Domain

nordeus.com

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

DNS Check HTTP Check Run Full Scan .com TLD

Run a live full scan of nordeus.com

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now

Hosting IPs

A/AAAA targets

Subdomains

CT + scan + body

Record Types

seen in DNS

Observed Certs

in our scans

DNS Records

35.244.186.224

AAAA

—

1 aspmx.l.google.com, 10 aspmx2.googlemail.com, 10 aspmx3.googlemail.com, 5 alt1.aspmx.l.google.com, 5 alt2.aspmx.l.google.com

ns-cloud-a1.googledomains.com, ns-cloud-a2.googledomains.com, ns-cloud-a3.googledomains.com, ns-cloud-a4.googledomains.com

TXT

MS=ms23692662, anthropic-domain-verification-g6wyz2=FX2KYFDLMljREeozy1O9hozku, asv=9f04ca9090f54fdbc94936c127c9a2e5, atlassian-domain-verification=+Ev3XO4ZYq+yWqhKoqUx+uPiW46JE6buhOdBPxkz+Qhn2kIXFnDuwwTqHIvzN4Qd, cursor-domain-verification-763aye=2kwZJpQ9XUDGRxroVOKAeXb2H, dtm-domain-verification=lGQeAasLEesn2388KITL9FxHmbZ_j9UBhGWiRxbzBjc, google-site-verification=hDqWM_QIbTMz7u1abDO8u73ZlQaPDwEBfGspScP4MTM, have-i-been-pwned-verification=36fd412e0ab9ee7ab84a587170b98e06

CNAME

—

CAA

—

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.

Subdomain	Resolves to	Last seen
cookbook.nordeus.com	172.217.23.243 2a00:1450:400c:c0c::79	2026-06-05 20:37:47.759
relocation.nordeus.com	64.233.167.121 2a00:1450:400a:1001::79	2026-06-22 11:37:16.092
compliance.prod.nordeus.com	34.54.235.197	2026-07-26 12:24:35.677
dev.nordeus.com		1970-01-01 00:00:00.000
events.nordeus.com	34.149.165.99	2026-07-21 09:30:34.743
nordeus.com	35.244.186.224	2026-05-26 18:01:13.258
nrdbeg-dc1.hq.nordeus.com		1970-01-01 00:00:00.000
payment.nordeus.com	34.36.130.5	2026-07-21 10:32:26.139
prometheus.prod.nordeus.com	34.149.207.218	2026-07-17 02:03:19.494
quality.nordeus.com	34.110.171.89	2026-06-18 14:00:18.795
social-media-cdn.nordeus.com	34.96.93.177	2026-07-22 23:01:08.738
temp.nordeus.com	34.117.247.163	2026-07-23 22:34:44.981
test.nordeus.com		1970-01-01 00:00:00.000
vpn.nordeus.com	139.138.249.9	2026-07-22 22:23:09.022
web.test.nordeus.com	34.54.130.36	2026-07-26 07:09:07.752
website.test.nordeus.com		1970-01-01 00:00:00.000
www.nordeus.com	35.244.186.224	2026-05-26 09:47:12.208
www.nrdbeg-dc1.hq.nordeus.com		1970-01-01 00:00:00.000
yum.nordeus.com		1970-01-01 00:00:00.000

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

34.117.247.163:443 c445ca639e99…

Subject: temp.nordeus.com

Issuer: WR3

SANs: temp.nordeus.com

139.138.249.14:443 2e0dd1ee997a…

Subject: *.vpn.nordeus.com

Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1

SANs: *.vpn.nordeus.com, vpn.nordeus.com

139.138.249.14:443 2e0dd1ee997a…

Subject: *.vpn.nordeus.com

Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1

SANs: *.vpn.nordeus.com, vpn.nordeus.com

139.138.249.8:443 2e0dd1ee997a…

Subject: *.vpn.nordeus.com

Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1

SANs: *.vpn.nordeus.com, vpn.nordeus.com

IPs Citing This Domain

Hosts whose HTML body references this domain. Strong signal for origin/mirror/embed discovery.

35.186.200.80:443 href · ×2

46.224.91.231:80 href · ×1

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

No origin-IP leaks detected (yet)

Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Domain timeline pending

Passive-DNS history accumulates as our forward-DNS crawler observes A/AAAA/MX/NS/TXT records over time.