Domain
berkeley.edu
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of berkeley.edu
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
Hosting IPs
—
A/AAAA targets
Subdomains
—
CT + scan + body
Record Types
—
seen in DNS
Observed Certs
—
in our scans
DNS Records
A
141.193.213.20, 141.193.213.21
AAAA
—
MX
1 aspmx.l.google.com, 10 alt3.aspmx.l.google.com, 10 alt4.aspmx.l.google.com, 5 alt1.aspmx.l.google.com, 5 alt2.aspmx.l.google.com
NS
adns1.berkeley.edu, adns2.berkeley.edu, adns3.berkeley.edu
TXT
755083C8153C5822F6BEC780B02BE761, 896263912-18360412, MS=10BE0CF63C8BD5AFF9A6EF7B71763B098A905719, MS=ms19521665, MS=ms37758698, ZOOM_verify_RirbP7N1QWC3Zzm02oL4Cw, adobe-idp-site-verification=a113c870-3c49-4b4a-b3a4-31e1cf1860cb, amazonses:IuakF7FVH1Y7h0Kap7krqHwRvoXFOzSET+Ri1VBHziA=
CNAME
—
CAA
—
WHOIS / Registration
Registration data planned
Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.
Subdomains
Subdomain enumeration pending
Every subdomain ever issued a TLS cert under this apex — extracted from Certificate Transparency logs, our own scan observations and body references.
Tech Stack
Tech detection pending
Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.
TLS Certificates
Subject: lists.cog.berkeley.edu
Issuer: YR1
SANs: lists.cog.berkeley.edu, lists.erso.berkeley.edu
Subject: click.ucb.berkeley.edu
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: click.ucb.berkeley.edu
Subject: app.ce.berkeley.edu
Issuer: YR2
SANs: app-prod.ce.berkeley.edu, app.ce.berkeley.edu
Subject: erso-linux8.berkeley.edu
Issuer: R13
SANs: erso-linux8.berkeley.edu
Subject: analytics-qa.udar.berkeley.edu
Issuer: InCommon RSA OV SSL CA 3
SANs: analytics-qa.udar.berkeley.edu
Subject: libproxy-staging.berkeley.edu
Issuer: InCommon RSA Server CA 2
SANs: *.libproxy-staging.berkeley.edu, libproxy-staging.berkeley.edu
Subject: fallingrocks.ocf.berkeley.edu
Issuer: YE1
SANs: apt.ocf.berkeley.edu, apt.ocf.io, fallingrocks.ocf.berkeley.edu, fallingrocks.ocf.io, mirrors.ocf.berkeley.edu, mirrors.ocf.io
Subject: idsgdev9.eecs.berkeley.edu
Issuer: InCommon RSA Server CA 2
SANs: idsgdev8.eecs.berkeley.edu, idsgdev9.eecs.berkeley.edu, iris-qa.eecs.berkeley.edu, maillogs.eecs.berkeley.edu
Subject: bpr-test.calnet.berkeley.edu
Issuer: Sectigo Public Server Authentication CA OV R36
SANs: bidms-web-t01.calnet.berkeley.edu, bpr-test.calnet.berkeley.edu
Subject: eml.berkeley.edu
Issuer: YR1
SANs: eml.berkeley.edu
Subject: fiona.abc.berkeley.edu
Issuer: InCommon RSA OV SSL CA 3
SANs: fiona.abc.berkeley.edu
Subject: bolowiki.berkeley.edu
Issuer: YE1
SANs: bolo.berkeley.edu, bolowiki.berkeley.edu, fiesta.berkeley.edu
Subject: ucpathapis.berkeley.edu
Issuer: InCommon RSA OV SSL CA 3
SANs: api-agw-prod-02.ist.berkeley.edu, ucpathapis.berkeley.edu
Subject: bpr.calnet.berkeley.edu
Issuer: Sectigo Public Server Authentication CA OV R36
SANs: bidms-web-p01.calnet.berkeley.edu, bpr.calnet.berkeley.edu, mycalnet.berkeley.edu
Subject: gsppi.berkeley.edu
Issuer: InCommon RSA OV SSL CA 3
SANs: dev-gsppi.berkeley.edu, gsppi.berkeley.edu, lambda.ist.berkeley.edu, omega.sdsc.berkeley.edu
Subject: NPIC1108E.berkeley.edu
Issuer: NPIC1108E.berkeley.edu
SANs: NPIC1108E.berkeley.edu
Subject: bomgar-pa01.ist.berkeley.edu
Issuer: InCommon RSA Server CA 2
SANs: bomgar-pa01.ist.berkeley.edu, cts-p-bomgar.berkeley.edu, support.berkeley.edu
Subject: ssl-dev.vpn.berkeley.edu
Issuer: InCommon RSA OV SSL CA 3
SANs: ssl-dev.vpn.berkeley.edu
Subject: faculty.haas.berkeley.edu
