Domain
servers.com
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of servers.com
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
Hosting IPs
19
A/AAAA targets
Subdomains
197
CT + scan + body
Record Types
4
seen in DNS
Observed Certs
5
in our scans
DNS Records
A
173.234.133.9
AAAA
—
MX
1 smtp.google.com
NS
ns1.servers.com, ns2.servers.com, ns3.servers.com, ns4.servers.com
TXT
anthropic-domain-verification-vbks8h=ctKx4ShUqnP9DXlQBib6Nq7WK, figma-domain-verification=5cee51f68282f5c83ba9006d1853953fde39cb632877ae8fa90b7f690135a289-1739275381, google-gws-recovery-domain-verification=62989178, google-site-verification=XmDK-f2Vtewwm48Ws7wXJO8N73GJdpGkEFh9rtKJNtY, knowbe4-site-verification=3eded9e9ea0f63c7a18c1b928f7bee6a, pardot894561=579dbc509460306b515c805f658367c13a08ec1a2b360fb707aee3688af5ae79, rippling-domain-verification=7fc0721cc58d2dd5, v=spf1 mx ip4:173.234.133.16 include:aspmx.pardot.com include:_spf.google.com include:_spf.salesforce.com -all
CNAME
—
CAA
—
WHOIS / Registration
Registration data planned
Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.
Subdomains
Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.
| Subdomain | Resolves to | Last seen |
|---|---|---|
| auth.files.nl01.cloud.servers.com | 2026-07-28 16:20:40.086 | |
| auth.servers.ams91.cloud.servers.com | 2026-07-24 20:57:21.389 | |
| ams1.servers.com | 1970-01-01 00:00:00.000 | |
| ams101.servers.com | 1970-01-01 00:00:00.000 | |
| ams4.servers.com | 1970-01-01 00:00:00.000 | |
| ams6.servers.com | 1970-01-01 00:00:00.000 | |
| ams93.servers.com | 1970-01-01 00:00:00.000 | |
| ams94.servers.com | 1970-01-01 00:00:00.000 | |
| ams96.servers.com | 1970-01-01 00:00:00.000 | |
| ams97.servers.com | 1970-01-01 00:00:00.000 | |
| api.forexvps.servers.com | 2026-07-24 21:26:30.195 | |
| app.ams1.servers.com | 1970-01-01 00:00:00.000 | |
| app.ams4.servers.com | 1970-01-01 00:00:00.000 | |
| app.ams6.servers.com | 1970-01-01 00:00:00.000 | |
| app.ams93.servers.com | 1970-01-01 00:00:00.000 | |
| app.ams94.servers.com | 1970-01-01 00:00:00.000 | |
| app.ams96.servers.com | 1970-01-01 00:00:00.000 | |
| app.ams97.servers.com | 1970-01-01 00:00:00.000 | |
| app.dfw2.servers.com | 1970-01-01 00:00:00.000 | |
| app.dfw3.servers.com | 1970-01-01 00:00:00.000 | |
| app.dfw4.servers.com | 1970-01-01 00:00:00.000 | |
| app.dfw5.servers.com | 1970-01-01 00:00:00.000 | |
| app.fra1.servers.com | 1970-01-01 00:00:00.000 | |
| app.hkg1.servers.com | 1970-01-01 00:00:00.000 | |
| app.lon1.servers.com | 1970-01-01 00:00:00.000 | |
| app.lux1.servers.com | 1970-01-01 00:00:00.000 | |
| app.lux2.servers.com | 1970-01-01 00:00:00.000 | |
| app.lux3.servers.com | 1970-01-01 00:00:00.000 | |
| app.mia1.servers.com | 1970-01-01 00:00:00.000 | |
| app.sin1.servers.com | 1970-01-01 00:00:00.000 | |
| app.sin2.servers.com | 1970-01-01 00:00:00.000 | |
| app.sjc2.servers.com | 1970-01-01 00:00:00.000 | |
| app.sjc3.servers.com | 1970-01-01 00:00:00.000 | |
| app.vsg3.servers.com | 1970-01-01 00:00:00.000 | |
| app.was1.servers.com | 1970-01-01 00:00:00.000 | |
| app.was2.servers.com | 1970-01-01 00:00:00.000 | |
| app.was3.servers.com | 1970-01-01 00:00:00.000 | |
| app.was4.servers.com | 1970-01-01 00:00:00.000 | |
| capoo.servers.com | 2026-06-16 20:55:30.723 | |
| dfw2.servers.com | 1970-01-01 00:00:00.000 | |
| dfw3.servers.com | 1970-01-01 00:00:00.000 | |
| dfw4.servers.com | 1970-01-01 00:00:00.000 | |
| dfw5.servers.com | 1970-01-01 00:00:00.000 | |
| dns.mgm.servers.com | 1970-01-01 00:00:00.000 | |
| files.nl01.cloud.servers.com | 1970-01-01 00:00:00.000 | |
| files.sin01.cloud.servers.com | 1970-01-01 00:00:00.000 | |
| files.us01.cloud.servers.com | 1970-01-01 00:00:00.000 | |
