Check-Host.cc
Domain

4fold.net

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

Run a live full scan of 4fold.net

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now
Hosting IPs
6
A/AAAA targets
Subdomains
3
CT + scan + body
Record Types
5
seen in DNS
Observed Certs
in our scans

DNS Records

A
104.26.4.198, 104.26.5.198, 172.67.75.88
AAAA
2606:4700:20::681a:4c6, 2606:4700:20::681a:5c6, 2606:4700:20::ac43:4b58
MX
0 4fold-net.s-v1.mx.microsoft
NS
kareem.ns.cloudflare.com, liberty.ns.cloudflare.com
TXT
0ed1fe018a7e9f080f72f3479f988d8f7e119620ee, 1password-site-verification=6STIESNXKBHQLAXE62P3CUZN2I, MS=ms79923818, ZmeooVHfW1PxjhBedQyb9HNUt4PCexz2TyAcHn/X/S2Ngvr/cpS0vy57V4/ISu7yBijhIRSrQQJwKcdcf/by4Q==, fl93g04kkavplrmbus4e32jinv, have-i-been-pwned-verification=060b8d512d413884e1aa85efc7a7b196, v=spf1 include:spf.protection.outlook.com -all
CNAME
CAA

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

Subject: *.4fold.net
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.4fold.net, 4fold.net

IPs Citing This Domain

No citing IPs found yet

As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

Origin IP Origin ASN CDN ASN Confidence Reasoning
66.35.45.243 AS12025 AS13335 95% cert 9749702a… served by 66.35.45.243 (AS12025) carries SAN 4fold.net which currently resolves through Cloudflare (AS13335) at 172.67.75.88, 104.26.4.198, 104.26.5.198, 2606:4700:20::681a:5c6

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.

Type Value First seen Last seen
NS liberty.ns.cloudflare.com 2026-06-15 00:54:33.538 2026-06-21 10:53:30.649
TXT v=spf1 include:spf.protection.outlook.com -all 2026-06-15 00:54:33.538 2026-06-21 10:53:30.649
MX 0 4fold-net.s-v1.mx.microsoft 2026-06-15 00:54:33.538 2026-06-21 10:53:30.649
AAAA 2606:4700:20::681a:5c6 2026-06-15 00:54:33.538 2026-06-21 10:53:30.649
TXT 0ed1fe018a7e9f080f72f3479f988d8f7e119620ee 2026-06-15 00:54:33.538 2026-06-21 10:53:30.649
NS kareem.ns.cloudflare.com 2026-06-15 00:54:33.538 2026-06-21 10:53:30.649
A 104.26.5.198 2026-06-15 00:54:33.538 2026-08-21 05:41:31.526
AAAA 2606:4700:20::681a:4c6 2026-06-15 00:54:33.538 2026-06-21 10:53:30.649
A 104.26.4.198 2026-06-15 00:54:33.538 2026-08-21 05:41:31.526
TXT MS=ms79923818 2026-06-15 00:54:33.538 2026-06-21 10:53:30.649
AAAA 2606:4700:20::ac43:4b58 2026-06-15 00:54:33.538 2026-06-21 10:53:30.649
TXT 1password-site-verification=6STIESNXKBHQLAXE62P3CUZN2I 2026-06-15 00:54:33.538 2026-06-21 10:53:30.649
TXT fl93g04kkavplrmbus4e32jinv 2026-06-15 00:54:33.538 2026-06-21 10:53:30.649
A 172.67.75.88 2026-06-15 00:54:33.538 2026-08-21 05:41:31.526
TXT have-i-been-pwned-verification=060b8d512d413884e1aa85efc7a7b196 2026-06-15 00:54:33.538 2026-06-21 10:53:30.649
TXT ZmeooVHfW1PxjhBedQyb9HNUt4PCexz2TyAcHn/X/S2Ngvr/cpS0vy57V4/ISu7yBijhIRSrQQJwKcdcf/by4Q== 2026-06-15 00:54:33.538 2026-06-21 10:53:30.649