Domain

lempstack.com

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

DNS Check HTTP Check Run Full Scan .com TLD

Run a live full scan of lempstack.com

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now

Hosting IPs

A/AAAA targets

Subdomains

CT + scan + body

Record Types

seen in DNS

Observed Certs

in our scans

DNS Records

47.238.47.193

AAAA

—

dns3.hichina.com, dns4.hichina.com

TXT

—

CNAME

—

CAA

—

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Subdomain enumeration pending

Every subdomain ever issued a TLS cert under this apex — extracted from Certificate Transparency logs, our own scan observations and body references.

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

Certificate observations pending

TLS certs naming this domain in subject or SANs will appear here as our scan-layer catches them.

IPs Citing This Domain

Hosts whose HTML body references this domain. Strong signal for origin/mirror/embed discovery.

49.50.175.123:80 href · ×33

3.29.75.163:80 href · ×22

42.192.192.149:80 href · ×22

194.163.191.145:443 href · ×22

107.155.1.103:80 href · ×22

64.23.224.172:80 href · ×22

107.148.187.142:80 href · ×22

23.238.110.229:80 href · ×22

34.146.73.158:80 href · ×22

212.107.29.97:80 href · ×22

144.217.74.227:80 href · ×22

120.76.45.68:80 href · ×22

192.243.118.216:80 href · ×22

152.136.59.35:80 href · ×22

54.152.21.227:80 href · ×22

183.111.126.32:80 href · ×22

172.93.221.205:80 href · ×22

140.238.36.77:80 href · ×22

165.1.66.51:80 href · ×22

211.110.229.207:80 href · ×22

15.204.9.31:80 href · ×22

47.116.160.59:80 href · ×22

18.138.232.93:80 href · ×22

47.251.65.63:8443 href · ×22

47.100.61.212:80 href · ×22

202.55.82.243:8080 href · ×22

98.126.235.100:80 href · ×22

152.32.161.189:80 href · ×22

159.203.62.99:80 href · ×22

140.238.3.220:80 href · ×22

140.82.17.175:80 href · ×22

47.90.206.211:80 href · ×22

107.167.16.21:80 href · ×22

1.226.83.95:80 href · ×22

45.77.126.184:80 href · ×22

43.173.85.55:80 href · ×22

103.214.23.37:80 href · ×22

47.88.87.111:80 href · ×22

140.238.61.0:80 href · ×22

123.57.103.110:80 href · ×22

45.58.52.89:80 href · ×22

13.236.233.10:443 href · ×22

193.123.246.103:80 href · ×22

149.129.53.79:80 href · ×22

18.138.234.54:80 href · ×22

47.74.7.197:80 href · ×22

66.228.55.153:80 href · ×12

133.242.68.84:80 href · ×12

47.94.88.227:80 href · ×11

38.60.111.17:80 href · ×11

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

No origin-IP leaks detected (yet)

Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.

Type	Value	First seen	Last seen
A	47.238.47.193	2026-05-25 21:58:50.500	2026-07-28 16:11:03.557
NS	dns4.hichina.com	2026-05-25 22:05:29.416	2026-07-28 16:11:03.557
NS	dns3.hichina.com	2026-05-25 22:05:29.416	2026-07-28 16:11:03.557