Domain
servers.com
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of servers.com
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
Hosting IPs
19
A/AAAA targets
Subdomains
197
CT + scan + body
Record Types
4
seen in DNS
Observed Certs
5
in our scans
DNS Records
A
173.234.133.9
AAAA
—
MX
1 smtp.google.com
NS
ns1.servers.com, ns2.servers.com, ns3.servers.com, ns4.servers.com
TXT
anthropic-domain-verification-vbks8h=ctKx4ShUqnP9DXlQBib6Nq7WK, figma-domain-verification=5cee51f68282f5c83ba9006d1853953fde39cb632877ae8fa90b7f690135a289-1739275381, google-gws-recovery-domain-verification=62989178, google-site-verification=XmDK-f2Vtewwm48Ws7wXJO8N73GJdpGkEFh9rtKJNtY, knowbe4-site-verification=3eded9e9ea0f63c7a18c1b928f7bee6a, pardot894561=579dbc509460306b515c805f658367c13a08ec1a2b360fb707aee3688af5ae79, rippling-domain-verification=7fc0721cc58d2dd5, v=spf1 mx ip4:173.234.133.16 include:aspmx.pardot.com include:_spf.google.com include:_spf.salesforce.com -all
CNAME
—
CAA
—
WHOIS / Registration
Registration data planned
Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.
Subdomains
Subdomain enumeration pending
Every subdomain ever issued a TLS cert under this apex — extracted from Certificate Transparency logs, our own scan observations and body references.
Tech Stack
Tech detection pending
Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.
TLS Certificates
Subject: server137.hosteaseservers.com
Issuer: YR1
SANs: server137.hosteaseservers.com
Subject: autoconfig.gains.associateservers.com
Issuer: YR2
SANs: autoconfig.gains.associateservers.com, autodiscover.gains.associateservers.com, cpanel.gains.associateservers.com, cpcalendars.gains.associateservers.com, cpcontacts.gains.associateservers.com, gains.associateservers.com, ipv6.gains.associateservers.com, mail.gains.associateservers.com, webdisk.gains.associateservers.com, webmail.gains.associateservers.com, whm.gains.associateservers.com, www.gains.associateservers.com
Subject: fdxlocal-feed-az.visionaryservers.com
Issuer: YE2
SANs: fdxlocal-feed-az.visionaryservers.com
Subject: *.megawebservers.com
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.megawebservers.com, megawebservers.com
Subject: cpanel1-nl.thcservers.com
Issuer: cpanel1-nl.thcservers.com
SANs: cpanel1-nl.thcservers.com
Subject: epsilon.elinuxservers.com
Issuer: YR2
SANs: epsilon.elinuxservers.com
Subject: l397.hosteaseservers.com
Issuer: YR2
SANs: l397.hosteaseservers.com
Subject: *.megawebservers.com
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.megawebservers.com, megawebservers.com
Subject: clock.centralservers.com
Issuer: Sectigo Public Server Authentication CA OV R36
SANs: *.clock.centralservers.com, *.clocks.centralservers.com, clock.centralservers.com, clocks.centralservers.com
Subject: *.iq-servers.com
Issuer: YR2
SANs: *.iq-servers.com
Subject: backend.wooservers.com
Issuer: YR1
SANs: backend.wooservers.com
Subject: *.ingress.froggy-servers.com
Issuer: YE2
SANs: *.ingress.froggy-servers.com, ingress.froggy-servers.com
Subject: sirius.elinuxservers.com
Issuer: YR2
SANs: sirius.elinuxservers.com
Subject: phantom.elinuxservers.com
Issuer: YR1
SANs: phantom.elinuxservers.com
Subject: baltic-servers.com
Issuer: baltic-servers.com
SANs: baltic-servers.com
Subject: euk-96591.eukservers.com
Issuer: YR1
SANs: euk-96591.eukservers.com
Subject: *.megawebservers.com
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.megawebservers.com, megawebservers.com
Subject: gn210.whpservers.com
Issuer: gn210.whpservers.com
SANs: gn210.whpservers.com
Subject: *.files.nl01.cloud.servers.com
Issuer: ZeroSSL RSA DV SSL CA 2
SANs: *.files.nl01.cloud.servers.com, *.nl01.servers.im
Subject: *.megawebservers.com
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.megawebservers.com, megawebservers.com
Subject: lithium.elinuxservers.com
Issuer: YR2
SANs: lithium.elinuxservers.com
Subject: w016.hosteaseservers.com
Issuer: YR1
SANs: w016.hosteaseservers.com
Subject: ns2.thesmartservers.com
Issuer: YR1
SANs: ns2.thesmartservers.com
Subject: *.megawebservers.com
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.megawebservers.com, megawebservers.com
Subject: supersonic.elinuxservers.com
Issuer: YR2
SANs: supersonic.elinuxservers.com
Subject: *.megawebservers.com
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.megawebservers.com, megawebservers.com
Subject: *.megawebservers.com
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.megawebservers.com, megawebservers.com
Subject: *.megawebservers.com
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.megawebservers.com, megawebservers.com
Subject: nfoservers.com
Issuer: nfoservers.com
SANs: nfoservers.com
Subject: pl6.webline-servers.com
Issuer: pl6.webline-servers.com
SANs: pl6.webline-servers.com
IPs Citing This Domain
Hosts whose HTML body references this domain. Strong signal for origin/mirror/embed discovery.
107.175.65.229:443
href · ×2
46.243.3.246:443
href · ×1
82.40.38.247:443
href · ×1
78.47.254.151:80
href · ×1
38.244.205.147:443
href · ×1
178.62.55.94:80
href · ×1
38.244.205.166:443
href · ×1
142.0.200.124:443
href · ×1
64.64.229.102:443
href · ×1
213.196.21.55:80
href · ×1
150.241.70.255:443
href · ×1
154.17.6.0:443
href · ×1
64.204.188.61:443
href · ×1
207.246.96.132:443
href · ×1
103.102.228.151:443
href · ×1
185.22.153.152:443
href · ×1
23.147.56.50:443
href · ×1
151.241.216.173:443
href · ×1
129.154.193.79:443
href · ×1
64.204.188.221:443
href · ×1
213.196.21.55:443
href · ×1
142.0.200.124:80
href · ×1
103.195.191.25:443
href · ×1
Origin / IP-Leak
USP
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
No origin-IP leaks detected (yet)
Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.
Threat Intelligence
Domain threat-intel pending
Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.
History
Domain timeline pending
Passive-DNS history accumulates as our forward-DNS crawler observes A/AAAA/MX/NS/TXT records over time.