Check-Host.cc

Try 1.1.1.1 AS13335 check-host.cc /country/de /tld/cc
Domain

tawk.to

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

DNS Check HTTP Check Run Full Scan .to TLD

Run a live full scan of tawk.to

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now
Hosting IPs
4
A/AAAA targets
Subdomains
37
CT + scan + body
Record Types
5
seen in DNS
Observed Certs
13
in our scans

DNS Records

A
104.20.42.169, 172.66.161.212
AAAA
2606:4700:10::6814:2aa9, 2606:4700:10::ac42:a1d4
MX
1 aspmx.l.google.com, 10 aspmx2.googlemail.com, 10 aspmx3.googlemail.com, 5 alt1.aspmx.l.google.com, 5 alt2.aspmx.l.google.com
NS
amy.ns.cloudflare.com, seth.ns.cloudflare.com
TXT
MS=ms74305633, atlassian-domain-verification=aJSdwZkpP4tuYS9yca1v/M8aMkMHPhFY6SJLxFJ7ad0P6ycNWufDzWRsu76sNfx9, eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkb21haW4iOiJ0YXdrLnRvIiwiZXhwIjoxNjU3NzU2ODAwfQ.KNwUZ7T6rHHLFEUKH23Mrr0AGIZnzWdIEXrznoludcU, facebook-domain-verification=qhde5lf0e95om273eq3dax2594sz4j, google-site-verification=xfxcBNycIC4X65bnF6gQAEui_JhaWq7QxiM2Jzmj17k, tiktok-developers-site-verification=AuZueQR2DuNvtrOpAW7qwDZrDJizOmrZ, v=spf1 include:_spf.google.com include:amazonses.com include:smtp1.uservoice.com include:mta.tawk.to -all
CNAME
—
CAA
—

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.

Subdomain Resolves to Last seen
dashboard.tawk.to
104.20.42.169 172.66.161.212 2606:4700:10::ac42:a1d4 2606:4700:10::6814:2aa9
2026-07-24 10:30:06.649
deliver.tawk.to
104.20.42.169 172.66.161.212 2606:4700:10::ac42:a1d4 2606:4700:10::6814:2aa9
2026-05-27 16:23:56.477
embed.tawk.to
172.66.161.212 2606:4700:10::6814:2aa9 2606:4700:10::ac42:a1d4 104.20.42.169
2026-07-28 20:31:39.973
help.tawk.to
172.66.161.212 2606:4700:10::6814:2aa9 2606:4700:10::ac42:a1d4 104.20.42.169
2026-05-26 15:15:26.393
partners.tawk.to
172.66.161.212 2606:4700:10::6814:2aa9 2606:4700:10::ac42:a1d4 104.20.42.169
2026-05-27 00:27:49.664
static-a.tawk.to
104.20.42.169 172.66.161.212 2606:4700:10::ac42:a1d4 2606:4700:10::6814:2aa9
2026-05-25 22:00:50.546
tawk.to
172.66.161.212 2606:4700:10::6814:2aa9 2606:4700:10::ac42:a1d4 104.20.42.169
2026-07-28 17:05:15.597
va.tawk.to
104.20.42.169 2606:4700:10::ac42:a1d4 2606:4700:10::6814:2aa9 172.66.161.212
2026-07-25 18:56:07.688
vsb91.tawk.to
104.20.42.169 172.66.161.212 2606:4700:10::6814:2aa9 2606:4700:10::ac42:a1d4
2026-05-27 17:25:14.194
www.tawk.to
172.66.161.212 2606:4700:10::ac42:a1d4 2606:4700:10::6814:2aa9 104.20.42.169
2026-07-28 19:11:54.346
phone.tawk.to
1970-01-01 00:00:00.000
static-v.tawk.to
1970-01-01 00:00:00.000

