Check-Host.cc

Try 1.1.1.1 AS13335 check-host.cc /country/de /tld/cc
Domain

example.org

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

DNS Check HTTP Check Run Full Scan .org TLD

Run a live full scan of example.org

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now
Hosting IPs
—
A/AAAA targets
Subdomains
—
CT + scan + body
Record Types
—
seen in DNS
Observed Certs
—
in our scans

DNS Records

A
104.20.26.136, 172.66.157.237
AAAA
2606:4700:10::6814:1a88, 2606:4700:10::ac42:9ded
MX
—
NS
katelyn.ns.cloudflare.com, mitch.ns.cloudflare.com
TXT
_uyh0vgv5ukyofwj3ddwspnni01vmlyy, v=spf1 -all
CNAME
—
CAA
—

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.

Subdomain Resolves to Last seen
example.org
104.20.26.136 2606:4700:10::6814:1a88 2606:4700:10::ac42:9ded 172.66.157.237
2026-07-28 05:07:57.865
www.example.org
104.20.26.136 2606:4700:10::ac42:9ded 2606:4700:10::6814:1a88 172.66.157.237
2026-07-28 19:31:00.676
api.example.org
1970-01-01 00:00:00.000
cas.example.org
1970-01-01 00:00:00.000
catalog.example.org
1970-01-01 00:00:00.000
cipafilter.example.org
1970-01-01 00:00:00.000
cloud.example.org
1970-01-01 00:00:00.000
cts.example.org
1970-01-01 00:00:00.000
debian.example.org
1970-01-01 00:00:00.000
demo.archive.example.org
1970-01-01 00:00:00.000
diaspora.example.org
1970-01-01 00:00:00.000
dummycert.example.org
1970-01-01 00:00:00.000
ebsapp01.example.org
1970-01-01 00:00:00.000
ff-1c7d2277faf7.internal.example.org
1970-01-01 00:00:00.000
helpdesk.example.org
1970-01-01 00:00:00.000
idp.example.org
1970-01-01 00:00:00.000
integmet.example.org
1970-01-01 00:00:00.000
library.example.org
1970-01-01 00:00:00.000
mail.example.org
1970-01-01 00:00:00.000
my-cache.example.org
1970-01-01 00:00:00.000
obs600.example.org
1970-01-01 00:00:00.000
s3.demo.example.org
1970-01-01 00:00:00.000
sip.example.org
1970-01-01 00:00:00.000
smoke.example.org
1970-01-01 00:00:00.000
somesite.example.org
1970-01-01 00:00:00.000
tsw-770r-c4426880a1f4.example.org
1970-01-01 00:00:00.000
ubuntu-1004-lucid-32-minimal.example.org
1970-01-01 00:00:00.000
ubuntu-1004-lucid-64-minimal.example.org
1970-01-01 00:00:00.000
vpn.example.org
1970-01-01 00:00:00.000
your-domain.example.org
1970-01-01 00:00:00.000

