Domain
ssnc.cloud
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of ssnc.cloud
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
Hosting IPs
156
A/AAAA targets
Subdomains
4,540
CT + scan + body
Record Types
2
seen in DNS
Observed Certs
14
in our scans
DNS Records
A
—
AAAA
—
MX
—
NS
inetdns.ssnc.cloud, inetdns1.ssnc.cloud
TXT
0580d575c031468382e2e76cf01a0733, 1e5810e4bf61449d8760b6d774dd5ed9, 5qx8cj2qnzltww5g8fz62kq60xcx1yws, 7lz2d9b3mltsnm0zw2r87h36sr9r070k, _4nn6nbvnq72esvngv072byn3mb4bxy9, _69pi5d7n4w6wl9hfxbda5d5ogiiv3u2, _habi4nsww06n8in1mmjz3ldkg90b5ga, ca3-ba09bbb7f55e468584e5684340f96aea
CNAME
—
CAA
—
WHOIS / Registration
Registration data planned
Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.
Subdomains
Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.
Tech Stack
Tech detection pending
Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.
TLS Certificates
Subject: innoprod70stl.ssnc.cloud
Issuer: ZeroSSL RSA DV SSL CA 2
SANs: innoprod70stl.ssnc.cloud
Subject: aci-uat.ssnc.cloud
Issuer: ZeroSSL RSA DV SSL CA 2
SANs: aci-uat.ssnc.cloud
Subject: secure-data-sender-prod-dr-lb.ssnc.cloud
Issuer: ZeroSSL RSA DV SSL CA 2
SANs: secure-data-sender-prod-dr-lb.ssnc.cloud
Subject: citidemo.ssnc.cloud
Issuer: ZeroSSL RSA DV SSL CA 2
SANs: citidemo.ssnc.cloud
Subject: nyl-uatb-singularity.ssnc.cloud
Issuer: ZeroSSL RSA DV SSL CA 2
SANs: nyl-uatb-singularity.ssnc.cloud
Subject: sso-dxp-prod-stl.ssnc.cloud
Issuer: ZeroSSL RSA DV SSL CA 2
SANs: sso-dxp-prod-stl.ssnc.cloud
Subject: catprstl.ssnc.cloud
Issuer: ZeroSSL RSA DV SSL CA 2
SANs: catprstl.ssnc.cloud
Subject: innoprod51stl.ssnc.cloud
Issuer: ZeroSSL RSA DV SSL CA 2
SANs: innoprod51stl.ssnc.cloud
Subject: cyberquery.ssnc.cloud
Issuer: ZeroSSL RSA DV SSL CA 2
SANs: cyberquery.ssnc.cloud
Subject: bpcamercdevuxb.ssnc.cloud
Issuer: ZeroSSL RSA DV SSL CA 2
SANs: bpcamercdevuxb.ssnc.cloud
Subject: solutions.ssnc.cloud
Issuer: ZeroSSL RSA DV SSL CA 2
SANs: solutions.ssnc.cloud
Subject: insti-apollo-stl.ssnc.cloud
Issuer: ZeroSSL RSA DV SSL CA 2
SANs: insti-apollo-stl.ssnc.cloud
Subject: invesco-kc.ssnc.cloud
Issuer: ZeroSSL RSA DV SSL CA 2
SANs: invesco-kc.ssnc.cloud
Subject: sfg-prod-ic.ssnc.cloud
Issuer: ZeroSSL RSA DV SSL CA 2
SANs: sfg-prod-ic.ssnc.cloud
Subject: lfgcalc-stl.ssnc.cloud
Issuer: ZeroSSL RSA DV SSL CA 2
SANs: lfgcalc-stl.ssnc.cloud
Subject: sso-rs-prod-stl.ssnc.cloud
Issuer: ZeroSSL RSA DV SSL CA 2
