Domain

msg.group

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

DNS Check HTTP Check Run Full Scan .group TLD

Run a live full scan of msg.group

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now

Hosting IPs

A/AAAA targets

Subdomains

249

CT + scan + body

Record Types

seen in DNS

Observed Certs

in our scans

DNS Records

18.153.171.24, 3.71.246.79, 63.178.146.175

AAAA

—

10 msg-group.mail.protection.outlook.com

a.ns14.net, b.ns14.net, c.ns14.net, d.ns14.net

TXT

MS=ms52071478, SAML=e26a6e91621aa507eee4f4bd365f3eef3f662a842eec7f650559aa6e7f600f38, anthropic-domain-verification-1aee5n=XfzQFXJA5QmgCsEanPpDskinn, atlassian-domain-verification=R97wJt48YhV7e60bdGxrjFj0MCtq27rMBuNkvK6k1ULjULFn0HyamHJzSSnLnymN, atlassian-domain-verification=scXeJ0PcRfcv6USEPAghoODMaLmCIKa8RA3s5CwWlIWzYs/ZiUAdsxZT5npeWZFB, atlassian-sending-domain-verification=9ee4f68a-1f7a-43a1-ac84-486a69fda4de, docker-verification=024fefdd-10ff-43a8-a505-5f4cf376cf74, docusign=73dd2f8b-b2b4-4d1b-8f56-56f4f9f44eca

CNAME

—

CAA

—

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.

