Domain
servers.com
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of servers.com
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
Hosting IPs
—
A/AAAA targets
Subdomains
—
CT + scan + body
Record Types
—
seen in DNS
Observed Certs
—
in our scans
DNS Records
A
173.234.133.9
AAAA
—
MX
1 smtp.google.com
NS
ns1.servers.com, ns2.servers.com, ns3.servers.com, ns4.servers.com
TXT
anthropic-domain-verification-vbks8h=ctKx4ShUqnP9DXlQBib6Nq7WK, figma-domain-verification=5cee51f68282f5c83ba9006d1853953fde39cb632877ae8fa90b7f690135a289-1739275381, google-gws-recovery-domain-verification=62989178, google-site-verification=XmDK-f2Vtewwm48Ws7wXJO8N73GJdpGkEFh9rtKJNtY, knowbe4-site-verification=3eded9e9ea0f63c7a18c1b928f7bee6a, pardot894561=579dbc509460306b515c805f658367c13a08ec1a2b360fb707aee3688af5ae79, rippling-domain-verification=7fc0721cc58d2dd5, v=spf1 mx ip4:173.234.133.16 include:aspmx.pardot.com include:_spf.google.com include:_spf.salesforce.com -all
CNAME
—
CAA
—
WHOIS / Registration
Registration data planned
Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.
Subdomains
Subdomain enumeration pending
Every subdomain ever issued a TLS cert under this apex — extracted from Certificate Transparency logs, our own scan observations and body references.
Tech Stack
Tech detection pending
Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.
TLS Certificates
Subject: server137.hosteaseservers.com
Issuer: YR1
SANs: server137.hosteaseservers.com
Subject: autoconfig.gains.associateservers.com
Issuer: YR2
SANs: autoconfig.gains.associateservers.com, autodiscover.gains.associateservers.com, cpanel.gains.associateservers.com, cpcalendars.gains.associateservers.com, cpcontacts.gains.associateservers.com, gains.associateservers.com, ipv6.gains.associateservers.com, mail.gains.associateservers.com, webdisk.gains.associateservers.com, webmail.gains.associateservers.com, whm.gains.associateservers.com, www.gains.associateservers.com
Subject: fdxlocal-feed-az.visionaryservers.com
Issuer: YE2
SANs: fdxlocal-feed-az.visionaryservers.com
Subject: *.megawebservers.com
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.megawebservers.com, megawebservers.com
Subject: cpanel1-nl.thcservers.com
Issuer: cpanel1-nl.thcservers.com
SANs: cpanel1-nl.thcservers.com
Subject: epsilon.elinuxservers.com
Issuer: YR2
SANs: epsilon.elinuxservers.com
Subject: l397.hosteaseservers.com
Issuer: YR2
SANs: l397.hosteaseservers.com
Subject: *.megawebservers.com
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.megawebservers.com, megawebservers.com
Subject: clock.centralservers.com
Issuer: Sectigo Public Server Authentication CA OV R36
SANs: *.clock.centralservers.com, *.clocks.centralservers.com, clock.centralservers.com, clocks.centralservers.com
Subject: *.iq-servers.com
Issuer: YR2
SANs: *.iq-servers.com
Subject: backend.wooservers.com
Issuer: YR1
SANs: backend.wooservers.com
Subject: *.ingress.froggy-servers.com
Issuer: YE2
SANs: *.ingress.froggy-servers.com, ingress.froggy-servers.com
Subject: sirius.elinuxservers.com
Issuer: YR2
SANs: sirius.elinuxservers.com
Subject: phantom.elinuxservers.com
Issuer: YR1
SANs: phantom.elinuxservers.com
Subject: baltic-servers.com
Issuer: baltic-servers.com
SANs: baltic-servers.com
Subject: euk-96591.eukservers.com
Issuer: YR1
SANs: euk-96591.eukservers.com
Subject: *.megawebservers.com