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

34.136.69.45:443 351e7f89d3cb…
Subject: *.tawk.to
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.tawk.to, tawk.to
35.222.23.34:443 351e7f89d3cb…
Subject: *.tawk.to
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.tawk.to, tawk.to
34.9.152.126:443 351e7f89d3cb…
Subject: *.tawk.to
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.tawk.to, tawk.to
34.66.61.31:443 351e7f89d3cb…
Subject: *.tawk.to
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.tawk.to, tawk.to
34.44.57.64:443 351e7f89d3cb…
Subject: *.tawk.to
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.tawk.to, tawk.to
34.135.216.150:443 351e7f89d3cb…
Subject: *.tawk.to
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.tawk.to, tawk.to
104.197.25.159:443 351e7f89d3cb…
Subject: *.tawk.to
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.tawk.to, tawk.to
35.255.143.23:443 351e7f89d3cb…
Subject: *.tawk.to
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.tawk.to, tawk.to
34.27.19.106:443 351e7f89d3cb…
Subject: *.tawk.to
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.tawk.to, tawk.to
34.59.78.217:443 351e7f89d3cb…
Subject: *.tawk.to
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.tawk.to, tawk.to
34.59.163.189:443 351e7f89d3cb…
Subject: *.tawk.to
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.tawk.to, tawk.to
34.46.222.196:443 351e7f89d3cb…
Subject: *.tawk.to
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.tawk.to, tawk.to
35.202.2.194:443 351e7f89d3cb…
Subject: *.tawk.to
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.tawk.to, tawk.to
34.60.204.206:443 351e7f89d3cb…
Subject: *.tawk.to
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.tawk.to, tawk.to
104.198.27.14:443 351e7f89d3cb…
Subject: *.tawk.to
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.tawk.to, tawk.to
136.113.97.79:443 351e7f89d3cb…
Subject: *.tawk.to
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.tawk.to, tawk.to
35.253.194.120:443 351e7f89d3cb…
Subject: *.tawk.to
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.tawk.to, tawk.to
35.226.8.1:443 351e7f89d3cb…
Subject: *.tawk.to
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.tawk.to, tawk.to
35.254.192.158:443 351e7f89d3cb…
Subject: *.tawk.to
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.tawk.to, tawk.to
104.155.138.216:443 351e7f89d3cb…
Subject: *.tawk.to
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.tawk.to, tawk.to
34.122.171.127:443 351e7f89d3cb…
Subject: *.tawk.to
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.tawk.to, tawk.to
136.112.29.249:443 360f1a566a72…
Subject: *.tawk.to
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.tawk.to, tawk.to
35.253.194.76:443 360f1a566a72…
Subject: *.tawk.to
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.tawk.to, tawk.to
34.170.103.63:443 360f1a566a72…
Subject: *.tawk.to
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.tawk.to, tawk.to
34.122.97.112:443 dc1e0bfe7479…
Subject: *.tawk.to
Issuer: Sectigo RSA Domain Validation Secure Server CA
SANs: *.tawk.to, tawk.to
35.202.2.194:443 360f1a566a72…
Subject: *.tawk.to
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.tawk.to, tawk.to
34.10.252.116:443 360f1a566a72…
Subject: *.tawk.to
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.tawk.to, tawk.to
35.188.223.79:443 360f1a566a72…
Subject: *.tawk.to
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.tawk.to, tawk.to
136.112.43.67:443 360f1a566a72…
Subject: *.tawk.to
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.tawk.to, tawk.to
136.111.245.138:443 360f1a566a72…
Subject: *.tawk.to
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.tawk.to, tawk.to

IPs Citing This Domain

Hosts whose HTML body references this domain. Strong signal for origin/mirror/embed discovery.