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

103.239.168.4:443 ecc63eae5cca…
Subject: www.example.org
Issuer: www.example.org
SANs: www.example.org
219.93.110.93:443 e8a9b3e47ccf…
Subject: www.example.org
Issuer: www.example.org
SANs: www.example.org
217.73.237.20:443 ec5775b781ab…
Subject: www.example.org
Issuer: www.example.org
SANs: www.example.org
130.49.150.149:443 5150303291d8…
Subject: www.example.org
Issuer: www.example.org
SANs: www.example.org
114.179.10.195:443 e04c73c1fde4…
Subject: vpn.example.org
Issuer: vpn.example.org
SANs: vpn.example.org
176.9.162.228:443 99bef73ac7d4…
Subject: www.example.org
Issuer: www.example.org
SANs: www.example.org
45.81.85.206:443 5432d043f37e…
Subject: www.example.org
Issuer: www.example.org
SANs: www.example.org
188.155.155.89:443 deb8ffc918cf…
Subject: www.example.org
Issuer: www.example.org
SANs: www.example.org
51.91.122.151:443 f4ff8c257a75…
Subject: www.example.org
Issuer: www.example.org
SANs: www.example.org
38.9.56.22:443 4febda89970b…
Subject: example.org
Issuer: example.org
SANs: example.org
212.89.225.231:443 a232ff229662…
Subject: www.example.org
Issuer: www.example.org
SANs: www.example.org
194.224.6.189:443 690833711c30…
Subject: www.example.org
Issuer: www.example.org
SANs: www.example.org
202.158.96.172:443 91ecac1ce370…
Subject: www.example.org
Issuer: www.example.org
SANs: www.example.org
188.213.24.161:443 d0838476e1cf…
Subject: www.example.org
Issuer: www.example.org
SANs: www.example.org
120.46.147.46:443 37cc8260372a…
Subject: example.org
Issuer: example.org
SANs: *.example.org, example.org
188.34.75.138:443 fbb3bb4e9ec1…
Subject: www.example.org
Issuer: www.example.org
SANs: www.example.org
212.83.157.9:443 30059080724e…
Subject: www.example.org
Issuer: www.example.org
SANs: www.example.org
185.164.93.2:443 b6d321df2d98…
Subject: www.example.org
Issuer: www.example.org
SANs: www.example.org
93.232.61.87:443 0962b27980bd…
Subject: www.example.org
Issuer: www.example.org
SANs: www.example.org
185.164.93.5:443 b6d321df2d98…
Subject: www.example.org
Issuer: www.example.org
SANs: www.example.org
51.159.137.165:443 fd14856a33d5…
Subject: www.example.org
Issuer: www.example.org
SANs: www.example.org
51.222.184.182:443 4b613eb29042…
Subject: www.example.org
Issuer: www.example.org
SANs: www.example.org
152.53.173.198:443 5961a346a2b0…
Subject: www.example.org
Issuer: www.example.org
SANs: www.example.org
91.218.247.175:443 6944c1087683…
Subject: www.example.org
Issuer: www.example.org
SANs: www.example.org
78.47.102.176:443 559d6e4db988…
Subject: www.example.org
Issuer: www.example.org
SANs: www.example.org
153.142.64.71:443 cd907acbd62a…
Subject: vpn.example.org
Issuer: vpn.example.org
SANs: vpn.example.org
208.101.255.125:443 d23f205c0c6b…
Subject: www.example.org
Issuer: www.example.org
SANs: www.example.org
49.13.48.196:443 5954824af36b…
Subject: www.example.org
Issuer: www.example.org
SANs: www.example.org
5.196.168.203:443 2efc9e0c9179…
Subject: www.example.org
Issuer: www.example.org
SANs: www.example.org
88.18.26.36:443 cce2136d314f…
Subject: www.example.org
Issuer: www.example.org
SANs: www.example.org

IPs Citing This Domain

Hosts whose HTML body references this domain. Strong signal for origin/mirror/embed discovery.

