Check-Host.cc

Try 1.1.1.1 AS13335 check-host.cc /country/de /tld/cc
Domain

crewcompensation.test2.aa.com

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

DNS Check HTTP Check Run Full Scan .com TLD

Run a live full scan of crewcompensation.test2.aa.com

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now
Hosting IPs
18
A/AAAA targets
Subdomains
—
CT + scan + body
Record Types
2
seen in DNS
Observed Certs
24
in our scans

DNS Records

A
104.102.33.127, 23.199.222.126, 23.222.34.73, 23.38.19.28, 23.49.182.152, 23.51.114.215, 23.60.204.109, 95.100.79.95
AAAA
2600:141b:1c00:2281::22b1, 2600:141b:1c00:22a5::22b1, 2a02:26f0:1180:691::22b1, 2a02:26f0:1180:69b::22b1, 2a02:26f0:1700:38c::22b1, 2a02:26f0:1700:38d::22b1, 2a02:26f0:c6:3bc::22b1, 2a02:26f0:c6:3bf::22b1
MX
—
NS
—
TXT
—
CNAME
—
CAA
—

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Subdomain enumeration pending

Every subdomain ever issued a TLS cert under this apex — extracted from Certificate Transparency logs, our own scan observations and body references.

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

Certificate observations pending

TLS certs naming this domain in subject or SANs will appear here as our scan-layer catches them.

IPs Citing This Domain

No citing IPs found yet

As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

No origin-IP leaks detected (yet)

Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.

CT-Log Evidence

Certificates from public Certificate Transparency logs whose subject or SAN names this domain — including historic certs we never observed live.

