check-host.cc
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of check-host.cc
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
DNS Records
WHOIS / Registration
Registration data planned
Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.
Subdomains
Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.
| Subdomain | Resolves to | Last seen |
|---|---|---|
| docs.check-host.cc | 2026-05-31 18:17:53.000 | |
| stats.check-host.cc | 2026-05-31 18:17:53.000 | |
| api.check-host.cc | 2026-05-31 18:17:53.000 | |
| autoconfig.check-host.cc | 2026-05-31 18:17:53.000 | |
| autodiscover.check-host.cc | 2026-05-31 18:17:53.000 | |
| check-host.cc | 2026-07-19 15:17:04.362 | |
| ipv4.check-host.cc | 2026-05-31 18:17:53.000 | |
| mail.check-host.cc | 2026-05-31 18:17:53.000 | |
| www.check-host.cc | 2026-05-31 18:17:53.000 | |
| ipv6.check-host.cc | 2026-05-31 18:17:53.000 |
Tech Stack
Detected via Wappalyzer-style rules on the HTTP response body, headers, scripts and meta tags of this domain and its subdomains.
TLS Certificates
IPs Citing This Domain
No citing IPs found yet
As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.
Origin / IP-Leak
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
| Origin IP | Origin ASN | CDN ASN | Confidence | Reasoning |
|---|---|---|---|---|
| 34.36.183.77 | — | — | 70% | cert 6e848057… with SAN check-host.cc served by 34.36.183.77 (1 observations) — ASN context not yet available |
CT-Log Evidence
Certificates from public Certificate Transparency logs whose subject or SAN names this domain — including historic certs we never observed live.
Threat Intelligence
Domain threat-intel pending
Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.
History
Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.
| Type | Value | First seen | Last seen |
|---|---|---|---|
| NS | sunny.ns.cloudflare.com | 2026-05-30 22:07:45.365 | 2026-07-19 15:17:04.362 |
| MX | 10 mail.check-host.cc | 2026-05-30 22:07:45.365 | 2026-07-19 15:17:04.362 |
| TXT | v=spf1 ip4:45.95.55.234 -all | 2026-05-30 22:07:45.365 | 2026-07-19 15:17:04.362 |
| NS | peyton.ns.cloudflare.com | 2026-05-30 22:07:45.365 | 2026-07-19 15:17:04.362 |
| TXT | 4csjh5pg7c9puahb6tmu5tc4r0 | 2026-05-30 22:07:45.365 | 2026-07-19 15:17:04.362 |
| TXT | google-site-verification=MlUAnvQ0YnZeVRRC7ehSFJVoxzlNmYFi9SdlHUAsRVg | 2026-05-30 22:07:45.365 | 2026-07-19 15:17:04.362 |
| A | 34.36.183.77 | 2026-05-30 22:07:45.365 | 2026-07-19 15:17:04.362 |
| AAAA | 2600:1901:0:6760:: | 2026-05-30 22:07:45.365 | 2026-07-19 15:17:04.362 |
| SRV | _autodiscover._tcp 100 100 443 mail.check-host.cc | 2026-06-01 18:22:55.613 | 2026-07-19 15:17:04.362 |