Check-Host.cc

Try 1.1.1.1 AS13335 check-host.cc /country/de /tld/cc
Domain

example.com

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

DNS Check HTTP Check Run Full Scan .com TLD

Run a live full scan of example.com

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now
Hosting IPs
—
A/AAAA targets
Subdomains
—
CT + scan + body
Record Types
—
seen in DNS
Observed Certs
—
in our scans

DNS Records

A
104.20.23.154, 172.66.147.243
AAAA
2606:4700:10::6814:179a, 2606:4700:10::ac42:93f3
MX
0
NS
elliott.ns.cloudflare.com, hera.ns.cloudflare.com
TXT
_k2n1y4vw3qtb4skdx9e7dxt97qrmmq9, v=spf1 -all
CNAME
—
CAA
—

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Subdomain enumeration pending

Every subdomain ever issued a TLS cert under this apex — extracted from Certificate Transparency logs, our own scan observations and body references.

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

23.96.231.57:443 de0f60292187…
Subject: example.com
Issuer: example.com
SANs: example.com
79.143.72.59:443 8ddad8800fab…
Subject: example.com
Issuer: example.com
SANs: example.com
206.145.24.52:443 ef674be838b7…
Subject: example.com
Issuer: example.com
SANs: example.com
90.156.157.135:443 a7d44813a97b…
Subject: example.com
Issuer: example.com
SANs: example.com, www.example.com
45.33.52.122:443 a7838f565def…
Subject: example.com
Issuer: Hello
SANs: example.com
14.176.159.48:443 aa642618ef16…
Subject: www.example.com
Issuer: www.example.com
SANs: www.example.com
152.53.65.110:443 94867bd56954…
Subject: example.com
Issuer: example.com
SANs: example.com
35.204.122.13:443 9204c731737a…
Subject: www.example.com
Issuer: www.example.com
SANs: www.example.com
118.163.66.175:443 d4c8275ad8c0…
Subject: gateway.example.com
Issuer: gateway.example.com
SANs: gateway.example.com
72.8.238.102:443 3d7bdf65e91c…
Subject: example.com
Issuer: example.com
SANs: example.com
71.169.168.84:443 a749aef11454…
Subject: example.com
Issuer: example.com
SANs: example.com
104.129.178.83:443 0b6b60d99d04…
Subject: example.com
Issuer: example.com
SANs: example.com
14.161.43.16:443 aa642618ef16…
Subject: www.example.com
Issuer: www.example.com
SANs: www.example.com
178.213.207.254:443 c48fbe737744…
Subject: ncc-rsa.example.com
Issuer: Gerkon RDS CA
SANs: ncc-rsa.example.com
12.76.125.226:443 f514979c9e88…
Subject: arista.example.com
Issuer: edge.arista.com
SANs: arista.example.com
63.42.167.11:443 7d0b8cc6e4f7…
Subject: ocg.example.com
Issuer: ocg.example.com
SANs: ocg.example.com
192.80.187.238:443 5bca20483d5a…
Subject: example.com
Issuer: example.com
SANs: example.com
93.39.73.110:443 d4c8275ad8c0…
Subject: gateway.example.com
Issuer: gateway.example.com
SANs: gateway.example.com
72.172.208.221:443 805f3acfdadd…
Subject: example.com
Issuer: example.com
SANs: example.com
63.42.167.72:443 4cbe5ad68e4b…
Subject: ocg.example.com
Issuer: ocg.example.com
SANs: ocg.example.com
211.76.187.3:8443 a0a4f4b2dbfb…
Subject: www.example.com
Issuer: www.example.com
SANs: www.example.com
132.243.19.252:443 ad3a543a2566…
Subject: srv5.example.com
Issuer: srv5.example.com
SANs: srv5.example.com
34.94.75.97:443 976bf00bfaf0…
Subject: www.example.com
Issuer: www.example.com
SANs: www.example.com
14.161.246.86:443 aa642618ef16…
Subject: www.example.com
Issuer: www.example.com
SANs: www.example.com
177.12.232.122:443 18be669727a6…
Subject: arista.example.com
Issuer: edge.arista.com
SANs: arista.example.com
207.244.230.188:443 8289949df0ee…
Subject: example.com
Issuer: example.com
SANs: example.com
5.45.68.249:443 700b18c0e916…
Subject: example.com
Issuer: example.com
SANs: example.com
34.69.83.71:443 55a87f588a4a…
Subject: www.example.com
Issuer: www.example.com
SANs: www.example.com
188.93.169.18:443 c2a657e94509…
Subject: test.example.com
Issuer: test.example.com
SANs: test.example.com
113.163.35.32:443 aa642618ef16…
Subject: www.example.com
Issuer: www.example.com
SANs: www.example.com

IPs Citing This Domain

Hosts whose HTML body references this domain. Strong signal for origin/mirror/embed discovery.

