Check-Host.cc

Try 1.1.1.1 AS13335 check-host.cc /country/de /tld/cc
Domain

layer.ai

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

DNS Check HTTP Check Run Full Scan .ai TLD

Run a live full scan of layer.ai

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now
Hosting IPs
17
A/AAAA targets
Subdomains
26
CT + scan + body
Record Types
4
seen in DNS
Observed Certs
12
in our scans

DNS Records

A
31.43.160.6, 31.43.161.6, 34.8.148.62
AAAA
—
MX
1 aspmx.l.google.com, 10 alt3.aspmx.l.google.com, 10 alt4.aspmx.l.google.com, 5 alt1.aspmx.l.google.com, 5 alt2.aspmx.l.google.com
NS
ns-cloud-e1.googledomains.com, ns-cloud-e2.googledomains.com, ns-cloud-e3.googledomains.com, ns-cloud-e4.googledomains.com
TXT
anthropic-domain-verification-73nkd6=vNhutL06Uw9UppDQm8S9aWEfu, cursor-domain-verification-rcz4w8=fQJslxpe3PpJS1yVlJt0F5k33, elevenlabs=dPHKZcNIgQfuHpt1GE5maoUBlHLJhTEZd-hF6DnpW-w, facebook-domain-verification=4iip7nnsees2hdxrgq8nq3mx45bs1v, figma-domain-verification=7e862d3bfc7dc4808b7885c49448ac0039e272ad737bda5e6d4a03841a37b9e0-1750683007, google-site-verification=9Wh6Eif4bPkZy0hWBXMfNRPg9FhxOWqcMuWZw3daSaw, google-site-verification=_6C0hT2r1dSZlPOU47KGdHxlJ9C1Y5hEwPiM10YipWQ, linkedin-site-verification=d8a0f72c-f8f7-40ee-bb5c-c5f4f3db3355
CNAME
—
CAA
—

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.

Subdomain Resolves to Last seen
auth.dev.layer.ai
104.18.34.171 172.64.153.85 2a06:98c1:3101::ac40:9955 2a06:98c1:3102::6812:22ab
2026-06-21 06:39:32.312
pay.layer.ai
172.64.152.100 104.18.35.156 2606:4700:4405::ac40:9864 2a06:98c1:3103::6812:239c
2026-06-20 11:54:45.529
trust.layer.ai
104.18.26.175 104.18.27.175 2606:4700::6812:1baf 2606:4700::6812:1aaf
2026-07-25 15:25:35.996
layer.ai
31.43.160.6 31.43.161.6 34.8.148.62
2026-06-23 05:03:09.486
app.layer.ai
1970-01-01 00:00:00.000
help.layer.ai
1970-01-01 00:00:00.000
media.app.layer.ai
34.111.255.253
2026-07-17 21:27:17.633
media.dev.layer.ai
1970-01-01 00:00:00.000
media.dev2.layer.ai
1970-01-01 00:00:00.000
next.app.layer.ai
34.36.236.114
2026-07-17 21:27:17.633
payments.layer.ai
1970-01-01 00:00:00.000
www.layer.ai
34.8.148.62
2026-06-23 02:04:06.831

