Domain
bookshop.org
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of bookshop.org
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
Hosting IPs
11
A/AAAA targets
Subdomains
20
CT + scan + body
Record Types
6
seen in DNS
Observed Certs
7
in our scans
DNS Records
A
104.18.22.66, 104.18.23.66
AAAA
2606:4700::6812:1642, 2606:4700::6812:1742
MX
10 aspmx.l.google.com, 20 alt1.aspmx.l.google.com, 30 alt2.aspmx.l.google.com, 40 aspmx2.googlemail.com, 50 aspmx3.googlemail.com
NS
apollo.ns.cloudflare.com, ruth.ns.cloudflare.com
TXT
ahrefs-site-verification_2c49a867aa13e18e52b7083647a1aa7312d3514bcdee3ec1ed243ea120afc2d2, anthropic-domain-verification-07nhpa=QqdcbG07wqlfx1TRbVvrlLESe, google-site-verification=3Btb75TI9y6X-MJbQ5BcabKiuTGVwn6LAaRdSHGkrGU, google-site-verification=ACxp7MHBdbSvmGuFrPl6OWaGf9UDxUvM0Ih_wzyqGfs, google-site-verification=Qzi6Q_It3GxD1jIOO_dRHviJACbUKnfWAMPbleX63bc, google-site-verification=yJsL117HxmKp0FSw7cCXP9JS7oADMI_O7Dm4XFmcQg0, klaviyo-site-verification=RBxUNF, rippling-domain-verification=91d5f2d7a2d8fc35
CNAME
—
CAA
0 issue "comodoca.com", 0 issue "digicert.com; cansignhttpexchanges=yes", 0 issue "letsencrypt.org", 0 issue "pki.goog; cansignhttpexchanges=yes", 0 issue "ssl.com", 0 issuewild "comodoca.com", 0 issuewild "digicert.com; cansignhttpexchanges=yes", 0 issuewild "letsencrypt.org"
WHOIS / Registration
Registration data planned
Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.
Subdomains
Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.
| Subdomain | Resolves to | Last seen |
|---|---|---|
| bookshop.org | 2026-07-25 19:22:22.848 | |
| encr-us.bookshop.org | 2026-07-15 16:59:14.695 | |
| load.bkshpsst.bookshop.org | 2026-06-04 09:25:40.856 | |
| uk.bookshop.org | 2026-07-28 17:34:09.807 | |
| us2.bookshop.org | 2026-06-14 23:52:20.226 | |
| preferences.bookshop.org | 2026-07-27 12:21:18.087 |
Tech Stack
Tech detection pending
Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.
TLS Certificates
Subject: CloudFlare Origin Certificate
Issuer: C=US, O=CloudFlare\, Inc., OU=CloudFlare Origin SSL Certificate Authority, L=San Francisco, ST=California
SANs: *.bookshop.org, bookshop.org, us2.bookshop.org
IPs Citing This Domain
No citing IPs found yet
As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.
Origin / IP-Leak
USP
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
| Origin IP | Origin ASN | CDN ASN | Confidence | Reasoning |
|---|---|---|---|---|
| 34.120.115.15 | AS396982 | AS13335 | 95% | cert 900c7e0f… served by 34.120.115.15 (AS396982) carries SAN bookshop.org which currently resolves through Cloudflare (AS13335) at 104.18.22.66, 104.18.23.66, 2606:4700::6812:1642, 2606:4700::6812:1742 |
Threat Intelligence
Domain threat-intel pending
Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.
History
Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.
