Domain
ua.com
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of ua.com
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
Hosting IPs
129
A/AAAA targets
Subdomains
21
CT + scan + body
Record Types
5
seen in DNS
Observed Certs
5
in our scans
DNS Records
A
146.75.29.91, 151.101.17.91
AAAA
—
MX
0 ua-com.mail.protection.outlook.com
NS
ns10.dnsmadeeasy.com, ns11.dnsmadeeasy.com, ns12.dnsmadeeasy.com, ns13.dnsmadeeasy.com, ns14.dnsmadeeasy.com, ns15.dnsmadeeasy.com
TXT
9DdqACTWDnoKi5LSwVeLwqNm1PxfRMDRCZ4SUPRZQ4iNwQn+FfdCkB4xEC3j1z1TUx7NbNFSMMjzlSaQJw5n2g==, MS=ms17390637, apple-domain-verification=UZa5ckzBUiP5KPa0, facebook-domain-verification=ui9r2bgwh8o4kurtviq6o1jpxy1wb8, google-site-verification=jQifk0UPXxnFUMeRcR87o5fyBmv_w0w-GML219vXB_E, have-i-been-pwned-verification=243e68d7e85525bcdebedd488795f0d0, v=spf1 include:spf.protection.outlook.com -all
CNAME
—
CAA
0 issue "amazon.com", 0 issue "amazonaws.com", 0 issue "amazontrust.com", 0 issue "awstrust.com", 0 issue "certainly.com", 0 issue "letsencrypt.org", 0 issuewild "amazon.com", 0 issuewild "amazonaws.com"
WHOIS / Registration
Registration data planned
Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.
Subdomains
Subdomain enumeration pending
Every subdomain ever issued a TLS cert under this apex — extracted from Certificate Transparency logs, our own scan observations and body references.
Tech Stack
Tech detection pending
Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.
TLS Certificates
Subject: *.ivalua.com
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: *.ivalua.com, ivalua.com
Subject: osnova-ua.com
Issuer: YR1
SANs: *.osnova-ua.com, osnova-ua.com
Subject: 2qinghua.com
Issuer: YR2
SANs: 2qinghua.com, www.2qinghua.com
Subject: itgua.com
Issuer: YR1
SANs: itgua.com
Subject: *.zhixianghua.com
Issuer: WoTrus DV Server CA [Run by the Issuer]
SANs: *.zhixianghua.com, zhixianghua.com
Subject: *.chonghua.com.ph
Issuer: Go Daddy Secure Certificate Authority - G2
SANs: *.chonghua.com.ph, chonghua.com.ph
Subject: zsjt.zelinyihua.com
Issuer: Encryption Everywhere DV TLS CA - G2
SANs: www.zsjt.zelinyihua.com, zsjt.zelinyihua.com
Subject: mesua.com
Issuer: YR2
SANs: mesua.com, www.mesua.com
Subject: *.hs.eloqua.com
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: *.hs.eloqua.com
Subject: *.cloud-dahua.com
Issuer: Dahua Subordinate CA
SANs: *.cloud-dahua.com
Subject: *.cloud-dahua.com
Issuer: GlobalSign GCC R3 DV TLS CA 2020
SANs: *.cloud-dahua.com, cloud-dahua.com
Subject: home.jialianlishua.com
Issuer: Encryption Everywhere DV TLS CA - G1
SANs: home.jialianlishua.com
Subject: pickaqua.com
Issuer: YR1
SANs: *.pickaqua.com, pickaqua.com
Subject: *.meijiaohua.com.cn
Issuer: Certum DV TLS G2 R39 CA
SANs: *.meijiaohua.com.cn, meijiaohua.com.cn
Subject: yunduanyinghua.com
Issuer: Encryption Everywhere DV TLS CA - G2
SANs: www.yunduanyinghua.com, yunduanyinghua.com
Subject: *.runshihua.com
Issuer: Xcc Trust OV SSL CA
SANs: *.runshihua.com, runshihua.com
Subject: itgua.com
Issuer: YR1
SANs: itgua.com
Subject: *.baigua.com
Issuer: Xcc Trust DV SSL CA
SANs: *.baigua.com, baigua.com
Subject: itgua.com
Issuer: YR1
SANs: itgua.com
Subject: *.fpua.com
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: *.fpua.com, fpua.com
Subject: *.eloqua.com
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: *.eloqua.com, eloqua.com
Subject: vbtua.com
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: vbtua.com, www.vbtua.com
Subject: chichaowenhua.com
Issuer: Encryption Everywhere DV TLS CA - G2
SANs: chichaowenhua.com, www.chichaowenhua.com
Subject: mail.masymejoragua.com
Issuer: WR3
SANs: mail.masymejoragua.com
Subject: *.t.eloqua.com
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: *.t.eloqua.com
Subject: hmp.nitangwenhua.com
Issuer: Encryption Everywhere DV TLS CA - G2
SANs: hmp.nitangwenhua.com
Subject: itgua.com
Issuer: YR1
SANs: itgua.com
Subject: uat.promocaovaiqueesua.com.br
Issuer: YR2
SANs: uat.promocaovaiqueesua.com.br
Subject: app.bmanhua.com
Issuer: YR1
SANs: app.bmanhua.com
Subject: *.dabowenhua.com
Issuer: YR1
SANs: *.dabowenhua.com, dabowenhua.com
IPs Citing This Domain
No citing IPs found yet
As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.
