Check-Host.cc

Domain

smallpdf.com

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

Run a live full scan of smallpdf.com

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now
Hosting IPs
A/AAAA targets
Subdomains
CT + scan + body
Record Types
seen in DNS
Observed Certs
in our scans

DNS Records

A
18.160.10.43, 18.160.10.48, 18.160.10.69, 18.160.10.86, 18.239.83.120, 18.239.83.77, 18.239.83.79, 18.239.83.94
AAAA
MX
1 aspmx.l.google.com, 10 alt3.aspmx.l.google.com, 10 alt4.aspmx.l.google.com, 5 alt1.aspmx.l.google.com, 5 alt2.aspmx.l.google.com
NS
ns-1082.awsdns-07.org, ns-1687.awsdns-18.co.uk, ns-264.awsdns-33.com, ns-928.awsdns-52.net
TXT
MS=D82821EC5DC0D62EC6EF745FBCD2D5C6763132F2, MS=ms57364651, MS=ms97348809, apple-domain-verification=Ze7VGb9X4V9gLjDq, apple-domain-verification=byPiw0nB93vniGcg, atlassian-domain-verification=4st/VxgUBQMEyqZppxa4/x8zPQcHXvPVwW3OCOsAqtim6UahHglfKHAz8UGLbCkp, globalsign-domain-verification=1FE18C23502E1C6B1D06F26BCC5A8104, globalsign-domain-verification=4A5FFA64F18B12D730361062BD6A068A
CNAME
CAA
0 issue "amazon.com", 0 issue "amazonaws.com", 0 issue "amazontrust.com", 0 issue "awstrust.com", 0 issue "digicert.com", 0 issue "globalsign.com", 0 issue "letsencrypt.org", 0 issue "pki.goog"

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Subdomain enumeration pending

Every subdomain ever issued a TLS cert under this apex — extracted from Certificate Transparency logs, our own scan observations and body references.

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

Subject: smallpdf.com
Issuer: Amazon RSA 2048 M01
SANs: *.smallpdf.com, smallpdf.com

IPs Citing This Domain

Hosts whose HTML body references this domain. Strong signal for origin/mirror/embed discovery.

104.233.207.42:443 href · ×10
137.175.74.148:443 href · ×10
104.233.207.41:443 href · ×10
104.233.207.45:443 href · ×10
39.107.64.243:443 href · ×3
115.190.156.94:443 href · ×3
119.23.53.203:80 href · ×2
1.12.231.198:443 href · ×2
168.138.208.253:80 href · ×2
168.138.208.253:443 href · ×2
121.43.101.107:443 href · ×2
8.134.147.233:443 href · ×2
23.236.68.174:5000 href · ×2
8.140.17.224:80 href · ×1
129.226.211.12:443 href · ×1
59.110.173.112:80 href · ×1
8.130.33.44:80 href · ×1
5.188.19.37:80 href · ×1
163.5.53.21:443 href · ×1
43.99.3.27:443 href · ×1
62.234.82.94:80 href · ×1
123.56.105.185:443 href · ×1
8.156.71.132:443 href · ×1
43.132.210.87:443 href · ×1
43.154.31.6:443 href · ×1
103.150.215.122:8080 href · ×1
8.140.17.224:443 href · ×1
103.38.83.123:8088 href · ×1
159.69.50.152:80 href · ×1

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

No origin-IP leaks detected (yet)

Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.

CT-Log Evidence

Certificates from public Certificate Transparency logs whose subject or SAN names this domain — including historic certs we never observed live.

