Domain
admin.nevec.yahoo.com
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of admin.nevec.yahoo.com
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
Hosting IPs
6
A/AAAA targets
Subdomains
—
CT + scan + body
Record Types
2
seen in DNS
Observed Certs
8
in our scans
DNS Records
A
43.213.14.125, 43.213.186.179, 43.213.204.170
AAAA
2406:da1c:8b3a:6c00:92b6:1071:d95e:d5c7, 2406:da1c:8b3a:6c01:f0b1:5fbd:63c6:137d, 2406:da1c:8b3a:6c02:ebcd:f6bd:4848:ca78
MX
—
NS
—
TXT
—
CNAME
—
CAA
—
WHOIS / Registration
Registration data planned
Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.
Subdomains
Subdomain enumeration pending
Every subdomain ever issued a TLS cert under this apex — extracted from Certificate Transparency logs, our own scan observations and body references.
Tech Stack
Tech detection pending
Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.
TLS Certificates
Certificate observations pending
TLS certs naming this domain in subject or SANs will appear here as our scan-layer catches them.
IPs Citing This Domain
No citing IPs found yet
As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.
Origin / IP-Leak
USP
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
No origin-IP leaks detected (yet)
Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.
CT-Log Evidence
Certificates from public Certificate Transparency logs whose subject or SAN names this domain — including historic certs we never observed live.
08b1f956bb6fda2d…
google · xenon2026h2
Subject: yshop.tw
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: yshop.tw, tw.wh.yahooapis.com, tw.user.mall.yahoo.com, tw.usedcar.yahoo.com, tw.supplier.yahoo.com, tw.search.ec.yahoo.com, tw.scm.yahooapis.com, tw.sc.mall.yahoo.com, tw.rcv.mall.yahoo.com, tw.promo.yahoo.com, tw.promo.bid.yahoo.com, tw.prime.yahoo.com, tw.points.yahoo.com, tw.partner.buy.yahoo.com, tw.operate.buy.yahoo.com, tw.merchant.yahoo.com, tw.mapi.shp.yahoo.com, tw.mall.yahoo.com, tw.ltm.buy.yahoo.com, tw.livechat.yahoo.com, tw.ews.mall.yahooapis.com, tw.edmbc.mall.yahoo.com, tw.ec.yahoo.com, tw.cmp.shp.yahoo.com, tw.cmp.p4pnet.net, tw.campaign.bid.yahoo.com, tw.buy.yahoo.com, tw.bid.yahooapis.com, tw.bid.yahoo.com, tw.api.bid.yahoo.com, tw.analytics.mall.yahoo.com, tw.analytics.buy.yahoo.com, tw.analytics.bid.yahoo.com, tw-tp2-user.pp.mall.yahoo.com, tw-stage-promo.ec.yahoo.com, tw-beta-promo.ec.yahoo.com, tw-b2-user.beta.mall.yahoo.com, serviceplus-frontend.paas.ec.yahoo.com, serviceplus-frontend-staging.paas.ec.yahoo.com, scst.bid.yahoo.com, scst.bid.vip.tp2.yahoo.com, scst-trunk.bid.yahoo.com, scst-staging.bid.yahoo.com, scm.monday.com.tw, sb.list.bid.vip.tw1.yahoo.com, sb-mario-admin.nevec.yahoo.com, rushbuy.buy.yahoo.com, rcmdapi.eds.yahoo.com, prism.ec.yahoo.com, pp.list.bid.vip.tp2.yahoo.com, pp-aem.ec.yahoo.com, picasso.ec.yahoo.com, payuni-gateway.ec.yahoo.com, order.yahoo.com.tw, oneec.paas.ec.yahoo.com, nothistory.nevec.yahoo.com, mys.prime.yahoo.com, mario-admin.nevec.yahoo.com, m.tw.mall.yahoo.com, m.tw.buy.yahoo.com, hermes-admin.ec.yahoo.com, graphql.ec.yahoo.com, category-public.nevec.yahoo.com, buyerfe.bid.yahoo.com, b-mario-admin.nevec.yahoo.com, b-l1.ac.tw1.yahoo.com, aws-kratos.nevec.yahoo.com, aws-infobip-partner-callback.nevec.yahoo.com, auction-frontend-page.paas.ec.yahoo.com, auction-frontend-buyer.paas.ec.yahoo.com, auction-admin.paas.ec.yahoo.com, auc-list.bid.yahoo.com, at.mall.yahoo.com, at-trunk.mall.yahoo.com, at-staging.mall.yahoo.com, api.bid.yahoo.com, apex.ec.yahoo.com, aem.ec.yahoo.com, aem-dispatcher.ec.yahoo.com, aem-dispatcher-stage.ec.yahoo.com, ads.cms.by.monday.p4pnet.net, admin.nevec.yahoo.com, adm.tns.nevec.yahoo.com
Valid: 2026-03-24 00:00:00 → 2026-09-16 23:59:59
7240f77965323ab6…
google · xenon2026h2
Subject: yshop.tw
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: yshop.tw, tw.wh.yahooapis.com, tw.user.mall.yahoo.com, tw.usedcar.yahoo.com, tw.supplier.yahoo.com, tw.search.ec.yahoo.com, tw.scm.yahooapis.com, tw.sc.mall.yahoo.com, tw.rcv.mall.yahoo.com, tw.promo.yahoo.com, tw.promo.bid.yahoo.com, tw.prime.yahoo.com, tw.points.yahoo.com, tw.partner.buy.yahoo.com, tw.operate.buy.yahoo.com, tw.merchant.yahoo.com, tw.mapi.shp.yahoo.com, tw.mall.yahoo.com, tw.ltm.buy.yahoo.com, tw.livechat.yahoo.com, tw.ews.mall.yahooapis.com, tw.edmbc.mall.yahoo.com, tw.ec.yahoo.com, tw.cmp.shp.yahoo.com, tw.cmp.p4pnet.net, tw.campaign.bid.yahoo.com, tw.buy.yahoo.com, tw.bid.yahooapis.com, tw.bid.yahoo.com, tw.api.bid.yahoo.com, tw.analytics.mall.yahoo.com, tw.analytics.buy.yahoo.com, tw.analytics.bid.yahoo.com, tw-tp2-user.pp.mall.yahoo.com, tw-stage-promo.ec.yahoo.com, tw-beta-promo.ec.yahoo.com, tw-b2-user.beta.mall.yahoo.com, serviceplus-frontend.paas.ec.yahoo.com, serviceplus-frontend-staging.paas.ec.yahoo.com, scst.bid.yahoo.com, scst.bid.vip.tp2.yahoo.com, scst-trunk.bid.yahoo.com, scst-staging.bid.yahoo.com, scm.monday.com.tw, sb.list.bid.vip.tw1.yahoo.com, sb-mario-admin.nevec.yahoo.com, rushbuy.buy.yahoo.com, rcmdapi.eds.yahoo.com, prism.ec.yahoo.com, pp.list.bid.vip.tp2.yahoo.com, pp-aem.ec.yahoo.com, picasso.ec.yahoo.com, payuni-gateway.ec.yahoo.com, order.yahoo.com.tw, oneec.paas.ec.yahoo.com, nothistory.nevec.yahoo.com, mys.prime.yahoo.com, mario-admin.nevec.yahoo.com, m.tw.mall.yahoo.com, m.tw.buy.yahoo.com, hermes-admin.ec.yahoo.com, graphql.ec.yahoo.com, category-public.nevec.yahoo.com, buyerfe.bid.yahoo.com, b-mario-admin.nevec.yahoo.com, b-l1.ac.tw1.yahoo.com, aws-kratos.nevec.yahoo.com, aws-infobip-partner-callback.nevec.yahoo.com, auction-frontend-page.paas.ec.yahoo.com, auction-frontend-buyer.paas.ec.yahoo.com, auction-admin.paas.ec.yahoo.com, auc-list.bid.yahoo.com, at.mall.yahoo.com, at-trunk.mall.yahoo.com, at-staging.mall.yahoo.com, api.bid.yahoo.com, apex.ec.yahoo.com, aem.ec.yahoo.com, aem-dispatcher.ec.yahoo.com, aem-dispatcher-stage.ec.yahoo.com, ads.cms.by.monday.p4pnet.net, admin.nevec.yahoo.com, adm.tns.nevec.yahoo.com
