Domain
com.eg
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of com.eg
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
Hosting IPs
—
A/AAAA targets
Subdomains
—
CT + scan + body
Record Types
—
seen in DNS
Observed Certs
—
in our scans
DNS Records
A
—
AAAA
—
MX
—
NS
—
TXT
—
CNAME
—
CAA
—
WHOIS / Registration
Registration data planned
Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.
Subdomains
Subdomain enumeration pending
Every subdomain ever issued a TLS cert under this apex — extracted from Certificate Transparency logs, our own scan observations and body references.
Tech Stack
Tech detection pending
Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.
TLS Certificates
Subject: content.maint.online-banking.hsbc.com.eg
Issuer: DigiCert EV RSA CA G2
SANs: content.maint.online-banking.hsbc.com.eg
Subject: content.online-banking.hsbc.com.eg
Issuer: DigiCert EV RSA CA G2
SANs: content.online-banking.hsbc.com.eg
Subject: content.maint.online-banking.hsbc.com.eg
Issuer: DigiCert EV RSA CA G2
SANs: content.maint.online-banking.hsbc.com.eg
Subject: *.afim.com.eg
Issuer: YR2
SANs: *.afim.com.eg, afim.com.eg
Subject: www.rehlat.com.eg
Issuer: DigiCert SHA2 Secure Server CA
SANs: rehlat.com.eg, www.rehlat.ae, www.rehlat.com, www.rehlat.com.eg, www.rehlat.com.sa
Subject: allianz.com.eg
Issuer: DigiCert QV TLS ICA G1
SANs: *.allianz.com.eg, allianz.com.eg
Subject: *.qcww.com.eg
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.qcww.com.eg, qcww.com.eg
Subject: cp.dataxprs.com.eg
Issuer: YR1
SANs: cp.dataxprs.com.eg
Subject: *.wadigroup.com.eg
Issuer: Go Daddy Secure Certificate Authority - G2
SANs: *.wadigroup.com.eg, wadigroup.com.eg
Subject: *.hcww.com.eg
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.hcww.com.eg, hcww.com.eg
Subject: content.online-banking.hsbc.com.eg
Issuer: DigiCert EV RSA CA G2
SANs: content.online-banking.hsbc.com.eg
Subject: onlinebooking.albaraka.com.eg
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: onlinebooking.albaraka.com.eg
Subject: content.online-banking.hsbc.com.eg
Issuer: DigiCert EV RSA CA G2
SANs: content.online-banking.hsbc.com.eg
Subject: content.online-banking.hsbc.com.eg
Issuer: DigiCert EV RSA CA G2
SANs: content.online-banking.hsbc.com.eg
Subject: investa.com.eg
Issuer: YR1
SANs: investa.com.eg
Subject: technohydraulic.com.eg
Issuer: R13
SANs: technohydraulic.com.eg
Subject: bdcbusiness.bdc.com.eg
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: bdcbusiness.bdc.com.eg
Subject: www.rehlat.com.eg
Issuer: DigiCert SHA2 Secure Server CA
SANs: rehlat.com.eg, www.rehlat.ae, www.rehlat.com, www.rehlat.com.eg, www.rehlat.com.sa
Subject: *.eliraqi.com.eg
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.eliraqi.com.eg, eliraqi.com.eg
Subject: *.teleperformance.com.eg
Issuer: Sectigo Public Server Authentication CA OV R36
SANs: *.teleperformance.com.eg, teleperformance.com.eg
Subject: mail.encorp.com.eg
Issuer: YR1
SANs: mail.encorp.com.eg
Subject: valuedevelopments.com.eg
Issuer: valuedevelopments.com.eg
SANs: valuedevelopments.com.eg
Subject: elgounahospital.com.eg
Issuer: FG9H0GTB25900075
SANs: elgounahospital.com.eg, www.elgounahospital.com.eg
Subject: content.online-banking.hsbc.com.eg
Issuer: DigiCert EV RSA CA G2
SANs: content.online-banking.hsbc.com.eg
Subject: content.maint.online-banking.hsbc.com.eg
Issuer: DigiCert EV RSA CA G2
SANs: content.maint.online-banking.hsbc.com.eg
Subject: cdna1.yellowpages.com.eg
Issuer: YR1
SANs: cdna1.yellowpages.com.eg
Subject: globalinv.com.eg
Issuer: globalinv.com.eg
SANs: autodiscover.globalinv.com.eg, cpanel.globalinv.com.eg, globalinv.com.eg, mail.globalinv.com.eg, webdisk.globalinv.com.eg, webmail.globalinv.com.eg, www.globalinv.com.eg
Subject: content.online-banking.hsbc.com.eg
Issuer: DigiCert EV RSA CA G2
SANs: content.online-banking.hsbc.com.eg
Subject: content.online-banking.hsbc.com.eg
Issuer: DigiCert EV RSA CA G2
SANs: content.online-banking.hsbc.com.eg
Subject: serenitysrv.microsystem.com.eg
Issuer: serenitysrv.microsystem.com.eg
SANs: serenitysrv.microsystem.com.eg
IPs Citing This Domain
No citing IPs found yet
As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.