192.129.167.139:80 href · ×18
204.44.87.192:443 href · ×10
192.129.167.139:443 href · ×9
154.201.221.73:443 href · ×6
217.216.72.135:443 href · ×6
160.124.243.214:443 href · ×6
160.124.242.222:443 href · ×6
160.124.242.221:443 href · ×6
54.254.34.226:80 href · ×6
193.182.189.23:443 href · ×6
160.124.243.217:443 href · ×6
160.124.242.253:443 href · ×6
160.124.243.209:443 href · ×6
154.201.221.102:443 href · ×6
160.124.243.223:443 href · ×6
154.201.221.116:443 href · ×6
160.124.243.251:443 href · ×6
160.124.243.194:443 href · ×6
154.201.221.81:443 href · ×6
210.79.190.64:443 href · ×5
103.168.67.2:443 href · ×5
149.28.215.104:443 href · ×5
13.55.97.7:80 href · ×5
188.166.220.72:443 href · ×4
159.89.198.246:443 href · ×4
160.124.242.252:443 href · ×3
94.152.152.26:80 href · ×3
160.124.225.220:443 href · ×3
103.40.112.243:443 href · ×3
160.124.243.236:443 href · ×3
161.35.92.128:443 href · ×3
160.124.242.216:443 href · ×3
160.124.242.234:443 href · ×3
160.124.243.245:443 href · ×3
160.124.242.248:443 href · ×3
152.42.200.59:443 href · ×3
52.195.52.181:443 href · ×3
154.201.221.88:443 href · ×3
160.124.225.197:443 href · ×3
160.124.242.204:443 href · ×3
154.201.221.86:443 href · ×3
160.124.225.216:443 href · ×3
160.124.242.242:443 href · ×3
160.124.242.196:443 href · ×3
160.124.225.226:443 href · ×3
160.124.242.229:443 href · ×3
160.124.243.252:443 href · ×3
160.124.225.249:443 href · ×3
46.51.254.215:443 href · ×3
160.124.242.198:443 href · ×3

