Domain
gstatic.com
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of gstatic.com
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
Hosting IPs
70
A/AAAA targets
Subdomains
105
CT + scan + body
Record Types
5
seen in DNS
Observed Certs
90
in our scans
DNS Records
A
142.250.154.120, 142.250.154.94, 142.250.180.3, 142.251.110.120, 142.251.110.94, 142.251.13.120, 142.251.13.94, 142.251.14.120
AAAA
2a00:1450:4001:c0f::5e, 2a00:1450:4001:c0f::78, 2a00:1450:4001:c13::5e, 2a00:1450:4001:c13::78, 2a00:1450:4001:c15::5e, 2a00:1450:4001:c15::78, 2a00:1450:4001:c17::5e, 2a00:1450:4001:c17::78
MX
—
NS
ns1.google.com, ns2.google.com, ns3.google.com, ns4.google.com
TXT
v=spf1 ?all
CNAME
—
CAA
0 issue "pki.goog"
WHOIS / Registration
Registration data planned
Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.
Subdomains
Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.
| Subdomain | Resolves to | Last seen |
|---|---|---|
| gstatic.com | 2026-07-30 07:42:37.413 | |
| fonts.gstatic.com | 2026-06-17 05:30:56.269 | |
| ssl.gstatic.com | 2026-05-26 09:20:11.181 | |
| www.gstatic.com | 2026-07-18 17:56:00.154 | |
| maps.gstatic.com | 2026-06-14 23:07:05.130 | |
| captive.csi.gstatic.com | 2026-06-17 11:26:19.333 | |
| ds.metric.gstatic.com | 1970-01-01 00:00:00.000 | |
| metric.gstatic.com | 1970-01-01 00:00:00.000 | |
| stbcast-stb.metric.gstatic.com | 1970-01-01 00:00:00.000 | |
| stbcast.metric.gstatic.com | 1970-01-01 00:00:00.000 | |
| stbcast2-stb.metric.gstatic.com | 1970-01-01 00:00:00.000 | |
| stbcast2.metric.gstatic.com | 1970-01-01 00:00:00.000 | |
| stbcast3-stb.metric.gstatic.com | 1970-01-01 00:00:00.000 | |
| stbcast3.metric.gstatic.com | 1970-01-01 00:00:00.000 | |
| stbcast5-stb.metric.gstatic.com | 1970-01-01 00:00:00.000 | |
| stbcast5.metric.gstatic.com | 1970-01-01 00:00:00.000 | |
| unicast-stb.metric.gstatic.com | 1970-01-01 00:00:00.000 | |
| unicast.metric.gstatic.com | 1970-01-01 00:00:00.000 | |
| unicast2-stb.metric.gstatic.com | 1970-01-01 00:00:00.000 | |
| unicast2.metric.gstatic.com | 1970-01-01 00:00:00.000 | |
| v4.metric.gstatic.com | 1970-01-01 00:00:00.000 |
Tech Stack
Tech detection pending
Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.
