dingtalkcloud.com
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of dingtalkcloud.com
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
DNS Records
WHOIS / Registration
Registration data planned
Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.
Subdomains
Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.
| Subdomain | Resolves to | Last seen |
|---|---|---|
| app118614.eapps.dingtalkcloud.com | 2026-07-26 13:54:41.280 | |
| app118505.eapps.dingtalkcloud.com | 2026-07-25 22:13:23.157 | |
| app122159.eapps.dingtalkcloud.com | 2026-07-28 20:39:29.599 | |
| app16962.eapps.dingtalkcloud.com | 2026-07-25 22:13:23.157 | |
| app43923.eapps.dingtalkcloud.com | 2026-07-28 11:44:59.719 | |
| app48514.eapps.dingtalkcloud.com | 2026-07-28 11:44:59.719 | |
| app4860.eapps.dingtalkcloud.com | 2026-07-27 22:19:16.199 | |
| app58920.eapps.dingtalkcloud.com | 2026-07-28 04:25:08.220 | |
| app73960.eapps.dingtalkcloud.com | 2026-07-24 04:03:48.161 | |
| app87100.eapps.dingtalkcloud.com | 2026-07-28 15:23:59.929 | |
| app74937.eapps.dingtalkcloud.com | 2026-05-27 04:14:48.202 | |
| app87328.eapps.dingtalkcloud.com | 2026-07-23 16:52:54.300 | |
| app117466.eapps.dingtalkcloud.com | 1970-01-01 00:00:00.000 | |
| app75554.eapps.dingtalkcloud.com | 1970-01-01 00:00:00.000 | |
| dingtalkcloud.com | 1970-01-01 00:00:00.000 | |
| eapps.dingtalkcloud.com | 1970-01-01 00:00:00.000 | |
| yjf.eapps.dingtalkcloud.com | 1970-01-01 00:00:00.000 |
Tech Stack
Tech detection pending
Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.
TLS Certificates
IPs Citing This Domain
No citing IPs found yet
As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.
Origin / IP-Leak
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
| Origin IP | Origin ASN | CDN ASN | Confidence | Reasoning |
|---|---|---|---|---|
| 117.185.238.22 | AS9808 | AS37963 | 95% | cert ad96d518… served by 117.185.238.22 (AS9808) carries SAN app4860.eapps.dingtalkcloud.com which currently resolves through Alibaba (AS37963) at 115.227.40.70, 2400:3200:1300::17ba, 2400:3200:1300::1174, 112.124.55.42 |
| 180.163.56.169 | AS4811 | AS37963 | 95% | cert 078f7533… served by 180.163.56.169 (AS4811) carries SAN app73960.eapps.dingtalkcloud.com which currently resolves through Alibaba (AS37963) at 106.8.130.147, 2408:4001:f30::37, 2408:4001:f30::286, 39.100.77.166 |
| 111.63.171.44 | AS24547 | AS37963 | 95% | cert 078f7533… served by 111.63.171.44 (AS24547) carries SAN app73960.eapps.dingtalkcloud.com which currently resolves through Alibaba (AS37963) at 106.8.130.147, 2408:4001:f30::286, 2408:4001:f30::37, 39.100.83.230 |
| 150.139.148.78 | AS136195 | AS37963 | 95% | cert d1cd51fe… served by 150.139.148.78 (AS136195) carries SAN app58920.eapps.dingtalkcloud.com which currently resolves through Alibaba (AS37963) at 106.8.130.147, 2408:4001:f30::286, 2408:4001:f30::37, 39.100.83.230 |
| 112.19.194.26 | AS139080 | AS37963 | 95% | cert 078f7533… served by 112.19.194.26 (AS139080) carries SAN app73960.eapps.dingtalkcloud.com which currently resolves through Alibaba (AS37963) at 106.8.130.147, 2408:4001:f30::286, 2408:4001:f30::37, 39.100.83.230 |
