Check-Host.cc

Try 1.1.1.1 AS13335 check-host.cc /country/de /tld/cc
Domain

thenewstack.io

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

DNS Check HTTP Check Run Full Scan .io TLD

Run a live full scan of thenewstack.io

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now
Hosting IPs
12
A/AAAA targets
Subdomains
17
CT + scan + body
Record Types
5
seen in DNS
Observed Certs
18
in our scans

DNS Records

A
—
AAAA
—
MX
—
NS
—
TXT
—
CNAME
—
CAA
—

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.

Subdomain Resolves to Last seen
thenewstack.io
172.67.70.57 2606:4700:20::ac43:4639 104.26.0.71 104.26.1.71 +2
2026-07-24 03:12:47.996
img-api.thenewstack.io
172.66.0.51 2606:4700:7::33 2a06:98c1:58::33 162.159.140.51
2026-06-18 05:24:20.870
backup10.thenewstack.io
44.229.210.178
2026-05-26 12:15:32.861
info.thenewstack.io
1970-01-01 00:00:00.000
monitor20.thenewstack.io
146.190.129.234
2026-06-21 03:15:52.229

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

146.190.129.234:443 8a30c474666e…
Subject: monitor20.thenewstack.io
Issuer: E7
SANs: monitor20.thenewstack.io
45.55.105.149:443 6aedb6a6a8a9…
Subject: *.thenewstack.io
Issuer: R12
SANs: *.thenewstack.io, thenewstack.io
198.199.75.28:443 6aedb6a6a8a9…
Subject: *.thenewstack.io
Issuer: R12
SANs: *.thenewstack.io, thenewstack.io
44.229.210.178:443 2c4f815fc988…
Subject: backup10.thenewstack.io
Issuer: R12
SANs: backup10.thenewstack.io

IPs Citing This Domain

Hosts whose HTML body references this domain. Strong signal for origin/mirror/embed discovery.

89.44.139.193:443 href · ×3
47.131.77.100:80 href · ×2
104.237.128.178:443 href · ×1
104.237.128.178:80 href · ×1
43.202.1.236:80 href · ×1
217.154.20.11:443 href · ×1

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

Origin IP Origin ASN CDN ASN Confidence Reasoning
45.55.105.149 AS14061 AS13335 95% cert 6aedb6a6… served by 45.55.105.149 (AS14061) carries SAN thenewstack.io which currently resolves through Cloudflare (AS13335) at 172.67.70.57, 104.26.1.71, 104.26.0.71, 2606:4700:20::681a:47
198.199.75.28 AS14061 AS13335 95% cert 6aedb6a6… served by 198.199.75.28 (AS14061) carries SAN thenewstack.io which currently resolves through Cloudflare (AS13335) at 172.67.70.57, 104.26.1.71, 104.26.0.71, 2606:4700:20::681a:47

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Domain timeline pending

Passive-DNS history accumulates as our forward-DNS crawler observes A/AAAA/MX/NS/TXT records over time.