Domain
fb.com
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of fb.com
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
Hosting IPs
—
A/AAAA targets
Subdomains
—
CT + scan + body
Record Types
—
seen in DNS
Observed Certs
—
in our scans
DNS Records
A
157.240.0.35, 157.240.17.35, 157.240.253.35, 157.240.27.35, 157.240.9.35, 163.70.128.35, 185.60.219.35, 31.13.72.36
AAAA
2a03:2880:f128:83:face:b00c:0:25de, 2a03:2880:f13f:83:face:b00c:0:25de, 2a03:2880:f176:181:face:b00c:0:25de, 2a03:2880:f177:185:face:b00c:0:25de, 2a03:2880:f17b:88:face:b00c:0:25de, 2a03:2880:f36f:1:face:b00c:0:25de, 2a03:2880:f37a:1:face:b00c:0:25de, 2a03:2880:f37c:1:face:b00c:0:25de
MX
10 mxa-00082601.gslb.pphosted.com, 10 mxb-00082601.gslb.pphosted.com
NS
a.ns.facebook.com, b.ns.facebook.com, c.ns.facebook.com, d.ns.facebook.com
TXT
586957ce-d11e-4efa-9fe5-a887498bf838, G3X1k1XGYGra1nUpTv7Rdk2wAEFHfkKIr9/4/6+Nu67Ks9cR8xaiqAZPPhis9lGD6mb/+9vygIr4QKXIpxIc7w==, I2B7AuxY6G1G_NeiaHF-9A0zn-3NDBnlOBi4zItNCU8, MS=ms56927146, atlassian-domain-verification=I7HLjLnlhJiDT58wzrru2Pd/2cRWa3AKlgCjDPOO43GMP7H0QuafH6eBts3D1GaP, docusign=ad7f789d-eff1-4283-9d90-fdc9484527e1, google-site-verification=Dsycvk_Ky3uQjdvuPrI_Z6A98lWghNTntdS4LuATOj8, mentimeter-16bdc82d-93be-47de-a6d4-fd6adb17c403
CNAME
—
CAA
—
WHOIS / Registration
Registration data planned
Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.
Subdomains
Subdomain enumeration pending
Every subdomain ever issued a TLS cert under this apex — extracted from Certificate Transparency logs, our own scan observations and body references.
Tech Stack
Tech detection pending
Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.
TLS Certificates
Subject: *.kpsfb.com
Issuer: R12
SANs: *.kpsfb.com, kpsfb.com
Subject: *.afafb.com
Issuer: GeoTrust TLS RSA CA G1
SANs: *.afafb.com, afafb.com
Subject: mailserver.vlaofb.com
Issuer: YE2
SANs: mailserver.vlaofb.com
Subject: *.afafb.com
Issuer: GeoTrust TLS RSA CA G1
SANs: *.afafb.com, afafb.com
Subject: hoangclonefb.com
Issuer: YR1
SANs: hoangclonefb.com, www.hoangclonefb.com
Subject: yk.yinhufb.com
Issuer: R13
SANs: yk.yinhufb.com
Subject: www.0451pfb.com
Issuer: E8
SANs: 0451pfb.com, m.0451pfb.com, wap.0451pfb.com, www.0451pfb.com
Subject: yolafb.com
Issuer: WE1
SANs: *.yolafb.com, yolafb.com
Subject: *.fb.com
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: *.fb.com, fb.com
Subject: www.0451pfb.com
Issuer: E8
SANs: 0451pfb.com, m.0451pfb.com, wap.0451pfb.com, www.0451pfb.com
Subject: *.fb.com
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: *.fb.com, fb.com
Subject: yk.yinhufb.com
Issuer: R13
SANs: yk.yinhufb.com
Subject: *.fb.com
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: *.fb.com, fb.com
Subject: www.100tfb.com
Issuer: Encryption Everywhere DV TLS CA - G2
SANs: 100tfb.com, www.100tfb.com
Subject: yk.yinhufb.com
Issuer: R13
SANs: yk.yinhufb.com
Subject: *.indulgemfb.com
Issuer: ZeroSSL RSA DV SSL CA 2
SANs: *.indulgemfb.com, indulgemfb.com
Subject: mail.gmailfb.com
Issuer: YR1
SANs: mail.gmailfb.com
Subject: *.internalfb.com
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: *.internalfb.com, internalfb.com
Subject: *.fb.com
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: *.fb.com, fb.com
Subject: applecn.fujifilm-fb.com.cn
Issuer: SGPAPHQ-INTCA02
SANs: CHN-MSVPN01, CHN-MSVPN01.dc01.fujixerox.net, CHN-MSVPN02, CHN-MSVPN02.dc01.fujixerox.net, applecn.fujifilm-fb.com.cn
Subject: *.fb.com
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: *.fb.com, fb.com
Subject: *.fb.com
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: *.fb.com, fb.com
Subject: admin.maowangfb.com
Issuer: YE2
SANs: admin.maowangfb.com, api.maowangfb.com
Subject: tran.518fb.com
Issuer: TWCA Secure SSL Certification Authority
SANs: tran.518fb.com
Subject: doc.research-and-analytics.csfb.com
Issuer: GeoTrust TLS RSA CA G1
SANs: doc.research-and-analytics.csfb.com, doc.researchandanalytics-stg.credit-suisse.com, edge-qa-static.credit-suisse.com, edge-static.credit-suisse.com, holt-doc.credit-suisse.com, holt-uat-doc.credit-suisse.com, locus-qa-static.credit-suisse.com, locus-static.credit-suisse.com, plus-beta-static.credit-suisse.com, plus-static.credit-suisse.com, plus-uat-static.credit-suisse.com, research-beta-doc.credit-suisse.com, research-doc.credit-suisse.com, research-qa-doc.credit-suisse.com, research-uat-doc.credit-suisse.com, research-uit-doc.credit-suisse.com
Subject: *.fb.com
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: *.fb.com, fb.com
Subject: *.hfcfb.com
Issuer: Xcc Trust OV SSL CA
SANs: *.hfcfb.com, hfcfb.com
Subject: *.internalfb.com
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: *.internalfb.com, internalfb.com
Subject: *.absolutefb.com
Issuer: R3
SANs: *.absolutefb.com, absolutefb.com
Subject: accinsfb.com
Issuer: YR1
SANs: accinsfb.com
IPs Citing This Domain
Hosts whose HTML body references this domain. Strong signal for origin/mirror/embed discovery.
