Check-Host.cc

Try 1.1.1.1 AS13335 check-host.cc /country/de /tld/cc
Domain

ghost.org

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

DNS Check HTTP Check Run Full Scan .org TLD

Run a live full scan of ghost.org

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now
Hosting IPs
60
A/AAAA targets
Subdomains
68
CT + scan + body
Record Types
5
seen in DNS
Observed Certs
26
in our scans

DNS Records

A
13.52.188.95, 18.208.88.157, 35.157.26.135, 52.52.192.191, 63.176.8.218, 98.84.224.111
AAAA
2600:1f18:16e:df01::258, 2600:1f18:16e:df01::259, 2a05:d014:58f:6200::258, 2a05:d014:58f:6200::259
MX
1 aspmx.l.google.com, 10 aspmx2.googlemail.com, 10 aspmx3.googlemail.com, 5 alt1.aspmx.l.google.com, 5 alt2.aspmx.l.google.com
NS
sara.ns.cloudflare.com, woz.ns.cloudflare.com
TXT
1password-site-verification=5346HQKPM5HZBGBGWUZ5ZKFUOI, adn_verification=ghost, ahrefs-site-verification_d51316db926b7f8ab3f81f2080d57be72c9d635e9a8888dcbefcb4d6d7c7c5b0, apple-domain-verification=jiNntnl7jd5HxJ2W, cloudflare_dashboard_sso=01514b4f7cf8ccfb2c6731aba449193c, cursor-domain-verification-zhnept=Si0arsYVCTEZDCkpV1cMy0Aom, google-site-verification=5Ate8bq8VfHBYziHQlc1d2tkv_SFwQJseqXkX6hg2D4, google-site-verification=CZRMn6O1gf0kzHSuR90yLccVJCc7oTAMWISpNKt9zEg
CNAME
—
CAA
—

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.

Subdomain Resolves to Last seen
static.ghost.org
188.114.97.0 2a06:98c1:3120::3 2a06:98c1:3121::3 2a06:98c1:3120:: +19
2026-07-28 18:36:19.852
ghost.org
35.157.26.135 2a05:d014:58f:6200::259 2a05:d014:58f:6200::258 2600:1f18:16e:df01::259 +6
2026-07-28 20:23:38.809
docs.ghost.org
172.66.3.9 2606:4700::6812:3cc 2606:4700::6812:2cc 104.18.2.204 +4
2026-07-22 10:49:50.253
account.ghost.org
63.176.8.218 35.157.26.135 2a05:d014:58f:6200::258 2a05:d014:58f:6200::259
2026-07-22 10:49:50.253
activate.ghost.org
172.67.172.160 104.21.55.196 2606:4700:3031::ac43:aca0 2606:4700:3033::6815:37c4
2026-06-24 00:12:22.073
domain.ghost.org
188.114.96.0 188.114.97.0 2a06:98c1:3120::3 2a06:98c1:3121::3
2026-06-21 22:54:08.584
update.ghost.org
172.67.193.160 104.21.33.234 2606:4700:3034::6815:21ea 2606:4700:3032::ac43:c1a0
2026-07-21 19:00:58.837
www.ghost.org
63.176.8.218 2a05:d014:58f:6200::258 2a05:d014:58f:6200::259 35.157.26.135
2026-07-18 03:31:05.374
careers.ghost.org
52.49.32.70 52.212.152.92 34.241.252.223
2026-07-22 10:49:50.253
explore.ghost.org
172.67.70.40 104.26.12.133 104.26.13.133
2026-07-22 10:49:50.253
gscan.ghost.org
172.67.70.40 104.26.13.133 104.26.12.133
2026-07-23 08:39:46.689
help.ghost.org
172.67.70.40 104.26.13.133 104.26.12.133
2026-06-22 20:20:48.991
status.ghost.org
104.26.12.133 104.26.13.133 172.67.70.40
2026-07-22 10:49:50.253
forum.ghost.org
184.105.99.43 2602:fd3f:3:ff01::2b
2026-07-22 10:49:50.253
ap.ghost.org
34.49.225.86
2026-06-15 10:16:40.749
ask.ghost.org
35.205.106.218
2026-06-23 14:03:15.723
billing.ghost.org
1970-01-01 00:00:00.000
build-bot-slack.ghost.org
1970-01-01 00:00:00.000
casper.ghost.org
1970-01-01 00:00:00.000
dev.ghost.org
1970-01-01 00:00:00.000
dub.ghost.org
1970-01-01 00:00:00.000
gatsby.ghost.org
1970-01-01 00:00:00.000
koenig.ghost.org
1970-01-01 00:00:00.000
logs.ghost.org
143.198.249.189
2026-06-15 21:36:21.002
mastodon.ghost.org
1970-01-01 00:00:00.000
offline.ghost.org
1970-01-01 00:00:00.000
probot.ghost.org
1970-01-01 00:00:00.000
scripts.ghost.org
1970-01-01 00:00:00.000
shop.ghost.org
1970-01-01 00:00:00.000
traffic-analytics.ghost.org
1970-01-01 00:00:00.000

