Domain

gitlab.com

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

DNS Check HTTP Check Run Full Scan .com TLD

Run a live full scan of gitlab.com

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now

Hosting IPs

247

A/AAAA targets

Subdomains

221

CT + scan + body

Record Types

seen in DNS

Observed Certs

in our scans

DNS Records

172.65.251.78

AAAA

2606:4700:90:0:f22e:fbec:5bed:a9b9

1 aspmx.l.google.com, 10 alt3.aspmx.l.google.com, 10 alt4.aspmx.l.google.com, 5 alt1.aspmx.l.google.com, 5 alt2.aspmx.l.google.com

diva.ns.cloudflare.com, jermaine.ns.cloudflare.com

TXT

MS=ms60523131, MS=ms83893381, _globalsign-domain-verification=4azHJ7gL04Dr8r2VR0txu7OrWg7uZpU6v7LOHVP1b3, adobe-idp-site-verification=5a5e001556a2c0595ed571d2a1f7b5f8a749a00742853e035eb909bdd31622b8, apple-domain-verification=UNUD9vY0Jp9z5TjO, asv=3f763643512ad5bdcc0d42caea1b3951, decagon-domain-verification-cmrbvs=Lb6bOM0iABwwrWBstDaKWS3U8, decagon-domain-verification-x2tmf7=3ckGf0Fig870o69ZHAT7SfK8v

CNAME

—

CAA

—

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.

