Domain
edu.ph
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of edu.ph
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
Hosting IPs
—
A/AAAA targets
Subdomains
—
CT + scan + body
Record Types
—
seen in DNS
Observed Certs
—
in our scans
DNS Records
A
—
AAAA
—
MX
—
NS
—
TXT
—
CNAME
—
CAA
—
WHOIS / Registration
Registration data planned
Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.
Subdomains
Subdomain enumeration pending
Every subdomain ever issued a TLS cert under this apex — extracted from Certificate Transparency logs, our own scan observations and body references.
Tech Stack
Tech detection pending
Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.
TLS Certificates
Subject: *.trimexcolleges.edu.ph
Issuer: Alibaba Cloud GCC R46 AlphaSSL CA 2025
SANs: *.trimexcolleges.edu.ph, trimexcolleges.edu.ph
Subject: *.ust-legazpi.edu.ph
Issuer: Sectigo RSA Domain Validation Secure Server CA
SANs: *.ust-legazpi.edu.ph, ust-legazpi.edu.ph
Subject: dame.uplb.edu.ph
Issuer: YE1
SANs: dame.uplb.edu.ph
Subject: *.benilde.edu.ph
Issuer: GlobalSign ECC OV SSL CA 2018
SANs: *.benilde.edu.ph, benilde.edu.ph
Subject: api-test.amis.uplb.edu.ph
Issuer: E7
SANs: api-test.amis.uplb.edu.ph, test.amis.uplb.edu.ph
Subject: *.usls.edu.ph
Issuer: Go Daddy Secure Certificate Authority - G2
SANs: *.usls.edu.ph, usls.edu.ph
Subject: *.smccnasipit.edu.ph
Issuer: Sectigo RSA Domain Validation Secure Server CA
SANs: *.smccnasipit.edu.ph, smccnasipit.edu.ph
Subject: alumni.mcu.edu.ph
Issuer: YE1
SANs: alumni.mcu.edu.ph
Subject: *.up.edu.ph
Issuer: ZeroSSL RSA Domain Secure Site CA
SANs: *.up.edu.ph, up.edu.ph
Subject: sis1.bicol-u.edu.ph
Issuer: YR2
SANs: sis1.bicol-u.edu.ph
Subject: library.mmma.edu.ph
Issuer: YE1
SANs: library-admin.mmma.edu.ph, library.mmma.edu.ph
Subject: ndsms.nddu.edu.ph
Issuer: Go Daddy Secure Certificate Authority - G2
SANs: ndsms.nddu.edu.ph
Subject: *.pup.edu.ph
Issuer: Entrust OV TLS Issuing RSA CA 2
SANs: *.pup.edu.ph
Subject: mabida.upmin.edu.ph
Issuer: YR2
SANs: mabida.upmin.edu.ph
Subject: kb.mcu.edu.ph
Issuer: YE1
SANs: kb.mcu.edu.ph
Subject: *.pup.edu.ph
Issuer: Entrust OV TLS Issuing RSA CA 2
SANs: *.pup.edu.ph
Subject: *.tsu.edu.ph
Issuer: GlobalSign RSA OV SSL CA 2018
SANs: *.tsu.edu.ph, tsu.edu.ph
Subject: dbsv.paref.edu.ph
Issuer: YR2
SANs: dbsv.paref.edu.ph
Subject: dione.batstate-u.edu.ph
Issuer: YR2
SANs: dione.batstate-u.edu.ph
Subject: tala.dlsu.edu.ph
Issuer: Proxmox Virtual Environment
SANs: 10.0.0.20, 127.0.0.1, localhost, tala, tala.dlsu.edu.ph
Subject: rbpms-submit.dap.edu.ph
Issuer: YE1
SANs: rbpms-submit.dap.edu.ph
Subject: portal.eee.upd.edu.ph
Issuer: YR1
SANs: portal.eee.upd.edu.ph
Subject: dawa.isap.edu.ph
Issuer: YE2
SANs: dawa.isap.edu.ph
Subject: aklat-taan.upd.edu.ph
Issuer: YE2
SANs: aklat-taan.upd.edu.ph
Subject: piseexpress.pccr.edu.ph
Issuer: YE1
SANs: piseexpress.pccr.edu.ph
Subject: employee.test.pccr.edu.ph
Issuer: YR2
SANs: employee.test.pccr.edu.ph, test.pccr.edu.ph
Subject: ncmc.edu.ph
Issuer: Go Daddy Secure Certificate Authority - G2
SANs: edu.ncmcmaranding.com, fs.ncmcmaranding.com, ncmc.edu.ph, ncmcmaranding.com, www.ncmc.edu.ph, www.ncmcmaranding.com
Subject: *.adnu.edu.ph
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.adnu.edu.ph, adnu.edu.ph
Subject: develop-nmsc-library.pinnacle.edu.ph
Issuer: YR1
SANs: develop-nmsc-library-staff.pinnacle.edu.ph, develop-nmsc-library.pinnacle.edu.ph
Subject: *.smccnasipit.edu.ph
Issuer: Sectigo RSA Domain Validation Secure Server CA
SANs: *.smccnasipit.edu.ph, smccnasipit.edu.ph
IPs Citing This Domain
No citing IPs found yet
As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.