Subdomain	Resolves to	Last seen
autodiscover.msg.group	40.99.204.184 40.99.205.8 52.97.250.200 40.99.204.200 +4	2026-07-27 20:47:59.657
help.msg.group	185.199.109.153 185.199.111.153 185.199.110.153 185.199.108.153 +4	2026-07-27 20:47:59.657
www.msg.group	151.101.66.132 2a04:4e42:600::644 151.101.2.132 151.101.130.132 +4	2026-07-27 20:47:59.657
codiq.msg.group	51.225.76.78 51.225.91.66 51.225.74.165 51.225.107.159 +2	2026-07-25 07:40:08.516
blog.msg.group	199.60.103.2 199.60.103.254 2606:2c40::c73c:67fe 2606:2c40::c73c:6702	2026-07-27 20:47:59.657
news.msg.group	199.60.103.2 199.60.103.254 2606:2c40::c73c:6702 2606:2c40::c73c:67fe	2026-07-27 20:47:59.657
advisors.msg.group	63.178.146.175 18.153.171.24 3.71.246.79	2026-06-19 03:56:02.895
author.dev.msg.group	63.176.187.203 3.121.72.74 63.180.86.40	2026-06-04 15:07:07.285
author.msg.group	63.178.146.175 3.71.246.79 18.153.171.24	2026-06-19 05:29:44.702
author.uat.msg.group	3.121.72.74 63.176.187.203 63.180.86.40	2026-06-04 17:05:50.082
contenthub.dev.msg.group	63.176.187.203 63.180.86.40 3.121.72.74	2026-06-04 15:07:07.285
contenthub.uat.msg.group	3.121.72.74 63.176.187.203 63.180.86.40	2026-06-04 17:05:50.082
msg.group	63.178.146.175 18.153.171.24 3.71.246.79	2026-07-15 20:04:13.980
wemakeithappen.msg.group	3.67.129.146 3.121.153.181 3.70.74.238	2026-07-16 11:59:06.443
www.dev.inscom.msg.group	63.176.187.203 63.180.86.40 3.121.72.74	2026-06-04 15:07:07.285
www.dev.msg.group	3.121.72.74 63.176.187.203 63.180.86.40	2026-06-04 15:07:07.285
www.uat.inscom.msg.group	63.180.86.40 3.121.72.74 63.176.187.203	2026-06-04 17:05:50.082
www.uat.msg.group	3.121.72.74 63.176.187.203 63.180.86.40	2026-06-04 17:05:50.082
www2.msg.group	63.178.146.175 18.153.171.24 3.71.246.79	2026-07-27 20:47:59.657
batch.marsy-pension.vdp.uat.eu-1.saas.msg.group	18.184.238.102 3.121.84.7	2026-06-20 00:49:46.808
d7-batch-life.sit.zurich.saas.msg.group	10.180.102.160 10.180.102.250	2026-07-15 12:49:38.581
d7-batch.css.saas.msg.group	35.156.88.124 35.158.224.195	2026-06-18 03:17:54.405
d7-batch.presit.zurich.saas.msg.group	10.245.51.25 10.245.51.13	2026-07-21 02:50:05.177
d7-batch.sit.zurich.saas.msg.group	10.245.51.13 10.245.51.25	2026-07-15 12:18:38.203
d7-batch.uat.css.saas.msg.group	3.64.243.63 52.29.224.231	2026-06-01 00:43:12.023
d7-cockpit.uat.css.saas.msg.group	52.29.224.231 3.64.243.63	2026-06-01 00:43:12.023
d7-lm-batch.uat.css.saas.msg.group	52.29.224.231 3.64.243.63	2026-06-01 00:43:12.023
d7-transform-life.sit.zurich.saas.msg.group	10.180.102.160 10.180.102.250	2026-07-15 12:32:10.669
d7-transform.sit.zurich.saas.msg.group	10.245.51.13 10.245.51.25	2026-07-15 12:32:10.669
d7-transform.uat.css.saas.msg.group	52.29.224.231 3.64.243.63	2026-06-01 00:43:12.023
d7-transformui-life.sit.zurich.saas.msg.group	10.180.102.250 10.180.102.160	2026-07-15 12:40:44.777
d7-transformui.css.saas.msg.group	35.158.224.195 35.156.88.124	2026-06-18 03:17:54.405