| forexvps.servers.com | 2026-07-24 21:26:30.195 | |
| fra1.servers.com | 1970-01-01 00:00:00.000 | |
| hkg1.servers.com | 1970-01-01 00:00:00.000 | |
| i.ams1.servers.com | 1970-01-01 00:00:00.000 | |
| i.ams4.servers.com | 2026-06-19 14:57:31.732 | |
| i.ams6.servers.com | 1970-01-01 00:00:00.000 | |
| i.ams93.servers.com | 1970-01-01 00:00:00.000 | |
| i.ams94.servers.com | 2026-07-22 11:17:58.019 | |
| i.ams96.servers.com | 1970-01-01 00:00:00.000 | |
| i.ams97.servers.com | 1970-01-01 00:00:00.000 | |
| i.dfw2.servers.com | 1970-01-01 00:00:00.000 | |
| i.dfw3.servers.com | 1970-01-01 00:00:00.000 | |
| i.dfw4.servers.com | 2026-07-28 08:41:52.746 | |
| i.dfw5.servers.com | 1970-01-01 00:00:00.000 | |
| i.fra1.servers.com | 1970-01-01 00:00:00.000 | |
| i.hkg1.servers.com | 2026-07-23 14:40:07.464 | |
| i.lon1.servers.com | 2026-06-18 12:23:36.350 | |
| i.lux1.servers.com | 1970-01-01 00:00:00.000 | |
| i.lux2.servers.com | 1970-01-01 00:00:00.000 | |
| i.lux3.servers.com | 2026-07-19 12:03:58.875 | |
| i.mia1.servers.com | 2026-07-27 23:53:37.809 | |
| i.sin1.servers.com | 2026-06-15 06:06:05.296 | |
| i.sin2.servers.com | 1970-01-01 00:00:00.000 | |
| i.sjc2.servers.com | 1970-01-01 00:00:00.000 | |
| i.sjc3.servers.com | 1970-01-01 00:00:00.000 | |
| i.vsg3.servers.com | 2026-07-27 10:31:11.024 | |
| i.was1.servers.com | 2026-07-16 14:14:21.580 | |
| i.was2.servers.com | 1970-01-01 00:00:00.000 | |
| i.was3.servers.com | 1970-01-01 00:00:00.000 | |
| i.was4.servers.com | 1970-01-01 00:00:00.000 | |
| lb-check.sa.servers.com | 1970-01-01 00:00:00.000 | |
| lon1.servers.com | 1970-01-01 00:00:00.000 | |
| lu01.servers.com | 1970-01-01 00:00:00.000 | |
| lux1.servers.com | 1970-01-01 00:00:00.000 | |
| lux2.servers.com | 1970-01-01 00:00:00.000 | |
| lux3.servers.com | 1970-01-01 00:00:00.000 | |
| mdm.servers.com | 1970-01-01 00:00:00.000 | |
| metadata.servers.com | 2026-06-16 20:55:30.723 | |
| mgm.servers.com | 1970-01-01 00:00:00.000 | |
| mia1.servers.com | 1970-01-01 00:00:00.000 | |
| mirror.servers.com | 2026-06-16 20:55:30.723 | |
| mo01.servers.com | 1970-01-01 00:00:00.000 | |
| mow1.servers.com | 1970-01-01 00:00:00.000 | |
| mow2.servers.com | 1970-01-01 00:00:00.000 | |
| mow3.servers.com | 1970-01-01 00:00:00.000 | |
| nl01.servers.com | 1970-01-01 00:00:00.000 | |
| nova-dev-1.mgm.servers.com | 1970-01-01 00:00:00.000 | |
| sa.servers.com | 1970-01-01 00:00:00.000 | |
| servers.ams3.cloud.servers.com | 1970-01-01 00:00:00.000 | |
| servers.ams4.cloud.servers.com | 1970-01-01 00:00:00.000 | |
| servers.ams91.cloud.servers.com | 1970-01-01 00:00:00.000 | |
| servers.com | 2026-07-27 01:19:47.827 | |
| servers.mow88.cloud.servers.com | 1970-01-01 00:00:00.000 | |
| servers.mow96.cloud.servers.com | 1970-01-01 00:00:00.000 | |
| servers.mow97.cloud.servers.com | 1970-01-01 00:00:00.000 | |
| servers.mow98.cloud.servers.com | 1970-01-01 00:00:00.000 | |
| servers.nl01.cloud.servers.com | 1970-01-01 00:00:00.000 | |
| servers.nl02.cloud.servers.com | 1970-01-01 00:00:00.000 | |
| servers.sin01.cloud.servers.com | 1970-01-01 00:00:00.000 | |
| sg01.servers.com | 1970-01-01 00:00:00.000 | |
| sin1.servers.com | 1970-01-01 00:00:00.000 | |
| sin2.servers.com | 1970-01-01 00:00:00.000 | |
| sjc2.servers.com | 1970-01-01 00:00:00.000 | |
| sjc3.servers.com | 1970-01-01 00:00:00.000 | |
| sops-portal.mgm.servers.com | 1970-01-01 00:00:00.000 | |
| storage.mgm.servers.com | 1970-01-01 00:00:00.000 | |
| us02.servers.com | 1970-01-01 00:00:00.000 | |
| vsg1.servers.com | 1970-01-01 00:00:00.000 | |
| vsg3.servers.com | 1970-01-01 00:00:00.000 | |
| was1.servers.com | 1970-01-01 00:00:00.000 | |
| was2.servers.com | 1970-01-01 00:00:00.000 | |
