Domain

backpack.exchange

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

DNS Check HTTP Check Run Full Scan .exchange TLD

Run a live full scan of backpack.exchange

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now

Hosting IPs

A/AAAA targets

Subdomains

CT + scan + body

Record Types

seen in DNS

Observed Certs

in our scans

DNS Records

13.32.121.116, 13.32.121.117, 13.32.121.21, 13.32.121.67, 18.239.50.11, 18.239.50.115, 18.239.50.116, 18.239.50.24

AAAA

—

1 aspmx.l.google.com, 10 alt3.aspmx.l.google.com, 10 alt4.aspmx.l.google.com, 5 alt1.aspmx.l.google.com, 5 alt2.aspmx.l.google.com

ns-1436.awsdns-51.org, ns-1665.awsdns-16.co.uk, ns-192.awsdns-24.com, ns-592.awsdns-10.net

TXT

google-site-verification=LyjcjIoDLNRSAOD9bdNi-Y-H1rMt8TDyb6HZ5Vf4t1Y, v=spf1 include:dc-aa8e722993._spfm.backpack.exchange ~all

CNAME

—

CAA

—

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.

Subdomain	Resolves to	Last seen
api.internal.backpack.exchange	18.181.65.5 13.192.69.57 13.193.227.203 54.168.38.18 +10	2026-06-17 02:52:24.168
api2.internal.backpack.exchange	18.176.237.198 18.181.65.5 52.197.236.60 54.178.27.191 +10	2026-06-17 02:52:24.168
backpack.exchange	18.239.50.24 13.32.121.117 13.32.121.21 13.32.121.67 +8	2026-06-26 02:05:01.915
ui.backpack.exchange	16.76.28.158 52.198.83.104 13.192.131.202 52.192.13.36 +5	2026-05-31 12:19:40.782
api2.backpack.exchange	18.181.65.5 54.178.27.191 13.193.183.43 54.249.48.103 +3	2026-05-31 12:19:40.782
api.backpack.exchange	3.174.46.16 3.174.46.17 3.174.46.86 3.174.46.108	2026-05-31 12:19:40.782
employee.backpack.exchange	104.18.40.47 172.64.147.209 2606:4700:4402::ac40:93d1 2606:4700:4407::6812:282f	2026-06-23 16:14:43.227
eu.backpack.exchange	18.239.50.24 18.239.50.115 18.239.50.116 18.239.50.11	2026-06-15 12:47:14.281
www.backpack.exchange	18.239.50.115 18.239.50.116 18.239.50.24 18.239.50.11	2026-06-15 12:47:14.281
address-watcher.backpack.exchange	35.79.86.233 54.238.103.110 35.74.138.49	2026-06-04 06:46:03.820
ws.backpack.exchange	13.193.132.59 18.181.54.82 54.248.161.3	2026-05-26 02:38:03.884
ws2.backpack.exchange	13.193.132.59 18.181.54.82 54.248.161.3	2026-05-26 02:38:03.884
admin.internal.backpack.exchange		1970-01-01 00:00:00.000
api.admin.internal.backpack.exchange		1970-01-01 00:00:00.000
api.cdn1.backpack.exchange		1970-01-01 00:00:00.000
api.cdn2.backpack.exchange		1970-01-01 00:00:00.000
api.cdn3.backpack.exchange		1970-01-01 00:00:00.000
api.cdn4.backpack.exchange		1970-01-01 00:00:00.000
api.cdn5.backpack.exchange		1970-01-01 00:00:00.000
api.eu.backpack.exchange		1970-01-01 00:00:00.000
api.internal.trading.backpack.exchange		1970-01-01 00:00:00.000
api.vasp.internal.backpack.exchange		1970-01-01 00:00:00.000
bitcoin.backpack.exchange		1970-01-01 00:00:00.000
bolt.backpack.exchange		1970-01-01 00:00:00.000
charts.backpack.exchange		1970-01-01 00:00:00.000
download.backpack.exchange		1970-01-01 00:00:00.000
eu.support.backpack.exchange		1970-01-01 00:00:00.000
guide.backpack.exchange		1970-01-01 00:00:00.000
internal.backpack.exchange		1970-01-01 00:00:00.000
shop.backpack.exchange		1970-01-01 00:00:00.000
support.backpack.exchange		1970-01-01 00:00:00.000
tr.backpack.exchange		1970-01-01 00:00:00.000
treasury.internal.backpack.exchange		1970-01-01 00:00:00.000
ui.internal.backpack.exchange		1970-01-01 00:00:00.000
ws.internal.backpack.exchange		1970-01-01 00:00:00.000
ws2.internal.backpack.exchange		1970-01-01 00:00:00.000

