Domain

docs.qq.com

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

DNS Check HTTP Check Run Full Scan .com TLD

Run a live full scan of docs.qq.com

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now

Hosting IPs

A/AAAA targets

Subdomains

—

CT + scan + body

Record Types

seen in DNS

Observed Certs

in our scans

DNS Records

43.159.109.7, 43.174.196.149, 43.174.197.149

AAAA

240d:c010:132:1::2e, 240d:c010:139:1::7a, 240d:c010:15c:1::158, 240d:c010:1fc:2::67, 240d:c010:74:1::51, 240d:c010:77:3::9a, 240d:c010:d9:3::ed

1 mxhk1.qcloudmail.com

ns-cmn1.qq.com, ns-cnc1.qq.com, ns-os1.qq.com, ns-tel1.qq.com

TXT

v=spf1 include:qcloudmail.com ~all

CNAME

—

CAA

—

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Subdomain enumeration pending

Every subdomain ever issued a TLS cert under this apex — extracted from Certificate Transparency logs, our own scan observations and body references.

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

157.255.245.168:443 d106f78efa20…

Subject: *.docs.qq.com

Issuer: DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1

SANs: *.docs.qq.com, *.docx.qq.com, *.txdocs.qq.com, doc.qq.com, docs.qq.com, docs.tencent.com, document.qq.com, documents.qq.com, docx.qq.com, ios-universallink.qq.com, openapi.wxdocs.qq.com, ppt.qq.com, pptx.qq.com, txdoc.qq.com, txdocs.qq.com, txwd.qq.com, wx.openapi.docs.qq.com, wxdocs.qq.com, xls.qq.com, xlsx.qq.com, zxwd.qq.com

43.140.24.20:443 d106f78efa20…

Subject: *.docs.qq.com

Issuer: DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1

157.255.211.23:443 d106f78efa20…

Subject: *.docs.qq.com

Issuer: DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1

IPs Citing This Domain

Hosts whose HTML body references this domain. Strong signal for origin/mirror/embed discovery.

103.105.23.44:443 href · ×69

81.70.199.171:80 href · ×49

154.194.251.90:443 href · ×48

15.204.90.179:443 href · ×40

15.204.90.179:80 href · ×40

122.152.237.247:80 href · ×14

119.45.203.91:80 href · ×12

8.152.223.9:443 href · ×8

111.229.242.224:443 href · ×8

43.128.13.242:443 href · ×8

121.40.247.40:80 href · ×8

103.117.137.12:80 href · ×8

156.239.53.13:443 href · ×7

47.92.238.18:443 href · ×6

117.160.217.188:443 href · ×5

202.140.142.44:443 href · ×5

1.15.246.101:443 href · ×4

81.70.181.124:443 href · ×4

47.116.2.22:443 href · ×4

111.230.60.137:80 href · ×4

101.132.115.190:443 href · ×4

82.156.158.24:443 href · ×4

45.207.196.50:443 href · ×4

47.242.166.6:443 href · ×4

35.212.226.252:443 href · ×4

149.104.1.19:443 href · ×4

8.137.148.48:443 href · ×4

122.51.4.68:80 href · ×4

39.105.119.173:443 href · ×4

103.40.163.244:443 href · ×4

156.225.27.213:443 href · ×4

203.88.125.214:443 href · ×4

154.221.23.93:443 href · ×4

43.155.247.227:443 href · ×4

198.44.176.155:443 href · ×4

110.42.238.26:443 href · ×4

154.201.66.245:80 href · ×4

39.97.251.53:443 href · ×4

101.42.141.176:443 href · ×4

124.221.161.98:80 href · ×4

15.235.172.36:80 href · ×4

1.13.189.103:443 href · ×4

199.165.238.250:443 href · ×4

8.156.92.179:443 href · ×4

103.43.191.86:443 href · ×4

83.229.123.75:443 href · ×4

43.160.215.91:443 href · ×4

43.156.172.199:443 href · ×4

112.74.162.134:80 href · ×4

117.72.174.1:443 href · ×4

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

No origin-IP leaks detected (yet)

Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.