158.180.51.170:443
href · ×10
35.212.141.37:80
href · ×8
128.254.224.88:80
href · ×6
103.162.31.96:443
href · ×5
158.180.51.170:80
href · ×5
138.68.98.148:443
href · ×4
14.225.208.252:80
href · ×4
13.215.33.48:443
href · ×4
49.51.204.220:443
href · ×4
52.58.244.131:443
href · ×4
132.145.80.145:443
href · ×4
34.96.67.179:443
href · ×4
129.159.49.173:443
href · ×4
169.58.15.136:443
href · ×4
95.217.44.48:443
href · ×3
3.70.26.249:80
href · ×3
185.233.38.51:443
href · ×3
35.226.144.201:443
href · ×2
147.102.153.223:80
href · ×2
42.96.19.25:443
href · ×2
51.159.37.210:443
href · ×2
158.180.88.139:443
href · ×2
95.217.44.48:80
href · ×2
65.21.51.35:443
href · ×2
134.102.123.244:8080
href · ×2
13.51.146.98:80
href · ×2
104.236.55.146:443
href · ×2
42.96.19.25:80
href · ×2
128.254.190.253:443
href · ×2
185.53.58.16:443
href · ×2
139.59.110.142:80
href · ×2
34.149.87.18:443
href · ×2
65.108.194.96:443
href · ×2
93.115.136.53:443
href · ×2
93.115.136.53:80
href · ×2
82.200.179.178:443
href · ×2
175.182.64.216:443
href · ×2
15.206.16.48:80
href · ×2
95.217.84.24:443
href · ×2
212.57.115.79:80
href · ×2
203.158.192.188:80
href · ×2
104.145.207.1:80
href · ×2
107.170.182.218:80
href · ×2
103.178.231.61:80
href · ×2
66.228.57.88:443
href · ×2
46.62.154.4:443
href · ×2
47.254.20.84:443
href · ×2
77.47.133.1:443
href · ×2
129.146.228.35:80
href · ×2
162.144.232.229:443
href · ×2
Origin / IP-Leak
USP
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
No origin-IP leaks detected (yet)
Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.
Threat Intelligence
Domain threat-intel pending
Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.
History
Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.
