Domain
test.com
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of test.com
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
Hosting IPs
11
A/AAAA targets
Subdomains
99
CT + scan + body
Record Types
2
seen in DNS
Observed Certs
8
in our scans
DNS Records
A
—
AAAA
—
MX
—
NS
—
TXT
—
CNAME
—
CAA
—
WHOIS / Registration
Registration data planned
Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.
Subdomains
Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.
| Subdomain | Resolves to | Last seen |
|---|---|---|
| www.test.com | 2026-07-28 19:31:00.676 | |
| a.test.com | 1970-01-01 00:00:00.000 | |
| applicationgateway.powershell.test.com | 1970-01-01 00:00:00.000 | |
| army.test.com | 1970-01-01 00:00:00.000 | |
| austrsgall.test.com | 1970-01-01 00:00:00.000 | |
| autodiscover.test.com | 1970-01-01 00:00:00.000 | |
| c2rm.test.com | 1970-01-01 00:00:00.000 | |
| cariboo.test.com | 1970-01-01 00:00:00.000 | |
| client.test.com | 1970-01-01 00:00:00.000 | |
| cpanel.test.com | 1970-01-01 00:00:00.000 | |
| cpcalendars.test.com | 1970-01-01 00:00:00.000 | |
| cpcontacts.test.com | 1970-01-01 00:00:00.000 | |
| debian.test.com | 1970-01-01 00:00:00.000 | |
| dev-zeus.test.com | 1970-01-01 00:00:00.000 | |
| dummy.test.com | 1970-01-01 00:00:00.000 | |
| dzx.test.com | 1970-01-01 00:00:00.000 | |
| final.test.com | 1970-01-01 00:00:00.000 | |
| firewall.test.com | 1970-01-01 00:00:00.000 | |
| fsebsprod.test.com | 1970-01-01 00:00:00.000 | |
| grpc.test.com | 1970-01-01 00:00:00.000 | |
| hadoop1.test.com | 1970-01-01 00:00:00.000 | |
| img.test.com | 1970-01-01 00:00:00.000 | |
| interceptor.dualrun.test.com | 1970-01-01 00:00:00.000 | |
| jjonyin.test.com | 1970-01-01 00:00:00.000 | |
| local.test.com | 1970-01-01 00:00:00.000 | |
| mail.test.com | 1970-01-01 00:00:00.000 | |
| mandark.test.com | 1970-01-01 00:00:00.000 | |
| ny.test.com | 1970-01-01 00:00:00.000 | |
| offwx.test.com | 1970-01-01 00:00:00.000 | |
| pannel.test.com | 1970-01-01 00:00:00.000 | |
| ppp.test.com | 1970-01-01 00:00:00.000 | |
| pve.test.com | 1970-01-01 00:00:00.000 | |
| qcon.test.com | 1970-01-01 00:00:00.000 | |
| quay.test.com | 1970-01-01 00:00:00.000 | |
| server.test.com | 1970-01-01 00:00:00.000 | |
| shiraz.test.com | 1970-01-01 00:00:00.000 | |
| sk.ext.test.com | 1970-01-01 00:00:00.000 | |
| sreesha.20260323.test.com | 1970-01-01 00:00:00.000 | |
| test.com | 1970-01-01 00:00:00.000 | |
| test.test.com | 1970-01-01 00:00:00.000 | |
| test1.test.com | 1970-01-01 00:00:00.000 | |
| test2.test.com | 1970-01-01 00:00:00.000 | |
| test3.test.com | 1970-01-01 00:00:00.000 | |
| testorg.test.com | 1970-01-01 00:00:00.000 | |
| th2.test.com | 1970-01-01 00:00:00.000 | |
| wd15024220320forexvpsir4mp12xes.test.com | 1970-01-01 00:00:00.000 | |
| webdisk.test.com | 1970-01-01 00:00:00.000 | |
| webmail.test.com | 1970-01-01 00:00:00.000 | |
| whs_edinburgh_ri.test.com | 1970-01-01 00:00:00.000 | |
| win-lqpgnq2q646.test.com | 1970-01-01 00:00:00.000 | |
| ws50.test.com | 2026-07-25 14:44:47.863 | |
| ws65.test.com | 2026-05-26 03:19:32.089 | |
| ws70.test.com | 2026-06-17 19:31:59.974 | |
| wvuebslb.wvu.test.com | 1970-01-01 00:00:00.000 |
Tech Stack
Tech detection pending
Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.
TLS Certificates
Certificate observations pending
TLS certs naming this domain in subject or SANs will appear here as our scan-layer catches them.
IPs Citing This Domain
No citing IPs found yet
As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.
