Domain

duowan.com

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

DNS Check HTTP Check Run Full Scan .com TLD

Run a live full scan of duowan.com

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now

Hosting IPs

A/AAAA targets

Subdomains

160

CT + scan + body

Record Types

seen in DNS

Observed Certs

in our scans

DNS Records

59.110.82.226

AAAA

—

5 mx01.dm.aliyun.com

ns1.duowanns.com, ns2.duowanns.com, ns3.duowanns.com

TXT

2ch0plktpblgjd86h26fj2bwf1l6d6gv, 305zynlyxhlb682jdq1lxpd19qcpm9mh, 4zqqdy9rb9qm3f0zk9b07g15whydzfb1, 7x559c442qj6j8vd9swbk9v9qh5m5lmm, g43sd11yss2pd1kyrbb2gd4r0wlr28r0, j276bpq8ffncxvf1l0hxlcwjpz9mb9l8, jc5pb49h53pz75q6fyrdxmy633s21hmy, t8f3kf1fzz9h93sv8trs9svmfb7lpfyf

CNAME

—

CAA

—

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.

Subdomain	Resolves to	Last seen
att.bbs.duowan.com	8.159.153.190 8.129.21.235 59.110.82.226	2026-05-26 15:02:14.080
avatar.bbs.duowan.com	8.129.21.235 59.110.82.226 8.159.153.190	2026-05-26 15:02:14.080
cdnresource.duowan.com	8.129.21.235 8.159.153.190 59.110.82.226	2026-07-24 22:35:56.080
dnf.duowan.com	8.159.153.190 59.110.82.226 8.129.21.235	2026-05-26 15:02:14.080
isoda-oss.duowan.com	59.110.82.226 8.159.153.190 8.129.21.235	2026-05-26 15:02:14.080
lol.duowan.com	8.129.21.235 59.110.82.226 8.159.153.190	2026-05-26 15:02:14.080
pic.duowan.com	8.129.21.235 59.110.82.226 8.159.153.190	2026-05-26 15:02:14.080
playapi.v.duowan.com	59.110.82.226 8.159.153.190 8.129.21.235	2026-05-26 15:02:14.080
sea-isoda-oss.duowan.com	59.110.82.226 8.129.21.235 8.159.153.190	2026-05-26 15:02:14.080
sgzs.duowan.com	8.129.21.235 59.110.82.226 8.159.153.190	2026-07-20 05:06:24.057
tool.duowan.com	59.110.82.226 8.159.153.190 8.129.21.235	2026-05-26 15:02:14.080
tu.duowan.com	59.110.82.226 8.159.153.190 8.129.21.235	2026-06-15 00:23:13.348
video.duowan.com	8.129.21.235 8.159.153.190 59.110.82.226	2026-05-26 15:02:14.080
www.duowan.com	59.110.82.226 8.159.153.190 8.129.21.235	2026-07-28 13:42:19.007
yydl.duowan.com	8.159.153.190 8.129.21.235 59.110.82.226	2026-05-26 15:02:14.080
0821001.protina.duowan.com	104.18.217.221 104.18.218.221	2026-07-23 19:48:14.371
0821002.protina.duowan.com	104.18.217.221 104.18.218.221	2026-07-21 00:57:57.749
0823002.protina.duowan.com	104.18.217.221 104.18.218.221	2026-07-24 14:19:37.096
0823005.protina.duowan.com	104.18.218.221 104.18.217.221	2026-06-03 13:08:32.671