Issuer: InCommon RSA Server CA 2
SANs: faculty.haas.berkeley.edu
Subject: jss.biostat.berkeley.edu
Issuer: InCommon RSA Server CA 2
SANs: jss.biostat.berkeley.edu
Subject: simplehelp-dev.haas.berkeley.edu
Issuer: InCommon RSA Server CA 2
SANs: simplehelp-dev.haas.berkeley.edu
Subject: cea.peer.berkeley.edu
Issuer: YE1
SANs: cea.peer.berkeley.edu
Subject: tableau.haas.berkeley.edu
Issuer: InCommon RSA Server CA 2
SANs: tableau.haas.berkeley.edu
Subject: jrm-lorien-test-01.ist.berkeley.edu
Issuer: InCommon RSA OV SSL CA 3
SANs: firesale-test.ist.berkeley.edu, jrm-lorien-test-01.ist.berkeley.edu
Subject: bfs-pxy-prd-15.is.berkeley.edu
Issuer: InCommon RSA OV SSL CA 3
SANs: bfs-pxy-prd-15.is.berkeley.edu, ebill.is.berkeley.edu, ebillprod.is.berkeley.edu, supplier.is.berkeley.edu, supplierprod.is.berkeley.edu
Subject: NPI4F9798.berkeley.edu
Issuer: NPI4F9798.berkeley.edu
SANs: NPI4F9798.berkeley.edu
Subject: bcs-pxy-prd-01.is.berkeley.edu
Issuer: InCommon RSA OV SSL CA 3
SANs: bcs-pxy-prd-01.is.berkeley.edu, bcs-vip-prd-01.is.berkeley.edu, bcsint-tmp.is.berkeley.edu, bcsint.is.berkeley.edu, bcsmsg-tmp.is.berkeley.edu, bcsmsg.is.berkeley.edu, bcsweb-tmp.is.berkeley.edu, bcsweb.is.berkeley.edu
Subject: cssr-pw02.ist.berkeley.edu
Issuer: YR1
SANs: ccwip.berkeley.edu, cssr-pw02.ist.berkeley.edu, cssr.berkeley.edu
Subject: admsys-rails-prod-02.ist.berkeley.edu
Issuer: InCommon RSA OV SSL CA 3
SANs: admsys-rails-prod-02.ist.berkeley.edu, apbears.berkeley.edu, apbears.ist.berkeley.edu, burgbook.berkeley.edu, burgbook.ist.berkeley.edu, caauth.berkeley.edu, caauth.ist.berkeley.edu, fn.berkeley.edu, fn.ist.berkeley.edu, time.berkeley.edu, time.ist.berkeley.edu, vspa-surveys.berkeley.edu, vspa-surveys.ist.berkeley.edu
Subject: bio-mercury4.cog.berkeley.edu
Issuer: InCommon RSA OV SSL CA 3
SANs: bio-mercury4.cog.berkeley.edu, io.berkeley.edu, iop.berkeley.edu, iop4.berkeley.edu
IPs Citing This Domain
Hosts whose HTML body references this domain. Strong signal for origin/mirror/embed discovery.
3.142.232.52:80
href · ×2
132.231.13.10:443
href · ×2
138.68.17.193:443
href · ×2
157.245.249.66:80
href · ×1
169.229.197.66:443
href · ×1
128.32.244.190:80
href · ×1
169.229.197.65:443
href · ×1
129.132.202.92:80
href · ×1
169.229.248.247:80
href · ×1
Origin / IP-Leak
USP
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
| Origin IP | Origin ASN | CDN ASN | Confidence | Reasoning |
|---|---|---|---|---|
| 128.32.189.59 | AS25 | AS54113 | 95% | cert 58d0ece0… served by 128.32.189.59 (AS25) carries SAN chemistry.berkeley.edu which currently resolves through Fastly (AS54113) at 2620:12a:8000::2, 2620:12a:8001::2, 23.185.0.2 |
| 5.44.101.43 | AS8648 | AS209242 | 95% | cert 0795511a… served by 5.44.101.43 (AS8648) carries SAN berkeley.edu which currently resolves through Cloudflare (AS209242) at 141.193.213.21, 141.193.213.20 |
| 34.19.80.62 | AS396982 | AS13335 | 95% | cert 1d3cbe63… served by 34.19.80.62 (AS396982) carries SAN my.berkeley.edu which currently resolves through Cloudflare (AS13335) at 104.16.226.234, 104.16.227.234, 2606:4700::6810:e3ea, 2606:4700::6810:e2ea |
| 136.152.225.167 | AS25 | AS209242 | 95% | cert 7421eee4… served by 136.152.225.167 (AS25) carries SAN haas.berkeley.edu which currently resolves through Cloudflare (AS209242) at 141.193.213.21, 141.193.213.20 |
CT-Log Evidence
Certificates from public Certificate Transparency logs whose subject or SAN names this domain — including historic certs we never observed live.