Origin / IP-Leak
USP
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
No origin-IP leaks detected (yet)
Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.
Threat Intelligence
Domain threat-intel pending
Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.
History
Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.
| Type | Value | First seen | Last seen |
|---|---|---|---|
| CAA | 0 issuewild "amazontrust.com" | 2026-06-15 00:07:36.295 | 2026-07-15 20:04:13.980 |
| CAA | 0 issuewild "certainly.com" | 2026-06-15 00:07:36.295 | 2026-07-15 20:04:13.980 |
| TXT | have-i-been-pwned-verification=243e68d7e85525bcdebedd488795f0d0 | 2026-06-15 00:07:36.295 | 2026-07-15 20:04:13.980 |
| CAA | 0 issuewild "awstrust.com" | 2026-06-15 00:07:36.295 | 2026-07-15 20:04:13.980 |
| TXT | apple-domain-verification=UZa5ckzBUiP5KPa0 | 2026-06-15 00:07:36.295 | 2026-07-15 20:04:13.980 |
| CAA | 0 issuewild "amazon.com" | 2026-06-15 00:07:36.295 | 2026-07-15 20:04:13.980 |
| NS | ns15.dnsmadeeasy.com | 2026-06-15 00:07:36.295 | 2026-07-15 20:04:13.980 |
| TXT | v=spf1 include:spf.protection.outlook.com -all | 2026-06-15 00:07:36.295 | 2026-07-15 20:04:13.980 |
| TXT | MS=ms17390637 | 2026-06-15 00:07:36.295 | 2026-07-15 20:04:13.980 |
| CAA | 0 issue "certainly.com" | 2026-06-15 00:07:36.295 | 2026-07-15 20:04:13.980 |
| TXT | 9DdqACTWDnoKi5LSwVeLwqNm1PxfRMDRCZ4SUPRZQ4iNwQn+FfdCkB4xEC3j1z1TUx7NbNFSMMjzlSaQJw5n2g== | 2026-06-15 00:07:36.295 | 2026-07-15 20:04:13.980 |
| CAA | 0 issue "amazon.com" | 2026-06-15 00:07:36.295 | 2026-07-15 20:04:13.980 |
| NS | ns14.dnsmadeeasy.com | 2026-06-15 00:07:36.295 | 2026-07-15 20:04:13.980 |
| CAA | 0 issue "amazonaws.com" | 2026-06-15 00:07:36.295 | 2026-07-15 20:04:13.980 |
| NS | ns12.dnsmadeeasy.com | 2026-06-15 00:07:36.295 | 2026-07-15 20:04:13.980 |
| CAA | 0 issuewild "amazonaws.com" | 2026-06-15 00:07:36.295 | 2026-07-15 20:04:13.980 |
| TXT | google-site-verification=jQifk0UPXxnFUMeRcR87o5fyBmv_w0w-GML219vXB_E | 2026-06-15 00:07:36.295 | 2026-07-15 20:04:13.980 |
| NS | ns13.dnsmadeeasy.com | 2026-06-15 00:07:36.295 | 2026-07-15 20:04:13.980 |
| CAA | 0 issue "amazontrust.com" | 2026-06-15 00:07:36.295 | 2026-07-15 20:04:13.980 |
| CAA | 0 issue "awstrust.com" | 2026-06-15 00:07:36.295 | 2026-07-15 20:04:13.980 |
| MX | 0 ua-com.mail.protection.outlook.com | 2026-06-15 00:07:36.295 | 2026-07-15 20:04:13.980 |
| NS | ns10.dnsmadeeasy.com | 2026-06-15 00:07:36.295 | 2026-07-15 20:04:13.980 |
| CAA | 0 issuewild "letsencrypt.org" | 2026-06-15 00:07:36.295 | 2026-07-15 20:04:13.980 |
| TXT | facebook-domain-verification=ui9r2bgwh8o4kurtviq6o1jpxy1wb8 | 2026-06-15 00:07:36.295 | 2026-07-15 20:04:13.980 |
| CAA | 0 issue "letsencrypt.org" | 2026-06-15 00:07:36.295 | 2026-07-15 20:04:13.980 |
| NS | ns11.dnsmadeeasy.com | 2026-06-15 00:07:36.295 | 2026-07-15 20:04:13.980 |
| A | 151.101.17.91 | 2026-06-15 00:07:36.295 | 2026-06-15 00:07:36.295 |
| A | 146.75.29.91 | 2026-07-15 20:04:13.980 | 2026-07-15 20:04:13.980 |