TLS Certificates
Subject: ngstatic.com
Issuer: Amazon RSA 2048 M01
SANs: *.ngstatic.com, ngstatic.com
Subject: ngstatic.com
Issuer: Amazon RSA 2048 M01
SANs: *.ngstatic.com, ngstatic.com
Subject: ngstatic.com
Issuer: Amazon RSA 2048 M01
SANs: *.ngstatic.com, ngstatic.com
Subject: ngstatic.com
Issuer: Amazon RSA 2048 M01
SANs: *.ngstatic.com, ngstatic.com
Subject: ngstatic.com
Issuer: Amazon RSA 2048 M01
SANs: *.ngstatic.com, ngstatic.com
Subject: ngstatic.com
Issuer: Amazon RSA 2048 M01
SANs: *.ngstatic.com, ngstatic.com
Subject: ngstatic.com
Issuer: Amazon RSA 2048 M01
SANs: *.ngstatic.com, ngstatic.com
Subject: ngstatic.com
Issuer: Amazon RSA 2048 M01
SANs: *.ngstatic.com, ngstatic.com
Subject: ngstatic.com
Issuer: Amazon RSA 2048 M01
SANs: *.ngstatic.com, ngstatic.com
Subject: ngstatic.com
Issuer: Amazon RSA 2048 M01
SANs: *.ngstatic.com, ngstatic.com
Subject: video.pmgstatic.com
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: video.pmgstatic.com
Subject: ngstatic.com
Issuer: Amazon RSA 2048 M01
SANs: *.ngstatic.com, ngstatic.com
Subject: ngstatic.com
Issuer: Amazon RSA 2048 M01
SANs: *.ngstatic.com, ngstatic.com
Subject: ngstatic.com
Issuer: Amazon RSA 2048 M01
SANs: *.ngstatic.com, ngstatic.com
Subject: DNS Filter Proxy
Issuer: Company DNS Filter CA
SANs: *.apple.com, *.fotoscapes.com, *.ggpht.com, *.google.com, *.googleapis.com, *.googleusercontent.com, *.gstatic.com, *.samsung.com, *.samsungapps.com, *.samsungcloud.com, *.yimg.com, *.ytimg.com, apple.com, ggpht.com, googleapis.com, googleusercontent.com, gstatic.com, samsungcloud.com, samsungpay.com
Subject: ngstatic.com
Issuer: Amazon RSA 2048 M01
SANs: *.ngstatic.com, ngstatic.com
Subject: ngstatic.com
Issuer: Amazon RSA 2048 M01
SANs: *.ngstatic.com, ngstatic.com
Subject: ngstatic.com
Issuer: Amazon RSA 2048 M01
SANs: *.ngstatic.com, ngstatic.com
Subject: ngstatic.com
Issuer: Amazon RSA 2048 M01
SANs: *.ngstatic.com, ngstatic.com
Subject: ngstatic.com
Issuer: Amazon RSA 2048 M01
SANs: *.ngstatic.com, ngstatic.com
Subject: ngstatic.com
Issuer: Amazon RSA 2048 M01
SANs: *.ngstatic.com, ngstatic.com
Subject: ngstatic.com
Issuer: Amazon RSA 2048 M01
SANs: *.ngstatic.com, ngstatic.com
Subject: ngstatic.com
Issuer: Amazon RSA 2048 M01
SANs: *.ngstatic.com, ngstatic.com
Subject: ngstatic.com
Issuer: Amazon RSA 2048 M01
SANs: *.ngstatic.com, ngstatic.com
Subject: ngstatic.com
Issuer: Amazon RSA 2048 M01
SANs: *.ngstatic.com, ngstatic.com
Subject: ngstatic.com
Issuer: Amazon RSA 2048 M01
SANs: *.ngstatic.com, ngstatic.com
Subject: ngstatic.com
Issuer: Amazon RSA 2048 M01
SANs: *.ngstatic.com, ngstatic.com
Subject: ngstatic.com
Issuer: Amazon RSA 2048 M01
SANs: *.ngstatic.com, ngstatic.com
Subject: ngstatic.com
Issuer: Amazon RSA 2048 M01
SANs: *.ngstatic.com, ngstatic.com
Subject: ngstatic.com
Issuer: Amazon RSA 2048 M01
SANs: *.ngstatic.com, ngstatic.com
IPs Citing This Domain
No citing IPs found yet
As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.
