Check-Host.cc

Domain

moodle.de

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

Run a live full scan of moodle.de

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now
Hosting IPs
1
A/AAAA targets
Subdomains
1
CT + scan + body
Record Types
4
seen in DNS
Observed Certs
in our scans

DNS Records

A
159.69.187.121
AAAA
MX
10 mailin100.dcpserver.de
NS
auth1.artfiles.de, auth2.artfiles.de
TXT
v=spf1 include:spf.dcpserver.de -all
CNAME
CAA

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.

Subdomain Resolves to Last seen
moodle.de 2026-05-26 07:29:14.780

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

Subject: db02.stiwl-moodle.de
Issuer: YR2
SANs: db02.stiwl-moodle.de
Subject: book.star-moodle.de
Issuer: YR2
SANs: book.star-moodle.de
Subject: office.wsm-moodle.de
Issuer: YR1
SANs: office.wsm-moodle.de
Subject: kreativ-moodle.de
Issuer: E7
SANs: kreativ-moodle.de, www.kreativ-moodle.de
Subject: qzmoodle.dewcom.net
Issuer: qzmoodle.dewcom.net
SANs: qzmoodle.dewcom.net
Subject: old.star-moodle.de
Issuer: YE1
SANs: old.star-moodle.de
Subject: webinarmonitor.bbwev-moodle.de
Issuer: R13
SANs: webinarmonitor.bbwev-moodle.de
Subject: srv.ibaf-moodle.de
Issuer: R13
SANs: srv.ibaf-moodle.de
Subject: *.moodle.dev.class.com
Issuer: Amazon RSA 2048 M01
SANs: *.moodle.dev.class.com, *.moodle.pod-3.us-east-1.dev.classedu4.com
Subject: moodle.devcals-learn.org
Issuer: Amazon
SANs: moodle.devcals-learn.org
Subject: *.moodle.dev.class.com
Issuer: Amazon RSA 2048 M01
SANs: *.moodle.dev.class.com, *.moodle.pod-3.us-east-1.dev.classedu4.com
Subject: bbzodmoodle.de
Issuer: R12
SANs: bbzodmoodle.de
Subject: bbb2.elearning-moodle.de
Issuer: R13
SANs: bbb2.elearning-moodle.de
Subject: chat.igmetall-moodle.de
Issuer: E7
SANs: chat.igmetall-moodle.de
Subject: *.moodle.devops3.class.com
Issuer: Amazon RSA 2048 M04
SANs: *.moodle.devops3.class.com, *.moodle.pod-1.us-east-1.devops3.classedu4.com
Subject: btz-moodle.de
Issuer: R13
SANs: btz-moodle.de, www.btz-moodle.de
Subject: meinmoodle.de
Issuer: R13
SANs: meinmoodle.de, webmail.meinmoodle.de, www.meinmoodle.de
Subject: *.moodle.dev.class.com
Issuer: Amazon RSA 2048 M01
SANs: *.moodle.dev.class.com, *.moodle.pod-3.us-east-1.dev.classedu4.com
Subject: *.moodle.dev.class.com
Issuer: Amazon RSA 2048 M01
SANs: *.moodle.dev.class.com, *.moodle.pod-3.us-east-1.dev.classedu4.com
Subject: *.moodle.devops3.class.com
Issuer: Amazon RSA 2048 M04
SANs: *.moodle.devops3.class.com, *.moodle.pod-1.us-east-1.devops3.classedu4.com
Subject: *.moodle.devops3.class.com
Issuer: Amazon RSA 2048 M04
SANs: *.moodle.devops3.class.com, *.moodle.pod-1.us-east-1.devops3.classedu4.com
Subject: *.moodle.devops3.class.com
Issuer: Amazon RSA 2048 M04
SANs: *.moodle.devops3.class.com, *.moodle.pod-1.us-east-1.devops3.classedu4.com
Subject: *.moodle.dev.class.com
Issuer: Amazon RSA 2048 M01
SANs: *.moodle.dev.class.com, *.moodle.pod-3.us-east-1.dev.classedu4.com
Subject: moodle.defacto.lester.rimotecloud.com
Issuer: R12
SANs: moodle.defacto.lester.rimotecloud.com
Subject: moodle.dev.uel.ac.uk
Issuer: Amazon RSA 2048 M04
SANs: moodle.dev.uel.ac.uk
Subject: meinmoodle.de
Issuer: R13
SANs: meinmoodle.de, webmail.meinmoodle.de, www.meinmoodle.de

IPs Citing This Domain

Hosts whose HTML body references this domain. Strong signal for origin/mirror/embed discovery.

5.75.150.161:443 href · ×1

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

No origin-IP leaks detected (yet)

Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.

Type Value First seen Last seen
NS auth2.artfiles.de 2026-05-26 02:50:09.561 2026-05-26 07:29:14.780
TXT v=spf1 include:spf.dcpserver.de -all 2026-05-26 02:50:09.561 2026-05-26 07:29:14.780
MX 10 mailin100.dcpserver.de 2026-05-26 02:50:09.561 2026-05-26 07:29:14.780
A 159.69.187.121 2026-05-26 02:50:09.561 2026-05-26 07:29:14.780
NS auth1.artfiles.de 2026-05-26 02:50:09.561 2026-05-26 07:29:14.780