Domain
com.ec
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of com.ec
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
Hosting IPs
—
A/AAAA targets
Subdomains
—
CT + scan + body
Record Types
—
seen in DNS
Observed Certs
—
in our scans
DNS Records
A
—
AAAA
—
MX
—
NS
—
TXT
—
CNAME
—
CAA
—
WHOIS / Registration
Registration data planned
Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.
Subdomains
Subdomain enumeration pending
Every subdomain ever issued a TLS cert under this apex — extracted from Certificate Transparency logs, our own scan observations and body references.
Tech Stack
Tech detection pending
Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.
TLS Certificates
Subject: vpnssl2.tigo.com.ec
Issuer: GeoTrust TLS RSA CA G1
SANs: vpnssl2.tigo.com.ec
Subject: api.entodositio.com.ec
Issuer: YE2
SANs: api.entodositio.com.ec
Subject: *.setendt.com.ec
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.setendt.com.ec, setendt.com.ec
Subject: www.equifax.com.ec
Issuer: Sectigo RSA Extended Validation Secure Server CA
SANs: equifax.com.ec, equifaxanalytics.com.ec, test.equifax.com.ec, test.equifaxanalytics.com.ec, www.equifax.com.ec, www.equifaxanalytics.com.ec
Subject: masabrazos.com.ec
Issuer: YE2
SANs: masabrazos.com.ec
Subject: api.james.com.ec
Issuer: YR1
SANs: api.james.com.ec, portal.james.com.ec
Subject: www.bancasinhorarios.com.ec
Issuer: DigiCert EV RSA CA G2
SANs: bancasinhorarios.com.ec, www.bancasinhorarios.com.ec
Subject: www.equifax.com.ec
Issuer: Sectigo RSA Extended Validation Secure Server CA
SANs: equifax.com.ec, equifaxanalytics.com.ec, test.equifax.com.ec, test.equifaxanalytics.com.ec, www.equifax.com.ec, www.equifaxanalytics.com.ec
Subject: aulavirtualbdp.educacionfinanciera.com.ec
Issuer: YE2
SANs: aulavirtualbdp.educacionfinanciera.com.ec
Subject: moodlejb.jbp.com.ec
Issuer: FGT90GTK23001068
SANs: moodlejb.jbp.com.ec
Subject: rastreo.bclick.com.ec
Issuer: YE1
SANs: rastreo.bclick.com.ec
Subject: creditia.com.ec
Issuer: GoGetSSL RSA DV CA
SANs: creditia.com.ec, www.creditia.com.ec
Subject: coberturas.claro.com.ec
Issuer: GlobalSign RSA OV SSL CA 2018
SANs: coberturas.claro.com.ec
Subject: *.sistec.com.ec
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.sistec.com.ec, sistec.com.ec
Subject: autoeastern.com.ec
Issuer: YE2
SANs: autoeastern.com.ec, www.autoeastern.com.ec
Subject: *.instaticket.com.ec
Issuer: Sectigo RSA Domain Validation Secure Server CA
SANs: *.instaticket.com.ec, instaticket.com.ec
Subject: bumultimedia.com.ec
Issuer: YE2
SANs: bumultimedia.com.ec, www.bumultimedia.com.ec
Subject: www.equifax.com.ec
Issuer: Sectigo RSA Extended Validation Secure Server CA
SANs: equifax.com.ec, equifaxanalytics.com.ec, test.equifax.com.ec, test.equifaxanalytics.com.ec, www.equifax.com.ec, www.equifaxanalytics.com.ec
Subject: speedtest.conexiontotal.com.ec
Issuer: E7
SANs: speedtest.conexiontotal.com.ec
Subject: *.autoeastern.com.ec
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.autoeastern.com.ec, autoeastern.com.ec
Subject: srv.cineplex.com.ec
Issuer: YR1
SANs: srv.cineplex.com.ec
Subject: vpngye.dinersclub.com.ec
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: vpngye.dinersclub.com.ec
Subject: *.almesa.com.ec
Issuer: GeoTrust TLS RSA CA G1
SANs: *.almesa.com.ec, almesa.com.ec
Subject: mail.electrofertas.com.ec
Issuer: mail.electrofertas.com.ec
SANs: mail.electrofertas.com.ec
Subject: dole.com.ec
Issuer: dole.com.ec
SANs: dole.com.ec
Subject: sistema.printalo.com.ec
Issuer: YR2
SANs: sistema.printalo.com.ec
Subject: *.tia.com.ec
Issuer: GoGetSSL RSA DV SSL CA 2
SANs: *.tia.com.ec, tia.com.ec
Subject: portalmpos.claro.com.ec
Issuer: GlobalSign RSA OV SSL CA 2018
SANs: portalmpos.claro.com.ec
Subject: mvp.com.ec
Issuer: YR1
SANs: *.mvp.com.ec, mvp.com.ec
Subject: *.sisofia.com.ec
Issuer: RapidSSL TLS RSA CA G1
SANs: *.sisofia.com.ec, sisofia.com.ec
IPs Citing This Domain
No citing IPs found yet
As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.
