Domain
pp.ua
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of pp.ua
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
Hosting IPs
1
A/AAAA targets
Subdomains
12
CT + scan + body
Record Types
3
seen in DNS
Observed Certs
4
in our scans
DNS Records
A
178.62.234.149
AAAA
—
MX
10 mx1.pp.ua.uadns.com, 20 mx2.pp.ua.uadns.com, 30 mx3.pp.ua.uadns.com
NS
ns1.uadns.com, ns2.uadns.com, ns3.uadns.com
TXT
—
CNAME
—
CAA
—
WHOIS / Registration
Registration data planned
Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.
Subdomains
Subdomain enumeration pending
Every subdomain ever issued a TLS cert under this apex — extracted from Certificate Transparency logs, our own scan observations and body references.
Tech Stack
Tech detection pending
Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.
TLS Certificates
Subject: tweaker.pp.ua
Issuer: E5
SANs: tweaker.pp.ua, www.tweaker.pp.ua
Subject: 52u.pp.ua
Issuer: R12
SANs: 52u.pp.ua
Subject: allwin-prom.pp.ua
Issuer: YE2
SANs: allwin-prom.pp.ua, www.allwin-prom.pp.ua
Subject: us.fc888.pp.ua
Issuer: YE2
SANs: us.fc888.pp.ua
Subject: mmcrm.mbr.pp.ua
Issuer: YR1
SANs: mmcrm.mbr.pp.ua
Subject: fix37.pp.ua
Issuer: YE2
SANs: fix37.pp.ua
Subject: servershop24.pp.ua
Issuer: servershop24.pp.ua
SANs: servershop24.pp.ua
Subject: 818312-vds-shkoroleksii.gmhost.pp.ua
Issuer: YR1
SANs: 818312-vds-shkoroleksii.gmhost.pp.ua
Subject: onmyown.pp.ua
Issuer: YE1
SANs: onmyown.pp.ua
Subject: wechat.pp.ua
Issuer: R3
SANs: wechat.pp.ua
Subject: fiatlux.wow-it-blog.pp.ua
Issuer: YE2
SANs: fiatlux.wow-it-blog.pp.ua
Subject: app.uat.kidsministry.church
Issuer: YE1
SANs: app.uat.kidsministry.church, back.uat.kidsministry.church
Subject: uisp.tam.pp.ua
Issuer: YR1
SANs: uisp.tam.pp.ua
Subject: server4250.artist.pp.ua
Issuer: server4250.artist.pp.ua
SANs: server4250.artist.pp.ua
Subject: files.metimol.pp.ua
Issuer: YR1
SANs: files.metimol.pp.ua
Subject: *.lkcredit.pp.ua
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.lkcredit.pp.ua, lkcredit.pp.ua
Subject: hestia.pp.ua
Issuer: hestia.pp.ua
SANs: hestia.pp.ua
Subject: af.lbi.pp.ua
Issuer: YR1
SANs: af.lbi.pp.ua, www.af.lbi.pp.ua
Subject: aigrf.pp.ua
Issuer: R13
SANs: aigrf.pp.ua, www.aigrf.pp.ua
Subject: csc-supplier-onboarding-app.uat.bnpparibas.com
Issuer: DigiCert Global G3 TLS ECC SHA384 2020 CA1
SANs: csc-marketing.uat.bnpparibas.com, csc-supplier-onboarding-app.uat.bnpparibas.com, csc-supplier-onboarding-iam.uat.bnpparibas.com
Subject: api.go-questly.pp.ua
Issuer: YE2
SANs: api.go-questly.pp.ua
Subject: csc-supplier-onboarding-app.uat.bnpparibas.com
Issuer: DigiCert Global G3 TLS ECC SHA384 2020 CA1
SANs: csc-marketing.uat.bnpparibas.com, csc-supplier-onboarding-app.uat.bnpparibas.com, csc-supplier-onboarding-iam.uat.bnpparibas.com
Subject: tesla-dc-adapter.pp.ua
Issuer: YE2
SANs: ccs2.tesla-dc-adapter.pp.ua, tesla-dc-adapter.pp.ua
Subject: center.rcpto.pp.ua
Issuer: YR2
SANs: center.rcpto.pp.ua
Subject: nic.nyc.pp.ua
Issuer: YR2
SANs: nic.nyc.pp.ua
Subject: bwg.hzchj.pp.ua
Issuer: E7
SANs: bwg.hzchj.pp.ua
Subject: openlist.king.pp.ua
Issuer: YE1
SANs: openlist.king.pp.ua
Subject: alt.pp.ua
Issuer: YE2
SANs: alt.pp.ua, www.alt.pp.ua
Subject: jusefruit.pp.ua
Issuer: YR1
SANs: jusefruit.pp.ua
Subject: rks.ros.pp.ua
Issuer: YR2
SANs: rks.ros.pp.ua
IPs Citing This Domain
No citing IPs found yet
As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.
