Domain
netcraft.com
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of netcraft.com
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
Hosting IPs
—
A/AAAA targets
Subdomains
—
CT + scan + body
Record Types
—
seen in DNS
Observed Certs
—
in our scans
DNS Records
A
104.20.35.98, 108.162.192.2, 172.66.147.145
AAAA
—
MX
10 mail-1c.netcraft.com, 5 mail-1a.netcraft.com
NS
authns1.netcraft.com, authns2.netcraft.com
TXT
1password-site-verification=ZA553LO4H5D7DLOSEEVMANPY7U, 2H34Q8VH72QhUtCduv7OEbsvE1LLryylb1E9aZsVh4eaB37nLqpLM5B3UnMw86cOHU4n1RxuB2eCTfnoOCmODQ==, MS=ms49835954, _75mb3xufdrh35dw898hw0p8vckftcc7, _famyu9l9mcxbfiq1018pei5vfj5zzef, _hp7lg0lay1t9cbfwql6xdh1dkxfur12, _z5gclenbg290wn5dbl0hgy8w1s7ltco, adobe-idp-site-verification=09537a9e1085d784a149eb5042eef1bc9a8de3f85b46e68b3ef0037985dfc1c5
CNAME
—
CAA
0 issue "amazon.com", 0 issue "comodoca.com", 0 issue "digicert.com; cansignhttpexchanges=yes", 0 issue "globalsign.com", 0 issue "letsencrypt.org", 0 issue "pki.goog", 0 issuewild "amazon.com", 0 issuewild "digicert.com; cansignhttpexchanges=yes"
WHOIS / Registration
Registration data planned
Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.
Subdomains
Subdomain enumeration pending
Every subdomain ever issued a TLS cert under this apex — extracted from Certificate Transparency logs, our own scan observations and body references.
Tech Stack
Tech detection pending
Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.
TLS Certificates
Subject: austere.gonetcraft.com
Issuer: YE1
SANs: austere.gonetcraft.com
Subject: extranet.netcraft.com.au
Issuer: YR2
SANs: extranet.netcraft.com.au
Subject: ncmon02.netcraft.com.au
Issuer: YR2
SANs: ncmon02.netcraft.com.au
Subject: *.netcraft.com.mo
Issuer: Alibaba Cloud GCC R3 AlphaSSL CA 2023
SANs: *.netcraft.com.mo, netcraft.com.mo
Subject: *.netcraft.com
Issuer: Thawte TLS RSA CA G1
SANs: *.netcraft.com, netcraft.com
Subject: *.netcraft.com
Issuer: Thawte TLS RSA CA G1
SANs: *.netcraft.com, netcraft.com
Subject: *.netcraft.com
Issuer: Thawte TLS RSA CA G1
SANs: *.netcraft.com, netcraft.com
Subject: *.netcraft.com
Issuer: Thawte TLS RSA CA G1
SANs: *.netcraft.com, netcraft.com
Subject: *.netcraft.com
Issuer: Thawte TLS RSA CA G1
SANs: *.netcraft.com, netcraft.com
Subject: jts.netcraft.com.au
Issuer: R12
SANs: jts.netcraft.com.au
Subject: emdr.gonetcraft.com
Issuer: R13
SANs: emdr.gonetcraft.com
Subject: honeypot-api.netcraft.com
Issuer: Amazon RSA 2048 M04
SANs: honeypot-api.netcraft.com, honeypot-log-api.netcraft.com, siem-report.netcraft.com
