Check-Host.cc

Try 1.1.1.1 AS13335 check-host.cc /country/de /tld/cc
Domain

gist.github.com

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

DNS Check HTTP Check Run Full Scan .com TLD

Run a live full scan of gist.github.com

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now
Hosting IPs
9
A/AAAA targets
Subdomains
—
CT + scan + body
Record Types
5
seen in DNS
Observed Certs
—
in our scans

DNS Records

A
140.82.112.3, 140.82.112.4, 140.82.113.3, 140.82.113.4, 140.82.114.3, 140.82.114.4, 140.82.121.3, 140.82.121.4
AAAA
—
MX
0 github-com.mail.protection.outlook.com
NS
dns1.p08.nsone.net, dns2.p08.nsone.net, dns3.p08.nsone.net, dns4.p08.nsone.net, ns-1283.awsdns-32.org, ns-1707.awsdns-21.co.uk, ns-421.awsdns-52.com, ns-520.awsdns-01.net
TXT
00Dd0000000hHE0=1TBKg000000TN2r, MS=6BF03E6AF5CB689E315FB6199603BABF2C88D805, MS=ms44452932, MS=ms58704441, TAILSCALE-xOzoDvFUzZr5YYVCQFuD, adobe-idp-site-verification=b92c9e999aef825edc36e0a3d847d2dbad5b2fc0e05c79ddd7a16139b48ecf4b, anthropic-domain-verification-4az7qn=if8YWuRRqwLycGJDooumzHtxm, apple-domain-verification=RyQhdzTl6Z6x8ZP4
CNAME
—
CAA
0 issue "digicert.com", 0 issue "globalsign.com", 0 issue "letsencrypt.org", 0 issue "sectigo.com", 0 issuewild "digicert.com", 0 issuewild "letsencrypt.org", 0 issuewild "sectigo.com"

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Subdomain enumeration pending

Every subdomain ever issued a TLS cert under this apex — extracted from Certificate Transparency logs, our own scan observations and body references.

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

Certificate observations pending

TLS certs naming this domain in subject or SANs will appear here as our scan-layer catches them.

IPs Citing This Domain

Hosts whose HTML body references this domain. Strong signal for origin/mirror/embed discovery.

83.212.113.171:443 href · ×19
220.228.194.181:443 href · ×14
140.211.15.223:80 href · ×10
165.22.233.243:443 href · ×8
107.170.225.236:443 href · ×7
118.27.38.133:443 href · ×7
52.9.122.176:443 href · ×6
206.81.11.137:80 href · ×6
15.235.155.199:8080 href · ×6
63.32.1.223:80 href · ×6
206.81.11.137:443 href · ×6
108.132.205.181:443 href · ×6
65.109.54.31:80 href · ×5
133.167.126.214:443 href · ×4
133.130.124.137:443 href · ×4
66.175.218.125:443 href · ×4
13.126.95.212:443 href · ×4
52.45.47.228:443 href · ×3
104.236.97.89:443 href · ×3
144.34.183.103:443 href · ×3
35.155.163.120:443 href · ×3
196.216.2.188:443 href · ×3
5.101.6.116:443 href · ×3
159.89.123.94:80 href · ×3
185.79.218.144:443 href · ×3
23.84.169.172:8080 href · ×2
88.89.116.228:8080 href · ×2
123.209.194.104:80 href · ×2
46.16.132.22:443 href · ×2
166.141.230.5:8081 href · ×2
5.183.174.6:443 href · ×2
68.183.242.198:443 href · ×2
162.239.167.134:443 href · ×2
66.128.3.11:8088 href · ×2
166.155.195.88:8081 href · ×2
157.180.52.106:443 href · ×2
101.200.36.185:80 href · ×2
104.236.154.61:80 href · ×2
195.201.139.148:443 href · ×2
34.199.250.216:443 href · ×2
172.218.97.161:443 href · ×2
209.141.59.41:443 href · ×2
38.246.193.97:443 href · ×2
44.213.234.143:443 href · ×2
95.217.17.184:443 href · ×2
34.214.57.23:443 href · ×2
38.246.193.18:80 href · ×2
208.118.204.151:443 href · ×2
143.110.242.61:443 href · ×2
3.113.213.63:8080 href · ×2

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

No origin-IP leaks detected (yet)

Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.