Valid: 2026-03-24 00:00:00 → 2026-09-16 23:59:59
aae58d6ffa06349b…
google · xenon2026h2
Subject: yshop.tw
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: yshop.tw, tw.wh.yahooapis.com, tw.user.mall.yahoo.com, tw.usedcar.yahoo.com, tw.supplier.yahoo.com, tw.search.ec.yahoo.com, tw.scm.yahooapis.com, tw.sc.mall.yahoo.com, tw.rcv.mall.yahoo.com, tw.promo.yahoo.com, tw.promo.bid.yahoo.com, tw.prime.yahoo.com, tw.points.yahoo.com, tw.partner.buy.yahoo.com, tw.operate.buy.yahoo.com, tw.merchant.yahoo.com, tw.mapi.shp.yahoo.com, tw.mall.yahoo.com, tw.ltm.buy.yahoo.com, tw.livechat.yahoo.com, tw.ews.mall.yahooapis.com, tw.edmbc.mall.yahoo.com, tw.ec.yahoo.com, tw.cmp.shp.yahoo.com, tw.cmp.p4pnet.net, tw.campaign.bid.yahoo.com, tw.buy.yahoo.com, tw.bid.yahooapis.com, tw.bid.yahoo.com, tw.api.bid.yahoo.com, tw.analytics.mall.yahoo.com, tw.analytics.buy.yahoo.com, tw.analytics.bid.yahoo.com, tw-tp2-user.pp.mall.yahoo.com, tw-stage-promo.ec.yahoo.com, tw-beta-promo.ec.yahoo.com, tw-b2-user.beta.mall.yahoo.com, serviceplus-frontend.paas.ec.yahoo.com, serviceplus-frontend-staging.paas.ec.yahoo.com, scst.bid.yahoo.com, scst.bid.vip.tp2.yahoo.com, scst-trunk.bid.yahoo.com, scst-staging.bid.yahoo.com, scm.monday.com.tw, sb.list.bid.vip.tw1.yahoo.com, sb-mario-admin.nevec.yahoo.com, rushbuy.buy.yahoo.com, rcmdapi.eds.yahoo.com, prism.ec.yahoo.com, pp.list.bid.vip.tp2.yahoo.com, pp-aem.ec.yahoo.com, picasso.ec.yahoo.com, payuni-gateway.ec.yahoo.com, order.yahoo.com.tw, oneec.paas.ec.yahoo.com, nothistory.nevec.yahoo.com, mys.prime.yahoo.com, mario-admin.nevec.yahoo.com, m.tw.mall.yahoo.com, m.tw.buy.yahoo.com, hermes-admin.ec.yahoo.com, graphql.ec.yahoo.com, category-public.nevec.yahoo.com, buyerfe.bid.yahoo.com, b-mario-admin.nevec.yahoo.com, b-l1.ac.tw1.yahoo.com, aws-kratos.nevec.yahoo.com, aws-infobip-partner-callback.nevec.yahoo.com, auction-frontend-page.paas.ec.yahoo.com, auction-frontend-buyer.paas.ec.yahoo.com, auction-admin.paas.ec.yahoo.com, auc-list.bid.yahoo.com, at.mall.yahoo.com, at-trunk.mall.yahoo.com, at-staging.mall.yahoo.com, api.bid.yahoo.com, apex.ec.yahoo.com, aem.ec.yahoo.com, aem-dispatcher.ec.yahoo.com, aem-dispatcher-stage.ec.yahoo.com, ads.cms.by.monday.p4pnet.net, admin.nevec.yahoo.com, adm.tns.nevec.yahoo.com
Valid: 2026-03-24 00:00:00 → 2026-09-16 23:59:59
fd5b5b6cb17e9c78…
google · xenon2026h2
Subject: yshop.tw
