Domain
08.cyou
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of 08.cyou
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
Hosting IPs
6
A/AAAA targets
Subdomains
14
CT + scan + body
Record Types
3
seen in DNS
Observed Certs
6
in our scans
DNS Records
A
104.21.37.238, 172.67.215.129
AAAA
2606:4700:3032::ac43:d781, 2606:4700:3036::6815:25ee, 2606:4700:3037::6815:25ee, 2606:4700:3037::ac43:d781
MX
—
NS
luke.ns.cloudflare.com, zariyah.ns.cloudflare.com
TXT
—
CNAME
—
CAA
—
WHOIS / Registration
Registration data planned
Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.
Subdomains
Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.
| Subdomain | Resolves to | Last seen |
|---|---|---|
| 08.cyou | 2026-07-28 12:04:07.574 | |
| www.08.cyou | 2026-07-28 12:04:07.574 |
Tech Stack
Tech detection pending
Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.
TLS Certificates
Subject: www.08.cyou
Issuer: R13
SANs: 08.cyou, www.08.cyou
Subject: www.08.cyou
Issuer: R13
SANs: 08.cyou, www.08.cyou
Subject: www.08.cyou
Issuer: R13
SANs: 08.cyou, www.08.cyou
Subject: www.08.cyou
Issuer: R13
SANs: 08.cyou, www.08.cyou
Subject: www.08.cyou
Issuer: R13
SANs: 08.cyou, www.08.cyou
Subject: www.08.cyou
Issuer: R13
SANs: 08.cyou, www.08.cyou
Subject: www.08.cyou
Issuer: R13
SANs: 08.cyou, www.08.cyou
Subject: www.08.cyou
Issuer: R13
SANs: 08.cyou, www.08.cyou
Subject: www.08.cyou
Issuer: R13
SANs: 08.cyou, www.08.cyou
Subject: www.08.cyou
Issuer: R13
SANs: 08.cyou, www.08.cyou
Subject: www.08.cyou
Issuer: R13
SANs: 08.cyou, www.08.cyou
Subject: www.08.cyou
Issuer: R13
SANs: 08.cyou, www.08.cyou
Subject: www.08.cyou
Issuer: R13
SANs: 08.cyou, www.08.cyou
Subject: www.08.cyou
Issuer: R13
SANs: 08.cyou, www.08.cyou
Subject: www.08.cyou
Issuer: R13
SANs: 08.cyou, www.08.cyou
Subject: www.08.cyou
Issuer: R13
SANs: 08.cyou, www.08.cyou
Subject: www.08.cyou
Issuer: R13
SANs: 08.cyou, www.08.cyou
Subject: www.08.cyou
Issuer: R13
SANs: 08.cyou, www.08.cyou
Subject: www.08.cyou
Issuer: R13
SANs: 08.cyou, www.08.cyou
Subject: www.08.cyou
Issuer: R13
SANs: 08.cyou, www.08.cyou
Subject: www.08.cyou
Issuer: R13
SANs: 08.cyou, www.08.cyou
Subject: www.08.cyou
Issuer: R13
SANs: 08.cyou, www.08.cyou
Subject: www.08.cyou
Issuer: R13
SANs: 08.cyou, www.08.cyou
Subject: www.08.cyou
Issuer: R13
SANs: 08.cyou, www.08.cyou
Subject: www.08.cyou
Issuer: R13
SANs: 08.cyou, www.08.cyou
Subject: www.08.cyou
Issuer: R13
SANs: 08.cyou, www.08.cyou
Subject: www.08.cyou
Issuer: R13
SANs: 08.cyou, www.08.cyou
Subject: www.08.cyou
Issuer: R13
SANs: 08.cyou, www.08.cyou
Subject: www.08.cyou
Issuer: R13
SANs: 08.cyou, www.08.cyou
Subject: www.08.cyou
Issuer: R13
SANs: 08.cyou, www.08.cyou
IPs Citing This Domain
No citing IPs found yet
As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.