35b05a2c42d7a23f… google · argon2026h2
Subject: crewcompensation.test.aa.com
Issuer: Entrust OV TLS Issuing RSA CA 2
SANs: crewcompensation.test.aa.com, crewcompensation.stage.aa.com, crewcompensation.test2.aa.com
Valid: 2025-12-10 00:00:00 → 2026-12-10 23:59:59
f78067efe0869aff… google · argon2026h2
Subject: crewcompensation.test.aa.com
Issuer: Entrust OV TLS Issuing RSA CA 2
SANs: crewcompensation.test.aa.com, crewcompensation.stage.aa.com, crewcompensation.test2.aa.com
Valid: 2025-12-10 00:00:00 → 2026-12-10 23:59:59
2f2beead2a20609e… google · argon2026h2
Subject: selftag-pdc-stage.aa.com
Issuer: Entrust OV TLS Issuing ECC CA 2
SANs: selftag-pdc-stage.aa.com, admin.app.np.bags.aa.com, airpass.api.stage.aa.com, alpsv-dev.aa.com, amps-preprod.aa.com, api.amps-preprod.aa.com, api.techops-bow-preprod.aa.com, apisngui-dev.aa.com, apt.stage.aa.com, asom.dev.aa.com, avppredictive-stage.aa.com, badging-stage.aa.com, bagmatrix.dev.aa.com, bagmatrix.stage.aa.com, bagmatrix.test.aa.com, biometrics.dev.aa.com, biometrics.stage.aa.com, biometrics.test.aa.com, boss.app.np.bags.aa.com, cers-dev.aa.com, cersapi-dev.aa.com, cn.nonprod.cninternal.aa.com, cn.nonprod.feature.aa.com, cn.nonprod.liveactivity.aa.com, cn.nonprod.ondemand.aa.com, cn.nonprod.platform.aa.com, cn.nonprod.services.aa.com, crewcompensation.test2.aa.com, css-dev-api.aa.com, css-dev.aa.com, cstrmaaat01087.qcorpaa.aa.com, csubl-dev.aa.com, csubl-stage.aa.com, csubl-test.aa.com, custeventprocessing.stage.services.aa.com, customermdm.qa.services.aa.com, customermdm.stage.services.aa.com, custprivacy.stage.services.aa.com, darma-stage.aa.com, deviate-sg.app.np.bags.aa.com, egte-np.aa.com, emis-dev.aa.com, emis-stage.aa.com, emis-test.aa.com, fa-qa.vms.aa.com, faetb-test.qcorpaa.aa.com, faroms-test.qcorpaa.aa.com, fleetfocusstg.aa.com, gl-stage.aa.com, kiko-sg.app.np.bags.aa.com, mctapp-api-stage.aa.com, nrta.stage.aa.com, nrta.test.etp.aa.com, obs-test.aa.com, payment-services-stage.aa.com, people-stage.aa.com, pilot-cca-stage.aa.com, pilot-cca-test.aa.com, pilots.test.aa.com, pilotvms-test.qcorpaa.aa.com, prime-sg.app.np.bags.aa.com, raptor-sg.app.np.bags.aa.com, raptor.app.np.bags.aa.com, stage.sroversalereasons.aa.com, stage.srprotectoptions.aa.com, surveys-stage.aa.com, test.ttsfa.aa.com, tlink-sg.app.np.bags.aa.com, tlink.app.np.bags.aa.com, travelplanner.test.etp.aa.com, ultraprime-sg.app.np.bags.aa.com
Valid: 2025-09-26 00:00:00 → 2026-09-26 23:59:59
2f2beead2a20609e… cloudflare · nimbus2026
Subject: selftag-pdc-stage.aa.com
Issuer: Entrust OV TLS Issuing ECC CA 2
SANs: selftag-pdc-stage.aa.com, admin.app.np.bags.aa.com, airpass.api.stage.aa.com, alpsv-dev.aa.com, amps-preprod.aa.com, api.amps-preprod.aa.com, api.techops-bow-preprod.aa.com, apisngui-dev.aa.com, apt.stage.aa.com, asom.dev.aa.com, avppredictive-stage.aa.com, badging-stage.aa.com, bagmatrix.dev.aa.com, bagmatrix.stage.aa.com, bagmatrix.test.aa.com, biometrics.dev.aa.com, biometrics.stage.aa.com, biometrics.test.aa.com, boss.app.np.bags.aa.com, cers-dev.aa.com, cersapi-dev.aa.com, cn.nonprod.cninternal.aa.com, cn.nonprod.feature.aa.com, cn.nonprod.liveactivity.aa.com, cn.nonprod.ondemand.aa.com, cn.nonprod.platform.aa.com, cn.nonprod.services.aa.com, crewcompensation.test2.aa.com, css-dev-api.aa.com, css-dev.aa.com, cstrmaaat01087.qcorpaa.aa.com, csubl-dev.aa.com, csubl-stage.aa.com, csubl-test.aa.com, custeventprocessing.stage.services.aa.com, customermdm.qa.services.aa.com, customermdm.stage.services.aa.com, custprivacy.stage.services.aa.com, darma-stage.aa.com, deviate-sg.app.np.bags.aa.com, egte-np.aa.com, emis-dev.aa.com, emis-stage.aa.com, emis-test.aa.com, fa-qa.vms.aa.com, faetb-test.qcorpaa.aa.com, faroms-test.qcorpaa.aa.com, fleetfocusstg.aa.com, gl-stage.aa.com, kiko-sg.app.np.bags.aa.com, mctapp-api-stage.aa.com, nrta.stage.aa.com, nrta.test.etp.aa.com, obs-test.aa.com, payment-services-stage.aa.com, people-stage.aa.com, pilot-cca-stage.aa.com, pilot-cca-test.aa.com, pilots.test.aa.com, pilotvms-test.qcorpaa.aa.com, prime-sg.app.np.bags.aa.com, raptor-sg.app.np.bags.aa.com, raptor.app.np.bags.aa.com, stage.sroversalereasons.aa.com, stage.srprotectoptions.aa.com, surveys-stage.aa.com, test.ttsfa.aa.com, tlink-sg.app.np.bags.aa.com, tlink.app.np.bags.aa.com, travelplanner.test.etp.aa.com, ultraprime-sg.app.np.bags.aa.com
Valid: 2025-09-26 00:00:00 → 2026-09-26 23:59:59
38eddd61ea5504e1… google · xenon2026h2
Subject: selftag-pdc-stage.aa.com
Issuer: Entrust OV TLS Issuing ECC CA 2
