Check-Host.cc

Domain

nmap.org

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

Run a live full scan of nmap.org

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now
Hosting IPs
2
A/AAAA targets
Subdomains
14
CT + scan + body
Record Types
6
seen in DNS
Observed Certs
2
in our scans

DNS Records

A
50.116.1.184
AAAA
2600:3c01:e000:3e6::6d4e:7061
MX
1 ASPMX.L.GOOGLE.COM, 10 ASPMX2.GOOGLEMAIL.COM, 10 ASPMX3.GOOGLEMAIL.COM, 5 ALT1.ASPMX.L.GOOGLE.COM, 5 ALT2.ASPMX.L.GOOGLE.COM
NS
ns1.linode.com, ns2.linode.com, ns3.linode.com, ns4.linode.com, ns5.linode.com
TXT
google-site-verification=SrtYpJGxZzMTcczZG44XtLVK-sEPit9bputDjWc0lF4, v=spf1 a mx ptr ip4:50.116.1.184 ip6:2600:3c01::f03c:91ff:fe98:ff4e ip6:2600:3c01:e000:3e6::6d4e:7061 include:_spf.google.com ~all
CNAME
CAA
0 issue "letsencrypt.org"

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.

Subdomain Resolves to Last seen
nmap.org 2026-07-16 20:25:03.738
svn.nmap.org
1970-01-01 00:00:00.000
www.nmap.org
1970-01-01 00:00:00.000

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

Certificate observations pending

TLS certs naming this domain in subject or SANs will appear here as our scan-layer catches them.

IPs Citing This Domain

Hosts whose HTML body references this domain. Strong signal for origin/mirror/embed discovery.

45.33.32.156:80 href · ×9
115.190.232.197:443 href · ×4
65.109.99.239:443 href · ×3
89.151.142.152:8080 href · ×2
168.138.208.253:443 href · ×2
13.67.234.54:443 href · ×2
107.21.226.112:443 href · ×1
34.211.146.44:80 href · ×1
138.68.3.223:8080 href · ×1
46.43.20.186:443 href · ×1
64.23.129.143:443 href · ×1
138.68.149.196:443 href · ×1
105.247.85.226:443 href · ×1
98.86.28.31:80 href · ×1
101.34.223.202:8080 href · ×1
13.115.102.97:443 href · ×1
85.214.225.141:443 href · ×1
199.231.187.244:5000 href · ×1

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

No origin-IP leaks detected (yet)

Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.

Type Value First seen Last seen
NS ns4.linode.com 2026-05-26 02:26:35.941 2026-07-16 20:25:03.738
MX 10 ASPMX3.GOOGLEMAIL.COM 2026-05-26 02:26:35.941 2026-07-16 20:25:03.738
AAAA 2600:3c01:e000:3e6::6d4e:7061 2026-05-26 02:26:35.941 2026-07-16 20:25:03.738
NS ns2.linode.com 2026-05-26 02:26:35.941 2026-07-16 20:25:03.738
TXT v=spf1 a mx ptr ip4:50.116.1.184 ip6:2600:3c01::f03c:91ff:fe98:ff4e ip6:2600:3c01:e000:3e6::6d4e:7061 include:_spf.google.com ~all 2026-05-26 02:26:35.941 2026-07-16 20:25:03.738
MX 1 ASPMX.L.GOOGLE.COM 2026-05-26 02:26:35.941 2026-07-16 20:25:03.738
NS ns3.linode.com 2026-05-26 02:26:35.941 2026-07-16 20:25:03.738
MX 5 ALT1.ASPMX.L.GOOGLE.COM 2026-05-26 02:26:35.941 2026-07-16 20:25:03.738
MX 10 ASPMX2.GOOGLEMAIL.COM 2026-05-26 02:26:35.941 2026-07-16 20:25:03.738
NS ns1.linode.com 2026-05-26 02:26:35.941 2026-07-16 20:25:03.738
NS ns5.linode.com 2026-05-26 02:26:35.941 2026-07-16 20:25:03.738
A 50.116.1.184 2026-05-26 02:26:35.941 2026-07-16 20:25:03.738
CAA 0 issue "letsencrypt.org" 2026-05-26 02:26:35.941 2026-07-16 20:25:03.738
TXT google-site-verification=SrtYpJGxZzMTcczZG44XtLVK-sEPit9bputDjWc0lF4 2026-05-26 02:26:35.941 2026-07-16 20:25:03.738
MX 5 ALT2.ASPMX.L.GOOGLE.COM 2026-05-26 02:26:35.941 2026-07-16 20:25:03.738