Check-Host.cc

Try 1.1.1.1 AS13335 check-host.cc /country/de /tld/cc
Domain

bigbluebutton.org

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

DNS Check HTTP Check Run Full Scan .org TLD

Run a live full scan of bigbluebutton.org

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now
Hosting IPs
47
A/AAAA targets
Subdomains
46
CT + scan + body
Record Types
4
seen in DNS
Observed Certs
4
in our scans

DNS Records

A
104.248.105.210
AAAA
—
MX
1 aspmx.l.google.com, 10 aspmx2.googlemail.com, 20 aspmx3.googlemail.com, 5 alt1.aspmx.l.google.com, 5 alt2.aspmx.l.google.com
NS
ns-1208.awsdns-23.org, ns-1542.awsdns-00.co.uk, ns-402.awsdns-50.com, ns-843.awsdns-41.net
TXT
google-site-verification=0qqMwOo0BX7GGpedLJPtXI2xV1Su3f703ecNYDfC9Ys, v=spf1 include:_spf.google.com include:mailgun.org include:spf.mandrillapp.com ~all
CNAME
—
CAA
—

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Subdomain enumeration pending

Every subdomain ever issued a TLS cert under this apex — extracted from Certificate Transparency logs, our own scan observations and body references.

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

54.215.33.235:443 789d4d62e4dc…
Subject: demo.bigbluebutton.org
Issuer: Amazon RSA 2048 M04
SANs: *.demo.bigbluebutton.org, demo.bigbluebutton.org
167.172.140.4:443 b9fd38eb8a06…
Subject: test.bigbluebutton.org
Issuer: E8
SANs: test.bigbluebutton.org
159.203.31.141:443 3ae644dab8f3…
Subject: demo-ios.bigbluebutton.org
Issuer: R12
SANs: demo-ios.bigbluebutton.org

IPs Citing This Domain

Hosts whose HTML body references this domain. Strong signal for origin/mirror/embed discovery.

77.87.125.140:443 href · ×12
41.89.1.198:443 href · ×12
5.189.185.122:443 href · ×8
51.75.242.213:443 href · ×8
194.27.39.26:443 href · ×8
188.166.41.102:443 href · ×8
194.141.67.217:443 href · ×8
95.111.239.185:443 href · ×8
87.106.236.131:443 href · ×8
147.135.194.115:443 href · ×8
213.189.38.201:443 href · ×8
82.223.102.231:443 href · ×8
136.243.19.209:443 href · ×8
131.188.46.15:443 href · ×8
194.27.217.74:443 href · ×8
195.231.19.11:443 href · ×8
213.32.116.132:443 href · ×8
154.12.231.246:443 href · ×8
36.137.123.223:443 href · ×8
161.97.81.35:443 href · ×8
163.19.0.182:443 href · ×8
51.68.207.62:443 href · ×8
95.183.250.191:443 href · ×8
194.27.39.47:443 href · ×8
185.153.50.56:443 href · ×8
20.71.233.194:443 href · ×8
181.209.31.215:443 href · ×8
46.61.136.69:443 href · ×8
80.158.52.50:443 href · ×8
34.247.11.101:443 href · ×8
163.19.0.178:443 href · ×8
203.138.104.218:443 href · ×8
176.31.230.188:443 href · ×8
195.19.40.64:443 href · ×8
84.246.120.231:443 href · ×8
212.192.123.30:443 href · ×8
194.42.117.78:443 href · ×8
194.27.39.21:443 href · ×8
195.230.13.166:443 href · ×8
176.222.246.101:443 href · ×8
51.255.95.114:443 href · ×8
185.153.49.123:443 href · ×8
93.63.96.73:443 href · ×8
46.101.234.63:443 href · ×8
54.39.47.211:443 href · ×8
81.169.198.167:443 href · ×8
195.251.111.111:80 href · ×6
193.52.137.223:443 href · ×4
194.27.210.130:443 href · ×4
116.203.237.88:443 href · ×4

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

No origin-IP leaks detected (yet)

Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.

Type Value First seen Last seen
A 104.248.105.210 2026-05-25 21:58:50.500 2026-07-28 18:27:17.459
NS ns-1208.awsdns-23.org 2026-05-25 22:05:29.416 2026-07-28 18:27:17.459
TXT google-site-verification=0qqMwOo0BX7GGpedLJPtXI2xV1Su3f703ecNYDfC9Ys 2026-05-25 22:05:29.416 2026-07-28 18:27:17.459
TXT v=spf1 include:_spf.google.com include:mailgun.org include:spf.mandrillapp.com ~all 2026-05-25 22:05:29.416 2026-07-28 18:27:17.459
MX 10 aspmx2.googlemail.com 2026-05-25 22:05:29.416 2026-07-28 18:27:17.459
MX 5 alt2.aspmx.l.google.com 2026-05-25 22:05:29.416 2026-07-28 18:27:17.459
MX 1 aspmx.l.google.com 2026-05-25 22:05:29.416 2026-07-28 18:27:17.459
NS ns-402.awsdns-50.com 2026-05-25 22:05:29.416 2026-07-28 18:27:17.459
NS ns-843.awsdns-41.net 2026-05-25 22:05:29.416 2026-07-28 18:27:17.459
NS ns-1542.awsdns-00.co.uk 2026-05-25 22:05:29.416 2026-07-28 18:27:17.459
MX 20 aspmx3.googlemail.com 2026-05-25 22:05:29.416 2026-07-28 18:27:17.459
MX 5 alt1.aspmx.l.google.com 2026-05-25 22:05:29.416 2026-07-28 18:27:17.459