Check-Host.cc

Try 1.1.1.1 AS13335 check-host.cc /country/de /tld/cc
Domain

heygen.com

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

DNS Check HTTP Check Run Full Scan .com TLD

Run a live full scan of heygen.com

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now
Hosting IPs
114
A/AAAA targets
Subdomains
52
CT + scan + body
Record Types
5
seen in DNS
Observed Certs
19
in our scans

DNS Records

A
104.18.8.242, 104.18.9.242
AAAA
2606:4700::6812:8f2, 2606:4700::6812:9f2
MX
1 aspmx.l.google.com, 10 alt3.aspmx.l.google.com, 10 alt4.aspmx.l.google.com, 5 alt1.aspmx.l.google.com, 5 alt2.aspmx.l.google.com
NS
sandra.ns.cloudflare.com, tim.ns.cloudflare.com
TXT
29caCnf8ciLl54gn3CEs8oNLQg, MS=ms65282606, ZOOM_verify_zeEdYYwP6GbH0aRpbxRyy4, _1y3k7emzxf4mnq3mgp3no0f3pelaq8t, _21fka6ejmcmsqnwz6ub03key3z44zpi, _k6c8ayakmexc2cb1wpr23w1tjgg6knr, _y49lf99komylfqk7c7xm2465nj4asxn, adobe-idp-site-verification=9dec6d6020c940148bfa7e7330bfd60f520700b78e82a2b7d496f7b9ffff4d15
CNAME
—
CAA
—

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.

Subdomain Resolves to Last seen
app.heygen.com
18.238.243.37 2600:9000:2440:f400:1d:4302:50c0:93a1 2600:9000:2440:6600:1d:4302:50c0:93a1 2600:9000:2440:2400:1d:4302:50c0:93a1 +80
2026-06-18 19:36:16.867
labs.heygen.com
18.239.83.12 2600:9000:2644:dc00:7:c9b8:d080:93a1 2600:9000:2644:8000:7:c9b8:d080:93a1 2600:9000:2644:3000:7:c9b8:d080:93a1 +8
2026-06-22 04:48:04.025
app-api.dev.heygen.com
104.18.8.242 104.18.9.242 2606:4700::6812:9f2 2606:4700::6812:8f2
2026-06-18 03:32:35.990
community.heygen.com
104.18.6.42 104.18.7.42 2606:4700::6812:62a 2606:4700::6812:72a
2026-07-27 21:58:55.553
email.heygen.com
104.18.9.242 104.18.8.242 2606:4700::6812:9f2 2606:4700::6812:8f2
2026-06-01 06:36:37.509
help.heygen.com
104.18.8.242 104.18.9.242 2606:4700::6812:9f2 2606:4700::6812:8f2
2026-05-27 12:55:26.755
heygen.com
104.18.9.242 2606:4700::6812:9f2 2606:4700::6812:8f2 104.18.8.242
2026-07-27 20:51:25.313
learn.heygen.com
104.18.8.242 104.18.9.242 2606:4700::6812:9f2 2606:4700::6812:8f2
2026-05-27 12:55:26.755
m.heygen.com
104.18.9.242 104.18.8.242 2606:4700::6812:9f2 2606:4700::6812:8f2
2026-06-19 04:39:43.687
pm-bounces.heygen.com
104.18.9.242 104.18.8.242 2606:4700::6812:8f2 2606:4700::6812:9f2
2026-05-31 20:42:51.433
security.heygen.com
172.64.146.8 104.18.41.248 2a06:98c1:310a::ac40:9208 2a06:98c1:3102::6812:29f8
2026-06-18 19:17:59.340
www.heygen.com
104.18.9.242 2606:4700::6812:9f2 2606:4700::6812:8f2 104.18.8.242
2026-07-27 00:46:08.631
api.heygen.com
3.133.39.195 3.147.171.92 3.21.110.100
2026-07-25 15:25:35.996
auth.heygen.com
216.150.1.193 216.150.16.193
2026-06-16 00:58:23.855
1p.heygen.com
1970-01-01 00:00:00.000
api2-canary.heygen.com
1970-01-01 00:00:00.000
dev.heygen.com
127.0.0.1
2026-06-15 00:23:13.348
developer.heygen.com
1970-01-01 00:00:00.000
docs.heygen.com
1970-01-01 00:00:00.000
email.learn.heygen.com
1970-01-01 00:00:00.000
mcp.heygen.com
1970-01-01 00:00:00.000
openai-plugin.heygen.com
1970-01-01 00:00:00.000
protodemo.heygen.com
1970-01-01 00:00:00.000
telemetry.heygen.com
1970-01-01 00:00:00.000
widgets.heygen.com
1970-01-01 00:00:00.000
www-redesign.heygen.com
1970-01-01 00:00:00.000
www-static-assets.heygen.com
1970-01-01 00:00:00.000