1451c24d32668c15…
sectigo · elephant2026h1
Subject: berkeley.edu
Issuer: WE1
SANs: berkeley.edu
Valid: 2025-12-20 01:30:38 → 2026-03-20 02:30:37
c07f5c4c18271699…
sectigo · elephant2026h1
Subject: berkeley.edu
Issuer: WE1
SANs: berkeley.edu
Valid: 2025-12-20 01:30:38 → 2026-03-20 02:30:37
306d859a05359618…
cloudflare · nimbus2026
Subject: berkeley.edu
Issuer: WE1
SANs: berkeley.edu
Valid: 2025-10-22 01:03:28 → 2026-01-20 02:03:21
306d859a05359618…
sectigo · elephant2026h1
Subject: berkeley.edu
Issuer: WE1
SANs: berkeley.edu
Valid: 2025-10-22 01:03:28 → 2026-01-20 02:03:21
Threat Intelligence
Domain threat-intel pending
Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.
History
Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.
| Type | Value | First seen | Last seen |
|---|---|---|---|
| NS | adns3.berkeley.edu | 2026-05-26 08:23:40.752 | 2026-07-21 00:17:53.604 |
| MX | 10 alt3.aspmx.l.google.com | 2026-05-26 08:23:40.752 | 2026-07-21 00:17:53.604 |
| TXT | brevo-code:a2b2aef0282cf9caec92be7bed7630ad | 2026-05-26 08:23:40.752 | 2026-07-21 00:17:53.604 |
| TXT | docusign=25bb9bc1-b377-48ce-a907-61472fca6261 | 2026-05-26 08:23:40.752 | 2026-07-21 00:17:53.604 |
| TXT | apple-domain-verification=ZDtApcKYPmKfYxn4 | 2026-05-26 08:23:40.752 | 2026-07-21 00:17:53.604 |
| TXT | amazonses:IuakF7FVH1Y7h0Kap7krqHwRvoXFOzSET+Ri1VBHziA= | 2026-05-26 08:23:40.752 | 2026-07-21 00:17:53.604 |
| TXT | adobe-idp-site-verification=a113c870-3c49-4b4a-b3a4-31e1cf1860cb | 2026-05-26 08:23:40.752 | 2026-07-21 00:17:53.604 |
| TXT | sending_domain102272=da1fdb1bce80fcb235c498ec3ad47745fed6ea7c6dc03752d88318531e6b07b7 | 2026-05-26 08:23:40.752 | 2026-07-21 00:17:53.604 |
| TXT | MS=ms19521665 | 2026-05-26 08:23:40.752 | 2026-07-21 00:17:53.604 |
| TXT | iContact1462072 | 2026-05-26 08:23:40.752 | 2026-07-21 00:17:53.604 |
| TXT | iContact1583632 | 2026-05-26 08:23:40.752 | 2026-07-21 00:17:53.604 |
| NS | adns2.berkeley.edu | 2026-05-26 08:23:40.752 | 2026-07-21 00:17:53.604 |
| TXT | ZOOM_verify_RirbP7N1QWC3Zzm02oL4Cw | 2026-05-26 08:23:40.752 | 2026-07-21 00:17:53.604 |
| TXT | atlassian-domain-verification=RIwGoMGAwFoHKm3AJg0bhFvuzEkRseqI6LStzthTqt4dWfA6Mqm5OCHFbZd1BJ9e | 2026-05-26 08:23:40.752 | 2026-07-21 00:17:53.604 |
| TXT | MS=ms37758698 | 2026-05-26 08:23:40.752 | 2026-07-21 00:17:53.604 |
| TXT | google-site-verification=loQrJWyMsMB249uINb-AsRGTWVoLdTc44Td3aMGn-NE | 2026-05-26 08:23:40.752 | 2026-07-21 00:17:53.604 |
| SRV | _xmpp-server._tcp 20 0 5269 alt1.xmpp-server.l.google.com | 2026-05-26 08:23:40.752 | 2026-07-21 00:17:53.604 |
| TXT | google-site-verification=fL93jj-VPnl_5wdFDh26YshzKVPraWAurHaBCu-k-Xw | 2026-05-26 08:23:40.752 | 2026-07-21 00:17:53.604 |
| SRV | _xmpp-server._tcp 5 0 5269 xmpp-server.l.google.com | 2026-05-26 08:23:40.752 | 2026-07-21 00:17:53.604 |