Origin / IP-Leak
USP
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
| Origin IP | Origin ASN | CDN ASN | Confidence | Reasoning |
|---|---|---|---|---|
| 182.61.28.31 | AS38365 | AS13335 | 95% | cert ad4d7c39… served by 182.61.28.31 (AS38365) carries SAN www.test.com which currently resolves through Cloudflare (AS13335) at 104.18.17.52, 104.18.16.52, 2606:4700::6812:1034, 2606:4700::6812:1134 |
| 220.179.1.54 | AS4134 | AS13335 | 95% | cert 3084a7c1… served by 220.179.1.54 (AS4134) carries SAN www.test.com which currently resolves through Cloudflare (AS13335) at 104.18.17.52, 104.18.16.52, 2606:4700::6812:1034, 2606:4700::6812:1134 |
| 111.170.172.45 | AS151185 | AS13335 | 95% | cert 9b426462… served by 111.170.172.45 (AS151185) carries SAN www.test.com which currently resolves through Cloudflare (AS13335) at 104.18.17.52, 104.18.16.52, 2606:4700::6812:1034, 2606:4700::6812:1134 |
| 117.72.151.125 | AS141679 | AS13335 | 95% | cert 0816385d… served by 117.72.151.125 (AS141679) carries SAN www.test.com which currently resolves through Cloudflare (AS13335) at 104.18.17.52, 104.18.16.52, 2606:4700::6812:1034, 2606:4700::6812:1134 |
| 112.54.51.131 | AS9808 | AS13335 | 95% | cert d317004a… served by 112.54.51.131 (AS9808) carries SAN www.test.com which currently resolves through Cloudflare (AS13335) at 104.18.17.52, 104.18.16.52, 2606:4700::6812:1034, 2606:4700::6812:1134 |
| 154.92.108.176 | AS141356 | AS13335 | 95% | cert 85c3e601… served by 154.92.108.176 (AS141356) carries SAN www.test.com which currently resolves through Cloudflare (AS13335) at 104.18.17.52, 104.18.16.52, 2606:4700::6812:1034, 2606:4700::6812:1134 |
| 156.239.227.193 | AS154321 | AS13335 | 95% | cert 9b426462… served by 156.239.227.193 (AS154321) carries SAN www.test.com which currently resolves through Cloudflare (AS13335) at 172.66.170.130, 104.20.26.89, 2606:4700:10::6814:1a59, 2606:4700:10::ac42:aa82 |
| 103.231.58.64 | AS932 | AS13335 | 95% | cert 9b426462… served by 103.231.58.64 (AS932) carries SAN www.test.com which currently resolves through Cloudflare (AS13335) at 172.66.170.130, 104.20.26.89, 2606:4700:10::6814:1a59, 2606:4700:10::ac42:aa82 |
| 66.154.127.156 | AS35916 | AS13335 | 95% | cert 9b426462… served by 66.154.127.156 (AS35916) carries SAN www.test.com which currently resolves through Cloudflare (AS13335) at 172.66.170.130, 104.20.26.89, 2606:4700:10::6814:1a59, 2606:4700:10::ac42:aa82 |
| 38.76.194.72 | AS152565 | AS13335 | 95% | cert 9b426462… served by 38.76.194.72 (AS152565) carries SAN www.test.com which currently resolves through Cloudflare (AS13335) at 172.66.170.130, 104.20.26.89, 2606:4700:10::6814:1a59, 2606:4700:10::ac42:aa82 |
| 180.76.146.128 | AS38365 | AS13335 | 95% | cert 68dca772… served by 180.76.146.128 (AS38365) carries SAN www.test.com which currently resolves through Cloudflare (AS13335) at 172.66.170.130, 104.20.26.89, 2606:4700:10::6814:1a59, 2606:4700:10::ac42:aa82 |
| 103.164.63.101 | AS401696 | AS13335 | 95% | cert 9b426462… served by 103.164.63.101 (AS401696) carries SAN www.test.com which currently resolves through Cloudflare (AS13335) at 172.66.170.130, 104.20.26.89, 2606:4700:10::6814:1a59, 2606:4700:10::ac42:aa82 |
| 156.233.232.149 | AS401701 | AS13335 | 95% | cert 9b426462… served by 156.233.232.149 (AS401701) carries SAN www.test.com which currently resolves through Cloudflare (AS13335) at 172.66.170.130, 104.20.26.89, 2606:4700:10::6814:1a59, 2606:4700:10::ac42:aa82 |
| 154.219.106.30 | AS401701 | AS13335 | 95% | cert 9b426462… served by 154.219.106.30 (AS401701) carries SAN www.test.com which currently resolves through Cloudflare (AS13335) at 172.66.170.130, 104.20.26.89, 2606:4700:10::6814:1a59, 2606:4700:10::ac42:aa82 |
