# Certificate Transparency Subdomain Discovery — Feb 28, 2026
# Source: crt.sh

## ALMAYADEEN.NET — 40 subdomains
# LIVE (14):
almayadeen.net                        # 200 — Main site (Cloudflare)
portal-api.almayadeen.net             # 200 — MangoX Docker 94a743b785f9 (prod)
portal-beta-api.almayadeen.net        # 200 — MangoX Docker 57660472686f (prod)
portal-staging-api.almayadeen.net     # 200 — MangoX Docker 63d26ec15c1d (staging)
public-api.almayadeen.net             # 200 — MangoX Docker cd4b3868f98b (prod)
public-api-staging.almayadeen.net     # 200 — MangoX Docker 0314cab697ec (staging)
public-api-beta.almayadeen.net        # 200 — MangoX Docker 5b0c704d44be (beta)
portal.almayadeen.net                 # 200 — Next.js 65KB (portal frontend)
ai.almayadeen.net                     # 200 — Azure OpenAI GPT-4 editor
interactions.almayadeen.net           # 200 — Vue/React SPA 3.9MB
media.almayadeen.net                  # 200 — ASP.NET media service
next-ar.almayadeen.net                # 200 — Next.js Arabic 26KB
next-en.almayadeen.net                # 200 — Next.js English 315KB
autodiscover.almayadeen.net           # 302 — Exchange 2016 CU23 OWA/ECP (BHS-EX09)

# PARTIALLY LIVE (4):
corona-form.almayadeen.net            # 200 — HIJACKED (JS redirect to nswpaintings.com.au)
back.almayadeen.net                   # 404 — Server responds, no content
react.almayadeen.net                  # 402 — Vercel DEPLOYMENT_DISABLED
media-en.almayadeen.net               # 200 — Empty (0 bytes)

# ADMIN (3):
alpha-ar-admin.almayadeen.net         # 302 → /Account/logon (ASP.NET Core)
alpha-en-admin.almayadeen.net         # 302 → /Account/logon
admin.almayadeen.net                  # 301 → alpha-ar-admin

# MEDIA CDN (3):
alpha-ar-media.almayadeen.net         # LIVE
alpha-en-media.almayadeen.net         # LIVE
alpha-fr-media.almayadeen.net         # LIVE

# OFFLINE (19):
admin-react.almayadeen.net            # 000
api.almayadeen.net                    # 000
azure.almayadeen.net                  # 000
back-test.almayadeen.net              # 000
cdnar.almayadeen.net                  # 000
cdnmar.almayadeen.net                 # 000
google.almayadeen.net                 # 000
hubs.almayadeen.net                   # 000
interactions-beta.almayadeen.net      # 000
keycdn.almayadeen.net                 # 000
m.almayadeen.net                      # 000
media-es.almayadeen.net               # 000
next.almayadeen.net                   # 000
portal-api-staging.almayadeen.net     # 000
portal-beta.almayadeen.net            # 000
portal-prod.almayadeen.net            # 000
portal-staging.almayadeen.net         # 000
raven.almayadeen.net                  # 000
team.almayadeen.net                   # 000

## FARSNEWS.IR — 21 subdomains (ALL DOWN — Iran blackout)
app.farsnews.ir                       # 000 — Mobile app backend
book.farsnews.ir                      # 000 — Book/publishing
chat.farsnews.ir                      # 000 — Internal chat
confluence.farsnews.ir                # 000 — Confluence wiki
evaluation.farsnews.ir                # 000 — Evaluation system
faculty.farsnews.ir                   # 000 — Faculty/personnel
farsnews.ir                           # (via Tor only)
intevl.farsnews.ir                    # 000 — Unknown
jira.farsnews.ir                      # 000 — Jira project management
mail.farsnews.ir                      # 000 — Email
matomo.farsnews.ir                    # 000 — Analytics
media.farsnews.ir                     # 000 — Media
my-api-tlg.farsnews.ir                # 000 — Telegram bot API!
my-media.farsnews.ir                  # 000 — Personal media
my-media2.farsnews.ir                 # 000 — Personal media 2
nmblt1.farsnews.ir                    # 000 — Unknown
robot.farsnews.ir                     # 000 — Automation
stat.farsnews.ir                      # 000 — Statistics
tavana.farsnews.ir                    # 000 — Unknown
tracker.farsnews.ir                   # 000 — Tracking
www.tavana.farsnews.ir                # 000

## KHAMENEI.IR — 40 subdomains
# LIVE:
nojavan.khamenei.ir                   # 200 — Youth portal (43KB)
idc0-cdn0.khamenei.ir                 # 200 — CDN server 0 (612B nginx default)
idc0-cdn1.khamenei.ir                 # 200 — CDN server 1 (612B nginx default)
formx.khamenei.link                   # 200 — Hidden API (still LIVE)

# CUSTOM 445 (admin/editor portals):
admin.english.khamenei.ir             # 445 — English admin portal
virastar.nojavan.khamenei.ir          # 445 — Youth editor portal

# OFFLINE:
arabic.khamenei.ir                    # (presumed down)
doran.khamenei.ir                     # 000
gaame2.khamenei.ir                    # 000
idc0-cdn4.khamenei.ir                 # 000
idc0-cdn5.khamenei.ir                 # 000
live1.khamenei.ir                     # 000
live2.khamenei.ir                     # 000
live3.khamenei.ir                     # 000
live4.khamenei.ir                     # 000
live5.khamenei.ir                     # 000

# Multi-language CDNs (all presumed down):
cdn-arabic, cdn-azeri, cdn-english, cdn-farsi, cdn-french,
cdn-hindi, cdn-nojavan, cdn-russian, cdn-spanish, cdn-urdu

# Live streaming nodes (all down):
live.idc0-cdn1, live.idc0-cdn2, live.idc0-cdn3, live.idc0-cdn4,
live.idc0-cdn11, live.idc0-cdn12, live.idc0-cdn13

## MANGOPULSE.NET — 50+ subdomains (from earlier crt.sh)
# LIVE:
search-api.mangopulse.net             # 200 — Self-documenting API
docs.mangopulse.net                   # 200 — CMS login portal (/home/login)
media-ar.mangopulse.net               # 200 — Arabic media CDN (ASP.NET/Cloudflare)

# REDIRECT:
cp.mangopulse.net                     # 308 — Control panel (redirect loop)

# TIMEOUT (internal only):
tracking-api.mangopulse.net
data-platform.mangopulse.net
grafana.mangopulse.net
sentry.mangopulse.net
n8n.mangopulse.net

# DNS FAILURE:
mdn.mangopulse.net
portal.mangopulse.net
alakhbar.mangopulse.net
alsharqiya.mangopulse.net