Check-Host.cc

Try 1.1.1.1 AS13335 check-host.cc /country/de /tld/cc
Domain

de.rs

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

DNS Check HTTP Check Run Full Scan .rs TLD

Run a live full scan of de.rs

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now
Hosting IPs
—
A/AAAA targets
Subdomains
—
CT + scan + body
Record Types
—
seen in DNS
Observed Certs
—
in our scans

DNS Records

A
136.243.5.208, 88.198.22.168
AAAA
—
MX
—
NS
ns1.resellerinterface.de, ns2.resellerinterface.de, ns3.resellerinterface.de
TXT
bla
CNAME
—
CAA
—

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Subdomain enumeration pending

Every subdomain ever issued a TLS cert under this apex — extracted from Certificate Transparency logs, our own scan observations and body references.

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

46.224.12.236:443 dc0666622f02…
Subject: d43.denode.rs
Issuer: YR1
SANs: d43.denode.rs
155.4.81.199:443 126b5b669f2e…
Subject: bincode.rs
Issuer: YE1
SANs: bincode.rs, ebricks.tech, jellyfin.dos.cafe, jellyseerr.dos.cafe, trang.ar, trangar.com
165.22.192.250:443 0f75c2711e36…
Subject: invoices.niftycode.rs
Issuer: YE1
SANs: invoices.niftycode.rs
176.9.4.178:443 0fe85a04e01a…
Subject: arcade.rs
Issuer: YR2
SANs: arcade.rs, www.arcade.rs
129.148.44.48:443 60554a970ac9…
Subject: *.riogrande.rs.gov.br
Issuer: Sectigo RSA Domain Validation Secure Server CA
SANs: *.riogrande.rs.gov.br, riogrande.rs.gov.br
212.200.89.179:443 0a66244de92b…
Subject: mail.srbijavode.rs
Issuer: YR2
SANs: mail.srbijavode.rs
34.250.114.205:443 07e924dde5b0…
Subject: game.pitchinvade.rs
Issuer: Amazon RSA 2048 M04
SANs: game.pitchinvade.rs
167.235.58.114:443 e065d719fb8b…
Subject: bnt.api.diamondcode.rs
Issuer: E7
SANs: bnt.api.diamondcode.rs, bnt.diamondcode.rs, dev.bnt.api.diamondcode.rs, dev.bnt.diamondcode.rs, dev.bnt2.api.diamondcode.rs
212.200.89.184:443 479f27e1828c…
Subject: *.srbijavode.rs
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.srbijavode.rs, srbijavode.rs
139.94.105.97:443 be264b5f7026…
Subject: vpn.rehde.rs
Issuer: YR2
SANs: vpn.rehde.rs
167.71.67.36:443 59f3a1eee7e3…
Subject: ashlande.rs
Issuer: R13
SANs: ashlande.rs
187.86.139.59:443 b52597aeaf0a…
Subject: *.riogrande.rs.gov.br
Issuer: Sectigo RSA Domain Validation Secure Server CA
SANs: *.riogrande.rs.gov.br, riogrande.rs.gov.br
200.198.173.199:443 737884890dce…
Subject: *.saude.rs.gov.br
Issuer: Thawte TLS RSA CA G1
SANs: *.saude.rs.gov.br, saude.rs.gov.br
95.216.125.231:443 ca0f13017183…
Subject: h1.inode.rs
Issuer: R12
SANs: h1.inode.rs
195.201.160.98:443 135f8b80e187…
Subject: ode.rshiny.world
Issuer: Amazon RSA 2048 M04
SANs: air.rshiny.world, almode.rshiny.world, cwm.rshiny.world, ode.rshiny.world, rshiny.world
94.254.13.105:443 042cce52cc28…
Subject: *.ferotrade.rs
Issuer: *.ferotrade.rs
SANs: *.ferotrade.rs, ferotrade.rs, internt, internt.internetprodavnice.rs, localhost
159.69.184.253:443 38e8245764bf…
Subject: app.mojezgrade.rs
Issuer: R12
SANs: app.mojezgrade.rs, app.newageschool.rs, app.school-management-system.com, app.skydev.tech, srv.skydev.tech, willhbn.skydev.tech
91.121.57.53:443 66b58eee889c…
Subject: reverse-proxy.p4.collide.rs
Issuer: reverse-proxy.p4.collide.rs
SANs: reverse-proxy.p4.collide.rs
136.248.72.24:443 60554a970ac9…
Subject: *.riogrande.rs.gov.br
Issuer: Sectigo RSA Domain Validation Secure Server CA
SANs: *.riogrande.rs.gov.br, riogrande.rs.gov.br
142.132.214.232:443 2d44fa887c77…
Subject: server.ncode.rs
Issuer: R13
SANs: server.ncode.rs
5.9.29.71:443 ce2ec727ee05…
Subject: m1.vudimtrade.rs
Issuer: R13
SANs: m1.vudimtrade.rs

IPs Citing This Domain

No citing IPs found yet

As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

No origin-IP leaks detected (yet)

Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.

Type Value First seen Last seen
TXT bla 2026-06-04 21:15:58.011 2026-06-05 14:45:33.924
A 136.243.5.208 2026-06-04 21:15:58.011 2026-06-05 14:45:33.924
NS ns2.resellerinterface.de 2026-06-04 21:15:58.011 2026-06-05 14:45:33.924
A 88.198.22.168 2026-06-04 21:15:58.011 2026-06-05 14:45:33.924
NS ns1.resellerinterface.de 2026-06-04 21:15:58.011 2026-06-05 14:45:33.924
NS ns3.resellerinterface.de 2026-06-04 21:15:58.011 2026-06-05 14:45:33.924