Check-Host.cc

Domain

cryptoseo.io

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

Run a live full scan of cryptoseo.io

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now
Hosting IPs
6
A/AAAA targets
Subdomains
2
CT + scan + body
Record Types
4
seen in DNS
Observed Certs
8
in our scans

DNS Records

A
104.26.10.72, 104.26.11.72, 172.67.70.75
AAAA
2606:4700:20::681a:a48, 2606:4700:20::681a:b48, 2606:4700:20::ac43:464b
MX
NS
lars.ns.cloudflare.com, marge.ns.cloudflare.com
TXT
v=spf1 a mx ip4:167.71.14.119 ~all
CNAME
CAA

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

Subject: cryptoseo.io
Issuer: R12
SANs: cryptoseo.io, www.cryptoseo.io

IPs Citing This Domain

Hosts whose HTML body references this domain. Strong signal for origin/mirror/embed discovery.

167.71.14.119:8443 href · ×142
167.71.14.119:8443 canonical · ×1
167.71.14.119:8443 og:url · ×1

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

Origin IP Origin ASN CDN ASN Confidence Reasoning
167.71.14.119 AS14061 AS13335 95% cert 96d3ef84… served by 167.71.14.119 (AS14061) carries SAN cryptoseo.io which currently resolves through Cloudflare (AS13335) at 172.67.70.75, 104.26.10.72, 104.26.11.72, 2606:4700:20::ac43:464b

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.

Type Value First seen Last seen
AAAA 2606:4700:20::ac43:464b 2026-05-26 20:18:50.725 2026-05-26 20:23:23.966
A 172.67.70.75 2026-05-26 20:18:50.725 2026-05-26 20:23:23.966
A 104.26.11.72 2026-05-26 20:18:50.725 2026-05-26 20:23:23.966
NS marge.ns.cloudflare.com 2026-05-26 20:18:50.725 2026-05-26 20:23:23.966
AAAA 2606:4700:20::681a:b48 2026-05-26 20:18:50.725 2026-05-26 20:23:23.966
AAAA 2606:4700:20::681a:a48 2026-05-26 20:18:50.725 2026-05-26 20:23:23.966
TXT v=spf1 a mx ip4:167.71.14.119 ~all 2026-05-26 20:18:50.725 2026-05-26 20:23:23.966
A 104.26.10.72 2026-05-26 20:18:50.725 2026-05-26 20:23:23.966
NS lars.ns.cloudflare.com 2026-05-26 20:18:50.725 2026-05-26 20:23:23.966