Check-Host.cc

Try 1.1.1.1 AS13335 check-host.cc /country/de /tld/cc
Domain

wa.link

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

DNS Check HTTP Check Run Full Scan .link TLD

Run a live full scan of wa.link

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now
Hosting IPs
4
A/AAAA targets
Subdomains
18
CT + scan + body
Record Types
5
seen in DNS
Observed Certs
13
in our scans

DNS Records

A
104.20.36.92, 172.66.151.230
AAAA
2606:4700:10::6814:245c, 2606:4700:10::ac42:97e6
MX
10 mx.zoho.com, 20 mx2.zoho.com, 50 mx3.zoho.com
NS
isla.ns.cloudflare.com, jerry.ns.cloudflare.com
TXT
google-site-verification=Hwm7LIINmB0LpDgI-68MTjvfjZjHBOg65NIOC_AFxJY, google-site-verification=WjoDQufSqj1woYS-voM3cw-m7N-dzf0jANwE0Jt4_l0, google-site-verification=bpdb6ENb_DwtGW-H3Bty9ujnmfsfWownCJkNOJMqXRQ, v=spf1 include:zoho.com include:servers.mcsv.net include:amazonses.com ~all, zoho-verification=zb15764581.zmverify.zoho.com
CNAME
—
CAA
—

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.

Subdomain Resolves to Last seen
create.wa.link
104.20.36.92 172.66.151.230 2606:4700:10::6814:245c 2606:4700:10::ac42:97e6
2026-06-19 21:36:06.293
descubre.wa.link
104.20.36.92 172.66.151.230 2606:4700:10::6814:245c 2606:4700:10::ac42:97e6
2026-07-22 20:24:43.804
dm.wa.link
104.20.36.92 2606:4700:10::ac42:97e6 2606:4700:10::6814:245c 172.66.151.230
2026-07-18 13:29:40.232
wa.link
172.66.151.230 2606:4700:10::ac42:97e6 2606:4700:10::6814:245c 104.20.36.92
2026-07-28 18:36:19.852
shop.wa.link
1970-01-01 00:00:00.000

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

185.169.85.123:443 68f1befa2cec…
Subject: eniwa.linkgroup.opsserver.ch
Issuer: eniwa.linkgroup.opsserver.ch
SANs: eniwa.linkgroup.opsserver.ch
150.40.179.177:443 bfa2a92659b0…
Subject: desuwa.link
Issuer: ZeroSSL ECC Domain Secure Site CA
SANs: *.desuwa.link, desuwa.link
54.65.230.159:443 54150936cb2a…
Subject: ANSWER-SV250.Answer-segawa.link
Issuer: ANSWER-SV250.Answer-segawa.link
SANs: ANSWER-SV250.Answer-segawa.link
13.192.198.61:443 7b51e43f0320…
Subject: answer-seiwa.link
Issuer: Amazon RSA 2048 M01
SANs: *.answer-seiwa.link, answer-seiwa.link
63.181.220.232:443 e56858f18600…
Subject: learning.secawa.link
Issuer: Amazon RSA 2048 M01
SANs: *.learning.secawa.link, learning.secawa.link
18.158.243.139:443 97185aa45908…
Subject: secawa.link
Issuer: Amazon RSA 2048 M01
SANs: *.secawa.link, secawa.link
18.158.70.191:443 e56858f18600…
Subject: learning.secawa.link
Issuer: Amazon RSA 2048 M01
SANs: *.learning.secawa.link, learning.secawa.link
54.65.106.1:443 41b8a005288a…
Subject: answer-showa.link
Issuer: Amazon RSA 2048 M04
SANs: *.answer-showa.link, answer-showa.link

IPs Citing This Domain

Hosts whose HTML body references this domain. Strong signal for origin/mirror/embed discovery.

136.111.56.179:80 href · ×65
18.205.90.75:443 href · ×32
173.198.220.141:80 href · ×28
52.6.123.119:443 href · ×27
44.196.181.85:443 href · ×23
170.249.236.187:443 href · ×20
18.140.158.154:443 href · ×18
18.192.51.206:80 href · ×18
52.27.231.230:443 href · ×16
3.143.243.234:443 href · ×15
167.250.180.2:443 href · ×15
107.172.137.137:443 href · ×14
18.116.14.186:443 href · ×13
54.204.58.86:443 href · ×12
74.207.236.222:443 href · ×12
109.199.127.186:443 href · ×12
185.194.219.230:443 href · ×11
157.245.142.44:443 href · ×10
18.192.51.206:443 href · ×9
159.65.35.148:443 href · ×9
167.86.87.254:443 href · ×9
162.215.230.30:80 href · ×9
134.209.76.113:443 href · ×8
161.35.9.49:443 href · ×8
185.202.238.236:80 href · ×8
167.86.86.177:443 href · ×8
68.183.59.178:80 href · ×8
154.38.191.245:443 href · ×7
190.196.208.100:443 href · ×7
173.212.213.144:443 href · ×7
179.43.16.20:443 href · ×7
146.190.143.105:443 href · ×6
186.87.231.206:80 href · ×6
34.138.214.199:443 href · ×6
144.217.77.87:80 href · ×6
173.198.246.108:443 href · ×6
54.94.240.170:80 href · ×6
146.190.118.148:443 href · ×6
66.206.47.86:443 href · ×6
142.44.199.74:443 href · ×6
161.132.47.65:80 href · ×6
3.209.27.9:443 href · ×6
164.92.87.47:443 href · ×6
192.241.171.28:8443 href · ×6
129.121.75.115:443 href · ×6
38.10.102.9:443 href · ×6
45.33.13.236:443 href · ×5
173.255.212.42:443 href · ×5
34.219.74.147:443 href · ×5
54.169.83.92:443 href · ×5

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

No origin-IP leaks detected (yet)

Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.

CT-Log Evidence

Certificates from public Certificate Transparency logs whose subject or SAN names this domain — including historic certs we never observed live.

87af341e2800e170… google · xenon2026h2
Subject: wa.link
Issuer: Amazon RSA 2048 M04
SANs: wa.link, *.wpme.link, wpme.link, *.wa.link
Valid: 2026-03-02 00:00:00 → 2026-09-15 23:59:59

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Domain timeline pending

Passive-DNS history accumulates as our forward-DNS crawler observes A/AAAA/MX/NS/TXT records over time.