Check-Host.cc

Try 1.1.1.1 AS13335 check-host.cc /country/de /tld/cc
Domain

ogwlab.org

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

DNS Check HTTP Check Run Full Scan .org TLD

Run a live full scan of ogwlab.org

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now
Hosting IPs
13
A/AAAA targets
Subdomains
9
CT + scan + body
Record Types
5
seen in DNS
Observed Certs
7
in our scans

DNS Records

A
104.21.66.11, 172.67.198.12, 188.114.96.0, 188.114.97.0
AAAA
2606:4700:3034::ac43:c60c, 2606:4700:3035::6815:420b, 2a06:98c1:3120::, 2a06:98c1:3121::
MX
1 SMTP.GOOGLE.COM
NS
chuck.ns.cloudflare.com, itzel.ns.cloudflare.com
TXT
google-site-verification=K8Ta7iS5RWnx1baliGatua2Bg_n7u-hYd7hOO59y4OQ, v=spf1 +a:ogwlab.org +mx include:_spf.google.com ~all
CNAME
—
CAA
—

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.

Subdomain Resolves to Last seen
www.ogwlab.org
104.21.66.11 2a06:98c1:3121:: 2a06:98c1:3120::3 2a06:98c1:3121::3 +8
2026-06-15 04:41:39.660
ogwlab.org
188.114.96.0 2606:4700:3035::6815:420b 104.21.66.11 172.67.198.12 +4
2026-06-15 04:41:39.660
jatos.ogwlab.org
1970-01-01 00:00:00.000
n8n.ogwlab.org
162.43.21.36
2026-06-16 09:03:46.062
paperpile-api.ogwlab.org
1970-01-01 00:00:00.000
psychfitter.ogwlab.org
1970-01-01 00:00:00.000

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

162.43.21.36:443 0484512ed898…
Subject: ogwlab.org
Issuer: E8
SANs: ogwlab.org, www.ogwlab.org

IPs Citing This Domain

Hosts whose HTML body references this domain. Strong signal for origin/mirror/embed discovery.

162.43.21.36:443 href · ×274

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

Origin IP Origin ASN CDN ASN Confidence Reasoning
162.43.21.36 AS131965 AS13335 95% cert 0484512e… served by 162.43.21.36 (AS131965) carries SAN ogwlab.org which currently resolves through Cloudflare (AS13335) at 104.21.66.11, 172.67.198.12, 2606:4700:3035::6815:420b, 2606:4700:3034::ac43:c60c

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.

Type Value First seen Last seen
NS chuck.ns.cloudflare.com 2026-05-26 04:07:00.841 2026-06-15 04:41:39.660
TXT v=spf1 +a:ogwlab.org +mx include:_spf.google.com ~all 2026-05-26 04:07:00.841 2026-06-15 04:41:39.660
A 104.21.66.11 2026-05-26 04:07:00.841 2026-05-27 17:29:58.988
NS itzel.ns.cloudflare.com 2026-05-26 04:07:00.841 2026-06-15 04:41:39.660
TXT google-site-verification=K8Ta7iS5RWnx1baliGatua2Bg_n7u-hYd7hOO59y4OQ 2026-05-26 04:07:00.841 2026-06-15 04:41:39.660
AAAA 2606:4700:3034::ac43:c60c 2026-05-26 04:07:00.841 2026-05-27 17:29:58.988
MX 1 SMTP.GOOGLE.COM 2026-05-26 04:07:00.841 2026-06-15 04:41:39.660
A 172.67.198.12 2026-05-26 04:07:00.841 2026-05-27 17:29:58.988
AAAA 2606:4700:3035::6815:420b 2026-05-26 04:07:00.841 2026-05-27 17:29:58.988
AAAA 2a06:98c1:3120:: 2026-06-15 04:41:39.660 2026-06-15 04:41:39.660
A 188.114.96.0 2026-06-15 04:41:39.660 2026-06-15 04:41:39.660
A 188.114.97.0 2026-06-15 04:41:39.660 2026-06-15 04:41:39.660
AAAA 2a06:98c1:3121:: 2026-06-15 04:41:39.660 2026-06-15 04:41:39.660