SANs: selftag-pdc-stage.aa.com, admin.app.np.bags.aa.com, airpass.api.stage.aa.com, alpsv-dev.aa.com, amps-preprod.aa.com, api.amps-preprod.aa.com, api.techops-bow-preprod.aa.com, apisngui-dev.aa.com, apt.stage.aa.com, asom.dev.aa.com, avppredictive-stage.aa.com, badging-stage.aa.com, bagmatrix.dev.aa.com, bagmatrix.stage.aa.com, bagmatrix.test.aa.com, biometrics.dev.aa.com, biometrics.stage.aa.com, biometrics.test.aa.com, boss.app.np.bags.aa.com, cers-dev.aa.com, cersapi-dev.aa.com, cn.nonprod.cninternal.aa.com, cn.nonprod.feature.aa.com, cn.nonprod.liveactivity.aa.com, cn.nonprod.ondemand.aa.com, cn.nonprod.platform.aa.com, cn.nonprod.services.aa.com, crewcompensation.test2.aa.com, css-dev-api.aa.com, css-dev.aa.com, cstrmaaat01087.qcorpaa.aa.com, csubl-dev.aa.com, csubl-stage.aa.com, csubl-test.aa.com, custeventprocessing.stage.services.aa.com, customermdm.qa.services.aa.com, customermdm.stage.services.aa.com, custprivacy.stage.services.aa.com, darma-stage.aa.com, deviate-sg.app.np.bags.aa.com, egte-np.aa.com, emis-dev.aa.com, emis-stage.aa.com, emis-test.aa.com, fa-qa.vms.aa.com, faetb-test.qcorpaa.aa.com, faroms-test.qcorpaa.aa.com, fleetfocusstg.aa.com, gl-stage.aa.com, kiko-sg.app.np.bags.aa.com, mctapp-api-stage.aa.com, nrta.stage.aa.com, nrta.test.etp.aa.com, obs-test.aa.com, payment-services-stage.aa.com, people-stage.aa.com, pilot-cca-stage.aa.com, pilot-cca-test.aa.com, pilots.test.aa.com, pilotvms-test.qcorpaa.aa.com, prime-sg.app.np.bags.aa.com, raptor-sg.app.np.bags.aa.com, raptor.app.np.bags.aa.com, stage.sroversalereasons.aa.com, stage.srprotectoptions.aa.com, surveys-stage.aa.com, test.ttsfa.aa.com, tlink-sg.app.np.bags.aa.com, tlink.app.np.bags.aa.com, travelplanner.test.etp.aa.com, ultraprime-sg.app.np.bags.aa.com
Valid: 2025-09-26 00:00:00 → 2026-09-26 23:59:59
5b935b18f7dd3ee7… google · xenon2026h2
Subject: selftag-pdc-stage.aa.com
Issuer: Entrust OV TLS Issuing RSA CA 2
SANs: selftag-pdc-stage.aa.com, admin.app.np.bags.aa.com, airpass.api.stage.aa.com, alpsv-dev.aa.com, amps-preprod.aa.com, api.amps-preprod.aa.com, api.techops-bow-preprod.aa.com, apisngui-dev.aa.com, apt.stage.aa.com, asom.dev.aa.com, avppredictive-stage.aa.com, badging-stage.aa.com, bagmatrix.dev.aa.com, bagmatrix.stage.aa.com, bagmatrix.test.aa.com, biometrics.dev.aa.com, biometrics.stage.aa.com, biometrics.test.aa.com, boss.app.np.bags.aa.com, cers-dev.aa.com, cersapi-dev.aa.com, cn.nonprod.cninternal.aa.com, cn.nonprod.feature.aa.com, cn.nonprod.liveactivity.aa.com, cn.nonprod.ondemand.aa.com, cn.nonprod.platform.aa.com, cn.nonprod.services.aa.com, crewcompensation.test2.aa.com, css-dev-api.aa.com, css-dev.aa.com, cstrmaaat01087.qcorpaa.aa.com, csubl-dev.aa.com, csubl-stage.aa.com, csubl-test.aa.com, custeventprocessing.stage.services.aa.com, customermdm.qa.services.aa.com, customermdm.stage.services.aa.com, custprivacy.stage.services.aa.com, darma-stage.aa.com, deviate-sg.app.np.bags.aa.com, egte-np.aa.com, emis-dev.aa.com, emis-stage.aa.com, emis-test.aa.com, fa-qa.vms.aa.com, faetb-test.qcorpaa.aa.com, faroms-test.qcorpaa.aa.com, fleetfocusstg.aa.com, gl-stage.aa.com, kiko-sg.app.np.bags.aa.com, mctapp-api-stage.aa.com, nrta.stage.aa.com, nrta.test.etp.aa.com, obs-test.aa.com, payment-services-stage.aa.com, people-stage.aa.com, pilot-cca-stage.aa.com, pilot-cca-test.aa.com, pilots.test.aa.com, pilotvms-test.qcorpaa.aa.com, prime-sg.app.np.bags.aa.com, raptor-sg.app.np.bags.aa.com, raptor.app.np.bags.aa.com, stage.sroversalereasons.aa.com, stage.srprotectoptions.aa.com, surveys-stage.aa.com, test.ttsfa.aa.com, tlink-sg.app.np.bags.aa.com, tlink.app.np.bags.aa.com, travelplanner.test.etp.aa.com, ultraprime-sg.app.np.bags.aa.com
Valid: 2025-09-26 00:00:00 → 2026-09-26 23:59:59
8ff541580efa9f70… google · xenon2026h2
Subject: selftag-pdc-stage.aa.com
Issuer: Entrust OV TLS Issuing RSA CA 2
SANs: selftag-pdc-stage.aa.com, admin.app.np.bags.aa.com, airpass.api.stage.aa.com, alpsv-dev.aa.com, amps-preprod.aa.com, api.amps-preprod.aa.com, api.techops-bow-preprod.aa.com, apisngui-dev.aa.com, apt.stage.aa.com, asom.dev.aa.com, avppredictive-stage.aa.com, badging-stage.aa.com, bagmatrix.dev.aa.com, bagmatrix.stage.aa.com, bagmatrix.test.aa.com, biometrics.dev.aa.com, biometrics.stage.aa.com, biometrics.test.aa.com, boss.app.np.bags.aa.com, cers-dev.aa.com, cersapi-dev.aa.com, cn.nonprod.cninternal.aa.com, cn.nonprod.feature.aa.com, cn.nonprod.liveactivity.aa.com, cn.nonprod.ondemand.aa.com, cn.nonprod.platform.aa.com, cn.nonprod.services.aa.com, crewcompensation.test2.aa.com, css-dev-api.aa.com, css-dev.aa.com, cstrmaaat01087.qcorpaa.aa.com, csubl-dev.aa.com, csubl-stage.aa.com, csubl-test.aa.com, custeventprocessing.stage.services.aa.com, customermdm.qa.services.aa.com, customermdm.stage.services.aa.com, custprivacy.stage.services.aa.com, darma-stage.aa.com, deviate-sg.app.np.bags.aa.com, egte-np.aa.com, emis-dev.aa.com, emis-stage.aa.com, emis-test.aa.com, fa-qa.vms.aa.com, faetb-test.qcorpaa.aa.com, faroms-test.qcorpaa.aa.com, fleetfocusstg.aa.com, gl-stage.aa.com, kiko-sg.app.np.bags.aa.com, mctapp-api-stage.aa.com, nrta.stage.aa.com, nrta.test.etp.aa.com, obs-test.aa.com, payment-services-stage.aa.com, people-stage.aa.com, pilot-cca-stage.aa.com, pilot-cca-test.aa.com, pilots.test.aa.com, pilotvms-test.qcorpaa.aa.com, prime-sg.app.np.bags.aa.com, raptor-sg.app.np.bags.aa.com, raptor.app.np.bags.aa.com, stage.sroversalereasons.aa.com, stage.srprotectoptions.aa.com, surveys-stage.aa.com, test.ttsfa.aa.com, tlink-sg.app.np.bags.aa.com, tlink.app.np.bags.aa.com, travelplanner.test.etp.aa.com, ultraprime-sg.app.np.bags.aa.com
Valid: 2025-09-26 00:00:00 → 2026-09-26 23:59:59