| 182.40.70.251 | AS58540 | AS37963 | 95% | cert 92ba9b18… served by 182.40.70.251 (AS58540) carries SAN app87100.eapps.dingtalkcloud.com which currently resolves through Alibaba (AS37963) at 106.8.130.147, 2408:4001:f30::286, 2408:4001:f30::37, 39.100.83.230 |
| 120.241.6.255 | AS9808 | AS37963 | 95% | cert a2aeaacc… served by 120.241.6.255 (AS9808) carries SAN app118505.eapps.dingtalkcloud.com which currently resolves through Alibaba (AS37963) at 115.227.40.70, 2400:3200:1300::17ba, 2400:3200:1300::1174, 112.124.59.75 |
| 111.63.213.46 | AS24547 | AS37963 | 95% | cert 92ba9b18… served by 111.63.213.46 (AS24547) carries SAN app87100.eapps.dingtalkcloud.com which currently resolves through Alibaba (AS37963) at 106.8.130.147, 2408:4001:f30::37, 2408:4001:f30::286, 39.100.77.166 |
| 120.221.28.210 | AS9808 | AS37963 | 95% | cert 92ba9b18… served by 120.221.28.210 (AS9808) carries SAN app87100.eapps.dingtalkcloud.com which currently resolves through Alibaba (AS37963) at 106.8.130.147, 2408:4001:f30::37, 2408:4001:f30::286, 39.100.77.166 |
| 123.6.132.17 | AS4837 | AS37963 | 95% | cert 078f7533… served by 123.6.132.17 (AS4837) carries SAN app73960.eapps.dingtalkcloud.com which currently resolves through Alibaba (AS37963) at 106.8.130.147, 2408:4001:f30::286, 2408:4001:f30::37, 39.100.83.230 |
| 112.19.192.188 | AS139080 | AS37963 | 95% | cert e42cba6a… served by 112.19.192.188 (AS139080) carries SAN app43923.eapps.dingtalkcloud.com which currently resolves through Alibaba (AS37963) at 115.227.40.70, 2400:3200:1300::17ba, 2400:3200:1300::1174, 112.124.55.42 |
| 223.109.32.117 | AS56046 | AS37963 | 95% | cert e42cba6a… served by 223.109.32.117 (AS56046) carries SAN app43923.eapps.dingtalkcloud.com which currently resolves through Alibaba (AS37963) at 115.227.40.70, 2400:3200:1300::17ba, 2400:3200:1300::1174, 112.124.55.42 |
| 182.40.70.228 | AS58540 | AS37963 | 95% | cert a2aeaacc… served by 182.40.70.228 (AS58540) carries SAN app118505.eapps.dingtalkcloud.com which currently resolves through Alibaba (AS37963) at 115.227.40.70, 2400:3200:1300::17ba, 2400:3200:1300::1174, 112.124.59.75 |
| 223.109.149.20 | AS56046 | AS37963 | 95% | cert ad96d518… served by 223.109.149.20 (AS56046) carries SAN app4860.eapps.dingtalkcloud.com which currently resolves through Alibaba (AS37963) at 115.227.40.70, 2400:3200:1300::1174, 2400:3200:1300::17ba, 112.124.55.42 |
| 124.236.32.128 | AS4134 | AS37963 | 95% | cert ad96d518… served by 124.236.32.128 (AS4134) carries SAN app4860.eapps.dingtalkcloud.com which currently resolves through Alibaba (AS37963) at 115.227.40.70, 2400:3200:1300::1174, 2400:3200:1300::17ba, 112.124.55.42 |
| 124.236.32.128 | AS4134 | AS37963 | 95% | cert d1cd51fe… served by 124.236.32.128 (AS4134) carries SAN app58920.eapps.dingtalkcloud.com which currently resolves through Alibaba (AS37963) at 106.8.130.147, 2408:4001:f30::286, 2408:4001:f30::37, 39.100.77.166 |
| 116.132.186.34 | AS4837 | AS37963 | 95% | cert d1cd51fe… served by 116.132.186.34 (AS4837) carries SAN app58920.eapps.dingtalkcloud.com which currently resolves through Alibaba (AS37963) at 106.8.130.147, 2408:4001:f30::286, 2408:4001:f30::37, 39.100.77.166 |
