Domain
fly.io
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of fly.io
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
Hosting IPs
10
A/AAAA targets
Subdomains
27
CT + scan + body
Record Types
5
seen in DNS
Observed Certs
4
in our scans
DNS Records
A
37.16.18.81
AAAA
2a09:8280:1::a:791
MX
1 aspmx.l.google.com, 10 alt3.aspmx.l.google.com, 10 alt4.aspmx.l.google.com, 5 alt1.aspmx.l.google.com, 5 alt2.aspmx.l.google.com
NS
ns1077.hosted.flydns.net, ns1970.hosted.flydns.net, ns479.hosted.flydns.net, ns967.hosted.flydns.net
TXT
03D3122BDC, _6qhz8a8hhmv7vx0gk9eylqv9k240wu9, apple-domain-verification=mIsxYwEIYJeZOCwgSgclXPauTY3vXMKf8r6t8TGhEq4, google-site-verification=379cCwTcRnv9DSPgO7yVqbpcdQwGQFJ2I8YS_KLGhp0, google-site-verification=6-4NGHVsimTGK74KKPge726I27PuLMhCiUds9tsweGU, google-site-verification=OArdonQ-wgkSCtiZm8ot2oLIgorR5PS_r8mBIf2xGdE, status-page-domain-verification=45m41jq1lznf, stripe-verification=8590be7414624f53382d4049d11f21b2e40b1fcd6a9c13ebee6e945cf61d4871
CNAME
—
CAA
—
WHOIS / Registration
Registration data planned
Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.
Subdomains
Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.
| Subdomain | Resolves to | Last seen |
|---|---|---|
| api.fly.io | 2026-06-14 22:08:58.337 | |
| app.fly.io | 2026-07-23 10:30:12.221 | |
| auth.fly.io | 2026-06-18 17:17:05.607 | |
| fly.io | 2026-07-27 16:03:55.341 | |
| go.email.fly.io | 2026-07-21 11:51:30.555 | |
| registry-iad.fly.io | 2026-06-20 21:06:00.591 | |
| registry2.fly.io | 2026-07-24 10:30:06.649 | |
| go.news.fly.io | 1970-01-01 00:00:00.000 | |
| oidc.fly.io | 1970-01-01 00:00:00.000 | |
| registry.fly.io | 1970-01-01 00:00:00.000 | |
| registry3.fly.io | 1970-01-01 00:00:00.000 | |
| sso.fly.io | 1970-01-01 00:00:00.000 | |
| status.fly.io | 1970-01-01 00:00:00.000 | |
| web.fly.io | 1970-01-01 00:00:00.000 |
Tech Stack
Tech detection pending
Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.
TLS Certificates
Subject: Fly.io self signed cert
Issuer: Fly.io self signed cert
SANs: fly.dev
Subject: adminmeetings.allfly.io
Issuer: R3
SANs: adminmeetings.allfly.io
Subject: api.label.bfly.io
Issuer: Amazon RSA 2048 M04
SANs: api.label.bfly.io
Subject: *.bdix.pixelfly.io
Issuer: *.bdix.pixelfly.io
SANs: *.bdix.pixelfly.io
Subject: nftfly.io
Issuer: YR2
SANs: nftfly.io
Subject: analyzer.simfly.io
Issuer: YE1
SANs: analyzer.simfly.io
Subject: batteryfly.io
Issuer: YE1
SANs: admin.batteryfly.io, ai-backend-swagger.batteryfly.io, ai-car-detect-swagger.batteryfly.io, ai-swagger.batteryfly.io, batteryfly.io, business.batteryfly.io, file.batteryfly.io, keycloak.batteryfly.io, mobile.batteryfly.io, oplati.batteryfly.io, service.batteryfly.io, swagger.batteryfly.io, ws.batteryfly.io
Subject: ipfs.simfly.io
Issuer: YR1
SANs: ipfs.simfly.io
