Check-Host.cc

Domain

ipmph.com

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

Run a live full scan of ipmph.com

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now
Hosting IPs
5
A/AAAA targets
Subdomains
33
CT + scan + body
Record Types
4
seen in DNS
Observed Certs
2
in our scans

DNS Records

A
49.233.110.82
AAAA
MX
10 hzmx02.xmail.ntesmail.com, 5 hzmx01.xmail.ntesmail.com
NS
vip3.alidns.com, vip4.alidns.com
TXT
v=spf1 include:spf.ntesmail.com -all
CNAME
CAA

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.

Subdomain Resolves to Last seen
books.ipmph.com 2026-06-17 17:48:27.203
booksupdate.ipmph.com
1970-01-01 00:00:00.000
cms.ipmph.com 2026-06-17 00:24:37.654
edu.ipmph.com 2026-06-17 17:48:27.203
exam.ipmph.com 2026-06-17 17:48:27.203
ipmph.com 2026-07-30 20:00:37.993
medbooks.ipmph.com 2026-06-17 17:48:27.203
mtcxdsys.ipmph.com 2026-06-14 22:36:55.780
rwjc.ipmph.com
1970-01-01 00:00:00.000
rwjcmptest.ipmph.com 2026-06-15 01:35:41.658
rwjcstatic.ipmph.com
1970-01-01 00:00:00.000
rwshop.ipmph.com 2026-06-17 17:48:27.203
sso.ipmph.com 2026-06-17 17:48:27.203
testexam.ipmph.com 2026-06-17 17:48:27.203
testtk.ipmph.com 2026-06-14 22:36:55.780
textbooks.ipmph.com
1970-01-01 00:00:00.000
tk.ipmph.com 2026-06-14 22:36:55.780
www.ipmph.com 2026-06-17 17:48:27.203

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

Certificate observations pending

TLS certs naming this domain in subject or SANs will appear here as our scan-layer catches them.

IPs Citing This Domain

No citing IPs found yet

As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

Origin IP Origin ASN CDN ASN Confidence Reasoning
119.254.226.102 AS23724 AS45090 95% cert 5be638c6… served by 119.254.226.102 (AS23724) carries SAN ipmph.com which currently resolves through Tencent (AS45090) at 49.233.110.82
119.254.225.95 AS23724 AS45090 95% cert 5be638c6… served by 119.254.225.95 (AS23724) carries SAN ipmph.com which currently resolves through Tencent (AS45090) at 49.233.110.82
119.254.226.90 AS23724 AS45090 95% cert 5be638c6… served by 119.254.226.90 (AS23724) carries SAN ipmph.com which currently resolves through Tencent (AS45090) at 49.233.110.82
119.254.225.98 AS23724 AS45090 95% cert 5be638c6… served by 119.254.225.98 (AS23724) carries SAN ipmph.com which currently resolves through Tencent (AS45090) at 49.233.110.82
119.254.226.83 AS23724 AS45090 95% cert 5be638c6… served by 119.254.226.83 (AS23724) carries SAN ipmph.com which currently resolves through Tencent (AS45090) at 49.233.110.82
119.254.225.74 AS23724 AS45090 95% cert 5be638c6… served by 119.254.225.74 (AS23724) carries SAN ipmph.com which currently resolves through Tencent (AS45090) at 49.233.110.82
117.107.141.240 AS23724 AS45090 95% cert 5be638c6… served by 117.107.141.240 (AS23724) carries SAN ipmph.com which currently resolves through Tencent (AS45090) at 49.233.110.82
117.107.141.228 AS23724 AS45090 95% cert 5be638c6… served by 117.107.141.228 (AS23724) carries SAN ipmph.com which currently resolves through Tencent (AS45090) at 49.233.110.82
119.254.226.89 AS23724 AS45090 95% cert 5be638c6… served by 119.254.226.89 (AS23724) carries SAN ipmph.com which currently resolves through Tencent (AS45090) at 49.233.110.82
119.254.226.67 AS23724 AS45090 95% cert 5be638c6… served by 119.254.226.67 (AS23724) carries SAN ipmph.com which currently resolves through Tencent (AS45090) at 49.233.110.82
119.254.226.79 AS23724 AS45090 95% cert 5be638c6… served by 119.254.226.79 (AS23724) carries SAN ipmph.com which currently resolves through Tencent (AS45090) at 49.233.110.82
119.254.225.78 AS23724 AS45090 95% cert 5be638c6… served by 119.254.225.78 (AS23724) carries SAN ipmph.com which currently resolves through Tencent (AS45090) at 49.233.110.82
119.254.226.91 AS23724 AS45090 95% cert 5be638c6… served by 119.254.226.91 (AS23724) carries SAN ipmph.com which currently resolves through Tencent (AS45090) at 49.233.110.82
119.254.226.87 AS23724 AS45090 95% cert d5cdc1d9… served by 119.254.226.87 (AS23724) carries SAN ipmph.com which currently resolves through Tencent (AS45090) at 49.233.110.82
119.254.226.78 AS23724 AS45090 95% cert 5be638c6… served by 119.254.226.78 (AS23724) carries SAN ipmph.com which currently resolves through Tencent (AS45090) at 49.233.110.82

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Domain timeline pending

Passive-DNS history accumulates as our forward-DNS crawler observes A/AAAA/MX/NS/TXT records over time.