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

18.216.32.105:443 5319be72a14b…
Subject: heygen.com
Issuer: Amazon RSA 2048 M01
SANs: *.dev.heygen.com, *.heygen.com, dev.heygen.com, heygen.com
3.132.40.66:443 5319be72a14b…
Subject: heygen.com
Issuer: Amazon RSA 2048 M01
SANs: *.dev.heygen.com, *.heygen.com, dev.heygen.com, heygen.com
18.223.18.114:443 5319be72a14b…
Subject: heygen.com
Issuer: Amazon RSA 2048 M01
SANs: *.dev.heygen.com, *.heygen.com, dev.heygen.com, heygen.com
52.14.137.87:443 5319be72a14b…
Subject: heygen.com
Issuer: Amazon RSA 2048 M01
SANs: *.dev.heygen.com, *.heygen.com, dev.heygen.com, heygen.com
18.223.6.60:443 5319be72a14b…
Subject: heygen.com
Issuer: Amazon RSA 2048 M01
SANs: *.dev.heygen.com, *.heygen.com, dev.heygen.com, heygen.com
3.149.224.109:443 5319be72a14b…
Subject: heygen.com
Issuer: Amazon RSA 2048 M01
SANs: *.dev.heygen.com, *.heygen.com, dev.heygen.com, heygen.com
3.23.169.118:443 5319be72a14b…
Subject: heygen.com
Issuer: Amazon RSA 2048 M01
SANs: *.dev.heygen.com, *.heygen.com, dev.heygen.com, heygen.com
3.16.18.127:443 5319be72a14b…
Subject: heygen.com
Issuer: Amazon RSA 2048 M01
SANs: *.dev.heygen.com, *.heygen.com, dev.heygen.com, heygen.com
18.119.214.190:443 5319be72a14b…
Subject: heygen.com
Issuer: Amazon RSA 2048 M01
SANs: *.dev.heygen.com, *.heygen.com, dev.heygen.com, heygen.com
16.58.182.138:443 5319be72a14b…
Subject: heygen.com
Issuer: Amazon RSA 2048 M01
SANs: *.dev.heygen.com, *.heygen.com, dev.heygen.com, heygen.com
3.139.39.11:443 5319be72a14b…
Subject: heygen.com
Issuer: Amazon RSA 2048 M01
SANs: *.dev.heygen.com, *.heygen.com, dev.heygen.com, heygen.com

IPs Citing This Domain

Hosts whose HTML body references this domain. Strong signal for origin/mirror/embed discovery.

192.241.144.4:443 href · ×5
39.101.73.103:443 href · ×2
8.140.206.206:443 href · ×2
47.236.195.99:80 href · ×1
141.94.77.250:443 href · ×1
140.143.182.49:443 href · ×1
38.190.210.123:443 href · ×1

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

No origin-IP leaks detected (yet)

Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.

CT-Log Evidence

Certificates from public Certificate Transparency logs whose subject or SAN names this domain — including historic certs we never observed live.

18665e1a35aac9f8… google · xenon2026h2
Subject: heygen.com
Issuer: Amazon RSA 2048 M01
SANs: heygen.com, *.heygen.com
Valid: 2026-04-06 00:00:00 → 2026-10-20 23:59:59
ca11c84a44525db0… google · argon2026h2
Subject: heygen.com
Issuer: Amazon RSA 2048 M01
SANs: heygen.com, dev.heygen.com, *.dev.heygen.com, *.heygen.com
Valid: 2025-11-23 00:00:00 → 2026-12-22 23:59:59
ca11c84a44525db0… google · xenon2026h2
Subject: heygen.com
Issuer: Amazon RSA 2048 M01
SANs: heygen.com, dev.heygen.com, *.dev.heygen.com, *.heygen.com
Valid: 2025-11-23 00:00:00 → 2026-12-22 23:59:59

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.

