Check-Host.cc

Domain

writer.com

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

Run a live full scan of writer.com

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now
Hosting IPs
12
A/AAAA targets
Subdomains
101
CT + scan + body
Record Types
5
seen in DNS
Observed Certs
13
in our scans

DNS Records

A
AAAA
MX
NS
TXT
CNAME
CAA

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.

Subdomain Resolves to Last seen
app.writer.com 2026-07-25 19:40:23.353
campaigns.writer.com 2026-07-15 08:49:33.541
download-mac.writer.com 2026-07-25 09:55:27.162
evals.writer.com 2026-07-25 19:40:23.353
ext-394234.writer.com 2026-07-25 19:40:23.353
portal.prod-pine.writer.com 2026-07-25 19:40:23.353
portal.writer.com 2026-07-25 19:40:23.353
prod-pine.writer.com 2026-07-25 19:40:23.353
proxy.prod-pine.writer.com 2026-07-25 19:40:23.353
scim.writer.com 2026-07-20 13:11:51.432
storage.writer.com 2026-07-22 15:05:28.419
styleguide.prod-pine.writer.com 2026-07-25 19:40:23.353
writer.com 2026-07-27 07:19:40.268
api.goldmansachs.writer.com 2026-07-25 19:40:23.353
app.eu2.writer.com 2026-05-25 22:02:50.525
dev.writer.com 2026-06-21 05:56:17.174
portal.eu2.writer.com 2026-05-25 22:02:50.525
portal.goldmansachs.writer.com 2026-07-25 19:40:23.353
proxy.eu2.writer.com 2026-05-25 22:02:50.525
styleguide.eu2.writer.com 2026-05-25 22:02:50.525
1password-connect.writer.com
1970-01-01 00:00:00.000
api-west.writer.com
1970-01-01 00:00:00.000
api.point72.writer.com
1970-01-01 00:00:00.000
app.eu1.writer.com
1970-01-01 00:00:00.000
app.goldmansachs-test.writer.com 2026-07-22 20:24:43.804
app.goldmansachs.writer.com 2026-07-25 19:40:23.353
ask.writer.com
1970-01-01 00:00:00.000
c9b2d9.writer.com
1970-01-01 00:00:00.000
eu1.writer.com
1970-01-01 00:00:00.000
eu2.writer.com
1970-01-01 00:00:00.000
events.writer.com
1970-01-01 00:00:00.000
go.writer.com
1970-01-01 00:00:00.000
goldmansachs-test.writer.com
1970-01-01 00:00:00.000
goldmansachs.writer.com
1970-01-01 00:00:00.000
img.writer.com
1970-01-01 00:00:00.000
kong.point72.writer.com
1970-01-01 00:00:00.000
observability.writer.com
1970-01-01 00:00:00.000
portal.eu1.writer.com
1970-01-01 00:00:00.000
portal.goldmansachs-test.writer.com 2026-07-22 20:24:43.804
proxy.eu1.writer.com
1970-01-01 00:00:00.000
proxy.goldmansachs-test.writer.com 2026-07-22 20:24:43.804
proxy.goldmansachs.writer.com 2026-07-25 19:40:23.353
proxy.writer.com
1970-01-01 00:00:00.000
storage.goldmansachs.writer.com
1970-01-01 00:00:00.000
storage.pjt.writer.com
1970-01-01 00:00:00.000
styleguide.eu1.writer.com
1970-01-01 00:00:00.000
styleguide.goldmansachs-test.writer.com 2026-07-22 20:24:43.804
styleguide.goldmansachs.writer.com 2026-07-25 19:40:23.353
styleguide.writer.com
1970-01-01 00:00:00.000
tools.writer.com
1970-01-01 00:00:00.000
www.writer.com
1970-01-01 00:00:00.000

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

Certificate observations pending

TLS certs naming this domain in subject or SANs will appear here as our scan-layer catches them.

IPs Citing This Domain

Hosts whose HTML body references this domain. Strong signal for origin/mirror/embed discovery.

42.193.109.5:80 href · ×4
149.28.79.253:443 href · ×4
101.42.243.151:443 href · ×2
157.20.105.77:443 href · ×2
118.25.194.65:80 href · ×1
121.37.160.241:443 href · ×1
121.43.59.144:80 href · ×1
8.137.84.89:80 href · ×1
212.50.251.161:443 href · ×1
154.8.185.103:443 href · ×1
106.53.76.200:443 href · ×1
8.138.123.163:443 href · ×1

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

Origin IP Origin ASN CDN ASN Confidence Reasoning
35.190.90.176 AS396982 AS13335 95% cert c00f4537… served by 35.190.90.176 (AS396982) carries SAN app.writer.com which currently resolves through Cloudflare (AS13335) at 104.20.31.216, 172.66.167.93, 2606:4700:10::ac42:a75d, 2606:4700:10::6814:1fd8

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Domain timeline pending

Passive-DNS history accumulates as our forward-DNS crawler observes A/AAAA/MX/NS/TXT records over time.