Check-Host.cc

Domain

co.za

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

Run a live full scan of co.za

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now
Hosting IPs
A/AAAA targets
Subdomains
CT + scan + body
Record Types
seen in DNS
Observed Certs
in our scans

DNS Records

A
AAAA
MX
NS
TXT
CNAME
CAA

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Subdomain enumeration pending

Every subdomain ever issued a TLS cert under this apex — extracted from Certificate Transparency logs, our own scan observations and body references.

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

Subject: deerbrand.dedicated.co.za
Issuer: YR1
SANs: deerbrand.dedicated.co.za
Subject: customer.telkom.wwas.co.za
Issuer: ZeroSSL RSA DV SSL CA 2
SANs: customer.telkom.wwas.co.za
Subject: *.hostserv.co.za
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.hostserv.co.za, hostserv.co.za
Subject: admin.watysinv.dedicated.co.za
Issuer: admin.watysinv.dedicated.co.za
SANs: admin.watysinv.dedicated.co.za, autodiscover.admin.watysinv.dedicated.co.za, cpanel.admin.watysinv.dedicated.co.za, cpcalendars.admin.watysinv.dedicated.co.za, cpcontacts.admin.watysinv.dedicated.co.za, mail.admin.watysinv.dedicated.co.za, webdisk.admin.watysinv.dedicated.co.za, webmail.admin.watysinv.dedicated.co.za, whm.admin.watysinv.dedicated.co.za, www.admin.watysinv.dedicated.co.za
Subject: *.aserv.co.za
Issuer: RapidSSL TLS RSA CA G1
SANs: *.aserv.co.za, aserv.co.za
Subject: ppsdmn.co.za
Issuer: Entrust OV TLS Issuing RSA CA 2
SANs: *.ppsdmn.co.za, ppsdmn.co.za, www.ppsdmn.co.za
Subject: mobirep.dedicated.co.za
Issuer: YR2
SANs: mobirep.dedicated.co.za
Subject: unms.krypton.co.za
Issuer: YR1
SANs: unms.krypton.co.za
Subject: igrowza.3cx.co.za
Issuer: YR2
SANs: igrowza.3cx.co.za
Subject: www.starhyper.loyaltykard.co.za
Issuer: YR2
SANs: starhyper.loyaltykard.co.za, www.starhyper.co.za, www.starhyper.loyaltykard.co.za
Subject: webmail.jobsphere.co.za
Issuer: YR1
SANs: autoconfig.jobsphere.co.za, autodiscover.jobsphere.co.za, cpanel.jobsphere.co.za, cpcalendars.jobsphere.co.za, cpcontacts.jobsphere.co.za, jobsphere.co.za, mail.jobsphere.co.za, webdisk.jobsphere.co.za, webmail.jobsphere.co.za, www.jobsphere.co.za
Subject: admin.quartz.dedicated.co.za
Issuer: admin.quartz.dedicated.co.za
SANs: admin.quartz.dedicated.co.za, cpanel.admin.quartz.dedicated.co.za, cpcalendars.admin.quartz.dedicated.co.za, cpcontacts.admin.quartz.dedicated.co.za, mail.admin.quartz.dedicated.co.za, webdisk.admin.quartz.dedicated.co.za, webmail.admin.quartz.dedicated.co.za, whm.admin.quartz.dedicated.co.za, www.admin.quartz.dedicated.co.za
Subject: momentummetropolitan.co.za
Issuer: Sectigo RSA Organization Validation Secure Server CA