148.113.43.13:443 href · ×75
101.133.153.27:80 href · ×64
46.21.82.212:443 href · ×58
137.184.2.62:443 href · ×42
91.195.56.52:443 href · ×33
5.188.78.139:443 href · ×33
64.227.171.249:443 href · ×33
8.153.37.246:8081 href · ×29
103.149.91.134:443 href · ×28
85.214.96.104:443 href · ×27
89.203.249.218:443 href · ×22
51.77.146.96:443 href · ×22
24.40.164.236:443 href · ×22
193.180.213.208:8443 href · ×22
185.162.10.229:443 href · ×22
14.3.19.154:443 href · ×22
176.123.168.2:443 href · ×22
101.44.39.138:443 href · ×22
91.99.100.182:443 href · ×22
82.165.138.129:443 href · ×22
46.10.160.252:443 href · ×22
91.218.112.180:443 href · ×22
185.226.117.23:443 href · ×22
46.224.128.122:443 href · ×22
185.147.81.11:443 href · ×22
185.200.179.165:443 href · ×22
87.228.126.212:443 href · ×22
91.99.192.90:443 href · ×22
91.26.234.76:443 href · ×22
95.255.191.104:443 href · ×22
91.134.135.148:443 href · ×22
185.178.195.20:443 href · ×22
49.12.13.233:443 href · ×22
212.98.56.147:443 href · ×22
185.213.153.197:443 href · ×22
188.166.113.11:443 href · ×22
193.197.7.46:443 href · ×22
2.27.86.253:443 href · ×22
81.16.18.97:443 href · ×22
186.226.60.173:443 href · ×22
51.159.180.238:443 href · ×22
70.133.162.59:443 href · ×22
151.80.147.200:443 href · ×22
157.90.242.163:443 href · ×22
9.169.64.217:443 href · ×22
184.55.227.45:8443 href · ×22
88.198.207.212:443 href · ×22
85.215.124.110:443 href · ×22
65.49.76.18:443 href · ×22
95.163.232.110:443 href · ×22