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: yshop.tw, tw.wh.yahooapis.com, tw.user.mall.yahoo.com, tw.usedcar.yahoo.com, tw.supplier.yahoo.com, tw.search.ec.yahoo.com, tw.scm.yahooapis.com, tw.sc.mall.yahoo.com, tw.rcv.mall.yahoo.com, tw.promo.yahoo.com, tw.promo.bid.yahoo.com, tw.prime.yahoo.com, tw.points.yahoo.com, tw.partner.buy.yahoo.com, tw.operate.buy.yahoo.com, tw.merchant.yahoo.com, tw.mapi.shp.yahoo.com, tw.mall.yahoo.com, tw.ltm.buy.yahoo.com, tw.livechat.yahoo.com, tw.ews.mall.yahooapis.com, tw.edmbc.mall.yahoo.com, tw.ec.yahoo.com, tw.cmp.shp.yahoo.com, tw.cmp.p4pnet.net, tw.campaign.bid.yahoo.com, tw.buy.yahoo.com, tw.bid.yahooapis.com, tw.bid.yahoo.com, tw.api.bid.yahoo.com, tw.analytics.mall.yahoo.com, tw.analytics.buy.yahoo.com, tw.analytics.bid.yahoo.com, tw-tp2-user.pp.mall.yahoo.com, tw-stage-promo.ec.yahoo.com, tw-beta-promo.ec.yahoo.com, tw-b2-user.beta.mall.yahoo.com, serviceplus-frontend.paas.ec.yahoo.com, serviceplus-frontend-staging.paas.ec.yahoo.com, scst.bid.yahoo.com, scst.bid.vip.tp2.yahoo.com, scst-trunk.bid.yahoo.com, scst-staging.bid.yahoo.com, scm.monday.com.tw, sb.list.bid.vip.tw1.yahoo.com, sb-mario-admin.nevec.yahoo.com, rushbuy.buy.yahoo.com, rcmdapi.eds.yahoo.com, prism.ec.yahoo.com, pp.list.bid.vip.tp2.yahoo.com, pp-aem.ec.yahoo.com, picasso.ec.yahoo.com, payuni-gateway.ec.yahoo.com, order.yahoo.com.tw, oneec.paas.ec.yahoo.com, nothistory.nevec.yahoo.com, mys.prime.yahoo.com, mario-admin.nevec.yahoo.com, m.tw.mall.yahoo.com, m.tw.buy.yahoo.com, hermes-admin.ec.yahoo.com, graphql.ec.yahoo.com, category-public.nevec.yahoo.com, buyerfe.bid.yahoo.com, b-mario-admin.nevec.yahoo.com, b-l1.ac.tw1.yahoo.com, aws-kratos.nevec.yahoo.com, aws-infobip-partner-callback.nevec.yahoo.com, auction-frontend-page.paas.ec.yahoo.com, auction-frontend-buyer.paas.ec.yahoo.com, auction-admin.paas.ec.yahoo.com, auc-list.bid.yahoo.com, at.mall.yahoo.com, at-trunk.mall.yahoo.com, at-staging.mall.yahoo.com, api.bid.yahoo.com, apex.ec.yahoo.com, aem.ec.yahoo.com, aem-dispatcher.ec.yahoo.com, aem-dispatcher-stage.ec.yahoo.com, ads.cms.by.monday.p4pnet.net, admin.nevec.yahoo.com, adm.tns.nevec.yahoo.com
Valid: 2026-03-24 00:00:00 → 2026-09-16 23:59:59
82d47a7874b5ce30…
google · xenon2026h2
Subject: tw.serviceplus.yahoo.com
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: tw.serviceplus.yahoo.com, tw.cst.serviceplus.yahoo.com, tw.otplogin.reg.yahoo.com, tw.usedcar.yahoo.com, tw.cst.usedcar.yahoo.com, admin.nevec.yahoo.com
Valid: 2026-03-10 00:00:00 → 2026-09-02 23:59:59
Threat Intelligence
Domain threat-intel pending
Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.
History
Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.
| Type | Value | First seen | Last seen |
|---|---|---|---|
| AAAA | 2406:da1c:8b3a:6c00:92b6:1071:d95e:d5c7 | 2026-07-15 08:18:39.710 | 2026-07-15 08:18:39.710 |
| A | 43.213.186.179 | 2026-07-15 08:18:39.710 | 2026-07-15 08:18:39.710 |
| AAAA | 2406:da1c:8b3a:6c02:ebcd:f6bd:4848:ca78 | 2026-07-15 08:18:39.710 | 2026-07-15 08:18:39.710 |
| AAAA | 2406:da1c:8b3a:6c01:f0b1:5fbd:63c6:137d | 2026-07-15 08:18:39.710 | 2026-07-15 08:18:39.710 |
| A | 43.213.14.125 | 2026-07-15 08:18:39.710 | 2026-07-15 08:18:39.710 |
| A | 43.213.204.170 | 2026-07-15 08:18:39.710 | 2026-07-15 08:18:39.710 |