Check-Host.cc

Domain

script.googleusercontent.com

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

Run a live full scan of script.googleusercontent.com

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now
Hosting IPs
14
A/AAAA targets
Subdomains
CT + scan + body
Record Types
2
seen in DNS
Observed Certs
in our scans

DNS Records

A
142.250.154.132, 142.251.110.132, 142.251.209.225, 216.58.198.33, 64.233.184.132, 74.125.206.132
AAAA
2a00:1450:4001:c13::84, 2a00:1450:4001:c15::84, 2a00:1450:4001:c1f::84, 2a00:1450:400c:c00::84, 2a00:1450:400c:c04::84, 2a00:1450:400c:c0b::84, 2a00:1450:400c:c0c::84, 2a00:1450:400e:814::2001
MX
NS
TXT
CNAME
CAA

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Subdomain enumeration pending

Every subdomain ever issued a TLS cert under this apex — extracted from Certificate Transparency logs, our own scan observations and body references.

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

Certificate observations pending

TLS certs naming this domain in subject or SANs will appear here as our scan-layer catches them.

IPs Citing This Domain

Hosts whose HTML body references this domain. Strong signal for origin/mirror/embed discovery.

167.172.167.251:443 href · ×2
43.157.248.73:80 href · ×2
13.206.25.51:80 href · ×1
138.199.233.43:443 href · ×1
74.208.79.53:443 href · ×1
34.128.181.205:443 href · ×1
138.199.233.43:80 href · ×1
34.59.184.165:443 href · ×1
159.138.246.236:443 href · ×1

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

No origin-IP leaks detected (yet)

Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.

Type Value First seen Last seen
AAAA 2a00:1450:4001:c15::84 2026-05-26 11:16:03.290 2026-06-15 00:23:13.348
A 142.251.110.132 2026-05-26 11:16:03.290 2026-05-26 11:16:03.290
A 74.125.206.132 2026-05-26 16:50:08.486 2026-05-27 17:53:26.325
AAAA 2a00:1450:4001:c1f::84 2026-05-26 16:50:08.486 2026-05-26 16:50:08.486
A 64.233.184.132 2026-05-26 16:59:21.229 2026-05-27 17:49:03.731
AAAA 2a00:1450:400c:c04::84 2026-05-26 16:59:21.229 2026-05-26 16:59:21.229
AAAA 2a00:1450:400c:c0b::84 2026-05-27 02:53:39.037 2026-05-27 12:46:20.485
AAAA 2a00:1450:400c:c00::84 2026-05-27 09:55:28.497 2026-07-25 22:49:09.120
A 142.250.154.132 2026-05-27 12:46:20.485 2026-05-27 12:46:20.485
AAAA 2a00:1450:4001:c13::84 2026-05-27 17:49:03.731 2026-05-27 17:49:03.731
AAAA 2a00:1450:400c:c0c::84 2026-05-27 17:53:26.325 2026-05-27 17:53:26.325
A 142.251.209.225 2026-06-15 00:23:13.348 2026-06-15 00:23:13.348
A 216.58.198.33 2026-07-25 22:49:09.120 2026-07-26 16:39:34.901
AAAA 2a00:1450:400e:814::2001 2026-07-26 16:39:34.901 2026-07-26 16:39:34.901