Domain
snapchat.com
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of snapchat.com
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
Hosting IPs
163
A/AAAA targets
Subdomains
130
CT + scan + body
Record Types
4
seen in DNS
Observed Certs
9
in our scans
DNS Records
A
34.149.46.130
AAAA
—
MX
10 aspmx.l.google.com, 20 alt1.aspmx.l.google.com, 30 alt2.aspmx.l.google.com, 40 aspmx2.googlemail.com, 50 aspmx3.googlemail.com
NS
ns-1468.awsdns-55.org, ns-1892.awsdns-44.co.uk, ns-220.awsdns-27.com, ns-530.awsdns-02.net
TXT
3ae8f0a14f7a4c98a9023fe8947467bd, MS=255BA8D56417782169DA12894F5A53521A65F7F2, TAILSCALE-bAU9TfNGoz4iD4hioxcp, _hh9zpxhf35itout7v7mwibqktr44s3s, adobe-idp-site-verification=1b7089e1333b1302c4f425ff60baae967ac377d76fb6aa7bb61c9f0282fd664d, anthropic-domain-verification-kg6835=FrP90V31rmTTa7Cu3plqLLMEx, apple-domain-verification=hAi0YbrGnN5ny4wm, atlassian-domain-verification=P7v4/0SuI03V2xsQfPTYYZLbRwBN1QkqBg4E/zqmJVvyWKraMaJRbamwkK2vWrx0
CNAME
—
CAA
—
WHOIS / Registration
Registration data planned
Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.
Subdomains
Subdomain enumeration pending
Every subdomain ever issued a TLS cert under this apex — extracted from Certificate Transparency logs, our own scan observations and body references.
Tech Stack
Tech detection pending
Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.
TLS Certificates
Certificate observations pending
TLS certs naming this domain in subject or SANs will appear here as our scan-layer catches them.
IPs Citing This Domain
Hosts whose HTML body references this domain. Strong signal for origin/mirror/embed discovery.
18.216.194.194:80
href · ×9
54.36.62.19:443
href · ×4
104.248.94.21:443
href · ×4
15.204.235.208:443
href · ×4
207.127.102.46:443
href · ×3
129.121.100.230:443
href · ×3
3.93.73.99:80
href · ×3
49.13.218.40:443
href · ×2
92.204.24.172:80
href · ×2
206.189.48.91:443
href · ×2
206.189.245.141:443
href · ×2
5.249.164.204:80
href · ×2
3.109.105.51:80
href · ×2
84.8.98.157:443
href · ×2
172.104.249.254:443
href · ×2
5.75.176.185:443
href · ×2
130.39.20.49:80
href · ×2
148.251.123.119:443
href · ×2
135.125.100.47:80
href · ×2
148.72.152.80:443
href · ×2
20.64.210.85:443
href · ×2
134.209.187.170:443
href · ×2
206.189.241.243:443
href · ×2
62.210.222.72:443
href · ×1
91.98.124.78:80
href · ×1
158.179.3.109:8080
href · ×1
158.252.161.166:443
href · ×1
104.239.207.209:443
href · ×1
3.108.32.69:443
href · ×1
149.28.144.217:443
href · ×1
165.227.108.54:80
href · ×1
94.198.217.60:443
href · ×1
54.197.173.55:443
href · ×1
89.167.8.106:443
href · ×1
130.39.20.8:443
href · ×1
69.57.189.68:443
href · ×1
84.8.109.10:443
href · ×1
87.237.225.38:443
href · ×1
167.86.87.226:443
href · ×1
3.133.136.246:443
href · ×1
54.37.224.163:8443
href · ×1
143.198.224.165:443
href · ×1
96.125.0.15:443
href · ×1
45.76.94.6:443
href · ×1
158.252.31.167:443
href · ×1
94.23.221.176:443
href · ×1
5.78.95.109:443
href · ×1
96.125.0.49:80
href · ×1
167.233.79.8:443
href · ×1
51.89.35.201:443
href · ×1
Origin / IP-Leak
USP
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
| Origin IP | Origin ASN | CDN ASN | Confidence | Reasoning |
|---|---|---|---|---|
| 34.107.192.145 | AS396982 | AS15169 | 95% | cert 9610091e… served by 34.107.192.145 (AS396982) carries SAN api.snapchat.com which currently resolves through Google (AS15169) at 172.217.23.244, 2a00:1450:400e:80a::2014, 2a00:1450:400c:c07::99, 2a00:1450:400c:c09::99 |