| Type | Value | First seen | Last seen |
|---|---|---|---|
| MX | 10 mxb-00082601.gslb.pphosted.com | 2026-05-25 23:59:40.866 | 2026-07-28 15:14:01.364 |
| TXT | MS=ms56927146 | 2026-05-25 23:59:40.866 | 2026-07-28 15:14:01.364 |
| TXT | smartsheet-site-validation=sB5xgx-1nsnQCgORYUhnyDG3Jr739OxJ | 2026-05-25 23:59:40.866 | 2026-07-28 15:14:01.364 |
| TXT | mentimeter-16bdc82d-93be-47de-a6d4-fd6adb17c403 | 2026-05-25 23:59:40.866 | 2026-07-28 15:14:01.364 |
| TXT | atlassian-domain-verification=I7HLjLnlhJiDT58wzrru2Pd/2cRWa3AKlgCjDPOO43GMP7H0QuafH6eBts3D1GaP | 2026-05-25 23:59:40.866 | 2026-07-28 15:14:01.364 |
| TXT | G3X1k1XGYGra1nUpTv7Rdk2wAEFHfkKIr9/4/6+Nu67Ks9cR8xaiqAZPPhis9lGD6mb/+9vygIr4QKXIpxIc7w== | 2026-05-25 23:59:40.866 | 2026-07-28 15:14:01.364 |
| NS | c.ns.facebook.com | 2026-05-25 23:59:40.866 | 2026-07-28 15:14:01.364 |
| NS | a.ns.facebook.com | 2026-05-25 23:59:40.866 | 2026-07-28 15:14:01.364 |
| TXT | docusign=ad7f789d-eff1-4283-9d90-fdc9484527e1 | 2026-05-25 23:59:40.866 | 2026-07-28 15:14:01.364 |
| TXT | parkable-domain-verification=N89SxXel0S4pUXDFVpckFmXIO9MUvN4Or0bO_Lcb8Os= | 2026-05-25 23:59:40.866 | 2026-07-28 15:14:01.364 |
| TXT | I2B7AuxY6G1G_NeiaHF-9A0zn-3NDBnlOBi4zItNCU8 | 2026-05-25 23:59:40.866 | 2026-07-28 15:14:01.364 |
| TXT | mentimeter-8599dcd1-e0da-4326-882e-7570e7c942fb | 2026-05-25 23:59:40.866 | 2026-07-28 15:14:01.364 |
| NS | b.ns.facebook.com | 2026-05-25 23:59:40.866 | 2026-07-28 15:14:01.364 |
| TXT | 586957ce-d11e-4efa-9fe5-a887498bf838 | 2026-05-25 23:59:40.866 | 2026-07-28 15:14:01.364 |
| MX | 10 mxa-00082601.gslb.pphosted.com | 2026-05-25 23:59:40.866 | 2026-07-28 15:14:01.364 |
| AAAA | 2a03:2880:f13f:83:face:b00c:0:25de | 2026-05-25 23:59:40.866 | 2026-07-27 07:19:40.268 |
| TXT | v=spf1 redirect=_spf.fb.com | 2026-05-25 23:59:40.866 | 2026-07-28 15:14:01.364 |
| NS | d.ns.facebook.com | 2026-05-25 23:59:40.866 | 2026-07-28 15:14:01.364 |
| A | 57.144.248.1 | 2026-05-25 23:59:40.866 | 2026-07-27 07:10:58.083 |
| TXT | smartsheet-site-validation=r-TtxwzdAh2KN_Zi6mTLGu02fz-9vQU4 | 2026-05-25 23:59:40.866 | 2026-07-28 15:14:01.364 |
| TXT | google-site-verification=Dsycvk_Ky3uQjdvuPrI_Z6A98lWghNTntdS4LuATOj8 | 2026-05-25 23:59:40.866 | 2026-07-28 15:14:01.364 |
| AAAA | 2a03:2880:f176:181:face:b00c:0:25de | 2026-05-26 00:17:38.499 | 2026-06-23 16:27:42.962 |
| A | 157.240.27.35 | 2026-05-26 00:17:38.499 | 2026-06-23 00:10:24.365 |
| AAAA | 2a03:2880:f177:185:face:b00c:0:25de | 2026-05-26 02:22:42.939 | 2026-07-21 08:54:38.970 |
| A | 157.240.0.35 | 2026-05-26 02:22:42.939 | 2026-07-22 16:02:14.572 |
| AAAA | 2a03:2880:f37c:1:face:b00c:0:25de | 2026-05-26 02:43:02.200 | 2026-06-20 21:44:31.590 |
| A | 57.144.244.1 | 2026-05-26 05:30:55.049 | 2026-06-21 23:04:07.065 |
| AAAA | 2a03:2880:f37a:1:face:b00c:0:25de | 2026-05-26 05:30:55.049 | 2026-06-23 19:36:31.899 |
| A | 157.240.253.35 | 2026-05-26 12:19:08.814 | 2026-07-28 13:59:46.480 |
| A | 57.144.222.1 | 2026-05-27 21:25:40.742 | 2026-07-28 15:14:01.364 |
| AAAA | 2a03:2880:f36f:1:face:b00c:0:25de | 2026-05-27 21:40:03.298 | 2026-07-28 15:14:01.364 |
| A | 163.70.128.35 | 2026-05-27 22:57:40.715 | 2026-05-27 22:57:40.715 |
| AAAA | 2a03:2880:f17b:88:face:b00c:0:25de | 2026-05-27 22:59:40.747 | 2026-05-27 23:21:40.736 |
| A | 185.60.219.35 | 2026-05-27 22:59:40.747 | 2026-05-27 23:37:41.595 |
| A | 57.144.62.1 | 2026-06-16 22:20:06.331 | 2026-06-16 22:20:06.331 |
| A | 31.13.72.36 | 2026-06-20 14:28:53.389 | 2026-06-20 14:28:53.389 |
| A | 157.240.9.35 | 2026-07-16 23:06:50.819 | 2026-07-26 06:49:47.584 |
| A | 31.13.84.36 | 2026-07-21 08:19:27.465 | 2026-07-21 08:19:27.465 |
| AAAA | 2a03:2880:f128:83:face:b00c:0:25de | 2026-07-22 08:01:46.002 | 2026-07-27 20:43:03.212 |
| A | 157.240.17.35 | 2026-07-25 15:14:04.371 | 2026-07-25 15:14:04.371 |