| 140.210.12.29 | AS134765 | AS13335 | 95% | cert 9b426462… served by 140.210.12.29 (AS134765) carries SAN www.test.com which currently resolves through Cloudflare (AS13335) at 172.66.170.130, 104.20.26.89, 2606:4700:10::6814:1a59, 2606:4700:10::ac42:aa82 |
| 45.192.111.208 | AS401701 | AS13335 | 95% | cert 9b426462… served by 45.192.111.208 (AS401701) carries SAN www.test.com which currently resolves through Cloudflare (AS13335) at 172.66.170.130, 104.20.26.89, 2606:4700:10::6814:1a59, 2606:4700:10::ac42:aa82 |
| 66.225.237.201 | AS23352 | AS13335 | 95% | cert 351e4bb2… served by 66.225.237.201 (AS23352) carries SAN www.test.com which currently resolves through Cloudflare (AS13335) at 172.66.170.130, 104.20.26.89, 2606:4700:10::6814:1a59, 2606:4700:10::ac42:aa82 |
| 152.70.36.5 | AS31898 | AS13335 | 95% | cert 86945507… served by 152.70.36.5 (AS31898) carries SAN www.test.com which currently resolves through Cloudflare (AS13335) at 172.66.170.130, 104.20.26.89, 2606:4700:10::6814:1a59, 2606:4700:10::ac42:aa82 |
| 210.16.165.216 | AS146817 | AS13335 | 95% | cert 9b426462… served by 210.16.165.216 (AS146817) carries SAN www.test.com which currently resolves through Cloudflare (AS13335) at 172.66.170.130, 104.20.26.89, 2606:4700:10::6814:1a59, 2606:4700:10::ac42:aa82 |
| 209.38.186.170 | AS14061 | AS13335 | 95% | cert e46a223a… served by 209.38.186.170 (AS14061) carries SAN www.test.com which currently resolves through Cloudflare (AS13335) at 172.66.170.130, 104.20.26.89, 2606:4700:10::6814:1a59, 2606:4700:10::ac42:aa82 |
| 216.236.32.26 | AS138997 | AS13335 | 95% | cert 9b426462… served by 216.236.32.26 (AS138997) carries SAN www.test.com which currently resolves through Cloudflare (AS13335) at 172.66.170.130, 104.20.26.89, 2606:4700:10::6814:1a59, 2606:4700:10::ac42:aa82 |
| 117.148.171.90 | AS56041 | AS13335 | 95% | cert 4693050f… served by 117.148.171.90 (AS56041) carries SAN www.test.com which currently resolves through Cloudflare (AS13335) at 172.66.170.130, 104.20.26.89, 2606:4700:10::6814:1a59, 2606:4700:10::ac42:aa82 |
| 156.233.232.82 | AS401701 | AS13335 | 95% | cert 9b426462… served by 156.233.232.82 (AS401701) carries SAN www.test.com which currently resolves through Cloudflare (AS13335) at 172.66.170.130, 104.20.26.89, 2606:4700:10::6814:1a59, 2606:4700:10::ac42:aa82 |
| 154.201.79.130 | AS8796 | AS13335 | 95% | cert 9b426462… served by 154.201.79.130 (AS8796) carries SAN www.test.com which currently resolves through Cloudflare (AS13335) at 172.66.170.130, 104.20.26.89, 2606:4700:10::6814:1a59, 2606:4700:10::ac42:aa82 |
| 154.219.104.212 | AS401701 | AS13335 | 95% | cert 9b426462… served by 154.219.104.212 (AS401701) carries SAN www.test.com which currently resolves through Cloudflare (AS13335) at 172.66.170.130, 104.20.26.89, 2606:4700:10::6814:1a59, 2606:4700:10::ac42:aa82 |
CT-Log Evidence
Certificates from public Certificate Transparency logs whose subject or SAN names this domain — including historic certs we never observed live.
ef74afd59e01dd79…
google · argon2026h2
Subject: *.test.com
Issuer: VikingCloud TWG PRE OV CA, Level 1
SANs: *.test.com, test.com
Valid: 2025-10-27 18:14:32 → 2026-11-17 18:13:32
ef74afd59e01dd79…
cloudflare · nimbus2026
Subject: *.test.com
Issuer: VikingCloud TWG PRE OV CA, Level 1
SANs: *.test.com, test.com
Valid: 2025-10-27 18:14:32 → 2026-11-17 18:13:32
Threat Intelligence
Domain threat-intel pending
Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.
History
Domain timeline pending
Passive-DNS history accumulates as our forward-DNS crawler observes A/AAAA/MX/NS/TXT records over time.