Domain
esign.com
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of esign.com
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
Hosting IPs
7
A/AAAA targets
Subdomains
12
CT + scan + body
Record Types
5
seen in DNS
Observed Certs
9
in our scans
DNS Records
A
104.26.0.107, 104.26.1.107, 172.67.69.251, 199.231.161.162
AAAA
2606:4700:20::681a:16b, 2606:4700:20::681a:6b, 2606:4700:20::ac43:45fb
MX
1 aspmx.l.google.com, 10 alt3.aspmx.l.google.com, 10 alt4.aspmx.l.google.com, 5 alt1.aspmx.l.google.com, 5 alt2.aspmx.l.google.com
NS
cloe.ns.cloudflare.com, dorthy.ns.cloudflare.com, marek.ns.cloudflare.com, robert.ns.cloudflare.com
TXT
MS=ms36408009, google-site-verification=L7IRIARp6fU_WxVyxOU5XV8gD27IHfuFg1UNlqs2f2w, google-site-verification=SZ9CRu5utwhkubOaoi4_JUQ4NXJuCuyDGz3jUig56L0, v=spf1 ip4:149.72.224.147 include:_spf.google.com include:mail.zendesk.com -all
CNAME
—
CAA
—
WHOIS / Registration
Registration data planned
Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.
Subdomains
Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.
| Subdomain | Resolves to | Last seen |
|---|---|---|
| esign.com | 2026-06-25 21:53:03.684 | |
| learn.esign.com | 1970-01-01 00:00:00.000 | |
| staging.esign.com | 1970-01-01 00:00:00.000 |
Tech Stack
Tech detection pending
Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.
TLS Certificates
Subject: webtechdesign.com
Issuer: RapidSSL TLS RSA CA G1
SANs: webtechdesign.com, www.webtechdesign.com
Subject: md-mediadesign.com
Issuer: YR2
SANs: *.md-mediadesign.com, md-mediadesign.com
Subject: mail.deanallandesign.com
Issuer: YR1
SANs: cpanel.deanallandesign.com, deanallandesign.com, mail.deanallandesign.com, webdisk.deanallandesign.com, www.deanallandesign.com
Subject: www.feso-design.com
Issuer: LiteSSL RSA CA 2025
SANs: feso-design.com, www.feso-design.com
Subject: sladesign.com.sg
Issuer: YR2
SANs: mail.sladesign.com.sg, sladesign.com.sg, www.sladesign.com.sg
Subject: *.drivesystemdesign.com
Issuer: Starfield Secure Certificate Authority - G2
SANs: *.drivesystemdesign.com, drivesystemdesign.com
Subject: clients.lydondesign.com
Issuer: Go Daddy Secure Certificate Authority - G2
SANs: clients.lydondesign.com, www.clients.lydondesign.com
Subject: www.xiyuandesign.com
Issuer: Encryption Everywhere DV TLS CA - G2
SANs: www.xiyuandesign.com, xiyuandesign.com
Subject: vps-2.th2design.com
Issuer: YR2
SANs: vps-2.th2design.com
Subject: portal.webberdesign.com
Issuer: Starfield Secure Certificate Authority - G2
SANs: portal.webberdesign.com, www.portal.webberdesign.com
Subject: starhumandesign.com
Issuer: Encryption Everywhere DV TLS CA - G2
SANs: starhumandesign.com, www.starhumandesign.com
Subject: aichatdesign.com
Issuer: JoySSL Domain Secure Server CA
SANs: aichatdesign.com, www.aichatdesign.com
Subject: www.kamarbandhacollege.in.djlogodesign.com
Issuer: YR1
SANs: *.furkatingcollege.co.in, *.in.djlogodesign.com, *.kamarbandhacollege.in, furkatingcollege.co.in, furkatingcollege.co.in.djlogodesign.com, kamarbandhacollege.in, marangi.djlogodesign.com, www.furkatingcollege.co.in.djlogodesign.com, www.kamarbandhacollege.in.djlogodesign.com, www.marangi.djlogodesign.com
Subject: *.telesign.com
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: *.telesign.com, telesign.com