d7-transformui.sit.zurich.saas.msg.group	10.245.51.13 10.245.51.25	2026-07-15 12:49:38.581
d7-transformui.uat.css.saas.msg.group	3.64.243.63 52.29.224.231	2026-06-01 00:43:12.023
d7-transformui.uat.zurich.saas.msg.group	10.243.17.135 10.243.17.149	2026-06-16 00:55:32.816
demo.msg.group	91.217.27.52 2a06:2380:0:5b::c	2026-07-27 20:47:59.657
difo.css.saas.msg.group	35.156.88.124 35.158.224.195	2026-07-17 08:47:01.929
isuite-life.sit.zurich.saas.msg.group	10.180.102.250 10.180.102.160	2026-07-15 12:10:07.675
isuite.presit.helvetia.saas.msg.group	63.179.16.107 18.156.157.215	2026-06-15 06:29:22.894
isuite.sit.zurich.saas.msg.group	10.245.51.13 10.245.51.25	2026-07-15 12:10:07.675
jobs.msg.group	2.16.106.149 2.16.106.162	2026-07-22 03:13:07.043
pgadmin.presit.css.saas.msg.group	18.198.175.52 63.179.71.29	2026-06-19 06:17:37.770
pgadmin.sit.helvetia.saas.msg.group	18.156.157.215 63.179.16.107	2026-06-22 09:42:15.482
pm.msg.group	91.217.27.52 2a06:2380:0:5b::c	2026-06-18 01:56:00.780
test.msg.group	91.217.27.52 2a06:2380:0:5b::c	2026-07-27 20:47:59.657
www.pm.msg.group	91.217.27.52 2a06:2380:0:5b::c	2026-06-18 01:56:00.780
anfrage.msg.group		1970-01-01 00:00:00.000
api.difo.presit.zurich.saas.msg.group		1970-01-01 00:00:00.000
api.greenfactory.msg.group	167.235.3.38	2026-06-22 22:52:18.593
apm.msg.group		1970-01-01 00:00:00.000
argocd.hub-r4s.saas.msg.group		1970-01-01 00:00:00.000
argocd.hub.saas.msg.group		1970-01-01 00:00:00.000
argocd.prod.crossplane.saas.msg.group		1970-01-01 00:00:00.000
argocd.prod.eu-2.saas.msg.group	3.73.185.130	2026-06-23 04:19:32.437
argocd.prod.meldesuite.saas.msg.group		1970-01-01 00:00:00.000
argocd.revive.saas.msg.group		1970-01-01 00:00:00.000
atruvia-test-pensiondata-api.msglife.saas.msg.group		1970-01-01 00:00:00.000
atruvia-test-pensiondata.msglife.saas.msg.group		1970-01-01 00:00:00.000
bais.fib.uat.eu-2.saas.msg.group		1970-01-01 00:00:00.000
bais.mlp.prod.eu-2.saas.msg.group		1970-01-01 00:00:00.000
baloise-test-pensiondata-api.msglife.saas.msg.group		1970-01-01 00:00:00.000
baloise-test-pensiondata.msglife.saas.msg.group		1970-01-01 00:00:00.000
bc-api.zv.uat.meldesysteme.saas.msg.group		1970-01-01 00:00:00.000
bc-ui.zv.uat.meldesysteme.saas.msg.group		1970-01-01 00:00:00.000
bpc.msg.group		1970-01-01 00:00:00.000
bvk-pensiondata-api.msglife.saas.msg.group	20.105.154.142	2026-06-18 16:18:29.350
bvk-pensiondata.msglife.saas.msg.group	20.105.154.142	2026-06-18 16:18:29.350
bvk-test-pensiondata-api.msglife.saas.msg.group	20.105.154.142	2026-06-16 13:11:51.641
bvk-test-pensiondata.msglife.saas.msg.group	20.105.154.142	2026-06-16 13:11:51.641
cdn.bcaas.uat.eu-2.saas.msg.group		1970-01-01 00:00:00.000
concordia-pensiondata-api.msglife.saas.msg.group	20.105.154.142	2026-07-26 05:18:43.855
concordia-pensiondata.msglife.saas.msg.group	20.105.154.142	2026-07-26 05:18:43.855
d7-batch-life.uat.zurich.saas.msg.group		1970-01-01 00:00:00.000
