Check-Host.cc

Try 1.1.1.1 AS13335 check-host.cc /country/de /tld/cc
Domain

graph.facebook.com

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

DNS Check HTTP Check Run Full Scan .com TLD

Run a live full scan of graph.facebook.com

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now
Hosting IPs
14
A/AAAA targets
Subdomains
—
CT + scan + body
Record Types
4
seen in DNS
Observed Certs
—
in our scans

DNS Records

A
157.240.0.13, 157.240.253.13, 157.240.27.18, 157.240.9.18, 57.144.222.141, 57.144.244.141, 57.144.248.141
AAAA
2a03:2880:f028:11:face:b00c:0:2, 2a03:2880:f03f:12:face:b00c:0:2, 2a03:2880:f083:10e:face:b00c:0:2, 2a03:2880:f084:10d:face:b00c:0:2, 2a03:2880:f36f:8d:face:b00c:0:2, 2a03:2880:f37a:8d:face:b00c:0:2, 2a03:2880:f37c:8d:face:b00c:0:2
MX
10 smtpin.vvv.facebook.com
NS
—
TXT
v=spf1 a ~all
CNAME
—
CAA
—

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Subdomain enumeration pending

Every subdomain ever issued a TLS cert under this apex — extracted from Certificate Transparency logs, our own scan observations and body references.

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

3.91.244.15:443 174751dc11dc…
Subject: dev.claroshop.com
Issuer: ClaroShop int Router CA
SANs: *.cloudflare.docker.com, *.dev-ng.claroshop.com, *.dev.claroshop.com, *.docker.com, *.docker.io, *.github.com, *.jenkins.io, *.k3s.io, *.obs.ap-southeast-3.myhuaweicloud.com, *.quay.io, *.rancher.io, *.s3.amazonaws.com, api.mercadolibre.com, api.sandbox.claropagos.com, api.yotpo.com, asset-packagist.org, claroshop.anteater.ai, cuponessearsws.dev.handel-bit.io, dev.claroshop.com, develop.claroshopplus.com, docker-source-registry.amxdigital.net, docker.io, docs.projectcalico.org, feedsclaroshop-dev.buscador.amarello.com.mx, gcr.io, get.k3s.io, getcomposer.org, github-releases.githubusercontent.com, github.com, graph.facebook.com, heimdallr.amxdigital.net, ics2wstest.ic3.com, infracode.amxdigital.net, k8s.gcr.io, kubernetes.io, loginclaro.com, mirror.xmission.com, mrcapi.dev.sears.com.mx, nodejs.org, obs.ap-southeast-3.myhuaweicloud.com, onest-s4.com, packages.cloud.google.com, packagist.org, pagossearsws.dev.handel-bit.io, proxy_ssl_on, quay.io, saas-us-west-2.instana.io, seapi.dev.sears.com.mx, sears.anteater.ai, sso.dev-ng.claroshop.com, storage.googleapis.com
193.122.89.21:443 996f4d7e0440…
Subject: graph.facebook.com
Issuer: GOWA Bridge CA
SANs: *.facebook.com, graph.facebook.com

IPs Citing This Domain

Hosts whose HTML body references this domain. Strong signal for origin/mirror/embed discovery.

62.129.196.215:80 href · ×198
176.9.135.146:443 href · ×40
176.9.135.146:80 href · ×40
52.200.115.36:443 href · ×37
125.229.112.88:443 href · ×21
219.85.79.132:443 href · ×21
160.16.214.75:443 href · ×13
107.21.254.237:443 href · ×13
52.8.132.4:443 href · ×10
103.168.56.211:443 href · ×9
107.21.254.237:80 href · ×8
52.202.82.255:80 href · ×7
18.211.240.217:443 href · ×7
95.174.17.167:443 href · ×6
199.187.186.100:80 href · ×5
199.187.186.100:443 href · ×5
139.180.132.91:80 href · ×4
162.243.84.192:443 href · ×4
170.10.161.168:443 href · ×4
174.137.142.197:80 href · ×4
116.118.226.62:80 href · ×4
97.231.192.218:443 href · ×4
34.117.70.207:443 href · ×3
193.107.69.233:443 href · ×3
167.71.194.233:80 href · ×3
178.128.105.113:80 href · ×3
159.65.135.89:443 href · ×3
193.107.69.233:80 href · ×3
52.231.38.186:443 href · ×3
68.178.166.169:443 href · ×2
45.76.166.248:80 href · ×2
192.53.117.167:5000 href · ×2
54.150.219.251:8080 href · ×2
153.120.90.185:443 href · ×2
5.196.207.122:443 href · ×2
172.105.199.215:443 href · ×2
54.213.73.248:443 href · ×2
135.181.45.132:443 href · ×2
182.93.121.4:80 href · ×2
119.245.207.74:443 href · ×2
132.148.235.253:80 href · ×2
143.95.109.247:80 href · ×2
216.92.220.47:443 href · ×2
35.208.228.107:443 href · ×2
91.250.103.72:443 href · ×2
52.221.171.220:80 href · ×2
69.4.91.66:80 href · ×2
167.235.147.16:80 href · ×2
149.56.79.43:443 href · ×2
103.130.215.78:443 href · ×2

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

No origin-IP leaks detected (yet)

Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.

Type Value First seen Last seen
A 157.240.27.18 2026-05-25 22:05:29.416 2026-07-26 09:10:48.160
TXT v=spf1 a ~all 2026-05-25 22:05:29.416 2026-07-28 17:23:57.234
AAAA 2a03:2880:f083:10e:face:b00c:0:2 2026-05-25 22:05:29.416 2026-06-23 06:06:38.664
MX 10 smtpin.vvv.facebook.com 2026-05-25 22:05:29.416 2026-07-28 17:23:57.234
AAAA 2a03:2880:f084:10d:face:b00c:0:2 2026-05-25 23:59:40.866 2026-07-28 17:23:57.234
A 57.144.248.141 2026-05-26 02:43:02.200 2026-06-18 08:28:22.147
AAAA 2a03:2880:f37c:8d:face:b00c:0:2 2026-05-26 02:43:02.200 2026-06-20 09:49:43.092
A 57.144.244.141 2026-05-26 02:50:09.561 2026-07-27 20:43:03.212
AAAA 2a03:2880:f03f:12:face:b00c:0:2 2026-05-26 03:37:19.888 2026-07-26 09:10:48.160
A 157.240.253.13 2026-05-26 03:50:49.068 2026-05-27 17:11:49.618
AAAA 2a03:2880:f37a:8d:face:b00c:0:2 2026-05-26 03:50:49.068 2026-07-25 19:58:59.813
A 157.240.0.13 2026-05-26 10:05:02.397 2026-07-27 15:36:00.743
AAAA 2a03:2880:f36f:8d:face:b00c:0:2 2026-06-14 22:08:58.337 2026-07-28 11:54:16.597
A 57.144.222.141 2026-06-14 22:08:58.337 2026-07-28 17:23:57.234
A 157.240.9.18 2026-07-22 03:03:50.556 2026-07-28 17:13:52.071
AAAA 2a03:2880:f028:11:face:b00c:0:2 2026-07-23 10:40:09.175 2026-07-28 17:13:52.071