Subdomain	Resolves to	Last seen
status.gitlab.com	18.239.69.72 2600:9000:28c5:6e00:b:43f:a40:93a1 2600:9000:28c5:9600:b:43f:a40:93a1 2600:9000:28c5:a800:b:43f:a40:93a1 +170	2026-07-28 18:45:26.399
about.gitlab.com	172.64.144.122 2a06:98c1:3109::6812:2b86 2606:4700:4409::ac40:907a 104.18.43.134 +2	2026-07-28 19:39:40.097
runway.gitlab.com	172.64.155.185 2606:4700:440c::ac40:9bb9 2a06:98c1:310d::6812:2047 104.18.32.71 +2	2026-07-15 00:49:56.195
docs.gitlab.com	172.64.148.245 2a06:98c1:3105::ac40:94f5 2606:4700:4406::6812:270b 2a06:98c1:3109::ac40:94f5 +1	2026-07-28 18:45:26.399
packages.gitlab.com	104.18.39.11 2606:4700:4406::6812:270b 2a06:98c1:3109::ac40:94f5 172.64.148.245 +1	2026-07-16 02:36:50.389
registry.pre.gitlab.com	172.64.148.245 2606:4700:4406::6812:270b 104.18.39.11 2a06:98c1:3105::ac40:94f5 +1	2026-07-25 03:36:05.523
auth.aws.staging.gitlab.com	104.18.41.90 172.64.146.166 2a06:98c1:310c::ac40:92a6 2606:4700:4400::6812:295a	2026-06-03 10:54:36.618
auth.gcp.staging.gitlab.com	104.18.41.90 172.64.146.166 2a06:98c1:310c::ac40:92a6 2606:4700:4400::6812:295a	2026-06-03 10:54:36.618
auth.token.staging.gitlab.com	172.64.146.166 104.18.41.90 2606:4700:4400::6812:295a 2a06:98c1:310c::ac40:92a6	2026-06-03 10:54:36.618
ce.gitlab.com	172.64.148.245 104.18.39.11 2606:4700:4406::6812:270b 2a06:98c1:3109::ac40:94f5	2026-06-03 08:03:13.577
chef.gitlab.com	104.18.39.11 172.64.148.245 2606:4700:4406::6812:270b 2a06:98c1:3109::ac40:94f5	2026-06-15 00:39:07.757
cloud.staging.gitlab.com	172.64.151.90 104.18.36.166 2a06:98c1:3108::6812:24a6 2a06:98c1:310a::ac40:975a	2026-06-15 02:34:41.766
contributors.gitlab.com	104.18.39.11 2606:4700:4406::6812:270b 2a06:98c1:3105::ac40:94f5 172.64.148.245	2026-07-28 18:45:26.399
customers.gitlab.com	172.64.148.245 2a06:98c1:3105::ac40:94f5 2606:4700:4406::6812:270b 104.18.39.11	2026-07-28 18:45:26.399
customers.staging-ref.gitlab.com	104.18.35.3 172.64.152.253 2606:4700:440a::ac40:98fd 2a06:98c1:3103::6812:2303	2026-06-21 01:20:05.484
customers.staging.gitlab.com	172.64.146.166 104.18.41.90 2606:4700:4400::6812:295a 2a06:98c1:310c::ac40:92a6	2026-06-03 10:54:36.618
docs.runway.gitlab.com	104.18.32.71 2a06:98c1:310d::6812:2047 172.64.155.185 2606:4700:440c::ac40:9bb9	2026-07-26 01:45:11.919
ee.gitlab.com	172.64.148.245 104.18.39.11 2a06:98c1:3109::ac40:94f5 2606:4700:4406::6812:270b	2026-06-03 08:03:13.577
ir.gitlab.com	162.159.129.11 2606:4700:7::a29f:810b 2606:4700:7::a29f:820b 162.159.130.11	2026-07-28 18:45:26.399
jobs.gitlab.com	104.18.39.11 172.64.148.245 2a06:98c1:3109::ac40:94f5 2606:4700:4406::6812:270b	2026-06-03 08:03:13.577
observe.gitlab.com	104.18.32.27 172.64.155.229 2606:4700:440c::6812:201b 2a06:98c1:3104::ac40:9be5	2026-06-21 04:43:06.971
static-objects.staging.gitlab.com	104.18.41.90 172.64.146.166 2606:4700:4400::6812:295a 2a06:98c1:310c::ac40:92a6	2026-06-03 10:54:36.618
support.gitlab.com	216.198.54.6 104.18.249.37 104.18.248.37 216.198.53.6	2026-07-28 18:45:26.399
university.gitlab.com	104.18.3.172 2606:4700::6812:2ac 2606:4700::6812:3ac 104.18.2.172	2026-07-28 18:45:26.399
usagestats.gitlab.com	172.64.153.30 104.18.34.226 2a06:98c1:3100::ac40:991e 2606:4700:440c::6812:22e2	2026-06-23 06:03:13.221
advisories.gitlab.com	35.185.44.232 2600:1901:0:7b8a::	2026-06-04 08:53:22.572
api.gitlab.com	35.185.44.232 2600:1901:0:7b8a::	2026-07-20 06:30:41.930
archives.docs.gitlab.com	35.185.44.232 2600:1901:0:7b8a::	2026-07-23 03:16:45.249
auth.staging.gitlab.com	172.65.216.50 2606:4700:90:0:547e:1136:6ea4:7ef4	2026-06-03 10:54:36.618
federal-support.gitlab.com	216.198.54.11 216.198.53.11	2026-06-03 10:06:11.525
forum.gitlab.com	184.105.99.75 2602:fd3f:3:ff02::4b	2026-07-28 18:45:26.399
gitlab.com	172.65.251.78 2606:4700:90:0:f22e:fbec:5bed:a9b9	2026-07-28 20:47:52.650
handbook.gitlab.com	35.185.44.232 2600:1901:0:7b8a::	2026-07-28 18:45:26.399
kas.pre.gitlab.com	172.65.254.236 2606:4700:90:0:783:319c:dd29:d8cf	2026-07-25 00:15:28.926
