Domain

cftm.splunkcloud.com

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

DNS Check HTTP Check Run Full Scan .com TLD

Run a live full scan of cftm.splunkcloud.com

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now

Hosting IPs

—

A/AAAA targets

Subdomains

—

CT + scan + body

Record Types

—

seen in DNS

Observed Certs

—

in our scans

DNS Records

100.26.6.234, 3.215.53.225, 3.227.93.225, 34.202.107.226, 52.206.22.108, 52.207.162.25, 52.23.71.63, 52.71.20.11

AAAA

—

ns-5-3-1.splunkdns.net, ns-5-3-2.splunkdns.net, ns-5-3-3.splunkdns.net, ns-5-3-4.splunkdns.net, ns-5-3-5.splunkdns.net, ns-5-3-6.splunkdns.net, ns-5-3-7.splunkdns.net, ns-5-3-8.splunkdns.net

TXT

—

CNAME

—

CAA

—

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Subdomain enumeration pending

Every subdomain ever issued a TLS cert under this apex — extracted from Certificate Transparency logs, our own scan observations and body references.

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

54.211.178.105:443 704afb3d5693…

Subject: *.cftm.splunkcloud.com

Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1

SANs: *.akamai-inputs-cftm.splunkcloud.com, *.cftm.splunkcloud.com, *.es-cftm.splunkcloud.com, *.http-inputs-ack-cftm.splunkcloud.com, *.http-inputs-cftm.splunkcloud.com, *.http-inputs-firehose-cftm.splunkcloud.com, *.pvt.cftm.splunkcloud.com, akamai-inputs-cftm.splunkcloud.com, cftm.splunkcloud.com, es-cftm.splunkcloud.com, http-inputs-ack-cftm.splunkcloud.com, http-inputs-cftm.splunkcloud.com, http-inputs-firehose-cftm.splunkcloud.com, pvt.cftm.splunkcloud.com

52.71.20.11:443 704afb3d5693…

Subject: *.cftm.splunkcloud.com

Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1

54.243.28.64:443 704afb3d5693…

Subject: *.cftm.splunkcloud.com

Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1

34.201.115.240:443 704afb3d5693…

Subject: *.cftm.splunkcloud.com

Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1

34.201.161.115:443 704afb3d5693…

Subject: *.cftm.splunkcloud.com

Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1

52.4.248.126:443 704afb3d5693…

Subject: *.cftm.splunkcloud.com

Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1

3.94.97.6:443 704afb3d5693…

Subject: *.cftm.splunkcloud.com

Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1

107.22.189.16:443 704afb3d5693…

Subject: *.cftm.splunkcloud.com

Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1

IPs Citing This Domain

No citing IPs found yet

As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

No origin-IP leaks detected (yet)

Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.

CT-Log Evidence

Certificates from public Certificate Transparency logs whose subject or SAN names this domain — including historic certs we never observed live.

42f9ea441fc8a4c8… google · argon2026h2

Subject: *.cftm.splunkcloud.com

Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1

SANs: *.cftm.splunkcloud.com, cftm.splunkcloud.com, *.pvt.cftm.splunkcloud.com, http-inputs-cftm.splunkcloud.com, *.http-inputs-cftm.splunkcloud.com, akamai-inputs-cftm.splunkcloud.com, *.akamai-inputs-cftm.splunkcloud.com, http-inputs-ack-cftm.splunkcloud.com, *.http-inputs-ack-cftm.splunkcloud.com, http-inputs-firehose-cftm.splunkcloud.com, *.http-inputs-firehose-cftm.splunkcloud.com, es-cftm.splunkcloud.com, *.es-cftm.splunkcloud.com, pvt.cftm.splunkcloud.com

Valid: 2025-11-11 00:00:00 → 2026-11-10 23:59:59

42f9ea441fc8a4c8… cloudflare · nimbus2026

Subject: *.cftm.splunkcloud.com

Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1

Valid: 2025-11-11 00:00:00 → 2026-11-10 23:59:59

2c82de158110159e… google · argon2026h2

Subject: *.cftm.splunkcloud.com

Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1

SANs: *.cftm.splunkcloud.com, cftm.splunkcloud.com, es-cftm.splunkcloud.com, *.es-cftm.splunkcloud.com

Valid: 2025-11-09 00:00:00 → 2026-11-10 23:59:59

2c82de158110159e… google · xenon2026h2

Subject: *.cftm.splunkcloud.com

Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1

SANs: *.cftm.splunkcloud.com, cftm.splunkcloud.com, es-cftm.splunkcloud.com, *.es-cftm.splunkcloud.com