| 45.112.192.23 | AS216475 | AS15169 | 95% | cert 9610091e… served by 45.112.192.23 (AS216475) carries SAN api.snapchat.com which currently resolves through Google (AS15169) at 2a00:1450:400e:809::2014, 142.250.180.20, 192.178.25.212, 2a00:1450:400e:804::2014 |
| 176.124.206.252 | AS210644 | AS15169 | 95% | cert 9610091e… served by 176.124.206.252 (AS210644) carries SAN api.snapchat.com which currently resolves through Google (AS15169) at 2a00:1450:4001:c15::99, 142.251.168.153, 74.125.71.153, 2a00:1450:4001:c17::99 |
| 34.54.16.239 | AS396982 | AS15169 | 95% | cert 2d233781… served by 34.54.16.239 (AS396982) carries SAN api.snapchat.com which currently resolves through Google (AS15169) at 2a00:1450:4001:c15::99, 142.251.168.153, 74.125.71.153, 2a00:1450:4001:c17::99 |
| 191.40.0.102 | AS138997 | AS15169 | 95% | cert 9610091e… served by 191.40.0.102 (AS138997) carries SAN api.snapchat.com which currently resolves through Google (AS15169) at 2a00:1450:4001:c15::99, 142.251.168.153, 74.125.71.153, 2a00:1450:4001:c17::99 |
| 34.149.46.130 | AS396982 | AS15169 | 95% | cert 9610091e… served by 34.149.46.130 (AS396982) carries SAN api.snapchat.com which currently resolves through Google (AS15169) at 2a00:1450:4001:c15::99, 142.251.168.153, 74.125.71.153, 2a00:1450:4001:c17::99 |
| 35.244.128.20 | AS396982 | AS15169 | 95% | cert 9610091e… served by 35.244.128.20 (AS396982) carries SAN api.snapchat.com which currently resolves through Google (AS15169) at 2a00:1450:4001:c15::99, 142.251.168.153, 74.125.71.153, 2a00:1450:4001:c17::99 |
| 193.233.201.128 | AS210644 | AS15169 | 95% | cert 9610091e… served by 193.233.201.128 (AS210644) carries SAN api.snapchat.com which currently resolves through Google (AS15169) at 2a00:1450:4001:c15::99, 142.251.168.153, 74.125.71.153, 2a00:1450:4001:c17::99 |
| 34.120.159.232 | AS396982 | AS15169 | 95% | cert 9610091e… served by 34.120.159.232 (AS396982) carries SAN api.snapchat.com which currently resolves through Google (AS15169) at 142.251.14.153, 2a00:1450:400c:c04::99, 142.251.168.153, 142.250.154.153 |
CT-Log Evidence
Certificates from public Certificate Transparency logs whose subject or SAN names this domain — including historic certs we never observed live.
b4cbc9f6ff767c4f…
google · xenon2026h2
Subject: *.snap.com
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: *.snap.com, *.snapchat.com, *.ats.snapchat.com, *.snapads.com, *.snap-dev.net, *.snappcm.com, *.snappcm-dev.com, *.snapar.com, *.snapkit.com, *.arcadiacreativestudio.com, *.bitmoji.com, *.lensstudio.com, *.pixy.com, *.spectacles.com, *.api.snapchat.com, *.sc-gw-dev.snapchat.com, *.saturn.live, *.specs.com, *.api.specs.com, snap.com, snapchat.com, ats.snapchat.com, snapads.com, snap-dev.net, snappcm.com, snappcm-dev.com, snapar.com, snapkit.com, arcadiacreativestudio.com, bitmoji.com, lensstudio.com, pixy.com, spectacles.com, api.snapchat.com, sc-gw-dev.snapchat.com, saturn.live, specs.com
Valid: 2026-04-01 00:00:00 → 2026-10-16 23:59:59
2f2c805f06641e54…
cloudflare · nimbus2026
Subject: *.snapchat.com
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: *.snapchat.com, snapchat.com
Valid: 2025-07-28 00:00:00 → 2026-07-27 23:59:59
Threat Intelligence
Domain threat-intel pending
Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.
History
Domain timeline pending
Passive-DNS history accumulates as our forward-DNS crawler observes A/AAAA/MX/NS/TXT records over time.