kas.staging.gitlab.com	172.65.255.193 2606:4700:90:0:d91:b84e:a71b:d899	2026-06-03 10:54:36.618
partnerflash.gitlab.com	139.177.177.177 2a01:7e01::f03c:93ff:fe61:95d5	2026-05-26 13:19:28.643
pre.gitlab.com	172.65.201.82 2606:4700:90:0:d3c9:cee5:ad8f:24b9	2026-07-25 00:15:28.926
registry.staging.gitlab.com	35.237.188.172 2600:1901:0:39f3::	2026-06-03 10:54:36.618
slippers.gitlab.com	35.185.44.232 2600:1901:0:7b8a::	2026-07-28 02:24:05.207
staging.gitlab.com	172.65.216.50 2606:4700:90:0:547e:1136:6ea4:7ef4	2026-07-26 12:32:01.270
www.gitlab.com	172.65.251.78 2606:4700:90:0:f22e:fbec:5bed:a9b9	2026-07-28 10:29:13.532
ai-gateway-eks.proxy.runway.gitlab.com		1970-01-01 00:00:00.000
api-staging.community.gitlab.com		1970-01-01 00:00:00.000
api.community.gitlab.com		1970-01-01 00:00:00.000
app-staging.community.gitlab.com		1970-01-01 00:00:00.000
app.community.gitlab.com		1970-01-01 00:00:00.000
auth.aws.gitlab.com		1970-01-01 00:00:00.000
auth.gcp.gitlab.com		1970-01-01 00:00:00.000
auth.pre.gitlab.com		1970-01-01 00:00:00.000
auth.token.gitlab.com		1970-01-01 00:00:00.000
campaign-manager.gitlab.com		1970-01-01 00:00:00.000
canary.gitlab.com		1970-01-01 00:00:00.000
cell-c01j2gdw0zfdafxr6.cells.gitlab.com		1970-01-01 00:00:00.000
cells.gitlab.com		1970-01-01 00:00:00.000
cloud.gitlab.com		1970-01-01 00:00:00.000
customers2.gitlab.com		1970-01-01 00:00:00.000
developer.gitlab.com		1970-01-01 00:00:00.000
email.customers.gitlab.com		1970-01-01 00:00:00.000
enable.gitlab.com		1970-01-01 00:00:00.000
events.gitlab.com		1970-01-01 00:00:00.000
gateway.gcp.gitlab.com		1970-01-01 00:00:00.000
geo.staging.gitlab.com		1970-01-01 00:00:00.000
go-staging.community.gitlab.com		1970-01-01 00:00:00.000
go.gitlab.com		1970-01-01 00:00:00.000
grafana.cell-c01j2gdw0zfdafxr6.cells.gitlab.com		1970-01-01 00:00:00.000
grafana.cell-c01k35wpsh58x0j74g.cells.gitlab.com		1970-01-01 00:00:00.000
gstg.gitlab.com		1970-01-01 00:00:00.000
internal.gitlab.com		1970-01-01 00:00:00.000
kas.cell-c01j2gdw0zfdafxr6.cells.gitlab.com		1970-01-01 00:00:00.000
kas.gitlab.com		1970-01-01 00:00:00.000
license.gitlab.com		1970-01-01 00:00:00.000
links.gitlab.com		1970-01-01 00:00:00.000
manager-staging.community.gitlab.com		1970-01-01 00:00:00.000
next.gitlab.com		1970-01-01 00:00:00.000
opensearch.cell-c01j2gdw0zfdafxr6.cells.gitlab.com		1970-01-01 00:00:00.000
opensearch.cell-c01k35wpsh58x0j74g.cells.gitlab.com	172.65.191.58	2026-06-20 14:40:22.091
papercuts.gitlab.com		1970-01-01 00:00:00.000
partners.gitlab.com		1970-01-01 00:00:00.000
privacy.gitlab.com		1970-01-01 00:00:00.000
prod.geo.gitlab.com		1970-01-01 00:00:00.000
pulp.gitlab.com		1970-01-01 00:00:00.000
registry.cell-c01j2gdw0zfdafxr6.cells.gitlab.com		1970-01-01 00:00:00.000
registry.geo.staging-ref.gitlab.com	34.65.51.8	2026-06-19 05:33:01.102
registry.gitlab.com	35.227.35.254	2026-06-17 06:55:00.993
scim.gitlab.com		1970-01-01 00:00:00.000
shop.gitlab.com		1970-01-01 00:00:00.000
smart.gitlab.com		1970-01-01 00:00:00.000
staging-ref.gitlab.com	34.75.81.247	2026-06-18 12:47:00.522
staging.ai-gateway-eks.proxy.runway.gitlab.com		1970-01-01 00:00:00.000
staging.jm.proxy.runway.gitlab.com		1970-01-01 00:00:00.000
triage-ops.gitlab.com		1970-01-01 00:00:00.000
trust.gitlab.com		1970-01-01 00:00:00.000
ucap.gitlab.com		1970-01-01 00:00:00.000
usagestats.staging.gitlab.com		1970-01-01 00:00:00.000
www.about.gitlab.com		1970-01-01 00:00:00.000
www.canary.gitlab.com		1970-01-01 00:00:00.000
www.ce.gitlab.com		1970-01-01 00:00:00.000
www.ee.gitlab.com		1970-01-01 00:00:00.000
www.gstg.gitlab.com		1970-01-01 00:00:00.000
www.jobs.gitlab.com		1970-01-01 00:00:00.000
www.kas.staging.gitlab.com		1970-01-01 00:00:00.000
www.license.gitlab.com		1970-01-01 00:00:00.000
www.next.gitlab.com		1970-01-01 00:00:00.000
www.prod.geo.gitlab.com		1970-01-01 00:00:00.000
www.registry.gitlab.com		1970-01-01 00:00:00.000
www.registry.pre.gitlab.com		1970-01-01 00:00:00.000
www.shop.gitlab.com		1970-01-01 00:00:00.000
www.status.gitlab.com		1970-01-01 00:00:00.000

