Check-Host.cc

Domain

gemini.google.com

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

Run a live full scan of gemini.google.com

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now
Hosting IPs
A/AAAA targets
Subdomains
CT + scan + body
Record Types
seen in DNS
Observed Certs
in our scans

DNS Records

A
142.251.150.2, 142.251.151.2, 142.251.152.2, 142.251.153.2, 142.251.154.2, 142.251.155.2, 142.251.156.2, 142.251.157.2
AAAA
2001:4860:4826:200::, 2001:4860:4827:200::, 2001:4860:4828:200::, 2001:4860:4829:200::, 2001:4860:482a:200::, 2001:4860:482b:200::, 2001:4860:482c:200::, 2001:4860:482d:200::
MX
NS
TXT
_uh5x4e8u5h4241336nm2zwymuu9k91j
CNAME
CAA

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Subdomain enumeration pending

Every subdomain ever issued a TLS cert under this apex — extracted from Certificate Transparency logs, our own scan observations and body references.

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

Subject: dynamic
Issuer: dynamiclistener-ca@1772035818
SANs: 0x0000.tech, 127.0.0.1, 172.17.0.2, 2055199850.thedonutking.com, 34.77.189.226, 443, 46.224.104.102, 46.224.104.102.sslip.io, 46.224.104.102:443, StAtIc.fOx1.Eu.oRg, alve.chat, api.alve.chat, api.xpayio.com, app.cr.bot, app.send.tg, appgw01.lbapigw.com, arvancloud.ir, assets.msn.com, baseline-0129cbdb.digitalocean.com, baseline-54cbc0214b8440bacbf4a50766938751.digitalocean.com, baseline-727203ef787420e2.digitalocean.com, baseline-b01b9880d16a89d6f8009c86bea51e3c0d0b7fc2.digitalocean.com, besira.net, betconstruct.com, buhijilkk.com, cateringcaca.com.tr, chatgpt.com, client.wns.windows.com, cloudflare-ech.com, cloudflare.com, config.edge.skype.com, console-ams3.digitalocean.com, console-tor1.digitalocean.com, cp601.prod.do.dsp.mp.microsoft.com, csb32d5fe08.example, csc15516d90.example, d18oykeixd2u2b.cloudfront.net, d21bqogpwwn1sv.cloudfront.net, d8hduijkvze91.cloudfront.net, dctrack-dev.nyc3.internal.digitalocean.com, dctrack02.sfo3.internal.digitalocean.com, dev.46.224.104.102.sslip.io, displaycatalog.mp.microsoft.com, dl.delivery.mp.microsoft.com, dontlysnow.com, download.windowsupdate.com, dynamic, earthwatch.org, ecs.office.com, en.46.224.104.102.sslip.io, ent-waiting-api.interpark.com, epay.12306.cn, evil.attacker.com, example.com, fd.api.iris.microsoft.com, fe3cr.delivery.mp.microsoft.com, gemini.google.com, germany.xmy01.ru, github.dev, gitlab.com, i37d001v5nllvne8.46.224.104.102.sslip.io, ipv4.090227.xyz, ipv6.090227.xyz, kyfw.12306.cn, kyzdar03.tokalki.vip, learn-game-development-education-sector-development.bipin.bd, linkkf.live, linkkf1.5imgdarr.top, lkcqc9i1go90nnko.46.224.104.102.sslip.io, localhost, m.hilarionbet501.com, marketplace-grpc-fra1.digitalocean.com, marketplace-proxy-fra1.digitalocean.com, marketplace-proxy-nyc1.digitalocean.com, marketplace-staging-grafana-sfo2.digitalocean.com, marketplace-staging-prometheus-blr1.digitalocean.com, marketplace-staging-prometheus-sfo2.digitalocean.com, massagerepublic.com, mcde.b-cdn.net, middle.wtf, mindenszo.hu, mlb.tickets.com, mobile.12306.cn, mobile.events.data.microsoft.com, obs-marathon.s2r2.internal.digitalocean.com, osabus.com, pcfmf.989920.xyz, phonetic-pronunciation-is-foremost-when-the-rehearsal-going.thegamebytes.com, platform.tastybakery.me, plus.im, poweriq03.ams3.internal.digitalocean.com, poweriq04.sgp1.internal.digitalocean.com, prod-codd-admin.fra1.internal.digitalocean.com, prod-codd-admin.nyc3.internal.digitalocean.com, prod-codd-admin.sfo1.internal.digitalocean.com, prod-codd-admin.sfo3.internal.digitalocean.com, prod.client.wosc.services.microsoft.com, rancher.cattle-system, random-control.invalid, reality-probe-test.270201.xyz, send-bot.com, send.tg, settings-win.data.microsoft.com, shopify.com, slscr.update