1.protina.duowan.com	104.18.218.221 104.18.217.221	2026-06-22 18:44:00.216
11.protina.duowan.com	104.18.218.221 104.18.217.221	2026-07-26 02:14:18.809
14.protina.duowan.com	104.18.218.221 104.18.217.221	2026-06-23 14:07:37.532
3dev.protina.duowan.com	104.18.217.221 104.18.218.221	2026-06-16 16:08:36.771
ai-pt002.protina.duowan.com	104.18.217.221 104.18.218.221	2026-06-24 05:04:17.700
appletoapple.protina.duowan.com	104.18.218.221 104.18.217.221	2026-06-19 03:32:25.859
cf-stg.protina.duowan.com	104.18.217.221 104.18.218.221	2026-07-14 21:27:16.116
elk2.protina.duowan.com	104.18.218.221 104.18.217.221	2026-06-22 19:43:21.972
elk4.protina.duowan.com	104.18.217.221 104.18.218.221	2026-06-22 20:08:35.357
guozewei-sjp-auto.protina.duowan.com	104.18.218.221 104.18.217.221	2026-06-20 10:06:22.898
niki-sg6-prod.protina.duowan.com	104.18.217.221 104.18.218.221	2026-06-15 14:21:29.205
niki-us3-prod.protina.duowan.com	104.18.218.221 104.18.217.221	2026-06-01 15:01:32.429
one24us-1-pro.protina.duowan.com	104.18.218.221 104.18.217.221	2026-06-20 04:43:28.122
one36us-1.protina.duowan.com	104.18.218.221 104.18.217.221	2026-06-20 01:24:05.607
one38sg-2.protina.duowan.com	104.18.217.221 104.18.218.221	2026-06-19 21:55:51.073
rebeka12.protina.duowan.com	104.18.218.221 104.18.217.221	2026-06-19 03:59:00.399
rebeka15.protina.duowan.com	104.18.217.221 104.18.218.221	2026-06-22 03:46:24.000
shoperbuild1.protina.duowan.com	104.18.218.221 104.18.217.221	2026-07-20 11:02:17.624
sqtest.protina.duowan.com	104.18.218.221 104.18.217.221	2026-06-22 22:04:45.034
t2.protina.duowan.com	104.18.217.221 104.18.218.221	2026-07-24 04:12:12.642
tw.jonesair.protina.duowan.com	104.18.217.221 104.18.218.221	2026-06-04 15:47:28.436
xiangzw.protina.duowan.com	104.18.217.221 104.18.218.221	2026-06-16 01:25:22.945
zbh-us.protina.duowan.com	104.18.217.221 104.18.218.221	2026-07-21 17:04:22.645
0823001.protina.duowan.com		1970-01-01 00:00:00.000
0823004.protina.duowan.com		1970-01-01 00:00:00.000
12.protina.duowan.com		1970-01-01 00:00:00.000
1dev.protina.duowan.com		1970-01-01 00:00:00.000
1xinjiapo-1-pre.protina.duowan.com		1970-01-01 00:00:00.000
1xinjiapo-10.protina.duowan.com		1970-01-01 00:00:00.000
1xinjiapo-12.protina.duowan.com		1970-01-01 00:00:00.000
1xinjiapo-2.protina.duowan.com		1970-01-01 00:00:00.000
2dev.protina.duowan.com		1970-01-01 00:00:00.000
