Domain

ctrl.li

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

DNS Check HTTP Check Run Full Scan .li TLD

Run a live full scan of ctrl.li

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now

Hosting IPs

A/AAAA targets

Subdomains

117

CT + scan + body

Record Types

seen in DNS

Observed Certs

in our scans

DNS Records

—

AAAA

—

autumn.ns.cloudflare.com, hank.ns.cloudflare.com

TXT

—

CNAME

—

CAA

—

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.

Subdomain	Resolves to	Last seen
20250903.ctrl.li	104.26.8.14 2a06:98c1:3120::3 172.67.73.231 104.26.9.14 +5	2026-07-22 23:37:16.502
tau01.cfworld08.ctrl.li	188.114.97.0 188.114.96.0 188.114.96.3 188.114.97.3 +4	2026-07-26 22:07:03.116
1qaz1qaz.ctrl.li	104.26.8.14 104.26.9.14 172.67.73.231 2a06:98c1:3121:: +1	2026-06-23 18:07:47.027
buyanlinqz.ctrl.li	188.114.96.0 188.114.97.0 2606:4700:20::681a:80e 2606:4700:20::ac43:49e7 +1	2026-06-23 19:17:52.451
nbhgtfy.ctrl.li	188.114.97.3 188.114.96.3 2606:4700:20::681a:90e 2606:4700:20::681a:80e +1	2026-06-01 00:00:50.780
zihekcc.ctrl.li	104.26.9.14 104.26.8.14 172.67.73.231 2a06:98c1:3121:: +1	2026-06-21 00:09:55.269
6666666.ctrl.li	188.114.97.0 188.114.96.0 2a06:98c1:3120:: 2a06:98c1:3121::	2026-06-17 20:24:49.898
b3iuuut.gopillckvs.ctrl.li	172.66.47.46 172.66.44.210 2606:4700:310c::ac42:2cd2 2606:4700:310c::ac42:2f2e	2026-07-27 13:41:35.236
blackfoxs.ctrl.li	188.114.96.3 188.114.97.3 2a06:98c1:3121:: 2a06:98c1:3120::	2026-07-17 07:08:07.296
bmh-9-9k.ctrl.li	188.114.96.3 188.114.97.3 2a06:98c1:3121:: 2a06:98c1:3120::	2026-06-17 23:12:34.880
cloudflare.ctrl.li	188.114.97.0 188.114.96.0 2a06:98c1:3120::3 2a06:98c1:3121::3	2026-06-17 20:20:42.361
cloudflaredoh.ctrl.li	188.114.96.0 188.114.97.0 2a06:98c1:3121:: 2a06:98c1:3120::	2026-07-23 02:41:38.112
darksaber.ctrl.li	188.114.96.0 188.114.97.0 2a06:98c1:3120:: 2a06:98c1:3121::	2026-07-28 05:07:57.865
flixo.ctrl.li	188.114.96.0 188.114.97.0 2a06:98c1:3121:: 2a06:98c1:3120::	2026-06-04 06:14:36.014
hstdvety05stcvtd.ctrl.li	188.114.97.0 188.114.96.0 2a06:98c1:3120:: 2a06:98c1:3121::	2026-06-15 18:19:59.057
jucelisa99-gmail.ctrl.li	188.114.96.0 188.114.97.0 2a06:98c1:3120:: 2a06:98c1:3121::	2026-07-22 09:51:10.970
lyj0001.ctrl.li	188.114.97.0 188.114.96.0 2a06:98c1:3120::3 2a06:98c1:3121::3	2026-06-22 16:03:21.680
microxiao.ctrl.li	188.114.96.3 188.114.97.3 2a06:98c1:3121:: 2a06:98c1:3120::	2026-06-19 21:03:50.395
pornhub.ctrl.li	188.114.97.0 188.114.96.0 2a06:98c1:3120:: 2a06:98c1:3121::	2026-06-19 06:08:23.416
