Check-Host.cc

Domain

auth.elsevier.com

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

Run a live full scan of auth.elsevier.com

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now
Hosting IPs
18
A/AAAA targets
Subdomains
CT + scan + body
Record Types
1
seen in DNS
Observed Certs
1
in our scans

DNS Records

A
100.50.63.132, 18.205.164.115, 18.213.81.31, 3.209.5.127, 3.218.121.42, 3.92.67.182, 32.195.228.253, 34.192.88.221
AAAA
MX
NS
TXT
CNAME
CAA

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Subdomain enumeration pending

Every subdomain ever issued a TLS cert under this apex — extracted from Certificate Transparency logs, our own scan observations and body references.

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

Subject: auth.elsevier.com
Issuer: GlobalSign RSA OV SSL CA 2018
SANs: auth.elsevier.com, sdauth.sciencedirect.com, shibauth.elsevier-ae.com

IPs Citing This Domain

Hosts whose HTML body references this domain. Strong signal for origin/mirror/embed discovery.

117.203.169.27:443 href · ×6
117.203.246.80:80 href · ×4
202.194.20.101:80 href · ×3
115.243.103.13:443 href · ×2
203.129.241.89:80 href · ×2
182.75.45.28:80 href · ×2
103.151.208.17:443 href · ×2
103.23.29.136:80 href · ×1
14.139.235.13:80 href · ×1
47.247.180.94:80 href · ×1
1.6.83.2:443 href · ×1
59.89.50.213:443 href · ×1
203.129.241.89:443 href · ×1
117.240.195.188:80 href · ×1

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

No origin-IP leaks detected (yet)

Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.

CT-Log Evidence

Certificates from public Certificate Transparency logs whose subject or SAN names this domain — including historic certs we never observed live.

33bf221c36056f98… google · argon2026h2
Subject: auth.elsevier.com
Issuer: GlobalSign RSA OV SSL CA 2018
SANs: auth.elsevier.com, sdauth.sciencedirect.com, shibauth.elsevier-ae.com
Valid: 2025-08-21 08:21:13 → 2026-09-22 08:21:12

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.

Type Value First seen Last seen
A 52.205.158.117 2026-05-26 05:26:40.228 2026-05-26 09:01:56.589
A 3.209.5.127 2026-05-26 05:26:40.228 2026-05-31 06:55:40.744
A 100.50.63.132 2026-05-26 05:26:40.228 2026-05-27 09:29:35.890
A 18.205.164.115 2026-05-26 12:01:30.636 2026-05-31 06:55:40.744
A 18.213.81.31 2026-05-31 06:55:40.744 2026-05-31 06:55:40.744
A 34.192.88.221 2026-06-02 23:54:12.911 2026-06-03 00:51:09.705
A 52.205.229.62 2026-06-02 23:54:12.911 2026-06-03 00:51:09.705
A 32.195.228.253 2026-06-02 23:54:12.911 2026-06-03 00:51:09.705
A 3.218.121.42 2026-06-15 00:07:36.295 2026-06-22 09:20:14.839
A 3.92.67.182 2026-06-15 00:07:36.295 2026-06-22 09:20:14.839
A 44.206.215.8 2026-06-15 00:07:36.295 2026-06-15 00:07:36.295
A 52.1.93.7 2026-06-18 08:45:56.740 2026-06-22 09:20:14.839
A 34.200.132.225 2026-07-17 12:02:00.449 2026-07-20 01:05:09.354
A 54.83.24.17 2026-07-17 12:02:00.449 2026-07-26 20:58:33.396
A 54.146.209.156 2026-07-17 12:02:00.449 2026-07-23 01:31:58.513
A 54.83.229.165 2026-07-23 01:31:58.513 2026-07-31 12:13:50.878
A 34.199.196.187 2026-07-25 15:54:13.571 2026-07-31 12:13:50.878
A 34.199.152.193 2026-07-28 11:36:15.163 2026-07-31 12:13:50.878