SANs: sso-rs-prod-stl.ssnc.cloud
Subject: dolfeedisclosure-stl.ssnc.cloud
Issuer: ZeroSSL RSA DV SSL CA 2
SANs: dolfeedisclosure-stl.ssnc.cloud
Subject: ttc-cms-staging.ssnc.cloud
Issuer: ZeroSSL RSA DV SSL CA 2
SANs: ttc-cms-staging.ssnc.cloud
Subject: vpn.ssnc.cloud
Issuer: DigiCert EV RSA CA G2
SANs: advpn.ssnc.cloud, advvpn.ssnc.cloud, barvpn01.ssnc.cloud, camvpn01.ssnc.cloud, cayvpn01.ssnc.cloud, czvpn.ssnc.cloud, fxdfwvpn.ssnc.cloud, ic2vpn01.ssnc.cloud, ic2vpn02.ssnc.cloud, icdvpn01.ssnc.cloud, icdvpn02.ssnc.cloud, kaovpn01.ssnc.cloud, lthvpn01.ssnc.cloud, melvpn01.ssnc.cloud, misvpn.ssnc.cloud, mldcvpn01.ssnc.cloud, mum2vpn01.ssnc.cloud, mum5vpn01.ssnc.cloud, mum5vpn02.ssnc.cloud, qcdvpn01.ssnc.cloud, qcvpn.ssnc.cloud, rcdvpn01.ssnc.cloud, sc3vpn01.ssnc.cloud, subukvpn.ssnc.cloud, sydvpn01.ssnc.cloud, vievpn01.ssnc.cloud, vpn.ssnc.cloud, wc2advvpn01.ssnc.cloud, wc2vpn01.ssnc.cloud, wc2vpn02.ssnc.cloud, wcdvpn01.ssnc.cloud, wcdvpn02.ssnc.cloud, wokvpn01.ssnc.cloud, yk2vpn01.ssnc.cloud, yk2vpn02.ssnc.cloud, yktadv1-vpn.ssnc.cloud, yktvpn01.ssnc.cloud, yktvpn02.ssnc.cloud
Subject: sso-health-uat-stl.ssnc.cloud
Issuer: ZeroSSL RSA DV SSL CA 2
SANs: sso-health-uat-stl.ssnc.cloud
Subject: uat-marketing-sites-stl.ssnc.cloud
Issuer: ZeroSSL RSA DV SSL CA 2
SANs: uat-marketing-sites-stl.ssnc.cloud
Subject: learningcenter-prod-kc.ssnc.cloud
Issuer: ZeroSSL RSA DV SSL CA 2
SANs: learningcenter-prod-kc.ssnc.cloud
Subject: msqplansitesearch-uat.ssnc.cloud
Issuer: ZeroSSL RSA DV SSL CA 2
SANs: msqplansitesearch-uat.ssnc.cloud
Subject: clarkstoncapital-stl.ssnc.cloud
Issuer: ZeroSSL RSA DV SSL CA 2
SANs: clarkstoncapital-stl.ssnc.cloud
Subject: ttc-cms-prod-kc.ssnc.cloud
Issuer: ZeroSSL RSA DV SSL CA 2
SANs: ttc-cms-prod-kc.ssnc.cloud
Subject: rsss-dotcms-uat-kc.ssnc.cloud
Issuer: ZeroSSL RSA DV SSL CA 2
SANs: rsss-dotcms-uat-kc.ssnc.cloud
Subject: rsss-dotcms-dotadmin-stage-stl.ssnc.cloud
Issuer: ZeroSSL RSA DV SSL CA 2
SANs: rsss-dotcms-dotadmin-stage-stl.ssnc.cloud
Subject: kc-prod-aloha.ssnc.cloud
Issuer: ZeroSSL RSA DV SSL CA 2
SANs: kc-prod-aloha.ssnc.cloud
Subject: financialtrans-kc.ssnc.cloud
Issuer: ZeroSSL RSA DV SSL CA 2
SANs: financialtrans-kc.ssnc.cloud
Subject: cnofinancial-kc-singularity.ssnc.cloud
Issuer: ZeroSSL RSA DV SSL CA 2
SANs: cnofinancial-kc-singularity.ssnc.cloud
IPs Citing This Domain
No citing IPs found yet
As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.
