Domain

e-server.stream

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

DNS Check HTTP Check Run Full Scan .stream TLD

Run a live full scan of e-server.stream

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now

Hosting IPs

A/AAAA targets

Subdomains

CT + scan + body

Record Types

seen in DNS

Observed Certs

in our scans

DNS Records

51.68.235.238

AAAA

—

0 e-server.stream

ns1.ip-51-68-235.eu, ns2.ip-51-68-235.eu

TXT

v=spf1 ip4:51.68.235.238 +a +mx ~all

CNAME

—

CAA

—

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.

Subdomain	Resolves to	Last seen
autoconfig.extassis.e-server.stream		1970-01-01 00:00:00.000
autoconfig.oro.e-server.stream		1970-01-01 00:00:00.000
autodiscover.extassis.e-server.stream		1970-01-01 00:00:00.000
autodiscover.oro.e-server.stream		1970-01-01 00:00:00.000
cpanel.extassis.e-server.stream		1970-01-01 00:00:00.000
cpanel.oro.e-server.stream		1970-01-01 00:00:00.000
cpcalendars.extassis.e-server.stream		1970-01-01 00:00:00.000
cpcalendars.oro.e-server.stream		1970-01-01 00:00:00.000
cpcontacts.extassis.e-server.stream		1970-01-01 00:00:00.000
cpcontacts.oro.e-server.stream		1970-01-01 00:00:00.000
e-server.stream	51.68.235.238	2026-06-17 02:48:30.006
extassis.e-server.stream	51.68.235.238	2026-05-26 17:33:41.148
ipv6.extassis.e-server.stream		1970-01-01 00:00:00.000
ipv6.oro.e-server.stream		1970-01-01 00:00:00.000
mail.extassis.e-server.stream		1970-01-01 00:00:00.000
mail.oro.e-server.stream		1970-01-01 00:00:00.000
oro.e-server.stream	51.68.235.238	2026-05-26 17:33:41.148
webdisk.extassis.e-server.stream		1970-01-01 00:00:00.000
webdisk.oro.e-server.stream		1970-01-01 00:00:00.000
webmail.extassis.e-server.stream		1970-01-01 00:00:00.000
webmail.oro.e-server.stream		1970-01-01 00:00:00.000
whm.extassis.e-server.stream		1970-01-01 00:00:00.000
whm.oro.e-server.stream		1970-01-01 00:00:00.000
www.apps.e-server.stream	51.68.235.238	2026-06-17 02:48:30.006
www.extassis.e-server.stream		1970-01-01 00:00:00.000
www.oro.e-server.stream		1970-01-01 00:00:00.000

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

51.68.235.238:443 497e1c7e8a46…

Subject: autoconfig.extassis.e-server.stream

Issuer: R13

SANs: autoconfig.extassis.e-server.stream, autoconfig.oro.e-server.stream, autodiscover.extassis.e-server.stream, autodiscover.oro.e-server.stream, cpanel.extassis.e-server.stream, cpanel.oro.e-server.stream, cpcalendars.extassis.e-server.stream, cpcalendars.oro.e-server.stream, cpcontacts.extassis.e-server.stream, cpcontacts.oro.e-server.stream, extassis.e-server.stream, ipv6.extassis.e-server.stream, ipv6.oro.e-server.stream, mail.extassis.e-server.stream, mail.oro.e-server.stream, ns3125556.ip-51-68-235.eu, oro.e-server.stream, webdisk.extassis.e-server.stream, webdisk.oro.e-server.stream, webmail.extassis.e-server.stream, webmail.oro.e-server.stream, whm.extassis.e-server.stream, whm.oro.e-server.stream, www.extassis.e-server.stream, www.oro.e-server.stream

IPs Citing This Domain

No citing IPs found yet

As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

No origin-IP leaks detected (yet)

Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.

Type	Value	First seen	Last seen
NS	ns1.ip-51-68-235.eu	2026-06-17 02:48:30.006	2026-06-17 02:48:30.006
SRV	_autodiscover._tcp 0 0 443 cpanelemaildiscovery.cpanel.net	2026-06-17 02:48:30.006	2026-06-17 02:48:30.006
SRV	_caldav._tcp 0 0 2079 e-server.stream	2026-06-17 02:48:30.006	2026-06-17 02:48:30.006
TXT	v=spf1 ip4:51.68.235.238 +a +mx ~all	2026-06-17 02:48:30.006	2026-06-17 02:48:30.006
MX	0 e-server.stream	2026-06-17 02:48:30.006	2026-06-17 02:48:30.006
SRV	_carddav._tcp 0 0 2079 e-server.stream	2026-06-17 02:48:30.006	2026-06-17 02:48:30.006
NS	ns2.ip-51-68-235.eu	2026-06-17 02:48:30.006	2026-06-17 02:48:30.006
A	51.68.235.238	2026-06-17 02:48:30.006	2026-06-17 02:48:30.006