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

51.77.148.178:443 df8c23d56827…

Subject: gitlab.compozz.com

Issuer: YE1

SANs: gitlab.compozz.com, registry.compozz.com

193.180.185.71:443 2fc12100a7cf…

Subject: gitlab.compos.se

Issuer: R12

SANs: gitlab.compos.se

35.231.129.59:443 ce1f4f790ab2…

Subject: registry.pre.gitlab.com

Issuer: Sectigo Public Server Authentication CA DV R36

SANs: registry.pre.gitlab.com, www.registry.pre.gitlab.com

82.117.158.248:443 89cf3e5f0e15…

Subject: gitlab.compono.cz

Issuer: YR2

SANs: gitlab.compono.cz

46.224.104.102:443 88a59f3f0fc0…

Subject: dynamic

Issuer: dynamiclistener-ca@1772035818

SANs: 0x0000.tech, 127.0.0.1, 172.17.0.2, 2055199850.thedonutking.com, 34.77.189.226, 443, 46.224.104.102, 46.224.104.102.sslip.io, 46.224.104.102:443, StAtIc.fOx1.Eu.oRg, alve.chat, api.alve.chat, api.xpayio.com, app.cr.bot, app.send.tg, appgw01.lbapigw.com, arvancloud.ir, assets.msn.com, baseline-0129cbdb.digitalocean.com, baseline-54cbc0214b8440bacbf4a50766938751.digitalocean.com, baseline-727203ef787420e2.digitalocean.com, baseline-b01b9880d16a89d6f8009c86bea51e3c0d0b7fc2.digitalocean.com, besira.net, betconstruct.com, buhijilkk.com, cateringcaca.com.tr, chatgpt.com, client.wns.windows.com, cloudflare-ech.com, cloudflare.com, config.edge.skype.com, console-ams3.digitalocean.com, console-tor1.digitalocean.com, cp601.prod.do.dsp.mp.microsoft.com, csb32d5fe08.example, csc15516d90.example, d18oykeixd2u2b.cloudfront.net, d21bqogpwwn1sv.cloudfront.net, d8hduijkvze91.cloudfront.net, dctrack-dev.nyc3.internal.digitalocean.com, dctrack02.sfo3.internal.digitalocean.com, dev.46.224.104.102.sslip.io, displaycatalog.mp.microsoft.com, dl.delivery.mp.microsoft.com, dontlysnow.com, download.windowsupdate.com, dynamic, earthwatch.org, ecs.office.com, en.46.224.104.102.sslip.io, ent-waiting-api.interpark.com, epay.12306.cn, evil.attacker.com, example.com, fd.api.iris.microsoft.com, fe3cr.delivery.mp.microsoft.com, gemini.google.com, germany.xmy01.ru, github.dev, gitlab.com, i37d001v5nllvne8.46.224.104.102.sslip.io, ipv4.090227.xyz, ipv6.090227.xyz, kyfw.12306.cn, kyzdar03.tokalki.vip, learn-game-development-education-sector-development.bipin.bd, linkkf.live, linkkf1.5imgdarr.top, lkcqc9i1go90nnko.46.224.104.102.sslip.io, localhost, m.hilarionbet501.com, marketplace-grpc-fra1.digitalocean.com, marketplace-proxy-fra1.digitalocean.com, marketplace-proxy-nyc1.digitalocean.com, marketplace-staging-grafana-sfo2.digitalocean.com, marketplace-staging-prometheus-blr1.digitalocean.com, marketplace-staging-prometheus-sfo2.digitalocean.com, massagerepublic.com, mcde.b-cdn.net, middle.wtf, mindenszo.hu, mlb.tickets.com, mobile.12306.cn, mobile.events.data.microsoft.com, obs-marathon.s2r2.internal.digitalocean.com, osabus.com, pcfmf.989920.xyz, phonetic-pronunciation-is-foremost-when-the-rehearsal-going.thegamebytes.com, platform.tastybakery.me, plus.im, poweriq03.ams3.internal.digitalocean.com, poweriq04.sgp1.internal.digitalocean.com, prod-codd-admin.fra1.internal.digitalocean.com, prod-codd-admin.nyc3.internal.digitalocean.com, prod-codd-admin.sfo1.internal.digitalocean.com, prod-codd-admin.sfo3.internal.digitalocean.com, prod.client.wosc.services.microsoft.com, rancher.cattle-system, random-control.invalid, reality-probe-test.270201.xyz, send-bot.com, send.tg, settings-win.data.microsoft.com, shopify.com, slscr.update.microsoft.com, speed.cloudflare.com, speedtest.net, static.102.104.224.46.clients.your-server.de, summertoons.net, sw1.20manat.ru, test.gutir.ru, testt.localhostbd.art, this-decanter-is-topped-and-baked.dylkrlrcabfylrwjgfebeusvc.org, turkey.escortnews.com, uachanger.com, upos-sz-mirrorcf1ov.bilivideo.com, v1.xcddos.xyz, v10.events.data.microsoft.com, vibecode-claude.online, whatever.bitcoin8070.workers.dev, workers.dev, wuseguang.com, www.46.224.104.102.sslip.io, www.apksafe.vip, www.bjaidigreen.com, www.cloudflare.com, www.ddosforum.online, www.digitalocean.com, www.maxwealth.com.cn, www.shopify.com, www.shxiaozhenzc.com, www.speedtest.net, www.visa52.com, xn--5kroo.com, yarakkurek.com, yuduol.com