Subject: api.staging.bfly.io
Issuer: Amazon RSA 2048 M03
SANs: api.cloud.staging.us.butterflynetwork.com, api.staging.bfly.io, api.staging.cloud.butterflynetwork.com, live.api.staging.bfly.io, live.api.staging.cloud.butterflynetwork.com
Subject: ehz.batteryfly.io
Issuer: YE2
SANs: ehz.batteryfly.io, keycloak.ehz.batteryfly.io
Subject: grafana.batteryfly.io
Issuer: YE2
SANs: elk.batteryfly.io, gitlab-registry.batteryfly.io, gitlab.batteryfly.io, grafana.batteryfly.io, keycloak-internal.batteryfly.io, new.elk.batteryfly.io
Subject: forum.simfly.io
Issuer: YR2
SANs: forum.simfly.io
Subject: map.nofly.io
Issuer: Amazon RSA 2048 M04
SANs: map.nofly.io
Subject: *.bdix.pixelfly.io
Issuer: *.bdix.pixelfly.io
SANs: *.bdix.pixelfly.io
Subject: hermes-router.dev.bfly.io
Issuer: Amazon RSA 2048 M01
SANs: hermes-router-1.dev.bfly.io, hermes-router-2.dev.bfly.io, hermes-router-3.dev.bfly.io, hermes-router-4.dev.bfly.io, hermes-router-5.dev.bfly.io, hermes-router.dev.bfly.io
Subject: adminmeetings.allfly.io
Issuer: R3
SANs: adminmeetings.allfly.io
Subject: pokal-cms.dotfly.io
Issuer: E7
SANs: pokal-cms.dotfly.io, pokal.dotfly.io
Subject: map.nofly.io
Issuer: Amazon RSA 2048 M04
SANs: map.nofly.io
Subject: *.pagefly.io
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.pagefly.io, pagefly.io
Subject: brain.simfly.io
Issuer: R13
SANs: brain.simfly.io
Subject: *.app.smashfly.io
Issuer: Amazon RSA 2048 M01
SANs: *.app.smashfly.io
Subject: *.sensefly.io
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.sensefly.io, sensefly.io
Subject: preprod.business.batteryfly.io
Issuer: E8
SANs: admin.preprod.batteryfly.io, keycloak.preprod.batteryfly.io, mobile.preprod.batteryfly.io, oplati.preprod.batteryfly.io, preprod.batteryfly.io, preprod.business.batteryfly.io, ws.preprod.batteryfly.io
Subject: *.pagefly.io
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.pagefly.io, pagefly.io
Subject: api.staging.bfly.io
Issuer: Amazon RSA 2048 M03
SANs: api.cloud.staging.us.butterflynetwork.com, api.staging.bfly.io, api.staging.cloud.butterflynetwork.com, live.api.staging.bfly.io, live.api.staging.cloud.butterflynetwork.com
Subject: *.pagefly.io
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.pagefly.io, pagefly.io
Subject: payfly.io
Issuer: E6
SANs: payfly.io, www.payfly.io
Subject: *.bdix.pixelfly.io
Issuer: *.bdix.pixelfly.io
SANs: *.bdix.pixelfly.io
Subject: *.speedyfly.io
Issuer: Encryption Everywhere DV TLS CA - G2
SANs: *.speedyfly.io, speedyfly.io
Subject: grafana.batteryfly.io
Issuer: E8
SANs: elk.batteryfly.io, gitlab-registry.batteryfly.io, gitlab.batteryfly.io, grafana.batteryfly.io, keycloak-internal.batteryfly.io, new.elk.batteryfly.io
IPs Citing This Domain
Hosts whose HTML body references this domain. Strong signal for origin/mirror/embed discovery.
