Check-Host.cc

Domain

wfmsg.com

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

Run a live full scan of wfmsg.com

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now
Hosting IPs
28
A/AAAA targets
Subdomains
4
CT + scan + body
Record Types
6
seen in DNS
Observed Certs
3
in our scans

DNS Records

A
16.12.88.227, 16.15.41.38, 3.5.78.229, 3.5.78.238, 3.5.81.211, 3.5.81.229, 3.5.81.240, 3.5.81.247
AAAA
MX
0 wfmsg-com.mail.protection.outlook.com
NS
ns-1400.awsdns-47.org, ns-1872.awsdns-42.co.uk, ns-387.awsdns-48.com, ns-638.awsdns-15.net
TXT
54jznnzfphxs23tjgkps3y35lqyhw88l, 5vcd5wng02hrsbsjrbbgvzw3q6dtk1wr, MS=ms88986614, ZOOM_verify_NXVlle8CgVIRClnWJSW9gI, _4ocjyd9judnyxm2wwvgs8ttazmw080v, _ijm9sb4x1tl35xyjuj1c7rwug07lda1, _uiqktiyh1nbem1nt22wuw0n8tsvc5bc, dw070zl1twzsl7r2pqrvhy22m5595065
CNAME
CAA
0 issue "amazon.com", 0 issue "digicert.com", 0 issue "letsencrypt.org", 0 issuewild "amazon.com", 0 issuewild "digicert.com"

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.

Subdomain Resolves to Last seen
wfmsg.com 2026-07-17 09:12:14.132
www.wfmsg.com 2026-07-26 01:26:26.716
support.wfmsg.com
1970-01-01 00:00:00.000

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

Subject: *.wfmsg.com
Issuer: GeoTrust TLS RSA CA G1
SANs: *.wfmsg.com, wfmsg.com
Subject: *.wfmsg.com
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: *.wfmsg.com

IPs Citing This Domain

No citing IPs found yet

As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

No origin-IP leaks detected (yet)

Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.

CT-Log Evidence

Certificates from public Certificate Transparency logs whose subject or SAN names this domain — including historic certs we never observed live.

f7a1059be5183e12… google · xenon2026h2
Subject: *.wfmsg.com
Issuer: GeoTrust TLS RSA CA G1
SANs: *.wfmsg.com, wfmsg.com
Valid: 2026-03-24 00:00:00 → 2026-09-21 23:59:59
fc4df76ee6cc80a7… google · argon2026h2
Subject: wfmsg.com
Issuer: Amazon RSA 2048 M04
SANs: wfmsg.com, *.wfmsg.com, *.communitywfm.com, communitywfm.com
Valid: 2025-10-07 00:00:00 → 2026-11-04 23:59:59
fc4df76ee6cc80a7… cloudflare · nimbus2026
Subject: wfmsg.com
Issuer: Amazon RSA 2048 M04
SANs: wfmsg.com, *.wfmsg.com, *.communitywfm.com, communitywfm.com
Valid: 2025-10-07 00:00:00 → 2026-11-04 23:59:59

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.

