Check-Host.cc

Try 1.1.1.1 AS13335 check-host.cc /country/de /tld/cc
Domain

db.de

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

DNS Check HTTP Check Run Full Scan .de TLD

Run a live full scan of db.de

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now
Hosting IPs
—
A/AAAA targets
Subdomains
—
CT + scan + body
Record Types
—
seen in DNS
Observed Certs
—
in our scans

DNS Records

A
81.200.197.89
AAAA
—
MX
10 db-de.mail.protection.outlook.com
NS
ns-c.eurodns.eu, ns-d.eurodns.biz
TXT
v=spf1 include:deutschebahn.com ip4:87.193.167.88/29 -all
CNAME
—
CAA
—

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Subdomain enumeration pending

Every subdomain ever issued a TLS cert under this apex — extracted from Certificate Transparency logs, our own scan observations and body references.

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

95.216.155.21:443 18226f3a0491…
Subject: db.dev.macrosreply.info
Issuer: E8
SANs: auth.dev.macrosreply.info, db.dev.macrosreply.info, ibmmq.dev.macrosreply.info
49.12.226.200:443 52fee32e52e8…
Subject: empira.ninoxdb.de
Issuer: YE2
SANs: empira.ninoxdb.de
149.20.186.252:443 09a97ebb8db2…
Subject: fraudb.denovolab.com
Issuer: R11
SANs: *.fraudb.denovolab.com, fraudb.denovolab.com
84.252.121.68:443 25d9389d6b73…
Subject: www.pusdb.de
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: pusdb.de, www.pusdb.de
91.134.219.103:443 f6bbe1fa6cc9…
Subject: db.dedimax.com
Issuer: YR2
SANs: db.dedimax.com
34.22.183.48:443 17df9ea445c2…
Subject: deosdb.designexpress.eu
Issuer: R12
SANs: deosdb.designexpress.eu
65.21.82.38:443 e63007b0f5e9…
Subject: airbyte.nocodb.dev
Issuer: E8
SANs: airbyte.nocodb.dev, ch.nocodb.dev, hasura.nocodb.dev, keycloak.nocodb.dev, marketing.nocodb.dev, metabase.nocodb.dev, n8n.nocodb.dev, vault.nocodb.dev
217.111.101.130:443 fa521a7bec17…
Subject: sbffra01.vdb.de
Issuer: VDB Service AG Intern Root CA
SANs: sbffra01.vdb.de, sbffra02.vdb.de
65.21.185.211:443 e890635eca4b…
Subject: ffjdb.de
Issuer: YE2
SANs: ffjdb.de, www.ffjdb.de
87.193.217.146:443 32373ab43621…
Subject: austausch.bkkdb.de
Issuer: GlobalSign GCC R3 DV TLS CA 2020
SANs: austausch.bkkdb.de
34.160.47.167:443 a8e04fe94f88…
Subject: nocodb.deepglow.ai
Issuer: WR3
SANs: nocodb.deepglow.ai
167.99.133.183:443 76a6c5b1da6a…
Subject: ninoxdb.de
Issuer: R3
SANs: ninoxdb.de
217.160.178.107:8443 60132061aa99…
Subject: www.ship-db.de
Issuer: Sectigo RSA Domain Validation Secure Server CA
SANs: ship-db.de, www.ship-db.de
162.55.220.33:443 3a8df50ad409…
Subject: d-kn.ninoxdb.de
Issuer: YE2
SANs: d-kn.ninoxdb.de
90.187.63.93:443 59e19c871c72…
Subject: portal-hdb.de
Issuer: YE2
SANs: *.portal-hdb.de, portal-hdb.de
34.117.178.79:443 fc67db618c83…
Subject: h2o2.wandb.dev
Issuer: WR3
SANs: h2o2.wandb.dev
188.225.10.215:443 f0c06433f1ac…
Subject: db.dev.aiastro.ru
Issuer: YE1
SANs: db.dev.aiastro.ru
94.130.200.26:443 f8fb63614440…
Subject: dgb.easydb.de
Issuer: YR1
SANs: dgb.easydb.de
195.4.128.102:443 2d77693c6a17…
Subject: *.teamdb.de
Issuer: AlphaSSL CA - SHA256 - G2
SANs: *.teamdb.de, teamdb.de
129.151.246.242:443 220fc4693d9e…
Subject: *.cahmadb.dev
Issuer: E7
SANs: *.cahmadb.dev
128.140.78.71:443 aa6cf3e436e9…
Subject: fluid.ninoxdb.de
Issuer: YE1
SANs: fluid.ninoxdb.de
176.9.154.230:443 6ad850a5160e…
Subject: uni-augsburg.production.easydb.de
Issuer: YR1
SANs: uni-augsburg.production.easydb.de
85.215.227.106:443 e8980ae19f85…
Subject: amsdb.de
Issuer: YR2
SANs: amsdb.de, www.amsdb.de
45.76.89.227:443 3b4f20cc7c35…
Subject: ki.hudb.de
Issuer: YR1
SANs: ki.hudb.de
44.52.120.233:443 c3276fbe8061…
Subject: db.delmarvadmr.com
Issuer: E8
SANs: db.delmarvadmr.com
178.128.133.45:443 11184cbeb4b7…
Subject: textdb.dev
Issuer: YR2
SANs: textdb.dev
167.99.133.74:443 c9ff81d925fe…
Subject: keyworddb.devbu.de
Issuer: YR1
SANs: keyworddb.devbu.de
85.214.127.55:8443 4dc4506a9cb9…
Subject: cib-db.de
Issuer: YR1
SANs: cib-db.de, www.cib-db.de
13.219.138.99:443 784d95bd0df9…
Subject: www.mongodb.de
Issuer: Amazon RSA 2048 M04
SANs: mongodb.de, www.mongodb.com, www.mongodb.de
8.232.127.194:443 886b279ae15a…
Subject: watchtower-dev.edb.dev
Issuer: YR2
SANs: watchtower-dev.edb.dev

