Check-Host.cc

Domain

ayiconnection.com

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

Run a live full scan of ayiconnection.com

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now
Hosting IPs
18
A/AAAA targets
Subdomains
14
CT + scan + body
Record Types
6
seen in DNS
Observed Certs
19
in our scans

DNS Records

A
104.21.27.153, 172.67.142.246, 188.114.96.0, 188.114.97.0
AAAA
2a06:98c1:3120::, 2a06:98c1:3120::3, 2a06:98c1:3120::b, 2a06:98c1:3121::, 2a06:98c1:3121::3, 2a06:98c1:3121::b
MX
1 aspmx.l.google.com, 10 _dc-mx.0429a3ce7dd7.ayiconnection.com, 10 alt3.aspmx.l.google.com, 10 alt4.aspmx.l.google.com, 10 mx.zoho.com, 20 mx2.zoho.com, 5 alt1.aspmx.l.google.com, 5 alt2.aspmx.l.google.com
NS
bingo.ns.cloudflare.com, martin.ns.cloudflare.com
TXT
facebook-domain-verification=15v73ze8qcnwuj3lq6kcfe2qtr2c0g, google-site-verification=QGl8CeEu-wlSqBruWkUREVyCf3PokBLgo_GYR2ayycE, google-site-verification=s07bG-JQKGulNk44vTmlecksuhIiebG11puU-k5m5O4, v=spf1 include:spf.sendinblue.com mx ~all, v=spf1 include:zoho.com include:spf.sendinblue.com mx ~all, zoho-verification=zb48464222.zmverify.zoho.com
CNAME
CAA
0 issue "comodoca.com", 0 issue "digicert.com; cansignhttpexchanges=yes", 0 issue "letsencrypt.org", 0 issue "pki.goog; cansignhttpexchanges=yes", 0 issue "ssl.com", 0 issuewild "comodoca.com", 0 issuewild "digicert.com; cansignhttpexchanges=yes", 0 issuewild "letsencrypt.org"

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

Subject: *.ayiconnection.com
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.ayiconnection.com, ayiconnection.com
Subject: staging.ayiconnection.com
Issuer: E8
SANs: staging.ayiconnection.com
Subject: *.ayiconnection.com
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.ayiconnection.com, ayiconnection.com
Subject: staging.ayiconnection.com
Issuer: E7
SANs: staging.ayiconnection.com

IPs Citing This Domain

No citing IPs found yet

As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

Origin IP Origin ASN CDN ASN Confidence Reasoning
161.35.115.197 AS14061 AS13335 95% cert 5ce6471f… served by 161.35.115.197 (AS14061) carries SAN ayiconnection.com which currently resolves through Cloudflare (AS13335) at 188.114.96.0, 2a06:98c1:3121::, 2a06:98c1:3120::, 188.114.97.0

CT-Log Evidence

Certificates from public Certificate Transparency logs whose subject or SAN names this domain — including historic certs we never observed live.

11553173c7daf176… google · argon2026h2
Subject: *.ayiconnection.com
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.ayiconnection.com, ayiconnection.com
Valid: 2025-06-30 00:00:00 → 2026-07-31 23:59:59
5ce6471fd0d466e6… google · xenon2026h2
Subject: *.ayiconnection.com
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.ayiconnection.com, ayiconnection.com
Valid: 2025-06-30 00:00:00 → 2026-07-31 23:59:59
9b0209766c5dcd5d… google · xenon2026h2
Subject: *.ayiconnection.com
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.ayiconnection.com, ayiconnection.com
Valid: 2025-06-30 00:00:00 → 2026-07-31 23:59:59
9cfba4f44fcf3b1d… google · argon2026h2
Subject: *.ayiconnection.com
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.ayiconnection.com, ayiconnection.com
Valid: 2025-06-30 00:00:00 → 2026-07-31 23:59:59
9a1c844f4b04a761… google · xenon2026h2
Subject: *.ayiconnection.com
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.ayiconnection.com, ayiconnection.com
Valid: 2025-06-27 00:00:00 → 2026-07-28 23:59:59
c781e8c01a38c849… google · argon2026h2
Subject: *.ayiconnection.com
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.ayiconnection.com, ayiconnection.com
Valid: 2025-06-27 00:00:00 → 2026-07-28 23:59:59

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.