4dev.protina.duowan.com		1970-01-01 00:00:00.000
55.protina.duowan.com		1970-01-01 00:00:00.000
7.protina.duowan.com		1970-01-01 00:00:00.000
ada0227.protina.duowan.com		1970-01-01 00:00:00.000
auraix.protina.duowan.com		1970-01-01 00:00:00.000
ceshi02.protina.duowan.com		1970-01-01 00:00:00.000
cf-dev.protina.duowan.com		1970-01-01 00:00:00.000
charm-uitest.protina.duowan.com		1970-01-01 00:00:00.000
db.duowan.com	1.1.1.1	2026-05-26 15:02:14.080
dengyingying.protina.duowan.com		1970-01-01 00:00:00.000
do.yy.duowan.com		1970-01-01 00:00:00.000
downlogo1.yy.duowan.com		1970-01-01 00:00:00.000
downlogo2.yy.duowan.com		1970-01-01 00:00:00.000
downlogo3.yy.duowan.com		1970-01-01 00:00:00.000
downlogo4.yy.duowan.com		1970-01-01 00:00:00.000
downlogo5.yy.duowan.com		1970-01-01 00:00:00.000
downlogo6.yy.duowan.com		1970-01-01 00:00:00.000
duowan.com	59.110.82.226	2026-07-28 09:50:51.502
en-us.dimeflower55.protina.duowan.com		1970-01-01 00:00:00.000
gh.yy.duowan.com		1970-01-01 00:00:00.000
gslb.duowan.com	1.1.1.1	2026-07-28 09:50:51.502
gzw-us-test.protina.duowan.com		1970-01-01 00:00:00.000
gzwtest.protina.duowan.com		1970-01-01 00:00:00.000
hp.proxy.yy.duowan.com		1970-01-01 00:00:00.000
huya.duowan.com		1970-01-01 00:00:00.000
lgj01.protina.duowan.com		1970-01-01 00:00:00.000
lhrpm.protina.duowan.com		1970-01-01 00:00:00.000
liyanda1236776.protina.duowan.com		1970-01-01 00:00:00.000
newgame.duowan.com	1.1.1.1	2026-05-26 08:23:40.752
niki.protina.duowan.com		1970-01-01 00:00:00.000
one1-1-pro.protina.duowan.com		1970-01-01 00:00:00.000
one1-2-pro.protina.duowan.com		1970-01-01 00:00:00.000
one38sg-1.protina.duowan.com		1970-01-01 00:00:00.000
record.vod.duowan.com		1970-01-01 00:00:00.000
res.udb.duowan.com		1970-01-01 00:00:00.000
service.duowan.com	1.1.1.1	2026-07-28 09:50:51.502
static.lolbox.duowan.com		1970-01-01 00:00:00.000
sysop.duowan.com	1.1.1.1	2026-07-28 09:50:51.502
sz.duowan.com		1970-01-01 00:00:00.000
szhuodong.duowan.com	1.1.1.1	2026-07-24 22:35:56.080
t3.protina.duowan.com		1970-01-01 00:00:00.000
t3api-sg.protina.duowan.com		1970-01-01 00:00:00.000
threetest.protina.duowan.com		1970-01-01 00:00:00.000
urlcc.protina.duowan.com		1970-01-01 00:00:00.000
willie11.protina.duowan.com		1970-01-01 00:00:00.000
yanzhenmvp.protina.duowan.com		1970-01-01 00:00:00.000
yy.duowan.com	1.1.1.1	2026-07-27 05:35:02.908

