Check-Host.cc

Try 1.1.1.1 AS13335 check-host.cc /country/de /tld/cc
Domain

lin.ee

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

DNS Check HTTP Check Run Full Scan .ee TLD

Run a live full scan of lin.ee

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now
Hosting IPs
—
A/AAAA targets
Subdomains
—
CT + scan + body
Record Types
—
seen in DNS
Observed Certs
—
in our scans

DNS Records

A
147.92.240.249, 147.92.242.107, 147.92.242.230, 147.92.243.176
AAAA
—
MX
—
NS
ans1.linecorp.com, ans2.linecorp.com, ns1.naver.jp, ns2.naver.jp
TXT
1GbGlHGMADyTQ7Sn83kK4YLwbYrLnJ, v=spf1 ~all
CNAME
—
CAA
—

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Subdomain enumeration pending

Every subdomain ever issued a TLS cert under this apex — extracted from Certificate Transparency logs, our own scan observations and body references.

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

84.50.197.172:443 1df8fbed0628…
Subject: www.elin.ee
Issuer: YR1
SANs: www.elin.ee
217.146.67.20:443 87fba573f892…
Subject: booking.qlin.ee
Issuer: R13
SANs: booking.qlin.ee

IPs Citing This Domain

Hosts whose HTML body references this domain. Strong signal for origin/mirror/embed discovery.

130.94.22.74:443 href · ×28
49.0.81.110:80 href · ×22
47.129.49.252:443 href · ×16
18.139.107.189:80 href · ×14
157.230.244.19:443 href · ×12
13.213.3.158:443 href · ×12
60.43.159.55:443 href · ×12
157.230.40.29:80 href · ×12
210.131.218.32:80 href · ×12
54.116.123.107:80 href · ×12
111.171.220.216:443 href · ×12
157.230.40.29:443 href · ×12
49.212.211.25:443 href · ×12
54.179.193.237:443 href · ×10
118.27.20.208:443 href · ×10
210.246.215.20:80 href · ×10
52.74.39.98:80 href · ×9
54.169.212.232:80 href · ×9
54.169.170.6:80 href · ×9
103.1.222.159:443 href · ×9
82.25.63.113:443 href · ×9
157.230.246.13:80 href · ×9
143.198.214.21:80 href · ×9
165.232.169.196:443 href · ×8
49.213.252.144:443 href · ×8
35.229.184.92:443 href · ×8
183.182.48.139:443 href · ×8
167.99.71.120:443 href · ×8
152.42.190.144:443 href · ×8
18.140.34.93:80 href · ×8
18.138.14.20:80 href · ×8
113.43.133.133:443 href · ×8
162.43.5.153:443 href · ×8
15.197.156.192:80 href · ×8
206.189.155.65:80 href · ×8
198.13.60.53:443 href · ×8
128.199.72.120:443 href · ×8
34.81.11.112:80 href · ×8
49.212.144.78:443 href · ×7
60.249.178.185:443 href · ×7
166.117.76.91:443 href · ×7
153.122.47.97:443 href · ×7
163.44.126.116:443 href · ×7
154.198.50.92:80 href · ×7
13.212.208.237:80 href · ×7
153.126.209.133:443 href · ×7
34.80.48.85:443 href · ×7
52.74.196.57:443 href · ×7
13.250.58.183:80 href · ×7
13.250.165.229:80 href · ×7

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

No origin-IP leaks detected (yet)

Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.

CT-Log Evidence

Certificates from public Certificate Transparency logs whose subject or SAN names this domain — including historic certs we never observed live.