Origin / IP-Leak
USP
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
| Origin IP | Origin ASN | CDN ASN | Confidence | Reasoning |
|---|---|---|---|---|
| 190.63.202.27 | AS23487 | AS8075 | 95% | cert e27c0f72… served by 190.63.202.27 (AS23487) carries SAN fertisaagif.com.ec which currently resolves through Microsoft (AS8075) at 52.224.202.0 |
| 80.79.123.107 | AS34702 | AS54113 | 95% | cert 2e69232e… served by 80.79.123.107 (AS34702) carries SAN pinterest.com.ec which currently resolves through Fastly (AS54113) at 151.101.64.84, 151.101.128.84, 151.101.192.84, 151.101.0.84 |
| 134.209.83.160 | AS14061 | AS54113 | 95% | cert 2e69232e… served by 134.209.83.160 (AS14061) carries SAN pinterest.com.ec which currently resolves through Fastly (AS54113) at 151.101.64.84, 151.101.128.84, 151.101.192.84, 151.101.0.84 |
| 2.17.229.56 | AS9121 | AS8075 | 95% | cert 41ca0a1c… served by 2.17.229.56 (AS9121) carries SAN avon.com.ec which currently resolves through Microsoft (AS8075) at 13.89.172.8 |
| 45.182.119.15 | AS269790 | AS16509 | 95% | cert 175f066a… served by 45.182.119.15 (AS269790) carries SAN edunica.com.ec which currently resolves through Amazon (AS16509) at 44.207.178.115, 34.237.38.167, 54.173.168.222, 98.90.83.1 |
| 23.39.90.159 | AS45758 | AS16509 | 95% | cert 0eeaab8e… served by 23.39.90.159 (AS45758) carries SAN enfabebe.com.ec which currently resolves through Amazon (AS16509) at 52.50.117.61 |
| 96.16.127.16 | AS38040 | AS8075 | 95% | cert 41ca0a1c… served by 96.16.127.16 (AS38040) carries SAN avon.com.ec which currently resolves through Microsoft (AS8075) at 13.89.172.8 |
| 42.125.200.234 | AS10010 | AS54113 | 95% | cert c38e9689… served by 42.125.200.234 (AS10010) carries SAN pinterest.com.ec which currently resolves through Fastly (AS54113) at 151.101.64.84, 151.101.128.84, 151.101.192.84, 151.101.0.84 |
| 139.175.165.32 | AS4780 | AS54113 | 95% | cert c38e9689… served by 139.175.165.32 (AS4780) carries SAN pinterest.com.ec which currently resolves through Fastly (AS54113) at 151.101.64.84, 151.101.128.84, 151.101.192.84, 151.101.0.84 |
| 45.84.123.123 | AS9009 | AS54113 | 95% | cert 2e69232e… served by 45.84.123.123 (AS9009) carries SAN pinterest.com.ec which currently resolves through Fastly (AS54113) at 151.101.64.84, 151.101.128.84, 151.101.192.84, 151.101.0.84 |
| 193.118.59.112 | AS21859 | AS54113 | 95% | cert 2e69232e… served by 193.118.59.112 (AS21859) carries SAN pinterest.com.ec which currently resolves through Fastly (AS54113) at 151.101.64.84, 151.101.128.84, 151.101.192.84, 151.101.0.84 |
| 104.85.150.172 | AS55836 | AS16625 | 95% | cert 3653af2a… served by 104.85.150.172 (AS55836) carries SAN mi.chevrolet.com.ec which currently resolves through Akamai (AS16625) at 104.102.21.134, 2a02:26f0:fe00:184::859, 2a02:26f0:fe00:1b1::859, 184.24.160.129 |
| 185.218.195.54 | AS213468 | AS54113 | 95% | cert 2e69232e… served by 185.218.195.54 (AS213468) carries SAN pinterest.com.ec which currently resolves through Fastly (AS54113) at 151.101.64.84, 151.101.128.84, 151.101.192.84, 151.101.0.84 |
