Check-Host.cc

Domain

hengeler.com

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

Run a live full scan of hengeler.com

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now
Hosting IPs
A/AAAA targets
Subdomains
CT + scan + body
Record Types
seen in DNS
Observed Certs
in our scans

DNS Records

A
185.141.202.28
AAAA
MX
10 hengeler-com.mail.protection.outlook.com
NS
a.ns14.net, b.ns14.net, c.ns14.net, d.ns14.net
TXT
9L5iNf15HFZAh3zV1bVPiOwqHfEuMsZTk0JAYb5WAxY=, MS=ms70769310, apple-domain-verification=axCLZeaMqqKUQybR, cisco-ci-domain-verification=1b394fdac24ef8e4f1db8f6f3e88072d9d1d2ed64dd61212ed26010a9069b174, docusign=aeda7856-1304-4cb6-8181-7171ebf5233a, elmZtN5QZTUD0Y/Hdy0vW8v/sNgfyd/XxtvciaDtIiE=, google-site-verification=9lTTp1WkJ3Gu0mq2nGI_kbO2gn_5xUt93hyj_oAli7I, tuNZpNpdtxD7Ik0NPcET+L28jq3K6r+ScxEyZlst41c=
CNAME
CAA

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Subdomain enumeration pending

Every subdomain ever issued a TLS cert under this apex — extracted from Certificate Transparency logs, our own scan observations and body references.

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

Subject: vpnportal.hengeler.com
Issuer: GlobalSign GCC R3 EV TLS CA 2025
SANs: bln.vpn.hengeler.com, ffm.vpn.hengeler.com, muc.vpn.hengeler.com, vpnportal.hengeler.com
Subject: vpnportal.hengeler.com
Issuer: GlobalSign GCC R3 EV TLS CA 2025
SANs: bln.vpn.hengeler.com, ffm.vpn.hengeler.com, muc.vpn.hengeler.com, vpnportal.hengeler.com
Subject: vpnportal.hengeler.com
Issuer: GlobalSign GCC R3 EV TLS CA 2025
SANs: brx.vpn.hengeler.com, dus.vpn.hengeler.com, lon.vpn.hengeler.com, vpnportal.hengeler.com
Subject: vpnmobile.hengeler.com
Issuer: HENGELER-MUELLER-SUBCA01
SANs: vpnmobile.hengeler.com
Subject: vpnportal.hengeler.com
Issuer: HENGELER-MUELLER-SUBCA01
SANs: bln.vpn.hengeler.com, ffm.vpn.hengeler.com, muc.vpn.hengeler.com, vpnportal.hengeler.com
Subject: sit.vpn.hengeler.com
Issuer: HENGELER-MUELLER-SUBCA01
SANs: sit.vpn.hengeler.com
Subject: nxrev.hengeler.com
Issuer: GlobalSign GCC R3 DV TLS CA 2020
SANs: nxrev.hengeler.com

IPs Citing This Domain

No citing IPs found yet

As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

Origin IP Origin ASN CDN ASN Confidence Reasoning
155.46.183.34 AS8681 AS13335 95% cert 1f0cff11… served by 155.46.183.34 (AS8681) carries SAN connect.hengeler.com which currently resolves through Cloudflare (AS13335) at 104.18.7.156, 104.18.6.156

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.

Type Value First seen Last seen
TXT google-site-verification=9lTTp1WkJ3Gu0mq2nGI_kbO2gn_5xUt93hyj_oAli7I 2026-07-29 20:00:37.817 2026-08-02 20:00:37.785
TXT docusign=aeda7856-1304-4cb6-8181-7171ebf5233a 2026-07-29 20:00:37.817 2026-08-02 20:00:37.785
TXT elmZtN5QZTUD0Y/Hdy0vW8v/sNgfyd/XxtvciaDtIiE= 2026-07-29 20:00:37.817 2026-08-02 20:00:37.785
MX 10 hengeler-com.mail.protection.outlook.com 2026-07-29 20:00:37.817 2026-08-02 20:00:37.785
TXT 9L5iNf15HFZAh3zV1bVPiOwqHfEuMsZTk0JAYb5WAxY= 2026-07-29 20:00:37.817 2026-08-02 20:00:37.785
NS a.ns14.net 2026-07-29 20:00:37.817 2026-08-02 20:00:37.785
SRV _sip._tcp 1 0 5060 expe01.hengeler.com 2026-07-29 20:00:37.817 2026-08-02 20:00:37.785
NS d.ns14.net 2026-07-29 20:00:37.817 2026-08-02 20:00:37.785
NS c.ns14.net 2026-07-29 20:00:37.817 2026-08-02 20:00:37.785
SRV _sipfederationtls._tcp 10 10 5061 expe01.hengeler.com 2026-07-29 20:00:37.817 2026-08-02 20:00:37.785
TXT apple-domain-verification=axCLZeaMqqKUQybR 2026-07-29 20:00:37.817 2026-08-02 20:00:37.785
A 185.141.202.28 2026-07-29 20:00:37.817 2026-08-02 20:00:37.785
TXT v=spf1 ip4:194.9.4.0/24 ip4:194.9.5.0/24 ip4:217.111.115.84/32 ip4:185.141.202.18/32 ip4:185.141.202.27/32 include:spf.protection.outlook.com -all 2026-07-29 20:00:37.817 2026-08-02 20:00:37.785
NS b.ns14.net 2026-07-29 20:00:37.817 2026-08-02 20:00:37.785
TXT cisco-ci-domain-verification=1b394fdac24ef8e4f1db8f6f3e88072d9d1d2ed64dd61212ed26010a9069b174 2026-07-29 20:00:37.817 2026-08-02 20:00:37.785
TXT MS=ms70769310 2026-07-29 20:00:37.817 2026-08-02 20:00:37.785
SRV _sips._tcp 1 0 5061 expe01.hengeler.com 2026-07-29 20:00:37.817 2026-08-02 20:00:37.785
TXT tuNZpNpdtxD7Ik0NPcET+L28jq3K6r+ScxEyZlst41c= 2026-07-29 20:00:37.817 2026-08-02 20:00:37.785