Origin / IP-Leak
USP
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
| Origin IP | Origin ASN | CDN ASN | Confidence | Reasoning |
|---|---|---|---|---|
| 156.234.135.6 | AS138415 | AS13335 | 95% | cert 63237003… served by 156.234.135.6 (AS138415) carries SAN 08.cyou which currently resolves through Cloudflare (AS13335) at 104.21.37.238, 172.67.215.129, 2606:4700:3036::6815:25ee, 2606:4700:3032::ac43:d781 |
| 156.234.135.30 | AS138415 | AS13335 | 95% | cert 63237003… served by 156.234.135.30 (AS138415) carries SAN 08.cyou which currently resolves through Cloudflare (AS13335) at 104.21.37.238, 172.67.215.129, 2606:4700:3036::6815:25ee, 2606:4700:3032::ac43:d781 |
| 156.234.100.204 | AS138415 | AS13335 | 95% | cert 63237003… served by 156.234.100.204 (AS138415) carries SAN 08.cyou which currently resolves through Cloudflare (AS13335) at 104.21.37.238, 172.67.215.129, 2606:4700:3036::6815:25ee, 2606:4700:3032::ac43:d781 |
| 156.234.101.203 | AS138415 | AS13335 | 95% | cert 63237003… served by 156.234.101.203 (AS138415) carries SAN 08.cyou which currently resolves through Cloudflare (AS13335) at 104.21.37.238, 172.67.215.129, 2606:4700:3036::6815:25ee, 2606:4700:3032::ac43:d781 |
| 156.234.100.254 | AS138415 | AS13335 | 95% | cert 63237003… served by 156.234.100.254 (AS138415) carries SAN 08.cyou which currently resolves through Cloudflare (AS13335) at 104.21.37.238, 172.67.215.129, 2606:4700:3036::6815:25ee, 2606:4700:3032::ac43:d781 |
| 156.234.101.194 | AS138415 | AS13335 | 95% | cert 63237003… served by 156.234.101.194 (AS138415) carries SAN 08.cyou which currently resolves through Cloudflare (AS13335) at 104.21.37.238, 172.67.215.129, 2606:4700:3036::6815:25ee, 2606:4700:3032::ac43:d781 |
| 156.234.101.211 | AS138415 | AS13335 | 95% | cert 63237003… served by 156.234.101.211 (AS138415) carries SAN 08.cyou which currently resolves through Cloudflare (AS13335) at 104.21.37.238, 172.67.215.129, 2606:4700:3036::6815:25ee, 2606:4700:3032::ac43:d781 |
| 156.234.100.242 | AS138415 | AS13335 | 95% | cert 63237003… served by 156.234.100.242 (AS138415) carries SAN 08.cyou which currently resolves through Cloudflare (AS13335) at 104.21.37.238, 172.67.215.129, 2606:4700:3036::6815:25ee, 2606:4700:3032::ac43:d781 |
| 156.234.100.241 | AS138415 | AS13335 | 95% | cert 63237003… served by 156.234.100.241 (AS138415) carries SAN 08.cyou which currently resolves through Cloudflare (AS13335) at 104.21.37.238, 172.67.215.129, 2606:4700:3036::6815:25ee, 2606:4700:3032::ac43:d781 |
| 156.234.99.72 | AS138415 | AS13335 | 95% | cert 63237003… served by 156.234.99.72 (AS138415) carries SAN 08.cyou which currently resolves through Cloudflare (AS13335) at 104.21.37.238, 172.67.215.129, 2606:4700:3036::6815:25ee, 2606:4700:3032::ac43:d781 |
| 156.234.99.93 | AS138415 | AS13335 | 95% | cert 63237003… served by 156.234.99.93 (AS138415) carries SAN 08.cyou which currently resolves through Cloudflare (AS13335) at 104.21.37.238, 172.67.215.129, 2606:4700:3036::6815:25ee, 2606:4700:3032::ac43:d781 |
| 156.234.135.54 | AS138415 | AS13335 | 95% | cert 63237003… served by 156.234.135.54 (AS138415) carries SAN 08.cyou which currently resolves through Cloudflare (AS13335) at 104.21.37.238, 172.67.215.129, 2606:4700:3036::6815:25ee, 2606:4700:3032::ac43:d781 |
| 156.234.100.205 | AS138415 | AS13335 | 95% | cert 63237003… served by 156.234.100.205 (AS138415) carries SAN 08.cyou which currently resolves through Cloudflare (AS13335) at 104.21.37.238, 172.67.215.129, 2606:4700:3036::6815:25ee, 2606:4700:3032::ac43:d781 |
| 156.234.135.25 | AS138415 | AS13335 | 95% | cert 63237003… served by 156.234.135.25 (AS138415) carries SAN 08.cyou which currently resolves through Cloudflare (AS13335) at 104.21.37.238, 172.67.215.129, 2606:4700:3036::6815:25ee, 2606:4700:3032::ac43:d781 |