| was3.servers.com | 1970-01-01 00:00:00.000 | |
| was4.servers.com | 1970-01-01 00:00:00.000 |
Tech Stack
Tech detection pending
Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.
TLS Certificates
Subject: server137.hosteaseservers.com
Issuer: YR1
SANs: server137.hosteaseservers.com
Subject: autoconfig.gains.associateservers.com
Issuer: YR2
SANs: autoconfig.gains.associateservers.com, autodiscover.gains.associateservers.com, cpanel.gains.associateservers.com, cpcalendars.gains.associateservers.com, cpcontacts.gains.associateservers.com, gains.associateservers.com, ipv6.gains.associateservers.com, mail.gains.associateservers.com, webdisk.gains.associateservers.com, webmail.gains.associateservers.com, whm.gains.associateservers.com, www.gains.associateservers.com
Subject: fdxlocal-feed-az.visionaryservers.com
Issuer: YE2
SANs: fdxlocal-feed-az.visionaryservers.com
Subject: *.megawebservers.com
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.megawebservers.com, megawebservers.com
Subject: cpanel1-nl.thcservers.com
Issuer: cpanel1-nl.thcservers.com
SANs: cpanel1-nl.thcservers.com
Subject: epsilon.elinuxservers.com
Issuer: YR2
SANs: epsilon.elinuxservers.com
Subject: l397.hosteaseservers.com
Issuer: YR2
SANs: l397.hosteaseservers.com
Subject: *.megawebservers.com
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.megawebservers.com, megawebservers.com
Subject: clock.centralservers.com
Issuer: Sectigo Public Server Authentication CA OV R36
SANs: *.clock.centralservers.com, *.clocks.centralservers.com, clock.centralservers.com, clocks.centralservers.com
Subject: *.iq-servers.com
Issuer: YR2
SANs: *.iq-servers.com
Subject: backend.wooservers.com
Issuer: YR1
SANs: backend.wooservers.com
Subject: *.ingress.froggy-servers.com
Issuer: YE2
SANs: *.ingress.froggy-servers.com, ingress.froggy-servers.com
Subject: sirius.elinuxservers.com
Issuer: YR2
SANs: sirius.elinuxservers.com
Subject: phantom.elinuxservers.com
Issuer: YR1
SANs: phantom.elinuxservers.com
Subject: baltic-servers.com
Issuer: baltic-servers.com
SANs: baltic-servers.com
Subject: euk-96591.eukservers.com
Issuer: YR1
SANs: euk-96591.eukservers.com
Subject: *.megawebservers.com
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.megawebservers.com, megawebservers.com
Subject: gn210.whpservers.com
Issuer: gn210.whpservers.com
SANs: gn210.whpservers.com
Subject: *.files.nl01.cloud.servers.com
Issuer: ZeroSSL RSA DV SSL CA 2
SANs: *.files.nl01.cloud.servers.com, *.nl01.servers.im
Subject: *.megawebservers.com
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.megawebservers.com, megawebservers.com
Subject: lithium.elinuxservers.com
Issuer: YR2
SANs: lithium.elinuxservers.com
Subject: w016.hosteaseservers.com
Issuer: YR1
SANs: w016.hosteaseservers.com
Subject: ns2.thesmartservers.com
Issuer: YR1
SANs: ns2.thesmartservers.com
Subject: *.megawebservers.com
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.megawebservers.com, megawebservers.com
Subject: supersonic.elinuxservers.com
Issuer: YR2
SANs: supersonic.elinuxservers.com
Subject: *.megawebservers.com
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.megawebservers.com, megawebservers.com
Subject: *.megawebservers.com
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.megawebservers.com, megawebservers.com
Subject: *.megawebservers.com
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.megawebservers.com, megawebservers.com
Subject: nfoservers.com
Issuer: nfoservers.com
SANs: nfoservers.com
Subject: pl6.webline-servers.com
Issuer: pl6.webline-servers.com
SANs: pl6.webline-servers.com
IPs Citing This Domain
Hosts whose HTML body references this domain. Strong signal for origin/mirror/embed discovery.