Type Value First seen Last seen
TXT _y49lf99komylfqk7c7xm2465nj4asxn 2026-05-26 00:32:50.780 2026-07-27 20:51:25.313
NS tim.ns.cloudflare.com 2026-05-26 00:32:50.780 2026-07-27 20:51:25.313
A 104.18.8.242 2026-05-26 00:32:50.780 2026-07-27 20:51:25.313
TXT stripe-verification=A416052707D67404D4E8AEFCB560B49EF0527E92089E9AEC7617DFAE3B8DC831 2026-05-26 00:32:50.780 2026-07-27 20:51:25.313
TXT v=spf1 include:_spf.google.com ~all 2026-05-26 00:32:50.780 2026-07-27 20:51:25.313
TXT canva-site-verification=FL5ekWf8OzqZlHpcVMqydA 2026-05-26 00:32:50.780 2026-07-27 20:51:25.313
AAAA 2606:4700::6812:9f2 2026-05-26 00:32:50.780 2026-07-27 20:51:25.313
TXT google-site-verification=HcH7wAevfjOFxHwd1wAnbNkLXyXixoLzyHxLpyRF_OQ 2026-05-26 00:32:50.780 2026-07-27 20:51:25.313
TXT google-site-verification=_fYviiIOWWqV0Mlc0jyc0V8__rc87I1f3hR5Y689l5o 2026-05-26 00:32:50.780 2026-07-27 20:51:25.313
TXT zapier-domain-verification-challenge=304a7b1e-912d-42cd-aba2-c1d3d8ca9327 2026-05-26 00:32:50.780 2026-07-27 20:51:25.313
TXT anthropic-domain-verification-gtnyxb=OTdlhL39Juk6ht6QXM1xEjt6M 2026-05-26 00:32:50.780 2026-07-27 20:51:25.313
TXT atlassian-domain-verification=IgxmhqUdIjavquX0n4AFffMK256JtneZ82cGGwLJ3HtbmkTL3SOp0eOlaJ3LCOHZ 2026-05-26 00:32:50.780 2026-07-27 20:51:25.313
TXT google-site-verification=IUR0ENaU7bD-SVGQ0Xp2nFcxH1CKI34A-IS_0LIRh8s 2026-05-26 00:32:50.780 2026-07-27 20:51:25.313
TXT domain-verification=0c0b47b58a631df19b87f5a1f7c54cdd1d6511a6f1e550dcc54e7e759ef21cda 2026-05-26 00:32:50.780 2026-07-27 20:51:25.313
TXT adobe-idp-site-verification=9dec6d6020c940148bfa7e7330bfd60f520700b78e82a2b7d496f7b9ffff4d15 2026-05-26 00:32:50.780 2026-07-27 20:51:25.313
A 104.18.9.242 2026-05-26 00:32:50.780 2026-07-27 20:51:25.313
TXT cursor-domain-verification-btsnj4=5CEe7pn8Hv5WOWcJiQ9eZJamN 2026-05-26 00:32:50.780 2026-07-27 20:51:25.313
NS sandra.ns.cloudflare.com 2026-05-26 00:32:50.780 2026-07-27 20:51:25.313
AAAA 2606:4700::6812:8f2 2026-05-26 00:32:50.780 2026-07-27 20:51:25.313
TXT openai-domain-verification=dv-hIdypK6xR9jOA7mBPj3oznE7 2026-05-26 00:32:50.780 2026-07-27 20:51:25.313
TXT openai-domain-verification=dv-bqJ7OUZwH3PDLAoNdHMo5JkC 2026-05-26 00:32:50.780 2026-07-27 20:51:25.313
TXT google-site-verification=cr9QUhMur13_0nxQWtf4PjqteVqiP0467WSd5_XmZ6E 2026-05-26 00:32:50.780 2026-07-27 20:51:25.313
TXT _k6c8ayakmexc2cb1wpr23w1tjgg6knr 2026-05-26 00:32:50.780 2026-07-27 20:51:25.313
TXT zoom-domain-verification=ZOOM_verify_c44acc015cad43eca79d3e74bd9a51ba 2026-05-26 00:32:50.780 2026-07-27 20:51:25.313
TXT google-site-verification=cMHljpCUnTr1W0xsQWXI8fGQotXzKrvAvXfNHBIZRTw 2026-05-26 00:32:50.780 2026-07-27 20:51:25.313
TXT _1y3k7emzxf4mnq3mgp3no0f3pelaq8t 2026-05-26 00:32:50.780 2026-07-27 20:51:25.313
TXT 29caCnf8ciLl54gn3CEs8oNLQg 2026-05-26 00:32:50.780 2026-07-27 20:51:25.313
TXT amazonses:C24Hp6SsmLUDhrOobKYqbneoJGfVb9DBZ4qIjHui1WE= 2026-05-26 00:32:50.780 2026-07-27 20:51:25.313
