Check-Host.cc

Domain

dev.cd

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

Run a live full scan of dev.cd

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now
Hosting IPs
A/AAAA targets
Subdomains
CT + scan + body
Record Types
seen in DNS
Observed Certs
in our scans

DNS Records

A
5.135.41.16
AAAA
MX
0 dev.cd
NS
ns101.h-43.com, ns201.h-43.com, ns301.h-43.com
TXT
v=spf1 ip4:5.135.41.16 ip4:95.217.84.28 +a +mx +ip4:188.40.167.110 ~all
CNAME
CAA

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Subdomain enumeration pending

Every subdomain ever issued a TLS cert under this apex — extracted from Certificate Transparency logs, our own scan observations and body references.

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

Subject: dev.cdovgltu.ru
Issuer: YR1
SANs: dev.cdovgltu.ru, mta-sts.dev.cdovgltu.ru, www.dev.cdovgltu.ru
Subject: bg-dev.cdorde.com
Issuer: YR2
SANs: bg-dev.cdorde.com
Subject: dev.cdcms.oa.pkucarenjk.com
Issuer: YE2
SANs: dev.cdcms.oa.pkucarenjk.com
Subject: live-gcp-us-east1.dev.cdngcp.endeavorstreaming.net
Issuer: WR3
SANs: live-gcp-us-east1.dev.cdngcp.endeavorstreaming.net
Subject: *.dev.cdot.airtight.ea.com
Issuer: YR1
SANs: *.dev.cdot.airtight.ea.com
Subject: *.dev.cdlcloud.co.uk
Issuer: Amazon RSA 2048 M04
SANs: *.dev.cdlcloud.co.uk
Subject: dev.cdn.lydia-app.com
Issuer: WR3
SANs: dev.cdn.lydia-app.com
Subject: vision-admin-dev.cdwbuilt.com
Issuer: WR3
SANs: vision-admin-dev.cdwbuilt.com
Subject: dev.cdn.rezona.ai
Issuer: WR3
SANs: dev.cdn.rezona.ai
Subject: crucibletest123.dev.cdev.ciridae.app
Issuer: WR3
SANs: crucibletest123.dev.cdev.ciridae.app
Subject: *.dev.cde.yc.life-pay.tech
Issuer: YR2
SANs: *.dev.cde.yc.life-pay.tech
Subject: dev.cddb01ap.pnop.tsc-tc.com
Issuer: GlobalSign RSA OV SSL CA 2018
SANs: dev.cddb01ap.pnop.tsc-tc.com
Subject: graph.dev.cde.mednition.com
Issuer: WR3
SANs: graph.dev.cde.mednition.com
Subject: csdev.cdoym.cn
Issuer: R11
SANs: csdev.cdoym.cn
Subject: *.dev.cdlcloud.co.uk
Issuer: Amazon RSA 2048 M01
SANs: *.dev.cdlcloud.co.uk
Subject: cismbldev.cdedirect.co.jp
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: cismbldev.cdedirect.co.jp
Subject: dev.cdtecif.cl
Issuer: YE2
SANs: dev.cdtecif.cl
Subject: brass-image-dev.cdn.ukg.dev
Issuer: WR3
SANs: brass-image-dev.cdn.ukg.dev
Subject: dev.cdn.mediaservice.cision.com
Issuer: WR3
SANs: dev.cdn.mediaservice.cision.com
Subject: amx01-umia-cd3ncy.005.dev.cd3ncy.spscld.net
Issuer: YE2
SANs: amx01-umia-cd3ncy.005.dev.cd3ncy.spscld.net, doh.005.dev.cd3ncy.spscld.net, pxy.005.dev.cd3ncy.spscld.net
Subject: vision-dev.cdwbuilt.com
Issuer: WR3
SANs: vision-dev.cdwbuilt.com
Subject: dev.cdatintworks.com
Issuer: YR2
SANs: dev.cdatintworks.com
Subject: vod-gcp-europe-west2.dev.cdngcp.endeavorstreaming.net
Issuer: WR3
SANs: vod-gcp-europe-west2.dev.cdngcp.endeavorstreaming.net
Subject: *.dev.cde.yc.life-pay.tech
Issuer: YR2
SANs: *.dev.cde.yc.life-pay.tech
Subject: dev.cdn.kidology.app
Issuer: E7
SANs: dev.cdn.kidology.app
Subject: *.dev.cda-pubblico.it
Issuer: WR3
SANs: *.dev.cda-pubblico.it
Subject: ml-services-dev.cdata.christies.tech
Issuer: R12
SANs: ml-services-dev.cdata.christies.tech
Subject: dev.cd.fastiep.com
Issuer: Amazon RSA 2048 M01
SANs: *.dev.cd.fastiep.com, dev.cd.fastiep.com
Subject: dev.cdn.iolo.com
Issuer: E7
SANs: dev.cdn.iolo.com
Subject: dev.cd.beachbodyondemand.com
Issuer: Amazon RSA 2048 M01
SANs: *.dev.cd.beachbodyondemand.com, dev.cd.beachbodyondemand.com

IPs Citing This Domain

No citing IPs found yet

As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

No origin-IP leaks detected (yet)

Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.

Type Value First seen Last seen
NS ns201.h-43.com 2026-06-04 05:17:54.448 2026-06-04 05:20:38.075
A 5.135.41.16 2026-06-04 05:17:54.448 2026-06-04 05:20:38.075
TXT v=spf1 ip4:5.135.41.16 ip4:95.217.84.28 +a +mx +ip4:188.40.167.110 ~all 2026-06-04 05:17:54.448 2026-06-04 05:20:38.075
MX 0 dev.cd 2026-06-04 05:17:54.448 2026-06-04 05:20:38.075
NS ns301.h-43.com 2026-06-04 05:17:54.448 2026-06-04 05:20:38.075
NS ns101.h-43.com 2026-06-04 05:17:54.448 2026-06-04 05:20:38.075