| SRV | _xmpp-server._tcp 0 0 5269 ocs-pedge01.berkeley.edu | 2026-05-26 08:23:40.752 | 2026-07-21 00:17:53.604 |
| TXT | google-site-verification=R5hbazPMfJqtXtm6OHprlDpBnSThQvYDrt-i-IqZvjE | 2026-05-26 08:23:40.752 | 2026-07-21 00:17:53.604 |
| TXT | jamf-site-verification=2jicltwxCxH93ep4OhO0dA | 2026-05-26 08:23:40.752 | 2026-07-21 00:17:53.604 |
| A | 141.193.213.20 | 2026-05-26 08:23:40.752 | 2026-07-21 00:17:53.604 |
| TXT | google-site-verification=C4YkQW0t-gtD5FpVWdjxAipEUofVb2p0KmW3xFaUJeA | 2026-05-26 08:23:40.752 | 2026-07-21 00:17:53.604 |
| TXT | iContact1393487 | 2026-05-26 08:23:40.752 | 2026-07-21 00:17:53.604 |
| TXT | google-site-verification=CDuttEoV44OF0dD7qwidnTj3wvYxIPz05W6MKEZfKYc | 2026-05-26 08:23:40.752 | 2026-07-21 00:17:53.604 |
| A | 141.193.213.21 | 2026-05-26 08:23:40.752 | 2026-07-21 00:17:53.604 |
| TXT | klaviyo-site-verification=SWYLuM | 2026-05-26 08:23:40.752 | 2026-07-21 00:17:53.604 |
| MX | 5 alt2.aspmx.l.google.com | 2026-05-26 08:23:40.752 | 2026-07-21 00:17:53.604 |
| NS | adns1.berkeley.edu | 2026-05-26 08:23:40.752 | 2026-07-21 00:17:53.604 |
| MX | 10 alt4.aspmx.l.google.com | 2026-05-26 08:23:40.752 | 2026-07-21 00:17:53.604 |
| TXT | 896263912-18360412 | 2026-05-26 08:23:40.752 | 2026-07-21 00:17:53.604 |
| MX | 1 aspmx.l.google.com | 2026-05-26 08:23:40.752 | 2026-07-21 00:17:53.604 |
| TXT | MS=10BE0CF63C8BD5AFF9A6EF7B71763B098A905719 | 2026-05-26 08:23:40.752 | 2026-07-21 00:17:53.604 |
| SRV | _xmpp-server._tcp 20 0 5269 alt2.xmpp-server.l.google.com | 2026-05-26 08:23:40.752 | 2026-07-21 00:17:53.604 |
| SRV | _xmpp-server._tcp 20 0 5269 alt3.xmpp-server.l.google.com | 2026-05-26 08:23:40.752 | 2026-07-21 00:17:53.604 |
| TXT | autodesk-domain-verification=ccDWtL-BsuXH4WkjoUiP | 2026-05-26 08:23:40.752 | 2026-07-21 00:17:53.604 |
| MX | 5 alt1.aspmx.l.google.com | 2026-05-26 08:23:40.752 | 2026-07-21 00:17:53.604 |
| SRV | _xmpp-server._tcp 20 0 5269 alt4.xmpp-server.l.google.com | 2026-05-26 08:23:40.752 | 2026-07-21 00:17:53.604 |
| TXT | brevo-code:ee0b01818d57850991280d3999efc841 | 2026-05-26 08:23:40.752 | 2026-07-21 00:17:53.604 |
| TXT | brevo-code:e1e8345a4a2352cdbd9d6979093f2aec | 2026-05-26 08:23:40.752 | 2026-07-21 00:17:53.604 |
| TXT | 755083C8153C5822F6BEC780B02BE761 | 2026-05-26 08:23:40.752 | 2026-05-27 14:28:54.453 |
| TXT | docusign=31f4475e-737f-4a3a-b6ea-60b1ac273c95 | 2026-05-26 08:23:40.752 | 2026-07-21 00:17:53.604 |
| TXT | v=spf1 include:_spf.berkeley.edu include:_spf2.berkeley.edu include:_spf.google.com include:_spf.qualtrics.com include:servers.mcsv.net include:spf.mailjet.com a:c.spf.service-now.com ~all | 2026-05-26 08:23:40.752 | 2026-07-21 00:17:53.604 |
| TXT | canva-site-verification=HJ933woS6KmNfYtvOaJHZA | 2026-06-16 01:01:42.871 | 2026-07-21 00:17:53.604 |