d7-batch.uat.zurich.saas.msg.group		1970-01-01 00:00:00.000
d7-cockpit-life.presit-2.zurich.saas.msg.group		1970-01-01 00:00:00.000
d7-cockpit-life.presit.zurich.saas.msg.group		1970-01-01 00:00:00.000
d7-cockpit-life.sit.zurich.saas.msg.group		1970-01-01 00:00:00.000
d7-cockpit-life.uat.zurich.saas.msg.group		1970-01-01 00:00:00.000
d7-cockpit.css.saas.msg.group		1970-01-01 00:00:00.000
d7-cockpit.presit.zurich.saas.msg.group		1970-01-01 00:00:00.000
d7-cockpit.sit.css.saas.msg.group		1970-01-01 00:00:00.000
d7-cockpit.sit.zurich.saas.msg.group		1970-01-01 00:00:00.000
d7-cockpit.uat.zurich.saas.msg.group		1970-01-01 00:00:00.000
d7-lm-batch.prod.css.saas.msg.group		1970-01-01 00:00:00.000
d7-lm-batch.sit.zurich.saas.msg.group		1970-01-01 00:00:00.000
d7-lm-batch.uat.zurich.saas.msg.group		1970-01-01 00:00:00.000
d7-transform-life.uat.zurich.saas.msg.group		1970-01-01 00:00:00.000
d7-transform.presit.zurich.saas.msg.group		1970-01-01 00:00:00.000
d7-transform.uat.zurich.saas.msg.group		1970-01-01 00:00:00.000
d7-transformui-life.uat.zurich.saas.msg.group		1970-01-01 00:00:00.000
d7-transformui.sit.css.saas.msg.group		1970-01-01 00:00:00.000
data.bcaas.uat.eu-2.saas.msg.group		1970-01-01 00:00:00.000
data.msg.group		1970-01-01 00:00:00.000
data0.msg.group		1970-01-01 00:00:00.000
dev-pensiondata-api.msglife.saas.msg.group	20.105.154.142	2026-07-28 00:26:17.995
dev-pensiondata-zfdr-oauth.msglife.saas.msg.group	20.105.154.142	2026-07-28 00:26:17.995
dev-pensiondata.msglife.saas.msg.group	20.105.154.142	2026-07-28 00:26:17.995
difo.presit.css.saas.msg.group		1970-01-01 00:00:00.000
difo.presit.zurich.saas.msg.group		1970-01-01 00:00:00.000
difo.sit.css.saas.msg.group		1970-01-01 00:00:00.000
difo.uat.css.saas.msg.group		1970-01-01 00:00:00.000
difo.uat.zurich.saas.msg.group		1970-01-01 00:00:00.000
dprs-prod-pensiondata-api.msglife.saas.msg.group		1970-01-01 00:00:00.000
dprs-prod-pensiondata.msglife.saas.msg.group		1970-01-01 00:00:00.000
dprs-test-pensiondata-api.msglife.saas.msg.group		1970-01-01 00:00:00.000
dprs-test-pensiondata.msglife.saas.msg.group		1970-01-01 00:00:00.000
ecard.msg.group		1970-01-01 00:00:00.000
efs.presit.css.saas.msg.group		1970-01-01 00:00:00.000
ergo-test-pensiondata-api.msglife.saas.msg.group		1970-01-01 00:00:00.000
ergo-test-pensiondata.msglife.saas.msg.group		1970-01-01 00:00:00.000
esg-scoring.banking.uat.eu-2.saas.msg.group		1970-01-01 00:00:00.000
events.msg.group	83.171.132.83	2026-07-27 20:47:59.657
foodconference.msg.group		1970-01-01 00:00:00.000
grafana.hub-r4s.saas.msg.group		1970-01-01 00:00:00.000
grafana.msglife.saas.msg.group		1970-01-01 00:00:00.000
grafana.presit.msg.life.saas.msg.group	63.179.219.77	2026-06-18 20:40:25.531
grafana.prod.crossplane.saas.msg.group		1970-01-01 00:00:00.000
grafana.prod.meldesuite.saas.msg.group		1970-01-01 00:00:00.000
grafana.revive.saas.msg.group		1970-01-01 00:00:00.000
grafana.uat.zurich.saas.msg.group		1970-01-01 00:00:00.000