Subject: *.netcraft.com
Issuer: Thawte TLS RSA CA G1
SANs: *.netcraft.com, netcraft.com
Subject: *.netcraft.com.mo
Issuer: Alibaba Cloud GCC R3 AlphaSSL CA 2023
SANs: *.netcraft.com.mo, netcraft.com.mo
Subject: rchat.netcraft.com.au
Issuer: E7
SANs: rchat.netcraft.com.au
Subject: *.netcraft.com
Issuer: Thawte TLS RSA CA G1
SANs: *.netcraft.com, netcraft.com
Subject: *.netcraft.com
Issuer: Thawte TLS RSA CA G1
SANs: *.netcraft.com, netcraft.com
Subject: *.netcraft.com
Issuer: Thawte TLS RSA CA G1
SANs: *.netcraft.com, netcraft.com
Subject: *.netcraft.com
Issuer: Thawte TLS RSA CA G1
SANs: *.netcraft.com, netcraft.com
Subject: *.netcraft.com
Issuer: Thawte TLS RSA CA G1
SANs: *.netcraft.com, netcraft.com
Subject: scamalert.netcraft.com
Issuer: Amazon RSA 2048 M04
SANs: *.scamalert.netcraft.com, scamalert.netcraft.com
Subject: *.netcraft.com
Issuer: Thawte TLS RSA CA G1
SANs: *.netcraft.com, netcraft.com
Subject: report.netcraft.com
Issuer: Amazon RSA 2048 M04
SANs: report.netcraft.com
Subject: dailyscan.netcraft.com
Issuer: Amazon RSA 2048 M01
SANs: dailyscan.netcraft.com
Subject: *.netcraft.com
Issuer: Thawte TLS RSA CA G1
SANs: *.netcraft.com, netcraft.com
Subject: discovery.netcraft.com
Issuer: Amazon RSA 2048 M04
SANs: *.discovery.netcraft.com, discovery.netcraft.com
Subject: *.netcraft.com
Issuer: Thawte TLS RSA CA G1
SANs: *.netcraft.com, netcraft.com
Subject: *.netcraft.com
Issuer: Thawte TLS RSA CA G1
SANs: *.netcraft.com, netcraft.com
Subject: predicta.gonetcraft.com
Issuer: E5
SANs: predicta.gonetcraft.com
Subject: troon.gonetcraft.com
Issuer: E7
SANs: troon.gonetcraft.com
IPs Citing This Domain
No citing IPs found yet
As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.
Origin / IP-Leak
USP
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
No origin-IP leaks detected (yet)
Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.
CT-Log Evidence
Certificates from public Certificate Transparency logs whose subject or SAN names this domain — including historic certs we never observed live.
0177981ef6ad673c…
google · argon2026h2
Subject: *.netcraft.com
Issuer: Thawte TLS RSA CA G1
SANs: netcraft.com, *.netcraft.com
Valid: 2025-08-08 00:00:00 → 2026-09-06 23:59:59
8364cea1e85a33e5…
cloudflare · nimbus2026
Subject: *.netcraft.com
Issuer: Thawte TLS RSA CA G1
SANs: netcraft.com, *.netcraft.com
Valid: 2025-08-08 00:00:00 → 2026-09-06 23:59:59
Threat Intelligence
Domain threat-intel pending
Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.
History
Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.