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

47.119.162.187:443 856a2543d5dc…

Subject: joyy.com

Issuer: GeoTrust G2 TLS CN RSA4096 SHA256 2022 CA1

SANs: *.biusq.com, *.duowan.cn, *.duowan.com, *.gslb.duowan.com, *.huanju.cn, *.jocloud.com, *.joyy.com, *.joyyinc.com, *.livemediav.com, *.service.duowan.com, *.sysop.duowan.com, *.zbisq.com, biusq.com, duowan.cn, duowan.com, huanju.cn, jocloud.com, joyy.com, joyyinc.com, livemediav.com, www.joyy.com, zbisq.com

80.225.220.251:443 856a2543d5dc…

Subject: joyy.com

Issuer: GeoTrust G2 TLS CN RSA4096 SHA256 2022 CA1

144.24.124.63:443 856a2543d5dc…

Subject: joyy.com

Issuer: GeoTrust G2 TLS CN RSA4096 SHA256 2022 CA1

47.52.188.119:443 856a2543d5dc…

Subject: joyy.com

Issuer: GeoTrust G2 TLS CN RSA4096 SHA256 2022 CA1

161.118.183.93:443 856a2543d5dc…

Subject: joyy.com

Issuer: GeoTrust G2 TLS CN RSA4096 SHA256 2022 CA1

61.160.35.39:443 75cd2e08c0db…

Subject: yy.com

Issuer: Secure Site CA G2

SANs: *.100.com, *.3g.yy.com, *.3g.yystatic.com, *.4366.com, *.5253.com, *.98809.com, *.biusq.com, *.biuu.com.cn, *.bussopen.com, *.chaseread.com, *.duowan.cn, *.duowan.com, *.dwstatic.com, *.edu24ol.com, *.fengkaobiguo.com, *.girgirapp.com, *.gitio.yy.com, *.gslb.yy.com, *.hamo.tv, *.hqwx.com, *.huanjuxiaodai.com, *.huanjuyun.com, *.huya.com, *.huya.duowan.com, *.ihago.net, *.kaixindou.fun, *.kaixindou.net, *.kxd-pages.yy.com, *.livemediav.com, *.lulubox.com, *.m.yy.com, *.m.yystatic.com, *.moschat.com, *.motouchlink.com, *.msstatic.com, *.myzhiniu.com, *.nickbussok.com, *.noizz.app, *.noizztv.com, *.pvp.yy.com, *.singoktv.com, *.sunclouds.com, *.sysop.duowan.com, *.tomabc.cn, *.tuboshu.com, *.twinkoapp.com, *.vip.yy.com, *.woohooapp.com, *.yaoguo.com, *.yoyiapp.com, *.yy.com, *.yy.duowan.com, *.yyclouds.com, *.yylivecloud.com, *.yyopenapp.com, *.yystatic.com, *.yyxy.com, *.yyyijian.com, *.yyyiling.com, *.zbisq.com, *.zhiniu8.com, 100.com, 4366.com, 5253.com, 98809.com, audit.shenqu.yy.com, biusq.com, biuu.com.cn, bussopen.com, channel.mini.pay.yy.com, chaseread.com, dl1.vip.yystatic.com, duowan.cn, duowan.com, dwstatic.com, edu24ol.com, fengkaobiguo.com, file.do.yy.com, gh.yy.duowan.com, girgirapp.com, hamo.tv, hqwx.com, huanjuxiaodai.com, huanjuyun.com, huya.com, huya.duowan.com, ihago.net, kaixindou.net, kuaikuai.cn, kxd-pages.yy.com, lgn.huanju.cn, lgn.yaoguo.com, lulubox.com, mail.bigo.sg, mail.chinaduo.com, mail.corp.yy.com, mail.engage-capital.com, mini.pay.yy.com, moschat.com, motouchlink.com, myzhiniu.com, nickbussok.com, noizz.app, noizztv.com, record.vod.duowan.com, record.vod.huanjuyun.com, res.co.yystatic.com, res.cont.yy.com, res.home.yystatic.com, res.udb.100.com, res.udb.duowan.com, res1.cont.yy.com, res1.home.yystatic.com, rest.vod.huanjuyun.com, service.xunhuan.yy.com, singoktv.com, tomabc.cn, tuboshu.com, twinkoapp.com, upload.shenqu.yy.com, www.huanjueco.com, www.huanjumedia.com, www.huanjuxiaodai.com, www.jlrzrent.com, www.jxenternet.com, www.jxinsurance.net, www.jxztech.com, www.kaixindou.net, www.rshun.net, www.ruolintech.com, www.yy.com, www.zhiniuasset.com, www.zhiynet.com, yoyiapp.com, yy.com, yy.duowan.com, yyclouds.com, yyopenapp.com, yystatic.com, yyxy.com, yyyiling.com, zbisq.com, zhiniu8.com

