Check-Host.cc

Domain

nixos.org

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

Run a live full scan of nixos.org

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now
Hosting IPs
37
A/AAAA targets
Subdomains
53
CT + scan + body
Record Types
5
seen in DNS
Observed Certs
2
in our scans

DNS Records

A
75.2.60.5, 99.83.231.61
AAAA
MX
10 umbriel.nixos.org
NS
ns-161-c.gandi.net, ns-177-a.gandi.net, ns-61-b.gandi.net
TXT
apple-domain-verification=OvacO4lGB9A6dBFg, brevo-code:f580a125e215ecb440363a15cdf47a17, google-site-verification=Pm5opvmNjJOwdb7JnuVJ_eFBPaZYWNcAavY-08AJoGc, v=spf1 a:umbriel.nixos.org -all
CNAME
CAA
128 iodef "mailto:infra+caa@nixos.org", 128 issue "letsencrypt.org", 128 issuewild ";"

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.

Subdomain Resolves to Last seen
cache.nixos.org 2026-07-23 23:36:58.303
mobile.nixos.org 2026-05-27 14:49:12.821
status.nixos.org 2026-06-21 22:43:28.039
artifacts.nixos.org 2026-06-04 05:29:57.962
brand.nixos.org 2026-07-23 23:36:58.303
search.nixos.org 2026-07-24 01:57:57.176
cryptpad-sandbox.ngi.nixos.org 2026-07-27 12:01:06.998
cryptpad.ngi.nixos.org 2026-07-20 17:19:25.721
discourse.nixos.org 2026-07-22 20:14:36.796
grafana.nixos.org 2026-07-22 13:21:56.713
hydra.nixos.org 2026-07-25 18:09:53.355
monitoring.nixos.org 2026-05-27 14:49:12.821
nixos.org 2026-07-25 11:28:26.811
prometheus.nixos.org 2026-07-24 09:01:41.850
summer.nixos.org 2026-07-22 22:53:08.725
tracker-staging.security.nixos.org 2026-06-20 10:31:22.237
wiki.nixos.org 2026-07-19 20:43:31.711
buildbot.ngi.nixos.org
1970-01-01 00:00:00.000
cache-staging.nixos.org
1970-01-01 00:00:00.000
cache.ngi0.nixos.org
1970-01-01 00:00:00.000
common-styles.nixos.org
1970-01-01 00:00:00.000
freescout.nixos.org
1970-01-01 00:00:00.000
live.nixos.org
1970-01-01 00:00:00.000
matrix.nixos.org
1970-01-01 00:00:00.000
ngi.nixos.org
1970-01-01 00:00:00.000
releases.nixos.org
1970-01-01 00:00:00.000
tarballs.nixos.org
1970-01-01 00:00:00.000
test.wiki.nixos.org
1970-01-01 00:00:00.000
tracker.security.nixos.org
1970-01-01 00:00:00.000
weekly.nixos.org
1970-01-01 00:00:00.000
www.nixos.org
1970-01-01 00:00:00.000

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

Subject: discourse.nixos.org
Issuer: YE2
SANs: discourse.nixos.org, discourse.nixosdiscourse.fcio.net
Subject: hydra.nixos.org
Issuer: E7
SANs: hydra.nixos.org

IPs Citing This Domain

Hosts whose HTML body references this domain. Strong signal for origin/mirror/embed discovery.

139.162.97.134:443 href · ×7
157.90.104.34:443 href · ×5
202.182.124.72:443 href · ×5
74.12.193.158:443 href · ×2
95.179.150.130:443 href · ×2
5.78.67.222:443 href · ×2
139.94.131.143:443 href · ×2
50.4.216.191:443 href · ×2
45.83.105.111:443 href · ×2
89.234.140.196:443 href · ×2
54.236.41.67:443 href · ×2
47.79.17.200:443 href · ×1
46.16.76.207:443 href · ×1
46.4.98.216:443 href · ×1
69.211.4.248:443 href · ×1
129.153.106.52:443 href · ×1
188.40.96.202:443 href · ×1
37.27.138.10:443 href · ×1
188.213.91.56:443 href · ×1
185.233.107.136:443 href · ×1
159.195.41.211:80 href · ×1
135.181.207.107:443 href · ×1
50.19.91.103:80 href · ×1
99.247.177.43:443 href · ×1
152.67.75.145:443 href · ×1
195.201.139.148:443 href · ×1
188.245.179.29:443 href · ×1
147.182.150.224:80 href · ×1
108.61.187.184:443 href · ×1
65.212.180.200:443 href · ×1

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

No origin-IP leaks detected (yet)

Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.

Type Value First seen Last seen
A 99.83.231.61 2026-05-25 21:56:50.553 2026-07-25 11:28:26.811
A 75.2.60.5 2026-05-25 21:56:50.553 2026-07-25 11:28:26.811
NS ns-177-a.gandi.net 2026-05-25 22:11:29.484 2026-07-25 11:28:26.811
NS ns-61-b.gandi.net 2026-05-25 22:11:29.484 2026-07-25 11:28:26.811
TXT brevo-code:f580a125e215ecb440363a15cdf47a17 2026-05-25 22:11:29.484 2026-07-25 11:28:26.811
TXT apple-domain-verification=OvacO4lGB9A6dBFg 2026-05-25 22:11:29.484 2026-07-25 11:28:26.811
NS ns-161-c.gandi.net 2026-05-25 22:11:29.484 2026-07-25 11:28:26.811
TXT v=spf1 a:umbriel.nixos.org -all 2026-05-25 22:11:29.484 2026-07-25 11:28:26.811
MX 10 umbriel.nixos.org 2026-05-25 22:11:29.484 2026-07-25 11:28:26.811
TXT google-site-verification=Pm5opvmNjJOwdb7JnuVJ_eFBPaZYWNcAavY-08AJoGc 2026-05-25 22:11:29.484 2026-07-25 11:28:26.811
CAA 128 iodef "mailto:infra+caa@nixos.org" 2026-05-26 10:41:24.904 2026-07-25 11:28:26.811
CAA 128 issue "letsencrypt.org" 2026-05-26 10:41:24.904 2026-07-25 11:28:26.811
CAA 128 issuewild ";" 2026-05-26 10:41:24.904 2026-07-25 11:28:26.811