| Type | Value | First seen | Last seen |
|---|---|---|---|
| TXT | cloudflare_dashboard_sso=b27c6f6f85f06174ca5bc1a3f9558834 | 2026-05-25 22:09:29.497 | 2026-07-27 02:11:56.466 |
| TXT | ahrefs-site-verification_4f46fda8c441afe71a611fd95e5cb02672d3d760130de776183c4c7fdfa06621 | 2026-05-25 22:09:29.497 | 2026-07-27 02:11:56.466 |
| TXT | mongodb-site-verification=vm70hiALv18h4WOLhEDIsB6i1PLZX3fb | 2026-05-25 22:09:29.497 | 2026-07-27 02:11:56.466 |
| TXT | anthropic-domain-verification-9cp84d=k4GUIpciFYaEwKsGL7RqsTQVO | 2026-05-25 22:09:29.497 | 2026-07-27 02:11:56.466 |
| TXT | 1password-site-verification=ZA553LO4H5D7DLOSEEVMANPY7U | 2026-05-25 22:09:29.497 | 2026-07-27 02:11:56.466 |
| TXT | MS=ms49835954 | 2026-05-25 22:09:29.497 | 2026-07-27 02:11:56.466 |
| TXT | openai-domain-verification=dv-21e2PYdryYmRKr3bz0bLg3Br | 2026-05-25 22:09:29.497 | 2026-07-27 02:11:56.466 |
| TXT | amazon-business-verification=1c9e5854fc7634f56fc4cec84cdde8b8beb74c609e88a9d75bfe2c2c79ab816f | 2026-05-25 22:09:29.497 | 2026-07-27 02:11:56.466 |
| A | 108.162.192.2 | 2026-05-25 22:09:29.497 | 2026-07-27 02:11:56.466 |
| TXT | v=spf1 ip4:194.72.238.0/24 ip4:91.236.66.192/29 ip4:52.31.138.216/32 ip4:52.19.95.184/32 ip4:52.48.1.81/32 ip6:2a00:2381:ebdb::/64 mx include:_spf.google.com include:spf.protection.outlook.com include:25394294.spf06.hubspotemail.net -all | 2026-05-25 22:09:29.497 | 2026-07-27 02:11:56.466 |
| TXT | jetbrains-domain-verification=9jyzvn1i2e9ngqfogqbjw2xrd | 2026-05-25 22:09:29.497 | 2026-07-27 02:11:56.466 |
| MX | 5 mail-1a.netcraft.com | 2026-05-25 22:09:29.497 | 2026-07-27 02:11:56.466 |
| TXT | google-site-verification=CY7gTbw6-qe_zYUy_AUjZNYnwll3m0udP8C-khCrRYE | 2026-05-25 22:09:29.497 | 2026-07-27 02:11:56.466 |
| TXT | 2H34Q8VH72QhUtCduv7OEbsvE1LLryylb1E9aZsVh4eaB37nLqpLM5B3UnMw86cOHU4n1RxuB2eCTfnoOCmODQ== | 2026-05-25 22:09:29.497 | 2026-07-27 02:11:56.466 |
| TXT | atlassian-domain-verification=URvw4QypMibuOCaPklcKUHFwYVkgdVIPaKAiaD2H3bgKgmFYXuOTlQmkH9sBaSfa | 2026-05-25 22:09:29.497 | 2026-07-27 02:11:56.466 |
| TXT | rippling-domain-verification=2c9fe900dbf9a71b | 2026-05-25 22:09:29.497 | 2026-07-27 02:11:56.466 |
| MX | 10 mail-1c.netcraft.com | 2026-05-25 22:09:29.497 | 2026-07-27 02:11:56.466 |
| A | 104.20.35.98 | 2026-05-25 22:09:29.497 | 2026-07-27 02:11:56.466 |
| A | 172.66.147.145 | 2026-05-25 22:09:29.497 | 2026-07-27 02:11:56.466 |
| TXT | atlassian-sending-domain-verification=d7bd07f1-665f-470e-93c1-bf27e5898d17 | 2026-05-25 22:09:29.497 | 2026-07-27 02:11:56.466 |
| TXT | incident.netcraft.com=ca3-375613219ce04e68b6648d466cc99e37 | 2026-05-25 22:09:29.497 | 2026-07-27 02:11:56.466 |
