Domain
002.li
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of 002.li
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
Hosting IPs
16
A/AAAA targets
Subdomains
470
CT + scan + body
Record Types
5
seen in DNS
Observed Certs
15
in our scans
DNS Records
A
188.114.96.0, 188.114.97.0
AAAA
2a06:98c1:3120::, 2a06:98c1:3121::
MX
10 w01a0070.kasserver.com
NS
coby.ns.cloudflare.com, lisa.ns.cloudflare.com
TXT
google-site-verification=rsKcigUVpH6UASNDbAGm1byJQkrmBpigN5YVeX1Xma0, v=spf1 mx ~all
CNAME
—
CAA
—
WHOIS / Registration
Registration data planned
Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.
Subdomains
Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.
| Subdomain | Resolves to | Last seen |
|---|---|---|
| console.002.li | 2026-07-24 06:42:34.165 | |
| apps.002.li | 2026-07-24 06:42:34.165 | |
| balancer.002.li | 2026-07-24 06:42:34.165 | |
| cacti.002.li | 2026-07-24 06:42:34.165 | |
| control.002.li | 2026-07-24 06:42:34.165 | |
| db.002.li | 2026-07-24 06:42:34.165 | |
| exchange.002.li | 2026-07-24 06:42:34.165 | |
| fw.002.li | 2026-07-24 06:42:34.165 | |
| gitlab.002.li | 2026-07-24 06:42:34.165 | |
| invoice.002.li | 2026-07-24 06:42:34.165 | |
| jump.002.li | 2026-07-24 06:42:34.165 | |
| k8s.002.li | 2026-07-24 06:42:34.165 | |
| postgres.002.li | 2026-07-24 06:42:34.165 | |
| prometheus.002.li | 2026-07-24 06:42:34.165 | |
| rpc.002.li | 2026-07-24 06:42:34.165 | |
| shop.002.li | 2026-07-24 06:42:34.165 | |
| smtp2.002.li | 2026-07-24 06:42:34.165 | |
| stage.002.li | 2026-07-24 06:42:34.165 | |
| status.002.li | 2026-07-24 06:42:34.165 | |
| storage.002.li | 2026-07-24 06:42:34.165 | |
| svn.002.li | 2026-07-24 06:42:34.165 | |
| travis.002.li | 2026-07-24 06:42:34.165 | |
| websocket.002.li | 2026-07-24 06:42:34.165 | |
| account.002.li | 2026-07-24 06:42:34.165 | |
| admin.002.li | 2026-07-24 06:42:34.165 | |
| administrator.002.li | 2026-07-24 06:42:34.165 | |
| api-v2.002.li | 2026-07-24 06:42:34.165 | |
| api1.002.li | 2026-07-24 06:42:34.165 | |
| api2.002.li | 2026-07-24 06:42:34.165 | |
| app.002.li | 2026-07-24 06:42:34.165 | |
| artifactory.002.li | 2026-07-24 06:42:34.165 | |
| autodiscover.002.li | 2026-07-24 06:42:34.165 | |
| backup.002.li | 2026-07-24 06:42:34.165 | |
| backups.002.li | 2026-07-24 06:42:34.165 | |
| billing.002.li | 2026-07-24 06:42:34.165 | |
| bitbucket.002.li | 2026-07-24 06:42:34.165 | |
| bounce.002.li | 2026-07-24 06:42:34.165 | |
| cart.002.li | 2026-07-24 06:42:34.165 | |
| ci.002.li | 2026-07-24 06:42:34.165 | |
| community.002.li | 2026-07-24 06:42:34.165 | |
| confluence.002.li | 2026-07-24 06:42:34.165 | |
| corp.002.li | 2026-07-24 06:42:34.165 | |
| dashboard.002.li | 2026-07-24 06:42:34.165 | |
| datadog.002.li | 2026-07-24 06:42:34.165 | |
| development.002.li | 2026-07-24 06:42:34.165 | |
| dl.002.li | 2026-07-24 06:42:34.165 | |
| dns.002.li | 2026-07-24 06:42:34.165 | |
| docs.002.li | 2026-07-24 06:42:34.165 | |
| elastic.002.li | 2026-07-24 06:42:34.165 | |
| encrypt.002.li | 2026-07-24 06:42:34.165 | |
| events.002.li | 2026-07-24 06:42:34.165 | |
| files.002.li | 2026-07-24 06:42:34.165 | |
| forum.002.li | 2026-07-24 06:42:34.165 | |
| ftp.002.li | 2026-07-24 06:42:34.165 | |
| gitea.002.li | 2026-07-24 06:42:34.165 | |
| graphite.002.li | 2026-07-24 06:42:34.165 | |
| help.002.li | 2026-07-24 06:42:34.165 | |
| home.002.li | 2026-07-24 06:42:34.165 | |
| icinga.002.li | 2026-07-24 06:42:34.165 | |
| id.002.li | 2026-07-24 06:42:34.165 | |
| images.002.li | 2026-07-24 06:42:34.165 | |
| intranet.002.li | 2026-07-24 06:42:34.165 | |
| lists.002.li | 2026-07-24 06:42:34.165 | |
| log.002.li | 2026-07-24 06:42:34.165 | |
| mail.002.li | 2026-07-24 06:42:34.165 | |
| memcache.002.li | 2026-07-24 06:42:34.165 | |
| monitoring.002.li | 2026-07-24 06:42:34.165 | |