20.24.202.150:80 href · ×28
84.35.18.157:443 href · ×16
47.106.91.34:80 href · ×14
146.190.70.120:443 href · ×10
220.134.41.73:443 href · ×10
146.190.70.120:80 href · ×10
34.216.32.183:80 href · ×9
119.245.206.69:443 href · ×8
207.154.255.60:443 href · ×8
80.211.149.231:443 href · ×8
51.210.182.168:80 href · ×6
82.25.58.92:80 href · ×5
51.210.100.245:443 href · ×5
34.89.3.241:80 href · ×5
95.111.232.176:443 href · ×5
14.103.224.46:443 href · ×4
157.230.12.248:80 href · ×4
129.153.59.119:443 href · ×4
198.57.155.52:443 href · ×4
207.244.230.19:443 href · ×4
88.99.170.74:443 href · ×4
42.194.146.23:80 href · ×4
152.44.180.7:443 href · ×3
140.83.61.58:80 href · ×3
38.59.249.236:443 href · ×3
192.227.172.145:443 href · ×3
172.233.36.122:80 href · ×3
79.98.30.14:443 href · ×3
8.153.75.218:80 href · ×3
147.182.246.145:443 href · ×3
116.203.36.151:443 href · ×3
74.115.189.55:443 href · ×3
13.215.4.177:443 href · ×3
89.147.108.206:443 href · ×3
3.134.231.87:443 href · ×3
144.202.23.199:80 href · ×3
18.222.134.138:443 href · ×3
72.11.150.131:443 href · ×3
34.120.101.101:443 href · ×2
104.168.34.77:443 href · ×2
49.12.43.215:443 href · ×2
178.154.230.42:80 href · ×2
193.108.113.113:443 href · ×2
64.225.29.6:443 href · ×2
45.76.7.96:443 href · ×2
70.34.220.73:80 href · ×2
54.209.145.73:443 href · ×2
38.76.150.144:80 href · ×2
45.91.53.203:443 href · ×2
94.130.134.23:8088 href · ×2

