Domain

tx.group

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

DNS Check HTTP Check Run Full Scan .group TLD

Run a live full scan of tx.group

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now

Hosting IPs

—

A/AAAA targets

Subdomains

—

CT + scan + body

Record Types

—

seen in DNS

Observed Certs

—

in our scans

DNS Records

104.18.10.42, 104.18.11.42

AAAA

2606:4700::6812:a2a, 2606:4700::6812:b2a

1 aspmx.l.google.com, 10 alt3.aspmx.l.google.com, 10 alt4.aspmx.l.google.com, 5 alt1.aspmx.l.google.com, 5 alt2.aspmx.l.google.com

logan.ns.cloudflare.com, veda.ns.cloudflare.com

TXT

0ef3fa1b1f55ae3d2ef72f95395a1e8b878f3b0391dd133b71, MS=ms55340657, ZOOM_verify_ImfVwAMhRVmutCuNaM72mg, ZOOM_verify_nVvJfvLSyQgJHL3C7cKsQ4, airtable-verification=e3cfd45148765fe8ccae3997a73fa501, anthropic-domain-verification-5phpj3=0n3dPmjXVmwrF1sRIbngd7WzB, apple-domain-verification=Udd3kS9r9da4hZ2H, atlassian-domain-verification=evx9B0LLQZzjYtnRjce44KbrxRwGX3oBZ44WwJ9AePQy8SAFUniCRQJRErt1pJtJ

CNAME

—

CAA

—

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.

Subdomain	Resolves to	Last seen
prometheus.ness.tx.group	34.242.74.149 18.200.168.28 63.32.84.156 52.211.128.198 +3	2026-06-22 09:29:28.481
pushgateway.ness.tx.group	34.251.139.176 63.33.99.49 54.220.227.232 63.34.242.184 +3	2026-06-22 09:29:28.481
alertmanager.ness.tx.group	54.228.214.218 34.250.250.61 54.171.94.58 18.200.185.157 +2	2026-06-22 09:29:28.481
claro-statistic.ness-qua.tx.group	52.214.8.178 52.16.227.236 34.242.209.4 54.75.69.165 +2	2026-07-22 13:21:56.713
grafana.ness.tx.group	99.80.6.247 52.214.121.43 52.48.226.40 108.132.124.145 +2	2026-06-22 09:29:28.481
atrax-backend.tx.group	104.18.11.42 104.18.10.42 2606:4700::6812:b2a 2606:4700::6812:a2a	2026-06-02 20:20:20.520
atrax-dev-backend.tx.group	104.18.10.42 104.18.11.42 2606:4700::6812:a2a 2606:4700::6812:b2a	2026-06-02 20:20:20.520
client-vpn.gateway.tx.group	13.226.244.65 13.226.244.33 13.226.244.35 13.226.244.45	2026-07-25 11:19:37.819
dev-shared-monitoring.tx.group	108.156.60.51 108.156.60.74 108.156.60.66 108.156.60.81	2026-06-15 04:31:17.833
jobsfeed-teamtailor.tx.group	3.173.161.81 3.173.161.93 3.173.161.34 3.173.161.40	2026-06-02 20:46:40.067
remote.tx.group	104.18.11.42 104.18.10.42 2606:4700::6812:a2a 2606:4700::6812:b2a	2026-06-19 01:30:34.226
tx.group	104.18.11.42 2606:4700::6812:a2a 2606:4700::6812:b2a 104.18.10.42	2026-07-24 14:19:37.096
claro-statistic.ness-dev.tx.group	18.200.40.232 3.251.152.143 108.132.213.131	2026-05-27 13:47:17.296
login-test.tx.group	52.223.7.228 35.71.186.154	2026-06-16 03:31:09.266
login.tx.group	35.71.153.225 52.223.24.125	2026-06-16 03:31:09.266
matillion.bas.tx.group	54.77.167.199 54.155.254.17	2026-06-16 11:23:43.390
sourcing-dev.tx.group	63.182.239.236 52.29.141.159	2026-05-27 14:53:15.108
sourcing.tx.group	51.102.149.165 52.28.219.204	2026-06-16 12:46:27.103
academy.tx.group		1970-01-01 00:00:00.000
acm-test.sandbox.tx.group		1970-01-01 00:00:00.000
ai-hub.tx.group		1970-01-01 00:00:00.000
atrax-dev.tx.group		1970-01-01 00:00:00.000
atrax.tx.group		1970-01-01 00:00:00.000
auth2.tx.group		1970-01-01 00:00:00.000
bulja.tx-eis-cls.tx.group		1970-01-01 00:00:00.000
cf-test.tx.group		1970-01-01 00:00:00.000
claro-statistic.ness.tx.group		1970-01-01 00:00:00.000
client-vpn.ai-hub.tx.group		1970-01-01 00:00:00.000
client-vpn.noprod-gateway.tx.group		1970-01-01 00:00:00.000
client-vpn.sandbox-eics.tx.group		1970-01-01 00:00:00.000
client-vpn.sandbox-tibco.tx.group		1970-01-01 00:00:00.000
client-vpn.sandbox.tx.group		1970-01-01 00:00:00.000
client-vpn.txace.tx.group		1970-01-01 00:00:00.000
cloudwatch.shared-monitoring.tx.group		1970-01-01 00:00:00.000
confluence.tx.group		1970-01-01 00:00:00.000
dai-sandbox.disco-sandbox.dai.tx.group		1970-01-01 00:00:00.000
dev.pmd-dev.tx.group		1970-01-01 00:00:00.000
disco-sandbox.dai.tx.group		1970-01-01 00:00:00.000
fanny.tx.group		1970-01-01 00:00:00.000
gateway.tx.group		1970-01-01 00:00:00.000
https-redirect-prod.tx.group		1970-01-01 00:00:00.000
igr.pmd-dev.tx.group		1970-01-01 00:00:00.000
jira.tx.group		1970-01-01 00:00:00.000
myintranet.tx.group		1970-01-01 00:00:00.000
ness.tx.group		1970-01-01 00:00:00.000
noprod-gateway.tx.group		1970-01-01 00:00:00.000
pmd-dev.tx.group		1970-01-01 00:00:00.000
pmd.tx.group		1970-01-01 00:00:00.000
qa.pmd-dev.tx.group		1970-01-01 00:00:00.000
sandbox-dev-tibco.tx.group		1970-01-01 00:00:00.000
sandbox-eics.tx.group		1970-01-01 00:00:00.000
sandbox-tibco.tx.group		1970-01-01 00:00:00.000
sandbox.tx.group		1970-01-01 00:00:00.000
sbc.tx.group		1970-01-01 00:00:00.000
sbc01.tx.group		1970-01-01 00:00:00.000
sbc02.tx.group		1970-01-01 00:00:00.000
sfmc-dev.tx.group		1970-01-01 00:00:00.000
sfmc.tx.group		1970-01-01 00:00:00.000
shared-monitoring.tx.group		1970-01-01 00:00:00.000
sourcing-igr.tx.group		1970-01-01 00:00:00.000
support.myintranet.tx.group		1970-01-01 00:00:00.000
supporthub.tx.group	148.139.9.91	2026-07-24 12:01:21.797
supporthubdev.tx.group		1970-01-01 00:00:00.000
titan-dev.tx.group		1970-01-01 00:00:00.000
titan.tx.group		1970-01-01 00:00:00.000
txace-test.tx.group		1970-01-01 00:00:00.000
txace.tx.group		1970-01-01 00:00:00.000
ventures.tx.group		1970-01-01 00:00:00.000
vpntest.tx-eis-cls.tx.group		1970-01-01 00:00:00.000
www.login-test.tx.group		1970-01-01 00:00:00.000
www.login.tx.group		1970-01-01 00:00:00.000
www.sbc.tx.group		1970-01-01 00:00:00.000
www.sbc01.tx.group		1970-01-01 00:00:00.000
www.sbc02.tx.group		1970-01-01 00:00:00.000

