Check-Host.cc

Domain

whitecase.com

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

Run a live full scan of whitecase.com

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now
Hosting IPs
A/AAAA targets
Subdomains
CT + scan + body
Record Types
seen in DNS
Observed Certs
in our scans

DNS Records

A
23.34.59.12, 23.34.59.5
AAAA
MX
10 mxa-0016a202.gslb.pphosted.com, 10 mxb-0016a202.gslb.pphosted.com
NS
a1-158.akam.net, a13-64.akam.net, a18-67.akam.net, a20-66.akam.net, a24-67.akam.net, a9-67.akam.net
TXT
MS=ms57591675, adobe-idp-site-verification=d7070f313190be218cdc3023d1defd933c418b3e2592fe2b18fbd0864b24cbef, anthropic-domain-verification-8q81gv=9GFCCHOGLMMhP53b0zlkkoIOd, atlassian-domain-verification=iBV3ew4bRc9j0Ja7hfGou3NUT0BjGgTZtpZyX6YGWCz8S7i8QJ5I2dBWzwdaQpN6, box-domain-verification=94bc9c02b09318d4b70df142298f61b21408425d902bb9056a82e65f413036f7, docusign=4ca6ecc5-aee5-4add-afa4-3c7846d05f93, dropbox-domain-verification=vojclw4l1huh, eCl-6PADuhY_YS9_yiOxpDCx96hr7fznBDhNBpak7DI
CNAME
CAA

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Subdomain enumeration pending

Every subdomain ever issued a TLS cert under this apex — extracted from Certificate Transparency logs, our own scan observations and body references.

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

Certificate observations pending

TLS certs naming this domain in subject or SANs will appear here as our scan-layer catches them.

IPs Citing This Domain

No citing IPs found yet

As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

No origin-IP leaks detected (yet)

Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.

Type Value First seen Last seen
TXT eCl-6PADuhY_YS9_yiOxpDCx96hr7fznBDhNBpak7DI 2026-07-15 20:04:13.980 2026-07-15 20:04:13.980
TXT adobe-idp-site-verification=d7070f313190be218cdc3023d1defd933c418b3e2592fe2b18fbd0864b24cbef 2026-07-15 20:04:13.980 2026-07-15 20:04:13.980
TXT anthropic-domain-verification-8q81gv=9GFCCHOGLMMhP53b0zlkkoIOd 2026-07-15 20:04:13.980 2026-07-15 20:04:13.980
TXT MS=ms57591675 2026-07-15 20:04:13.980 2026-07-15 20:04:13.980
A 23.34.59.5 2026-07-15 20:04:13.980 2026-07-15 20:04:13.980
TXT box-domain-verification=94bc9c02b09318d4b70df142298f61b21408425d902bb9056a82e65f413036f7 2026-07-15 20:04:13.980 2026-07-15 20:04:13.980
NS a1-158.akam.net 2026-07-15 20:04:13.980 2026-07-15 20:04:13.980
NS a24-67.akam.net 2026-07-15 20:04:13.980 2026-07-15 20:04:13.980
SRV _sips._tcp 20 20 5061 geoexpe001.gslb.whitecase.com 2026-07-15 20:04:13.980 2026-07-15 20:04:13.980
TXT openai-domain-verification=dv-fsvAu3rhDs2OwwPeKK9gkdtu 2026-07-15 20:04:13.980 2026-07-15 20:04:13.980
TXT nintex.68840cd4cb628ab54eee0ec8 2026-07-15 20:04:13.980 2026-07-15 20:04:13.980
TXT nintex.68dfe8d935714b64e418c5d5 2026-07-15 20:04:13.980 2026-07-15 20:04:13.980
TXT v=spf1 include:spf-0016a202.pphosted.com include:spfa.whitecase.com include:spfb.whitecase.com include:de._netblocks.mimecast.com ip4:62.96.244.1/26 ip4:63.131.130.192/26 ip4:128.106.13.8/31 ip4:27.111.211.128/27 ip4:205.220.162.156 ip4:205.220.174.152 a:b.spf.service-now.com a:c.spf.service-now.com a:d.spf.service-now.com -all 2026-07-15 20:04:13.980 2026-07-15 20:04:13.980
NS a9-67.akam.net 2026-07-15 20:04:13.980 2026-07-15 20:04:13.980
MX 10 mxb-0016a202.gslb.pphosted.com 2026-07-15 20:04:13.980 2026-07-15 20:04:13.980
NS a13-64.akam.net 2026-07-15 20:04:13.980 2026-07-15 20:04:13.980
TXT new-relic-domain-verification=f3b6a85473d34044b3f3368f4d7a1083 2026-07-15 20:04:13.980 2026-07-15 20:04:13.980
NS a20-66.akam.net 2026-07-15 20:04:13.980 2026-07-15 20:04:13.980
TXT pexip-ms-tenant-domain-verification=7209e3b4-c780-49ef-89f8-c22db635655b 2026-07-15 20:04:13.980 2026-07-15 20:04:13.980
NS a18-67.akam.net 2026-07-15 20:04:13.980 2026-07-15 20:04:13.980
TXT smartsheet-site-validation=ak0tDLcsDyeBYv0U0JkS7nwXWObXTaIv 2026-07-15 20:04:13.980 2026-07-15 20:04:13.980
TXT docusign=4ca6ecc5-aee5-4add-afa4-3c7846d05f93 2026-07-15 20:04:13.980 2026-07-15 20:04:13.980
A 23.34.59.12 2026-07-15 20:04:13.980 2026-07-15 20:04:13.980
TXT dropbox-domain-verification=vojclw4l1huh 2026-07-15 20:04:13.980 2026-07-15 20:04:13.980
MX 10 mxa-0016a202.gslb.pphosted.com 2026-07-15 20:04:13.980 2026-07-15 20:04:13.980
TXT atlassian-domain-verification=iBV3ew4bRc9j0Ja7hfGou3NUT0BjGgTZtpZyX6YGWCz8S7i8QJ5I2dBWzwdaQpN6 2026-07-15 20:04:13.980 2026-07-15 20:04:13.980
SRV _sip._tcp 20 20 5060 geoexpe001.gslb.whitecase.com 2026-07-15 20:04:13.980 2026-07-15 20:04:13.980
TXT miro-verification=58893bf0f96f56a10e0645bd36d0d45f11476ab3 2026-07-15 20:04:13.980 2026-07-15 20:04:13.980