47.80.93.42:443
href · ×4
8.213.217.113:80
href · ×4
185.11.136.181:443
href · ×4
164.160.187.163:443
href · ×1
77.37.65.44:443
href · ×1
45.150.66.151:80
href · ×1
49.12.113.203:443
href · ×1
81.177.214.165:443
href · ×1
37.187.176.43:443
href · ×1
213.188.208.4:80
href · ×1
88.135.37.242:80
href · ×1
34.83.217.151:443
href · ×1
139.59.126.233:80
href · ×1
159.69.107.253:443
href · ×1
173.212.223.88:8000
href · ×1
159.69.206.42:443
href · ×1
Origin / IP-Leak
USP
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
No origin-IP leaks detected (yet)
Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.
Threat Intelligence
Domain threat-intel pending
Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.
History
Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.
| Type | Value | First seen | Last seen |
|---|---|---|---|
| NS | ns479.hosted.flydns.net | 2026-06-02 02:09:23.865 | 2026-07-27 16:03:55.341 |
| TXT | google-site-verification=6-4NGHVsimTGK74KKPge726I27PuLMhCiUds9tsweGU | 2026-06-02 02:09:23.865 | 2026-07-27 16:03:55.341 |
| NS | ns967.hosted.flydns.net | 2026-06-02 02:09:23.865 | 2026-07-27 16:03:55.341 |
| A | 37.16.18.81 | 2026-06-02 02:09:23.865 | 2026-07-27 16:03:55.341 |
| TXT | v=spf1 include:_spf.google.com include:helpscoutemail.com include:stspg-customer.com ~all | 2026-06-02 02:09:23.865 | 2026-07-27 16:03:55.341 |
| TXT | google-site-verification=379cCwTcRnv9DSPgO7yVqbpcdQwGQFJ2I8YS_KLGhp0 | 2026-06-02 02:09:23.865 | 2026-07-27 16:03:55.341 |
| TXT | _6qhz8a8hhmv7vx0gk9eylqv9k240wu9 | 2026-06-02 02:09:23.865 | 2026-07-27 16:03:55.341 |
| TXT | stripe-verification=8590be7414624f53382d4049d11f21b2e40b1fcd6a9c13ebee6e945cf61d4871 | 2026-06-02 02:09:23.865 | 2026-07-27 16:03:55.341 |
| MX | 5 alt2.aspmx.l.google.com | 2026-06-02 02:09:23.865 | 2026-07-27 16:03:55.341 |
| MX | 10 alt4.aspmx.l.google.com | 2026-06-02 02:09:23.865 | 2026-07-27 16:03:55.341 |
| MX | 1 aspmx.l.google.com | 2026-06-02 02:09:23.865 | 2026-07-27 16:03:55.341 |
| TXT | apple-domain-verification=mIsxYwEIYJeZOCwgSgclXPauTY3vXMKf8r6t8TGhEq4 | 2026-06-02 02:09:23.865 | 2026-07-27 16:03:55.341 |
| AAAA | 2a09:8280:1::a:791 | 2026-06-02 02:09:23.865 | 2026-07-27 16:03:55.341 |
| NS | ns1970.hosted.flydns.net | 2026-06-02 02:09:23.865 | 2026-07-27 16:03:55.341 |
| TXT | 03D3122BDC | 2026-06-02 02:09:23.865 | 2026-07-27 16:03:55.341 |
| MX | 5 alt1.aspmx.l.google.com | 2026-06-02 02:09:23.865 | 2026-07-27 16:03:55.341 |
| MX | 10 alt3.aspmx.l.google.com | 2026-06-02 02:09:23.865 | 2026-07-27 16:03:55.341 |
| TXT | google-site-verification=OArdonQ-wgkSCtiZm8ot2oLIgorR5PS_r8mBIf2xGdE | 2026-06-02 02:09:23.865 | 2026-07-27 16:03:55.341 |
| NS | ns1077.hosted.flydns.net | 2026-06-02 02:09:23.865 | 2026-07-27 16:03:55.341 |
| TXT | status-page-domain-verification=45m41jq1lznf | 2026-06-02 02:09:23.865 | 2026-07-27 16:03:55.341 |