Type Value First seen Last seen
TXT zoho-verification=zb48464222.zmverify.zoho.com 2026-06-01 15:12:51.436 2026-07-26 10:29:05.614
CAA 0 issuewild "comodoca.com" 2026-06-01 15:12:51.436 2026-07-26 10:29:05.614
CAA 0 issue "digicert.com; cansignhttpexchanges=yes" 2026-06-01 15:12:51.436 2026-07-26 10:29:05.614
CAA 0 issue "comodoca.com" 2026-06-01 15:12:51.436 2026-07-26 10:29:05.614
MX 10 _dc-mx.0429a3ce7dd7.ayiconnection.com 2026-06-01 15:12:51.436 2026-07-26 10:29:05.614
CAA 0 issue "letsencrypt.org" 2026-06-01 15:12:51.436 2026-07-26 10:29:05.614
TXT v=spf1 include:spf.sendinblue.com mx ~all 2026-06-01 15:12:51.436 2026-07-26 10:29:05.614
NS martin.ns.cloudflare.com 2026-06-01 15:12:51.436 2026-07-26 10:29:05.614
NS bingo.ns.cloudflare.com 2026-06-01 15:12:51.436 2026-07-26 10:29:05.614
AAAA 2a06:98c1:3120:: 2026-06-01 15:12:51.436 2026-06-01 15:12:51.436
MX 20 mx2.zoho.com 2026-06-01 15:12:51.436 2026-07-26 10:29:05.614
A 188.114.96.0 2026-06-01 15:12:51.436 2026-07-26 10:29:05.614
MX 10 alt3.aspmx.l.google.com 2026-06-01 15:12:51.436 2026-07-26 10:29:05.614
TXT facebook-domain-verification=15v73ze8qcnwuj3lq6kcfe2qtr2c0g 2026-06-01 15:12:51.436 2026-07-26 10:29:05.614
TXT google-site-verification=s07bG-JQKGulNk44vTmlecksuhIiebG11puU-k5m5O4 2026-06-01 15:12:51.436 2026-07-26 10:29:05.614
CAA 0 issue "ssl.com" 2026-06-01 15:12:51.436 2026-07-26 10:29:05.614
CAA 0 issuewild "pki.goog; cansignhttpexchanges=yes" 2026-06-01 15:12:51.436 2026-07-26 10:29:05.614
MX 10 mx.zoho.com 2026-06-01 15:12:51.436 2026-07-26 10:29:05.614
CAA 0 issuewild "digicert.com; cansignhttpexchanges=yes" 2026-06-01 15:12:51.436 2026-07-26 10:29:05.614
TXT v=spf1 include:zoho.com include:spf.sendinblue.com mx ~all 2026-06-01 15:12:51.436 2026-07-26 10:29:05.614
CAA 0 issuewild "ssl.com" 2026-06-01 15:12:51.436 2026-07-26 10:29:05.614
MX 5 alt2.aspmx.l.google.com 2026-06-01 15:12:51.436 2026-07-26 10:29:05.614
TXT google-site-verification=QGl8CeEu-wlSqBruWkUREVyCf3PokBLgo_GYR2ayycE 2026-06-01 15:12:51.436 2026-07-26 10:29:05.614
MX 10 alt4.aspmx.l.google.com 2026-06-01 15:12:51.436 2026-07-26 10:29:05.614
MX 1 aspmx.l.google.com 2026-06-01 15:12:51.436 2026-07-26 10:29:05.614
A 188.114.97.0 2026-06-01 15:12:51.436 2026-07-26 10:29:05.614
AAAA 2a06:98c1:3121:: 2026-06-01 15:12:51.436 2026-06-01 15:12:51.436
CAA 0 issuewild "letsencrypt.org" 2026-06-01 15:12:51.436 2026-07-26 10:29:05.614
CAA 0 issue "pki.goog; cansignhttpexchanges=yes" 2026-06-01 15:12:51.436 2026-07-26 10:29:05.614
MX 5 alt1.aspmx.l.google.com 2026-06-01 15:12:51.436 2026-07-26 10:29:05.614
MX 50 mx3.zoho.com 2026-06-01 15:12:51.436 2026-07-26 10:29:05.614
AAAA 2a06:98c1:3121::b 2026-06-18 21:57:42.399 2026-06-18 21:57:42.399
A 104.21.27.153 2026-06-18 21:57:42.399 2026-06-18 21:57:42.399
AAAA 2a06:98c1:3120::b 2026-06-18 21:57:42.399 2026-06-18 21:57:42.399
A 172.67.142.246 2026-06-18 21:57:42.399 2026-06-18 21:57:42.399
AAAA 2a06:98c1:3120::3 2026-07-26 10:29:05.614 2026-07-26 10:29:05.614
AAAA 2a06:98c1:3121::3 2026-07-26 10:29:05.614 2026-07-26 10:29:05.614