Check-Host.cc

Domain

npmjs.com

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

Run a live full scan of npmjs.com

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now
Hosting IPs
37
A/AAAA targets
Subdomains
32
CT + scan + body
Record Types
5
seen in DNS
Observed Certs
24
in our scans

DNS Records

A
104.17.134.117, 104.17.135.117
AAAA
2606:4700::6811:8675, 2606:4700::6811:8775
MX
10 aspmx.l.google.com, 20 alt1.aspmx.l.google.com, 30 alt2.aspmx.l.google.com, 40 aspmx2.googlemail.com, 50 aspmx3.googlemail.com
NS
bayan.ns.cloudflare.com, sandy.ns.cloudflare.com
TXT
9ppvqgfs31mbchvn33n601dh9sm545j0, MS=ms83736980, ZAMDPQHDY, ZOOM_verify_9jQN-O8pSrO7mY5zFjoF6g, google-site-verification=3olb25e_eHjiKH_mpKzq8anNryKG7fB3C2Hbrrnny6I, google-site-verification=KtNKHWHGMRbAhkVydBWxt9sJJF-vvtTMVK5S8AgtreA, status-page-domain-verification=gx37pw1xshfg, v=spf1 include:stspg-customer.com include:mail.zendesk.com include:_spf.google.com include:5326678.spf10.hubspotemail.net include:servers.mcsv.net include:amazonses.com ~all
CNAME
CAA

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

Subject: npmjs.com
Issuer: WE1
SANs: *.internal.npmjs.com, *.npmjs.com, npmjs.com
Subject: npmjs.com
Issuer: WE1
SANs: *.internal.npmjs.com, *.npmjs.com, npmjs.com
Subject: npmjs.com
Issuer: WE1
SANs: *.internal.npmjs.com, *.npmjs.com, npmjs.com
Subject: npmjs.com
Issuer: WE1
SANs: *.internal.npmjs.com, *.npmjs.com, npmjs.com
Subject: npmjs.com
Issuer: WE1
SANs: *.internal.npmjs.com, *.npmjs.com, npmjs.com

IPs Citing This Domain

No citing IPs found yet

As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

Origin IP Origin ASN CDN ASN Confidence Reasoning
89.125.2.229 AS57043 AS13335 95% cert b7b4afc3… served by 89.125.2.229 (AS57043) carries SAN npmjs.com which currently resolves through Cloudflare (AS13335) at 104.17.134.117, 104.17.135.117, 2606:4700::6811:8675, 2606:4700::6811:8775

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.

Type Value First seen Last seen
MX 40 aspmx2.googlemail.com 2026-05-26 03:33:27.910 2026-07-28 04:18:08.089
A 104.17.135.117 2026-05-26 03:33:27.910 2026-07-28 04:18:08.089
MX 20 alt1.aspmx.l.google.com 2026-05-26 03:33:27.910 2026-07-28 04:18:08.089
TXT v=spf1 include:stspg-customer.com include:mail.zendesk.com include:_spf.google.com include:5326678.spf10.hubspotemail.net include:servers.mcsv.net include:amazonses.com ~all 2026-05-26 03:33:27.910 2026-07-28 04:18:08.089
TXT status-page-domain-verification=gx37pw1xshfg 2026-05-26 03:33:27.910 2026-07-28 04:18:08.089
TXT google-site-verification=KtNKHWHGMRbAhkVydBWxt9sJJF-vvtTMVK5S8AgtreA 2026-05-26 03:33:27.910 2026-07-28 04:18:08.089
TXT ZAMDPQHDY 2026-05-26 03:33:27.910 2026-07-28 04:18:08.089
AAAA 2606:4700::6811:8675 2026-05-26 03:33:27.910 2026-07-28 04:18:08.089
MX 30 alt2.aspmx.l.google.com 2026-05-26 03:33:27.910 2026-07-28 04:18:08.089
A 104.17.134.117 2026-05-26 03:33:27.910 2026-07-28 04:18:08.089
MX 10 aspmx.l.google.com 2026-05-26 03:33:27.910 2026-07-28 04:18:08.089
AAAA 2606:4700::6811:8775 2026-05-26 03:33:27.910 2026-07-28 04:18:08.089
TXT google-site-verification=3olb25e_eHjiKH_mpKzq8anNryKG7fB3C2Hbrrnny6I 2026-05-26 03:33:27.910 2026-07-28 04:18:08.089
TXT 9ppvqgfs31mbchvn33n601dh9sm545j0 2026-05-26 03:33:27.910 2026-07-28 04:18:08.089
NS sandy.ns.cloudflare.com 2026-05-26 03:33:27.910 2026-07-28 04:18:08.089
TXT ZOOM_verify_9jQN-O8pSrO7mY5zFjoF6g 2026-05-26 03:33:27.910 2026-07-28 04:18:08.089
MX 50 aspmx3.googlemail.com 2026-05-26 03:33:27.910 2026-07-28 04:18:08.089
NS bayan.ns.cloudflare.com 2026-05-26 03:33:27.910 2026-07-28 04:18:08.089
TXT MS=ms83736980 2026-05-26 03:33:27.910 2026-07-28 04:18:08.089