1b8599a952fab117… cloudflare · nimbus2026
Subject: smallpdf.com
Issuer: Amazon RSA 2048 M03
SANs: smallpdf.com, *.smallpdf.com
Valid: 2025-06-26 00:00:00 → 2026-07-24 23:59:59
c075483a1753b614… cloudflare · nimbus2026
Subject: smallpdf.com
Issuer: Amazon RSA 2048 M03
SANs: smallpdf.com, *.smallpdf.com
Valid: 2025-06-26 00:00:00 → 2026-07-24 23:59:59
1b8599a952fab117… google · argon2026h2
Subject: smallpdf.com
Issuer: Amazon RSA 2048 M03
SANs: smallpdf.com, *.smallpdf.com
Valid: 2025-06-26 00:00:00 → 2026-07-24 23:59:59
c075483a1753b614… google · argon2026h2
Subject: smallpdf.com
Issuer: Amazon RSA 2048 M03
SANs: smallpdf.com, *.smallpdf.com
Valid: 2025-06-26 00:00:00 → 2026-07-24 23:59:59

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.

Type Value First seen Last seen
TXT globalsign-domain-verification=a5c95ae1727ea3b95648945707db2326 2026-05-26 06:44:29.317 2026-07-27 18:59:24.775
A 65.8.131.15 2026-05-26 06:44:29.317 2026-07-20 17:28:25.223
TXT google-site-verification=jLQrKahc79wtkp_rti6g48lO5i7WdZtuv-EbRM0d748 2026-05-26 06:44:29.317 2026-07-27 18:59:24.775
NS ns-264.awsdns-33.com 2026-05-26 06:44:29.317 2026-07-27 18:59:24.775
CAA 0 issue "awstrust.com" 2026-05-26 06:44:29.317 2026-07-27 18:59:24.775
NS ns-928.awsdns-52.net 2026-05-26 06:44:29.317 2026-07-27 18:59:24.775
TXT MS=D82821EC5DC0D62EC6EF745FBCD2D5C6763132F2 2026-05-26 06:44:29.317 2026-07-27 18:59:24.775
CAA 0 issue "globalsign.com" 2026-05-26 06:44:29.317 2026-07-27 18:59:24.775
A 65.8.131.84 2026-05-26 06:44:29.317 2026-07-20 17:28:25.223
CAA 0 issue "letsencrypt.org" 2026-05-26 06:44:29.317 2026-07-27 18:59:24.775
TXT yandex-verification: 1aa895be80b1279 2026-05-26 06:44:29.317 2026-07-27 18:59:24.775
NS ns-1082.awsdns-07.org 2026-05-26 06:44:29.317 2026-07-27 18:59:24.775
TXT linkedin-site-verification=009acd3f-31bb-43e8-a4d2-9d68a3221b9b 2026-05-26 06:44:29.317 2026-07-27 18:59:24.775
TXT MS=ms57364651 2026-05-26 06:44:29.317 2026-07-27 18:59:24.775
TXT apple-domain-verification=byPiw0nB93vniGcg 2026-05-26 06:44:29.317 2026-07-27 18:59:24.775
TXT google-site-verification=N8tu1wUb5iGleZ-QGachAYf1MAfLk-lrJ_gCM3lb9dg 2026-05-26 06:44:29.317 2026-07-27 18:59:24.775
TXT apple-domain-verification=Ze7VGb9X4V9gLjDq 2026-05-26 06:44:29.317 2026-07-27 18:59:24.775
CAA 0 issue "amazon.com" 2026-05-26 06:44:29.317 2026-07-27 18:59:24.775
MX 10 alt3.aspmx.l.google.com 2026-05-26 06:44:29.317 2026-07-27 18:59:24.775
TXT globalsign-domain-verification=1FE18C23502E1C6B1D06F26BCC5A8104 2026-05-26 06:44:29.317 2026-07-27 18:59:24.775
TXT globalsign-domain-verification=4A5FFA64F18B12D730361062BD6A068A 2026-05-26 06:44:29.317 2026-07-27 18:59:24.775
MX 5 alt1.aspmx.l.google.com 2026-05-26 06:44:29.317 2026-07-27 18:59:24.775