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

Origin IP Origin ASN CDN ASN Confidence Reasoning
64.58.40.69 AS1403 AS13335 95% cert 6fb02efc… served by 64.58.40.69 (AS1403) carries SAN www.example.org which currently resolves through Cloudflare (AS13335) at 104.20.26.136, 172.66.157.237, 2606:4700:10::ac42:9ded, 2606:4700:10::6814:1a88
78.46.49.164 AS24940 AS13335 95% cert 27ddb37b… served by 78.46.49.164 (AS24940) carries SAN www.example.org which currently resolves through Cloudflare (AS13335) at 104.20.26.136, 172.66.157.237, 2606:4700:10::ac42:9ded, 2606:4700:10::6814:1a88
178.237.106.34 AS15401 AS13335 95% cert e55147d2… served by 178.237.106.34 (AS15401) carries SAN www.example.org which currently resolves through Cloudflare (AS13335) at 104.20.26.136, 172.66.157.237, 2606:4700:10::ac42:9ded, 2606:4700:10::6814:1a88
51.83.25.185 AS16276 AS13335 95% cert b24a3460… served by 51.83.25.185 (AS16276) carries SAN www.example.org which currently resolves through Cloudflare (AS13335) at 104.20.26.136, 172.66.157.237, 2606:4700:10::ac42:9ded, 2606:4700:10::6814:1a88
5.230.169.233 AS12586 AS13335 95% cert d41aa3c9… served by 5.230.169.233 (AS12586) carries SAN www.example.org which currently resolves through Cloudflare (AS13335) at 104.20.26.136, 172.66.157.237, 2606:4700:10::ac42:9ded, 2606:4700:10::6814:1a88
185.181.229.123 AS60602 AS13335 95% cert 9b1ca0b9… served by 185.181.229.123 (AS60602) carries SAN www.example.org which currently resolves through Cloudflare (AS13335) at 104.20.26.136, 172.66.157.237, 2606:4700:10::ac42:9ded, 2606:4700:10::6814:1a88
178.255.129.97 AS29605 AS13335 95% cert b50b3777… served by 178.255.129.97 (AS29605) carries SAN www.example.org which currently resolves through Cloudflare (AS13335) at 104.20.26.136, 172.66.157.237, 2606:4700:10::ac42:9ded, 2606:4700:10::6814:1a88
121.134.143.13 AS4766 AS13335 95% cert b3da6f97… served by 121.134.143.13 (AS4766) carries SAN www.example.org which currently resolves through Cloudflare (AS13335) at 104.20.26.136, 172.66.157.237, 2606:4700:10::ac42:9ded, 2606:4700:10::6814:1a88
82.159.167.209 AS6739 AS13335 95% cert 400d26d7… served by 82.159.167.209 (AS6739) carries SAN www.example.org which currently resolves through Cloudflare (AS13335) at 104.20.26.136, 172.66.157.237, 2606:4700:10::ac42:9ded, 2606:4700:10::6814:1a88
34.50.80.188 AS396982 AS13335 95% cert 5cee4371… served by 34.50.80.188 (AS396982) carries SAN www.example.org which currently resolves through Cloudflare (AS13335) at 104.20.26.136, 172.66.157.237, 2606:4700:10::ac42:9ded, 2606:4700:10::6814:1a88
91.51.166.37 AS3320 AS13335 95% cert 377be650… served by 91.51.166.37 (AS3320) carries SAN www.example.org which currently resolves through Cloudflare (AS13335) at 104.20.26.136, 172.66.157.237, 2606:4700:10::ac42:9ded, 2606:4700:10::6814:1a88
203.171.18.171 AS45903 AS13335 95% cert 0ee56680… served by 203.171.18.171 (AS45903) carries SAN www.example.org which currently resolves through Cloudflare (AS13335) at 104.20.26.136, 172.66.157.237, 2606:4700:10::ac42:9ded, 2606:4700:10::6814:1a88
167.86.114.253 AS51167 AS13335 95% cert 8f5b8a55… served by 167.86.114.253 (AS51167) carries SAN www.example.org which currently resolves through Cloudflare (AS13335) at 104.20.26.136, 172.66.157.237, 2606:4700:10::ac42:9ded, 2606:4700:10::6814:1a88
38.9.56.29 AS16581 AS13335 95% cert 4febda89… served by 38.9.56.29 (AS16581) carries SAN example.org which currently resolves through Cloudflare (AS13335) at 104.20.26.136, 172.66.157.237, 2606:4700:10::ac42:9ded, 2606:4700:10::6814:1a88
38.9.56.1 AS16581 AS13335 95% cert 4febda89… served by 38.9.56.1 (AS16581) carries SAN example.org which currently resolves through Cloudflare (AS13335) at 104.20.26.136, 172.66.157.237, 2606:4700:10::ac42:9ded, 2606:4700:10::6814:1a88
118.70.182.107 AS18403 AS13335 95% cert dca170fd… served by 118.70.182.107 (AS18403) carries SAN www.example.org which currently resolves through Cloudflare (AS13335) at 104.20.26.136, 172.66.157.237, 2606:4700:10::ac42:9ded, 2606:4700:10::6814:1a88
38.101.151.98 AS16581 AS13335 95% cert 4febda89… served by 38.101.151.98 (AS16581) carries SAN example.org which currently resolves through Cloudflare (AS13335) at 104.20.26.136, 172.66.157.237, 2606:4700:10::ac42:9ded, 2606:4700:10::6814:1a88
204.168.254.173 AS24940 AS13335 95% cert 2f9ed9d3… served by 204.168.254.173 (AS24940) carries SAN www.example.org which currently resolves through Cloudflare (AS13335) at 104.20.26.136, 172.66.157.237, 2606:4700:10::ac42:9ded, 2606:4700:10::6814:1a88
5.29.108.35 AS12849 AS13335 95% cert 7bf3a236… served by 5.29.108.35 (AS12849) carries SAN www.example.org which currently resolves through Cloudflare (AS13335) at 104.20.26.136, 172.66.157.237, 2606:4700:10::ac42:9ded, 2606:4700:10::6814:1a88
162.35.175.135 AS19318 AS13335 95% cert 4f597c94… served by 162.35.175.135 (AS19318) carries SAN www.example.org which currently resolves through Cloudflare (AS13335) at 104.20.26.136, 172.66.157.237, 2606:4700:10::ac42:9ded, 2606:4700:10::6814:1a88
49.13.248.72 AS24940 AS13335 95% cert 3198b3ad… served by 49.13.248.72 (AS24940) carries SAN www.example.org which currently resolves through Cloudflare (AS13335) at 104.20.26.136, 172.66.157.237, 2606:4700:10::ac42:9ded, 2606:4700:10::6814:1a88
90.127.107.244 AS3215 AS13335 95% cert 318befed… served by 90.127.107.244 (AS3215) carries SAN www.example.org which currently resolves through Cloudflare (AS13335) at 104.20.26.136, 172.66.157.237, 2606:4700:10::ac42:9ded, 2606:4700:10::6814:1a88
192.99.0.31 AS16276 AS13335 95% cert a4735d9c… served by 192.99.0.31 (AS16276) carries SAN www.example.org which currently resolves through Cloudflare (AS13335) at 104.20.26.136, 172.66.157.237, 2606:4700:10::ac42:9ded, 2606:4700:10::6814:1a88
62.28.24.222 AS15525 AS13335 95% cert 6ec7d62a… served by 62.28.24.222 (AS15525) carries SAN www.example.org which currently resolves through Cloudflare (AS13335) at 104.20.26.136, 172.66.157.237, 2606:4700:10::ac42:9ded, 2606:4700:10::6814:1a88
144.2.105.254 AS3303 AS13335 95% cert 73a7c064… served by 144.2.105.254 (AS3303) carries SAN www.example.org which currently resolves through Cloudflare (AS13335) at 104.20.26.136, 172.66.157.237, 2606:4700:10::ac42:9ded, 2606:4700:10::6814:1a88