.microsoft.com, speed.cloudflare.com, speedtest.net, static.102.104.224.46.clients.your-server.de, summertoons.net, sw1.20manat.ru, test.gutir.ru, testt.localhostbd.art, this-decanter-is-topped-and-baked.dylkrlrcabfylrwjgfebeusvc.org, turkey.escortnews.com, uachanger.com, upos-sz-mirrorcf1ov.bilivideo.com, v1.xcddos.xyz, v10.events.data.microsoft.com, vibecode-claude.online, whatever.bitcoin8070.workers.dev, workers.dev, wuseguang.com, www.46.224.104.102.sslip.io, www.apksafe.vip, www.bjaidigreen.com, www.cloudflare.com, www.ddosforum.online, www.digitalocean.com, www.maxwealth.com.cn, www.shopify.com, www.shxiaozhenzc.com, www.speedtest.net, www.visa52.com, xn--5kroo.com, yarakkurek.com, yuduol.com
Subject: api.anthropic.com
Issuer: gateiq-proxy Root CA
SANs: *.api5.cursor.sh, *.cursor.sh, *.global.api5.cursor.sh, 100.48.234.86, 127.0.0.1, agent.api5.cursor.sh, agentn.api5.cursor.sh, agentn.global.api5.cursor.sh, api.anthropic.com, api.runwayml.com, api2.cursor.sh, api3.cursor.sh, api4.cursor.sh, api5.cursor.sh, app.runwayml.com, claude.ai, cursor.sh, gemini.google.com, localhost, platform.claude.com, repo42.cursor.sh, us-central1-image-ai-cb35d.cloudfunctions.net
Subject: NrocServerProxy
Issuer: NrocProxy
SANs: *.1min.ai, *.chatbotapp.ai, *.oaiusercontent.com, *.sharepoint.com, 1min.ai, account.topazlabs.com, account.voicemod.net, af.articleforge.com, ai-writer.com, ai.egain.cloud, ai.invideo.io, aichatapp.ai, aihumanize.io, ailessonplan.com, aipoemgenerator.org, aiwritingpal.com, allenai.org, api.anthropic.com, api.business.githubcopilot.com, api2.cursor.sh, app-eu1.hubspot.com, app-na1.hubspotdocuments.com, app.attio.com, app.beehiiv.com, app.boords.com, app.botpress.cloud, app.chat360.io, app.chatbot.com, app.chatling.ai, app.copilotly.com, app.copy.ai, app.fastbots.ai, app.fireflies.ai, app.fyxer.com, app.glean.com, app.gokite.ai, app.grammarly.com, app.heygen.com, app.hubspot.com, app.instantly.ai, app.iokoo.co, app.jasper.ai, app.jinnify.ai, app.klingai.com, app.koah.ai, app.leonardo.ai, app.manychat.com, app.napkin.ai, app.neuroflash.com, app.otterly.ai, app.quickchat.ai, app.raffle.ai, app.read.ai, app.snoooz.ai, app.speechify.com, app.synthesia.io, app.taplio.com, app.transpond.io, app.uizard.io, app.wonderchat.io, app.wordplay.ai, app.wordtune.com, app.writecream.com, app.writeme.ai, app.writer.com, app.writerx.co, app.writesonic.com, app.zomani.ai, archie-app.8base.com, archie.8base.com, arena.ai, articlefiesta.com, artlist.io, askaichat.app, async.com, attio.com, bearly.ai, beyondwords.io, bolt.new, boords.com, botpress.com, bottalk.io, brainly.com, bubble.io, build.fillout.com, character.ai, chat.aichatapp.ai, chat.chatbot.app, chat.chaton.ai, chat.deepseek.com, chat.mistral.ai, chat.qwen.ai, chat.webllm.ai, chatbot.app, chatbotapp.ai, chatgpt.com, chatjimmy.ai, chatling.ai, chaton.ai, chatty.net, chatx.ai, claude.ai, clawbot.ai, clip.opus.pro, cloud.yellow.ai, coda.grammarly.com, codepal.ai, console.groq.com, copilot.cloud.microsoft, copilot.microsoft.com, copymonkey.ai, creator.voiceflow.com, dashboard.browse.ai, dashboard.gptforwork.com, dashboard.mintlify.com, dashboard.scale.com, dashboard.searchatlas.com, decisioninsights.ai, deevid.ai, deliciousai.com, designer.microsoft.com, docs.gokite.ai, docsbot.ai, dream-machine.lumalabs.ai, duck.ai, durable.com, edgeservices.bing.com, eightfold.ai, elevenlabs.io, eu.smith.langchain.com, eu1-app.outplayhq.com, fastbots.ai, fellow.ai, files.oaiusercontent.com, filmora.wondershare.com, fireflies.ai, firefly.adobe.com, forethought.ai, framer.com, gamma.app, gemini.google.com, gencraft.com, genny.lovo.ai, gliacloud.com, go.anyword.com, go.socrates.im, gokite.ai, gptexcel.uk, gptforwork.com, graph.microsoft.com, grok.com, grokipedia