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

158.220.87.50:443 a559b35abd84…
Subject: docs.servicelayer.ai
Issuer: YE2
SANs: docs.servicelayer.ai
34.36.236.114:443 9f4cea8ab477…
Subject: next.app.layer.ai
Issuer: YR2
SANs: next.app.layer.ai
34.254.34.67:443 4799daeb7632…
Subject: app.dataslayer.ai
Issuer: YR1
SANs: app.dataslayer.ai
52.201.106.144:443 bd50d12c437e…
Subject: staging.bricklayer.ai
Issuer: Amazon RSA 2048 M01
SANs: staging.bricklayer.ai
34.234.137.218:443 2a32a1aed41e…
Subject: nova.bricklayer.ai
Issuer: Amazon RSA 2048 M04
SANs: nova.bricklayer.ai
34.229.5.207:443 8cc3f1d06b59…
Subject: console.hiddenlayer.ai
Issuer: Amazon RSA 2048 M01
SANs: console.east.us.hiddenlayer.ai, console.hiddenlayer.ai, console.us.hiddenlayer.ai
18.204.140.34:443 10b134a514c9…
Subject: dev2.bricklayer.ai
Issuer: Amazon RSA 2048 M01
SANs: dev2.bricklayer.ai
52.2.17.239:443 bd50d12c437e…
Subject: staging.bricklayer.ai
Issuer: Amazon RSA 2048 M01
SANs: staging.bricklayer.ai
54.152.231.101:443 05d8533c8b05…
Subject: app.bricklayer.ai
Issuer: Amazon RSA 2048 M01
SANs: app.bricklayer.ai
18.211.37.107:443 71cfbaa64d8d…
Subject: 8th-layer.ai
Issuer: Amazon RSA 2048 M04
SANs: *.8th-layer.ai, 8th-layer.ai, 8th-layer.onezero1.ai, 8thlayer.onezero1.ai, directory.8th-layer.onezero1.ai, directory.8thlayer.onezero1.ai
34.107.216.225:443 a1b6334fd30d…
Subject: gitlab.gcp.api.east.us.hiddenlayer.ai
Issuer: WR3
SANs: gitlab.gcp.api.east.us.hiddenlayer.ai
44.219.4.254:443 71cfbaa64d8d…
Subject: 8th-layer.ai
Issuer: Amazon RSA 2048 M04
SANs: *.8th-layer.ai, 8th-layer.ai, 8th-layer.onezero1.ai, 8thlayer.onezero1.ai, directory.8th-layer.onezero1.ai, directory.8thlayer.onezero1.ai
195.154.174.84:443 c6b64d1df174…
Subject: underlayer.ai
Issuer: E7
SANs: underlayer.ai
18.198.53.142:443 f91cd718310b…
Subject: console.hiddenlayer.ai
Issuer: Amazon RSA 2048 M04
SANs: console.central.eu.hiddenlayer.ai, console.eu.hiddenlayer.ai, console.hiddenlayer.ai
3.13.107.73:443 033fb8c41b7a…
Subject: api.functionlayer.ai
Issuer: Amazon RSA 2048 M02
SANs: api.functionlayer.ai
35.153.212.70:443 bd50d12c437e…
Subject: staging.bricklayer.ai
Issuer: Amazon RSA 2048 M01
SANs: staging.bricklayer.ai
3.211.15.122:443 4ec808469a76…
Subject: api.skilllayer.ai
Issuer: Amazon RSA 2048 M01
SANs: api.skilllayer.ai
100.55.229.104:443 71cfbaa64d8d…
Subject: 8th-layer.ai
Issuer: Amazon RSA 2048 M04
SANs: *.8th-layer.ai, 8th-layer.ai, 8th-layer.onezero1.ai, 8thlayer.onezero1.ai, directory.8th-layer.onezero1.ai, directory.8thlayer.onezero1.ai
3.75.44.204:443 f91cd718310b…
Subject: console.hiddenlayer.ai
Issuer: Amazon RSA 2048 M04
SANs: console.central.eu.hiddenlayer.ai, console.eu.hiddenlayer.ai, console.hiddenlayer.ai
100.49.21.226:443 10b134a514c9…
Subject: dev2.bricklayer.ai
Issuer: Amazon RSA 2048 M01
SANs: dev2.bricklayer.ai
54.80.163.210:443 fefeced0ebba…
Subject: api.codelayer.ai
Issuer: Amazon RSA 2048 M01
SANs: api.codelayer.ai, www.api.codelayer.ai
35.217.27.127:443 c8fb5eb64d5f…
Subject: app.dataplayer.ai
Issuer: E8
SANs: app.dataplayer.ai
3.228.43.56:443 71cfbaa64d8d…
Subject: 8th-layer.ai
Issuer: Amazon RSA 2048 M04
SANs: *.8th-layer.ai, 8th-layer.ai, 8th-layer.onezero1.ai, 8thlayer.onezero1.ai, directory.8th-layer.onezero1.ai, directory.8thlayer.onezero1.ai
54.73.95.120:443 56e32ac67baf…
Subject: kpmg.eu2.bricklayer.ai
Issuer: Amazon RSA 2048 M01
SANs: kpmg.eu2.bricklayer.ai

IPs Citing This Domain

Hosts whose HTML body references this domain. Strong signal for origin/mirror/embed discovery.

38.180.34.56:443 href · ×1

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

No origin-IP leaks detected (yet)

Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Domain timeline pending

Passive-DNS history accumulates as our forward-DNS crawler observes A/AAAA/MX/NS/TXT records over time.