Subject: remote.simondancedesign.com
Issuer: Go Daddy Secure Certificate Authority - G2
SANs: autodiscover.simondancedesign.com, remote.simondancedesign.com, simondancedesign.com, www.remote.simondancedesign.com
Subject: nmk-dev2.koubai-design.com
Issuer: YE2
SANs: nmk-dev2.koubai-design.com
Subject: webdisk.kjadesign.com
Issuer: YR2
SANs: autodiscover.kjadesign.com, cpanel.kjadesign.com, cpcalendars.kjadesign.com, cpcontacts.kjadesign.com, kjadesign.com, mail.kjadesign.com, mail.xnk.vtl.mybluehost.me, webdisk.kjadesign.com, webmail.kjadesign.com, www.kjadesign.com, www.xnk.vtl.mybluehost.me, xnk.vtl.mybluehost.me
Subject: legalwebdesign.com
Issuer: YR1
SANs: legalwebdesign.com, www.legalwebdesign.com
Subject: www.xgndesign.com
Issuer: R12
SANs: bdpdgg.cn, m.bdpdgg.cn, m.sccloud-sj.com, m.xgndesign.com, sccloud-sj.com, www.bdpdgg.cn, www.sccloud-sj.com, www.xgndesign.com, xgndesign.com
Subject: cebuladesign.com
Issuer: Go Daddy Secure Certificate Authority - G2
SANs: cebuladesign.com, www.cebuladesign.com
Subject: 100lifedesign.com
Issuer: R12
SANs: 100lifedesign.com, m.100lifedesign.com, www.100lifedesign.com
Subject: sbadesign.com
Issuer: YR1
SANs: sbadesign.com, webmail.sbadesign.com, www.sbadesign.com
Subject: 321mediadesign.com
Issuer: R13
SANs: *.321mediadesign.com, 321mediadesign.com
Subject: autoconfig.server.imaginesitedesign.com
Issuer: YR2
SANs: autoconfig.server.imaginesitedesign.com, autodiscover.server.imaginesitedesign.com, cpanel.server.imaginesitedesign.com, cpcalendars.server.imaginesitedesign.com, cpcontacts.server.imaginesitedesign.com, ipv6.server.imaginesitedesign.com, mail.server.imaginesitedesign.com, server.imaginesitedesign.com, webdisk.server.imaginesitedesign.com, webmail.server.imaginesitedesign.com, whm.server.imaginesitedesign.com, www.server.imaginesitedesign.com
Subject: *.brinkofdesign.com
Issuer: COMODO RSA Domain Validation Secure Server CA
SANs: *.brinkofdesign.com, brinkofdesign.com
Subject: amber.cbwebsitedesign.com
Issuer: YR2
SANs: amber.cbwebsitedesign.com
Subject: hosting.usfancydesign.com
Issuer: YR1
SANs: autoconfig.hosting.usfancydesign.com, autodiscover.hosting.usfancydesign.com, cpanel.hosting.usfancydesign.com, cpcalendars.hosting.usfancydesign.com, cpcontacts.hosting.usfancydesign.com, hosting.usfancydesign.com, ipv6.hosting.usfancydesign.com, mail.hosting.usfancydesign.com, webdisk.hosting.usfancydesign.com, webmail.hosting.usfancydesign.com, whm.hosting.usfancydesign.com, www.hosting.usfancydesign.com
Subject: royaldesign.com
Issuer: GeoTrust RSA CA 2018
SANs: royaldesign.co.uk, royaldesign.com, royaldesign.de, royaldesign.dk, royaldesign.fi, royaldesign.jp, royaldesign.kr, royaldesign.no, royaldesign.se, www.royaldesign.co.uk, www.royaldesign.com, www.royaldesign.de, www.royaldesign.dk, www.royaldesign.fi, www.royaldesign.jp, www.royaldesign.kr, www.royaldesign.no, www.royaldesign.se
Subject: telecare-proxy-v2-qua-gw2.telecomdesign.com
Issuer: YR1
SANs: telecare-proxy-v2-qua-gw2.telecomdesign.com
Subject: dmdecodesign.com
Issuer: Go Daddy Secure Certificate Authority - G2
SANs: dmdecodesign.com, www.dmdecodesign.com
IPs Citing This Domain
Hosts whose HTML body references this domain. Strong signal for origin/mirror/embed discovery.
