Check-Host.cc

Try 1.1.1.1 AS13335 check-host.cc /country/de /tld/cc
Domain

next.lu

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

DNS Check HTTP Check Run Full Scan .lu TLD

Run a live full scan of next.lu

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now
Hosting IPs
17
A/AAAA targets
Subdomains
22
CT + scan + body
Record Types
4
seen in DNS
Observed Certs
2
in our scans

DNS Records

A
—
AAAA
—
MX
—
NS
—
TXT
—
CNAME
—
CAA
—

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.

Subdomain Resolves to Last seen
account.next.lu
104.85.0.18 184.30.156.24 23.220.112.20 104.99.232.253 +7
2026-07-28 12:44:20.043
www.next.lu
104.85.0.18 173.222.168.24 104.99.232.253 23.35.28.234 +7
2026-07-28 12:44:20.043
next.lu
2.16.27.74 2.16.27.75 2a02:26f0:1700:11::b856:6793 2a02:26f0:1700:11::b856:679e
2026-06-04 23:51:53.290
abtest.next.lu
1970-01-01 00:00:00.000
account-abtest.next.lu
1970-01-01 00:00:00.000
account-ci.next.lu
1970-01-01 00:00:00.000
ci.next.lu
1970-01-01 00:00:00.000

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

207.154.224.139:443 311ae01c9120…
Subject: next.lum0.net
Issuer: R12
SANs: next.lum0.net
213.166.52.149:443 c0cf35d14afb…
Subject: rds.bionext.lu
Issuer: R13
SANs: rds.bionext.lu

IPs Citing This Domain

No citing IPs found yet

As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

Origin IP Origin ASN CDN ASN Confidence Reasoning
119.56.0.253 AS4773 AS20940 95% cert da716a89… served by 119.56.0.253 (AS4773) carries SAN account.next.lu which currently resolves through Akamai (AS20940) at 104.85.0.18, 104.99.232.253, 23.209.56.22, 23.56.162.24
210.57.88.20 AS4637 AS20940 95% cert da716a89… served by 210.57.88.20 (AS4637) carries SAN account.next.lu which currently resolves through Akamai (AS20940) at 104.85.0.18, 104.99.232.253, 23.209.56.22, 23.56.162.24
23.199.40.235 AS7470 AS16625 95% cert da716a89… served by 23.199.40.235 (AS7470) carries SAN account.next.lu which currently resolves through Akamai (AS16625) at 104.99.232.253, 104.85.0.18, 23.209.56.22, 23.56.162.24
23.199.40.235 AS7470 AS20940 95% cert da716a89… served by 23.199.40.235 (AS7470) carries SAN www.next.lu which currently resolves through Akamai (AS20940) at 104.85.0.18, 104.99.232.253, 184.30.156.24, 23.56.162.24
23.220.92.37 AS852 AS20940 95% cert da716a89… served by 23.220.92.37 (AS852) carries SAN account.next.lu which currently resolves through Akamai (AS20940) at 104.85.0.18, 23.209.56.22, 23.56.162.24, 184.30.156.24
23.200.68.23 AS35819 AS16625 95% cert da716a89… served by 23.200.68.23 (AS35819) carries SAN account.next.lu which currently resolves through Akamai (AS16625) at 23.56.162.24, 104.85.0.18, 184.30.156.24
104.110.68.15 AS7545 AS20940 95% cert da716a89… served by 104.110.68.15 (AS7545) carries SAN account.next.lu which currently resolves through Akamai (AS20940) at 104.85.0.18, 184.30.156.24
104.110.68.15 AS7545 AS16625 95% cert da716a89… served by 104.110.68.15 (AS7545) carries SAN www.next.lu which currently resolves through Akamai (AS16625) at 23.222.200.19, 104.85.0.18, 184.30.156.24, 2.23.244.22

CT-Log Evidence

Certificates from public Certificate Transparency logs whose subject or SAN names this domain — including historic certs we never observed live.

4261e1a038b9f09a… google · argon2026h2
Subject: next.ae
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: next.ae, next.at, next.co.il, next.com.au, next.com.az, next.com.ee, next.com.lv, next.com.mt, next.de, next.es, next.fi, next.ie, next.lt, next.lu, next.mx, next.no, next.om, next.pl, next.qa, next.ro, next.sa, next.se, next.sg, next.si, next.tw, next.ua, next.us
Valid: 2025-09-06 00:00:00 → 2026-09-08 23:59:59
ec03af97947ddd23… google · argon2026h2
Subject: next.ae
Issuer: DigiCert Global G3 TLS ECC SHA384 2020 CA1
SANs: next.ae, next.at, next.co.il, next.com.au, next.com.az, next.com.ee, next.com.lv, next.com.mt, next.de, next.es, next.fi, next.ie, next.lt, next.lu, next.mx, next.no, next.om, next.pl, next.qa, next.ro, next.sa, next.se, next.sg, next.si, next.tw, next.ua, next.us
Valid: 2025-09-06 00:00:00 → 2026-09-08 23:59:59

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.

Type Value First seen Last seen
TXT hpy8hcd9dylq21zhq3cqrv0rg2bq26zv 2026-06-04 23:51:53.290 2026-06-04 23:51:53.290
TXT v=spf1 -all 2026-06-04 23:51:53.290 2026-06-04 23:51:53.290
NS udns2.cscdns.uk 2026-06-04 23:51:53.290 2026-06-04 23:51:53.290
AAAA 2a02:26f0:1700:11::b856:6793 2026-06-04 23:51:53.290 2026-06-04 23:51:53.290
NS udns1.cscdns.net 2026-06-04 23:51:53.290 2026-06-04 23:51:53.290
AAAA 2a02:26f0:1700:11::b856:679e 2026-06-04 23:51:53.290 2026-06-04 23:51:53.290
TXT sjn35bq0tkvtw3wfwc6jv3hj69nnxx3l 2026-06-04 23:51:53.290 2026-06-04 23:51:53.290
A 2.16.27.75 2026-06-04 23:51:53.290 2026-06-04 23:51:53.290
TXT _gonkf4l486rh0vxzc3vhnvi1rawoaig 2026-06-04 23:51:53.290 2026-06-04 23:51:53.290
TXT _ezbldjoqkvvo0cboupqxxo8354laes4 2026-06-04 23:51:53.290 2026-06-04 23:51:53.290
A 2.16.27.74 2026-06-04 23:51:53.290 2026-06-04 23:51:53.290