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

18.181.65.5:443 171aa883cac8…

Subject: backpack.exchange

Issuer: Amazon RSA 2048 M01

SANs: api.backpack.exchange, api.internal.backpack.exchange, api2.backpack.exchange, api2.internal.backpack.exchange, backpack.exchange, ui.backpack.exchange

3.115.189.111:443 6d2423d51a40…

Subject: backpack.exchange

Issuer: Amazon RSA 2048 M04

SANs: api.backpack.exchange, api2.backpack.exchange, backpack.exchange, ui.backpack.exchange

54.249.55.13:443 6d2423d51a40…

Subject: backpack.exchange

Issuer: Amazon RSA 2048 M04

SANs: api.backpack.exchange, api2.backpack.exchange, backpack.exchange, ui.backpack.exchange

13.115.35.47:443 171aa883cac8…

Subject: backpack.exchange

Issuer: Amazon RSA 2048 M01

SANs: api.backpack.exchange, api.internal.backpack.exchange, api2.backpack.exchange, api2.internal.backpack.exchange, backpack.exchange, ui.backpack.exchange

18.177.55.4:443 612739d4bfe3…

Subject: ws.backpack.exchange

Issuer: Amazon RSA 2048 M01

SANs: ws.backpack.exchange, ws.internal.backpack.exchange, ws2.backpack.exchange, ws2.internal.backpack.exchange

IPs Citing This Domain

No citing IPs found yet

As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

No origin-IP leaks detected (yet)

Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.

CT-Log Evidence

Certificates from public Certificate Transparency logs whose subject or SAN names this domain — including historic certs we never observed live.

b8a730051c951725… cloudflare · nimbus2026

Subject: backpack.exchange

Issuer: Amazon RSA 2048 M01

SANs: backpack.exchange, eu.backpack.exchange, tr.backpack.exchange, ui.backpack.exchange, www.backpack.exchange

Valid: 2025-12-02 00:00:00 → 2026-12-31 23:59:59

e99a0f295dbd9b9f… google · argon2026h2

Subject: backpack.exchange

Issuer: Amazon RSA 2048 M01

SANs: backpack.exchange, eu.backpack.exchange, tr.backpack.exchange, ui.backpack.exchange, www.backpack.exchange

Valid: 2025-12-02 00:00:00 → 2026-12-31 23:59:59

b8a730051c951725… google · xenon2026h2

Subject: backpack.exchange

Issuer: Amazon RSA 2048 M01

SANs: backpack.exchange, eu.backpack.exchange, tr.backpack.exchange, ui.backpack.exchange, www.backpack.exchange

Valid: 2025-12-02 00:00:00 → 2026-12-31 23:59:59

e99a0f295dbd9b9f… google · xenon2026h2

Subject: backpack.exchange

Issuer: Amazon RSA 2048 M01

SANs: backpack.exchange, eu.backpack.exchange, tr.backpack.exchange, ui.backpack.exchange, www.backpack.exchange

Valid: 2025-12-02 00:00:00 → 2026-12-31 23:59:59

11631c96351210e2… google · argon2026h2

Subject: backpack.exchange

Issuer: Amazon RSA 2048 M01

SANs: backpack.exchange, eu.backpack.exchange, tr.backpack.exchange, www.backpack.exchange