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

Certificate observations pending

TLS certs naming this domain in subject or SANs will appear here as our scan-layer catches them.

IPs Citing This Domain

No citing IPs found yet

As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

Origin IP	Origin ASN	CDN ASN	Confidence	Reasoning
194.124.241.232	AS206567	AS13335	95%	cert 0015e32f… served by 194.124.241.232 (AS206567) carries SAN tx.group which currently resolves through Cloudflare (AS13335) at 104.18.10.42, 104.18.11.42, 2606:4700::6812:b2a, 2606:4700::6812:a2a

CT-Log Evidence

Certificates from public Certificate Transparency logs whose subject or SAN names this domain — including historic certs we never observed live.

0015e32f93ba05da… google · argon2026h2

Subject: *.tx.group

Issuer: GeoTrust TLS RSA CA G1

SANs: *.tx.group, tx.group

Valid: 2025-10-01 00:00:00 → 2026-10-20 23:59:59

0015e32f93ba05da… cloudflare · nimbus2026

Subject: *.tx.group

Issuer: GeoTrust TLS RSA CA G1

SANs: *.tx.group, tx.group

Valid: 2025-10-01 00:00:00 → 2026-10-20 23:59:59

6e07b62fc9db08c5… google · argon2026h2

Subject: *.tx.group

Issuer: GeoTrust TLS RSA CA G1

SANs: *.tx.group, tx.group

Valid: 2025-10-01 00:00:00 → 2026-10-20 23:59:59

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.

