cooley.com
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of cooley.com
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
DNS Records
WHOIS / Registration
Registration data planned
Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.
Subdomains
Subdomain enumeration pending
Every subdomain ever issued a TLS cert under this apex — extracted from Certificate Transparency logs, our own scan observations and body references.
Tech Stack
Tech detection pending
Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.
TLS Certificates
IPs Citing This Domain
No citing IPs found yet
As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.
Origin / IP-Leak
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
| Origin IP | Origin ASN | CDN ASN | Confidence | Reasoning |
|---|---|---|---|---|
| 184.84.106.140 | AS55836 | AS13335 | 95% | cert 8e01f4b9… served by 184.84.106.140 (AS55836) carries SAN access.cooley.com which currently resolves through Cloudflare (AS13335) at 104.18.14.121, 104.18.15.121 |
| 104.85.144.193 | AS55836 | AS13335 | 95% | cert 8e01f4b9… served by 104.85.144.193 (AS55836) carries SAN access.cooley.com which currently resolves through Cloudflare (AS13335) at 104.18.14.121, 104.18.15.121 |
| 155.46.183.34 | AS8681 | AS13335 | 95% | cert 1f0cff11… served by 155.46.183.34 (AS8681) carries SAN access.cooley.com which currently resolves through Cloudflare (AS13335) at 104.18.14.121, 104.18.15.121 |
| 140.209.236.1 | AS394089 | AS16509 | 95% | cert a8b598f4… served by 140.209.236.1 (AS394089) carries SAN prisma.cooley.com which currently resolves through Amazon (AS16509) at 165.85.75.224 |
Threat Intelligence
Domain threat-intel pending
Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.
History
Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.
| Type | Value | First seen | Last seen |
|---|---|---|---|
| TXT | v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com ~all | 2026-06-02 03:45:33.953 | 2026-06-15 00:54:33.538 |
| SRV | _sips._tcp 0 0 5061 u1cmexpe.cooley.com | 2026-06-02 03:45:33.953 | 2026-06-15 00:54:33.538 |
| NS | ns2-01.azure-dns.net | 2026-06-02 03:45:33.953 | 2026-06-15 00:54:33.538 |
| MX | 100 mxa-0016f301.gslb.pphosted.com | 2026-06-02 03:45:33.953 | 2026-06-15 00:54:33.538 |
| NS | ns4-01.azure-dns.info | 2026-06-02 03:45:33.953 | 2026-06-15 00:54:33.538 |
| SRV | _sips._tcp 0 0 5061 u2cmexpe.cooley.com | 2026-06-02 03:45:33.953 | 2026-06-15 00:54:33.538 |
| SRV | _sip._tcp 0 0 5060 u1cmexpe.cooley.com | 2026-06-02 03:45:33.953 | 2026-06-15 00:54:33.538 |
| TXT | atlassian-domain-verification=81/Est1gF8rrYqnmiLlSnGWwLAn3TQL9ufViO/8UWMk337gVIOaEP6ohpaKBLp1p | 2026-06-02 03:45:33.953 | 2026-06-15 00:54:33.538 |
| NS | ns3-01.azure-dns.org | 2026-06-02 03:45:33.953 | 2026-06-15 00:54:33.538 |
| SRV | _sip._tcp 0 0 5060 video2.cooley.com | 2026-06-02 03:45:33.953 | 2026-06-15 00:54:33.538 |
| A | 13.107.213.57 | 2026-06-02 03:45:33.953 | 2026-06-15 00:54:33.538 |
| NS | ns1-01.azure-dns.com | 2026-06-02 03:45:33.953 | 2026-06-15 00:54:33.538 |
| MX | 100 mxb-0016f301.gslb.pphosted.com | 2026-06-02 03:45:33.953 | 2026-06-15 00:54:33.538 |
| A | 13.107.246.57 | 2026-06-02 03:45:33.953 | 2026-06-15 00:54:33.538 |
| SRV | _sip._tcp 0 0 5060 u2cmexpe.cooley.com | 2026-06-02 03:45:33.953 | 2026-06-15 00:54:33.538 |