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

Origin IP Origin ASN CDN ASN Confidence Reasoning
35.253.194.120 AS396982 AS13335 95% cert 351e7f89… served by 35.253.194.120 (AS396982) carries SAN tawk.to which currently resolves through Cloudflare (AS13335) at 172.66.161.212, 104.20.42.169, 2606:4700:10::ac42:a1d4, 2606:4700:10::6814:2aa9
35.226.8.1 AS396982 AS13335 95% cert 351e7f89… served by 35.226.8.1 (AS396982) carries SAN tawk.to which currently resolves through Cloudflare (AS13335) at 172.66.161.212, 104.20.42.169, 2606:4700:10::ac42:a1d4, 2606:4700:10::6814:2aa9
35.254.192.158 AS396982 AS13335 95% cert 351e7f89… served by 35.254.192.158 (AS396982) carries SAN tawk.to which currently resolves through Cloudflare (AS13335) at 172.66.161.212, 104.20.42.169, 2606:4700:10::ac42:a1d4, 2606:4700:10::6814:2aa9
104.155.138.216 AS396982 AS13335 95% cert 351e7f89… served by 104.155.138.216 (AS396982) carries SAN tawk.to which currently resolves through Cloudflare (AS13335) at 172.66.161.212, 104.20.42.169, 2606:4700:10::ac42:a1d4, 2606:4700:10::6814:2aa9
34.44.57.64 AS396982 AS13335 95% cert 351e7f89… served by 34.44.57.64 (AS396982) carries SAN tawk.to which currently resolves through Cloudflare (AS13335) at 172.66.161.212, 104.20.42.169, 2606:4700:10::ac42:a1d4, 2606:4700:10::6814:2aa9
34.122.171.127 AS396982 AS13335 95% cert 351e7f89… served by 34.122.171.127 (AS396982) carries SAN tawk.to which currently resolves through Cloudflare (AS13335) at 172.66.161.212, 104.20.42.169, 2606:4700:10::ac42:a1d4, 2606:4700:10::6814:2aa9
136.112.29.249 AS396982 AS13335 95% cert 360f1a56… served by 136.112.29.249 (AS396982) carries SAN tawk.to which currently resolves through Cloudflare (AS13335) at 172.66.161.212, 104.20.42.169, 2606:4700:10::ac42:a1d4, 2606:4700:10::6814:2aa9
35.253.194.76 AS396982 AS13335 95% cert 360f1a56… served by 35.253.194.76 (AS396982) carries SAN tawk.to which currently resolves through Cloudflare (AS13335) at 172.66.161.212, 104.20.42.169, 2606:4700:10::ac42:a1d4, 2606:4700:10::6814:2aa9
34.170.103.63 AS396982 AS13335 95% cert 360f1a56… served by 34.170.103.63 (AS396982) carries SAN tawk.to which currently resolves through Cloudflare (AS13335) at 172.66.161.212, 104.20.42.169, 2606:4700:10::ac42:a1d4, 2606:4700:10::6814:2aa9
34.122.97.112 AS396982 AS13335 95% cert dc1e0bfe… served by 34.122.97.112 (AS396982) carries SAN tawk.to which currently resolves through Cloudflare (AS13335) at 172.66.161.212, 104.20.42.169, 2606:4700:10::ac42:a1d4, 2606:4700:10::6814:2aa9
35.202.2.194 AS396982 AS13335 95% cert 360f1a56… served by 35.202.2.194 (AS396982) carries SAN tawk.to which currently resolves through Cloudflare (AS13335) at 172.66.161.212, 104.20.42.169, 2606:4700:10::ac42:a1d4, 2606:4700:10::6814:2aa9
34.10.252.116 AS396982 AS13335 95% cert 360f1a56… served by 34.10.252.116 (AS396982) carries SAN tawk.to which currently resolves through Cloudflare (AS13335) at 172.66.161.212, 104.20.42.169, 2606:4700:10::ac42:a1d4, 2606:4700:10::6814:2aa9
35.188.223.79 AS396982 AS13335 95% cert 360f1a56… served by 35.188.223.79 (AS396982) carries SAN tawk.to which currently resolves through Cloudflare (AS13335) at 172.66.161.212, 104.20.42.169, 2606:4700:10::ac42:a1d4, 2606:4700:10::6814:2aa9
136.112.43.67 AS396982 AS13335 95% cert 360f1a56… served by 136.112.43.67 (AS396982) carries SAN tawk.to which currently resolves through Cloudflare (AS13335) at 172.66.161.212, 104.20.42.169, 2606:4700:10::ac42:a1d4, 2606:4700:10::6814:2aa9
136.111.245.138 AS396982 AS13335 95% cert 360f1a56… served by 136.111.245.138 (AS396982) carries SAN tawk.to which currently resolves through Cloudflare (AS13335) at 172.66.161.212, 104.20.42.169, 2606:4700:10::ac42:a1d4, 2606:4700:10::6814:2aa9
34.42.142.59 AS396982 AS13335 95% cert 360f1a56… served by 34.42.142.59 (AS396982) carries SAN tawk.to which currently resolves through Cloudflare (AS13335) at 172.66.161.212, 104.20.42.169, 2606:4700:10::ac42:a1d4, 2606:4700:10::6814:2aa9
136.112.34.238 AS396982 AS13335 95% cert 360f1a56… served by 136.112.34.238 (AS396982) carries SAN tawk.to which currently resolves through Cloudflare (AS13335) at 172.66.161.212, 104.20.42.169, 2606:4700:10::ac42:a1d4, 2606:4700:10::6814:2aa9
34.121.236.112 AS396982 AS13335 95% cert 360f1a56… served by 34.121.236.112 (AS396982) carries SAN tawk.to which currently resolves through Cloudflare (AS13335) at 172.66.161.212, 104.20.42.169, 2606:4700:10::ac42:a1d4, 2606:4700:10::6814:2aa9
34.135.216.150 AS396982 AS13335 95% cert 360f1a56… served by 34.135.216.150 (AS396982) carries SAN tawk.to which currently resolves through Cloudflare (AS13335) at 172.66.161.212, 104.20.42.169, 2606:4700:10::ac42:a1d4, 2606:4700:10::6814:2aa9
68.169.46.128 AS13213 AS13335 95% cert fbb8d4ae… served by 68.169.46.128 (AS13213) carries SAN deliver.tawk.to which currently resolves through Cloudflare (AS13335) at 172.66.161.212, 104.20.42.169, 2606:4700:10::ac42:a1d4, 2606:4700:10::6814:2aa9
104.197.38.144 AS396982 AS13335 95% cert 360f1a56… served by 104.197.38.144 (AS396982) carries SAN tawk.to which currently resolves through Cloudflare (AS13335) at 172.66.161.212, 104.20.42.169, 2606:4700:10::ac42:a1d4, 2606:4700:10::6814:2aa9
104.155.138.216 AS396982 AS13335 95% cert 360f1a56… served by 104.155.138.216 (AS396982) carries SAN tawk.to which currently resolves through Cloudflare (AS13335) at 172.66.161.212, 104.20.42.169, 2606:4700:10::ac42:a1d4, 2606:4700:10::6814:2aa9
136.119.89.53 AS396982 AS13335 95% cert 360f1a56… served by 136.119.89.53 (AS396982) carries SAN tawk.to which currently resolves through Cloudflare (AS13335) at 172.66.161.212, 104.20.42.169, 2606:4700:10::ac42:a1d4, 2606:4700:10::6814:2aa9
34.60.49.183 AS396982 AS13335 95% cert 360f1a56… served by 34.60.49.183 (AS396982) carries SAN tawk.to which currently resolves through Cloudflare (AS13335) at 172.66.161.212, 104.20.42.169, 2606:4700:10::ac42:a1d4, 2606:4700:10::6814:2aa9
34.44.166.229 AS396982 AS13335 95% cert 360f1a56… served by 34.44.166.229 (AS396982) carries SAN tawk.to which currently resolves through Cloudflare (AS13335) at 172.66.161.212, 104.20.42.169, 2606:4700:10::ac42:a1d4, 2606:4700:10::6814:2aa9

