Domain
easypay.ua
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of easypay.ua
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
Hosting IPs
4
A/AAAA targets
Subdomains
19
CT + scan + body
Record Types
5
seen in DNS
Observed Certs
14
in our scans
DNS Records
A
104.18.10.30, 104.18.11.30
AAAA
2606:4700::6812:a1e, 2606:4700::6812:b1e
MX
10 aspmx.l.google.com, 15 alt1.aspmx.l.google.com, 20 mail.easypay.ua
NS
sasha.ns.cloudflare.com, viddy.ns.cloudflare.com
TXT
6p7wlorvzu, MS=2A633CB033DA4B931D31BCECE56651F9A4B2E8B9, ca3-31e27ff41d274064825645168d1d0fd3, esputnik-verification=RVNQX0RWS19WMQABaQkAAAGDNb97qaMaWznbVaFw, google-gws-recovery-domain-verification=55037679, google-site-verification=T6dnHUUwnWQ8LsMRbIyAvUxN2Drk4e2iHPby5AQi95U, google-site-verification=ZzADRHLBYe1uI5ot-2NxxdDWBeSJOS43J5MyoT7oz6s, v=spf1 a ip4:195.182.195.239 ip4:195.230.131.51 ip4:217.20.171.61 include:spf2.esputnik.com include:_spf.google.com ~all
CNAME
—
CAA
—
WHOIS / Registration
Registration data planned
Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.
Subdomains
Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.
| Subdomain | Resolves to | Last seen |
|---|---|---|
| easypay.ua | 2026-07-28 13:03:27.210 | |
| epass-balance.easypay.ua | 2026-06-03 00:51:09.705 | |
| terminals.easypay.ua | 2026-06-16 12:15:21.933 | |
| afisha.easypay.ua | 1970-01-01 00:00:00.000 | |
| tickets.easypay.ua | 1970-01-01 00:00:00.000 | |
| www.afisha.easypay.ua | 1970-01-01 00:00:00.000 |
Tech Stack
Tech detection pending
Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.
TLS Certificates
Subject: *.easypay.ua
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.easypay.ua, easypay.ua
Subject: *.easypay.ua
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.easypay.ua, easypay.ua
IPs Citing This Domain
Hosts whose HTML body references this domain. Strong signal for origin/mirror/embed discovery.
193.193.223.78:443
href · ×2
185.70.111.167:443
href · ×2
91.198.83.217:443
href · ×2
195.160.206.171:80
href · ×2
195.160.206.151:80
href · ×2
195.160.206.148:80
href · ×2
195.160.205.137:80
href · ×1
195.160.206.208:80
href · ×1
195.160.206.200:80
href · ×1
195.160.206.175:80
href · ×1
195.160.204.23:80
href · ×1
94.179.0.42:443
href · ×1
195.160.206.160:80
href · ×1
195.160.206.210:80
href · ×1
37.252.122.163:80
href · ×1
195.160.206.218:80
href · ×1
195.160.206.232:80
href · ×1
195.160.206.179:80
href · ×1
195.160.206.238:80
href · ×1
195.160.206.186:80
href · ×1
91.222.81.80:80
href · ×1
195.160.206.201:80
href · ×1
195.160.206.187:80
href · ×1
195.160.206.194:80
href · ×1
195.160.206.161:80
href · ×1
195.160.206.248:80
href · ×1
93.175.192.10:443
href · ×1
195.160.206.138:80
href · ×1
195.160.206.65:80
href · ×1
195.160.204.6:80
href · ×1
195.160.206.204:80
href · ×1
195.160.206.246:80
href · ×1
95.46.145.116:80
href · ×1
195.160.206.150:80
href · ×1
195.160.206.225:80
href · ×1
151.115.41.0:80
href · ×1
195.160.205.1:80
href · ×1
195.160.206.133:80
href · ×1
188.40.227.105:443
href · ×1
195.160.206.191:80
href · ×1
195.160.206.252:80
href · ×1
31.41.91.193:443
href · ×1
195.160.206.226:80
href · ×1
195.160.206.250:80
href · ×1
Origin / IP-Leak
USP
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
| Origin IP | Origin ASN | CDN ASN | Confidence | Reasoning |
|---|---|---|---|---|
| 195.230.131.51 | AS6846 | AS13335 | 95% | cert f68cc120… served by 195.230.131.51 (AS6846) carries SAN easypay.ua which currently resolves through Cloudflare (AS13335) at 104.18.11.30, 104.18.10.30, 2606:4700::6812:b1e, 2606:4700::6812:a1e |
| 77.222.150.171 | AS3326 | AS13335 | 95% | cert 80175102… served by 77.222.150.171 (AS3326) carries SAN easypay.ua which currently resolves through Cloudflare (AS13335) at 104.18.11.30, 104.18.10.30, 2606:4700::6812:b1e, 2606:4700::6812:a1e |
CT-Log Evidence
Certificates from public Certificate Transparency logs whose subject or SAN names this domain — including historic certs we never observed live.