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

51.224.247.95:443 fa263c2c1346…

Subject: codiq.msg.group

Issuer: Amazon RSA 2048 EU S01

SANs: *.codiq.msg.group, codiq.msg.group

51.225.91.66:443 fa263c2c1346…

Subject: codiq.msg.group

Issuer: Amazon RSA 2048 EU S01

SANs: *.codiq.msg.group, codiq.msg.group

51.224.228.157:443 fa263c2c1346…

Subject: codiq.msg.group

Issuer: Amazon RSA 2048 EU S01

SANs: *.codiq.msg.group, codiq.msg.group

IPs Citing This Domain

No citing IPs found yet

As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

No origin-IP leaks detected (yet)

Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.

Type	Value	First seen	Last seen
TXT	notion-domain-verification=5deI5R0TYVLj1jBdn0N0bl9bXpmIV9GcLeTSAPfQaEA	2026-06-04 23:51:53.290	2026-07-15 20:04:13.980
A	63.178.146.175	2026-06-04 23:51:53.290	2026-07-15 20:04:13.980
TXT	docker-verification=024fefdd-10ff-43a8-a505-5f4cf376cf74	2026-06-04 23:51:53.290	2026-07-15 20:04:13.980
TXT	wiz-domain-verification=332b4715f2c93409a122c76224e39ab8507d0d7141b361dcebaaf5436338831e	2026-06-04 23:51:53.290	2026-07-15 20:04:13.980
TXT	jamf-site-verification=6IWL3Nq8JOiYvPo8X5YIKg	2026-06-04 23:51:53.290	2026-07-15 20:04:13.980
TXT	infoblox-domain-mastery=40cf9c047336bc5db7ef5ea6182e4f776f0e665150a6d579cba3f44e36385b63da	2026-06-04 23:51:53.290	2026-07-15 20:04:13.980
TXT	atlassian-sending-domain-verification=9ee4f68a-1f7a-43a1-ac84-486a69fda4de	2026-06-04 23:51:53.290	2026-07-15 20:04:13.980
TXT	vkmraslff4ns8dmm2f9380c7f8	2026-06-04 23:51:53.290	2026-07-15 20:04:13.980
TXT	swisssign-check=XPVSYJNDHFEuNuyax1vaB39SMBU	2026-06-04 23:51:53.290	2026-07-15 20:04:13.980
TXT	anthropic-domain-verification-1aee5n=XfzQFXJA5QmgCsEanPpDskinn	2026-06-04 23:51:53.290	2026-07-15 20:04:13.980
TXT	google-site-verification=7LkNKy2pDGkg0LeYTJdKqiJemOZ3nv4K-nrEmaTp_FQ	2026-06-04 23:51:53.290	2026-07-15 20:04:13.980
TXT	docusign=73dd2f8b-b2b4-4d1b-8f56-56f4f9f44eca	2026-06-04 23:51:53.290	2026-07-15 20:04:13.980
TXT	MS=ms52071478	2026-06-04 23:51:53.290	2026-07-15 20:04:13.980
SRV	_autodiscover._tcp 0 0 443 autodiscover.msg.group	2026-06-04 23:51:53.290	2026-07-15 20:04:13.980
A	18.153.171.24	2026-06-04 23:51:53.290	2026-07-15 20:04:13.980
TXT	v=spf1 mx:indivsurvey.de ip4:46.28.116.237 ip4:185.84.1.202 ip4:109.75.179.102 include:spf.msg.team include:spf.msg.systems include:spf.u2d.de include:145017748.spf04.hubspotemail.net include:mktomail.com -all	2026-06-04 23:51:53.290	2026-07-15 20:04:13.980
TXT	google-site-verification=P7Bw2cw_ejJNu9e3AFWS519JeIsVm9AtJ4HqNg8Hd8M	2026-06-04 23:51:53.290	2026-07-15 20:04:13.980
NS	d.ns14.net	2026-06-04 23:51:53.290	2026-07-15 20:04:13.980
NS	c.ns14.net	2026-06-04 23:51:53.290	2026-07-15 20:04:13.980
TXT	swisssign-check=vQ1Iir7LKl7k1HnVB5SJorDCL8A	2026-06-04 23:51:53.290	2026-07-15 20:04:13.980
TXT	swisssign-check=pPSJQcfxZvKVMFZ5nz1MQuJXDiSXkqosfnULZTZqLT	2026-06-04 23:51:53.290	2026-07-15 20:04:13.980
NS	b.ns14.net	2026-06-04 23:51:53.290	2026-07-15 20:04:13.980
MX	10 msg-group.mail.protection.outlook.com	2026-06-04 23:51:53.290	2026-07-15 20:04:13.980
TXT	swisssign-check=oIWHaCxw5e43FVF9fIaaAMJ0ohc	2026-06-04 23:51:53.290	2026-07-15 20:04:13.980
A	3.71.246.79	2026-06-04 23:51:53.290	2026-07-15 20:04:13.980
SRV	_sipfederationtls._tcp 100 1 5061 sipfed.online.lync.com	2026-06-04 23:51:53.290	2026-07-15 20:04:13.980
TXT	atlassian-domain-verification=R97wJt48YhV7e60bdGxrjFj0MCtq27rMBuNkvK6k1ULjULFn0HyamHJzSSnLnymN	2026-06-04 23:51:53.290	2026-07-15 20:04:13.980
TXT	atlassian-domain-verification=scXeJ0PcRfcv6USEPAghoODMaLmCIKa8RA3s5CwWlIWzYs/ZiUAdsxZT5npeWZFB	2026-06-04 23:51:53.290	2026-07-15 20:04:13.980
NS	a.ns14.net	2026-06-04 23:51:53.290	2026-07-15 20:04:13.980
TXT	SAML=e26a6e91621aa507eee4f4bd365f3eef3f662a842eec7f650559aa6e7f600f38	2026-06-25 20:22:31.777	2026-07-15 20:04:13.980