Domain
we.shop
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of we.shop
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
Hosting IPs
58
A/AAAA targets
Subdomains
85
CT + scan + body
Record Types
4
seen in DNS
Observed Certs
5
in our scans
DNS Records
A
192.0.78.141, 192.0.78.233
AAAA
—
MX
10 aspmx.l.google.com, 20 alt1.aspmx.l.google.com, 30 alt2.aspmx.l.google.com, 40 alt3.aspmx.l.google.com, 50 alt4.aspmx.l.google.com
NS
ns-1217.awsdns-24.org, ns-1589.awsdns-06.co.uk, ns-468.awsdns-58.com, ns-967.awsdns-56.net
TXT
1password-site-verification=KIHWBSQBQFHV5E7EULPMK2XZQY, MS=ms16971720, _globalsign-domain-verification=Mr7TWhme95XNuYLKis_6wvd0e1DafKoRzz9CeeGlnw, anthropic-domain-verification-2x6wrx=SfxmO6UO3o1Ry9jsDMRchZAU0, apple-domain-verification=M2Zbg94Ji7TigRgk, apple-domain-verification=ZBhcOdnpSL8xAuog, asv=8c5470bc182159bf816b4b03423913d9, atlassian-domain-verification=STxPCoWgHh3nckDroYTemKr5kRNJXy4JfCJmssnUZ60ERaYOWJyO8ab7bausBvzg
CNAME
—
CAA
—
WHOIS / Registration
Registration data planned
Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.
Subdomains
Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.
| Subdomain | Resolves to | Last seen |
|---|---|---|
| api.us.int.we.shop | 2026-07-23 03:25:43.046 | |
| api.int.we.shop | 2026-06-22 21:26:31.709 | |
| api.prd.we.shop | 2026-07-16 09:10:56.226 | |
| api.uat.we.shop | 2026-06-04 15:47:28.436 | |
| api.uk.int.we.shop | 2026-06-22 21:26:31.709 | |
| api.uk.prd.we.shop | 2026-07-16 09:10:56.226 | |
| api.us.uat.we.shop | 2026-06-04 10:41:47.774 | |
| mobile.uk.prd.we.shop | 2026-07-16 09:05:13.045 | |
| mobile.us.prd.we.shop | 2026-06-15 09:04:06.082 | |
| api.internal.us.int.we.shop | 2026-06-21 11:52:57.962 | |
| api.uk.uat.we.shop | 2026-06-04 15:47:28.436 | |
| csback.internal.us.int.we.shop | 2026-06-21 11:52:57.962 | |
| hasura.internal.us.int.we.shop | 2026-06-21 11:52:57.962 | |
| mobile.uk.int.we.shop | 2026-06-23 01:26:56.827 | |
| mobile.uk.uat.we.shop | 2026-06-22 15:26:25.432 | |
| directory.int.we.shop | 2026-06-21 22:57:30.569 | |
| uk.directory.int.we.shop | 2026-06-21 22:57:30.569 | |
| we.shop | 2026-07-25 21:24:24.275 | |
| api.internal.uk.int.we.shop | 1970-01-01 00:00:00.000 | |
| api.internal.uk.uat.we.shop | 1970-01-01 00:00:00.000 | |
| api.internal.us.uat.we.shop | 1970-01-01 00:00:00.000 | |
| app.we.shop | 1970-01-01 00:00:00.000 | |
| core.we.shop | 1970-01-01 00:00:00.000 | |
| csback.internal.uk.int.we.shop | 1970-01-01 00:00:00.000 | |
| csback.internal.uk.uat.we.shop | 1970-01-01 00:00:00.000 | |
| csback.internal.us.uat.we.shop | 1970-01-01 00:00:00.000 | |
| elasticsearch.internal.us.prd.we.shop | 1970-01-01 00:00:00.000 | |
| hasura.internal.uk.int.we.shop | 1970-01-01 00:00:00.000 | |
| hasura.internal.uk.uat.we.shop | 1970-01-01 00:00:00.000 | |
| hasura.internal.us.uat.we.shop | 1970-01-01 00:00:00.000 | |
| int-mobile-api.we.shop | 1970-01-01 00:00:00.000 | |
| internal.uk.int.we.shop | 1970-01-01 00:00:00.000 | |
