Check-Host.cc

Try 1.1.1.1 AS13335 check-host.cc /country/de /tld/cc
Domain

flagcdn.com

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

DNS Check HTTP Check Run Full Scan .com TLD

Run a live full scan of flagcdn.com

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now
Hosting IPs
5
A/AAAA targets
Subdomains
13
CT + scan + body
Record Types
5
seen in DNS
Observed Certs
8
in our scans

DNS Records

A
—
AAAA
—
MX
—
NS
—
TXT
—
CNAME
—
CAA
—

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.

Subdomain Resolves to Last seen
flagcdn.com
104.21.31.228 2606:4700:3036::6815:1fe4 2606:4700:3030::ac43:b468 172.67.180.104 +1
2026-07-28 18:36:19.852

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

Certificate observations pending

TLS certs naming this domain in subject or SANs will appear here as our scan-layer catches them.

IPs Citing This Domain

Hosts whose HTML body references this domain. Strong signal for origin/mirror/embed discovery.

128.199.21.160:80 href · ×819
142.132.245.3:443 href · ×669
65.109.233.229:80 href · ×669
91.99.173.95:80 href · ×669
98.90.247.142:80 href · ×349
208.109.231.250:443 href · ×323
185.202.113.104:80 href · ×240
5.252.103.40:443 href · ×240
103.74.15.16:443 href · ×239
13.234.230.227:443 href · ×236
192.227.193.155:443 href · ×171
23.22.204.40:443 href · ×144
161.97.88.122:443 href · ×134
143.244.137.142:80 href · ×132
156.239.52.113:443 href · ×113
49.51.188.95:443 href · ×113
88.99.78.251:80 href · ×112
85.85.178.193:443 href · ×107
51.75.254.65:443 href · ×102
212.95.34.124:443 href · ×96
5.189.165.142:80 href · ×87
2.56.214.35:443 href · ×81
5.135.23.89:80 href · ×80
206.189.102.181:443 href · ×78
159.198.47.185:443 href · ×75
47.86.218.81:443 href · ×73
110.42.233.153:443 href · ×70
159.198.47.252:443 href · ×70
45.55.219.126:80 href · ×68
178.32.48.92:443 href · ×66
54.167.104.153:8080 href · ×66
104.207.71.21:443 href · ×64
106.53.148.188:80 href · ×62
74.0.32.100:443 href · ×58
188.166.7.5:443 href · ×56
135.181.198.141:443 href · ×54
2.27.234.80:443 href · ×49
3.6.212.113:80 href · ×48
13.203.0.46:80 href · ×48
54.180.214.253:80 href · ×48
184.174.37.229:443 href · ×48
31.76.87.184:80 href · ×48
62.234.62.202:443 href · ×46
213.195.114.120:443 href · ×45
213.195.114.120:80 href · ×45
41.77.113.97:443 href · ×43
88.99.78.251:443 href · ×42
192.129.144.30:8080 href · ×40
159.223.58.160:443 href · ×40
8.210.247.220:443 href · ×40

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

No origin-IP leaks detected (yet)

Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Domain timeline pending

Passive-DNS history accumulates as our forward-DNS crawler observes A/AAAA/MX/NS/TXT records over time.