| 130.17.18.56 | AS16003 | AS54113 | 95% | cert 2e69232e… served by 130.17.18.56 (AS16003) carries SAN pinterest.com.ec which currently resolves through Fastly (AS54113) at 151.101.64.84, 151.101.128.84, 151.101.192.84, 151.101.0.84 |
| 119.8.72.189 | AS136907 | AS16509 | 95% | cert 7db5037a… served by 119.8.72.189 (AS136907) carries SAN miportal.publicar.com.ec which currently resolves through Amazon (AS16509) at 52.72.203.201 |
| 23.251.43.119 | AS62610 | AS54113 | 95% | cert 2e69232e… served by 23.251.43.119 (AS62610) carries SAN pinterest.com.ec which currently resolves through Fastly (AS54113) at 151.101.64.84, 151.101.128.84, 151.101.192.84, 151.101.0.84 |
| 200.41.83.148 | AS3549 | AS209242 | 95% | cert 62a06149… served by 200.41.83.148 (AS3549) carries SAN nutri.com.ec which currently resolves through Cloudflare (AS209242) at 198.202.211.1 |
| 144.31.111.30 | AS207513 | AS54113 | 95% | cert 2e69232e… served by 144.31.111.30 (AS207513) carries SAN pinterest.com.ec which currently resolves through Fastly (AS54113) at 151.101.64.84, 151.101.128.84, 151.101.192.84, 151.101.0.84 |
| 2.22.186.212 | AS55836 | AS16509 | 95% | cert f33ad327… served by 2.22.186.212 (AS55836) carries SAN profesionales.msd.com.ec which currently resolves through Amazon (AS16509) at 75.2.8.173, 3.33.160.204 |
| 23.200.68.57 | AS35819 | AS8075 | 95% | cert 41ca0a1c… served by 23.200.68.57 (AS35819) carries SAN avon.com.ec which currently resolves through Microsoft (AS8075) at 13.89.172.8 |
| 200.24.210.72 | AS19114 | AS13335 | 95% | cert 494c8043… served by 200.24.210.72 (AS19114) carries SAN movistar.com.ec which currently resolves through Cloudflare (AS13335) at 104.18.22.46, 104.18.23.46, 2606:4700::6812:172e, 2606:4700::6812:162e |
| 2.26.88.16 | AS207957 | AS54113 | 95% | cert 2e69232e… served by 2.26.88.16 (AS207957) carries SAN pinterest.com.ec which currently resolves through Fastly (AS54113) at 151.101.64.84, 151.101.128.84, 151.101.192.84, 151.101.0.84 |
| 80.79.123.82 | AS34702 | AS54113 | 95% | cert c38e9689… served by 80.79.123.82 (AS34702) carries SAN pinterest.com.ec which currently resolves through Fastly (AS54113) at 151.101.64.84, 151.101.128.84, 151.101.192.84, 151.101.0.84 |
| 200.24.210.74 | AS19114 | AS13335 | 95% | cert 494c8043… served by 200.24.210.74 (AS19114) carries SAN movistar.com.ec which currently resolves through Cloudflare (AS13335) at 104.18.22.46, 104.18.23.46, 2606:4700::6812:172e, 2606:4700::6812:162e |
| 23.8.147.241 | AS17639 | AS16625 | 95% | cert 0417d1a9… served by 23.8.147.241 (AS17639) carries SAN www.nexcare.3m.com.ec which currently resolves through Akamai (AS16625) at 23.222.59.43, 2a02:26f0:fe00:185::34fe, 2a02:26f0:fe00:1b7::34fe |
Threat Intelligence
Domain threat-intel pending
Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.
History
Domain timeline pending
Passive-DNS history accumulates as our forward-DNS crawler observes A/AAAA/MX/NS/TXT records over time.