SAN forcepoint.net which currently resolves through Fastly (AS54113) at 2620:12a:8001::4, 2620:12a:8000::4, 23.185.0.4
157.167.96.169	AS44444	AS54113	95%	cert 85b3fbad… served by 157.167.96.169 (AS44444) carries SAN forcepoint.net which currently resolves through Fastly (AS54113) at 2620:12a:8001::4, 2620:12a:8000::4, 23.185.0.4
157.167.46.161	AS44444	AS54113	95%	cert 85b3fbad… served by 157.167.46.161 (AS44444) carries SAN forcepoint.net which currently resolves through Fastly (AS54113) at 2620:12a:8001::4, 2620:12a:8000::4, 23.185.0.4
157.167.38.171	AS44444	AS54113	95%	cert 85b3fbad… served by 157.167.38.171 (AS44444) carries SAN forcepoint.net which currently resolves through Fastly (AS54113) at 2620:12a:8001::4, 2620:12a:8000::4, 23.185.0.4
157.167.60.182	AS44444	AS54113	95%	cert 85b3fbad… served by 157.167.60.182 (AS44444) carries SAN forcepoint.net which currently resolves through Fastly (AS54113) at 2620:12a:8001::4, 2620:12a:8000::4, 23.185.0.4
157.167.123.161	AS44444	AS54113	95%	cert 85b3fbad… served by 157.167.123.161 (AS44444) carries SAN forcepoint.net which currently resolves through Fastly (AS54113) at 2620:12a:8001::4, 2620:12a:8000::4, 23.185.0.4
157.167.61.161	AS44444	AS54113	95%	cert 85b3fbad… served by 157.167.61.161 (AS44444) carries SAN forcepoint.net which currently resolves through Fastly (AS54113) at 2620:12a:8001::4, 2620:12a:8000::4, 23.185.0.4
157.167.51.182	AS44444	AS54113	95%	cert 85b3fbad… served by 157.167.51.182 (AS44444) carries SAN forcepoint.net which currently resolves through Fastly (AS54113) at 2620:12a:8001::4, 2620:12a:8000::4, 23.185.0.4
157.167.51.171	AS44444	AS54113	95%	cert 85b3fbad… served by 157.167.51.171 (AS44444) carries SAN forcepoint.net which currently resolves through Fastly (AS54113) at 2620:12a:8001::4, 2620:12a:8000::4, 23.185.0.4
85.115.63.182	AS44444	AS54113	95%	cert 85b3fbad… served by 85.115.63.182 (AS44444) carries SAN forcepoint.net which currently resolves through Fastly (AS54113) at 2620:12a:8001::4, 2620:12a:8000::4, 23.185.0.4
157.167.57.171	AS44444	AS54113	95%	cert 85b3fbad… served by 157.167.57.171 (AS44444) carries SAN forcepoint.net which currently resolves through Fastly (AS54113) at 2620:12a:8001::4, 2620:12a:8000::4, 23.185.0.4
157.167.42.161	AS44444	AS54113	95%	cert 85b3fbad… served by 157.167.42.161 (AS44444) carries SAN forcepoint.net which currently resolves through Fastly (AS54113) at 2620:12a:8001::4, 2620:12a:8000::4, 23.185.0.4
157.167.14.182	AS44444	AS54113	95%	cert 85b3fbad… served by 157.167.14.182 (AS44444) carries SAN forcepoint.net which currently resolves through Fastly (AS54113) at 2620:12a:8001::4, 2620:12a:8000::4, 23.185.0.4
157.167.45.171	AS44444	AS54113	95%	cert 85b3fbad… served by 157.167.45.171 (AS44444) carries SAN forcepoint.net which currently resolves through Fastly (AS54113) at 2620:12a:8001::4, 2620:12a:8000::4, 23.185.0.4
157.167.47.171	AS44444	AS54113	95%	cert 85b3fbad… served by 157.167.47.171 (AS44444) carries SAN forcepoint.net which currently resolves through Fastly (AS54113) at 2620:12a:8001::4, 2620:12a:8000::4, 23.185.0.4
157.167.120.182	AS44444	AS54113	95%	cert 85b3fbad… served by 157.167.120.182 (AS44444) carries SAN forcepoint.net which currently resolves through Fastly (AS54113) at 2620:12a:8001::4, 2620:12a:8000::4, 23.185.0.4
157.167.121.161	AS44444	AS54113	95%	cert 85b3fbad… served by 157.167.121.161 (AS44444) carries SAN forcepoint.net which currently resolves through Fastly (AS54113) at 2620:12a:8001::4, 2620:12a:8000::4, 23.185.0.4
157.167.88.182	AS44444	AS54113	95%	cert 85b3fbad… served by 157.167.88.182 (AS44444) carries SAN forcepoint.net which currently resolves through Fastly (AS54113) at 2620:12a:8001::4, 2620:12a:8000::4, 23.185.0.4
157.167.131.182	AS44444	AS54113	95%	cert 85b3fbad… served by 157.167.131.182 (AS44444) carries SAN forcepoint.net which currently resolves through Fastly (AS54113) at 2620:12a:8001::4, 2620:12a:8000::4, 23.185.0.4
157.167.56.169	AS44444	AS54113	95%	cert 85b3fbad… served by 157.167.56.169 (AS44444) carries SAN forcepoint.net which currently resolves through Fastly (AS54113) at 2620:12a:8001::4, 2620:12a:8000::4, 23.185.0.4
157.167.107.182	AS44444	AS54113	95%	cert 85b3fbad… served by 157.167.107.182 (AS44444) carries SAN forcepoint.net which currently resolves through Fastly (AS54113) at 2620:12a:8001::4, 2620:12a:8000::4, 23.185.0.4
157.167.89.182	AS44444	AS54113	95%	cert 85b3fbad… served by 157.167.89.182 (AS44444) carries SAN forcepoint.net which currently resolves through Fastly (AS54113) at 2620:12a:8001::4, 2620:12a:8000::4, 23.185.0.4