107.175.65.229:443
href · ×2
46.243.3.246:443
href · ×1
82.40.38.247:443
href · ×1
78.47.254.151:80
href · ×1
38.244.205.147:443
href · ×1
178.62.55.94:80
href · ×1
38.244.205.166:443
href · ×1
142.0.200.124:443
href · ×1
64.64.229.102:443
href · ×1
213.196.21.55:80
href · ×1
150.241.70.255:443
href · ×1
154.17.6.0:443
href · ×1
64.204.188.61:443
href · ×1
207.246.96.132:443
href · ×1
103.102.228.151:443
href · ×1
185.22.153.152:443
href · ×1
23.147.56.50:443
href · ×1
151.241.216.173:443
href · ×1
129.154.193.79:443
href · ×1
64.204.188.221:443
href · ×1
213.196.21.55:443
href · ×1
142.0.200.124:80
href · ×1
103.195.191.25:443
href · ×1
Origin / IP-Leak
USP
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
No origin-IP leaks detected (yet)
Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.
Threat Intelligence
Domain threat-intel pending
Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.
History
Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.
| Type | Value | First seen | Last seen |
|---|---|---|---|
| TXT | figma-domain-verification=5cee51f68282f5c83ba9006d1853953fde39cb632877ae8fa90b7f690135a289-1739275381 | 2026-05-26 02:38:03.884 | 2026-07-27 01:19:47.827 |
| NS | ns2.servers.com | 2026-05-26 02:38:03.884 | 2026-07-27 01:19:47.827 |
| TXT | google-gws-recovery-domain-verification=62989178 | 2026-05-26 02:38:03.884 | 2026-07-27 01:19:47.827 |
| TXT | knowbe4-site-verification=3eded9e9ea0f63c7a18c1b928f7bee6a | 2026-05-26 02:38:03.884 | 2026-07-27 01:19:47.827 |
| NS | ns4.servers.com | 2026-05-26 02:38:03.884 | 2026-07-27 01:19:47.827 |
| MX | 1 smtp.google.com | 2026-05-26 02:38:03.884 | 2026-07-27 01:19:47.827 |
| TXT | anthropic-domain-verification-vbks8h=ctKx4ShUqnP9DXlQBib6Nq7WK | 2026-05-26 02:38:03.884 | 2026-07-27 01:19:47.827 |
| TXT | rippling-domain-verification=7fc0721cc58d2dd5 | 2026-05-26 02:38:03.884 | 2026-07-27 01:19:47.827 |
| TXT | google-site-verification=XmDK-f2Vtewwm48Ws7wXJO8N73GJdpGkEFh9rtKJNtY | 2026-05-26 02:38:03.884 | 2026-07-27 01:19:47.827 |
| NS | ns3.servers.com | 2026-05-26 02:38:03.884 | 2026-07-27 01:19:47.827 |
| NS | ns1.servers.com | 2026-05-26 02:38:03.884 | 2026-07-27 01:19:47.827 |
| TXT | pardot894561=579dbc509460306b515c805f658367c13a08ec1a2b360fb707aee3688af5ae79 | 2026-05-26 02:38:03.884 | 2026-07-27 01:19:47.827 |
| A | 173.234.133.9 | 2026-05-26 02:38:03.884 | 2026-07-27 01:19:47.827 |
| TXT | v=spf1 mx ip4:173.234.133.16 include:aspmx.pardot.com include:_spf.google.com include:_spf.salesforce.com -all | 2026-05-26 02:38:03.884 | 2026-07-27 01:19:47.827 |