SANs: *.caiml.com, *.consultm.co.za, *.guardrisk.co.za, *.guardriskpty.co.za, *.hellodoctor.com, *.metropolitan.co.ls, *.metropolitan.co.tz, *.metropolitan.co.ug, *.metropolitan.co.za, *.metropolitan.com.na, *.metropolitanbw.com, *.metropolitangh.com, *.metropolitansz.com, *.metropolitanzm.com, *.mmiholdings.co.za, *.mmiholdings.com, *.mminamibia.com, *.mmltd.co.za, *.mmltd.com.na, *.momentum.co.gg, *.momentum.co.mz, *.momentum.co.uk, *.momentum.co.za, *.momentum.com.na, *.momentumconsult.co.za, *.momentumgim.com, *.momentumhealth.co.za, *.momentummetropolitan.co.za, *.multiply.co.za, *.multiply.money, *.plasaude.com, *.qfg.co.za, *.quattrofinance.co.za, *.rmbam.co.za, momentummetropolitan.co.za
Subject: remote.techmatic.co.za
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: autodiscover.bulkmatic.co.za, autodiscover.ictechlaser.co.za, autodiscover.khoroenergy.co.za, autodiscover.massflo.co.za, autodiscover.rotatech.co.za, autodiscover.techmatic.co.za, autodiscover.techmaticafrica.co.za, remote.techmatic.co.za
Subject: unisup2.co.za
Issuer: YR1
SANs: unisup2.co.za, www.unisup2.co.za
Subject: hiltonhealth.3cx.co.za
Issuer: YR1
SANs: hiltonhealth.3cx.co.za
Subject: touch.secure.ford.co.za
Issuer: GeoTrust TLS RSA CA G1
SANs: akamai.wwwdev.brandap.lincoln.com, akamai.wwwqa.brandap.lincoln.com, touch.secure.ford.co.za, www.ford.co.nz, www.ford.co.th, www.ford.co.za, www.ford.com.au, www.ford.com.ph, www.ford.com.tw, www.ford.com.vn, www.india.ford.com, www.motorcraft.com, www.quicklane.co.za, wwwdev2.akamai.brandaplb.ford.com, wwwdev3.akamai.brandaplb.ford.com, wwwperf.akamai.brandaplb.ford.com, wwwperf.au.ford.com, wwwperf.nz.ford.com, wwwperf.ph.ford.com, wwwperf.th.ford.com, wwwperf.vn.ford.com, wwwperf.za.ford.com, wwwqa.motorcraft.com, wwwqa.nz.ford.com, wwwqa.ph.ford.com, wwwqa.th.ford.com, wwwqa.vn.ford.com, wwwqa.za.ford.com, wwwqa2.za.ford.com, wwwqa3.za.ford.com
Subject: scoresharp.co.za
Issuer: WE1
SANs: *.scoresharp.co.za, scoresharp.co.za
Subject: *.inconsolutions.co.za
Issuer: Starfield Secure Certificate Authority - G2
SANs: *.inconsolutions.co.za, inconsolutions.co.za
Subject: workflows.chatza.co.za
Issuer: YR1
SANs: workflows.chatza.co.za
Subject: admin.dfs.dedicated.co.za
Issuer: admin.dfs.dedicated.co.za
SANs: admin.dfs.dedicated.co.za, mail.admin.dfs.dedicated.co.za, www.admin.dfs.dedicated.co.za
Subject: remote.umacons.co.za
Issuer: Certum DV TLS G2 R39 CA
SANs: remote.umacons.co.za
Subject: fgt1.mrm.attacq.esdns.co.za
Issuer: YR1
SANs: fgt1.mrm.attacq.esdns.co.za
Subject: *.aserv.co.za
Issuer: RapidSSL TLS RSA CA G1
SANs: *.aserv.co.za, aserv.co.za
Subject: staging.4x4things.co.za
Issuer: YR2
SANs: staging.4x4things.co.za
Subject: datastudio.medprax.co.za
Issuer: YR2
SANs: datastudio.medprax.co.za
Subject: delmanufacturing.co.za
Issuer: YR1
SANs: *.delmanufacturing.co.za, delmanufacturing.co.za
Subject: app.dstsifportal.co.za
Issuer: YR1
SANs: app.dstsifportal.co.za
Subject: admin.gitsolutions.dedicated.co.za.165-73-83-82.cpanel.site
Issuer: YR1
SANs: admin.gitsolutions.dedicated.co.za.165-73-83-82.cpanel.site, www.admin.gitsolutions.dedicated.co.za.165-73-83-82.cpanel.site
Subject: mail.aaa-bee.co.za
Issuer: YR2
SANs: mail.aaa-bee.co.za