| 156.234.100.237 | AS138415 | AS13335 | 95% | cert 63237003… served by 156.234.100.237 (AS138415) carries SAN 08.cyou which currently resolves through Cloudflare (AS13335) at 104.21.37.238, 172.67.215.129, 2606:4700:3036::6815:25ee, 2606:4700:3032::ac43:d781 |
| 156.234.99.112 | AS138415 | AS13335 | 95% | cert 63237003… served by 156.234.99.112 (AS138415) carries SAN 08.cyou which currently resolves through Cloudflare (AS13335) at 104.21.37.238, 172.67.215.129, 2606:4700:3036::6815:25ee, 2606:4700:3032::ac43:d781 |
| 156.234.101.245 | AS138415 | AS13335 | 95% | cert 63237003… served by 156.234.101.245 (AS138415) carries SAN 08.cyou which currently resolves through Cloudflare (AS13335) at 104.21.37.238, 172.67.215.129, 2606:4700:3037::ac43:d781, 2606:4700:3037::6815:25ee |
| 156.234.99.108 | AS138415 | AS13335 | 95% | cert 63237003… served by 156.234.99.108 (AS138415) carries SAN 08.cyou which currently resolves through Cloudflare (AS13335) at 104.21.37.238, 172.67.215.129, 2606:4700:3037::ac43:d781, 2606:4700:3037::6815:25ee |
| 156.234.135.37 | AS138415 | AS13335 | 95% | cert 63237003… served by 156.234.135.37 (AS138415) carries SAN 08.cyou which currently resolves through Cloudflare (AS13335) at 104.21.37.238, 172.67.215.129, 2606:4700:3037::ac43:d781, 2606:4700:3037::6815:25ee |
| 156.234.135.32 | AS138415 | AS13335 | 95% | cert 63237003… served by 156.234.135.32 (AS138415) carries SAN 08.cyou which currently resolves through Cloudflare (AS13335) at 104.21.37.238, 172.67.215.129, 2606:4700:3037::ac43:d781, 2606:4700:3037::6815:25ee |
| 156.234.101.232 | AS138415 | AS13335 | 95% | cert 63237003… served by 156.234.101.232 (AS138415) carries SAN 08.cyou which currently resolves through Cloudflare (AS13335) at 104.21.37.238, 172.67.215.129, 2606:4700:3037::ac43:d781, 2606:4700:3037::6815:25ee |
| 156.234.99.76 | AS138415 | AS13335 | 95% | cert 63237003… served by 156.234.99.76 (AS138415) carries SAN 08.cyou which currently resolves through Cloudflare (AS13335) at 104.21.37.238, 172.67.215.129, 2606:4700:3037::ac43:d781, 2606:4700:3037::6815:25ee |
| 156.234.101.208 | AS138415 | AS13335 | 95% | cert 63237003… served by 156.234.101.208 (AS138415) carries SAN 08.cyou which currently resolves through Cloudflare (AS13335) at 104.21.37.238, 172.67.215.129, 2606:4700:3037::ac43:d781, 2606:4700:3037::6815:25ee |
| 156.234.99.124 | AS138415 | AS13335 | 95% | cert 63237003… served by 156.234.99.124 (AS138415) carries SAN 08.cyou which currently resolves through Cloudflare (AS13335) at 104.21.37.238, 172.67.215.129, 2606:4700:3037::ac43:d781, 2606:4700:3037::6815:25ee |
| 156.234.135.45 | AS138415 | AS13335 | 95% | cert 63237003… served by 156.234.135.45 (AS138415) carries SAN 08.cyou which currently resolves through Cloudflare (AS13335) at 104.21.37.238, 172.67.215.129, 2606:4700:3037::ac43:d781, 2606:4700:3037::6815:25ee |
Threat Intelligence
Domain threat-intel pending
Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.
History
Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.
| Type | Value | First seen | Last seen |
|---|---|---|---|
| AAAA | 2606:4700:3037::6815:25ee | 2026-05-26 00:17:38.499 | 2026-06-18 09:53:11.389 |
| AAAA | 2606:4700:3037::ac43:d781 | 2026-05-26 00:17:38.499 | 2026-06-18 09:53:11.389 |
| A | 172.67.215.129 | 2026-05-26 00:17:38.499 | 2026-07-28 12:04:07.574 |
| NS | luke.ns.cloudflare.com | 2026-05-26 00:17:38.499 | 2026-07-28 12:04:07.574 |
| NS | zariyah.ns.cloudflare.com | 2026-05-26 00:17:38.499 | 2026-07-28 12:04:07.574 |
| A | 104.21.37.238 | 2026-05-26 00:17:38.499 | 2026-07-28 12:04:07.574 |
| AAAA | 2606:4700:3036::6815:25ee | 2026-06-20 21:06:00.591 | 2026-07-28 12:04:07.574 |
| AAAA | 2606:4700:3032::ac43:d781 | 2026-06-20 21:06:00.591 | 2026-07-28 12:04:07.574 |