CT-Log Evidence

Certificates from public Certificate Transparency logs whose subject or SAN names this domain — including historic certs we never observed live.

def4d88a2e4d3c03… google · xenon2026h2

Subject: forcepoint.net

Issuer: Sectigo Public Server Authentication CA OV R36

SANs: forcepoint.net, *.forcepoint.net, *.global.forcepoint.net, *.shm.global.forcepoint.net, *.threatscope.websense.net, *.websense.net, global.forcepoint.net, shm-eu.global.forcepoint.net, shm-uk.global.forcepoint.net, shm-us.global.forcepoint.net, shm.global.forcepoint.net, threatscope.websense.net, websense.net

Valid: 2025-10-06 00:00:00 → 2026-10-06 23:59:59

f19bca419b500da3… google · xenon2026h2

Subject: forcepoint.net

Issuer: Sectigo Public Server Authentication CA OV R36

Valid: 2025-10-06 00:00:00 → 2026-10-06 23:59:59

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.

Type	Value	First seen	Last seen
A	23.185.0.4	2026-05-25 21:38:03.363	2026-07-28 07:00:33.211
AAAA	2620:12a:8000::4	2026-05-25 21:38:03.363	2026-07-28 07:00:33.211
AAAA	2620:12a:8001::4	2026-05-25 21:38:03.363	2026-07-28 07:00:33.211
NS	ns-a.blackspider.com	2026-05-26 00:24:59.887	2026-07-28 07:00:33.211
MX	10 cluster-j.mailcontrol.com	2026-05-26 00:24:59.887	2026-07-28 07:00:33.211
NS	ns-g.blackspider.com	2026-05-26 00:24:59.887	2026-07-28 07:00:33.211
NS	ns-r.blackspider.com	2026-05-26 00:24:59.887	2026-07-28 07:00:33.211
MX	10 cluster-a.mailcontrol.com	2026-05-26 00:24:59.887	2026-07-28 07:00:33.211
TXT	1bb10abfcd9e44fdbf61b6a221e20031	2026-05-26 00:24:59.887	2026-07-28 07:00:33.211