Valid: 2025-11-09 00:00:00 → 2026-11-10 23:59:59

6af55882832a3158… digicert · wyvern2026h1

Subject: *.cftm.splunkcloud.com

Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1

SANs: *.cftm.splunkcloud.com, cftm.splunkcloud.com, es-cftm.splunkcloud.com, *.es-cftm.splunkcloud.com, http-inputs-cftm.splunkcloud.com, *.http-inputs-cftm.splunkcloud.com, akamai-inputs-cftm.splunkcloud.com, *.akamai-inputs-cftm.splunkcloud.com, http-inputs-ack-cftm.splunkcloud.com, *.http-inputs-ack-cftm.splunkcloud.com, http-inputs-firehose-cftm.splunkcloud.com, *.http-inputs-firehose-cftm.splunkcloud.com, *.pvt.cftm.splunkcloud.com, pvt.cftm.splunkcloud.com

Valid: 2025-01-24 00:00:00 → 2026-01-23 23:59:59

22a2eda84e631ca0… google · argon2026h1

Subject: *.cftm.splunkcloud.com

Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1

Valid: 2025-01-24 00:00:00 → 2026-01-23 23:59:59

6af55882832a3158… google · xenon2026h1

Subject: *.cftm.splunkcloud.com

Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1

Valid: 2025-01-24 00:00:00 → 2026-01-23 23:59:59

a60ed6035da54605… google · argon2026h1

Subject: *.cftm.splunkcloud.com

Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1

SANs: *.cftm.splunkcloud.com, cftm.splunkcloud.com, es-cftm.splunkcloud.com, *.es-cftm.splunkcloud.com

Valid: 2025-01-24 00:00:00 → 2026-01-23 23:59:59

22a2eda84e631ca0… google · xenon2026h1

Subject: *.cftm.splunkcloud.com

Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1

Valid: 2025-01-24 00:00:00 → 2026-01-23 23:59:59

a60ed6035da54605… google · xenon2026h1

Subject: *.cftm.splunkcloud.com

Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1

SANs: *.cftm.splunkcloud.com, cftm.splunkcloud.com, es-cftm.splunkcloud.com, *.es-cftm.splunkcloud.com

Valid: 2025-01-24 00:00:00 → 2026-01-23 23:59:59

22a2eda84e631ca0… digicert · wyvern2026h1

Subject: *.cftm.splunkcloud.com

Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1

Valid: 2025-01-24 00:00:00 → 2026-01-23 23:59:59

6af55882832a3158… cloudflare · nimbus2026

Subject: *.cftm.splunkcloud.com

Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1

Valid: 2025-01-24 00:00:00 → 2026-01-23 23:59:59

a60ed6035da54605… digicert · wyvern2026h1

Subject: *.cftm.splunkcloud.com

Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1

SANs: *.cftm.splunkcloud.com, cftm.splunkcloud.com, es-cftm.splunkcloud.com, *.es-cftm.splunkcloud.com

Valid: 2025-01-24 00:00:00 → 2026-01-23 23:59:59

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.

Type	Value	First seen	Last seen
NS	ns-5-3-1.splunkdns.net	2026-05-26 06:36:35.881	2026-06-24 07:53:26.851
NS	ns-5-3-5.splunkdns.net	2026-05-26 06:36:35.881	2026-06-24 07:53:26.851
NS	ns-5-3-7.splunkdns.net	2026-05-26 06:36:35.881	2026-06-24 07:53:26.851
NS	ns-5-3-3.splunkdns.net	2026-05-26 06:36:35.881	2026-06-24 07:53:26.851
A	54.227.248.24	2026-05-26 06:36:35.881	2026-05-27 13:52:01.779
NS	ns-5-3-4.splunkdns.net	2026-05-26 06:36:35.881	2026-06-24 07:53:26.851
A	52.206.22.108	2026-05-26 06:36:35.881	2026-05-27 13:52:01.779
NS	ns-5-3-2.splunkdns.net	2026-05-26 06:36:35.881	2026-06-24 07:53:26.851
NS	ns-5-3-8.splunkdns.net	2026-05-26 06:36:35.881	2026-06-24 07:53:26.851
A	98.91.42.190	2026-05-26 06:36:35.881	2026-05-27 13:52:01.779
NS	ns-5-3-6.splunkdns.net	2026-05-26 06:36:35.881	2026-06-24 07:53:26.851
A	100.26.6.234	2026-06-14 23:37:38.836	2026-06-15 01:22:55.677
A	3.227.93.225	2026-06-14 23:37:38.836	2026-06-19 17:02:35.393
A	52.23.71.63	2026-06-14 23:37:38.836	2026-06-15 01:22:55.677
A	98.90.76.9	2026-06-19 17:02:35.393	2026-06-19 17:02:35.393
A	52.71.20.11	2026-06-19 17:02:35.393	2026-06-19 17:02:35.393
A	52.207.162.25	2026-06-23 09:56:29.314	2026-06-24 07:53:26.851
A	34.202.107.226	2026-06-23 09:56:29.314	2026-06-24 07:53:26.851
A	3.215.53.225	2026-06-23 09:56:29.314	2026-06-24 07:53:26.851