206.72.207.67:443
href · ×2
Origin / IP-Leak
USP
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
No origin-IP leaks detected (yet)
Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.
Threat Intelligence
Domain threat-intel pending
Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.
History
Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.
| Type | Value | First seen | Last seen |
|---|---|---|---|
| TXT | MS=ms36408009 | 2026-05-27 11:11:56.128 | 2026-06-25 21:53:03.684 |
| TXT | google-site-verification=SZ9CRu5utwhkubOaoi4_JUQ4NXJuCuyDGz3jUig56L0 | 2026-05-27 11:11:56.128 | 2026-06-25 21:53:03.684 |
| TXT | google-site-verification=L7IRIARp6fU_WxVyxOU5XV8gD27IHfuFg1UNlqs2f2w | 2026-05-27 11:11:56.128 | 2026-06-25 21:53:03.684 |
| TXT | v=spf1 ip4:149.72.224.147 include:_spf.google.com include:mail.zendesk.com -all | 2026-05-27 11:11:56.128 | 2026-06-25 21:53:03.684 |
| A | 199.231.161.162 | 2026-05-27 11:11:56.128 | 2026-06-02 05:06:39.863 |
| MX | 5 alt2.aspmx.l.google.com | 2026-05-27 11:11:56.128 | 2026-06-25 21:53:03.684 |
| MX | 10 alt4.aspmx.l.google.com | 2026-05-27 11:11:56.128 | 2026-06-25 21:53:03.684 |
| MX | 1 aspmx.l.google.com | 2026-05-27 11:11:56.128 | 2026-06-25 21:53:03.684 |
| MX | 5 alt1.aspmx.l.google.com | 2026-05-27 11:11:56.128 | 2026-06-25 21:53:03.684 |
| NS | marek.ns.cloudflare.com | 2026-05-27 11:11:56.128 | 2026-06-02 05:06:39.863 |
| MX | 10 alt3.aspmx.l.google.com | 2026-05-27 11:11:56.128 | 2026-06-25 21:53:03.684 |
| NS | dorthy.ns.cloudflare.com | 2026-05-27 11:11:56.128 | 2026-06-02 05:06:39.863 |
| AAAA | 2606:4700:20::ac43:45fb | 2026-06-24 01:05:03.339 | 2026-06-25 21:53:03.684 |
| A | 104.26.0.107 | 2026-06-24 01:05:03.339 | 2026-06-25 21:53:03.684 |
| AAAA | 2606:4700:20::681a:16b | 2026-06-24 01:05:03.339 | 2026-06-25 21:53:03.684 |
| NS | cloe.ns.cloudflare.com | 2026-06-24 01:05:03.339 | 2026-06-25 21:53:03.684 |
| A | 104.26.1.107 | 2026-06-24 01:05:03.339 | 2026-06-25 21:53:03.684 |
| A | 172.67.69.251 | 2026-06-24 01:05:03.339 | 2026-06-25 21:53:03.684 |
| AAAA | 2606:4700:20::681a:6b | 2026-06-24 01:05:03.339 | 2026-06-25 21:53:03.684 |
| NS | robert.ns.cloudflare.com | 2026-06-24 01:05:03.339 | 2026-06-25 21:53:03.684 |