Origin / IP-Leak
USP
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
| Origin IP | Origin ASN | CDN ASN | Confidence | Reasoning |
|---|---|---|---|---|
| 80.107.182.235 | AS6799 | AS13335 | 95% | cert 272272e7… served by 80.107.182.235 (AS6799) carries SAN ops.fast.pp.ua which currently resolves through Cloudflare (AS13335) at 172.67.151.85, 104.21.0.164, 2606:4700:3037::6815:a4, 2606:4700:3031::ac43:9755 |
| 193.122.100.177 | AS31898 | AS13335 | 95% | cert 7c525984… served by 193.122.100.177 (AS31898) carries SAN kr4.sed.pp.ua which currently resolves through Cloudflare (AS13335) at 172.67.205.68, 104.21.44.240, 2606:4700:3030::ac43:cd44, 2606:4700:3031::6815:2cf0 |
| 89.168.96.65 | AS31898 | AS13335 | 95% | cert 306efc6c… served by 89.168.96.65 (AS31898) carries SAN 24x7.pp.ua which currently resolves through Cloudflare (AS13335) at 172.67.135.139, 104.21.7.3, 2606:4700:3030::6815:703, 2606:4700:3031::ac43:878b |
| 129.153.1.210 | AS31898 | AS13335 | 95% | cert 9cbd81d0… served by 129.153.1.210 (AS31898) carries SAN anisfm.pp.ua which currently resolves through Cloudflare (AS13335) at 172.67.153.108, 104.21.82.50, 2606:4700:3035::ac43:996c, 2606:4700:3037::6815:5232 |
| 144.24.112.151 | AS31898 | AS13335 | 95% | cert 25beaca1… served by 144.24.112.151 (AS31898) carries SAN oracle-dash.pp.ua which currently resolves through Cloudflare (AS13335) at 104.21.52.59, 172.67.195.245, 2606:4700:3030::ac43:c3f5, 2606:4700:3031::6815:343b |
| 158.180.47.28 | AS31898 | AS13335 | 95% | cert 3f756442… served by 158.180.47.28 (AS31898) carries SAN ogree.pp.ua which currently resolves through Cloudflare (AS13335) at 188.114.96.0, 188.114.97.0, 2a06:98c1:3120::3, 2a06:98c1:3121::3 |
| 158.178.232.160 | AS31898 | AS13335 | 95% | cert 19e37356… served by 158.178.232.160 (AS31898) carries SAN pn14wx5ex6sxihr.pp.ua which currently resolves through Cloudflare (AS13335) at 172.67.185.36, 104.21.51.193, 2606:4700:3037::6815:33c1, 2606:4700:3033::ac43:b924 |
| 130.61.198.247 | AS31898 | AS13335 | 95% | cert edd2805b… served by 130.61.198.247 (AS31898) carries SAN dosmot.pp.ua which currently resolves through Cloudflare (AS13335) at 172.67.170.106, 104.21.28.81, 2606:4700:3033::6815:1c51, 2606:4700:3032::ac43:aa6a |
| 37.57.31.237 | AS13188 | AS13335 | 95% | cert 420aec98… served by 37.57.31.237 (AS13188) carries SAN blog.black-sun.pp.ua which currently resolves through Cloudflare (AS13335) at 104.21.48.22, 172.67.176.30, 2606:4700:3033::6815:3016, 2606:4700:3030::ac43:b01e |
| 87.104.92.225 | AS204274 | AS13335 | 95% | cert e8ff06e1… served by 87.104.92.225 (AS204274) carries SAN seedbox.dansbo.pp.ua which currently resolves through Cloudflare (AS13335) at 188.114.97.3, 188.114.96.3, 2a06:98c1:3120::3, 2a06:98c1:3121::3 |
| 161.33.17.181 | AS31898 | AS13335 | 95% | cert 982b23ac… served by 161.33.17.181 (AS31898) carries SAN bnas.pp.ua which currently resolves through Cloudflare (AS13335) at 104.21.92.30, 172.67.185.90, 2606:4700:3031::ac43:b95a, 2606:4700:3033::6815:5c1e |
| 93.127.116.49 | AS21497 | AS13335 | 95% | cert 707f95c9… served by 93.127.116.49 (AS21497) carries SAN emaz.pp.ua which currently resolves through Cloudflare (AS13335) at 188.114.97.3, 188.114.96.3, 2a06:98c1:3120::3, 2a06:98c1:3121::3 |
| 193.169.188.81 | AS196645 | AS13335 | 95% | cert 06147fc1… served by 193.169.188.81 (AS196645) carries SAN duchenko.pp.ua which currently resolves through Cloudflare (AS13335) at 104.21.83.184, 172.67.180.128, 2606:4700:3035::6815:53b8, 2606:4700:3037::ac43:b480 |
| 201.182.97.222 | AS267507 | AS13335 | 95% | cert 9a52c0fc… served by 201.182.97.222 (AS267507) carries SAN v2raybr.pp.ua which currently resolves through Cloudflare (AS13335) at 172.67.194.211, 104.21.44.46, 2606:4700:3035::6815:2c2e, 2606:4700:3037::ac43:c2d3 |
