Check-Host.cc

Domain

pic.pfaff.dev

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

Run a live full scan of pic.pfaff.dev

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now
Hosting IPs
A/AAAA targets
Subdomains
CT + scan + body
Record Types
seen in DNS
Observed Certs
in our scans

DNS Records

A
174.95.51.201
AAAA
MX
0 mail.tutanota.de
NS
curitiba.ns.porkbun.com, fortaleza.ns.porkbun.com, maceio.ns.porkbun.com, salvador.ns.porkbun.com
TXT
google-site-verification=E89Hn-1_D6X6T5MvmJJwF_O9DFaHs3iGWWwMN0hBKTs, t-verify=ed6e17ea71d33116d4377b56352881aa, v=spf1 include:spf.tutanota.de -all
CNAME
CAA
0 iodef "mailto:security@pfaff.dev", 0 issue "letsencrypt.org;accounturi=https://acme-v02.api.letsencrypt.org/acme/acct/58411364"

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Subdomain enumeration pending

Every subdomain ever issued a TLS cert under this apex — extracted from Certificate Transparency logs, our own scan observations and body references.

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

Certificate observations pending

TLS certs naming this domain in subject or SANs will appear here as our scan-layer catches them.

IPs Citing This Domain

No citing IPs found yet

As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

No origin-IP leaks detected (yet)

Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.

CT-Log Evidence

Certificates from public Certificate Transparency logs whose subject or SAN names this domain — including historic certs we never observed live.

d8efd8848bc8f08b… sectigo · elephant2026h1
Subject: pfaff.dev
Issuer: E7
SANs: auth.pfaff.dev, autoconfig.pfaff.dev, autodiscover.pfaff.dev, gene.pfaff.dev, git.pfaff.dev, internal.pfaff.dev, mail.pfaff.dev, music.pfaff.dev, nc.pfaff.dev, neptune.pfaff.dev, pass.pfaff.dev, pfaff.dev, pic.pfaff.dev, speed.pfaff.dev
Valid: 2026-01-06 05:57:24 → 2026-04-06 05:57:23
add695b7ef1a20c1… sectigo · elephant2026h1
Subject: pfaff.dev
Issuer: E8
SANs: auth.pfaff.dev, autoconfig.pfaff.dev, autodiscover.pfaff.dev, gene.pfaff.dev, git.pfaff.dev, internal.pfaff.dev, mail.pfaff.dev, nc.pfaff.dev, neptune.pfaff.dev, pass.pfaff.dev, pfaff.dev, pic.pfaff.dev, speed.pfaff.dev
Valid: 2025-12-30 05:14:23 → 2026-03-30 05:14:22
aeafe09a6dec1151… sectigo · elephant2026h1
Subject: pfaff.dev
Issuer: E8
SANs: auth.pfaff.dev, autoconfig.pfaff.dev, autodiscover.pfaff.dev, gene.pfaff.dev, git.pfaff.dev, internal.pfaff.dev, mail.pfaff.dev, nc.pfaff.dev, neptune.pfaff.dev, pass.pfaff.dev, pfaff.dev, pic.pfaff.dev, speed.pfaff.dev, staging.pfaff.dev
Valid: 2025-12-30 04:17:09 → 2026-03-30 04:17:08
bc595188a8ba1739… sectigo · elephant2026h1
Subject: pfaff.dev
Issuer: E8
SANs: auth.pfaff.dev, autoconfig.pfaff.dev, autodiscover.pfaff.dev, gene.pfaff.dev, git.pfaff.dev, internal.pfaff.dev, mail.pfaff.dev, nc.pfaff.dev, neptune.pfaff.dev, pass.pfaff.dev, pfaff.dev, pic.pfaff.dev, speed.pfaff.dev
Valid: 2025-12-25 15:11:59 → 2026-03-25 15:11:58
0a9311ca43b655e6… cloudflare · nimbus2026
Subject: pfaff.dev
Issuer: E7
SANs: auth.pfaff.dev, autoconfig.pfaff.dev, autodiscover.pfaff.dev, gene.pfaff.dev, git.pfaff.dev, internal.pfaff.dev, mail.pfaff.dev, nc.pfaff.dev, neptune.pfaff.dev, pass.pfaff.dev, pfaff.dev, pic.pfaff.dev, speed.pfaff.dev
Valid: 2025-10-26 20:51:26 → 2026-01-24 20:51:25
0a9311ca43b655e6… sectigo · elephant2026h1
Subject: pfaff.dev
Issuer: E7
SANs: auth.pfaff.dev, autoconfig.pfaff.dev, autodiscover.pfaff.dev, gene.pfaff.dev, git.pfaff.dev, internal.pfaff.dev, mail.pfaff.dev, nc.pfaff.dev, neptune.pfaff.dev, pass.pfaff.dev, pfaff.dev, pic.pfaff.dev, speed.pfaff.dev
Valid: 2025-10-26 20:51:26 → 2026-01-24 20:51:25
11eaf7a3eb583f93… sectigo · elephant2026h1
Subject: pfaff.dev
Issuer: E7
SANs: auth.pfaff.dev, autoconfig.pfaff.dev, autodiscover.pfaff.dev, gene.pfaff.dev, git.pfaff.dev, internal.pfaff.dev, mail.pfaff.dev, nc.pfaff.dev, neptune.pfaff.dev, pass.pfaff.dev, pfaff.dev, pic.pfaff.dev, speed.pfaff.dev
Valid: 2025-10-19 06:02:36 → 2026-01-17 06:02:35

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.

Type Value First seen Last seen
TXT t-verify=ed6e17ea71d33116d4377b56352881aa 2026-06-22 07:54:21.148 2026-06-22 07:54:21.148
NS curitiba.ns.porkbun.com 2026-06-22 07:54:21.148 2026-06-22 07:54:21.148
CAA 0 issue "letsencrypt.org;accounturi=https://acme-v02.api.letsencrypt.org/acme/acct/58411364" 2026-06-22 07:54:21.148 2026-06-22 07:54:21.148
TXT v=spf1 include:spf.tutanota.de -all 2026-06-22 07:54:21.148 2026-06-22 07:54:21.148
CAA 0 iodef "mailto:security@pfaff.dev" 2026-06-22 07:54:21.148 2026-06-22 07:54:21.148
TXT google-site-verification=E89Hn-1_D6X6T5MvmJJwF_O9DFaHs3iGWWwMN0hBKTs 2026-06-22 07:54:21.148 2026-06-22 07:54:21.148
NS salvador.ns.porkbun.com 2026-06-22 07:54:21.148 2026-06-22 07:54:21.148
A 174.95.51.201 2026-06-22 07:54:21.148 2026-06-22 07:54:21.148
NS maceio.ns.porkbun.com 2026-06-22 07:54:21.148 2026-06-22 07:54:21.148
NS fortaleza.ns.porkbun.com 2026-06-22 07:54:21.148 2026-06-22 07:54:21.148
MX 0 mail.tutanota.de 2026-06-22 07:54:21.148 2026-06-22 07:54:21.148