Origin / IP-Leak
USP
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
| Origin IP | Origin ASN | CDN ASN | Confidence | Reasoning |
|---|---|---|---|---|
| 170.40.179.92 | AS14792 | AS13335 | 95% | cert a9c94928… served by 170.40.179.92 (AS14792) carries SAN innovue2test.ssnc.cloud which currently resolves through Cloudflare (AS13335) at 2606:4700:7::185, 162.159.141.141, 172.66.1.137, 2a06:98c1:58::185 |
| 170.40.179.128 | AS14792 | AS13335 | 95% | cert 2cf9ddda… served by 170.40.179.128 (AS14792) carries SAN bpccbpmduatuxb.ssnc.cloud which currently resolves through Cloudflare (AS13335) at 2606:4700:7::185, 162.159.141.141, 172.66.1.137, 2a06:98c1:58::185 |
| 170.40.241.33 | AS14792 | AS13335 | 95% | cert 6645ef5f… served by 170.40.241.33 (AS14792) carries SAN vie-prod-gio-2-istio-gateway.ssnc.cloud which currently resolves through Cloudflare (AS13335) at 2606:4700:7::185, 162.159.141.141, 172.66.1.137, 2a06:98c1:58::185 |
| 170.40.177.142 | AS14792 | AS13335 | 95% | cert 35e745b3… served by 170.40.177.142 (AS14792) carries SAN apis.ssnc.cloud which currently resolves through Cloudflare (AS13335) at 2606:4700:7::185, 162.159.141.141, 172.66.1.137, 2a06:98c1:58::185 |
| 170.40.134.10 | AS14792 | AS13335 | 95% | cert 5fc88e28… served by 170.40.134.10 (AS14792) carries SAN mfa-wp3-uat-au-east-mel.ssnc.cloud which currently resolves through Cloudflare (AS13335) at 2606:4700:7::185, 162.159.141.141, 172.66.1.137, 2a06:98c1:58::185 |
| 170.40.185.15 | AS14792 | AS13335 | 95% | cert a806a45f… served by 170.40.185.15 (AS14792) carries SAN sso-rs-uat-wdc.ssnc.cloud which currently resolves through Cloudflare (AS13335) at 2606:4700:7::185, 162.159.141.141, 172.66.1.137, 2a06:98c1:58::185 |
| 170.40.181.38 | AS14792 | AS13335 | 95% | cert d5d21613… served by 170.40.181.38 (AS14792) carries SAN lyric-kc.ssnc.cloud which currently resolves through Cloudflare (AS13335) at 2606:4700:7::185, 162.159.141.141, 172.66.1.137, 2a06:98c1:58::185 |
| 170.40.185.200 | AS14792 | AS13335 | 95% | cert af1ce696… served by 170.40.185.200 (AS14792) carries SAN financialtrans-kc.ssnc.cloud which currently resolves through Cloudflare (AS13335) at 2606:4700:7::185, 162.159.141.141, 172.66.1.137, 2a06:98c1:58::185 |
| 170.40.177.219 | AS14792 | AS13335 | 95% | cert b21db39d… served by 170.40.177.219 (AS14792) carries SAN plancommunications-dev.ssnc.cloud which currently resolves through Cloudflare (AS13335) at 2606:4700:7::185, 162.159.141.141, 172.66.1.137, 2a06:98c1:58::185 |
| 170.40.177.184 | AS14792 | AS13335 | 95% | cert 2771cd75… served by 170.40.177.184 (AS14792) carries SAN apollo-kc.ssnc.cloud which currently resolves through Cloudflare (AS13335) at 2606:4700:7::185, 162.159.141.141, 172.66.1.137, 2a06:98c1:58::185 |