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.

Type Value First seen Last seen
NS amy.ns.cloudflare.com 2026-05-25 22:05:29.416 2026-07-28 17:05:15.597
TXT facebook-domain-verification=qhde5lf0e95om273eq3dax2594sz4j 2026-05-25 22:05:29.416 2026-07-28 17:05:15.597
MX 10 aspmx3.googlemail.com 2026-05-25 22:05:29.416 2026-07-28 17:05:15.597
TXT atlassian-domain-verification=aJSdwZkpP4tuYS9yca1v/M8aMkMHPhFY6SJLxFJ7ad0P6ycNWufDzWRsu76sNfx9 2026-05-25 22:05:29.416 2026-07-28 17:05:15.597
A 104.20.42.169 2026-05-25 22:05:29.416 2026-07-28 17:05:15.597
A 172.66.161.212 2026-05-25 22:05:29.416 2026-07-28 17:05:15.597
TXT google-site-verification=xfxcBNycIC4X65bnF6gQAEui_JhaWq7QxiM2Jzmj17k 2026-05-25 22:05:29.416 2026-07-28 17:05:15.597
TXT tiktok-developers-site-verification=AuZueQR2DuNvtrOpAW7qwDZrDJizOmrZ 2026-05-25 22:05:29.416 2026-07-28 17:05:15.597
NS seth.ns.cloudflare.com 2026-05-25 22:05:29.416 2026-07-28 17:05:15.597
TXT eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkb21haW4iOiJ0YXdrLnRvIiwiZXhwIjoxNjU3NzU2ODAwfQ.KNwUZ7T6rHHLFEUKH23Mrr0AGIZnzWdIEXrznoludcU 2026-05-25 22:05:29.416 2026-07-28 17:05:15.597
TXT MS=ms74305633 2026-05-25 22:05:29.416 2026-07-28 17:05:15.597
MX 10 aspmx2.googlemail.com 2026-05-25 22:05:29.416 2026-07-28 17:05:15.597
MX 5 alt2.aspmx.l.google.com 2026-05-25 22:05:29.416 2026-07-28 17:05:15.597
TXT v=spf1 include:_spf.google.com include:amazonses.com include:smtp1.uservoice.com include:mta.tawk.to -all 2026-05-25 22:05:29.416 2026-07-28 17:05:15.597
MX 1 aspmx.l.google.com 2026-05-25 22:05:29.416 2026-07-28 17:05:15.597
AAAA 2606:4700:10::6814:2aa9 2026-05-25 22:05:29.416 2026-07-28 17:05:15.597
MX 5 alt1.aspmx.l.google.com 2026-05-25 22:05:29.416 2026-07-28 17:05:15.597
AAAA 2606:4700:10::ac42:a1d4 2026-05-25 22:05:29.416 2026-07-28 17:05:15.597