Type	Value	First seen	Last seen
NS	logan.ns.cloudflare.com	2026-06-22 22:52:18.593	2026-07-24 14:19:37.096
TXT	c53667dfcfe798f88935e87ebf22de93	2026-06-22 22:52:18.593	2026-07-24 14:19:37.096
TXT	postman-domain-verification=e0126d5a943a6aa3fcfd41faa913eb99e81a738bafda378b69177ce592149abff0fcc167b07976992c246e005768cdebd0f96da4c867d0ab859a09790db3ef72	2026-06-22 22:52:18.593	2026-07-24 14:19:37.096
A	104.18.11.42	2026-06-22 22:52:18.593	2026-07-24 14:19:37.096
TXT	ZOOM_verify_ImfVwAMhRVmutCuNaM72mg	2026-06-22 22:52:18.593	2026-07-24 14:19:37.096
TXT	airtable-verification=e3cfd45148765fe8ccae3997a73fa501	2026-06-22 22:52:18.593	2026-07-24 14:19:37.096
AAAA	2606:4700::6812:b2a	2026-06-22 22:52:18.593	2026-07-24 14:19:37.096
TXT	cursor-domain-verification-92c1kf=I8S4tULOf4cT5UAGxyctvnQJo	2026-06-22 22:52:18.593	2026-07-24 14:19:37.096
TXT	anthropic-domain-verification-5phpj3=0n3dPmjXVmwrF1sRIbngd7WzB	2026-06-22 22:52:18.593	2026-07-24 14:19:37.096
TXT	google-site-verification=hXbcq03aldIKQ4Hbq4qWDxXMAGyQUAiYXG3cIolXuvo	2026-06-22 22:52:18.593	2026-07-24 14:19:37.096
TXT	openai-domain-verification=dv-nCf1113aqAPUMzYe9zSPAXG1	2026-06-22 22:52:18.593	2026-07-24 14:19:37.096
TXT	v=spf1 include:spf.tx.group.eu-i5xs0ljo.e1.dspf.app -all	2026-06-22 22:52:18.593	2026-07-24 14:19:37.096
NS	veda.ns.cloudflare.com	2026-06-22 22:52:18.593	2026-07-24 14:19:37.096
TXT	zoho-verification=zb07977165.zmverify.zoho.eu	2026-06-22 22:52:18.593	2026-07-24 14:19:37.096
TXT	notion-domain-verification=CBpdkUmFJmMc1q3etS4S6BdenrX8xpPyQmkrpdpuhAA	2026-06-22 22:52:18.593	2026-07-24 14:19:37.096
TXT	google-site-verification=zulaHUEVPjrkf3012t2QgDpD4hUn7-QnvHMesrROCc0	2026-06-22 22:52:18.593	2026-07-24 14:19:37.096
A	104.18.10.42	2026-06-22 22:52:18.593	2026-07-24 14:19:37.096
TXT	canva-site-verification=ZzGHyAxgDaRFd_94cOHgSA	2026-06-22 22:52:18.593	2026-07-24 14:19:37.096
MX	5 alt2.aspmx.l.google.com	2026-06-22 22:52:18.593	2026-07-24 14:19:37.096
MX	10 alt4.aspmx.l.google.com	2026-06-22 22:52:18.593	2026-07-24 14:19:37.096
TXT	ZOOM_verify_nVvJfvLSyQgJHL3C7cKsQ4	2026-06-22 22:52:18.593	2026-07-24 14:19:37.096
MX	1 aspmx.l.google.com	2026-06-22 22:52:18.593	2026-07-24 14:19:37.096
TXT	teamviewer-sso-verification=4b3560074a944145b2ed090ea9cdaa39	2026-06-22 22:52:18.593	2026-07-24 14:19:37.096
TXT	google-site-verification=tNoTYnyX-AHeB4-_vda9yEp7fiqCNJMPm9vUvF99SBU	2026-06-22 22:52:18.593	2026-07-24 14:19:37.096
TXT	miro-verification=845bda1ec8ccc9b317c419337dea3505f78009e5	2026-06-22 22:52:18.593	2026-07-24 14:19:37.096
AAAA	2606:4700::6812:a2a	2026-06-22 22:52:18.593	2026-07-24 14:19:37.096
MX	5 alt1.aspmx.l.google.com	2026-06-22 22:52:18.593	2026-07-24 14:19:37.096
TXT	atlassian-domain-verification=evx9B0LLQZzjYtnRjce44KbrxRwGX3oBZ44WwJ9AePQy8SAFUniCRQJRErt1pJtJ	2026-06-22 22:52:18.593	2026-07-24 14:19:37.096
TXT	vmware-cloud-verification-ec692f9b-2dfb-4d4a-8638-88893ab4d62e	2026-06-22 22:52:18.593	2026-07-24 14:19:37.096
TXT	docusign=1981e3c9-6dbe-4fe1-96e1-4eba30181e2c	2026-06-22 22:52:18.593	2026-07-24 14:19:37.096
TXT	MS=ms55340657	2026-06-22 22:52:18.593	2026-07-24 14:19:37.096
MX	10 alt3.aspmx.l.google.com	2026-06-22 22:52:18.593	2026-07-24 14:19:37.096
TXT	apple-domain-verification=Udd3kS9r9da4hZ2H	2026-06-22 22:52:18.593	2026-07-24 14:19:37.096
TXT	0ef3fa1b1f55ae3d2ef72f95395a1e8b878f3b0391dd133b71	2026-06-22 22:52:18.593	2026-07-24 14:19:37.096
TXT	hpe-greenlake-domain-verification=4672786234626536336c4b6c7074594b6f5a4161544555624b707a3966757572	2026-07-20 19:02:36.082	2026-07-24 14:19:37.096