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

166.88.225.124:8443 2dc65edafa03…
Subject: cdn.localghost.org
Issuer: YE2
SANs: cdn.localghost.org
134.122.60.5:443 5ca2d4f61b3c…
Subject: ghost.org
Issuer: YR1
SANs: *.ghost.org, ghost.org
63.249.81.138:443 f45762b81aca…
Subject: mylifeasaghost.org
Issuer: YR1
SANs: mail.mylifeasaghost.org, mylifeasaghost.org, webmail.mylifeasaghost.org, www.mylifeasaghost.org
150.136.85.245:443 2ea0d2f8492b…
Subject: machine.localghost.org
Issuer: E8
SANs: machine.localghost.org
199.19.224.110:443 fde3995b1e89…
Subject: web.laghost.org
Issuer: E7
SANs: web.laghost.org
34.85.199.232:443 0ef14c73c2e3…
Subject: liampward.localghost.org
Issuer: E7
SANs: liampward.localghost.org
83.136.255.218:443 533b3fe35ac5…
Subject: bitcoinghost.org
Issuer: E8
SANs: bitcoinghost.org, www.bitcoinghost.org
116.203.224.100:443 82ee7641ee7d…
Subject: frakk.localghost.org
Issuer: E8
SANs: frakk.localghost.org
142.132.195.36:443 78fcd1333a02…
Subject: *.pghost.org
Issuer: E7
SANs: *.pghost.org, pghost.org

IPs Citing This Domain

Hosts whose HTML body references this domain. Strong signal for origin/mirror/embed discovery.

31.77.157.109:443 href · ×12
13.66.50.137:443 href · ×6
165.232.152.138:443 href · ×6
178.128.103.249:443 href · ×6
18.140.221.93:443 href · ×6
206.189.25.72:443 href · ×4
147.182.250.140:443 href · ×4
52.51.101.149:443 href · ×4
137.184.92.100:443 href · ×4
3.93.9.100:443 href · ×3
15.206.70.167:443 href · ×3
159.89.148.61:80 href · ×3
167.99.160.154:443 href · ×3
68.183.3.192:443 href · ×3
167.172.184.205:443 href · ×3
168.119.114.85:443 href · ×3
162.243.52.65:80 href · ×3
8.129.107.164:443 href · ×3
167.172.29.121:443 href · ×3
63.142.240.162:443 href · ×3
81.0.218.62:443 href · ×3
129.146.247.217:443 href · ×3
188.166.215.62:443 href · ×3
8.215.59.238:8443 href · ×3
159.89.149.212:443 href · ×3
132.145.92.130:8443 href · ×3
84.234.21.28:443 href · ×3
178.79.166.28:993 href · ×3
161.35.15.188:443 href · ×3
164.90.228.61:443 href · ×3
194.164.92.43:443 href · ×3
138.68.70.210:443 href · ×3
40.67.210.133:443 href · ×3
134.122.75.188:443 href · ×3
8.135.57.45:443 href · ×3
138.197.176.153:443 href · ×3
8.220.74.176:995 href · ×3
69.48.179.186:443 href · ×3
188.34.182.48:443 href · ×3
143.110.156.112:443 href · ×3
170.187.206.230:443 href · ×3
108.160.142.97:443 href · ×3
165.245.189.111:443 href · ×2
8.130.37.235:8443 href · ×2
123.56.171.81:995 href · ×2
52.201.57.154:443 href · ×2
104.238.170.26:443 href · ×2
188.120.247.200:443 href · ×2
128.199.239.207:443 href · ×2
134.209.116.13:80 href · ×2

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

No origin-IP leaks detected (yet)

Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.