IPs Citing This Domain

No citing IPs found yet

As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

Origin IP Origin ASN CDN ASN Confidence Reasoning
211.25.121.161 AS9930 AS16625 95% cert cac722bb… served by 211.25.121.161 (AS9930) carries SAN m.msccruises.co.za which currently resolves through Akamai (AS16625) at 23.220.113.171, 88.221.170.94, 104.99.234.42, 23.222.125.239
23.212.126.218 AS7713 AS16625 95% cert 04a37cf1… served by 23.212.126.218 (AS7713) carries SAN www.kelloggs.co.za which currently resolves through Akamai (AS16625) at 92.122.62.40, 23.222.55.136, 23.197.138.76
23.53.210.11 AS45899 AS20940 95% cert 39b33491… served by 23.53.210.11 (AS45899) carries SAN image.mailwoolworths.co.za which currently resolves through Akamai (AS20940) at 2a02:26f0:fe00:188::2c1c, 23.220.113.160, 2a02:26f0:fe00:190::2c1c, 23.222.198.11
23.53.210.11 AS45899 AS16625 95% cert 39b33491… served by 23.53.210.11 (AS45899) carries SAN image.marketing.ctm.co.za which currently resolves through Akamai (AS16625) at 23.220.113.160, 2a02:26f0:fe00:190::2c1c, 2a02:26f0:fe00:188::2c1c, 88.221.170.91
64.23.144.91 AS14061 AS13335 95% cert 8a8b034e… served by 64.23.144.91 (AS14061) carries SAN tubidymp3.co.za which currently resolves through Cloudflare (AS13335) at 188.114.96.0, 2a06:98c1:3121::, 2a06:98c1:3120::, 188.114.97.0
139.84.229.225 AS20473 AS13335 95% cert 5cde0134… served by 139.84.229.225 (AS20473) carries SAN domesticus.co.za which currently resolves through Cloudflare (AS13335) at 188.114.96.0, 2a06:98c1:3121::, 2a06:98c1:3120::, 188.114.97.0
41.193.39.225 AS11845 AS13335 95% cert 06f2b54b… served by 41.193.39.225 (AS11845) carries SAN educasa.co.za which currently resolves through Cloudflare (AS13335) at 188.114.96.0, 188.114.97.0, 2a06:98c1:3120::3, 2a06:98c1:3121::3
156.38.144.116 AS37153 AS13335 95% cert 99b1e21c… served by 156.38.144.116 (AS37153) carries SAN dovetail.co.za which currently resolves through Cloudflare (AS13335) at 162.159.135.42
168.210.133.96 AS20011 AS13335 95% cert 26cbf955… served by 168.210.133.96 (AS20011) carries SAN homeassist.hvdsrvr.co.za which currently resolves through Cloudflare (AS13335) at 188.114.96.0, 2a06:98c1:3121::, 2a06:98c1:3120::, 188.114.97.0
122.222.40.51 AS2519 AS16625 95% cert 81d819d3… served by 122.222.40.51 (AS2519) carries SAN loadsofliving.truworths.co.za which currently resolves through Akamai (AS16625) at 23.220.112.134, 2a02:26f0:fe00:1ac::df9, 2a02:26f0:fe00:1bd::df9, 2a02:26f0:1180:692::df9
122.222.40.51 AS2519 AS15169 95% cert 81d819d3… served by 122.222.40.51 (AS2519) carries SAN identity.co.za which currently resolves through Google (AS15169) at 130.35.112.206, 2001:4860:4802:36::15, 2001:4860:4802:32::15, 2001:4860:4802:34::15
122.222.40.51 AS2519 AS13335 95% cert 81d819d3… served by 122.222.40.51 (AS2519) carries SAN occ.dev-id-preprod.co.za which currently resolves through Cloudflare (AS13335) at 104.21.52.93, 172.67.197.145, 2606:4700:3037::6815:345d, 2606:4700:3033::ac43:c591
