Check-Host.cc

Domain

static.userback.io

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

Run a live full scan of static.userback.io

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now
Hosting IPs
12
A/AAAA targets
Subdomains
CT + scan + body
Record Types
1
seen in DNS
Observed Certs
in our scans

DNS Records

A
18.239.18.43, 18.239.18.69, 18.239.18.86, 18.239.18.96, 3.171.214.117, 3.171.214.55, 3.171.214.7, 3.171.214.78
AAAA
MX
NS
TXT
CNAME
CAA

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Subdomain enumeration pending

Every subdomain ever issued a TLS cert under this apex — extracted from Certificate Transparency logs, our own scan observations and body references.

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

Certificate observations pending

TLS certs naming this domain in subject or SANs will appear here as our scan-layer catches them.

IPs Citing This Domain

Hosts whose HTML body references this domain. Strong signal for origin/mirror/embed discovery.

18.175.217.109:443 href · ×6
18.171.159.153:80 href · ×6
18.171.178.210:443 href · ×6
18.171.161.18:80 href · ×6
18.175.217.109:80 href · ×6
54.67.70.148:443 href · ×4
3.15.68.146:443 href · ×4
52.8.94.234:443 href · ×4
16.59.222.202:443 href · ×4
18.224.244.151:443 href · ×4
15.205.139.239:443 href · ×4
56.136.11.72:443 href · ×4
34.160.194.143:443 href · ×3
34.144.235.235:443 href · ×3
34.128.169.25:443 href · ×3
107.178.245.121:443 href · ×3
34.54.227.47:443 href · ×3
34.49.73.21:443 href · ×3
34.13.125.6:443 href · ×3
3.25.82.135:80 href · ×2
50.16.234.17:443 href · ×2
152.53.148.121:443 href · ×2
54.66.103.149:443 href · ×2
44.248.61.128:80 href · ×2
44.206.96.117:80 href · ×2
99.83.236.100:80 href · ×2
35.167.0.234:443 href · ×2
13.248.241.66:80 href · ×2
193.183.125.2:443 href · ×2
77.42.23.255:443 href · ×1
148.72.28.169:443 href · ×1
192.241.215.49:443 href · ×1
45.55.124.227:443 href · ×1
52.24.107.180:443 href · ×1
52.22.226.174:443 href · ×1
13.239.204.53:443 href · ×1
99.83.236.100:443 href · ×1
34.224.195.234:80 href · ×1
3.211.77.191:443 href · ×1
34.236.115.183:80 href · ×1
3.25.211.136:80 href · ×1
18.195.86.29:443 href · ×1
54.175.198.7:80 href · ×1
98.89.17.249:443 href · ×1
47.102.204.233:5000 href · ×1
100.56.217.145:80 href · ×1
54.208.140.159:443 href · ×1
18.199.205.204:80 href · ×1
18.159.120.114:80 href · ×1
176.34.128.143:8081 href · ×1

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

No origin-IP leaks detected (yet)

Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.

Type Value First seen Last seen
A 3.171.214.7 2026-05-26 02:22:42.939 2026-07-27 15:45:40.580
A 3.171.214.78 2026-05-26 02:22:42.939 2026-07-27 15:45:40.580
A 3.171.214.117 2026-05-26 02:22:42.939 2026-07-27 15:45:40.580
A 3.171.214.55 2026-05-26 02:22:42.939 2026-07-27 15:45:40.580
A 3.173.161.94 2026-05-27 01:16:30.398 2026-07-26 21:24:26.924
A 3.173.161.98 2026-05-27 01:16:30.398 2026-07-26 21:24:26.924
A 3.173.161.8 2026-05-27 01:16:30.398 2026-07-26 21:24:26.924
A 3.173.161.48 2026-05-27 01:16:30.398 2026-07-26 21:24:26.924
A 18.239.18.96 2026-06-14 23:22:00.742 2026-07-28 03:15:39.983
A 18.239.18.43 2026-06-14 23:22:00.742 2026-07-28 03:15:39.983
A 18.239.18.86 2026-06-14 23:22:00.742 2026-07-28 03:15:39.983
A 18.239.18.69 2026-06-14 23:22:00.742 2026-07-28 03:15:39.983