CT-Log Evidence

Certificates from public Certificate Transparency logs whose subject or SAN names this domain — including historic certs we never observed live.

a427ecba70a90d68… google · xenon2026h2
Subject: github.com
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: github.com, garage.github.com, gist.github.com, www.github.com
Valid: 2025-09-15 00:00:00 → 2026-09-15 23:59:59
f202cc20403bf298… google · xenon2026h2
Subject: github.com
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: github.com, garage.github.com, gist.github.com, www.github.com
Valid: 2025-09-15 00:00:00 → 2026-09-15 23:59:59
f202cc20403bf298… google · argon2026h2
Subject: github.com
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: github.com, garage.github.com, gist.github.com, www.github.com
Valid: 2025-09-15 00:00:00 → 2026-09-15 23:59:59

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.

Type Value First seen Last seen
A 140.82.121.4 2026-05-25 21:56:50.553 2026-07-23 02:41:38.112
TXT krisp-domain-verification=ZlyiK7XLhnaoUQb2hpak1PLY7dFkl1WE 2026-05-26 00:03:35.658 2026-07-23 02:41:38.112
NS dns3.p08.nsone.net 2026-05-26 00:03:35.658 2026-07-23 02:41:38.112
NS ns-520.awsdns-01.net 2026-05-26 00:03:35.658 2026-07-23 02:41:38.112
MX 0 github-com.mail.protection.outlook.com 2026-05-26 00:03:35.658 2026-07-23 02:41:38.112
TXT facebook-domain-verification=39xu4jzl7roi7x0n93ldkxjiaarx50 2026-05-26 00:03:35.658 2026-07-23 02:41:38.112
NS dns4.p08.nsone.net 2026-05-26 00:03:35.658 2026-07-23 02:41:38.112
CAA 0 issue "sectigo.com" 2026-05-26 00:03:35.658 2026-07-23 02:41:38.112
TXT google-site-verification=82Le34Flgtd15ojYhHlGF_6g72muSjamlMVThBOJpks 2026-05-26 00:03:35.658 2026-07-23 02:41:38.112
TXT calendly-site-verification=at0DQARi7IZvJtXQAWhMqpmIzpvoBNF7aam5VKKxP 2026-05-26 00:03:35.658 2026-07-23 02:41:38.112
NS ns-421.awsdns-52.com 2026-05-26 00:03:35.658 2026-07-23 02:41:38.112
TXT miro-verification=d2e174fdb00c71e0bcf58f8e58c3da2dd80dcfa9 2026-05-26 00:03:35.658 2026-07-23 02:41:38.112
TXT google-site-verification=UTM-3akMgubp6tQtgEuAkYNYLyYAvpTnnSrDMWoDR3o 2026-05-26 00:03:35.658 2026-07-23 02:41:38.112
TXT MS=6BF03E6AF5CB689E315FB6199603BABF2C88D805 2026-05-26 00:03:35.658 2026-07-23 02:41:38.112
TXT stripe-verification=f88ef17321660a01bab1660454192e014defa29ba7b8de9633c69d6b4912217f 2026-05-26 00:03:35.658 2026-07-23 02:41:38.112
TXT adobe-idp-site-verification=b92c9e999aef825edc36e0a3d847d2dbad5b2fc0e05c79ddd7a16139b48ecf4b 2026-05-26 00:03:35.658 2026-07-23 02:41:38.112
NS ns-1283.awsdns-32.org 2026-05-26 00:03:35.658 2026-07-23 02:41:38.112
TXT MS=ms44452932 2026-05-26 00:03:35.658 2026-07-23 02:41:38.112