Origin / IP-Leak
USP
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
| Origin IP | Origin ASN | CDN ASN | Confidence | Reasoning |
|---|---|---|---|---|
| 45.67.131.73 | AS198068 | AS15169 | 95% | cert 3fbccb9a… served by 45.67.131.73 (AS198068) carries SAN www.gstatic.com which currently resolves through Google (AS15169) at 192.178.25.195, 2a00:1450:4001:c15::5e |
| 62.60.152.199 | AS203273 | AS15169 | 95% | cert 466ab11d… served by 62.60.152.199 (AS203273) carries SAN fonts.gstatic.com which currently resolves through Google (AS15169) at 216.58.198.99, 2a00:1450:400e:806::2003, 142.251.127.94, 2a00:1450:4001:c25::5e |
| 132.145.114.136 | AS31898 | AS15169 | 95% | cert 3e37d509… served by 132.145.114.136 (AS31898) carries SAN gstatic.com which currently resolves through Google (AS15169) at 142.250.154.94, 2a00:1450:400c:c06::78, 142.250.154.120, 2a00:1450:400c:c06::5e |
| 147.45.79.163 | AS210644 | AS15169 | 95% | cert 6347b019… served by 147.45.79.163 (AS210644) carries SAN fonts.gstatic.com which currently resolves through Google (AS15169) at 142.251.127.94, 2a00:1450:4001:c25::5e, 192.178.183.94, 2a00:1450:4001:c0f::5e |
| 84.32.64.213 | AS59642 | AS15169 | 95% | cert f22d2d7f… served by 84.32.64.213 (AS59642) carries SAN gstatic.com which currently resolves through Google (AS15169) at 142.250.154.94, 2a00:1450:400c:c06::78, 142.250.154.120, 2a00:1450:400c:c06::5e |
| 45.78.5.199 | AS25820 | AS15169 | 95% | cert 2b84c0ad… served by 45.78.5.199 (AS25820) carries SAN gstatic.com which currently resolves through Google (AS15169) at 142.250.154.94, 2a00:1450:400c:c06::78, 142.250.154.120, 2a00:1450:400c:c06::5e |
| 84.32.208.8 | AS214159 | AS15169 | 95% | cert f22d2d7f… served by 84.32.208.8 (AS214159) carries SAN gstatic.com which currently resolves through Google (AS15169) at 142.251.20.94, 2a00:1450:400c:c06::78, 2a00:1450:400c:c06::5e, 142.251.20.120 |
| 62.60.152.199 | AS203273 | AS15169 | 95% | cert 51c33685… served by 62.60.152.199 (AS203273) carries SAN fonts.gstatic.com which currently resolves through Google (AS15169) at 192.178.183.94, 2a00:1450:4001:c0f::5e, 66.102.1.94, 2a00:1450:400c:c06::5e |
Threat Intelligence
Domain threat-intel pending
Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.
History
Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.
| Type | Value | First seen | Last seen |
|---|---|---|---|
| AAAA | 2a00:1450:400c:c1d::5e | 2026-05-25 21:56:50.553 | 2026-06-18 16:43:10.542 |
| A | 64.233.167.120 | 2026-05-25 21:56:50.553 | 2026-05-25 21:56:50.553 |
| A | 64.233.167.94 | 2026-05-25 21:56:50.553 | 2026-05-25 21:56:50.553 |