IPs Citing This Domain

Hosts whose HTML body references this domain. Strong signal for origin/mirror/embed discovery.

217.154.124.85:443 href · ×4

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

No origin-IP leaks detected (yet)

Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.

CT-Log Evidence

Certificates from public Certificate Transparency logs whose subject or SAN names this domain — including historic certs we never observed live.

cb7f7704dcd8b1ed… google · xenon2026h2
Subject: db.de
Issuer: Amazon ECDSA 384 M01
SANs: db.de
Valid: 2026-03-26 00:00:00 → 2026-10-09 23:59:59
cc21286a0b0e5b55… sectigo · elephant2026h1
Subject: db.de
Issuer: R12
SANs: db.de
Valid: 2026-01-05 03:06:56 → 2026-04-05 03:06:55
c7a9c487c3a2e869… sectigo · elephant2026h1
Subject: db.de
Issuer: R12
SANs: db.de
Valid: 2025-11-05 03:06:56 → 2026-02-03 03:06:55
4b322f7461171854… cloudflare · nimbus2026
Subject: db.de
Issuer: R12
SANs: db.de
Valid: 2025-11-05 03:06:56 → 2026-02-03 03:06:55
c7a9c487c3a2e869… cloudflare · nimbus2026
Subject: db.de
Issuer: R12
SANs: db.de
Valid: 2025-11-05 03:06:56 → 2026-02-03 03:06:55
a9d069bdfc60e3a9… google · argon2026h1
Subject: db.de
Issuer: Amazon ECDSA 384 M02
SANs: db.de
Valid: 2025-03-19 00:00:00 → 2026-04-17 23:59:59
a9d069bdfc60e3a9… cloudflare · nimbus2026
Subject: db.de
Issuer: Amazon ECDSA 384 M02
SANs: db.de
Valid: 2025-03-19 00:00:00 → 2026-04-17 23:59:59

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.

Type Value First seen Last seen
NS ns-d.eurodns.biz 2026-06-04 21:15:58.011 2026-06-23 17:03:22.851
A 81.200.197.89 2026-06-04 21:15:58.011 2026-06-23 17:03:22.851
MX 10 db-de.mail.protection.outlook.com 2026-06-04 21:15:58.011 2026-06-23 17:03:22.851
TXT v=spf1 include:deutschebahn.com ip4:87.193.167.88/29 -all 2026-06-04 21:15:58.011 2026-06-23 17:03:22.851
NS ns-c.eurodns.eu 2026-06-04 21:15:58.011 2026-06-23 17:03:22.851