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

Origin IP Origin ASN CDN ASN Confidence Reasoning
108.160.78.72 AS46867 AS13335 95% cert 14248ce8… served by 108.160.78.72 (AS46867) carries SAN example.com which currently resolves through Cloudflare (AS13335) at 172.66.147.243, 104.20.23.154, 2606:4700:10::ac42:93f3, 2606:4700:10::6814:179a
104.129.177.125 AS33247 AS13335 95% cert 48dc43b9… served by 104.129.177.125 (AS33247) carries SAN example.com which currently resolves through Cloudflare (AS13335) at 172.66.147.243, 104.20.23.154, 2606:4700:10::ac42:93f3, 2606:4700:10::6814:179a
35.243.155.157 AS396982 AS13335 95% cert 278d72e2… served by 35.243.155.157 (AS396982) carries SAN example.com which currently resolves through Cloudflare (AS13335) at 172.66.147.243, 104.20.23.154, 2606:4700:10::ac42:93f3, 2606:4700:10::6814:179a
14.168.193.146 AS45899 AS13335 95% cert aa642618… served by 14.168.193.146 (AS45899) carries SAN www.example.com which currently resolves through Cloudflare (AS13335) at 172.66.147.243, 104.20.23.154, 2606:4700:10::ac42:93f3, 2606:4700:10::6814:179a
34.148.126.17 AS396982 AS13335 95% cert de0f6029… served by 34.148.126.17 (AS396982) carries SAN example.com which currently resolves through Cloudflare (AS13335) at 172.66.147.243, 104.20.23.154, 2606:4700:10::ac42:93f3, 2606:4700:10::6814:179a
14.234.91.171 AS45899 AS13335 95% cert aa642618… served by 14.234.91.171 (AS45899) carries SAN www.example.com which currently resolves through Cloudflare (AS13335) at 172.66.147.243, 104.20.23.154, 2606:4700:10::ac42:93f3, 2606:4700:10::6814:179a
84.248.248.241 AS1759 AS13335 95% cert 1d66d12b… served by 84.248.248.241 (AS1759) carries SAN www.example.com which currently resolves through Cloudflare (AS13335) at 172.66.147.243, 104.20.23.154, 2606:4700:10::ac42:93f3, 2606:4700:10::6814:179a
14.241.39.138 AS45899 AS13335 95% cert aa642618… served by 14.241.39.138 (AS45899) carries SAN www.example.com which currently resolves through Cloudflare (AS13335) at 172.66.147.243, 104.20.23.154, 2606:4700:10::ac42:93f3, 2606:4700:10::6814:179a
165.227.193.120 AS14061 AS13335 95% cert 629045a7… served by 165.227.193.120 (AS14061) carries SAN www.example.com which currently resolves through Cloudflare (AS13335) at 172.66.147.243, 104.20.23.154, 2606:4700:10::ac42:93f3, 2606:4700:10::6814:179a
34.161.11.11 AS396982 AS13335 95% cert 534ed324… served by 34.161.11.11 (AS396982) carries SAN www.example.com which currently resolves through Cloudflare (AS13335) at 172.66.147.243, 104.20.23.154, 2606:4700:10::ac42:93f3, 2606:4700:10::6814:179a
69.163.22.117 AS15100 AS13335 95% cert c213950e… served by 69.163.22.117 (AS15100) carries SAN example.com which currently resolves through Cloudflare (AS13335) at 172.66.147.243, 104.20.23.154, 2606:4700:10::ac42:93f3, 2606:4700:10::6814:179a
132.145.79.96 AS31898 AS13335 95% cert 8bff8911… served by 132.145.79.96 (AS31898) carries SAN www.example.com which currently resolves through Cloudflare (AS13335) at 172.66.147.243, 104.20.23.154, 2606:4700:10::ac42:93f3, 2606:4700:10::6814:179a