CT-Log Evidence

Certificates from public Certificate Transparency logs whose subject or SAN names this domain — including historic certs we never observed live.

369ee7542c43b7df… google · argon2026h2

Subject: *.docs.qq.com

Issuer: DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1

SANs: *.docs.qq.com, *.docx.qq.com, *.txdocs.qq.com, doc.qq.com, docs.tencent.com, document.qq.com, documents.qq.com, docx.qq.com, ios-universallink.qq.com, openapi.wxdocs.qq.com, ppt.qq.com, pptx.qq.com, txdoc.qq.com, txdocs.qq.com, txwd.qq.com, wx.openapi.docs.qq.com, wxdocs.qq.com, xls.qq.com, xlsx.qq.com, zxwd.qq.com, docs.qq.com

Valid: 2025-10-28 00:00:00 → 2026-11-26 23:59:59

d106f78efa20c945… google · argon2026h2

Subject: *.docs.qq.com

Issuer: DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1

Valid: 2025-10-28 00:00:00 → 2026-11-26 23:59:59

369ee7542c43b7df… cloudflare · nimbus2026

Subject: *.docs.qq.com

Issuer: DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1

Valid: 2025-10-28 00:00:00 → 2026-11-26 23:59:59

d106f78efa20c945… google · xenon2026h2

Subject: *.docs.qq.com

Issuer: DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1

Valid: 2025-10-28 00:00:00 → 2026-11-26 23:59:59

784f081b93e6fc6b… google · argon2026h2

Subject: docs.qq.com

Issuer: DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1

SANs: docs.qq.com, docs.tencent.com

Valid: 2025-10-06 00:00:00 → 2026-11-06 23:59:59

784f081b93e6fc6b… cloudflare · nimbus2026

Subject: docs.qq.com

Issuer: DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1

SANs: docs.qq.com, docs.tencent.com

Valid: 2025-10-06 00:00:00 → 2026-11-06 23:59:59

e4fbdd081904aad5… google · argon2026h2

Subject: *.docs.qq.com

Issuer: DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1

SANs: *.docs.qq.com, docs.qq.com

Valid: 2025-09-22 00:00:00 → 2026-10-23 23:59:59

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.

Type	Value	First seen	Last seen
A	43.159.109.7	2026-05-25 21:54:50.392	2026-06-15 00:54:33.538
AAAA	240d:c010:139:1::7a	2026-05-25 21:54:50.392	2026-07-28 17:49:52.713
AAAA	240d:c010:77:3::9a	2026-05-25 21:54:50.392	2026-06-02 16:14:49.747
MX	1 mxhk1.qcloudmail.com	2026-05-25 22:07:29.493	2026-06-23 04:48:55.666
TXT	v=spf1 include:qcloudmail.com ~all	2026-05-25 22:07:29.493	2026-06-22 11:10:27.669
NS	ns-cnc1.qq.com	2026-05-26 02:30:04.450	2026-05-30 23:47:38.841
NS	ns-tel1.qq.com	2026-05-26 02:30:04.450	2026-05-30 23:47:38.841
NS	ns-os1.qq.com	2026-05-26 02:30:04.450	2026-05-30 23:47:38.841
NS	ns-cmn1.qq.com	2026-05-26 02:30:04.450	2026-05-30 23:47:38.841
AAAA	240d:c010:74:1::51	2026-05-26 04:42:00.586	2026-06-23 21:57:54.231
AAAA	240d:c010:d9:3::ed	2026-06-14 22:36:55.780	2026-07-30 20:03:52.239
AAAA	240d:c010:132:1::2e	2026-06-14 22:36:55.780	2026-07-30 20:03:52.239
AAAA	240d:c010:15c:1::158	2026-06-14 23:07:05.130	2026-06-23 21:57:54.231
AAAA	240d:c010:1fc:2::67	2026-06-14 23:07:05.130	2026-06-23 21:57:54.231
A	43.174.196.149	2026-06-15 06:29:22.894	2026-07-30 20:03:52.239
A	43.174.197.149	2026-07-18 08:49:25.626	2026-07-18 08:49:25.626