CAA 0 issue "globalsign.com" 2026-05-26 00:03:35.658 2026-07-23 02:41:38.112
TXT 00Dd0000000hHE0=1TBKg000000TN2r 2026-05-26 00:03:35.658 2026-07-23 02:41:38.112
TXT TAILSCALE-xOzoDvFUzZr5YYVCQFuD 2026-05-26 00:03:35.658 2026-07-23 02:41:38.112
CAA 0 issue "letsencrypt.org" 2026-05-26 00:03:35.658 2026-07-23 02:41:38.112
NS dns1.p08.nsone.net 2026-05-26 00:03:35.658 2026-07-23 02:41:38.112
TXT docusign=087098e3-3d46-47b7-9b4e-8a23028154cd 2026-05-26 00:03:35.658 2026-07-23 02:41:38.112
TXT atlassian-domain-verification=jjgw98AKv2aeoYFxiL/VFaoyPkn3undEssTRuMg6C/3Fp/iqhkV4HVV7WjYlVeF8 2026-05-26 00:03:35.658 2026-07-23 02:41:38.112
CAA 0 issuewild "sectigo.com" 2026-05-26 00:03:35.658 2026-07-23 02:41:38.112
TXT v=spf1 ip4:192.30.252.0/22 include:spf.protection.outlook.com include:_netblocks.google.com include:_netblocks2.google.com include:mail.zendesk.com include:_spf.salesforce.com include:servers.mcsv.net include:mktomail.com include:sendgrid.net ip4:62.253.227.114 ip4:166.78.69.169 ip4:166.78.69.170 ip4:166.78.71.131 ~all 2026-05-26 00:03:35.658 2026-07-23 02:41:38.112
TXT MS=ms58704441 2026-05-26 00:03:35.658 2026-07-23 02:41:38.112
TXT apple-domain-verification=RyQhdzTl6Z6x8ZP4 2026-05-26 00:03:35.658 2026-07-23 02:41:38.112
CAA 0 issuewild "letsencrypt.org" 2026-05-26 00:03:35.658 2026-07-23 02:41:38.112
TXT jamf-site-verification=XtaPNIYghF_e_xRDI8CjgQ 2026-05-26 00:03:35.658 2026-07-23 02:41:38.112
CAA 0 issuewild "digicert.com" 2026-05-26 00:03:35.658 2026-07-23 02:41:38.112
CAA 0 issue "digicert.com" 2026-05-26 00:03:35.658 2026-07-23 02:41:38.112
NS dns2.p08.nsone.net 2026-05-26 00:03:35.658 2026-07-23 02:41:38.112
TXT shopify-verification-code=t1YPwcmvnxZyBycaCpk1MPyWoFs72o 2026-05-26 00:03:35.658 2026-07-23 02:41:38.112
NS ns-1707.awsdns-21.co.uk 2026-05-26 00:03:35.658 2026-07-23 02:41:38.112
TXT loom-site-verification=f3787154f1154b7880e720a511ea664d 2026-05-26 00:03:35.658 2026-07-23 02:41:38.112
A 140.82.121.3 2026-05-26 00:21:04.925 2026-07-23 00:42:34.531
A 140.82.113.3 2026-05-26 06:44:29.317 2026-05-30 04:25:40.866
A 140.82.114.3 2026-05-26 07:55:56.671 2026-07-17 00:44:27.458
A 140.82.113.4 2026-05-26 12:01:30.636 2026-05-30 05:03:40.974
A 140.82.112.4 2026-05-27 06:55:15.147 2026-05-30 11:53:40.854
A 140.82.112.3 2026-05-27 19:55:40.751 2026-06-19 11:51:19.347
A 140.82.114.4 2026-05-27 20:51:40.740 2026-05-31 08:19:40.780
A 4.225.11.194 2026-06-20 01:11:46.306 2026-06-20 01:11:46.306
TXT anthropic-domain-verification-4az7qn=if8YWuRRqwLycGJDooumzHtxm 2026-06-22 21:37:49.367 2026-07-23 02:41:38.112
TXT serval-domain-verification-ydryhj=qbkiEakpwEpTvHh5fIiCqtaue 2026-07-16 02:05:04.580 2026-07-23 02:41:38.112