2be1e6167111f514… google · argon2026h2
Subject: *.flava-cloud.com
Issuer: Cybertrust Japan SureServer CA G4
SANs: *.flava-cloud.com, *.line.me, *.linecorp.com, *.line-apps.com, *.yahoo.co.jp, *.yahooapis.jp, *.yimg.jp, *.c.yimg.jp, *.yahoobox.jp, *.yjtag.jp, *.lycorp.co.jp, *.line.biz, *.line-rc.biz, *.yahoo.jp, *.lin.ee, *.linliv.ee, *.here.ee, *.workers-hub.com, yahoo.jp, lin.ee, linliv.ee, here.ee, yj.pn
Valid: 2025-10-23 10:46:33 → 2026-11-22 14:59:00
eba59a5d7d6653ae… google · argon2026h2
Subject: *.flava-cloud.com
Issuer: Cybertrust Japan SureServer CA G4
SANs: *.flava-cloud.com, *.line.me, *.linecorp.com, *.line-apps.com, *.yahoo.co.jp, *.yahooapis.jp, *.yimg.jp, *.c.yimg.jp, *.yahoobox.jp, *.yjtag.jp, *.lycorp.co.jp, *.line.biz, *.line-rc.biz, *.yahoo.jp, *.lin.ee, *.linliv.ee, *.here.ee, *.workers-hub.com, yahoo.jp, lin.ee, linliv.ee, here.ee, yj.pn
Valid: 2025-10-23 10:46:33 → 2026-11-22 14:59:00
eba59a5d7d6653ae… google · xenon2026h2
Subject: *.flava-cloud.com
Issuer: Cybertrust Japan SureServer CA G4
SANs: *.flava-cloud.com, *.line.me, *.linecorp.com, *.line-apps.com, *.yahoo.co.jp, *.yahooapis.jp, *.yimg.jp, *.c.yimg.jp, *.yahoobox.jp, *.yjtag.jp, *.lycorp.co.jp, *.line.biz, *.line-rc.biz, *.yahoo.jp, *.lin.ee, *.linliv.ee, *.here.ee, *.workers-hub.com, yahoo.jp, lin.ee, linliv.ee, here.ee, yj.pn
Valid: 2025-10-23 10:46:33 → 2026-11-22 14:59:00
2bac30f8f89bc45a… google · argon2026h2
Subject: *.flava-cloud.com
Issuer: Cybertrust Japan SureServer CA G4
SANs: *.flava-cloud.com, *.line.me, *.line-dev.me, *.linecorp.com, *.line-beta.me, *.line-apps.com, *.yahoo.co.jp, *.yahooapis.jp, *.yimg.jp, *.c.yimg.jp, *.yahoobox.jp, *.yjtag.jp, *.lycorp.co.jp, *.flava-cloud-dev.com, *.line.biz, *.line-beta.biz, *.yahoo.jp, *.lin.ee, *.linliv.ee, *.here.ee, *.workers-hub.com, yahoo.jp, lin.ee, linliv.ee, here.ee, yj.pn
Valid: 2025-10-23 02:46:47 → 2026-11-22 14:59:00
8a42267a47c34997… google · argon2026h2
Subject: *.flava-cloud.com
Issuer: Cybertrust Japan SureServer CA G4
SANs: *.flava-cloud.com, *.line.me, *.line-dev.me, *.linecorp.com, *.line-beta.me, *.line-apps.com, *.yahoo.co.jp, *.yahooapis.jp, *.yimg.jp, *.c.yimg.jp, *.yahoobox.jp, *.yjtag.jp, *.lycorp.co.jp, *.flava-cloud-dev.com, *.line.biz, *.line-beta.biz, *.yahoo.jp, *.lin.ee, *.linliv.ee, *.here.ee, *.workers-hub.com, yahoo.jp, lin.ee, linliv.ee, here.ee, yj.pn
Valid: 2025-10-23 02:46:47 → 2026-11-22 14:59:00
8a42267a47c34997… google · xenon2026h2
Subject: *.flava-cloud.com
Issuer: Cybertrust Japan SureServer CA G4
SANs: *.flava-cloud.com, *.line.me, *.line-dev.me, *.linecorp.com, *.line-beta.me, *.line-apps.com, *.yahoo.co.jp, *.yahooapis.jp, *.yimg.jp, *.c.yimg.jp, *.yahoobox.jp, *.yjtag.jp, *.lycorp.co.jp, *.flava-cloud-dev.com, *.line.biz, *.line-beta.biz, *.yahoo.jp, *.lin.ee, *.linliv.ee, *.here.ee, *.workers-hub.com, yahoo.jp, lin.ee, linliv.ee, here.ee, yj.pn
Valid: 2025-10-23 02:46:47 → 2026-11-22 14:59:00

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.

Type Value First seen Last seen
A 147.92.242.230 2026-05-25 21:58:50.500 2026-06-01 21:42:30.600
A 147.92.243.176 2026-05-25 21:58:50.500 2026-06-01 21:42:30.600
NS ns2.naver.jp 2026-05-25 22:07:29.493 2026-07-28 18:18:26.354
TXT v=spf1 ~all 2026-05-25 22:07:29.493 2026-07-28 18:18:26.354
TXT 1GbGlHGMADyTQ7Sn83kK4YLwbYrLnJ 2026-05-25 22:07:29.493 2026-07-28 18:18:26.354
NS ans2.linecorp.com 2026-05-25 22:07:29.493 2026-07-28 18:18:26.354
NS ans1.linecorp.com 2026-05-25 22:07:29.493 2026-07-28 18:18:26.354
NS ns1.naver.jp 2026-05-25 22:07:29.493 2026-07-28 18:18:26.354
A 147.92.240.249 2026-06-04 21:47:25.595 2026-07-28 18:18:26.354
A 147.92.242.107 2026-06-04 21:47:25.595 2026-07-28 18:18:26.354