| internal.uk.uat.we.shop | 1970-01-01 00:00:00.000 | |
| internal.us.int.we.shop | 1970-01-01 00:00:00.000 | |
| internal.us.uat.we.shop | 1970-01-01 00:00:00.000 | |
| investors.we.shop | 1970-01-01 00:00:00.000 | |
| jenkins2.we.shop | 1970-01-01 00:00:00.000 | |
| mobile-api-uat.we.shop | 1970-01-01 00:00:00.000 | |
| mobile-api.uk.int.we.shop | 1970-01-01 00:00:00.000 | |
| mobile-api.uk.uat.we.shop | 1970-01-01 00:00:00.000 | |
| mobile-api.us.prd.we.shop | 1970-01-01 00:00:00.000 | |
| mobile-api.us.uat.we.shop | 1970-01-01 00:00:00.000 | |
| mobile.us.uat.we.shop | 1970-01-01 00:00:00.000 | |
| platform-js-int.we.shop | 1970-01-01 00:00:00.000 | |
| platform-js-prd.we.shop | 1970-01-01 00:00:00.000 | |
| platform-js-uat.we.shop | 1970-01-01 00:00:00.000 | |
| uat-mobile-api.we.shop | 1970-01-01 00:00:00.000 | |
| uat-search.internal.we.shop | 1970-01-01 00:00:00.000 | |
| uk-help.we.shop | 1970-01-01 00:00:00.000 | |
| uk.uat.we.shop | 1970-01-01 00:00:00.000 | |
| us.directory.int.we.shop | 1970-01-01 00:00:00.000 |
Tech Stack
Tech detection pending
Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.
TLS Certificates
Subject: fhw09ehf00hf9we.shop
Issuer: YE2
SANs: fhw09ehf00hf9we.shop
Subject: api.uk.int.we.shop
Issuer: Amazon RSA 2048 M01
SANs: api.int.we.shop, api.uk.int.we.shop
Subject: api.us.int.we.shop
Issuer: Amazon RSA 2048 M04
SANs: api.int.we.shop, api.us.int.we.shop
Subject: mobile.us.prd.we.shop
Issuer: Amazon RSA 2048 M01
SANs: mobile-api.us.prd.we.shop, mobile.us.prd.we.shop
Subject: we.shop
Issuer: Amazon RSA 2048 M03
SANs: *.we.shop, *.weshop.co.uk, we.shop, weshop.co.uk
Subject: adadadasgsawe.shop
Issuer: E7
SANs: adadadasgsawe.shop
Subject: api.uk.prd.we.shop
Issuer: Amazon RSA 2048 M01
SANs: api.prd.we.shop, api.uk.prd.we.shop
Subject: mobile.us.prd.we.shop
Issuer: Amazon RSA 2048 M01
SANs: mobile-api.us.prd.we.shop, mobile.us.prd.we.shop
Subject: api.us.int.we.shop
Issuer: Amazon RSA 2048 M04
SANs: api.int.we.shop, api.us.int.we.shop
Subject: abxqwe.shop
Issuer: R13
SANs: *.abxqwe.shop, abxqwe.shop
Subject: api.uk.uat.we.shop
Issuer: Amazon RSA 2048 M04
SANs: api.uat.we.shop, api.uk.uat.we.shop
Subject: we.shop
Issuer: Amazon RSA 2048 M03
SANs: *.we.shop, *.weshop.co.uk, we.shop, weshop.co.uk
Subject: api.us.int.we.shop
Issuer: Amazon RSA 2048 M04
SANs: api.int.we.shop, api.us.int.we.shop
Subject: api.us.uat.we.shop
Issuer: Amazon RSA 2048 M01
SANs: api.uat.we.shop, api.us.uat.we.shop
Subject: api.uk.int.we.shop
Issuer: Amazon RSA 2048 M01
SANs: api.int.we.shop, api.uk.int.we.shop
Subject: ruqwe.shop
Issuer: E8
SANs: *.ruqwe.shop, ruqwe.shop
Subject: mobile.uk.prd.we.shop
Issuer: Amazon RSA 2048 M04
SANs: mobile.uk.prd.we.shop
IPs Citing This Domain
Hosts whose HTML body references this domain. Strong signal for origin/mirror/embed discovery.
212.71.246.191:443
href · ×6
Origin / IP-Leak
USP
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
No origin-IP leaks detected (yet)
Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.