| 162.243.42.190 | AS14061 | AS13335 | 95% | cert 896da183… served by 162.243.42.190 (AS14061) carries SAN devbiel.pp.ua which currently resolves through Cloudflare (AS13335) at 172.67.135.192, 104.21.7.48, 2a06:98c1:3120::3, 2a06:98c1:3121::3 |
| 178.104.52.79 | AS24940 | AS13335 | 95% | cert 70b56bbe… served by 178.104.52.79 (AS24940) carries SAN r.leadforge.pp.ua which currently resolves through Cloudflare (AS13335) at 172.67.184.240, 104.21.19.34, 2606:4700:3031::ac43:b8f0, 2606:4700:3033::6815:1322 |
| 67.205.134.202 | AS14061 | AS13335 | 95% | cert f4195fb0… served by 67.205.134.202 (AS14061) carries SAN khlopik.pp.ua which currently resolves through Cloudflare (AS13335) at 188.114.97.3, 188.114.96.3, 2a06:98c1:3120::3, 2a06:98c1:3121::3 |
| 158.178.232.160 | AS31898 | AS13335 | 95% | cert 0ddce791… served by 158.178.232.160 (AS31898) carries SAN pn14wx5ex6sxihr.pp.ua which currently resolves through Cloudflare (AS13335) at 172.67.185.36, 104.21.51.193, 2606:4700:3037::6815:33c1, 2606:4700:3033::ac43:b924 |
| 193.169.240.195 | AS3236 | AS13335 | 95% | cert 705e6030… served by 193.169.240.195 (AS3236) carries SAN n8n.valeriia.pp.ua which currently resolves through Cloudflare (AS13335) at 172.67.161.29, 104.21.9.168, 2606:4700:3035::6815:9a8, 2606:4700:3035::ac43:a11d |
| 178.63.162.45 | AS24940 | AS13335 | 95% | cert ed4892f5… served by 178.63.162.45 (AS24940) carries SAN chek.pp.ua which currently resolves through Cloudflare (AS13335) at 172.67.183.44, 104.21.67.243, 2606:4700:3037::6815:43f3, 2606:4700:3034::ac43:b72c |
| 139.28.39.5 | AS47987 | AS13335 | 95% | cert acd26a65… served by 139.28.39.5 (AS47987) carries SAN bita.pp.ua which currently resolves through Cloudflare (AS13335) at 104.21.91.36, 172.67.209.130, 2606:4700:3032::6815:5b24, 2606:4700:3037::ac43:d182 |
| 37.60.235.247 | AS51167 | AS13335 | 95% | cert 40fc8ba9… served by 37.60.235.247 (AS51167) carries SAN h.syslog.pp.ua which currently resolves through Cloudflare (AS13335) at 172.67.201.186, 104.21.93.2, 2606:4700:3034::6815:5d02, 2606:4700:3037::ac43:c9ba |
| 128.140.33.2 | AS24940 | AS13335 | 95% | cert 3c52bcec… served by 128.140.33.2 (AS24940) carries SAN abas.pp.ua which currently resolves through Cloudflare (AS13335) at 104.21.2.76, 172.67.128.228, 2606:4700:3036::6815:24c, 2606:4700:3037::ac43:80e4 |
| 154.62.226.64 | AS214036 | AS13335 | 95% | cert a114208f… served by 154.62.226.64 (AS214036) carries SAN digitalsplash.pp.ua which currently resolves through Cloudflare (AS13335) at 104.21.0.197, 172.67.128.61, 2606:4700:3030::6815:c5, 2606:4700:3033::ac43:803d |
| 146.235.195.88 | AS31898 | AS13335 | 95% | cert a23b48a3… served by 146.235.195.88 (AS31898) carries SAN crown.pp.ua which currently resolves through Cloudflare (AS13335) at 104.21.69.77, 172.67.206.74, 2606:4700:3036::ac43:ce4a, 2606:4700:3033::6815:454d |
Threat Intelligence
Domain threat-intel pending
Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.
History
Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.
| Type | Value | First seen | Last seen |
|---|---|---|---|
| NS | ns2.uadns.com | 2026-07-15 20:04:13.980 | 2026-07-15 20:04:13.980 |
| MX | 10 mx1.pp.ua.uadns.com | 2026-07-15 20:04:13.980 | 2026-07-15 20:04:13.980 |
| MX | 30 mx3.pp.ua.uadns.com | 2026-07-15 20:04:13.980 | 2026-07-15 20:04:13.980 |
| A | 178.62.234.149 | 2026-07-15 20:04:13.980 | 2026-07-15 20:04:13.980 |
| NS | ns1.uadns.com | 2026-07-15 20:04:13.980 | 2026-07-15 20:04:13.980 |
| NS | ns3.uadns.com | 2026-07-15 20:04:13.980 | 2026-07-15 20:04:13.980 |
| MX | 20 mx2.pp.ua.uadns.com | 2026-07-15 20:04:13.980 | 2026-07-15 20:04:13.980 |