Check-Host.cc

Domain

26.lt

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

Run a live full scan of 26.lt

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now
Hosting IPs
44
A/AAAA targets
Subdomains
3
CT + scan + body
Record Types
3
seen in DNS
Observed Certs
6
in our scans

DNS Records

A
108.138.7.117, 108.138.7.35, 108.138.7.39, 108.138.7.59, 143.204.55.105, 143.204.55.24, 143.204.55.3, 143.204.55.87
AAAA
2600:9000:2315:5200:17:3777:8380:93a1, 2600:9000:2315:6600:17:3777:8380:93a1, 2600:9000:2315:9400:17:3777:8380:93a1, 2600:9000:2315:a00:17:3777:8380:93a1, 2600:9000:2315:a400:17:3777:8380:93a1, 2600:9000:2315:b000:17:3777:8380:93a1, 2600:9000:2315:cc00:17:3777:8380:93a1, 2600:9000:2315:e600:17:3777:8380:93a1
MX
NS
ns-1313.awsdns-36.org, ns-1912.awsdns-47.co.uk, ns-211.awsdns-26.com, ns-941.awsdns-53.net
TXT
CNAME
CAA

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Subdomain enumeration pending

Every subdomain ever issued a TLS cert under this apex — extracted from Certificate Transparency logs, our own scan observations and body references.

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

Certificate observations pending

TLS certs naming this domain in subject or SANs will appear here as our scan-layer catches them.

IPs Citing This Domain

No citing IPs found yet

As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

Origin IP Origin ASN CDN ASN Confidence Reasoning
188.166.78.117 AS14061 AS16509 95% cert 84a3db3b… served by 188.166.78.117 (AS14061) carries SAN 26.lt which currently resolves through Amazon (AS16509) at 108.138.7.35, 108.138.7.117, 108.138.7.39, 2600:9000:2490:ae00:17:3777:8380:93a1

CT-Log Evidence

Certificates from public Certificate Transparency logs whose subject or SAN names this domain — including historic certs we never observed live.

4906587a02554efe… google · argon2026h2
Subject: 26.lt
Issuer: Amazon RSA 2048 M01
SANs: 26.lt, *.26.lt
Valid: 2025-11-08 00:00:00 → 2026-12-06 23:59:59
4906587a02554efe… cloudflare · nimbus2026
Subject: 26.lt
Issuer: Amazon RSA 2048 M01
SANs: 26.lt, *.26.lt
Valid: 2025-11-08 00:00:00 → 2026-12-06 23:59:59

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Domain timeline pending

Passive-DNS history accumulates as our forward-DNS crawler observes A/AAAA/MX/NS/TXT records over time.