Check-Host.cc

Domain

newtalk.tw

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

Run a live full scan of newtalk.tw

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now
Hosting IPs
A/AAAA targets
Subdomains
CT + scan + body
Record Types
seen in DNS
Observed Certs
in our scans

DNS Records

A
104.18.22.73, 104.18.23.73
AAAA
2606:4700::6812:1649, 2606:4700::6812:1749
MX
1 aspmx.l.google.com, 10 alt3.aspmx.l.google.com, 10 alt4.aspmx.l.google.com, 5 alt1.aspmx.l.google.com, 5 alt2.aspmx.l.google.com
NS
adelaide.ns.cloudflare.com, weston.ns.cloudflare.com
TXT
1j571rpld6csou115kjpr3dh6q, 5oo9u0crvalcuf5tdo6rim0b5k, 63o6t7k8advtonmnms9iqsfvln, MS=ms62561509, bt0866f720mnrph1fvs92t5vke, google-site-verification=OGv95urF90zZFTEeP7mpn85FxFHDXe1LJN544eyoHVg, google-site-verification=b_f09er43g4nsnkktQhxXKvKDZoqo_uXX2K0RgvQPvo, google-site-verification=wV4IjdaJT61-imZu7Mz7LBRWGzJ5775dlonKNsLdNCw
CNAME
CAA

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Subdomain enumeration pending

Every subdomain ever issued a TLS cert under this apex — extracted from Certificate Transparency logs, our own scan observations and body references.

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

Certificate observations pending

TLS certs naming this domain in subject or SANs will appear here as our scan-layer catches them.

IPs Citing This Domain

Hosts whose HTML body references this domain. Strong signal for origin/mirror/embed discovery.

34.120.253.73:80 href · ×231
148.72.153.247:80 href · ×19
38.54.23.210:80 href · ×1
172.247.185.6:443 href · ×1
23.225.143.39:443 href · ×1
38.60.156.5:80 href · ×1
23.224.143.157:443 href · ×1
38.60.200.195:80 href · ×1
119.59.98.138:443 href · ×1
23.225.190.58:443 href · ×1
104.233.223.3:443 href · ×1
185.213.23.93:443 href · ×1
103.140.127.192:443 href · ×1
137.220.142.93:443 href · ×1
43.153.25.177:443 href · ×1
107.148.207.2:443 href · ×1
135.136.61.20:443 href · ×1
137.175.11.107:443 href · ×1
34.120.253.73:80 canonical · ×1
137.175.11.109:443 href · ×1
23.225.143.60:443 href · ×1
107.148.193.93:443 href · ×1
137.220.142.72:443 href · ×1
51.195.9.22:443 href · ×1
23.225.187.212:443 href · ×1
137.175.35.14:443 href · ×1
38.54.104.187:80 href · ×1
65.20.103.190:80 href · ×1
103.137.62.180:443 href · ×1
198.2.210.129:443 href · ×1
108.181.136.19:443 href · ×1
198.16.36.70:443 href · ×1
23.225.187.210:443 href · ×1
23.225.190.51:443 href · ×1
34.120.253.73:80 og:url · ×1
104.233.222.143:443 href · ×1
65.20.105.211:80 href · ×1
146.70.53.212:443 href · ×1
135.125.210.186:443 href · ×1
137.175.14.123:443 href · ×1
134.122.184.66:443 href · ×1
142.4.112.45:443 href · ×1
38.54.63.83:80 href · ×1
23.225.143.53:443 href · ×1
202.43.102.40:443 href · ×1
216.126.236.76:80 href · ×1
104.225.146.54:443 href · ×1
146.70.53.220:443 href · ×1
23.224.212.252:443 href · ×1
107.148.248.18:443 href · ×1

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

Origin IP Origin ASN CDN ASN Confidence Reasoning
35.229.128.240 AS396982 AS13335 95% cert ba49dadf… served by 35.229.128.240 (AS396982) carries SAN newtalk.tw which currently resolves through Cloudflare (AS13335) at 104.18.22.73, 104.18.23.73, 2606:4700::6812:1649, 2606:4700::6812:1749

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.

Type Value First seen Last seen
A 104.18.22.73 2026-05-26 16:45:19.174 2026-07-28 20:05:38.639
TXT v=spf1 include:sendgrid.net -all. 2026-05-26 16:45:19.174 2026-07-28 20:05:38.639
TXT google-site-verification=OGv95urF90zZFTEeP7mpn85FxFHDXe1LJN544eyoHVg 2026-05-26 16:45:19.174 2026-07-28 20:05:38.639
TXT l8tapr9sgcprf97o8fod9kfpbm 2026-05-26 16:45:19.174 2026-07-28 20:05:38.639
TXT bt0866f720mnrph1fvs92t5vke 2026-05-26 16:45:19.174 2026-07-28 20:05:38.639
AAAA 2606:4700::6812:1749 2026-05-26 16:45:19.174 2026-07-28 20:05:38.639
TXT 5oo9u0crvalcuf5tdo6rim0b5k 2026-05-26 16:45:19.174 2026-07-28 20:05:38.639
AAAA 2606:4700::6812:1649 2026-05-26 16:45:19.174 2026-07-28 20:05:38.639
TXT MS=ms62561509 2026-05-26 16:45:19.174 2026-07-28 20:05:38.639
MX 5 alt2.aspmx.l.google.com 2026-05-26 16:45:19.174 2026-07-28 20:05:38.639
MX 10 alt4.aspmx.l.google.com 2026-05-26 16:45:19.174 2026-07-28 20:05:38.639
A 104.18.23.73 2026-05-26 16:45:19.174 2026-07-28 20:05:38.639
MX 1 aspmx.l.google.com 2026-05-26 16:45:19.174 2026-07-28 20:05:38.639
TXT 1j571rpld6csou115kjpr3dh6q 2026-05-26 16:45:19.174 2026-07-28 20:05:38.639
NS adelaide.ns.cloudflare.com 2026-05-26 16:45:19.174 2026-07-28 20:05:38.639
NS weston.ns.cloudflare.com 2026-05-26 16:45:19.174 2026-07-28 20:05:38.639
MX 5 alt1.aspmx.l.google.com 2026-05-26 16:45:19.174 2026-07-28 20:05:38.639
TXT google-site-verification=b_f09er43g4nsnkktQhxXKvKDZoqo_uXX2K0RgvQPvo 2026-05-26 16:45:19.174 2026-07-28 20:05:38.639
MX 10 alt3.aspmx.l.google.com 2026-05-26 16:45:19.174 2026-07-28 20:05:38.639
TXT 63o6t7k8advtonmnms9iqsfvln 2026-05-26 16:45:19.174 2026-07-28 20:05:38.639
TXT google-site-verification=wV4IjdaJT61-imZu7Mz7LBRWGzJ5775dlonKNsLdNCw 2026-05-26 16:45:19.174 2026-07-28 20:05:38.639