tau03.cfworld08.ctrl.li	172.66.44.96 172.66.47.160 2606:4700:310c::ac42:2c60 2606:4700:310c::ac42:2fa0	2026-07-26 20:58:33.396
tau05.cfworld08.ctrl.li	188.114.97.0 188.114.96.0 2a06:98c1:3121:: 2a06:98c1:3120::	2026-07-27 09:41:58.545
tau07.cfworld08.ctrl.li	188.114.97.0 188.114.96.0 2a06:98c1:3120:: 2a06:98c1:3121::	2026-07-27 06:52:59.413
to16.oranimal.ctrl.li	172.66.47.84 172.66.44.172 2606:4700:310c::ac42:2cac 2606:4700:310c::ac42:2f54	2026-06-21 10:26:26.040
turygbuio.ctrl.li	188.114.97.0 188.114.96.0 2a06:98c1:3121::b 2a06:98c1:3120::b	2026-05-31 21:06:51.487
uytu78t6uryutrtydfsfg.ctrl.li	188.114.97.0 188.114.96.0 2a06:98c1:3120:: 2a06:98c1:3121::	2026-06-15 15:09:40.069
vau01.cfworld08.ctrl.li	172.66.47.72 172.66.44.184 2606:4700:310c::ac42:2cb8 2606:4700:310c::ac42:2f48	2026-06-17 04:41:05.818
vau02.cfworld08.ctrl.li	172.66.47.7 172.66.44.249 2606:4700:310c::ac42:2cf9 2606:4700:310c::ac42:2f07	2026-07-25 14:54:42.272
vau03.cfworld08.ctrl.li	188.114.97.0 188.114.96.0 2a06:98c1:3120::3 2a06:98c1:3121::3	2026-07-25 14:54:42.272
vau07.cfworld08.ctrl.li	188.114.97.0 188.114.96.0 2a06:98c1:3121:: 2a06:98c1:3120::	2026-07-26 19:40:43.384
vau08.cfworld08.ctrl.li	188.114.97.0 188.114.96.0 2a06:98c1:3121:: 2a06:98c1:3120::	2026-07-25 15:04:44.900
vau09.cfworld08.ctrl.li	172.66.47.133 172.66.44.123 2606:4700:310c::ac42:2c7b 2606:4700:310c::ac42:2f85	2026-07-26 21:50:42.449
vau10.cfworld08.ctrl.li	172.66.44.212 172.66.47.44 2606:4700:310c::ac42:2cd4 2606:4700:310c::ac42:2f2c	2026-07-24 21:08:19.898
vo12.oranimal.ctrl.li	172.66.47.162 172.66.44.94 2606:4700:310c::ac42:2c5e 2606:4700:310c::ac42:2fa2	2026-06-20 11:48:48.465
vo15.oranimal.ctrl.li	188.114.96.3 188.114.97.3 2a06:98c1:3120::3 2a06:98c1:3121::3	2026-06-20 12:14:25.929
vo16.oranimal.ctrl.li	172.66.47.126 172.66.44.130 2606:4700:310c::ac42:2c82 2606:4700:310c::ac42:2f7e	2026-06-20 14:19:46.289
vo18.oranimal.ctrl.li	172.66.44.85 172.66.47.171 2a06:98c1:3121::3 2a06:98c1:3120::3	2026-06-20 14:55:32.381
way3301.ctrl.li	188.114.96.0 188.114.97.0 2a06:98c1:3121:: 2a06:98c1:3120::	2026-07-24 02:35:42.567
11lnsr.gopillckvs.ctrl.li		1970-01-01 00:00:00.000
12zanp.gopillckvs.ctrl.li		1970-01-01 00:00:00.000
17xtpc.gopillckvs.ctrl.li		1970-01-01 00:00:00.000
234fsgsdfgdf.ctrl.li		1970-01-01 00:00:00.000
58794651.ctrl.li		1970-01-01 00:00:00.000
687koiuytgj.ctrl.li		1970-01-01 00:00:00.000
cfipv6.ctrl.li		1970-01-01 00:00:00.000
ck751862.ctrl.li		1970-01-01 00:00:00.000
ctrl.li		1970-01-01 00:00:00.000
fanlaoshi.ctrl.li		1970-01-01 00:00:00.000
freedev.ctrl.li		1970-01-01 00:00:00.000
grehbtj.ctrl.li		1970-01-01 00:00:00.000