Origin / IP-Leak
USP
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
| Origin IP | Origin ASN | CDN ASN | Confidence | Reasoning |
|---|---|---|---|---|
| 104.71.115.241 | AS55836 | AS16625 | 95% | cert 830876c7… served by 104.71.115.241 (AS55836) carries SAN pro.duravit.com.eg which currently resolves through Akamai (AS16625) at 23.222.65.61, 2a02:26f0:1180:184::3a11, 2a02:26f0:1180:189::3a11, 23.47.28.186 |
| 104.71.115.241 | AS55836 | AS20940 | 95% | cert 830876c7… served by 104.71.115.241 (AS55836) carries SAN www.duravit.com.eg which currently resolves through Akamai (AS20940) at 23.207.11.236, 2a02:26f0:1180:184::3a11, 2a02:26f0:1180:189::3a11, 23.222.65.61 |
| 23.39.101.105 | AS45758 | AS16625 | 95% | cert d8d36730… served by 23.39.101.105 (AS45758) carries SAN www.coloplast.com.eg which currently resolves through Akamai (AS16625) at 184.24.16.193, 23.6.64.187 |
| 104.114.212.139 | AS25019 | AS16625 | 95% | cert 830876c7… served by 104.114.212.139 (AS25019) carries SAN pro.duravit.com.eg which currently resolves through Akamai (AS16625) at 23.222.65.61, 2a02:26f0:1180:184::3a11, 2a02:26f0:1180:189::3a11 |
| 23.219.27.216 | AS3786 | AS16625 | 95% | cert bf4e8c5d… served by 23.219.27.216 (AS3786) carries SAN stage.mastercard.com.eg which currently resolves through Akamai (AS16625) at 184.24.19.35, 23.218.56.231, 2.17.178.246 |
| 202.43.52.87 | AS3786 | AS16509 | 95% | cert 67e0d7a6… served by 202.43.52.87 (AS3786) carries SAN www.rehlat.com.eg which currently resolves through Amazon (AS16509) at 98.91.106.127, 44.219.225.225, 3.95.83.151, 18.206.77.75 |
| 23.35.38.87 | AS55836 | AS16625 | 95% | cert 1b5c7a75… served by 23.35.38.87 (AS55836) carries SAN content.maint.online-banking.hsbc.com.eg which currently resolves through Akamai (AS16625) at 23.222.50.239 |
| 2.22.189.234 | AS55836 | AS16625 | 95% | cert 133b30d0… served by 2.22.189.234 (AS55836) carries SAN mtf.mastercard.com.eg which currently resolves through Akamai (AS16625) at 23.55.231.96 |
| 23.221.112.68 | AS9299 | AS16625 | 95% | cert bf4e8c5d… served by 23.221.112.68 (AS9299) carries SAN stage.mastercard.com.eg which currently resolves through Akamai (AS16625) at 184.24.19.35 |
| 77.221.137.188 | AS210644 | AS16509 | 95% | cert e9ff2bad… served by 77.221.137.188 (AS210644) carries SAN hsbc.com.eg which currently resolves through Amazon (AS16509) at 99.83.228.62, 75.2.113.238 |
| 216.172.171.194 | AS19871 | AS13335 | 95% | cert 4c109b11… served by 216.172.171.194 (AS19871) carries SAN alhassad.com.eg which currently resolves through Cloudflare (AS13335) at 188.114.96.0, 2a06:98c1:3121::, 2a06:98c1:3120::, 188.114.97.0 |
| 85.121.245.148 | AS9009 | AS16509 | 95% | cert e9ff2bad… served by 85.121.245.148 (AS9009) carries SAN hsbc.com.eg which currently resolves through Amazon (AS16509) at 99.83.228.62, 75.2.113.238 |