74.209.84.87 AS21898 AS13335 95% cert 42705147… served by 74.209.84.87 (AS21898) carries SAN example.com which currently resolves through Cloudflare (AS13335) at 172.66.147.243, 104.20.23.154, 2606:4700:10::ac42:93f3, 2606:4700:10::6814:179a
66.235.65.146 AS3853 AS13335 95% cert d0d8decf… served by 66.235.65.146 (AS3853) carries SAN example.com which currently resolves through Cloudflare (AS13335) at 172.66.147.243, 104.20.23.154, 2606:4700:10::ac42:93f3, 2606:4700:10::6814:179a
14.180.110.134 AS45899 AS13335 95% cert aa642618… served by 14.180.110.134 (AS45899) carries SAN www.example.com which currently resolves through Cloudflare (AS13335) at 172.66.147.243, 104.20.23.154, 2606:4700:10::ac42:93f3, 2606:4700:10::6814:179a
66.235.75.54 AS3853 AS13335 95% cert a8193bf5… served by 66.235.75.54 (AS3853) carries SAN example.com which currently resolves through Cloudflare (AS13335) at 172.66.147.243, 104.20.23.154, 2606:4700:10::ac42:93f3, 2606:4700:10::6814:179a
24.204.181.250 AS11904 AS13335 95% cert 10498646… served by 24.204.181.250 (AS11904) carries SAN example.com which currently resolves through Cloudflare (AS13335) at 172.66.147.243, 104.20.23.154, 2606:4700:10::ac42:93f3, 2606:4700:10::6814:179a
159.112.181.154 AS31898 AS13335 95% cert 692621d0… served by 159.112.181.154 (AS31898) carries SAN example.com which currently resolves through Cloudflare (AS13335) at 172.66.147.243, 104.20.23.154, 2606:4700:10::ac42:93f3, 2606:4700:10::6814:179a
213.191.197.105 AS8745 AS13335 95% cert f90a57c8… served by 213.191.197.105 (AS8745) carries SAN www.example.com which currently resolves through Cloudflare (AS13335) at 172.66.147.243, 104.20.23.154, 2606:4700:10::ac42:93f3, 2606:4700:10::6814:179a
207.127.102.172 AS31898 AS13335 95% cert d479738a… served by 207.127.102.172 (AS31898) carries SAN example.com which currently resolves through Cloudflare (AS13335) at 172.66.147.243, 104.20.23.154, 2606:4700:10::ac42:93f3, 2606:4700:10::6814:179a
14.240.83.37 AS45899 AS13335 95% cert aa642618… served by 14.240.83.37 (AS45899) carries SAN www.example.com which currently resolves through Cloudflare (AS13335) at 172.66.147.243, 104.20.23.154, 2606:4700:10::ac42:93f3, 2606:4700:10::6814:179a
38.45.84.242 AS22200 AS13335 95% cert 79a5591a… served by 38.45.84.242 (AS22200) carries SAN example.com which currently resolves through Cloudflare (AS13335) at 172.66.147.243, 104.20.23.154, 2606:4700:10::ac42:93f3, 2606:4700:10::6814:179a
72.8.223.222 AS13807 AS13335 95% cert a3590cfc… served by 72.8.223.222 (AS13807) carries SAN example.com which currently resolves through Cloudflare (AS13335) at 172.66.147.243, 104.20.23.154, 2606:4700:10::ac42:93f3, 2606:4700:10::6814:179a
113.178.138.34 AS45899 AS13335 95% cert aa642618… served by 113.178.138.34 (AS45899) carries SAN www.example.com which currently resolves through Cloudflare (AS13335) at 172.66.147.243, 104.20.23.154, 2606:4700:10::ac42:93f3, 2606:4700:10::6814:179a
170.4.176.178 AS7871 AS13335 95% cert bb28a6e5… served by 170.4.176.178 (AS7871) carries SAN example.com which currently resolves through Cloudflare (AS13335) at 172.66.147.243, 104.20.23.154, 2606:4700:10::ac42:93f3, 2606:4700:10::6814:179a