3a0befac089c09b9…
google · argon2026h2
Subject: *.easypay.ua
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.easypay.ua, easypay.ua
Valid: 2025-07-24 00:00:00 → 2026-08-12 23:59:59
801751022d3344cd…
google · xenon2026h2
Subject: *.easypay.ua
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.easypay.ua, easypay.ua
Valid: 2025-07-24 00:00:00 → 2026-08-12 23:59:59
Threat Intelligence
Domain threat-intel pending
Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.
History
Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.
| Type | Value | First seen | Last seen |
|---|---|---|---|
| TXT | 6p7wlorvzu | 2026-05-26 00:24:59.887 | 2026-07-28 13:03:27.210 |
| A | 104.18.10.30 | 2026-05-26 00:24:59.887 | 2026-07-28 13:03:27.210 |
| NS | viddy.ns.cloudflare.com | 2026-05-26 00:24:59.887 | 2026-07-28 13:03:27.210 |
| NS | sasha.ns.cloudflare.com | 2026-05-26 00:24:59.887 | 2026-07-28 13:03:27.210 |
| TXT | ca3-31e27ff41d274064825645168d1d0fd3 | 2026-05-26 00:24:59.887 | 2026-07-28 13:03:27.210 |
| AAAA | 2606:4700::6812:a1e | 2026-05-26 00:24:59.887 | 2026-07-28 13:03:27.210 |
| TXT | v=spf1 a ip4:195.182.195.239 ip4:195.230.131.51 ip4:217.20.171.61 include:spf2.esputnik.com include:_spf.google.com ~all | 2026-05-26 00:24:59.887 | 2026-07-28 13:03:27.210 |
| TXT | MS=2A633CB033DA4B931D31BCECE56651F9A4B2E8B9 | 2026-05-26 00:24:59.887 | 2026-07-28 13:03:27.210 |
| MX | 10 aspmx.l.google.com | 2026-05-26 00:24:59.887 | 2026-07-28 13:03:27.210 |
| TXT | google-site-verification=T6dnHUUwnWQ8LsMRbIyAvUxN2Drk4e2iHPby5AQi95U | 2026-05-26 00:24:59.887 | 2026-07-28 13:03:27.210 |
| MX | 15 alt1.aspmx.l.google.com | 2026-05-26 00:24:59.887 | 2026-07-28 13:03:27.210 |
| A | 104.18.11.30 | 2026-05-26 00:24:59.887 | 2026-07-28 13:03:27.210 |
| TXT | esputnik-verification=RVNQX0RWS19WMQABaQkAAAGDNb97qaMaWznbVaFw | 2026-05-26 00:24:59.887 | 2026-07-28 13:03:27.210 |
| AAAA | 2606:4700::6812:b1e | 2026-05-26 00:24:59.887 | 2026-07-28 13:03:27.210 |
| TXT | google-gws-recovery-domain-verification=55037679 | 2026-05-26 00:24:59.887 | 2026-07-28 13:03:27.210 |
| TXT | google-site-verification=ZzADRHLBYe1uI5ot-2NxxdDWBeSJOS43J5MyoT7oz6s | 2026-05-26 00:24:59.887 | 2026-07-28 13:03:27.210 |
| MX | 20 mail.easypay.ua | 2026-05-26 00:24:59.887 | 2026-07-28 13:03:27.210 |