Domain

underscorejs.org

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

DNS Check HTTP Check Run Full Scan .org TLD

Run a live full scan of underscorejs.org

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now

Hosting IPs

—

A/AAAA targets

Subdomains

—

CT + scan + body

Record Types

—

seen in DNS

Observed Certs

—

in our scans

DNS Records

104.21.25.112, 172.67.134.18

AAAA

2606:4700:3031::ac43:8612, 2606:4700:3033::6815:1970, 2606:4700:3035::ac43:8612, 2606:4700:3037::6815:1970

—

logan.ns.cloudflare.com, robin.ns.cloudflare.com

TXT

—

CNAME

—

CAA

—

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Subdomain enumeration pending

Every subdomain ever issued a TLS cert under this apex — extracted from Certificate Transparency logs, our own scan observations and body references.

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

Certificate observations pending

TLS certs naming this domain in subject or SANs will appear here as our scan-layer catches them.

IPs Citing This Domain

Hosts whose HTML body references this domain. Strong signal for origin/mirror/embed discovery.

75.101.132.227:443 href · ×2

67.225.241.27:443 href · ×2

154.114.70.13:443 href · ×2

54.201.35.103:443 href · ×2

35.170.166.62:80 href · ×2

54.165.169.182:80 href · ×2

103.110.127.159:443 href · ×2

13.58.40.240:443 href · ×2

213.212.117.110:443 href · ×2

45.56.80.226:443 href · ×2

159.89.134.179:443 href · ×1

149.56.244.156:443 href · ×1

13.56.31.91:443 href · ×1

3.110.183.142:443 href · ×1

15.207.91.211:80 href · ×1

212.84.169.91:443 href · ×1

118.139.182.91:80 href · ×1

176.126.243.244:443 href · ×1

52.212.62.109:80 href · ×1

158.69.172.126:80 href · ×1

52.39.126.186:443 href · ×1

129.121.39.93:443 href · ×1

3.230.229.12:443 href · ×1

62.210.217.180:443 href · ×1

89.168.64.207:443 href · ×1

3.122.202.121:80 href · ×1

34.224.104.180:80 href · ×1

52.62.34.196:443 href · ×1

216.92.232.76:80 href · ×1

35.240.102.58:80 href · ×1

23.239.23.148:443 href · ×1

13.50.28.98:80 href · ×1

54.246.227.50:80 href · ×1

180.54.80.199:81 href · ×1

194.122.164.174:8080 href · ×1

188.165.225.210:443 href · ×1

125.196.6.210:443 href · ×1

31.0.246.161:80 href · ×1

162.214.157.107:443 href · ×1

13.234.169.112:80 href · ×1

3.111.74.72:443 href · ×1

140.227.227.11:8080 href · ×1

3.214.202.45:80 href · ×1

104.236.64.52:443 href · ×1

194.122.170.115:8080 href · ×1

78.46.90.103:80 href · ×1

161.97.187.126:80 href · ×1

43.139.122.53:80 href · ×1

203.175.11.177:443 href · ×1

82.127.77.64:80 href · ×1

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

No origin-IP leaks detected (yet)

Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Domain timeline pending

Passive-DNS history accumulates as our forward-DNS crawler observes A/AAAA/MX/NS/TXT records over time.