| TXT | docusign=134e8b44-f6f4-408b-b0f0-9b5fccdb834a | 2026-05-25 22:09:29.497 | 2026-07-27 02:11:56.466 |
| TXT | _z5gclenbg290wn5dbl0hgy8w1s7ltco | 2026-05-25 22:09:29.497 | 2026-06-23 01:26:56.827 |
| TXT | google-site-verification=xK788d_bQ9v17KsJDWBsc1Ilw_RQrV6ONCkDUrPnJBE | 2026-05-25 22:09:29.497 | 2026-07-27 02:11:56.466 |
| TXT | adobe-idp-site-verification=09537a9e1085d784a149eb5042eef1bc9a8de3f85b46e68b3ef0037985dfc1c5 | 2026-05-25 22:09:29.497 | 2026-07-27 02:11:56.466 |
| NS | authns1.netcraft.com | 2026-05-25 22:09:29.497 | 2026-07-27 02:11:56.466 |
| NS | authns2.netcraft.com | 2026-05-25 22:09:29.497 | 2026-07-27 02:11:56.466 |
| TXT | cloudflare-verify.netcraft.com=342358972-2078293 | 2026-05-25 22:09:29.497 | 2026-07-27 02:11:56.466 |
| TXT | netcraft.com=ca3-f80c908d0460420ea415db4073b0a29c | 2026-05-25 22:09:29.497 | 2026-07-27 02:11:56.466 |
| TXT | cursor-domain-verification-twtv0p=x1nt7nUHdw6GCZszJez9K67Df | 2026-05-25 22:09:29.497 | 2026-07-27 02:11:56.466 |
| TXT | google-site-verification=0mypX-WqeL_8PkENmV37EH_tBQa2UK7M3F8VP5VaqkU | 2026-05-25 22:09:29.497 | 2026-07-27 02:11:56.466 |
| TXT | facebook-domain-verification=q84ext6g441elo2m1niy7d42k2t6qi | 2026-05-25 22:09:29.497 | 2026-07-27 02:11:56.466 |
| CAA | 0 issue "digicert.com; cansignhttpexchanges=yes" | 2026-05-26 00:17:38.499 | 2026-07-27 02:11:56.466 |
| CAA | 0 issuewild "pki.goog; cansignhttpexchanges=yes" | 2026-05-26 00:17:38.499 | 2026-07-27 02:11:56.466 |
| CAA | 0 issue "pki.goog" | 2026-05-26 00:17:38.499 | 2026-07-27 02:11:56.466 |
| CAA | 0 issuewild "digicert.com; cansignhttpexchanges=yes" | 2026-05-26 00:17:38.499 | 2026-07-27 02:11:56.466 |
| CAA | 0 issue "letsencrypt.org" | 2026-05-26 00:17:38.499 | 2026-07-27 02:11:56.466 |
| CAA | 0 issue "globalsign.com" | 2026-05-26 00:17:38.499 | 2026-07-27 02:11:56.466 |
| CAA | 0 issue "amazon.com" | 2026-05-26 00:17:38.499 | 2026-07-27 02:11:56.466 |
| CAA | 0 issue "comodoca.com" | 2026-05-26 00:17:38.499 | 2026-07-27 02:11:56.466 |
| CAA | 0 issuewild "amazon.com" | 2026-05-26 00:17:38.499 | 2026-07-27 02:11:56.466 |
| TXT | zapier-domain-verification-challenge=6a7e064f-fac6-434c-a402-8cd4a7377505 | 2026-05-27 10:09:22.383 | 2026-07-27 02:11:56.466 |
| TXT | asv=e6e08661740e2c784499e3682a0f303c | 2026-06-04 23:51:53.290 | 2026-07-27 02:11:56.466 |
| TXT | _75mb3xufdrh35dw898hw0p8vckftcc7 | 2026-06-23 14:57:05.679 | 2026-07-27 02:11:56.466 |
| TXT | _famyu9l9mcxbfiq1018pei5vfj5zzef | 2026-06-23 14:57:05.679 | 2026-07-27 02:11:56.466 |
| TXT | _hp7lg0lay1t9cbfwql6xdh1dkxfur12 | 2026-06-23 14:57:05.679 | 2026-07-27 02:11:56.466 |
| TXT | brevo-code:9bcd75774fb55b22baf7c18bb249a879 | 2026-07-15 20:04:13.980 | 2026-07-27 02:11:56.466 |