Domain

2esf.com

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

DNS Check HTTP Check Run Full Scan .com TLD

Run a live full scan of 2esf.com

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now

Hosting IPs

A/AAAA targets

Subdomains

CT + scan + body

Record Types

seen in DNS

Observed Certs

in our scans

DNS Records

103.224.212.142

AAAA

—

10 park-mx.above.com

ns1.abovedomains.com, ns2.abovedomains.com

TXT

v=spf1 ip6:fdcf:abda:4154::/48 -all

CNAME

—

CAA

—

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.

Subdomain	Resolves to	Last seen
2esf.com	103.224.212.142	2026-08-26 19:51:50.910

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

Certificate observations pending

TLS certs naming this domain in subject or SANs will appear here as our scan-layer catches them.

IPs Citing This Domain

No citing IPs found yet

As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

No origin-IP leaks detected (yet)

Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.

CT-Log Evidence

Certificates from public Certificate Transparency logs whose subject or SAN names this domain — including historic certs we never observed live.

7d683a9cf8bfcc1d… google · xenon2026h2

Subject: qqfoto.com

Issuer: YR1

SANs: *.082605.cc, *.0826fcw.com, *.11income.com, *.120bssb.com, *.1995670753.cc, *.24bookshop.com, *.2esf.com, *.36wv.com, *.435152.cc, *.43757.cc, *.448719.my, *.51wapp.com, *.537146.cc, *.55sizm.top, *.78ggame.com, *.943029.me, *.9e1087ggy7.click, *.agqpg.app, *.ambdx41.com, *.ccc25527.top, *.cloakmyphoto.plus, *.datacapital25.top, *.ea-game-play.com, *.espwealo.works, *.eupolyzoanfxv.com, *.free-games-online.club, *.haiba18.com, *.jszjq.app, *.name-5-game.com, *.qqfoto.com, *.ruyalife.pro, *.saudi.wine, *.selfarena.pro, *.selfjourney.pro, *.selflight.pro, *.selfpower.pro, *.selfrise.pro, *.sevgibloom.pro, *.sevgisteps.pro, *.soulsteps.pro, *.techoriginzone.info, *.xagjzsgs.com, *.zc0063.com, *.zhizunlipin.com, 082605.cc, 0826fcw.com, 11income.com, 120bssb.com, 1995670753.cc, 24bookshop.com, 2esf.com, 36wv.com, 435152.cc, 43757.cc, 448719.my, 51wapp.com, 537146.cc, 55sizm.top, 78ggame.com, 943029.me, 9e1087ggy7.click, agqpg.app, ambdx41.com, ccc25527.top, cloakmyphoto.plus, datacapital25.top, ea-game-play.com, espwealo.works, eupolyzoanfxv.com, free-games-online.club, haiba18.com, jszjq.app, name-5-game.com, qqfoto.com, ruyalife.pro, saudi.wine, selfarena.pro, selfjourney.pro, selflight.pro, selfpower.pro, selfrise.pro, sevgibloom.pro, sevgisteps.pro, soulsteps.pro, techoriginzone.info, xagjzsgs.com, zc0063.com, zhizunlipin.com

Valid: 2026-08-26 16:33:07 → 2026-11-24 16:33:06

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.

Type	Value	First seen	Last seen
NS	ns1.abovedomains.com	2026-08-26 19:51:50.910	2026-08-26 19:51:50.910
TXT	v=spf1 ip6:fdcf:abda:4154::/48 -all	2026-08-26 19:51:50.910	2026-08-26 19:51:50.910
NS	ns2.abovedomains.com	2026-08-26 19:51:50.910	2026-08-26 19:51:50.910
MX	10 park-mx.above.com	2026-08-26 19:51:50.910	2026-08-26 19:51:50.910
A	103.224.212.142	2026-08-26 19:51:50.910	2026-08-26 19:51:50.910