Check-Host.cc

Domain

nexxto.com

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

Run a live full scan of nexxto.com

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now
Hosting IPs
A/AAAA targets
Subdomains
CT + scan + body
Record Types
seen in DNS
Observed Certs
in our scans

DNS Records

A
199.60.103.178, 199.60.103.78
AAAA
MX
1 ASPMX.L.GOOGLE.com, 10 ASPMX2.GOOGLEMAIL.com, 10 ASPMX3.GOOGLEMAIL.com, 5 ALT1.ASPMX.L.GOOGLE.com, 5 ALT2.ASPMX.L.GOOGLE.com
NS
ns1.locaweb.com.br, ns2.locaweb.com.br, ns3.locaweb.com.br
TXT
google-site-verification=THNLudUPBLoPm1lKckckbA1tpepZTWCkFHSuYnNKNHE, l0msje6bv7gbmp03i1sc9qs5j6, v=spf1 a mx include:_spf.google.com ~all
CNAME
CAA

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Subdomain enumeration pending

Every subdomain ever issued a TLS cert under this apex — extracted from Certificate Transparency logs, our own scan observations and body references.

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

Subject: *.nexxto.com
Issuer: Go Daddy Secure Certificate Authority - G2
SANs: *.nexxto.com, nexxto.com
Subject: *.nexxto.com
Issuer: Go Daddy Secure Certificate Authority - G2
SANs: *.nexxto.com, nexxto.com
Subject: *.nexxto.com
Issuer: Go Daddy Secure Certificate Authority - G2
SANs: *.nexxto.com, nexxto.com

IPs Citing This Domain

No citing IPs found yet

As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

Origin IP Origin ASN CDN ASN Confidence Reasoning
35.231.71.61 AS396982 AS209242 95% cert 03df8654… served by 35.231.71.61 (AS396982) carries SAN nexxto.com which currently resolves through Cloudflare (AS209242) at 199.60.103.78, 199.60.103.178
35.196.64.130 AS396982 AS209242 95% cert 03df8654… served by 35.196.64.130 (AS396982) carries SAN nexxto.com which currently resolves through Cloudflare (AS209242) at 199.60.103.78, 199.60.103.178
35.229.16.142 AS396982 AS209242 95% cert 03df8654… served by 35.229.16.142 (AS396982) carries SAN nexxto.com which currently resolves through Cloudflare (AS209242) at 199.60.103.78, 199.60.103.178

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.

Type Value First seen Last seen
MX 5 ALT1.ASPMX.L.GOOGLE.com 2026-05-26 05:00:16.508 2026-05-27 01:44:39.232
TXT google-site-verification=THNLudUPBLoPm1lKckckbA1tpepZTWCkFHSuYnNKNHE 2026-05-26 05:00:16.508 2026-05-27 01:44:39.232
TXT v=spf1 a mx include:_spf.google.com ~all 2026-05-26 05:00:16.508 2026-05-27 01:44:39.232
MX 10 ASPMX2.GOOGLEMAIL.com 2026-05-26 05:00:16.508 2026-05-27 01:44:39.232
A 199.60.103.178 2026-05-26 05:00:16.508 2026-05-27 01:44:39.232
NS ns3.locaweb.com.br 2026-05-26 05:00:16.508 2026-05-27 01:44:39.232
A 199.60.103.78 2026-05-26 05:00:16.508 2026-05-27 01:44:39.232
MX 5 ALT2.ASPMX.L.GOOGLE.com 2026-05-26 05:00:16.508 2026-05-27 01:44:39.232
NS ns1.locaweb.com.br 2026-05-26 05:00:16.508 2026-05-27 01:44:39.232
NS ns2.locaweb.com.br 2026-05-26 05:00:16.508 2026-05-27 01:44:39.232
TXT l0msje6bv7gbmp03i1sc9qs5j6 2026-05-26 05:00:16.508 2026-05-27 01:44:39.232
MX 10 ASPMX3.GOOGLEMAIL.com 2026-05-26 05:00:16.508 2026-05-27 01:44:39.232
MX 1 ASPMX.L.GOOGLE.com 2026-05-26 05:00:16.508 2026-05-27 01:44:39.232