Type Value First seen Last seen
A 35.157.26.135 2026-05-25 21:54:50.392 2026-07-28 20:23:38.809
AAAA 2a05:d014:58f:6200::258 2026-05-25 21:54:50.392 2026-07-28 20:23:38.809
AAAA 2a05:d014:58f:6200::259 2026-05-25 21:54:50.392 2026-07-28 20:23:38.809
A 63.176.8.218 2026-05-25 21:54:50.392 2026-07-28 20:23:38.809
TXT ahrefs-site-verification_d51316db926b7f8ab3f81f2080d57be72c9d635e9a8888dcbefcb4d6d7c7c5b0 2026-05-25 22:05:29.416 2026-07-28 20:23:38.809
TXT status-page-domain-verification=vvyvvt0yn5z4 2026-05-25 22:05:29.416 2026-07-28 20:23:38.809
TXT google-site-verification=CZRMn6O1gf0kzHSuR90yLccVJCc7oTAMWISpNKt9zEg 2026-05-25 22:05:29.416 2026-07-28 20:23:38.809
MX 10 aspmx3.googlemail.com 2026-05-25 22:05:29.416 2026-07-28 20:23:38.809
TXT adn_verification=ghost 2026-05-25 22:05:29.416 2026-07-28 20:23:38.809
TXT cursor-domain-verification-zhnept=Si0arsYVCTEZDCkpV1cMy0Aom 2026-05-25 22:05:29.416 2026-07-28 20:23:38.809
TXT google-site-verification=5Ate8bq8VfHBYziHQlc1d2tkv_SFwQJseqXkX6hg2D4 2026-05-25 22:05:29.416 2026-07-28 20:23:38.809
NS sara.ns.cloudflare.com 2026-05-25 22:05:29.416 2026-07-28 20:23:38.809
TXT v=spf1 include:_spf.google.com include:cmail1.com include:spf.mandrillapp.com include:helpscoutemail.com -all 2026-05-25 22:05:29.416 2026-07-28 20:23:38.809
NS woz.ns.cloudflare.com 2026-05-25 22:05:29.416 2026-07-28 20:23:38.809
TXT 1password-site-verification=5346HQKPM5HZBGBGWUZ5ZKFUOI 2026-05-25 22:05:29.416 2026-07-28 20:23:38.809
TXT apple-domain-verification=jiNntnl7jd5HxJ2W 2026-05-25 22:05:29.416 2026-07-28 20:23:38.809
TXT google-site-verification=GIBr_OFEplZnFkkvpsy8qck5wbC3EKnCjpsjcbn72SA 2026-05-25 22:05:29.416 2026-07-28 20:23:38.809
MX 10 aspmx2.googlemail.com 2026-05-25 22:05:29.416 2026-07-28 20:23:38.809
MX 5 alt2.aspmx.l.google.com 2026-05-25 22:05:29.416 2026-07-28 20:23:38.809
MX 1 aspmx.l.google.com 2026-05-25 22:05:29.416 2026-07-28 20:23:38.809
TXT cloudflare_dashboard_sso=01514b4f7cf8ccfb2c6731aba449193c 2026-05-25 22:05:29.416 2026-07-28 20:23:38.809
MX 5 alt1.aspmx.l.google.com 2026-05-25 22:05:29.416 2026-07-28 20:23:38.809
AAAA 2600:1f18:16e:df01::258 2026-05-26 00:12:34.719 2026-07-28 17:05:15.597
AAAA 2600:1f18:16e:df01::259 2026-05-26 00:12:34.719 2026-07-28 17:05:15.597
A 18.208.88.157 2026-05-26 09:37:52.197 2026-07-28 18:18:26.354
A 98.84.224.111 2026-05-26 09:37:52.197 2026-07-28 18:18:26.354
A 13.52.188.95 2026-06-16 16:42:02.455 2026-06-17 01:04:44.723
A 52.52.192.191 2026-06-16 16:42:02.455 2026-06-17 01:04:44.723