Check-Host.cc

Domain

0l.de

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

Run a live full scan of 0l.de

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now
Hosting IPs
A/AAAA targets
Subdomains
CT + scan + body
Record Types
seen in DNS
Observed Certs
in our scans

DNS Records

A
143.244.60.193, 143.244.60.196, 143.244.60.197, 169.150.236.106, 185.111.111.154, 185.111.111.155, 185.111.111.156, 185.111.111.157
AAAA
2001:41d0:605:ca00::1175:1, 2400:52e0:1a00::1235:1, 2400:52e0:1a00::1347:1, 2400:52e0:1a00::1348:1, 2400:52e0:1e00:2::1328:1, 2400:52e0:1e00:2::1329:1, 2400:52e0:1e00:2::1330:1, 2400:52e0:1e00:2::1331:1
MX
10 mail.0l.de
NS
bns1.0l.de, bns2.0l.de
TXT
argon2id$v=19$m=512,t=256,p=1$kdQ4Wo9RyWZU4z0mj6mewg$7ECQvyulWW1BBLcVLAeWVpaT5YW/+cWi3NrziTqN+Nc, google-site-verification=6awqjky-AzdcNUtiXvnThV9fj2GFcVoqeYFUFmRy6gk, v=spf1 mx:mail.0l.de ip4:49.13.199.13/32 ip6:2a09:11c0:200::/44 ip6:2a01:4f8:c0c:ce48::1/128 -all
CNAME
CAA
0 contactemail "hostmaster@0l.de", 0 iodef "mailto:hostmaster@0l.de", 0 issue "letsencrypt.org;validationmethods=dns-01,http-01", 0 issuemail ";", 0 issuewild "letsencrypt.org;validationmethods=dns-01"

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Subdomain enumeration pending

Every subdomain ever issued a TLS cert under this apex — extracted from Certificate Transparency logs, our own scan observations and body references.

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

Certificate observations pending

TLS certs naming this domain in subject or SANs will appear here as our scan-layer catches them.

IPs Citing This Domain

No citing IPs found yet

As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

No origin-IP leaks detected (yet)

Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.

Type Value First seen Last seen
NS bns1.0l.de 2026-05-31 15:38:31.905 2026-06-18 06:22:42.908
TXT google-site-verification=6awqjky-AzdcNUtiXvnThV9fj2GFcVoqeYFUFmRy6gk 2026-05-31 15:38:31.905 2026-06-18 06:22:42.908
TXT argon2id$v=19$m=512,t=256,p=1$kdQ4Wo9RyWZU4z0mj6mewg$7ECQvyulWW1BBLcVLAeWVpaT5YW/+cWi3NrziTqN+Nc 2026-05-31 15:38:31.905 2026-06-18 06:22:42.908
NS bns2.0l.de 2026-05-31 15:38:31.905 2026-06-18 06:22:42.908
MX 10 mail.0l.de 2026-05-31 15:38:31.905 2026-06-18 06:22:42.908
SRV _autodiscover._tcp 0 1 443 mail.0l.de 2026-05-31 15:38:31.905 2026-06-18 06:22:42.908
TXT v=spf1 mx:mail.0l.de ip4:49.13.199.13/32 ip6:2a09:11c0:200::/44 ip6:2a01:4f8:c0c:ce48::1/128 -all 2026-05-31 15:38:31.905 2026-06-18 06:22:42.908
AAAA 2400:52e0:1e00:2::1332:1 2026-05-31 15:38:31.905 2026-06-05 17:09:59.086
A 185.111.111.156 2026-05-31 15:38:31.905 2026-06-05 18:22:45.744
AAAA 2400:52e0:1e00:2::1328:1 2026-05-31 15:40:50.761 2026-06-18 06:22:42.908
AAAA 2400:52e0:1e00:2::1329:1 2026-05-31 15:42:56.490 2026-06-05 15:26:34.437
A 185.111.111.154 2026-05-31 15:42:56.490 2026-06-18 06:22:42.908
A 185.111.111.157 2026-05-31 15:46:58.770 2026-06-05 18:06:20.095
AAAA 2400:52e0:1e00:2::1330:1 2026-05-31 15:50:53.249 2026-06-05 16:39:16.895
AAAA 2400:52e0:1a00::1347:1 2026-05-31 17:06:31.902 2026-05-31 17:06:31.902
A 143.244.60.197 2026-05-31 17:06:31.902 2026-06-05 03:18:54.447
A 185.111.111.158 2026-05-31 18:16:31.866 2026-06-05 18:45:36.975
AAAA 2400:52e0:1e00:2::1331:1 2026-05-31 18:28:31.861 2026-06-05 18:02:09.481
CAA 0 issuewild "letsencrypt.org;validationmethods=dns-01" 2026-06-01 15:40:22.304 2026-06-18 06:22:42.908
CAA 0 contactemail "hostmaster@0l.de" 2026-06-01 15:40:22.304 2026-06-18 06:22:42.908
CAA 0 issuemail ";" 2026-06-01 15:40:22.304 2026-06-18 06:22:42.908
A 185.111.111.155 2026-06-01 15:40:22.304 2026-06-05 18:32:52.018
CAA 0 issue "letsencrypt.org;validationmethods=dns-01,http-01" 2026-06-01 15:40:22.304 2026-06-18 06:22:42.908
CAA 0 iodef "mailto:hostmaster@0l.de" 2026-06-01 15:40:22.304 2026-06-18 06:22:42.908
A 37.19.203.178 2026-06-01 15:45:28.626 2026-06-17 06:24:53.764
A 84.17.46.53 2026-06-01 15:50:01.254 2026-06-03 23:11:42.742
A 51.83.172.163 2026-06-01 16:29:37.447 2026-06-05 18:48:47.955
AAAA 2001:41d0:605:ca00::1175:1 2026-06-02 01:29:39.943 2026-06-05 11:36:44.959
A 143.244.60.193 2026-06-02 03:07:27.525 2026-06-02 06:25:41.381
AAAA 2400:52e0:1a00::1235:1 2026-06-02 04:23:12.215 2026-06-02 04:23:12.215
AAAA 2400:52e0:1a00::1348:1 2026-06-02 11:04:01.799 2026-06-02 11:04:01.799
A 169.150.236.106 2026-06-04 23:33:59.809 2026-06-04 23:33:59.809
AAAA 2400:52e0:1e01::883:1 2026-06-05 01:02:20.641 2026-06-17 06:24:53.764
A 185.93.1.245 2026-06-05 05:36:01.185 2026-06-05 05:36:01.185
A 143.244.60.196 2026-06-05 08:48:27.888 2026-06-05 08:48:27.888
AAAA 2400:52e0:1e01::1056:1 2026-06-05 13:33:54.074 2026-06-15 06:24:32.259
A 185.229.190.147 2026-06-15 06:24:32.259 2026-06-15 06:24:32.259