| 170.40.181.146 | AS14792 | AS13335 | 95% | cert 89a5dd61… served by 170.40.181.146 (AS14792) carries SAN jira-awd.ssnc.cloud which currently resolves through Cloudflare (AS13335) at 2606:4700:7::185, 162.159.141.141, 172.66.1.137, 2a06:98c1:58::185 |
| 170.40.178.118 | AS14792 | AS13335 | 95% | cert 741ed9e1… served by 170.40.178.118 (AS14792) carries SAN allspringglobal-uat-kc.ssnc.cloud which currently resolves through Cloudflare (AS13335) at 2606:4700:7::185, 162.159.141.141, 172.66.1.137, 2a06:98c1:58::185 |
| 170.40.179.98 | AS14792 | AS13335 | 95% | cert 9ce20437… served by 170.40.179.98 (AS14792) carries SAN nyl-prd-kc-singularity.ssnc.cloud which currently resolves through Cloudflare (AS13335) at 2606:4700:7::185, 162.159.141.141, 172.66.1.137, 2a06:98c1:58::185 |
| 170.40.197.74 | AS14792 | AS13335 | 95% | cert 2edb6b93… served by 170.40.197.74 (AS14792) carries SAN lyric-auth-stl.ssnc.cloud which currently resolves through Cloudflare (AS13335) at 2606:4700:7::185, 162.159.141.141, 172.66.1.137, 2a06:98c1:58::185 |
| 170.40.179.27 | AS14792 | AS13335 | 95% | cert 7884e021… served by 170.40.179.27 (AS14792) carries SAN awddemo-uxbuilder.ssnc.cloud which currently resolves through Cloudflare (AS13335) at 2606:4700:7::185, 162.159.141.141, 172.66.1.137, 2a06:98c1:58::185 |
| 170.40.185.67 | AS14792 | AS13335 | 95% | cert a377be7e… served by 170.40.185.67 (AS14792) carries SAN riccapi-kc.ssnc.cloud which currently resolves through Cloudflare (AS13335) at 2606:4700:7::185, 162.159.141.141, 172.66.1.137, 2a06:98c1:58::185 |
| 170.40.179.6 | AS14792 | AS13335 | 95% | cert a8915089… served by 170.40.179.6 (AS14792) carries SAN jhinvestments-uat.ssnc.cloud which currently resolves through Cloudflare (AS13335) at 2606:4700:7::185, 162.159.141.141, 172.66.1.137, 2a06:98c1:58::185 |
| 170.40.178.93 | AS14792 | AS13335 | 95% | cert e4523207… served by 170.40.178.93 (AS14792) carries SAN bpcblstmdev.ssnc.cloud which currently resolves through Cloudflare (AS13335) at 2606:4700:7::185, 162.159.141.141, 172.66.1.137, 2a06:98c1:58::185 |
| 170.40.178.49 | AS14792 | AS13335 | 95% | cert 6fef430c… served by 170.40.178.49 (AS14792) carries SAN kc-bpcamercprod.ssnc.cloud which currently resolves through Cloudflare (AS13335) at 2606:4700:7::185, 162.159.141.141, 172.66.1.137, 2a06:98c1:58::185 |
| 170.40.177.4 | AS14792 | AS13335 | 95% | cert 60706aca… served by 170.40.177.4 (AS14792) carries SAN ssnc-zoom-api.ssnc.cloud which currently resolves through Cloudflare (AS13335) at 2606:4700:7::185, 162.159.141.141, 172.66.1.137, 2a06:98c1:58::185 |
| 170.40.181.184 | AS14792 | AS13335 | 95% | cert 576194a9… served by 170.40.181.184 (AS14792) carries SAN calculatorservice.ssnc.cloud which currently resolves through Cloudflare (AS13335) at 2606:4700:7::185, 162.159.141.141, 172.66.1.137, 2a06:98c1:58::185 |
