Check-Host.cc

Try 1.1.1.1 AS13335 check-host.cc /country/de /tld/cc
Domain

gateit.io

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

DNS Check HTTP Check Run Full Scan .io TLD

Run a live full scan of gateit.io

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now
Hosting IPs
—
A/AAAA targets
Subdomains
—
CT + scan + body
Record Types
—
seen in DNS
Observed Certs
—
in our scans

DNS Records

A
104.21.94.163, 172.67.138.19
AAAA
2606:4700:3033::6815:5ea3, 2606:4700:3035::ac43:8a13
MX
10 mx.zoho.com, 20 mx2.zoho.com, 50 mx3.zoho.com
NS
isla.ns.cloudflare.com, joel.ns.cloudflare.com
TXT
firebase=gateit-40ded, google-site-verification=MnASZLplzlE4FPDY9WqNlK19_O1IFKS6PRCb0YpJgIw, v=spf1 include:_spf.firebasemail.com include:zoho.com include:zohomail.com ~all, zoho-verification=zb40507310.zmverify.zoho.com
CNAME
—
CAA
0 issue "comodoca.com", 0 issue "digicert.com; cansignhttpexchanges=yes", 0 issue "letsencrypt.org", 0 issue "pki.goog; cansignhttpexchanges=yes", 0 issue "ssl.com", 0 issuewild "comodoca.com", 0 issuewild "digicert.com; cansignhttpexchanges=yes", 0 issuewild "letsencrypt.org"

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.

Subdomain Resolves to Last seen
api.gateit.io
104.21.94.163 172.67.138.19 2606:4700:3035::ac43:8a13 2606:4700:3033::6815:5ea3 +2
2026-07-21 16:52:15.698
typesense.gateit.io
172.67.138.19 2606:4700:3034::6815:5ea3 104.21.94.163 2606:4700:3034::ac43:8a13 +2
2026-07-15 14:03:13.591
campaigns.gateit.io
104.21.94.163 172.67.138.19 2606:4700:3033::6815:5ea3 2606:4700:3035::ac43:8a13
2026-07-17 16:54:35.710
gateit.io
172.67.138.19 2606:4700:3035::ac43:8a13 2606:4700:3033::6815:5ea3 104.21.94.163
2026-07-17 16:54:35.710
umami.gateit.io
104.21.94.163 172.67.138.19 2606:4700:3033::6815:5ea3 2606:4700:3035::ac43:8a13
2026-07-17 16:54:35.710
www.gateit.io
104.21.94.163 172.67.138.19 2606:4700:3035::ac43:8a13 2606:4700:3033::6815:5ea3
2026-07-17 16:54:35.710
changedetection.gateit.io
1970-01-01 00:00:00.000
filesharing.gateit.io
1970-01-01 00:00:00.000
nanmu.gateit.io
1970-01-01 00:00:00.000
uptime.gateit.io
1970-01-01 00:00:00.000

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

31.220.83.46:443 ff6449aae944…
Subject: gateit.io
Issuer: YR1
SANs: gateit.io, www.gateit.io

IPs Citing This Domain

No citing IPs found yet

As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

Origin IP Origin ASN CDN ASN Confidence Reasoning
31.220.83.46 AS51167 AS13335 95% cert ff6449aa… served by 31.220.83.46 (AS51167) carries SAN gateit.io which currently resolves through Cloudflare (AS13335) at 104.21.94.163, 172.67.138.19, 2606:4700:3033::6815:5ea3, 2606:4700:3035::ac43:8a13

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.

Type Value First seen Last seen
NS isla.ns.cloudflare.com 2026-07-14 20:57:51.218 2026-07-17 16:54:35.710
MX 20 mx2.zoho.com 2026-07-14 20:57:51.218 2026-07-17 16:54:35.710
TXT firebase=gateit-40ded 2026-07-14 20:57:51.218 2026-07-17 16:54:35.710
AAAA 2606:4700:3035::ac43:8a13 2026-07-14 20:57:51.218 2026-07-17 16:54:35.710
TXT google-site-verification=MnASZLplzlE4FPDY9WqNlK19_O1IFKS6PRCb0YpJgIw 2026-07-14 20:57:51.218 2026-07-17 16:54:35.710
A 172.67.138.19 2026-07-14 20:57:51.218 2026-07-17 16:54:35.710
TXT zoho-verification=zb40507310.zmverify.zoho.com 2026-07-14 20:57:51.218 2026-07-17 16:54:35.710
MX 50 mx3.zoho.com 2026-07-14 20:57:51.218 2026-07-17 16:54:35.710
CAA 0 issue "ssl.com" 2026-07-14 20:57:51.218 2026-07-17 16:54:35.710
MX 10 mx.zoho.com 2026-07-14 20:57:51.218 2026-07-17 16:54:35.710
A 104.21.94.163 2026-07-14 20:57:51.218 2026-07-17 16:54:35.710
CAA 0 issuewild "digicert.com; cansignhttpexchanges=yes" 2026-07-14 20:57:51.218 2026-07-17 16:54:35.710
CAA 0 issuewild "ssl.com" 2026-07-14 20:57:51.218 2026-07-17 16:54:35.710
CAA 0 issue "digicert.com; cansignhttpexchanges=yes" 2026-07-14 20:57:51.218 2026-07-17 16:54:35.710
AAAA 2606:4700:3033::6815:5ea3 2026-07-14 20:57:51.218 2026-07-17 16:54:35.710
CAA 0 issuewild "comodoca.com" 2026-07-14 20:57:51.218 2026-07-17 16:54:35.710
CAA 0 issuewild "letsencrypt.org" 2026-07-14 20:57:51.218 2026-07-17 16:54:35.710
CAA 0 issuewild "pki.goog; cansignhttpexchanges=yes" 2026-07-14 20:57:51.218 2026-07-17 16:54:35.710
NS joel.ns.cloudflare.com 2026-07-14 20:57:51.218 2026-07-17 16:54:35.710
CAA 0 issue "letsencrypt.org" 2026-07-14 20:57:51.218 2026-07-17 16:54:35.710
CAA 0 issue "comodoca.com" 2026-07-14 20:57:51.218 2026-07-17 16:54:35.710
CAA 0 issue "pki.goog; cansignhttpexchanges=yes" 2026-07-14 20:57:51.218 2026-07-17 16:54:35.710
TXT v=spf1 include:_spf.firebasemail.com include:zoho.com include:zohomail.com ~all 2026-07-14 20:57:51.218 2026-07-17 16:54:35.710