.com, groq.com, heygpt.chat, hpanel.hostinger.com, hub.yarnit.app, huggingface.co, imglarger.com, imgupscaler.com, instantly.ai, invideo.io, ivy.ai, jules.google.com, julius.ai, justdone.com, kaiber.ai, labs.google, leonardo.ai, lovable.dev, lovo.ai, lumalabs.ai, lumo.proton.me, m365.cloud.microsoft, manychat.com, meetami.ai, meetbetty.ai, mermaid.ai, metadata.io, mindtrip.ai, monica.im, my.writefull.com, nexverse.ai, notebooklm.google, notebooklm.google.com, notegpt.io, numerous.ai, ollama.com, openart.ai, openclaw.ai, openrouter.ai, otter.ai, otterly.ai, outlook.office.com, outplay.ai, panel.ai-writer.com, panel.tiledesk.com, picsart.com, platform.claude.com, platform.metadata.io, platform.thrads.ai, play.aidungeon.com, playground.allenai.org, push.clients6.google.com, quickchat.ai, quillbot.com, quiq.com, quizlet.com, raffle.ai, readalong.ai, replit.com, sales.meetami.ai, scale.com, scite.ai, searchatlas.com, sharepoint.com, shopcircle.co, sider.ai, slidebazaar.com, smilee.io, smith.langchain.com, smodin.io, snoooz.ai, socrates.im, solvely.ai, sourcegraph.com, sparkbase.ai, speechify.com, stablediffusionweb.com, studio.ai21.com, studio.wellsaidlabs.com, substrate.office.com, suno.ai, suno.com, sync.beatoven.ai, tactiq.io, taplio.com, tiledesk.com, toolkit.artlist.io, transpond.io, uizard.io, undetectable.ai, use.ai, vsco.co, warmer.ai, web.descript.com, webllm.mlc.ai, windsurf.com, wonderchat.io, wordplay.ai, workflos.ai, woxo.tech, writeme.ai, writer.com, writersbrew.app, writerx.co, writesonic.com, writier.io, ws.chatgpt.com, ws.readspeaker.com, www.3daistudio.com, www.acrolinx.com, www.admaster.cc, www.adventuregen.ai, www.ai21.com, www.aiisajoke.com, www.ailessonplan.com, www.aipoemgenerator.org, www.aiwritingpal.com, www.anyword.com, www.articleforge.com, www.ashbyhq.com, www.baidu.com, www.bearly.ai, www.beatoven.ai, www.beautiful.ai, www.beehiiv.com, www.beforesunset.ai, www.bettersynonyms.com, www.bingapis.com, www.bridged.media, www.browse.ai, www.cadent.com, www.canva.com, www.capcut.com, www.chat360.io, www.chatai.com, www.chatbot.com, www.chegg.com, www.cm.com, www.coframe.com, www.coloringbook.ai, www.commoninja.com, www.copilotly.com, www.copy.ai, www.coursehero.com, www.deepl.com, www.descript.com, www.digitalgenius.com, www.dola.com, www.doubao.com, www.egain.com, www.fillout.com, www.fotor.com, www.framer.com, www.freeconvert.com, www.freepik.com, www.fyxer.com, www.genspark.ai, www.getmerlin.in, www.getvera.ai, www.gokite.ai, www.grammarly.com, www.granola.ai, www.hostinger.com, www.humanizeai.pro, www.imglarger.com, www.jasper.ai, www.kaiber.ai, www.kimi.com, www.klaviyo.com, www.koahlabs.com, www.krikey.ai, www.labs.google, www.langchain.com, www.learnwise.ai, www.maxai.co, www.mermaidchart.com, www.midjourney.com, www.mintlify.com, www.monica.im, www.moonshot.ai, www.moonshot.cn, www.nexverse.ai, www.notion.so, www.octaneai.com, www.octocom.ai, www.ollama.com, www.opus.pro, www.otterly.ai, www.outrank.so, www.paradox.ai, www.pisano.com, www.pixa.com, www.quinta.im, www.rabbitholes.ai, www.read.ai, www.readspeaker.com, www.roomgpt.io, www.semrush.com, www.sharpennotes.com, www.shopbox.ai, www.smartling.com, www.suno.ai, www.synthesia.io, www.thrad.ai, www.tidio.com, www.topazlabs.com, www.veed.io, www.voiceflow.com, www.voicemod.net, www.vsco.co, www.wellsaid.io, www.wordtune.com, www.workmagic.io, www.writecream.com, www.writefull.com, www.yarnit.app, www.yeschat.ai, www.zeg.ai, www.zerogpt.com, www.zoovu.com, x.writefull.com, yellow.ai, zevbot.com, zomani.ai, zoovu.com
Subject: Luna_AI_Proxy
Issuer: Luna GRC Root CA
SANs: *.clients6.google.com, *.google.com, chatgpt.com, claude.ai, gemini.google.com, push.clients6.google.com, sdmntprkoreacentral.oaiusercontent.com

