Check-Host.cc

Domain

checkappexec.microsoft.com

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

Run a live full scan of checkappexec.microsoft.com

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now
Hosting IPs
A/AAAA targets
Subdomains
CT + scan + body
Record Types
seen in DNS
Observed Certs
in our scans

DNS Records

A
108.141.15.7, 108.141.37.120, 172.205.25.163, 172.205.80.42, 172.211.159.152, 20.191.45.158, 20.56.187.20, 20.82.9.214
AAAA
MX
NS
TXT
CNAME
CAA

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Subdomain enumeration pending

Every subdomain ever issued a TLS cert under this apex — extracted from Certificate Transparency logs, our own scan observations and body references.

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

Certificate observations pending

TLS certs naming this domain in subject or SANs will appear here as our scan-layer catches them.

IPs Citing This Domain

No citing IPs found yet

As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

No origin-IP leaks detected (yet)

Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.

Type Value First seen Last seen
A 172.211.159.152 2026-05-25 22:02:50.525 2026-07-23 03:57:18.268
A 108.141.37.120 2026-05-25 22:05:29.416 2026-07-26 23:44:58.719
A 48.209.164.47 2026-05-25 22:13:29.500 2026-05-27 08:23:01.825
A 48.209.162.134 2026-05-26 04:02:49.330 2026-06-22 16:06:16.451
A 98.64.238.3 2026-05-26 05:13:56.978 2026-07-25 15:14:04.371
A 108.141.15.7 2026-05-26 05:22:44.503 2026-06-19 13:51:59.137
A 48.209.180.244 2026-05-26 05:26:40.228 2026-06-23 17:35:56.729
A 20.82.9.214 2026-05-26 06:14:31.784 2026-06-19 01:45:08.038
A 20.191.45.158 2026-05-26 16:22:23.746 2026-07-18 10:40:31.963
A 172.205.25.163 2026-05-26 16:26:29.491 2026-07-18 18:54:45.097
A 4.175.223.124 2026-05-26 18:05:04.141 2026-07-28 03:06:50.623
A 172.205.80.42 2026-05-26 19:25:14.178 2026-07-22 06:16:07.817
A 4.209.164.61 2026-05-26 20:32:34.302 2026-05-27 08:36:38.549
A 4.231.66.184 2026-05-27 09:24:40.778 2026-06-19 18:05:33.048
A 20.93.72.182 2026-05-27 13:47:17.296 2026-07-28 09:07:06.723
A 51.137.3.145 2026-06-14 23:37:38.836 2026-07-27 03:49:39.738
A 4.231.68.226 2026-06-15 08:07:07.313 2026-06-15 08:07:07.313
A 20.56.187.20 2026-06-18 14:29:41.168 2026-07-26 23:37:43.599
A 48.209.144.71 2026-06-23 18:03:24.681 2026-06-23 18:03:24.681