23.252.126.67:443 c466b8b08105…

Subject: registry.gitlab.comliq.net

Issuer: YE2

SANs: gitlab.comliq.net, registry.gitlab.comliq.net

18.252.146.104:443 b5fc431cbce7…

Subject: esg-gitlab.com

Issuer: YR1

SANs: esg-gitlab.com

150.203.161.180:443 eada87d26175…

Subject: gitlab.comp.anu.edu.au

Issuer: Sectigo Public Server Authentication CA OV R36

SANs: gitlab.cecs.anu.edu.au, gitlab.comp.anu.edu.au, gitlab0.comp.anu.edu.au, gitlab1.comp.anu.edu.au, gitlab2.comp.anu.edu.au, gitlab3.comp.anu.edu.au

121.4.164.239:443 66c386f495f6…

Subject: dynamic

Issuer: dynamiclistener-ca@1730168404

SANs: 1.1.1.1, 100.100.100.200, 104-wickiup-trail.pacificacquisition.com, 11-elysian-place.9ijczx76muy.top, 110-shinn-circle.cebmrvgeuaqpvinqghxgswxfe.org, 121.004.164.239, 121.4.164.239, 121.4.164.239:443, 121.4.164.239stager64, 127.0.0.1, 1311-north-j-f-kennedy-drive.or.pa, 16-o-x-ranch-lane.matinsoltani.ir, 169.254.169.254, 172.17.0.2, 190-fred-burns-road.3dgama.ir, 1903-eagle-springs-drive.l6yvi.shop, 192.168.0.1, 2546736085.gixjrtksotkztkhsoqgtxprox.org, 263-990-6932.mil.sg, 303-869-7551.akunjpmaxwin.site, 3189383574.or.cd, 3212899447.zlqcunvkjgyljdewogiizqrgxgsksw.org, 3214129645.swaymedia.co, 330-543-6611.samaste.net, 34.77.189.226, 360-562-1931.kira-perm.ru, 3606628554.gouv.rw, 364-216-0685.perso.sn, 3EUePIKWparSeHxGOAhXilpI1yj.tld, 3EUePN6l6vSJywV3i9Jcx1c8kdi.tld, 419bahislion.com, 4347702146.glamourslot.store, 4379812768.xn--kiv39c.my, 443, 580-305-8186.docn.in, 5815502578.zxcuhmbtnveqhahuaqcerpblfkf.org, 5a7578a4-88c5-4f12-bd0c-9139452517a4.basicxai.cn, 634bahislion.com, 706-481-3503.dqtkjuknfprsgrcdayizhibrozphi.org, 708-890-0494.samsungshop.ir, 7088718934.gouv.rw, 71-east-big-ruin-creek-lane.500.mg, 7388880505.chichijane.com, 801-823-5413.haovljkzvkirufuljkvbprxkqkz.org, 8054407432.mil.vn, 8665268387.bachilleratoxelhua.edu.mx, 8677-east-green-acres-lane.fiqgguyscnvbuzbqlneivkh.org, 8j78i.freedom.gov, 902-381-6408.bachilleratoxelhua.edu.mx, 9036326278.mil.gg, 951-nays-auto-drive.dusunce-akisinda-kaybolan-yalniz-geceler.com, 9893007764.astudanco.com, a9vj.freedom.gov, aashka-hirschberg.torontoweddingdj.ca, absivfurnace-slicing-formal.basicxai.cn, adaokprocedure.basicxai.cn, adjust-quanlity-formal.basicxai.cn, adjust-quanlity-test.basicxai.cn, algeedispatch-demo-formal.basicxai.cn, api-doc.basicxai.cn, api-manager.upbit.com, api-test.basicxai.cn, api.openai.com, apigateway.bbscrm.com, app.qywlcm.top, app.yinxiang.com, appgw01.lbapigw.com, arl-control-5f3f4117c6b3-121-4-164-239-443.invalid, arl-control-5f3f4117c6b6-121-4-164-239-443.invalid, arl-control-5f3f4117c6c3-121-4-164-239-443.invalid, assets.msn.com, at3c.freedom.gov, autoharp-tuning-hammer.bsf.pe.gov.br, bahiskralligi.com, basicxai.cn, bilibili.cn, bilibili.com, bilivideo.com, bq8t.endccp.com, bwwjrprocedure-test.basicxai.cn, cateringcaca.com.tr, cdsjusfxreapi-doc.basicxai.cn, chejsapi-doc.basicxai.cn, clatyon-metraux.stillnessworks.net, client.wns.windows.com, cloud-merchant.li-pos.cn, cloudflare.com, competence-mining-for-gold-silver-range.ldtxqsrsugaqhqfmynzcaln.org, config.basicxai.cn, config.edge.skype.com, cp601.prod.do.dsp.mp.microsoft.com, cs.yaowang.eu.org, cvg791ttfve4aghgnuc0r6dfkytr386mn.oast.online, cxkep.hucknoseassembly.com, d8e4a5jusq98tcabe0cg4edrc9u98g8bj.oast.live, d8e4a5jusq98tcabe0cg8ceita8qwst5g.oast.live, d8e4a5jusq98tcabe0cg9q8hkft4s7r34.oast.live, d8e4a5jusq98tcabe0cgbwepp4hfbcx8z.oast.live, delphus-brisske.or.cd, dionee-witfoth.xoherkbmrkypinhcqtswfypfxcqcl.org, dispatch-demo-formal.basicxai.cn, dispatch-demo-test.basicxai.cn, displaycatalog.mp.microsoft.com, dl.delivery.mp.microsoft.com, dmcenj.with.ke, domain-for-test.com, dongtaiwang.com, download.windowsupdate.com, dxazi.uishift.com, ecs.office.com, edge-procedure-test.basicxai.cn, ehnkoedge-procedure-test.basicxai.cn, emehfapi-doc.basicxai.cn, ent-waiting-api.interpark.com, epay.12306.cn, epochtimes.com, eptzjn.idealvisioncenter.com.ph, example.com, exit-any-running-experience-as-usual.here.ke, eykttfurnace-slicing-formal.basicxai.cn, fantastic-item-for-easter.lgilibijvsgmxkbtslxxjz.org, fd.api.iris.microsoft.com, fe3cr.delivery.mp.microsoft.com, feysal-paddie.boyabathem.tr, furnace-detect-formal.basicxai.cn, furnace-detect-test.basicxai.cn, furnace-slicing-formal.basicxai.cn, gapi.melon.com, gender-becomes-less-feminine.karapinardhs.tr, germany.xmy01.ru, germya-crepajski.or.vg, gitlab.com, gzlfh.cercwsjvilbpbmzltnjjfuaed.org, h5.moutai519.com.cn, haroun-chiacchiero.mil.gg, hdzenapi-doc.basicxai.cn, heartsofoak.org, help-been-heal-and-access-easy.mil.vn, hilarionbet.org, hlsvesfxreapi-doc.basicxai.cn, hmlhhnacos.basicxai.cn, idlmtrancher-test.basicxai.cn, ifaenapi-test.basicxai.cn, im-web.b5p2ba.com, im-web.ipsxnd.com, interpark.com, invitation-or-not.noiraud.name, irupjwww.rancher-test.basicxai.cn, jeanmarie-jeune.acuaval.com, jnybdueqewprocedure-t.basicxai.cn, kaiop.dzcqugekffqzpfuhdpptt.org, kiler-timberlake.mil.vn, krapiva.media, kszflwww.procedure-t.basicxai.cn, kyfw.12306.cn, live.007886.xyz, localhost, lorionta-ocario.or.cd, lzksyfurnace-detect-formal.basicxai.cn, m.441bahislion.com, m.bahisleon653.com, m.bahislion753.com, m.bahisllon662.com, m.basicxai.cn, m.hilarionbet501.com, mail.basicxai.cn, mall.bilibili.cn, mall.bilibili.com, mall.cgbchina.com.cn, matadorbet9888.com, mi-2.huotu.art, mobile.12306.cn, mobile.events.data.microsoft.com, moutai519.com.cn, mrjhuyvlcf.mil.sg, mx.basicxai.cn, myip.bexcode.us.to, mzhmbwww.nacos.basicxai.cn, nacos-test.basicxai.cn, nacos.basicxai.cn, naitonya-shevel.ddcatkhergmrdkrlxskda.org, nancy-comes-up-with-development-times.mil.vn, newlindong.fengbaikeji.com, nist.gov, o69iay0p.api-doc.basicxai.cn, o69iay0p.basicxai.cn, o69iay0p.nacos-test.basicxai.cn, o69iay0p.nacos.basicxai.cn, o69iay0p.procedure.basicxai.cn, o69iay0p.rancher-test.basicxai.cn, oast.me, obxuowww.nacos-test.basicxai.cn, olhqzrancher.basicxai.cn, openai.com, optimized-line-formal.basicxai.cn, optimized-line-test.basicxai.cn, ow-does-everyone-say.ac.pe, p3-tt.byteimg.com, phoutong-harbart.film-fest-sfbay.info, pinganapi.silai8.cn, ppeqarancher-test.basicxai.cn, procedure-t.basicxai.cn, procedure-test.basicxai.cn, procedure.basicxai.cn, prod.client.wosc.services.microsoft.com, pvinbf.designtattler.com, qcukwedge-procedure-test.basicxai.cn, qpterv.pfqsytvchmaqxpswqgzvlfq.org, qwqirwww.nacos-test.basicxai.cn, qxeygprocedure-t.basicxai.cn, rancher-test.basicxai.cn, rancher.basicxai.cn, rancher.cattle-system, review-build-from-menu.gb.dj, safewanou.fengbaikeji.com, sareea-durzinsky.mon-hebdo-infos.fr, screen-reader-software.xszkvsrwhmguvwvkvwzgmaynj.org, scrmchanpion.com, settings-win.data.microsoft.com, sfxreapi-doc.basicxai.cn, shopify.com, sitemap.basicxai.cn, skibidifarms.st, slscr.update.microsoft.com, softsec.science, speed.cloudflare.com, speed.horizon1231.pp.ua, speedtest.net, sqz-33.com, tapp.cdumkj.com, test-sinomine.basicxai.cn, test.basicxai.cn, test.com, test.guangplus.com, testim.guangplus.com, the-concurrent-beauty-and-local-scales.bandirmaadsm.gov.tr, time.is, tjifuwww.procedure.basicxai.cn, tktapi.melon.com, tokenid.rouwowu.ru, tr.bahislion-girisleri.com, tr.bahislion-resmigirisitr.com, tr.bahislionorjinalgir.com, tute-on-my-fire-portable-radio-cache.mc.dj, uatmini.guangplus.com, uatop.guangplus.com, ueqewprocedure-t.basicxai.cn, ugcaamdqtywxlcnuucb01.k8v4dh4.app, upbit.com, upos-sz-mirrorcf1ov.bilivideo.com, v1.kwaicdn.com, v10.events.data.microsoft.com, v2.kwaicdn.com, velina-bagaglio.lferoyxorjryzdtkxofizaqdug.org, vewthxqmegwww.nacos.basicxai.cn, victory-while-we-continue-with-install.mbdxgzpuxghrwmfpjdseuqeqt.org, vless.443888.xyz, wahoo-is-now-today.elcarmentoluca.com, wbjvvbd.colegiorafaelramirez.edu.mx, wcsrxueqewprocedure-t.basicxai.cn, wikiislam.net, wsuyddispatch-demo-test.basicxai.cn, www.52txr.cn, www.api-doc.basicxai.cn, www.basicxai.cn, www.btbtt15.com, www.cloudflare.com, www.epochtimes.com, www.google-analytics.com, www.googleadservices.com, www.minghui.org, www.mohammeds-koran.com, www.nacos-test.basicxai.cn, www.nacos.basicxai.cn, www.nexusbox.top, www.procedure-t.basicxai.cn, www.procedure.basicxai.cn, www.rancher-test.basicxai.cn, www.scrmchanpion.com, www.shopify.com, www.soso.com, www.speedtest.net, www.unicef.org, www.wujieliulan.com, www.yunyuanjianmu.top, x9sp1.42bdp.top, xa1.shaanxi.cn.antiddos.cspt.fullcone.cn, xa2.shaanxi.cn.antiddos.cspt.fullcone.cn, xa4.shaanxi.cn.antiddos.cspt.fullcone.cn, xa5.shaanxi.cn.antiddos.cspt.fullcone.cn, xargzg.qonfmfuwdzlhyknbyfmaywoporjb.org, xh-api.iswenchuang.cn, xin.iswenchuang.cn, xn--5kroo.com, xqmegwww.nacos.basicxai.cn, xyegkfurnace-detect-test.basicxai.cn, ygndhxqmegwww.nacos.basicxai.cn, ykmoowww.nacos.basicxai.cn, you-censor-your-music-production.transitoibague.gov.co, your-incest-joke-for-quick-speed-on-each-flagellar-segment.minecraftapkfile.com, yzlxwoptimized-line-formal.basicxai.cn, zam.melon.com, zbbohc2650af0.basicxai.cn, zgjqvf.com2025-01-08nsdns.info

