Check-Host.cc

Domain

lets.direct

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

Run a live full scan of lets.direct

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now
Hosting IPs
6
A/AAAA targets
Subdomains
11
CT + scan + body
Record Types
3
seen in DNS
Observed Certs
9
in our scans

DNS Records

A
104.21.69.181, 172.67.211.5
AAAA
2606:4700:3031::ac43:d305, 2606:4700:3032::ac43:d305, 2606:4700:3033::6815:45b5, 2606:4700:3036::6815:45b5
MX
NS
lucy.ns.cloudflare.com, paul.ns.cloudflare.com
TXT
CNAME
CAA

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

Subject: blue.lets.direct
Issuer: R13
SANs: blue.lets.direct

IPs Citing This Domain

No citing IPs found yet

As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

Origin IP Origin ASN CDN ASN Confidence Reasoning
159.65.130.6 AS14061 AS13335 95% cert 1a61a3a7… served by 159.65.130.6 (AS14061) carries SAN blue.lets.direct which currently resolves through Cloudflare (AS13335) at 172.67.211.5, 104.21.69.181, 2606:4700:3032::ac43:d305, 2606:4700:3036::6815:45b5

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.

Type Value First seen Last seen
A 104.21.69.181 2026-06-01 21:42:30.600 2026-06-21 08:25:40.679
AAAA 2606:4700:3036::6815:45b5 2026-06-01 21:42:30.600 2026-06-04 21:47:25.595
AAAA 2606:4700:3032::ac43:d305 2026-06-01 21:42:30.600 2026-06-04 21:47:25.595
A 172.67.211.5 2026-06-01 21:42:30.600 2026-06-21 08:25:40.679
NS paul.ns.cloudflare.com 2026-06-01 21:42:30.600 2026-06-21 08:25:40.679
NS lucy.ns.cloudflare.com 2026-06-01 21:42:30.600 2026-06-21 08:25:40.679
AAAA 2606:4700:3031::ac43:d305 2026-06-21 08:25:40.679 2026-06-21 08:25:40.679
AAAA 2606:4700:3033::6815:45b5 2026-06-21 08:25:40.679 2026-06-21 08:25:40.679