IPs Citing This Domain

Hosts whose HTML body references this domain. Strong signal for origin/mirror/embed discovery.

43.134.1.9:443 href · ×17
139.196.197.45:443 href · ×16
208.113.135.63:443 href · ×8
45.32.124.148:443 href · ×8
45.77.59.50:443 href · ×8
132.226.117.239:443 href · ×6
82.156.42.175:443 href · ×5
175.178.173.252:443 href · ×5
121.41.105.109:80 href · ×4
139.155.104.234:443 href · ×4
106.14.16.106:443 href · ×4
43.156.45.181:80 href · ×4
62.234.61.124:80 href · ×4
69.197.174.87:80 href · ×4
119.28.112.207:443 href · ×4
62.234.61.124:443 href · ×4
43.153.219.204:443 href · ×4
103.214.22.37:443 href · ×3
47.79.226.18:443 href · ×3
43.155.252.17:443 href · ×3
218.38.161.191:80 href · ×3
23.95.68.24:443 href · ×3
8.163.44.20:443 href · ×3
43.132.161.141:443 href · ×3
140.245.59.16:443 href · ×3
182.92.221.242:80 href · ×3
172.235.175.39:443 href · ×3
39.106.87.214:80 href · ×3
47.131.77.100:80 href · ×2
123.57.144.128:443 href · ×2
182.61.36.42:443 href · ×2
8.210.56.37:443 href · ×2
100.23.75.80:80 href · ×2
80.86.187.103:80 href · ×2
124.222.71.213:443 href · ×2
43.249.192.204:443 href · ×2
220.128.230.216:443 href · ×2
79.96.4.80:80 href · ×2
158.101.12.126:80 href · ×2
43.133.225.82:443 href · ×2
83.246.77.194:80 href · ×2
43.135.14.236:443 href · ×2
139.129.202.23:443 href · ×2
132.145.100.69:80 href · ×2
1.116.140.187:443 href · ×2
3.222.198.236:80 href · ×2
122.10.197.20:443 href · ×2
117.72.51.141:80 href · ×2
107.172.218.176:443 href · ×2
8.138.102.141:443 href · ×2

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

No origin-IP leaks detected (yet)

Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.

Type Value First seen Last seen
A 142.251.152.2 2026-05-25 22:02:50.525 2026-07-24 07:03:36.650
AAAA 2001:4860:482b:200:: 2026-05-25 22:02:50.525 2026-07-24 07:03:36.650
A 142.251.151.2 2026-05-25 22:02:50.525 2026-07-24 07:03:36.650
A 142.251.157.2 2026-05-25 22:02:50.525 2026-07-24 07:03:36.650
AAAA 2001:4860:482d:200:: 2026-05-25 22:02:50.525 2026-07-24 07:03:36.650
AAAA 2001:4860:482c:200:: 2026-05-25 22:02:50.525 2026-07-24 07:03:36.650
A 142.251.154.2 2026-05-25 22:02:50.525 2026-07-24 07:03:36.650
A 142.251.150.2 2026-05-25 22:02:50.525 2026-07-24 07:03:36.650
AAAA 2001:4860:4827:200:: 2026-05-25 22:02:50.525 2026-07-24 07:03:36.650
AAAA 2001:4860:482a:200:: 2026-05-25 22:02:50.525 2026-07-24 07:03:36.650
AAAA 2001:4860:4828:200:: 2026-05-25 22:02:50.525 2026-07-24 07:03:36.650
A 142.251.153.2 2026-05-25 22:02:50.525 2026-07-24 07:03:36.650
A 142.251.155.2 2026-05-25 22:02:50.525 2026-07-24 07:03:36.650
AAAA 2001:4860:4829:200:: 2026-05-25 22:02:50.525 2026-07-24 07:03:36.650
A 142.251.156.2 2026-05-25 22:02:50.525 2026-07-24 07:03:36.650
AAAA 2001:4860:4826:200:: 2026-05-25 22:02:50.525 2026-07-24 07:03:36.650
TXT _uh5x4e8u5h4241336nm2zwymuu9k91j 2026-05-26 00:17:38.499 2026-07-24 07:03:36.650