| AAAA | 2a00:1450:400c:c1d::78 | 2026-05-25 21:56:50.553 | 2026-06-18 16:43:10.542 |
| A | 142.251.14.94 | 2026-05-26 02:34:00.508 | 2026-06-18 08:28:22.147 |
| NS | ns2.google.com | 2026-05-26 02:34:00.508 | 2026-07-30 07:42:37.413 |
| AAAA | 2a00:1450:4001:c0f::5e | 2026-05-26 02:34:00.508 | 2026-06-21 04:43:06.971 |
| NS | ns4.google.com | 2026-05-26 02:34:00.508 | 2026-07-30 07:42:37.413 |
| CAA | 0 issue "pki.goog" | 2026-05-26 02:34:00.508 | 2026-07-30 07:42:37.413 |
| NS | ns3.google.com | 2026-05-26 02:34:00.508 | 2026-07-30 07:42:37.413 |
| NS | ns1.google.com | 2026-05-26 02:34:00.508 | 2026-07-30 07:42:37.413 |
| TXT | v=spf1 ?all | 2026-05-26 02:34:00.508 | 2026-07-30 07:42:37.413 |
| A | 142.251.14.120 | 2026-05-26 02:34:00.508 | 2026-06-18 08:28:22.147 |
| AAAA | 2a00:1450:4001:c0f::78 | 2026-05-26 02:34:00.508 | 2026-06-21 04:43:06.971 |
| A | 142.251.110.94 | 2026-05-26 04:24:25.813 | 2026-06-20 04:57:46.575 |
| A | 142.251.110.120 | 2026-05-26 04:24:25.813 | 2026-06-20 04:57:46.575 |
| AAAA | 2a00:1450:4001:c1f::5e | 2026-05-26 04:24:25.813 | 2026-06-21 09:06:19.677 |
| AAAA | 2a00:1450:4001:c1f::78 | 2026-05-26 04:24:25.813 | 2026-06-21 09:06:19.677 |
| A | 142.251.13.120 | 2026-05-26 05:56:33.758 | 2026-05-26 19:34:10.931 |
| AAAA | 2a00:1450:4001:c15::78 | 2026-05-26 05:56:33.758 | 2026-06-22 00:33:00.783 |
| A | 142.251.13.94 | 2026-05-26 05:56:33.758 | 2026-05-26 19:34:10.931 |
| AAAA | 2a00:1450:4001:c15::5e | 2026-05-26 05:56:33.758 | 2026-06-22 00:33:00.783 |
| AAAA | 2a00:1450:400c:c0a::5e | 2026-05-26 18:59:09.810 | 2026-05-26 19:34:10.931 |
| AAAA | 2a00:1450:400c:c0a::78 | 2026-05-26 18:59:09.810 | 2026-05-26 19:34:10.931 |
| A | 66.102.1.94 | 2026-05-26 18:59:09.810 | 2026-05-26 22:00:58.872 |
| A | 66.102.1.120 | 2026-05-26 18:59:09.810 | 2026-05-26 22:00:58.872 |
| AAAA | 2a00:1450:400c:c02::5e | 2026-05-26 22:00:58.872 | 2026-05-26 22:00:58.872 |
| AAAA | 2a00:1450:400c:c02::78 | 2026-05-26 22:00:58.872 | 2026-05-26 22:00:58.872 |
| AAAA | 2a00:1450:400c:c06::78 | 2026-05-27 00:17:41.200 | 2026-05-27 12:59:06.588 |
| A | 142.251.20.120 | 2026-05-27 00:17:41.200 | 2026-06-21 04:43:06.971 |
| AAAA | 2a00:1450:400c:c06::5e | 2026-05-27 00:17:41.200 | 2026-05-27 12:59:06.588 |
| A | 142.251.20.94 | 2026-05-27 00:17:41.200 | 2026-06-21 04:43:06.971 |
| A | 142.250.154.120 | 2026-05-27 12:59:06.588 | 2026-05-27 12:59:06.588 |
| A | 142.250.154.94 | 2026-05-27 12:59:06.588 | 2026-05-27 12:59:06.588 |
| A | 216.58.198.35 | 2026-06-15 00:54:33.538 | 2026-06-15 08:53:16.410 |
| AAAA | 2a00:1450:400e:808::2003 | 2026-06-15 00:54:33.538 | 2026-06-17 06:55:00.993 |
