Check-Host.cc

Domain

gwava.com

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

Run a live full scan of gwava.com

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now
Hosting IPs
21
A/AAAA targets
Subdomains
55
CT + scan + body
Record Types
5
seen in DNS
Observed Certs
11
in our scans

DNS Records

A
130.57.66.19
AAAA
::
MX
30 smg1.gwava.com, 30 smg2.gwava.com, 30 smg3.gwava.com
NS
ns1.softwaregrp.com, ns3.softwaregrp.com
TXT
google-site-verification=gMjec5QefPj1Cg-U0b6ZbQti8TnV1LkSi4W8-HLsVmU, v=spf1 mx a:smg.gwava.com a:relay.gwava.com a:mail.gwava.com a:prtg.gwava.com ip4:209.44.102.154 ip4:209.44.102.156 ~all
CNAME
CAA

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Subdomain enumeration pending

Every subdomain ever issued a TLS cert under this apex — extracted from Certificate Transparency logs, our own scan observations and body references.

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

Subject: private.gwava.com
Issuer: Sectigo Public Server Authentication CA OV R36
SANs: private.gwava.com, www.private.gwava.com
Subject: retspearmint.gcs.gwava.com
Issuer: Sectigo Public Server Authentication CA OV R36
SANs: retspearmint.gcs.gwava.com, www.retspearmint.gcs.gwava.com
Subject: retmilford.gcs.gwava.com
Issuer: Sectigo Public Server Authentication CA OV R36
SANs: retmilford.gcs.gwava.com, www.retmilford.gcs.gwava.com
Subject: retpanaworker5.gcs.gwava.com
Issuer: Sectigo Public Server Authentication CA OV R36
SANs: retpanaworker5.gcs.gwava.com, www.retpanaworker5.gcs.gwava.com
Subject: retpanaworker1.gcs.gwava.com
Issuer: Sectigo Public Server Authentication CA OV R36
SANs: retpanaworker1.gcs.gwava.com, www.retpanaworker1.gcs.gwava.com
Subject: licensing.gwava.com
Issuer: R13
SANs: *.gwava.cabserver.net, eula.gwava.com, gwava.cabserver.net, licensing.gwava.com, portal.gwava.com
Subject: retbexar.gcs.gwava.com
Issuer: Sectigo Public Server Authentication CA OV R36
SANs: retbexar.gcs.gwava.com, www.retbexar.gcs.gwava.com
Subject: *.gwava.com
Issuer: DigiCert SHA2 High Assurance Server CA
SANs: *.gwava.com, gwava.com
Subject: 7473gcs.gwava.com
Issuer: Sectigo Public Server Authentication CA OV R36
SANs: 7473gcs.gwava.com, www.7473gcs.gwava.com
Subject: download.gwava.com
Issuer: Sectigo Public Server Authentication CA OV R36
SANs: download.gwava.com, www.download.gwava.com
Subject: rcradmin.gwava.com
Issuer: Amazon RSA 2048 M03
SANs: rcr.gwava.com, rcradmin.gwava.com
Subject: ret7sigma.gcs.gwava.com
Issuer: Sectigo Public Server Authentication CA OV R36
SANs: ret7sigma.gcs.gwava.com, www.ret7sigma.gcs.gwava.com
Subject: granitecreditunion.gwava.com
Issuer: Sectigo Public Server Authentication CA OV R36
SANs: granitecreditunion.gwava.com, www.granitecreditunion.gwava.com
Subject: rcradmin.gwava.com
Issuer: Amazon RSA 2048 M03
SANs: rcr.gwava.com, rcradmin.gwava.com
Subject: retcps.gcs.gwava.com
Issuer: Sectigo Public Server Authentication CA OV R36
SANs: retcps.gcs.gwava.com, www.retcps.gcs.gwava.com
Subject: 7480gcs.gwava.com
Issuer: Sectigo Public Server Authentication CA OV R36
SANs: 7480gcs.gwava.com, www.7480gcs.gwava.com
Subject: panasonic.gwava.com
Issuer: Sectigo Public Server Authentication CA OV R36
SANs: panasonic.gwava.com, www.panasonic.gwava.com
Subject: retshelter.gcs.gwava.com
Issuer: Sectigo Public Server Authentication CA OV R36
SANs: retshelter.gcs.gwava.com, www.retshelter.gcs.gwava.com

IPs Citing This Domain

No citing IPs found yet

As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

No origin-IP leaks detected (yet)

Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.

Type Value First seen Last seen
NS ns3.softwaregrp.com 2026-05-27 03:33:47.863 2026-05-31 05:39:49.240
A 130.57.66.19 2026-05-27 03:33:47.863 2026-05-31 05:39:49.240
NS ns1.softwaregrp.com 2026-05-27 03:33:47.863 2026-05-31 05:39:49.240
TXT v=spf1 mx a:smg.gwava.com a:relay.gwava.com a:mail.gwava.com a:prtg.gwava.com ip4:209.44.102.154 ip4:209.44.102.156 ~all 2026-05-27 03:33:47.863 2026-05-31 05:39:49.240
MX 30 smg1.gwava.com 2026-05-27 03:33:47.863 2026-05-31 05:39:49.240
MX 30 smg3.gwava.com 2026-05-27 03:33:47.863 2026-05-31 05:39:49.240
MX 30 smg2.gwava.com 2026-05-27 03:33:47.863 2026-05-31 05:39:49.240
AAAA :: 2026-05-27 03:33:47.863 2026-05-31 05:39:49.240
TXT google-site-verification=gMjec5QefPj1Cg-U0b6ZbQti8TnV1LkSi4W8-HLsVmU 2026-05-27 03:33:47.863 2026-05-31 05:39:49.240