Domain

deepseek.com

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

DNS Check HTTP Check Run Full Scan .com TLD

Run a live full scan of deepseek.com

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now

Hosting IPs

A/AAAA targets

Subdomains

CT + scan + body

Record Types

seen in DNS

Observed Certs

in our scans

DNS Records

—

AAAA

—

TXT

—

CNAME

—

CAA

—

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.

Subdomain	Resolves to	Last seen
cdn.deepseek.com	148.153.240.77 23.90.190.139 38.54.123.43 38.54.123.50 +5	2026-07-23 13:12:17.432
api-docs.deepseek.com	43.159.109.200 23.90.190.139 101.46.180.15 38.54.123.50 +4	2026-07-27 05:00:22.431
download.deepseek.com	101.46.180.15 38.54.123.43 23.90.190.139 38.54.123.50	2026-07-23 13:12:17.432
nrjcdfbfcn5ehj5-dev.deepseek.com	3.173.21.63 2600:9000:2715:0:3d00:c8:4:9d02	2026-06-15 15:06:28.335
nrjcdfbfcn5ehj5.deepseek.com	60.204.2.4 60.204.2.5	2026-05-31 01:47:40.849
status.deepseek.com	39.105.140.189 39.105.119.168	2026-07-23 13:12:17.432
api.deepseek.com	3.173.21.63	2026-07-28 20:39:29.599
chat-dev.deepseek.com		1970-01-01 00:00:00.000
chat-test-cf.deepseek.com		1970-01-01 00:00:00.000
chat.deepseek.com	3.173.21.63	2026-07-28 20:05:38.639
deepseek.com	3.173.21.63	2026-07-27 22:28:57.726
nrjcdfbfcn5ehj5-test.deepseek.com		1970-01-01 00:00:00.000
platform.deepseek.com	3.173.21.63	2026-07-27 13:50:27.161
talent.deepseek.com	43.159.109.200	2026-07-23 13:12:17.432
www.deepseek.com	3.173.21.63	2026-07-28 19:11:54.346

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

Certificate observations pending

TLS certs naming this domain in subject or SANs will appear here as our scan-layer catches them.

IPs Citing This Domain

Hosts whose HTML body references this domain. Strong signal for origin/mirror/embed discovery.

47.121.27.98:443 href · ×5

39.104.92.106:443 href · ×4

23.95.34.170:443 href · ×3

118.195.131.106:443 href · ×2

203.195.240.165:443 href · ×2

124.222.71.213:443 href · ×1

67.180.236.50:443 href · ×1

8.217.6.27:80 href · ×1

118.25.15.75:443 href · ×1

59.110.30.84:80 href · ×1

43.167.176.207:443 href · ×1

140.143.182.49:443 href · ×1

8.152.3.227:443 href · ×1

47.105.38.163:80 href · ×1

123.56.125.238:80 href · ×1

47.121.199.96:443 href · ×1

118.25.15.75:80 href · ×1

47.121.199.250:80 href · ×1

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

Origin IP	Origin ASN	CDN ASN	Confidence	Reasoning
43.240.12.160	AS133731	AS16509	95%	cert 9d88ac26… served by 43.240.12.160 (AS133731) carries SAN api.deepseek.com which currently resolves through Amazon (AS16509) at 3.173.21.63

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Domain timeline pending

Passive-DNS history accumulates as our forward-DNS crawler observes A/AAAA/MX/NS/TXT records over time.