Valid: 2025-11-04 00:00:00 → 2026-12-03 23:59:59

39d4bfe0465389fc… cloudflare · nimbus2026

Subject: backpack.exchange

Issuer: Amazon RSA 2048 M01

SANs: backpack.exchange, eu.backpack.exchange, tr.backpack.exchange, www.backpack.exchange

Valid: 2025-11-04 00:00:00 → 2026-12-03 23:59:59

11631c96351210e2… cloudflare · nimbus2026

Subject: backpack.exchange

Issuer: Amazon RSA 2048 M01

SANs: backpack.exchange, eu.backpack.exchange, tr.backpack.exchange, www.backpack.exchange

Valid: 2025-11-04 00:00:00 → 2026-12-03 23:59:59

39d4bfe0465389fc… google · xenon2026h2

Subject: backpack.exchange

Issuer: Amazon RSA 2048 M01

SANs: backpack.exchange, eu.backpack.exchange, tr.backpack.exchange, www.backpack.exchange

Valid: 2025-11-04 00:00:00 → 2026-12-03 23:59:59

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.

Type	Value	First seen	Last seen
A	13.32.121.67	2026-05-26 02:43:02.200	2026-06-25 16:20:16.116
NS	ns-592.awsdns-10.net	2026-05-26 02:43:02.200	2026-06-26 02:05:01.915
A	13.32.121.116	2026-05-26 02:43:02.200	2026-06-25 16:20:16.116
A	13.32.121.21	2026-05-26 02:43:02.200	2026-06-25 16:20:16.116
A	13.32.121.117	2026-05-26 02:43:02.200	2026-06-25 16:20:16.116
NS	ns-1436.awsdns-51.org	2026-05-26 02:43:02.200	2026-06-26 02:05:01.915
NS	ns-192.awsdns-24.com	2026-05-26 02:43:02.200	2026-06-26 02:05:01.915
MX	5 alt2.aspmx.l.google.com	2026-05-26 02:43:02.200	2026-06-26 02:05:01.915
TXT	v=spf1 include:dc-aa8e722993._spfm.backpack.exchange ~all	2026-05-26 02:43:02.200	2026-06-26 02:05:01.915
MX	10 alt4.aspmx.l.google.com	2026-05-26 02:43:02.200	2026-06-26 02:05:01.915
MX	1 aspmx.l.google.com	2026-05-26 02:43:02.200	2026-06-26 02:05:01.915
MX	5 alt1.aspmx.l.google.com	2026-05-26 02:43:02.200	2026-06-26 02:05:01.915
TXT	google-site-verification=LyjcjIoDLNRSAOD9bdNi-Y-H1rMt8TDyb6HZ5Vf4t1Y	2026-05-26 02:43:02.200	2026-06-26 02:05:01.915
MX	10 alt3.aspmx.l.google.com	2026-05-26 02:43:02.200	2026-06-26 02:05:01.915
NS	ns-1665.awsdns-16.co.uk	2026-05-26 02:43:02.200	2026-06-26 02:05:01.915
A	18.64.211.96	2026-06-04 23:33:59.809	2026-06-04 23:33:59.809
A	18.64.211.2	2026-06-04 23:33:59.809	2026-06-04 23:33:59.809
A	18.64.211.46	2026-06-04 23:33:59.809	2026-06-04 23:33:59.809
A	18.64.211.70	2026-06-04 23:33:59.809	2026-06-04 23:33:59.809
A	18.239.50.116	2026-06-05 09:50:15.987	2026-06-26 02:05:01.915
A	18.239.50.11	2026-06-05 09:50:15.987	2026-06-26 02:05:01.915
A	18.239.50.24	2026-06-05 09:50:15.987	2026-06-26 02:05:01.915
A	18.239.50.115	2026-06-05 09:50:15.987	2026-06-26 02:05:01.915