34.8.210.43:443 00399dc713ea…

Subject: mobile.iap-robotics-gitlab.com

Issuer: WR3

SANs: mobile.iap-robotics-gitlab.com

34.170.134.192:443 fd58b2005a84…

Subject: observe.gitlab.com

Issuer: YR2

SANs: observe.gitlab.com

20.228.139.81:443 51772ab0bad6…

Subject: rnd-gitlab.com

Issuer: rnd-gitlab.com

SANs: rnd-gitlab.com

88.216.68.168:443 3461a0821619…

Subject: cafebazaar.ir

Issuer: cafebazaar.ir

SANs: cafebazaar.ir, chatgpt.com, digikala.com, divar.ir, downloadha.com, filimo.com, gitlab.com, google.com, mail.google.com, news.google.com, openai.com, search.google.com, shaparak.ir, support.google.com, tamin.ir, varzesh3.com, zoomit.ir

34.170.5.208:443 9fe861a4d4c0…

Subject: chef.gitlab.com

Issuer: E7

SANs: chef.gitlab.com

1.15.138.229:443 cd2e42171fde…

Subject: docker-registry.hellogitlab.com

Issuer: TrustAsia RSA DV TLS CA G2

SANs: docker-registry.hellogitlab.com

54.64.60.205:443 d9ba82c7d884…

Subject: workthy-gitlab.com

Issuer: Amazon ECDSA 256 M01

SANs: *.workthy-gitlab.com, workthy-gitlab.com

171.35.42.139:8443 52b03815f028…

Subject: ucap.gitlab.com

Issuer: OU=Certificate Authority for ucap.gitlab.com, O=GVM Users, L=Osnabrueck, C=DE

SANs: ucap.gitlab.com

54.95.53.228:443 eb93010f765c…

Subject: jquad-gitlab.com

Issuer: Amazon RSA 2048 M04

SANs: jquad-gitlab.com

139.177.177.177:443 a4974be40b6f…

Subject: partnerflash.gitlab.com

Issuer: R13

SANs: partnerflash.gitlab.com

34.170.5.208:443 9fe861a4d4c0…

Subject: chef.gitlab.com

Issuer: E7

SANs: chef.gitlab.com

3.68.216.31:465 836b228a99f6…

Subject: codefresh-gitlab.com

Issuer: GitLab Certificate Authority

SANs: codefresh-gitlab.com

IPs Citing This Domain

Hosts whose HTML body references this domain. Strong signal for origin/mirror/embed discovery.

52.49.164.13:80 href · ×159

173.228.145.170:443 href · ×34

51.91.53.88:443 href · ×27

172.104.157.20:443 href · ×22

185.205.246.14:443 href · ×18

82.196.2.148:443 href · ×16

138.68.116.47:443 href · ×16

149.74.243.197:443 href · ×15

65.21.48.89:443 href · ×14

65.109.143.74:443 href · ×14

54.148.12.48:80 href · ×14

38.7.201.30:80 href · ×11

103.54.58.24:443 href · ×11

37.32.29.68:80 href · ×10

191.219.30.114:443 href · ×9

201.24.207.83:443 href · ×9

89.30.205.226:443 href · ×9

201.24.207.218:443 href · ×9

89.30.205.51:443 href · ×9

201.24.207.125:443 href · ×9

213.189.27.84:443 href · ×9

16.5.230.11:443 href · ×9

151.244.184.120:443 href · ×9

16.5.230.23:443 href · ×9

191.219.30.223:443 href · ×9

201.14.210.101:443 href · ×9

151.244.184.102:443 href · ×9

201.14.210.4:443 href · ×9

201.14.210.184:443 href · ×9

201.14.210.33:443 href · ×9

201.14.210.207:443 href · ×9

16.5.115.188:443 href · ×9

201.14.210.115:443 href · ×9

89.30.142.21:443 href · ×9

89.30.142.96:443 href · ×9

89.30.205.204:443 href · ×9

201.24.207.89:443 href · ×9

201.24.207.68:443 href · ×9

151.246.174.17:443 href · ×9

89.30.205.222:443 href · ×9

89.30.205.70:443 href · ×9

201.14.210.253:443 href · ×9

201.24.207.14:443 href · ×9

191.219.30.206:443 href · ×9

16.5.230.26:443 href · ×9

89.30.205.134:443 href · ×9

201.24.207.12:443 href · ×9

89.30.205.66:443 href · ×9

89.30.205.186:443 href · ×9

201.24.207.224:443 href · ×9

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

Origin IP	Origin ASN	CDN ASN	Confidence	Reasoning
88.216.68.168	AS204770	AS13335	95%	cert 3461a082… served by 88.216.68.168 (AS204770) carries SAN gitlab.com which currently resolves through Cloudflare (AS13335) at 172.65.251.78, 2606:4700:90:0:f22e:fbec:5bed:a9b9
34.170.5.208	AS396982	AS13335	95%	cert 9fe861a4… served by 34.170.5.208 (AS396982) carries SAN chef.gitlab.com which currently resolves through Cloudflare (AS13335) at 104.18.39.11, 172.64.148.245, 2a06:98c1:3109::ac40:94f5, 2606:4700:4406::6812:270b

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.