129.154.235.248:443 856a2543d5dc…

Subject: joyy.com

Issuer: GeoTrust G2 TLS CN RSA4096 SHA256 2022 CA1

47.115.60.206:443 856a2543d5dc…

Subject: joyy.com

Issuer: GeoTrust G2 TLS CN RSA4096 SHA256 2022 CA1

47.89.246.14:443 856a2543d5dc…

Subject: joyy.com

Issuer: GeoTrust G2 TLS CN RSA4096 SHA256 2022 CA1

147.139.197.25:443 856a2543d5dc…

Subject: joyy.com

Issuer: GeoTrust G2 TLS CN RSA4096 SHA256 2022 CA1

147.139.208.53:443 856a2543d5dc…

Subject: joyy.com

Issuer: GeoTrust G2 TLS CN RSA4096 SHA256 2022 CA1

43.163.53.178:443 856a2543d5dc…

Subject: joyy.com

Issuer: GeoTrust G2 TLS CN RSA4096 SHA256 2022 CA1

8.219.138.224:443 856a2543d5dc…

Subject: joyy.com

Issuer: GeoTrust G2 TLS CN RSA4096 SHA256 2022 CA1

47.254.158.242:443 856a2543d5dc…

Subject: joyy.com

Issuer: GeoTrust G2 TLS CN RSA4096 SHA256 2022 CA1

47.91.97.233:443 856a2543d5dc…

Subject: joyy.com

Issuer: GeoTrust G2 TLS CN RSA4096 SHA256 2022 CA1

43.157.224.246:443 856a2543d5dc…

Subject: joyy.com

Issuer: GeoTrust G2 TLS CN RSA4096 SHA256 2022 CA1

8.215.14.73:443 856a2543d5dc…

Subject: joyy.com

Issuer: GeoTrust G2 TLS CN RSA4096 SHA256 2022 CA1

121.11.220.227:443 856a2543d5dc…

Subject: joyy.com

Issuer: GeoTrust G2 TLS CN RSA4096 SHA256 2022 CA1

47.88.46.233:443 856a2543d5dc…

Subject: joyy.com

Issuer: GeoTrust G2 TLS CN RSA4096 SHA256 2022 CA1

43.129.63.244:443 856a2543d5dc…

Subject: joyy.com

Issuer: GeoTrust G2 TLS CN RSA4096 SHA256 2022 CA1

47.86.42.200:443 856a2543d5dc…

Subject: joyy.com

Issuer: GeoTrust G2 TLS CN RSA4096 SHA256 2022 CA1

47.91.122.38:443 856a2543d5dc…

Subject: joyy.com

Issuer: GeoTrust G2 TLS CN RSA4096 SHA256 2022 CA1

47.90.143.5:443 856a2543d5dc…

Subject: joyy.com

Issuer: GeoTrust G2 TLS CN RSA4096 SHA256 2022 CA1

43.129.63.237:443 856a2543d5dc…

Subject: joyy.com

Issuer: GeoTrust G2 TLS CN RSA4096 SHA256 2022 CA1

47.85.94.174:443 856a2543d5dc…

Subject: joyy.com

Issuer: GeoTrust G2 TLS CN RSA4096 SHA256 2022 CA1

128.1.26.207:443 856a2543d5dc…

Subject: joyy.com

Issuer: GeoTrust G2 TLS CN RSA4096 SHA256 2022 CA1

161.118.167.9:443 856a2543d5dc…

Subject: joyy.com

Issuer: GeoTrust G2 TLS CN RSA4096 SHA256 2022 CA1

47.245.150.201:443 856a2543d5dc…

Subject: joyy.com

Issuer: GeoTrust G2 TLS CN RSA4096 SHA256 2022 CA1

43.163.55.126:443 856a2543d5dc…

Subject: joyy.com

Issuer: GeoTrust G2 TLS CN RSA4096 SHA256 2022 CA1

129.154.241.200:443 856a2543d5dc…

Subject: joyy.com

Issuer: GeoTrust G2 TLS CN RSA4096 SHA256 2022 CA1

IPs Citing This Domain

No citing IPs found yet

As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

Origin IP	Origin ASN	CDN ASN	Confidence	Reasoning
128.1.26.207	AS21859	AS37963	95%	cert 856a2543… served by 128.1.26.207 (AS21859) carries SAN duowan.com which currently resolves through Alibaba (AS37963) at 59.110.82.226
128.1.26.207	AS21859	AS13335	95%	cert 856a2543… served by 128.1.26.207 (AS21859) carries SAN gslb.duowan.com which currently resolves through Cloudflare (AS13335) at 1.1.1.1
161.118.167.9	AS31898	AS37963	95%	cert 856a2543… served by 161.118.167.9 (AS31898) carries SAN duowan.com which currently resolves through Alibaba (AS37963) at 59.110.82.226
161.118.167.9	AS31898	AS13335	95%	cert 856a2543… served by 161.118.167.9 (AS31898) carries SAN gslb.duowan.com which currently resolves through Cloudflare (AS13335) at 1.1.1.1
129.154.241.200	AS31898	AS37963	95%	cert 856a2543… served by 129.154.241.200 (AS31898) carries SAN duowan.com which currently resolves through Alibaba (AS37963) at 59.110.82.226