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.megawebservers.com, megawebservers.com
Subject: gn210.whpservers.com
Issuer: gn210.whpservers.com
SANs: gn210.whpservers.com
Subject: *.files.nl01.cloud.servers.com
Issuer: ZeroSSL RSA DV SSL CA 2
SANs: *.files.nl01.cloud.servers.com, *.nl01.servers.im
Subject: *.megawebservers.com
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.megawebservers.com, megawebservers.com
Subject: lithium.elinuxservers.com
Issuer: YR2
SANs: lithium.elinuxservers.com
Subject: w016.hosteaseservers.com
Issuer: YR1
SANs: w016.hosteaseservers.com
Subject: ns2.thesmartservers.com
Issuer: YR1
SANs: ns2.thesmartservers.com
Subject: *.megawebservers.com
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.megawebservers.com, megawebservers.com
Subject: supersonic.elinuxservers.com
Issuer: YR2
SANs: supersonic.elinuxservers.com
Subject: *.megawebservers.com
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.megawebservers.com, megawebservers.com
Subject: *.megawebservers.com
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.megawebservers.com, megawebservers.com
Subject: *.megawebservers.com
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.megawebservers.com, megawebservers.com
Subject: nfoservers.com
Issuer: nfoservers.com
SANs: nfoservers.com
Subject: pl6.webline-servers.com
Issuer: pl6.webline-servers.com
SANs: pl6.webline-servers.com
IPs Citing This Domain
No citing IPs found yet
As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.
Origin / IP-Leak
USP
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
No origin-IP leaks detected (yet)
Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.
Threat Intelligence
Domain threat-intel pending
Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.
History
Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.
| Type | Value | First seen | Last seen |
|---|---|---|---|
| TXT | figma-domain-verification=5cee51f68282f5c83ba9006d1853953fde39cb632877ae8fa90b7f690135a289-1739275381 | 2026-05-26 02:38:03.884 | 2026-07-27 01:19:47.827 |
| NS | ns2.servers.com | 2026-05-26 02:38:03.884 | 2026-07-27 01:19:47.827 |
| TXT | google-gws-recovery-domain-verification=62989178 | 2026-05-26 02:38:03.884 | 2026-07-27 01:19:47.827 |
| TXT | knowbe4-site-verification=3eded9e9ea0f63c7a18c1b928f7bee6a | 2026-05-26 02:38:03.884 | 2026-07-27 01:19:47.827 |
| NS | ns4.servers.com | 2026-05-26 02:38:03.884 | 2026-07-27 01:19:47.827 |
| MX | 1 smtp.google.com | 2026-05-26 02:38:03.884 | 2026-07-27 01:19:47.827 |
| TXT | anthropic-domain-verification-vbks8h=ctKx4ShUqnP9DXlQBib6Nq7WK | 2026-05-26 02:38:03.884 | 2026-07-27 01:19:47.827 |
| TXT | rippling-domain-verification=7fc0721cc58d2dd5 | 2026-05-26 02:38:03.884 | 2026-07-27 01:19:47.827 |
| TXT | google-site-verification=XmDK-f2Vtewwm48Ws7wXJO8N73GJdpGkEFh9rtKJNtY | 2026-05-26 02:38:03.884 | 2026-07-27 01:19:47.827 |
| NS | ns3.servers.com | 2026-05-26 02:38:03.884 | 2026-07-27 01:19:47.827 |
| NS | ns1.servers.com | 2026-05-26 02:38:03.884 | 2026-07-27 01:19:47.827 |
| TXT | pardot894561=579dbc509460306b515c805f658367c13a08ec1a2b360fb707aee3688af5ae79 | 2026-05-26 02:38:03.884 | 2026-07-27 01:19:47.827 |
| A | 173.234.133.9 | 2026-05-26 02:38:03.884 | 2026-07-27 01:19:47.827 |
| TXT | v=spf1 mx ip4:173.234.133.16 include:aspmx.pardot.com include:_spf.google.com include:_spf.salesforce.com -all | 2026-05-26 02:38:03.884 | 2026-07-27 01:19:47.827 |