| A | 142.251.209.227 | 2026-06-15 08:50:21.315 | 2026-06-17 11:19:04.151 |
| AAAA | 2a00:1450:400e:807::2003 | 2026-06-15 08:53:16.410 | 2026-07-27 08:20:51.170 |
| A | 142.251.142.195 | 2026-06-17 06:55:00.993 | 2026-06-17 06:55:00.993 |
| AAAA | 2a00:1450:400e:814::2003 | 2026-06-17 11:19:04.151 | 2026-06-17 11:19:04.151 |
| AAAA | 2a00:1450:400e:804::2003 | 2026-06-18 08:06:54.602 | 2026-06-19 08:47:38.823 |
| A | 142.251.39.131 | 2026-06-18 08:06:54.602 | 2026-06-21 09:06:19.677 |
| AAAA | 2a00:1450:400c:c1f::5e | 2026-06-20 04:54:46.728 | 2026-06-20 04:54:46.728 |
| AAAA | 2a00:1450:400c:c1f::78 | 2026-06-20 04:54:46.728 | 2026-06-20 04:54:46.728 |
| AAAA | 2a00:1450:4001:c17::78 | 2026-06-20 04:57:46.575 | 2026-06-20 04:57:46.575 |
| AAAA | 2a00:1450:4001:c17::5e | 2026-06-20 04:57:46.575 | 2026-06-20 04:57:46.575 |
| A | 173.194.76.94 | 2026-06-22 00:33:00.783 | 2026-06-22 00:33:00.783 |
| A | 173.194.76.120 | 2026-06-22 00:33:00.783 | 2026-06-22 00:33:00.783 |
| A | 142.250.180.3 | 2026-07-15 20:04:13.980 | 2026-07-16 17:25:18.977 |
| AAAA | 2a00:1450:400e:809::2003 | 2026-07-15 20:04:13.980 | 2026-07-21 21:52:37.258 |
| A | 172.217.17.195 | 2026-07-17 10:24:28.026 | 2026-07-28 19:31:00.676 |
| AAAA | 2a00:1450:400e:810::2003 | 2026-07-18 04:27:54.557 | 2026-07-18 04:27:54.557 |
| A | 172.217.168.99 | 2026-07-18 04:27:54.557 | 2026-07-18 04:27:54.557 |
| A | 172.217.171.67 | 2026-07-19 00:05:27.300 | 2026-07-19 00:05:27.300 |
| AAAA | 2a00:1450:4017:81e::2003 | 2026-07-19 15:44:49.207 | 2026-07-19 15:44:49.207 |
| AAAA | 2a00:1450:400e:806::2003 | 2026-07-21 22:39:47.486 | 2026-07-21 22:49:20.997 |
| A | 172.217.23.227 | 2026-07-22 20:14:36.796 | 2026-07-22 20:14:36.796 |
| AAAA | 2a00:1450:400e:80b::2003 | 2026-07-22 20:14:36.796 | 2026-07-30 07:42:37.413 |
| A | 142.251.142.99 | 2026-07-22 20:34:20.157 | 2026-07-22 20:34:20.157 |
| A | 192.178.24.131 | 2026-07-23 16:15:21.667 | 2026-07-23 16:15:21.667 |
| AAAA | 2a00:1450:4001:c21::5e | 2026-07-25 21:32:54.037 | 2026-07-25 21:32:54.037 |
| AAAA | 2a00:1450:4001:c21::78 | 2026-07-25 21:32:54.037 | 2026-07-25 21:32:54.037 |
| A | 216.58.198.3 | 2026-07-25 21:32:54.037 | 2026-07-25 21:32:54.037 |
| AAAA | 2a00:1450:400e:811::2003 | 2026-07-26 05:47:42.260 | 2026-07-26 05:47:42.260 |
| AAAA | 2a00:1450:4017:821::2003 | 2026-07-27 11:30:55.038 | 2026-07-27 11:30:55.038 |
| AAAA | 2a00:1450:4001:c13::78 | 2026-07-28 19:31:00.676 | 2026-07-28 19:31:00.676 |
| AAAA | 2a00:1450:4001:c13::5e | 2026-07-28 19:31:00.676 | 2026-07-28 19:31:00.676 |
| A | 172.217.171.99 | 2026-07-30 07:41:37.362 | 2026-07-30 07:42:37.413 |