| 38.180.201.26 | AS9009 | AS16509 | 95% | cert e9ff2bad… served by 38.180.201.26 (AS9009) carries SAN hsbc.com.eg which currently resolves through Amazon (AS16509) at 99.83.228.62, 75.2.113.238 |
| 65.108.78.31 | AS24940 | AS13335 | 95% | cert ee9b4f62… served by 65.108.78.31 (AS24940) carries SAN catalyst.cat.com.eg which currently resolves through Cloudflare (AS13335) at 104.21.78.202, 172.67.137.113, 2606:4700:3037::6815:4eca, 2606:4700:3030::ac43:8971 |
| 40.126.114.17 | AS58593 | AS8075 | 95% | cert 009fba11… served by 40.126.114.17 (AS58593) carries SAN mobil.com.eg which currently resolves through Microsoft (AS8075) at 104.40.38.105, 52.191.18.94 |
| 51.38.86.173 | AS16276 | AS13335 | 95% | cert 3e9f9cab… served by 51.38.86.173 (AS16276) carries SAN rockit.com.eg which currently resolves through Cloudflare (AS13335) at 104.21.80.49, 172.67.174.88, 2606:4700:3036::6815:5031, 2606:4700:3033::ac43:ae58 |
| 78.100.29.187 | AS8781 | AS13335 | 95% | cert f5af3de5… served by 78.100.29.187 (AS8781) carries SAN qnbleasing.com.eg which currently resolves through Cloudflare (AS13335) at 104.21.2.240, 172.67.129.211, 2606:4700:3033::6815:2f0, 2606:4700:3037::ac43:81d3 |
| 190.92.182.171 | AS55293 | AS13335 | 95% | cert 79acba78… served by 190.92.182.171 (AS55293) carries SAN cpanel.golden.com.eg which currently resolves through Cloudflare (AS13335) at 104.21.9.220, 172.67.131.11, 2606:4700:3030::6815:9dc, 2606:4700:3037::ac43:830b |
| 161.97.90.49 | AS51167 | AS20940 | 95% | cert 68216912… served by 161.97.90.49 (AS51167) carries SAN www.legrand.com.eg which currently resolves through Akamai (AS20940) at 23.48.23.21, 23.48.23.31, 2a02:26f0:1700:10::1737:a33a, 2a02:26f0:1700:10::1737:a334 |
| 144.31.180.64 | AS216127 | AS16509 | 95% | cert e9ff2bad… served by 144.31.180.64 (AS216127) carries SAN hsbc.com.eg which currently resolves through Amazon (AS16509) at 99.83.228.62, 75.2.113.238 |
| 35.204.231.104 | AS396982 | AS13335 | 95% | cert 3be3e7b9… served by 35.204.231.104 (AS396982) carries SAN cdna1.yellowpages.com.eg which currently resolves through Cloudflare (AS13335) at 172.67.71.123, 104.26.13.210, 104.26.12.210, 2606:4700:20::681a:cd2 |
| 138.124.49.75 | AS210644 | AS16509 | 95% | cert e9ff2bad… served by 138.124.49.75 (AS210644) carries SAN hsbc.com.eg which currently resolves through Amazon (AS16509) at 99.83.228.62, 75.2.113.238 |
| 42.159.157.164 | AS58593 | AS8075 | 95% | cert 6f34153c… served by 42.159.157.164 (AS58593) carries SAN mobil.com.eg which currently resolves through Microsoft (AS8075) at 104.40.38.105, 52.191.18.94 |
Threat Intelligence
Domain threat-intel pending
Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.
History
Domain timeline pending
Passive-DNS history accumulates as our forward-DNS crawler observes A/AAAA/MX/NS/TXT records over time.