Type	Value	First seen	Last seen
AAAA	2606:4700:90:0:f22e:fbec:5bed:a9b9	2026-05-25 21:54:50.392	2026-07-28 20:47:52.650
A	172.65.251.78	2026-05-25 21:54:50.392	2026-07-28 20:47:52.650
TXT	google-site-verification=uT9dAMjaTlnkbC0VnN5flFWp0Bsze7zHObWjZwkd2p8	2026-05-25 23:59:40.866	2026-07-28 20:47:52.650
TXT	zapier-domain-verification-challenge=a1d665be-8176-4ada-9707-4332dfa7a2cc	2026-05-25 23:59:40.866	2026-07-28 20:47:52.650
TXT	_globalsign-domain-verification=4azHJ7gL04Dr8r2VR0txu7OrWg7uZpU6v7LOHVP1b3	2026-05-25 23:59:40.866	2026-07-28 20:47:52.650
TXT	google-site-verification=XDRo7LEOqv6OV0RfGDFh7G2XgpzdycygGJBqde334q4	2026-05-25 23:59:40.866	2026-07-28 20:47:52.650
TXT	onetrust-domain-verification=af5b5fda116e45a9b4c4abcd9e571923	2026-05-25 23:59:40.866	2026-07-28 20:47:52.650
TXT	google-site-verification=vPPg6DGiVgf5vhzQg5zGISLao6-07-lVzzpqvmCFe5Y	2026-05-25 23:59:40.866	2026-07-28 20:47:52.650
TXT	google-site-verification=QiG7NTIWpedorFi71mMN7OVe2Fo_yA6RclsxO8stOa8	2026-05-25 23:59:40.866	2026-07-28 20:47:52.650
TXT	v=MCPv1; k=ed25519; p=MmZM6XexKcX4jiWqHtn3M0av9Q7HDmonAdP6PqktwX0=	2026-05-25 23:59:40.866	2026-07-28 20:47:52.650
TXT	mgverify=2dd945066758840fe3bfbd9ccf90e2c6000458f13345baa576338880dcc86658	2026-05-25 23:59:40.866	2026-07-28 20:47:52.650
TXT	smartsheet-site-validation=wTADkxxpf97DU9ZxO4RuFpZJyRvP7MRm	2026-05-25 23:59:40.866	2026-07-28 20:47:52.650
TXT	v=spf1 include:mail.zendesk.com include:_spf.google.com include:mktomail.com include:_spf.salesforce.com include:_spf-ip.gitlab.com a:zgateway.zuora.com include:mailgun.org include:_spf.sendergen.com ip4:35.80.141.6/32 ip4:44.229.121.55/32 -all	2026-05-25 23:59:40.866	2026-07-28 20:47:52.650
TXT	drift-domain-verification=fa583cfff88c496bcc62651057550656a98ab3e689c314255a1a6ae848e3e56d	2026-05-25 23:59:40.866	2026-07-28 20:47:52.650
TXT	docusign=1a7d6818-2cf5-4956-a9fb-c3d2e9a578dd	2026-05-25 23:59:40.866	2026-07-28 20:47:52.650
TXT	onetrust-domain-verification=84b59aa2659244d486b0b86f5db073dd	2026-05-25 23:59:40.866	2026-07-28 20:47:52.650
TXT	mgverify=9549a96a4bc9886fbf483bcd56872eaf2b5b9e690d264024041cf446664cb114	2026-05-25 23:59:40.866	2026-07-28 20:47:52.650
TXT	serval-domain-verification-rahzqw=w9adwbCM3CJ9BrXnAleSWuMqz	2026-05-25 23:59:40.866	2026-07-28 20:47:52.650
TXT	asv=3f763643512ad5bdcc0d42caea1b3951	2026-05-25 23:59:40.866	2026-07-28 20:47:52.650
TXT	google-site-verification=lnPjOx5EAxmESH8FSn4colWVMAxe18K4ZIopDB1IEDY	2026-05-25 23:59:40.866	2026-07-28 20:47:52.650
TXT	jamf-site-verification=nRPNM9HJGzWzUkvBtgvBrg	2026-05-25 23:59:40.866	2026-07-28 20:47:52.650
TXT	MS=ms83893381	2026-05-25 23:59:40.866	2026-07-28 20:47:52.650
NS	jermaine.ns.cloudflare.com	2026-05-25 23:59:40.866	2026-07-28 20:47:52.650
TXT	google-site-verification=iWR2UGQb3MvVY83zY47ZFrGFVFLG6ADfpjqchlQjnok	2026-05-25 23:59:40.866	2026-07-28 20:47:52.650
MX	5 alt2.aspmx.l.google.com	2026-05-25 23:59:40.866	2026-07-28 20:47:52.650
TXT	openai-domain-verification=dv-Uq90dak9n7LidGh0WsdFOOUu	2026-05-25 23:59:40.866	2026-07-28 20:47:52.650
TXT	adobe-idp-site-verification=5a5e001556a2c0595ed571d2a1f7b5f8a749a00742853e035eb909bdd31622b8	2026-05-25 23:59:40.866	2026-07-28 20:47:52.650
MX	10 alt4.aspmx.l.google.com	2026-05-25 23:59:40.866	2026-07-28 20:47:52.650
MX	1 aspmx.l.google.com	2026-05-25 23:59:40.866	2026-07-28 20:47:52.650
TXT	stripe-verification=E331E16D59119AEFB547211475C2E225C1BF6EB8CB885D300536B2852EAD3D74	2026-05-25 23:59:40.866	2026-07-28 20:47:52.650
TXT	gitlab-pages-verification-code=5228e61c992af7e65f5f5160f0587fb4	2026-05-25 23:59:40.866	2026-07-28 20:47:52.650
TXT	uber-domain-verification=38ba2b7b-5ae3-4694-9701-086b20ea3d36	2026-05-25 23:59:40.866	2026-07-28 20:47:52.650
MX	5 alt1.aspmx.l.google.com	2026-05-25 23:59:40.866	2026-07-28 20:47:52.650
TXT	apple-domain-verification=UNUD9vY0Jp9z5TjO	2026-05-25 23:59:40.866	2026-07-28 20:47:52.650
MX	10 alt3.aspmx.l.google.com	2026-05-25 23:59:40.866	2026-07-28 20:47:52.650
TXT	google-site-verification=6Cb3PPpoMp6-xRavXf2HZz03s7pplQeG5MiUaPGIu_Q	2026-05-25 23:59:40.866	2026-07-28 20:47:52.650
NS	diva.ns.cloudflare.com	2026-05-25 23:59:40.866	2026-07-28 20:47:52.650
TXT	MS=ms60523131	2026-05-25 23:59:40.866	2026-07-28 20:47:52.650
TXT	decagon-domain-verification-x2tmf7=3ckGf0Fig870o69ZHAT7SfK8v	2026-07-15 20:04:13.980	2026-07-16 22:48:30.844
TXT	decagon-domain-verification-cmrbvs=Lb6bOM0iABwwrWBstDaKWS3U8	2026-07-16 23:15:04.514	2026-07-28 20:47:52.650