| 170.40.181.141 | AS14792 | AS13335 | 95% | cert abff5c1f… served by 170.40.181.141 (AS14792) carries SAN invesco-uat.ssnc.cloud which currently resolves through Cloudflare (AS13335) at 2606:4700:7::185, 162.159.141.141, 172.66.1.137, 2a06:98c1:58::185 |
| 170.40.198.82 | AS14792 | AS13335 | 95% | cert 3a474760… served by 170.40.198.82 (AS14792) carries SAN sso-dxp-prod-stl.ssnc.cloud which currently resolves through Cloudflare (AS13335) at 2606:4700:7::185, 162.159.141.141, 172.66.1.137, 2a06:98c1:58::185 |
| 170.40.179.93 | AS14792 | AS13335 | 95% | cert 485ee1d9… served by 170.40.179.93 (AS14792) carries SAN fanmail.ssnc.cloud which currently resolves through Cloudflare (AS13335) at 2606:4700:7::185, 162.159.141.141, 172.66.1.137, 2a06:98c1:58::185 |
| 170.40.212.91 | AS14792 | AS13335 | 95% | cert b7c8b5b7… served by 170.40.212.91 (AS14792) carries SAN dimensional-stl.ssnc.cloud which currently resolves through Cloudflare (AS13335) at 2606:4700:7::185, 162.159.141.141, 172.66.1.137, 2a06:98c1:58::185 |
Threat Intelligence
Domain threat-intel pending
Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.
History
Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.
| Type | Value | First seen | Last seen |
|---|---|---|---|
| TXT | ca3-ba09bbb7f55e468584e5684340f96aea | 2026-06-01 22:15:58.615 | 2026-07-15 20:04:13.980 |
| TXT | _habi4nsww06n8in1mmjz3ldkg90b5ga | 2026-06-01 22:15:58.615 | 2026-07-15 20:04:13.980 |
| TXT | m3f54zh48gd0n1mkv6mg9cf2s3wn3j2f | 2026-06-01 22:15:58.615 | 2026-07-15 20:04:13.980 |
| TXT | _69pi5d7n4w6wl9hfxbda5d5ogiiv3u2 | 2026-06-01 22:15:58.615 | 2026-07-15 20:04:13.980 |
| TXT | 0580d575c031468382e2e76cf01a0733 | 2026-06-01 22:15:58.615 | 2026-07-15 20:04:13.980 |
| TXT | v=spf1 mx include:ssnc-corp.cloud -all | 2026-06-01 22:15:58.615 | 2026-07-15 20:04:13.980 |
| TXT | 7lz2d9b3mltsnm0zw2r87h36sr9r070k | 2026-06-01 22:15:58.615 | 2026-07-15 20:04:13.980 |
| TXT | zyzv3vnw0tfkwnh9p9np67vt4ynbg16t | 2026-06-01 22:15:58.615 | 2026-07-15 20:04:13.980 |
| TXT | 5qx8cj2qnzltww5g8fz62kq60xcx1yws | 2026-06-01 22:15:58.615 | 2026-07-15 20:04:13.980 |
| TXT | 1e5810e4bf61449d8760b6d774dd5ed9 | 2026-06-01 22:15:58.615 | 2026-07-15 20:04:13.980 |
| NS | inetdns1.ssnc.cloud | 2026-06-01 22:15:58.615 | 2026-07-15 20:04:13.980 |
| TXT | _4nn6nbvnq72esvngv072byn3mb4bxy9 | 2026-06-01 22:15:58.615 | 2026-07-15 20:04:13.980 |
| NS | inetdns.ssnc.cloud | 2026-06-01 22:15:58.615 | 2026-07-15 20:04:13.980 |
| TXT | rvd891gztmsb8qs5l3x4gy805ntqhgz1 | 2026-06-01 22:15:58.615 | 2026-07-15 20:04:13.980 |
| TXT | z25ywcmdlmvg87kvcnx6y3rql4dw98y3 | 2026-06-01 22:15:58.615 | 2026-07-15 20:04:13.980 |