Check-Host.cc

Try 1.1.1.1 AS13335 check-host.cc /country/de /tld/cc
Domain

avoplan.de

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

DNS Check HTTP Check Run Full Scan .de TLD

Run a live full scan of avoplan.de

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now
Hosting IPs
7
A/AAAA targets
Subdomains
16
CT + scan + body
Record Types
6
seen in DNS
Observed Certs
4
in our scans

DNS Records

A
213.133.104.37
AAAA
2a01:4f8:d0a:24fa::2
MX
10 www37.your-server.de
NS
ns.second-ns.com, ns1.your-server.de, ns3.second-ns.de
TXT
brevo-code:02ddd89b1c960d397afd67ba571ac87c, google-site-verification=hV-fQZR3swkrtjfRX66GBXoEoWwEyLPSZPseYCBkOPU, google-site-verification=yx18kPUT2HMJkgpP9PL4bz188Hv6o1IButNWEscCX3Y, v=spf1 ip4:3.121.210.199 a mx include:buchhaltungsbutler.de include:spf.brevo.com -all
CNAME
—
CAA
—

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.

Subdomain Resolves to Last seen
auth.avoplan.de
172.64.153.85 104.18.34.171 2a06:98c1:3103::ac40:9955 2606:4700:440b::6812:22ab
2026-07-20 05:42:01.455
account.avoplan.de
213.133.104.37 2a01:4f8:d0a:24fa::2
2026-06-16 07:20:01.681
avoplan.de
213.133.104.37 2a01:4f8:d0a:24fa::2
2026-07-24 13:45:01.874
booking.avoplan.de
213.133.104.37 2a01:4f8:d0a:24fa::2
2026-06-15 11:15:17.114
meet.avoplan.de
213.133.104.37 2a01:4f8:d0a:24fa::2
2026-07-16 02:20:36.482
mustermann-koeln.avoplan.de
213.133.104.37 2a01:4f8:d0a:24fa::2
2026-07-16 01:35:35.409
www.account.avoplan.de
213.133.104.37 2a01:4f8:d0a:24fa::2
2026-06-16 07:20:01.681
www.booking.avoplan.de
213.133.104.37 2a01:4f8:d0a:24fa::2
2026-06-15 11:15:17.114
4dukpgprdb7xhyn2clkb.avoplan.de
49.12.237.179
2026-07-24 13:45:01.874
avoplanpro.avoplan.de
1970-01-01 00:00:00.000
moderated.4dukpgprdb7xhyn2clkb.avoplan.de
1970-01-01 00:00:00.000

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

49.12.237.179:443 dc0150992511…
Subject: 4dukpgprdb7xhyn2clkb.avoplan.de
Issuer: YR1
SANs: 4dukpgprdb7xhyn2clkb.avoplan.de
49.12.237.179:443 5821158803c9…
Subject: 4dukpgprdb7xhyn2clkb.avoplan.de
Issuer: R13
SANs: 4dukpgprdb7xhyn2clkb.avoplan.de

IPs Citing This Domain

Hosts whose HTML body references this domain. Strong signal for origin/mirror/embed discovery.

49.12.237.179:443 href · ×2

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

No origin-IP leaks detected (yet)

Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.

CT-Log Evidence

Certificates from public Certificate Transparency logs whose subject or SAN names this domain — including historic certs we never observed live.

4930afa69ac1a6b9… google · argon2026h2
Subject: avoplan.de
Issuer: Encryption Everywhere DV TLS CA - G2
SANs: avoplan.de, www.avoplan.de
Valid: 2025-10-19 00:00:00 → 2026-10-18 23:59:59
64de69af873005eb… google · argon2026h2
Subject: avoplan.de
Issuer: Encryption Everywhere DV TLS CA - G2
SANs: avoplan.de, www.avoplan.de
Valid: 2025-10-19 00:00:00 → 2026-10-18 23:59:59
4930afa69ac1a6b9… google · xenon2026h2
Subject: avoplan.de
Issuer: Encryption Everywhere DV TLS CA - G2
SANs: avoplan.de, www.avoplan.de
Valid: 2025-10-19 00:00:00 → 2026-10-18 23:59:59
64de69af873005eb… google · xenon2026h2
Subject: avoplan.de
Issuer: Encryption Everywhere DV TLS CA - G2
SANs: avoplan.de, www.avoplan.de
Valid: 2025-10-19 00:00:00 → 2026-10-18 23:59:59

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.

Type Value First seen Last seen
TXT google-site-verification=hV-fQZR3swkrtjfRX66GBXoEoWwEyLPSZPseYCBkOPU 2026-05-27 03:33:47.863 2026-07-24 13:45:01.874
TXT v=spf1 ip4:3.121.210.199 a mx include:buchhaltungsbutler.de include:spf.brevo.com -all 2026-05-27 03:33:47.863 2026-07-24 13:45:01.874
NS ns.second-ns.com 2026-05-27 03:33:47.863 2026-07-24 13:45:01.874
TXT brevo-code:02ddd89b1c960d397afd67ba571ac87c 2026-05-27 03:33:47.863 2026-07-24 13:45:01.874
NS ns3.second-ns.de 2026-05-27 03:33:47.863 2026-07-24 13:45:01.874
AAAA 2a01:4f8:d0a:24fa::2 2026-05-27 03:33:47.863 2026-07-24 13:45:01.874
SRV _autodiscover._tcp 0 100 443 mail.your-server.de 2026-05-27 03:33:47.863 2026-07-24 13:45:01.874
A 213.133.104.37 2026-05-27 03:33:47.863 2026-07-24 13:45:01.874
TXT google-site-verification=yx18kPUT2HMJkgpP9PL4bz188Hv6o1IButNWEscCX3Y 2026-05-27 03:33:47.863 2026-07-24 13:45:01.874
NS ns1.your-server.de 2026-05-27 03:33:47.863 2026-07-24 13:45:01.874
MX 10 www37.your-server.de 2026-05-27 03:33:47.863 2026-07-24 13:45:01.874