CAA 0 issue "amazonaws.com" 2026-05-26 06:44:29.317 2026-07-27 18:59:24.775
TXT atlassian-domain-verification=4st/VxgUBQMEyqZppxa4/x8zPQcHXvPVwW3OCOsAqtim6UahHglfKHAz8UGLbCkp 2026-05-26 06:44:29.317 2026-07-27 18:59:24.775
TXT globalsign-domain-verification=D99FC250DADE1BDFAD2515617017102A 2026-05-26 06:44:29.317 2026-07-27 18:59:24.775
TXT google-site-verification=Z9Jvfe8bbTIO1MknSfmcUxX5KQr2roxPS_EOMdA5Rss 2026-05-26 06:44:29.317 2026-07-27 18:59:24.775
NS ns-1687.awsdns-18.co.uk 2026-05-26 06:44:29.317 2026-07-27 18:59:24.775
TXT MS=ms97348809 2026-05-26 06:44:29.317 2026-07-27 18:59:24.775
A 65.8.131.63 2026-05-26 06:44:29.317 2026-07-20 17:28:25.223
TXT openai-domain-verification=dv-9mb9N40hfuZ0wBHWH9s1bC6l 2026-05-26 06:44:29.317 2026-07-27 18:59:24.775
CAA 0 issue "digicert.com" 2026-05-26 06:44:29.317 2026-07-27 18:59:24.775
CAA 0 issue "pki.goog" 2026-05-26 06:44:29.317 2026-07-27 18:59:24.775
CAA 0 issue "amazontrust.com" 2026-05-26 06:44:29.317 2026-07-27 18:59:24.775
MX 5 alt2.aspmx.l.google.com 2026-05-26 06:44:29.317 2026-07-27 18:59:24.775
TXT google-site-verification=5zJBbVnSgFQHIftNw1nf4nmP1dYaOvt7GLWMzUgc1Wo 2026-05-26 06:44:29.317 2026-07-27 18:59:24.775
A 65.8.131.100 2026-05-26 06:44:29.317 2026-07-20 17:28:25.223
MX 10 alt4.aspmx.l.google.com 2026-05-26 06:44:29.317 2026-07-27 18:59:24.775
MX 1 aspmx.l.google.com 2026-05-26 06:44:29.317 2026-07-27 18:59:24.775
TXT yahoo-verification-key=0ZSqTbomVgUqnef6O0FvOBQF9wm3dfw4mYPze/wdRJM= 2026-05-26 06:44:29.317 2026-07-27 18:59:24.775
TXT google-site-verification=75Ay89P1ISyDh9WxmFNfBLi9zmqO9X4I6kdttoXLk1E 2026-05-26 06:44:29.317 2026-07-27 18:59:24.775
TXT v=spf1 mx include:_spf.google.com include:sendgrid.net ip4:205.201.128.0/20 ip4:198.2.128.0/18 ip4:148.105.8.0/21 include:7328340.spf05.hubspotemail.net include:spf.mandrillapp.com ip4:198.2.145.123 ~all 2026-05-26 06:44:29.317 2026-07-27 18:59:24.775
A 18.239.83.94 2026-05-26 20:06:45.970 2026-07-27 18:59:24.775
A 18.239.83.79 2026-05-26 20:06:45.970 2026-07-27 18:59:24.775
A 18.239.83.120 2026-05-26 20:06:45.970 2026-07-27 18:59:24.775
A 18.239.83.77 2026-05-26 20:06:45.970 2026-07-27 18:59:24.775
A 18.160.10.86 2026-06-19 01:12:28.458 2026-06-19 01:12:28.458
A 18.160.10.69 2026-06-19 01:12:28.458 2026-06-19 01:12:28.458
A 18.160.10.48 2026-06-19 01:12:28.458 2026-06-19 01:12:28.458
A 18.160.10.43 2026-06-19 01:12:28.458 2026-06-19 01:12:28.458
A 3.165.113.69 2026-07-15 20:04:13.980 2026-07-15 20:04:13.980
A 3.165.113.89 2026-07-15 20:04:13.980 2026-07-15 20:04:13.980
A 3.165.113.92 2026-07-15 20:04:13.980 2026-07-15 20:04:13.980
A 3.165.113.16 2026-07-15 20:04:13.980 2026-07-15 20:04:13.980