gwdfreywdbh8.ctrl.li		1970-01-01 00:00:00.000
heifei.ctrl.li		1970-01-01 00:00:00.000
hgfdnsax.ctrl.li		1970-01-01 00:00:00.000
inenels.ctrl.li		1970-01-01 00:00:00.000
ioyeqasq9.ctrl.li		1970-01-01 00:00:00.000
irancell.ctrl.li		1970-01-01 00:00:00.000
iranvpn.ctrl.li		1970-01-01 00:00:00.000
jdfstyrew.ctrl.li		1970-01-01 00:00:00.000
jhbprps.ctrl.li		1970-01-01 00:00:00.000
jonohit.ctrl.li		1970-01-01 00:00:00.000
k5oihaboeifoq.ctrl.li		1970-01-01 00:00:00.000
khgfev754rx.ctrl.li		1970-01-01 00:00:00.000
llllllll.ctrl.li		1970-01-01 00:00:00.000
lm08gro.ctrl.li		1970-01-01 00:00:00.000
m08r34u.ctrl.li		1970-01-01 00:00:00.000
nic9999.ctrl.li		1970-01-01 00:00:00.000
o0iuyutrdtuyh.ctrl.li		1970-01-01 00:00:00.000
openai.ctrl.li		1970-01-01 00:00:00.000
ping.ctrl.li	162.159.6.209	2026-06-17 08:50:07.367
planj.ctrl.li		1970-01-01 00:00:00.000
r34zmen.ctrl.li		1970-01-01 00:00:00.000
ritide.ctrl.li		1970-01-01 00:00:00.000
rryun.ctrl.li		1970-01-01 00:00:00.000
sssssss.ctrl.li		1970-01-01 00:00:00.000
sysmodul.ctrl.li		1970-01-01 00:00:00.000
tau02.cfworld08.ctrl.li		1970-01-01 00:00:00.000
tau04.cfworld08.ctrl.li		1970-01-01 00:00:00.000
tau06.cfworld08.ctrl.li		1970-01-01 00:00:00.000
tau08.cfworld08.ctrl.li		1970-01-01 00:00:00.000
tau09.cfworld08.ctrl.li		1970-01-01 00:00:00.000
tau10.cfworld08.ctrl.li		1970-01-01 00:00:00.000
tellone.ctrl.li		1970-01-01 00:00:00.000
time222.ctrl.li		1970-01-01 00:00:00.000
to20.oranimal.ctrl.li		1970-01-01 00:00:00.000
tokenspace.ctrl.li		1970-01-01 00:00:00.000
va13.cfworld08.ctrl.li		1970-01-01 00:00:00.000
vau04.cfworld08.ctrl.li		1970-01-01 00:00:00.000
vau05.cfworld08.ctrl.li		1970-01-01 00:00:00.000
vjvjjhjuj.ctrl.li		1970-01-01 00:00:00.000
wanglin.ctrl.li		1970-01-01 00:00:00.000
x4xgt6.gopillckvs.ctrl.li		1970-01-01 00:00:00.000
xcdsewqa.ctrl.li		1970-01-01 00:00:00.000
xczsfsop.ctrl.li		1970-01-01 00:00:00.000
yonggekankankan.ctrl.li		1970-01-01 00:00:00.000
zhushoujing.ctrl.li		1970-01-01 00:00:00.000

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

Certificate observations pending

TLS certs naming this domain in subject or SANs will appear here as our scan-layer catches them.

IPs Citing This Domain

No citing IPs found yet

As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

No origin-IP leaks detected (yet)

Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.

Type	Value	First seen	Last seen
NS	hank.ns.cloudflare.com	2026-06-15 15:09:40.069	2026-07-20 03:18:25.645
NS	autumn.ns.cloudflare.com	2026-06-15 15:09:40.069	2026-07-20 03:18:25.645