41.50.26.41 AS37168 AS13335 95% cert fd26709c… served by 41.50.26.41 (AS37168) carries SAN cellc.co.za which currently resolves through Cloudflare (AS13335) at 104.18.5.83, 104.18.4.83, 2606:4700::6812:453, 2606:4700::6812:553
41.87.203.238 AS37315 AS13335 95% cert 68852ddf… served by 41.87.203.238 (AS37315) carries SAN gtxconnect.co.za which currently resolves through Cloudflare (AS13335) at 188.114.96.0, 2a06:98c1:3121::, 2a06:98c1:3120::, 188.114.97.0
196.36.178.253 AS3741 AS13335 95% cert 1b04ff3d… served by 196.36.178.253 (AS3741) carries SAN cloud.truworths.co.za which currently resolves through Cloudflare (AS13335) at 188.114.96.0, 2a06:98c1:3121::, 2a06:98c1:3120::, 188.114.97.0
196.33.143.19 AS3741 AS8075 95% cert 31773e74… served by 196.33.143.19 (AS3741) carries SAN theunlimited.co.za which currently resolves through Microsoft (AS8075) at 40.120.24.221
41.77.55.236 AS37670 AS8075 95% cert 6c88bc00… served by 41.77.55.236 (AS37670) carries SAN balwin.co.za which currently resolves through Microsoft (AS8075) at 20.87.80.66
23.60.180.171 AS4775 AS20940 95% cert e5010b44… served by 23.60.180.171 (AS4775) carries SAN www.mouser.co.za which currently resolves through Akamai (AS20940) at 104.85.0.22, 184.30.156.107, 23.220.128.22, 23.209.56.156
197.159.43.152 AS37413 AS13335 95% cert a5ac9e1e… served by 197.159.43.152 (AS37413) carries SAN nac.co.za which currently resolves through Cloudflare (AS13335) at 172.67.179.233, 104.21.18.31, 2606:4700:3030::6815:121f, 2606:4700:3034::ac43:b3e9
197.100.124.9 AS3741 AS16509 95% cert ad3ca232… served by 197.100.124.9 (AS3741) carries SAN papertrail.co.za which currently resolves through Amazon (AS16509) at 18.201.106.170
197.100.124.56 AS3741 AS16509 95% cert ad3ca232… served by 197.100.124.56 (AS3741) carries SAN papertrail.co.za which currently resolves through Amazon (AS16509) at 18.201.106.170
156.38.231.222 AS37153 AS16509 95% cert ad3ca232… served by 156.38.231.222 (AS37153) carries SAN papertrail.co.za which currently resolves through Amazon (AS16509) at 18.201.106.170
23.39.232.37 AS7713 AS20940 95% cert e5010b44… served by 23.39.232.37 (AS7713) carries SAN www.mouser.co.za which currently resolves through Akamai (AS20940) at 104.85.0.22, 184.30.156.107, 23.56.162.171, 104.99.232.156
129.232.140.20 AS37153 AS13335 95% cert 492f472a… served by 129.232.140.20 (AS37153) carries SAN konsoleh.co.za which currently resolves through Cloudflare (AS13335) at 172.67.72.236, 104.26.8.189, 104.26.9.189, 2606:4700:20::681a:8bd
161.49.24.106 AS17639 AS15169 95% cert 81d819d3… served by 161.49.24.106 (AS17639) carries SAN identity.co.za which currently resolves through Google (AS15169) at 130.35.112.206, 2001:4860:4802:36::15, 2001:4860:4802:32::15, 2001:4860:4802:34::15

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Domain timeline pending

Passive-DNS history accumulates as our forward-DNS crawler observes A/AAAA/MX/NS/TXT records over time.