CT-Log Evidence

Certificates from public Certificate Transparency logs whose subject or SAN names this domain — including historic certs we never observed live.

8affadae5b2cc6e3… google · argon2026h2
Subject: example.com
Issuer: Sectigo Public Server Authentication CA OV R36
SANs: example.com, example.edu, example.net, example.org, www.example.com, www.example.edu, www.example.net, www.example.org
Valid: 2025-12-02 00:00:00 → 2026-12-02 23:59:59
a42a79d123e9de1d… cloudflare · nimbus2026
Subject: example.com
Issuer: Sectigo Public Server Authentication CA OV R36
SANs: example.com, example.edu, example.net, example.org, www.example.com, www.example.edu, www.example.net, www.example.org
Valid: 2025-12-02 00:00:00 → 2026-12-02 23:59:59
a42a79d123e9de1d… google · xenon2026h2
Subject: example.com
Issuer: Sectigo Public Server Authentication CA OV R36
SANs: example.com, example.edu, example.net, example.org, www.example.com, www.example.edu, www.example.net, www.example.org
Valid: 2025-12-02 00:00:00 → 2026-12-02 23:59:59
04d54ae0d1b89c04… google · argon2026h2
Subject: example.com
Issuer: Sectigo Public Server Authentication CA OV R36
SANs: example.com, example.edu, example.net, example.org, www.example.com, www.example.edu, www.example.net, www.example.org
Valid: 2025-11-21 00:00:00 → 2026-11-21 23:59:59
d909797016952e2e… google · argon2026h2
Subject: example.com
Issuer: Sectigo Public Server Authentication CA OV R36
SANs: example.com, example.edu, example.net, example.org, www.example.com, www.example.edu, www.example.net, www.example.org
Valid: 2025-11-21 00:00:00 → 2026-11-21 23:59:59
4973b48cf244e498… google · argon2026h2
Subject: example.com
Issuer: Sectigo Public Server Authentication CA OV R36
SANs: example.com, example.edu, example.net, example.org
Valid: 2025-11-20 00:00:00 → 2026-11-20 23:59:59
5c83f01af4edf385… google · argon2026h2
Subject: example.com
Issuer: Sectigo Public Server Authentication CA OV R36
SANs: example.com, example.edu, example.net, example.org
Valid: 2025-11-20 00:00:00 → 2026-11-20 23:59:59

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Domain timeline pending

Passive-DNS history accumulates as our forward-DNS crawler observes A/AAAA/MX/NS/TXT records over time.