Check-Host.cc

Try 1.1.1.1 AS13335 check-host.cc /country/de /tld/cc
Domain

zd.fi

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

DNS Check HTTP Check Run Full Scan .fi TLD

Run a live full scan of zd.fi

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now
Hosting IPs
11
A/AAAA targets
Subdomains
23
CT + scan + body
Record Types
6
seen in DNS
Observed Certs
1
in our scans

DNS Records

A
91.197.208.129
AAAA
2001:67c:12c::300
MX
10 mail.zd.fi, 20 backup.mail.zd.fi
NS
ns.zerodistance.net, ns2.zerodistance.net, ns3.zerodistance.net
TXT
v=spf1 include:zerodistance.fi ~all
CNAME
—
CAA
0 issue "digicert.com", 0 issue "letsencrypt.org", 0 issue "sectigo.com"

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.

Subdomain Resolves to Last seen
coffee.zd.fi
91.197.208.3 2001:67c:12c::f300
2026-05-27 01:12:39.354
dyndns.zd.fi
91.197.208.115 2001:67c:12c::115
2026-07-22 06:55:43.302
mail.zd.fi
91.197.208.4 2001:67c:12c::25
2026-05-26 08:23:40.752
tools.zd.fi
91.197.208.115 2001:67c:12c::115
2026-07-22 06:55:43.302
zd.fi
91.197.208.129 2001:67c:12c::300
2026-07-14 23:08:41.315
kauppa.zd.fi
91.197.208.129
2026-06-18 23:00:18.905
observium.zd.fi
1970-01-01 00:00:00.000
posti.zd.fi
91.197.209.4
2026-06-18 23:00:18.905
rspamvpn.zd.fi
91.197.209.128
2026-06-20 15:34:21.167
wp.zd.fi
1970-01-01 00:00:00.000
www.wp.zd.fi
1970-01-01 00:00:00.000
www.zd.fi
91.197.208.129
2026-07-14 23:08:41.315
zabbix.zd.fi
91.197.208.132
2026-06-23 23:58:06.373

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

91.197.208.114:443 07b849faa938…
Subject: dyndns.zd.fi
Issuer: YE2
SANs: dyndns.zd.fi, ssl.zerodistance.fi, tools.zd.fi
91.197.208.132:443 9fd128d01e2f…
Subject: zabbix.zd.fi
Issuer: R13
SANs: zabbix.zd.fi
91.197.208.4:443 38c29aa22ded…
Subject: mail.zd.fi
Issuer: R12
SANs: mail.zd.fi

IPs Citing This Domain

Hosts whose HTML body references this domain. Strong signal for origin/mirror/embed discovery.

91.197.208.115:443 href · ×2

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

No origin-IP leaks detected (yet)

Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.

Type Value First seen Last seen
AAAA 2001:67c:12c::300 2026-05-26 10:05:02.397 2026-07-14 23:08:41.315
NS ns.zerodistance.net 2026-05-26 10:05:02.397 2026-07-14 23:08:41.315
MX 10 mail.zd.fi 2026-05-26 10:05:02.397 2026-07-14 23:08:41.315
NS ns2.zerodistance.net 2026-05-26 10:05:02.397 2026-07-14 23:08:41.315
TXT v=spf1 include:zerodistance.fi ~all 2026-05-26 10:05:02.397 2026-07-14 23:08:41.315
NS ns3.zerodistance.net 2026-05-26 10:05:02.397 2026-07-14 23:08:41.315
A 91.197.208.129 2026-05-26 10:05:02.397 2026-07-14 23:08:41.315
MX 20 backup.mail.zd.fi 2026-05-26 10:05:02.397 2026-07-14 23:08:41.315
CAA 0 issue "sectigo.com" 2026-07-14 23:08:41.315 2026-07-14 23:08:41.315
CAA 0 issue "digicert.com" 2026-07-14 23:08:41.315 2026-07-14 23:08:41.315
CAA 0 issue "letsencrypt.org" 2026-07-14 23:08:41.315 2026-07-14 23:08:41.315