129.154.241.200	AS31898	AS13335	95%	cert 856a2543… served by 129.154.241.200 (AS31898) carries SAN gslb.duowan.com which currently resolves through Cloudflare (AS13335) at 1.1.1.1
121.11.220.226	AS4134	AS13335	95%	cert 856a2543… served by 121.11.220.226 (AS4134) carries SAN gslb.duowan.com which currently resolves through Cloudflare (AS13335) at 1.1.1.1
121.11.220.226	AS4134	AS37963	95%	cert 856a2543… served by 121.11.220.226 (AS4134) carries SAN duowan.com which currently resolves through Alibaba (AS37963) at 59.110.82.226
144.24.125.195	AS31898	AS13335	95%	cert 856a2543… served by 144.24.125.195 (AS31898) carries SAN gslb.duowan.com which currently resolves through Cloudflare (AS13335) at 1.1.1.1
144.24.125.195	AS31898	AS37963	95%	cert 856a2543… served by 144.24.125.195 (AS31898) carries SAN duowan.com which currently resolves through Alibaba (AS37963) at 59.110.82.226
80.225.202.73	AS31898	AS13335	95%	cert 856a2543… served by 80.225.202.73 (AS31898) carries SAN gslb.duowan.com which currently resolves through Cloudflare (AS13335) at 1.1.1.1
80.225.202.73	AS31898	AS37963	95%	cert 856a2543… served by 80.225.202.73 (AS31898) carries SAN duowan.com which currently resolves through Alibaba (AS37963) at 59.110.82.226
121.11.220.194	AS4134	AS37963	95%	cert 856a2543… served by 121.11.220.194 (AS4134) carries SAN duowan.com which currently resolves through Alibaba (AS37963) at 59.110.82.226
121.11.220.194	AS4134	AS13335	95%	cert 856a2543… served by 121.11.220.194 (AS4134) carries SAN gslb.duowan.com which currently resolves through Cloudflare (AS13335) at 1.1.1.1
129.151.46.199	AS31898	AS37963	95%	cert 856a2543… served by 129.151.46.199 (AS31898) carries SAN duowan.com which currently resolves through Alibaba (AS37963) at 59.110.82.226
129.151.46.199	AS31898	AS13335	95%	cert 856a2543… served by 129.151.46.199 (AS31898) carries SAN gslb.duowan.com which currently resolves through Cloudflare (AS13335) at 1.1.1.1
129.154.248.233	AS31898	AS37963	95%	cert 856a2543… served by 129.154.248.233 (AS31898) carries SAN duowan.com which currently resolves through Alibaba (AS37963) at 59.110.82.226
129.154.248.233	AS31898	AS13335	95%	cert 856a2543… served by 129.154.248.233 (AS31898) carries SAN gslb.duowan.com which currently resolves through Cloudflare (AS13335) at 1.1.1.1
112.25.79.163	AS56046	AS37963	95%	cert 4bb471d0… served by 112.25.79.163 (AS56046) carries SAN cdnresource.duowan.com which currently resolves through Alibaba (AS37963) at 8.159.153.190, 59.110.82.226, 8.129.21.235
112.25.79.163	AS56046	AS13335	95%	cert 4bb471d0… served by 112.25.79.163 (AS56046) carries SAN szhuodong.duowan.com which currently resolves through Cloudflare (AS13335) at 1.1.1.1
129.154.235.187	AS31898	AS13335	95%	cert 856a2543… served by 129.154.235.187 (AS31898) carries SAN gslb.duowan.com which currently resolves through Cloudflare (AS13335) at 1.1.1.1
129.154.235.187	AS31898	AS37963	95%	cert 856a2543… served by 129.154.235.187 (AS31898) carries SAN duowan.com which currently resolves through Alibaba (AS37963) at 59.110.82.226
80.225.212.234	AS31898	AS13335	95%	cert 856a2543… served by 80.225.212.234 (AS31898) carries SAN gslb.duowan.com which currently resolves through Cloudflare (AS13335) at 1.1.1.1
80.225.212.234	AS31898	AS37963	95%	cert 856a2543… served by 80.225.212.234 (AS31898) carries SAN duowan.com which currently resolves through Alibaba (AS37963) at 59.110.82.226
80.225.205.16	AS31898	AS37963	95%	cert 856a2543… served by 80.225.205.16 (AS31898) carries SAN duowan.com which currently resolves through Alibaba (AS37963) at 59.110.82.226