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.

Type Value First seen Last seen
AAAA 2a02:26f0:fe00:1bd::22b1 2026-06-17 10:55:27.572 2026-07-26 15:10:03.550
AAAA 2a02:26f0:fe00:192::22b1 2026-06-17 10:55:27.572 2026-07-26 15:10:03.550
A 23.38.19.28 2026-06-17 10:55:27.572 2026-07-22 08:10:40.435
AAAA 2a02:26f0:c6:3bf::22b1 2026-06-19 06:08:23.416 2026-06-20 12:08:14.336
A 95.100.79.95 2026-06-19 06:08:23.416 2026-06-19 06:08:23.416
AAAA 2a02:26f0:c6:3bc::22b1 2026-06-19 06:08:23.416 2026-06-20 12:08:14.336
AAAA 2a02:26f0:1700:38d::22b1 2026-06-20 12:04:59.957 2026-07-19 09:16:04.855
A 104.102.33.127 2026-06-20 12:04:59.957 2026-06-20 12:04:59.957
AAAA 2a02:26f0:1700:38c::22b1 2026-06-20 12:04:59.957 2026-07-19 09:16:04.855
A 23.51.114.215 2026-06-20 12:08:14.336 2026-06-20 12:08:14.336
A 23.222.34.73 2026-07-16 22:57:13.047 2026-07-27 14:29:14.964
AAAA 2a02:26f0:1180:691::22b1 2026-07-17 17:38:13.384 2026-07-27 14:29:14.964
AAAA 2a02:26f0:1180:69b::22b1 2026-07-17 17:38:13.384 2026-07-27 14:29:14.964
A 23.49.182.152 2026-07-19 09:16:04.855 2026-07-23 18:37:44.075
AAAA 2600:141b:1c00:2281::22b1 2026-07-21 17:24:12.062 2026-07-21 17:24:12.062
AAAA 2600:141b:1c00:22a5::22b1 2026-07-21 17:24:12.062 2026-07-21 17:24:12.062
A 23.199.222.126 2026-07-26 02:30:53.514 2026-07-26 02:30:53.514
A 23.60.204.109 2026-07-27 14:18:48.704 2026-07-27 14:18:48.704