| 111.62.190.22 | AS24547 | AS37963 | 95% | cert d1cd51fe… served by 111.62.190.22 (AS24547) carries SAN app58920.eapps.dingtalkcloud.com which currently resolves through Alibaba (AS37963) at 106.8.130.147, 2408:4001:f30::286, 2408:4001:f30::37, 39.100.83.230 |
| 223.76.113.189 | AS9808 | AS37963 | 95% | cert a2aeaacc… served by 223.76.113.189 (AS9808) carries SAN app118505.eapps.dingtalkcloud.com which currently resolves through Alibaba (AS37963) at 115.227.40.70, 2400:3200:1300::17ba, 2400:3200:1300::1174, 112.124.59.75 |
| 183.60.25.101 | AS4134 | AS37963 | 95% | cert d1cd51fe… served by 183.60.25.101 (AS4134) carries SAN app58920.eapps.dingtalkcloud.com which currently resolves through Alibaba (AS37963) at 106.8.130.147, 2408:4001:f30::286, 2408:4001:f30::37, 39.100.83.230 |
| 101.226.36.248 | AS4811 | AS37963 | 95% | cert e2d11adf… served by 101.226.36.248 (AS4811) carries SAN app122159.eapps.dingtalkcloud.com which currently resolves through Alibaba (AS37963) at 115.227.40.70, 2400:3200:1300::1174, 2400:3200:1300::17ba, 112.124.55.42 |
| 106.8.129.92 | AS4134 | AS37963 | 95% | cert e42cba6a… served by 106.8.129.92 (AS4134) carries SAN app43923.eapps.dingtalkcloud.com which currently resolves through Alibaba (AS37963) at 115.227.40.70, 2400:3200:1300::17ba, 2400:3200:1300::1174, 112.124.55.42 |
| 140.249.62.207 | AS136195 | AS37963 | 95% | cert e42cba6a… served by 140.249.62.207 (AS136195) carries SAN app43923.eapps.dingtalkcloud.com which currently resolves through Alibaba (AS37963) at 115.227.40.70, 2400:3200:1300::17ba, 2400:3200:1300::1174, 112.124.55.42 |
| 183.204.233.21 | AS9808 | AS37963 | 95% | cert 078f7533… served by 183.204.233.21 (AS9808) carries SAN app73960.eapps.dingtalkcloud.com which currently resolves through Alibaba (AS37963) at 106.8.130.147, 2408:4001:f30::286, 2408:4001:f30::37, 39.100.77.166 |
| 101.226.36.174 | AS4811 | AS37963 | 95% | cert d1cd51fe… served by 101.226.36.174 (AS4811) carries SAN app58920.eapps.dingtalkcloud.com which currently resolves through Alibaba (AS37963) at 106.8.130.147, 2408:4001:f30::286, 2408:4001:f30::37, 39.100.83.230 |
Threat Intelligence
Domain threat-intel pending
Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.
History
Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.
| Type | Value | First seen | Last seen |
|---|---|---|---|
| NS | ns1.alibabadns.com | 2026-05-26 21:52:25.161 | 2026-07-28 13:22:58.632 |
| TXT | _globalsign-domain-verification=h2QG6g3XsJmKH_dfdwhJlp8S0oC7CUqn6GddgP9IiU | 2026-05-26 21:52:25.161 | 2026-06-15 10:00:35.240 |
| TXT | _globalsign-domain-verification=3QuyLdCFeeVdJy2x_q-JWNG5rzctvV2nUQF0fzjngp | 2026-05-26 21:52:25.161 | 2026-06-15 10:00:35.240 |
| NS | ns2.alibabadns.com | 2026-05-26 21:52:25.161 | 2026-07-28 13:22:58.632 |
| TXT | _globalsign-domain-verification=rRD5bRpyS0pzueXMPyffZTH_pv4P1448dzs7qRpl5E | 2026-05-26 21:52:25.161 | 2026-06-15 10:00:35.240 |
| TXT | _globalsign-domain-verification=8yXlIjKzcgm3AzBvKa8HEzdZXEr1voUlaL7d3_3mAl | 2026-07-17 11:20:41.428 | 2026-07-27 05:24:57.878 |
| TXT | _globalsign-domain-verification=gIkeYgymwlecrVfL-JwHGPiBris21u6wyPt1RK4QJ5 | 2026-07-28 13:22:58.632 | 2026-07-28 13:22:58.632 |