CT-Log Evidence
Certificates from public Certificate Transparency logs whose subject or SAN names this domain — including historic certs we never observed live.
de5ea8a918fc49ac…
google · argon2026h2
Subject: we.shop
Issuer: Amazon RSA 2048 M03
SANs: we.shop, weshop.co.uk, *.weshop.co.uk, *.we.shop
Valid: 2025-08-16 00:00:00 → 2026-09-14 23:59:59
c41b82b2f67e4900…
google · argon2026h2
Subject: we.shop
Issuer: Amazon RSA 2048 M04
SANs: we.shop, weshop.co.uk, *.weshop.co.uk, *.we.shop
Valid: 2025-08-14 00:00:00 → 2026-09-12 23:59:59
f5787a6213ec9d41…
digicert · wyvern2026h2
Subject: we.shop
Issuer: Amazon RSA 2048 M03
SANs: we.shop, *.we.shop
Valid: 2025-07-12 00:00:00 → 2026-08-10 23:59:59
Threat Intelligence
Domain threat-intel pending
Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.
History
Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.
| Type | Value | First seen | Last seen |
|---|---|---|---|
| MX | 20 alt1.aspmx.l.google.com | 2026-05-27 02:26:50.103 | 2026-07-25 21:24:24.275 |
| A | 192.0.78.141 | 2026-05-27 02:26:50.103 | 2026-07-25 21:24:24.275 |
| TXT | google-site-verification=d--Y94AkAl6IbXIFUPSgdtXYROMZVcGE96CiegzauTY | 2026-05-27 02:26:50.103 | 2026-07-25 21:24:24.275 |
| MX | 50 alt4.aspmx.l.google.com | 2026-05-27 02:26:50.103 | 2026-07-25 21:24:24.275 |
| MX | 40 alt3.aspmx.l.google.com | 2026-05-27 02:26:50.103 | 2026-07-25 21:24:24.275 |
| TXT | _globalsign-domain-verification=Mr7TWhme95XNuYLKis_6wvd0e1DafKoRzz9CeeGlnw | 2026-05-27 02:26:50.103 | 2026-07-25 21:24:24.275 |
| MX | 30 alt2.aspmx.l.google.com | 2026-05-27 02:26:50.103 | 2026-07-25 21:24:24.275 |
| TXT | google-site-verification=Gx_E9KUlbTJdJcEFA9HTnbnsqiyv1Zd3mVJF3Zqcfkk | 2026-05-27 02:26:50.103 | 2026-07-25 21:24:24.275 |
| MX | 10 aspmx.l.google.com | 2026-05-27 02:26:50.103 | 2026-07-25 21:24:24.275 |
| TXT | 1password-site-verification=KIHWBSQBQFHV5E7EULPMK2XZQY | 2026-05-27 02:26:50.103 | 2026-07-25 21:24:24.275 |
| A | 192.0.78.233 | 2026-05-27 02:26:50.103 | 2026-07-25 21:24:24.275 |
| TXT | apple-domain-verification=M2Zbg94Ji7TigRgk | 2026-05-27 02:26:50.103 | 2026-05-27 05:54:21.886 |
| TXT | atlassian-domain-verification=STxPCoWgHh3nckDroYTemKr5kRNJXy4JfCJmssnUZ60ERaYOWJyO8ab7bausBvzg | 2026-05-27 02:26:50.103 | 2026-07-25 21:24:24.275 |
| TXT | MS=ms16971720 | 2026-05-27 02:26:50.103 | 2026-07-25 21:24:24.275 |
| NS | ns-1589.awsdns-06.co.uk | 2026-05-27 02:26:50.103 | 2026-07-25 21:24:24.275 |
| NS | ns-468.awsdns-58.com | 2026-05-27 02:26:50.103 | 2026-07-25 21:24:24.275 |
| TXT | v=spf1 include:_spf.google.com include:spf.mailjet.com include:amazonses.com include:_spf.wpcloud.com ~all | 2026-05-27 02:26:50.103 | 2026-07-25 21:24:24.275 |
| TXT | asv=8c5470bc182159bf816b4b03423913d9 | 2026-05-27 02:26:50.103 | 2026-07-25 21:24:24.275 |
| NS | ns-967.awsdns-56.net | 2026-05-27 02:26:50.103 | 2026-07-25 21:24:24.275 |
| NS | ns-1217.awsdns-24.org | 2026-05-27 02:26:50.103 | 2026-07-25 21:24:24.275 |
| TXT | anthropic-domain-verification-2x6wrx=SfxmO6UO3o1Ry9jsDMRchZAU0 | 2026-05-27 02:26:50.103 | 2026-07-25 21:24:24.275 |
| TXT | apple-domain-verification=ZBhcOdnpSL8xAuog | 2026-06-14 23:07:05.130 | 2026-07-25 21:24:24.275 |