| mta.002.li | 2026-07-24 06:42:34.165 | |
| my.002.li | 2026-07-24 06:42:34.165 | |
| mysql.002.li | 2026-07-24 06:42:34.165 | |
| nagios.002.li | 2026-07-24 06:42:34.165 | |
| new.002.li | 2026-07-24 06:42:34.165 | |
| newsletter.002.li | 2026-07-24 06:42:34.165 | |
| ns.002.li | 2026-07-24 06:42:34.165 | |
| ns2.002.li | 2026-07-24 06:42:34.165 | |
| ns3.002.li | 2026-07-24 06:42:34.165 | |
| ns4.002.li | 2026-07-24 06:42:34.165 | |
| openid.002.li | 2026-07-24 06:42:34.165 | |
| owa.002.li | 2026-07-24 06:42:34.165 | |
| panel.002.li | 2026-07-24 06:42:34.165 | |
| passport.002.li | 2026-07-24 06:42:34.165 | |
| ping.002.li | 2026-07-24 06:42:34.165 | |
| pop3.002.li | 2026-07-24 06:42:34.165 | |
| pre-prod.002.li | 2026-07-24 06:42:34.165 | |
| rancher.002.li | 2026-07-24 06:42:34.165 | |
| rest.002.li | 2026-07-24 06:42:34.165 | |
| sandbox.002.li | 2026-07-24 06:42:34.165 | |
| service-api.002.li | 2026-07-24 06:42:34.165 | |
| services.002.li | 2026-07-24 06:42:34.165 | |
| signin.002.li | 2026-07-24 06:42:34.165 | |
| sonar.002.li | 2026-07-24 06:42:34.165 | |
| splunk.002.li | 2026-07-24 06:42:34.165 | |
| staging.002.li | 2026-07-24 06:42:34.165 | |
| store.002.li | 2026-07-24 06:42:34.165 | |
| test.002.li | 2026-07-24 06:42:34.165 | |
| tftp.002.li | 2026-07-24 06:42:34.165 | |
| tls.002.li | 2026-07-24 06:42:34.165 | |
| uptime.002.li | 2026-07-24 06:42:34.165 | |
| web.002.li | 2026-07-24 06:42:34.165 | |
| webmail.002.li | 2026-07-24 06:42:34.165 | |
| webmin.002.li | 2026-07-24 06:42:34.165 | |
| www3.002.li | 2026-07-24 06:42:34.165 | |
| zabbix.002.li | 2026-07-24 06:42:34.165 | |
| accounts.002.li | 2026-07-24 06:42:34.165 | |
| alertmanager.002.li | 2026-07-24 06:42:34.165 | |
| alpha.002.li | 2026-07-24 06:42:34.165 | |
| api-v1.002.li | 2026-07-24 06:42:34.165 | |
| api.002.li | 2026-07-24 06:42:34.165 | |
| archive.002.li | 2026-07-24 06:42:34.165 | |
| argocd.002.li | 2026-07-24 06:42:34.165 | |
| assets.002.li | 2026-07-24 06:42:34.165 | |
| auth.002.li | 2026-07-24 06:42:34.165 | |
| autoconfig.002.li | 2026-07-24 06:42:34.165 | |
| bamboo.002.li | 2026-07-24 06:42:34.165 | |
| bastion.002.li | 2026-07-24 06:42:34.165 | |
| blog.002.li | 2026-07-24 06:42:34.165 | |
| build.002.li | 2026-07-24 06:42:34.165 | |
| buy.002.li | 2026-07-24 06:42:34.165 | |
| canary.002.li | 2026-07-24 06:42:34.165 | |
| cd.002.li | 2026-07-24 06:42:34.165 |
Tech Stack
Tech detection pending
Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.
TLS Certificates
Subject: se1-ucexe-p002.lidl.net
Issuer: SwissSign RSA TLS EV ICA 2022 - 1
SANs: collab-edge.lidl.com, collab-edge.lidl.net, collab-edge.mail.schwarz, collab-edge.sit.mra.schwarz, collab-edge.sys.schwarz, collab-edge.uc.schwarz, l-c-mra-ext.sys.uc.schwarz, se1-ucexe-p001.sys.uc.schwarz, se1-ucexe-p002.lidl.net, se1-ucexe-p002.sys.uc.schwarz, www.se1-ucexe-p002.lidl.net
Subject: managed.19002.linevast.de
Issuer: YR2
SANs: managed.19002.linevast.de
Subject: hub1002.lighthouse.corebiz.cl
Issuer: YR2
SANs: hub1002.lighthouse.corebiz.cl
Subject: managed.19002.linevast.de
Issuer: R12
SANs: managed.19002.linevast.de
Subject: managed.16002.linevast.de
Issuer: R12
SANs: managed.16002.linevast.de
Subject: opac002.libcloud.jp
Issuer: GlobalSign GCC R3 DV TLS CA 2020
SANs: opac002.libcloud.jp
IPs Citing This Domain
No citing IPs found yet
As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.
Origin / IP-Leak
USP
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
No origin-IP leaks detected (yet)
Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.
Threat Intelligence
Domain threat-intel pending
Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.
History
Domain timeline pending
Passive-DNS history accumulates as our forward-DNS crawler observes A/AAAA/MX/NS/TXT records over time.