Check-Host.cc

Domain

cooley.com

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

Run a live full scan of cooley.com

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now
Hosting IPs
27
A/AAAA targets
Subdomains
156
CT + scan + body
Record Types
5
seen in DNS
Observed Certs
10
in our scans

DNS Records

A
13.107.213.57, 13.107.246.57
AAAA
MX
100 mxa-0016f301.gslb.pphosted.com, 100 mxb-0016f301.gslb.pphosted.com
NS
ns1-01.azure-dns.com, ns2-01.azure-dns.net, ns3-01.azure-dns.org, ns4-01.azure-dns.info
TXT
atlassian-domain-verification=81/Est1gF8rrYqnmiLlSnGWwLAn3TQL9ufViO/8UWMk337gVIOaEP6ohpaKBLp1p, v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com ~all
CNAME
CAA

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Subdomain enumeration pending

Every subdomain ever issued a TLS cert under this apex — extracted from Certificate Transparency logs, our own scan observations and body references.

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

Subject: u1appintune.cooley.com
Issuer: Sectigo Public Server Authentication CA OV R36
SANs: a1appintune01.cooley.com, a1appintune02.cooley.com, a2appintune01.cooley.com, asappintune.cooley.com, e1appintune01.cooley.com, e2appintune01.cooley.com, e3appintune01.cooley.com, euappintune.cooley.com, lnappintune01.cooley.com, lnappintune02.cooley.com, snappintune.cooley.com, snappintune01.cooley.com, snappintune02.cooley.com, testappintune01.cooley.com, u1appintune.cooley.com, u1appintune01.cooley.com, u1appintune02.cooley.com, u2appintune01.cooley.com, ukappintune.cooley.com
Subject: prisma.cooley.com
Issuer: Sectigo Public Server Authentication CA OV R36
SANs: prisma.cooley.com, www.prisma.cooley.com
Subject: quarantine.cooley.com
Issuer: Sectigo Public Server Authentication CA OV R36
SANs: quarantine.cooley.com
Subject: cooley.com
Issuer: Sectigo RSA Organization Validation Secure Server CA
SANs: auth-stage.cooley.com, authoring-beta.cooley.com, authoring-id.cooley.com, authoring.cooley.com, bankruptcy.cooley.com, capx.cooley.com, cc.cooley.com, cdp.cooley.com, cooley.com, cooleypubco.com, ed.cooley.com, fundlawyer.cooley.com, products.cooley.com, pubco.cooley.com, pubcocooley.com, sle.cooley.com, stage.cooley.com, thefundlawyer.com, thefundlawyer.cooley.com, uklitigation.cooley.com, www.cooley.com
Subject: ascooley.com
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: ascooley.com, ds.ascooley.com, ds425.ascooley.com
Subject: prisma.cooley.com
Issuer: Sectigo Public Server Authentication CA OV R36
SANs: prisma.cooley.com, www.prisma.cooley.com
Subject: prisma.cooley.com
Issuer: Sectigo Public Server Authentication CA OV R36
SANs: prisma.cooley.com, www.prisma.cooley.com
Subject: lighthouse.cooley.com
Issuer: lighthouse.cooley.com
SANs: lighthouse.cooley.com, u1lighthouse01.cooley.com, u2lighthouse01.cooley.com

IPs Citing This Domain

No citing IPs found yet

As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

Origin IP Origin ASN CDN ASN Confidence Reasoning
184.84.106.140 AS55836 AS13335 95% cert 8e01f4b9… served by 184.84.106.140 (AS55836) carries SAN access.cooley.com which currently resolves through Cloudflare (AS13335) at 104.18.14.121, 104.18.15.121
104.85.144.193 AS55836 AS13335 95% cert 8e01f4b9… served by 104.85.144.193 (AS55836) carries SAN access.cooley.com which currently resolves through Cloudflare (AS13335) at 104.18.14.121, 104.18.15.121
155.46.183.34 AS8681 AS13335 95% cert 1f0cff11… served by 155.46.183.34 (AS8681) carries SAN access.cooley.com which currently resolves through Cloudflare (AS13335) at 104.18.14.121, 104.18.15.121
140.209.236.1 AS394089 AS16509 95% cert a8b598f4… served by 140.209.236.1 (AS394089) carries SAN prisma.cooley.com which currently resolves through Amazon (AS16509) at 165.85.75.224

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.

Type Value First seen Last seen
TXT v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com ~all 2026-06-02 03:45:33.953 2026-06-15 00:54:33.538
SRV _sips._tcp 0 0 5061 u1cmexpe.cooley.com 2026-06-02 03:45:33.953 2026-06-15 00:54:33.538
NS ns2-01.azure-dns.net 2026-06-02 03:45:33.953 2026-06-15 00:54:33.538
MX 100 mxa-0016f301.gslb.pphosted.com 2026-06-02 03:45:33.953 2026-06-15 00:54:33.538
NS ns4-01.azure-dns.info 2026-06-02 03:45:33.953 2026-06-15 00:54:33.538
SRV _sips._tcp 0 0 5061 u2cmexpe.cooley.com 2026-06-02 03:45:33.953 2026-06-15 00:54:33.538
SRV _sip._tcp 0 0 5060 u1cmexpe.cooley.com 2026-06-02 03:45:33.953 2026-06-15 00:54:33.538
TXT atlassian-domain-verification=81/Est1gF8rrYqnmiLlSnGWwLAn3TQL9ufViO/8UWMk337gVIOaEP6ohpaKBLp1p 2026-06-02 03:45:33.953 2026-06-15 00:54:33.538
NS ns3-01.azure-dns.org 2026-06-02 03:45:33.953 2026-06-15 00:54:33.538
SRV _sip._tcp 0 0 5060 video2.cooley.com 2026-06-02 03:45:33.953 2026-06-15 00:54:33.538
A 13.107.213.57 2026-06-02 03:45:33.953 2026-06-15 00:54:33.538
NS ns1-01.azure-dns.com 2026-06-02 03:45:33.953 2026-06-15 00:54:33.538
MX 100 mxb-0016f301.gslb.pphosted.com 2026-06-02 03:45:33.953 2026-06-15 00:54:33.538
A 13.107.246.57 2026-06-02 03:45:33.953 2026-06-15 00:54:33.538
SRV _sip._tcp 0 0 5060 u2cmexpe.cooley.com 2026-06-02 03:45:33.953 2026-06-15 00:54:33.538