CT-Log Evidence

Certificates from public Certificate Transparency logs whose subject or SAN names this domain — including historic certs we never observed live.

856a2543d5dc1701… google · argon2026h2

Subject: joyy.com

Issuer: GeoTrust G2 TLS CN RSA4096 SHA256 2022 CA1

SANs: joyy.com, biusq.com, duowan.cn, duowan.com, jocloud.com, joyyinc.com, livemediav.com, zbisq.com, huanju.cn, *.joyy.com, *.biusq.com, *.duowan.cn, *.duowan.com, *.gslb.duowan.com, *.jocloud.com, *.joyyinc.com, *.livemediav.com, *.service.duowan.com, *.sysop.duowan.com, *.zbisq.com, *.huanju.cn, www.joyy.com

Valid: 2025-09-11 00:00:00 → 2026-09-26 23:59:59

856a2543d5dc1701… cloudflare · nimbus2026

Subject: joyy.com

Issuer: GeoTrust G2 TLS CN RSA4096 SHA256 2022 CA1

Valid: 2025-09-11 00:00:00 → 2026-09-26 23:59:59

8b540e81af2fbc87… google · argon2026h2

Subject: joyy.com

Issuer: GeoTrust G2 TLS CN RSA4096 SHA256 2022 CA1

Valid: 2025-09-11 00:00:00 → 2026-09-26 23:59:59

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.

Type	Value	First seen	Last seen
A	59.110.82.226	2026-05-25 21:54:03.363	2026-07-28 09:50:51.502
TXT	v=spf1 ip4:183.36.124.0/24 ip4:103.227.122.147 ip4:103.227.122.179 ip4:58.215.101.248 include:spf1.dm.aliyun.com -all	2026-05-26 03:41:45.201	2026-07-28 09:50:51.502
TXT	4zqqdy9rb9qm3f0zk9b07g15whydzfb1	2026-05-26 03:41:45.201	2026-07-28 09:50:51.502
TXT	jc5pb49h53pz75q6fyrdxmy633s21hmy	2026-05-26 03:41:45.201	2026-07-28 09:50:51.502
TXT	2ch0plktpblgjd86h26fj2bwf1l6d6gv	2026-05-26 03:41:45.201	2026-07-28 09:50:51.502
TXT	j276bpq8ffncxvf1l0hxlcwjpz9mb9l8	2026-05-26 03:41:45.201	2026-07-28 09:50:51.502
NS	ns2.duowanns.com	2026-05-26 03:41:45.201	2026-07-28 09:50:51.502
TXT	305zynlyxhlb682jdq1lxpd19qcpm9mh	2026-05-26 03:41:45.201	2026-07-28 09:50:51.502
NS	ns3.duowanns.com	2026-05-26 03:41:45.201	2026-07-28 09:50:51.502
NS	ns1.duowanns.com	2026-05-26 03:41:45.201	2026-07-28 09:50:51.502
TXT	7x559c442qj6j8vd9swbk9v9qh5m5lmm	2026-05-26 03:41:45.201	2026-07-28 09:50:51.502
TXT	t8f3kf1fzz9h93sv8trs9svmfb7lpfyf	2026-05-26 03:41:45.201	2026-07-28 09:50:51.502
TXT	g43sd11yss2pd1kyrbb2gd4r0wlr28r0	2026-05-26 03:41:45.201	2026-07-28 09:50:51.502
MX	5 mx01.dm.aliyun.com	2026-05-26 03:41:45.201	2026-07-28 09:50:51.502