CT-Log Evidence

Certificates from public Certificate Transparency logs whose subject or SAN names this domain — including historic certs we never observed live.

1af627c6c2ac992e… google · xenon2026h2
Subject: example.com
Issuer: Cloudflare TLS Issuing ECC CA 1
SANs: example.com, *.example.com
Valid: 2026-04-02 21:18:57 → 2026-07-01 21:24:46
460d92a4dbdec857… google · xenon2026h2
Subject: example.com
Issuer: Cloudflare TLS Issuing ECC CA 1
SANs: example.com, *.example.com
Valid: 2026-04-02 21:18:57 → 2026-07-01 21:24:46
906d5b9b0ac8e160… google · xenon2026h2
Subject: example.com
Issuer: Cloudflare TLS Issuing RSA CA 1
SANs: example.com, *.example.com
Valid: 2026-04-02 21:17:13 → 2026-07-01 21:24:45
d7496dc658126371… google · xenon2026h2
Subject: example.com
Issuer: Cloudflare TLS Issuing RSA CA 1
SANs: example.com, *.example.com
Valid: 2026-04-02 21:17:13 → 2026-07-01 21:24:45
734fe78d7efb6f83… sectigo · elephant2026h1
Subject: example.com
Issuer: Cloudflare TLS Issuing ECC CA 3
SANs: example.com, *.example.com
Valid: 2025-12-16 19:39:32 → 2026-03-16 18:32:44
f7173e30053c5cad… sectigo · elephant2026h1
Subject: example.com
Issuer: Cloudflare TLS Issuing ECC CA 3
SANs: example.com, *.example.com
Valid: 2025-12-16 19:39:32 → 2026-03-16 18:32:44
36276ad06f91f668… sectigo · elephant2026h1
Subject: example.com
Issuer: Cloudflare TLS Issuing RSA CA 3
SANs: example.com, *.example.com
Valid: 2025-12-16 18:50:39 → 2026-03-16 18:32:44
0a45faf247d5cc34… sectigo · elephant2026h1
Subject: example.com
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: example.com, *.example.com
Valid: 2025-12-16 00:00:00 → 2026-03-16 16:12:36
76ef1545df87eac4… sectigo · elephant2026h1
Subject: example.com
Issuer: Sectigo Public Server Authentication CA DV E36
SANs: example.com, *.example.com
Valid: 2025-12-16 00:00:00 → 2026-03-16 20:59:52
7c979188cb4939d5… sectigo · elephant2026h1
Subject: example.com
Issuer: Sectigo Public Server Authentication CA DV E36
SANs: example.com, *.example.com
Valid: 2025-12-16 00:00:00 → 2026-03-16 20:59:52
f46b9bb10ab75829… sectigo · elephant2026h1
Subject: example.com
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: example.com, *.example.com
Valid: 2025-12-16 00:00:00 → 2026-03-16 16:12:36
8affadae5b2cc6e3… google · argon2026h2
Subject: example.com
Issuer: Sectigo Public Server Authentication CA OV R36
SANs: example.com, example.edu, example.net, example.org, www.example.com, www.example.edu, www.example.net, www.example.org
Valid: 2025-12-02 00:00:00 → 2026-12-02 23:59:59
a42a79d123e9de1d… google · argon2026h2
Subject: example.com
Issuer: Sectigo Public Server Authentication CA OV R36
SANs: example.com, example.edu, example.net, example.org, www.example.com, www.example.edu, www.example.net, www.example.org
Valid: 2025-12-02 00:00:00 → 2026-12-02 23:59:59
a42a79d123e9de1d… google · xenon2026h2
Subject: example.com
Issuer: Sectigo Public Server Authentication CA OV R36
SANs: example.com, example.edu, example.net, example.org, www.example.com, www.example.edu, www.example.net, www.example.org
Valid: 2025-12-02 00:00:00 → 2026-12-02 23:59:59
04d54ae0d1b89c04… google · argon2026h2
Subject: example.com
Issuer: Sectigo Public Server Authentication CA OV R36
SANs: example.com, example.edu, example.net, example.org, www.example.com, www.example.edu, www.example.net, www.example.org
Valid: 2025-11-21 00:00:00 → 2026-11-21 23:59:59
d909797016952e2e… google · argon2026h2
Subject: example.com
Issuer: Sectigo Public Server Authentication CA OV R36
SANs: example.com, example.edu, example.net, example.org, www.example.com, www.example.edu, www.example.net, www.example.org
Valid: 2025-11-21 00:00:00 → 2026-11-21 23:59:59
4973b48cf244e498… google · argon2026h2
Subject: example.com
Issuer: Sectigo Public Server Authentication CA OV R36
SANs: example.com, example.edu, example.net, example.org
Valid: 2025-11-20 00:00:00 → 2026-11-20 23:59:59
5c83f01af4edf385… google · argon2026h2
Subject: example.com
Issuer: Sectigo Public Server Authentication CA OV R36
SANs: example.com, example.edu, example.net, example.org
Valid: 2025-11-20 00:00:00 → 2026-11-20 23:59:59
388ec9c1fb34df18… google · xenon2026h1
Subject: *.example.com
Issuer: Sectigo ECC Organization Validation Secure Server CA
SANs: *.example.com, example.com
Valid: 2025-02-07 00:00:00 → 2026-03-10 23:59:59
d79677e614559a8a… google · xenon2026h1
Subject: *.example.com
Issuer: Sectigo ECC Organization Validation Secure Server CA
SANs: *.example.com, example.com
Valid: 2025-02-07 00:00:00 → 2026-03-10 23:59:59

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.

Type Value First seen Last seen
A 172.66.147.243 2026-05-25 21:30:03.372 2026-07-25 22:49:09.120
AAAA 2606:4700:10::6814:179a 2026-05-25 21:30:03.372 2026-07-25 22:49:09.120
A 104.20.23.154 2026-05-25 21:30:03.372 2026-07-25 22:49:09.120
AAAA 2606:4700:10::ac42:93f3 2026-05-25 21:30:03.372 2026-07-25 22:49:09.120
TXT v=spf1 -all 2026-05-25 22:05:29.416 2026-07-25 22:49:09.120
TXT _k2n1y4vw3qtb4skdx9e7dxt97qrmmq9 2026-05-25 22:05:29.416 2026-07-25 22:49:09.120
NS hera.ns.cloudflare.com 2026-05-25 22:05:29.416 2026-07-25 22:49:09.120
NS elliott.ns.cloudflare.com 2026-05-25 22:05:29.416 2026-07-25 22:49:09.120
MX 0 2026-05-25 23:38:59.728 2026-05-25 23:38:59.728