Type Value First seen Last seen
A 3.5.78.238 2026-05-26 09:20:11.181 2026-05-26 09:20:11.181
SRV _sipfederationtls._tcp 100 1 5061 sipfed.online.lync.com 2026-05-26 09:20:11.181 2026-07-17 09:12:14.132
TXT 5vcd5wng02hrsbsjrbbgvzw3q6dtk1wr 2026-05-26 09:20:11.181 2026-07-17 09:12:14.132
TXT v=spf1 include:spf.protection.outlook.com include:spf.mandrillapp.com include:7197233.spf05.hubspotemail.net include:spf-us.emailsignatures365.com include:_spf.salesforce.com include:mail.zendesk.com include:vault.wfmsg.com -all 2026-05-26 09:20:11.181 2026-07-17 09:12:14.132
TXT MS=ms88986614 2026-05-26 09:20:11.181 2026-07-17 09:12:14.132
NS ns-1872.awsdns-42.co.uk 2026-05-26 09:20:11.181 2026-07-17 09:12:14.132
A 52.92.131.19 2026-05-26 09:20:11.181 2026-05-26 09:20:11.181
NS ns-1400.awsdns-47.org 2026-05-26 09:20:11.181 2026-07-17 09:12:14.132
MX 0 wfmsg-com.mail.protection.outlook.com 2026-05-26 09:20:11.181 2026-07-17 09:12:14.132
TXT 54jznnzfphxs23tjgkps3y35lqyhw88l 2026-05-26 09:20:11.181 2026-07-17 09:12:14.132
A 3.5.81.211 2026-05-26 09:20:11.181 2026-05-26 09:20:11.181
A 52.92.168.99 2026-05-26 09:20:11.181 2026-05-26 09:20:11.181
TXT hkt3q17v7wvqv8hkvs35grcq2zyl9gb4 2026-05-26 09:20:11.181 2026-07-17 09:12:14.132
TXT _uiqktiyh1nbem1nt22wuw0n8tsvc5bc 2026-05-26 09:20:11.181 2026-07-17 09:12:14.132
A 52.92.227.107 2026-05-26 09:20:11.181 2026-05-26 09:20:11.181
TXT dw070zl1twzsl7r2pqrvhy22m5595065 2026-05-26 09:20:11.181 2026-07-17 09:12:14.132
A 3.5.81.240 2026-05-26 09:20:11.181 2026-05-26 09:20:11.181
TXT _ijm9sb4x1tl35xyjuj1c7rwug07lda1 2026-05-26 09:20:11.181 2026-07-17 09:12:14.132
TXT ZOOM_verify_NXVlle8CgVIRClnWJSW9gI 2026-05-26 09:20:11.181 2026-07-17 09:12:14.132
NS ns-638.awsdns-15.net 2026-05-26 09:20:11.181 2026-07-17 09:12:14.132
A 3.5.78.229 2026-05-26 09:20:11.181 2026-05-26 09:20:11.181
NS ns-387.awsdns-48.com 2026-05-26 09:20:11.181 2026-07-17 09:12:14.132
A 52.92.192.75 2026-05-26 09:20:11.181 2026-05-26 09:20:11.181
TXT _4ocjyd9judnyxm2wwvgs8ttazmw080v 2026-05-26 09:20:11.181 2026-07-17 09:12:14.132
A 3.5.87.120 2026-05-27 02:03:06.722 2026-05-27 02:03:06.722
A 3.5.81.46 2026-05-27 02:03:06.722 2026-05-27 02:03:06.722
A 3.5.81.247 2026-05-27 02:03:06.722 2026-05-27 02:03:06.722
A 52.92.138.3 2026-05-27 02:03:06.722 2026-05-27 02:03:06.722
A 52.92.163.219 2026-05-27 02:03:06.722 2026-05-27 02:03:06.722
A 52.92.236.195 2026-05-27 02:03:06.722 2026-05-27 02:03:06.722
A 3.5.84.53 2026-05-27 02:03:06.722 2026-05-27 02:03:06.722
A 3.5.81.229 2026-05-27 02:03:06.722 2026-05-27 02:03:06.722
CAA 0 issuewild "digicert.com" 2026-07-17 09:12:14.132 2026-07-17 09:12:14.132
CAA 0 issue "digicert.com" 2026-07-17 09:12:14.132 2026-07-17 09:12:14.132
A 52.92.153.3 2026-07-17 09:12:14.132 2026-07-17 09:12:14.132
A 52.92.187.203 2026-07-17 09:12:14.132 2026-07-17 09:12:14.132
CAA 0 issue "amazon.com" 2026-07-17 09:12:14.132 2026-07-17 09:12:14.132
A 52.92.202.171 2026-07-17 09:12:14.132 2026-07-17 09:12:14.132
CAA 0 issuewild "amazon.com" 2026-07-17 09:12:14.132 2026-07-17 09:12:14.132
A 52.218.182.146 2026-07-17 09:12:14.132 2026-07-17 09:12:14.132
A 52.218.136.66 2026-07-17 09:12:14.132 2026-07-17 09:12:14.132
A 52.92.249.139 2026-07-17 09:12:14.132 2026-07-17 09:12:14.132
A 16.12.88.227 2026-07-17 09:12:14.132 2026-07-17 09:12:14.132
CAA 0 issue "letsencrypt.org" 2026-07-17 09:12:14.132 2026-07-17 09:12:14.132
A 16.15.41.38 2026-07-17 09:12:14.132 2026-07-17 09:12:14.132