Check-Host.cc

Domain

corefo.com

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

Run a live full scan of corefo.com

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now
Hosting IPs
8
A/AAAA targets
Subdomains
18
CT + scan + body
Record Types
4
seen in DNS
Observed Certs
6
in our scans

DNS Records

A
184.33.131.63, 32.184.48.244, 34.216.164.38, 35.160.213.178, 44.241.31.25, 52.26.202.50, 52.41.209.233
AAAA
MX
1 aspmx.l.google.com, 10 alt3.aspmx.l.google.com, 10 alt4.aspmx.l.google.com, 5 alt1.aspmx.l.google.com, 5 alt2.aspmx.l.google.com
NS
ns-1423.awsdns-49.org, ns-1619.awsdns-10.co.uk, ns-282.awsdns-35.com, ns-658.awsdns-18.net
TXT
v=spf1 include:_spf.google.com ~all
CNAME
CAA

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

Subject: *.corefo.com
Issuer: Thawte TLS RSA CA G1
SANs: *.corefo.com, corefo.com
Subject: *.corefo.com
Issuer: Thawte TLS RSA CA G1
SANs: *.corefo.com, corefo.com
Subject: corefo.com
Issuer: Amazon RSA 2048 M04
SANs: *.corefo.com, corefo.com
Subject: corefo2026.corefo.com
Issuer: Amazon RSA 2048 M01
SANs: corefo2026.corefo.com
Subject: corefo2026.corefo.com
Issuer: Amazon RSA 2048 M01
SANs: corefo2026.corefo.com

IPs Citing This Domain

No citing IPs found yet

As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

Origin IP Origin ASN CDN ASN Confidence Reasoning
45.236.47.35 AS27843 AS16509 95% cert fa286c9f… served by 45.236.47.35 (AS27843) carries SAN corefo.com which currently resolves through Amazon (AS16509) at 184.33.131.63, 34.216.164.38, 52.26.202.50, 32.184.48.244

CT-Log Evidence

Certificates from public Certificate Transparency logs whose subject or SAN names this domain — including historic certs we never observed live.

cf9c97e6632080da… google · argon2026h2
Subject: corefo.com
Issuer: Amazon RSA 2048 M04
SANs: corefo.com, *.corefo.com
Valid: 2025-11-19 00:00:00 → 2026-12-18 23:59:59
cf9c97e6632080da… google · xenon2026h2
Subject: corefo.com
Issuer: Amazon RSA 2048 M04
SANs: corefo.com, *.corefo.com
Valid: 2025-11-19 00:00:00 → 2026-12-18 23:59:59
f679dae7a5f64608… google · argon2026h2
Subject: corefo.com
Issuer: Amazon ECDSA 384 M04
SANs: corefo.com, *.corefo.com
Valid: 2025-09-21 00:00:00 → 2026-10-20 23:59:59
18dd944b9ea4036a… google · argon2026h2
Subject: corefo.com
Issuer: Amazon RSA 2048 M04
SANs: corefo.com, *.corefo.com
Valid: 2025-08-22 00:00:00 → 2026-09-20 23:59:59
00cb67cbd9caecad… google · argon2026h2
Subject: *.corefo.com
Issuer: Thawte TLS RSA CA G1
SANs: *.corefo.com, corefo.com
Valid: 2025-08-15 00:00:00 → 2026-08-13 23:59:59
fa286c9fe037583e… google · argon2026h2
Subject: *.corefo.com
Issuer: Thawte TLS RSA CA G1
SANs: *.corefo.com, corefo.com
Valid: 2025-08-15 00:00:00 → 2026-08-13 23:59:59

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.

Type Value First seen Last seen
TXT v=spf1 include:_spf.google.com ~all 2026-06-02 03:45:33.953 2026-08-03 20:00:38.240
NS ns-282.awsdns-35.com 2026-06-02 03:45:33.953 2026-08-03 20:00:38.240
A 35.160.213.178 2026-06-02 03:45:33.953 2026-06-02 03:45:33.953
MX 5 alt2.aspmx.l.google.com 2026-06-02 03:45:33.953 2026-08-03 20:00:38.240
NS ns-1423.awsdns-49.org 2026-06-02 03:45:33.953 2026-08-03 20:00:38.240
A 32.184.48.244 2026-06-02 03:45:33.953 2026-06-04 22:21:22.594
MX 10 alt4.aspmx.l.google.com 2026-06-02 03:45:33.953 2026-08-03 20:00:38.240
MX 1 aspmx.l.google.com 2026-06-02 03:45:33.953 2026-08-03 20:00:38.240
MX 5 alt1.aspmx.l.google.com 2026-06-02 03:45:33.953 2026-08-03 20:00:38.240
MX 10 alt3.aspmx.l.google.com 2026-06-02 03:45:33.953 2026-08-03 20:00:38.240
NS ns-1619.awsdns-10.co.uk 2026-06-02 03:45:33.953 2026-08-03 20:00:38.240
NS ns-658.awsdns-18.net 2026-06-02 03:45:33.953 2026-08-03 20:00:38.240
A 52.26.202.50 2026-06-04 22:21:22.594 2026-06-04 22:21:22.594
A 34.216.164.38 2026-06-15 07:51:14.163 2026-06-23 15:35:36.502
A 184.33.131.63 2026-06-15 07:51:14.163 2026-06-23 15:35:36.502
A 52.41.209.233 2026-08-03 20:00:38.240 2026-08-03 20:00:38.240
A 44.241.31.25 2026-08-03 20:00:38.240 2026-08-03 20:00:38.240