| Type | Value | First seen | Last seen |
|---|---|---|---|
| MX | 40 aspmx2.googlemail.com | 2026-05-26 02:54:15.517 | 2026-07-25 19:22:22.848 |
| CAA | 0 issue "comodoca.com" | 2026-05-26 02:54:15.517 | 2026-07-25 19:22:22.848 |
| MX | 20 alt1.aspmx.l.google.com | 2026-05-26 02:54:15.517 | 2026-07-25 19:22:22.848 |
| TXT | v=spf1 include:_spf.google.com include:sendgrid.net ~all include:mailgun.org ~all | 2026-05-26 02:54:15.517 | 2026-07-25 19:22:22.848 |
| CAA | 0 issuewild "comodoca.com" | 2026-05-26 02:54:15.517 | 2026-07-25 19:22:22.848 |
| TXT | rippling-domain-verification=91d5f2d7a2d8fc35 | 2026-05-26 02:54:15.517 | 2026-07-25 19:22:22.848 |
| TXT | unbounce463552 | 2026-05-26 02:54:15.517 | 2026-07-25 19:22:22.848 |
| TXT | google-site-verification=yJsL117HxmKp0FSw7cCXP9JS7oADMI_O7Dm4XFmcQg0 | 2026-05-26 02:54:15.517 | 2026-07-25 19:22:22.848 |
| TXT | google-site-verification=3Btb75TI9y6X-MJbQ5BcabKiuTGVwn6LAaRdSHGkrGU | 2026-05-26 02:54:15.517 | 2026-07-25 19:22:22.848 |
| MX | 30 alt2.aspmx.l.google.com | 2026-05-26 02:54:15.517 | 2026-07-25 19:22:22.848 |
| A | 104.18.23.66 | 2026-05-26 02:54:15.517 | 2026-07-25 19:22:22.848 |
| MX | 10 aspmx.l.google.com | 2026-05-26 02:54:15.517 | 2026-07-25 19:22:22.848 |
| CAA | 0 issue "ssl.com" | 2026-05-26 02:54:15.517 | 2026-07-25 19:22:22.848 |
| TXT | ahrefs-site-verification_2c49a867aa13e18e52b7083647a1aa7312d3514bcdee3ec1ed243ea120afc2d2 | 2026-05-26 02:54:15.517 | 2026-07-25 19:22:22.848 |
| NS | ruth.ns.cloudflare.com | 2026-05-26 02:54:15.517 | 2026-07-25 19:22:22.848 |
| CAA | 0 issuewild "digicert.com; cansignhttpexchanges=yes" | 2026-05-26 02:54:15.517 | 2026-07-25 19:22:22.848 |
| TXT | klaviyo-site-verification=RBxUNF | 2026-05-26 02:54:15.517 | 2026-07-25 19:22:22.848 |
| AAAA | 2606:4700::6812:1742 | 2026-05-26 02:54:15.517 | 2026-07-25 19:22:22.848 |
| CAA | 0 issuewild "ssl.com" | 2026-05-26 02:54:15.517 | 2026-07-25 19:22:22.848 |
| AAAA | 2606:4700::6812:1642 | 2026-05-26 02:54:15.517 | 2026-07-25 19:22:22.848 |
| A | 104.18.22.66 | 2026-05-26 02:54:15.517 | 2026-07-25 19:22:22.848 |
| NS | apollo.ns.cloudflare.com | 2026-05-26 02:54:15.517 | 2026-07-25 19:22:22.848 |
| MX | 50 aspmx3.googlemail.com | 2026-05-26 02:54:15.517 | 2026-07-25 19:22:22.848 |
| CAA | 0 issue "digicert.com; cansignhttpexchanges=yes" | 2026-05-26 02:54:15.517 | 2026-07-25 19:22:22.848 |
| CAA | 0 issue "pki.goog; cansignhttpexchanges=yes" | 2026-05-26 02:54:15.517 | 2026-07-25 19:22:22.848 |
| TXT | google-site-verification=ACxp7MHBdbSvmGuFrPl6OWaGf9UDxUvM0Ih_wzyqGfs | 2026-05-26 02:54:15.517 | 2026-07-25 19:22:22.848 |
| CAA | 0 issuewild "letsencrypt.org" | 2026-05-26 02:54:15.517 | 2026-07-25 19:22:22.848 |
| CAA | 0 issuewild "pki.goog; cansignhttpexchanges=yes" | 2026-05-26 02:54:15.517 | 2026-07-25 19:22:22.848 |
| CAA | 0 issue "letsencrypt.org" | 2026-05-26 02:54:15.517 | 2026-07-25 19:22:22.848 |
| TXT | anthropic-domain-verification-07nhpa=QqdcbG07wqlfx1TRbVvrlLESe | 2026-05-26 02:54:15.517 | 2026-07-25 19:22:22.848 |
| TXT | google-site-verification=Qzi6Q_It3GxD1jIOO_dRHviJACbUKnfWAMPbleX63bc | 2026-07-15 20:04:13.980 | 2026-07-25 19:22:22.848 |