TXT verification-code-site-App_lark=fBDGX81UbT7tN8VNNydi 2026-05-26 00:32:50.780 2026-07-27 20:51:25.313
TXT rippling-domain-verification=eafb9c4889732c49 2026-05-26 00:32:50.780 2026-07-27 20:51:25.313
TXT cloudflare_dashboard_sso=b7dd85b20c0dae30fe0f847ea9901f7a 2026-05-26 00:32:50.780 2026-07-27 20:51:25.313
TXT zoom-domain-verification=ZOOM_verify_6f1d978da4514ae18b3fd7e40e18efaa 2026-05-26 00:32:50.780 2026-07-27 20:51:25.313
TXT proxy-ssl.webflow.com 2026-05-26 00:32:50.780 2026-07-27 20:51:25.313
TXT ZOOM_verify_zeEdYYwP6GbH0aRpbxRyy4 2026-05-26 00:32:50.780 2026-07-27 20:51:25.313
TXT google-site-verification=HSpxQTBQsj1ntZlxCRlgyvV7rEvfgM9vLkH8sFcwX3Y 2026-05-26 00:32:50.780 2026-07-27 20:51:25.313
TXT zoom-domain-verification=ZOOM_verify_9994678a6c8f4b4c87cee09e7c910fca 2026-05-26 00:32:50.780 2026-07-27 20:51:25.313
TXT zoom-domain-verification=ZOOM_verify_6d59ede7678b4866b788b974e980c74f 2026-05-26 00:32:50.780 2026-07-27 20:51:25.313
MX 5 alt2.aspmx.l.google.com 2026-05-26 00:32:50.780 2026-07-27 20:51:25.313
TXT slack-domain-verification=zbKn7TgLeo1E6ZbSKg9GHHLrjZGCdp5QAJ4mLweC 2026-05-26 00:32:50.780 2026-07-27 20:51:25.313
MX 10 alt4.aspmx.l.google.com 2026-05-26 00:32:50.780 2026-07-27 20:51:25.313
MX 1 aspmx.l.google.com 2026-05-26 00:32:50.780 2026-07-27 20:51:25.313
TXT elevenlabs=suc2k_f86EtogtQMwexPzpi7jPJQu7YFBHLrp9NuhlY 2026-05-26 00:32:50.780 2026-07-27 20:51:25.313
TXT tiktok-developers-site-verification=WLpouwURMvNAptEyi63N9z9gE4WQHG62 2026-05-26 00:32:50.780 2026-07-27 20:51:25.313
TXT google-site-verification=d1HrQl9YFnuvQ793-neQoigBxUfz7BibU8aef7MndEw 2026-05-26 00:32:50.780 2026-07-27 20:51:25.313
MX 5 alt1.aspmx.l.google.com 2026-05-26 00:32:50.780 2026-07-27 20:51:25.313
TXT MS=ms65282606 2026-05-26 00:32:50.780 2026-07-27 20:51:25.313
TXT _21fka6ejmcmsqnwz6ub03key3z44zpi 2026-05-26 00:32:50.780 2026-07-27 20:51:25.313
TXT tiktok-developers-site-verification=kgLbL6OfXmuFGtLSM7cKwdA7nCKiVPpM 2026-05-26 00:32:50.780 2026-07-27 20:51:25.313
MX 10 alt3.aspmx.l.google.com 2026-05-26 00:32:50.780 2026-07-27 20:51:25.313
TXT google-site-verification=mi0QhggO4iv7a-r97oECJlHFYR8o_FtDzhNhDcYJ_vA 2026-05-26 00:32:50.780 2026-07-27 20:51:25.313
TXT anthropic-domain-verification-5x8jks=t8ilNsou98nbf9p8EelwFBOUK 2026-05-26 00:32:50.780 2026-07-27 20:51:25.313
TXT v=spf1 include:amazonses.com ~all 2026-05-27 03:11:55.634 2026-07-27 20:51:25.313
TXT amazon-business-verification=18547fc5ad1fe4c0a67631f152851d757d020d049109358858d515a18eeef5b0 2026-06-15 00:23:13.348 2026-07-27 20:51:25.313
TXT perplexity-ai-domain-verification-vjth7s=Gn5SwhAXYtD5fF1Oa9gGHWIzc 2026-06-15 00:23:13.348 2026-07-27 20:51:25.313
TXT tiktok-developers-site-verification=9tNRttffFizYgVBJwdnXEByNXy9PZBco 2026-06-15 00:23:13.348 2026-07-27 20:51:25.313
TXT google-site-verification=xy1jv1kGJnfX0oyYIfNuwaCS1H-dXTCokDj0QTayUFE 2026-06-15 00:23:13.348 2026-07-27 20:51:25.313
TXT tiktok-developers-site-verification=fXylrViV0s72vo74Kq40a4Dtqcqc7Zhr 2026-07-15 20:04:13.980 2026-07-27 20:51:25.313