Origin / IP-Leak
USP
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
| Origin IP | Origin ASN | CDN ASN | Confidence | Reasoning |
|---|---|---|---|---|
| 172.105.122.164 | AS63949 | AS13335 | 95% | cert c1d7ebbc… served by 172.105.122.164 (AS63949) carries SAN sjtit.edu.ph which currently resolves through Cloudflare (AS13335) at 172.67.210.32, 104.21.16.55, 2606:4700:3032::6815:1037, 2606:4700:3031::ac43:d220 |
| 210.213.146.169 | AS9299 | AS13335 | 95% | cert 08e4409e… served by 210.213.146.169 (AS9299) carries SAN adzu.edu.ph which currently resolves through Cloudflare (AS13335) at 104.26.5.242, 104.26.4.242, 172.67.70.152, 2606:4700:20::ac43:4698 |
| 103.29.251.21 | AS58437 | AS13335 | 95% | cert b271497e… served by 103.29.251.21 (AS58437) carries SAN mapua.edu.ph which currently resolves through Cloudflare (AS13335) at 104.18.24.75, 104.18.25.75, 2606:4700::6812:184b, 2606:4700::6812:194b |
| 203.177.100.186 | AS4775 | AS13335 | 95% | cert dce61975… served by 203.177.100.186 (AS4775) carries SAN uic.edu.ph which currently resolves through Cloudflare (AS13335) at 104.21.59.67, 172.67.217.152, 2606:4700:3031::6815:3b43, 2606:4700:3034::ac43:d998 |
| 120.28.145.193 | AS132199 | AS13335 | 95% | cert 8d158c34… served by 120.28.145.193 (AS132199) carries SAN boardroom.mcu.edu.ph which currently resolves through Cloudflare (AS13335) at 172.67.73.148, 104.26.4.72, 104.26.5.72, 2606:4700:20::681a:448 |
| 103.231.241.17 | AS133498 | AS13335 | 95% | cert 01d5f6ed… served by 103.231.241.17 (AS133498) carries SAN manila.dlsu.edu.ph which currently resolves through Cloudflare (AS13335) at 172.66.161.211, 104.20.42.168, 2606:4700:10::ac42:a1d3, 2606:4700:10::6814:2aa8 |
| 103.231.241.17 | AS133498 | AS15169 | 95% | cert 01d5f6ed… served by 103.231.241.17 (AS133498) carries SAN mail.dlsu.edu.ph which currently resolves through Google (AS15169) at 142.251.20.121, 2a00:1450:4001:c13::79, 108.177.15.121, 2a00:1450:4001:c1f::79 |
| 103.231.241.17 | AS133498 | AS8075 | 95% | cert 01d5f6ed… served by 103.231.241.17 (AS133498) carries SAN animoment.dlsu.edu.ph which currently resolves through Microsoft (AS8075) at 20.43.132.132 |
| 180.193.216.137 | AS9299 | AS13335 | 95% | cert 09573c3a… served by 180.193.216.137 (AS9299) carries SAN admission.cspc.edu.ph which currently resolves through Cloudflare (AS13335) at 104.21.21.141, 172.67.199.27, 2606:4700:3035::6815:158d, 2606:4700:3033::ac43:c71b |
| 119.92.169.195 | AS9299 | AS13335 | 95% | cert 979f1561… served by 119.92.169.195 (AS9299) carries SAN citrusproject.nvsu.edu.ph which currently resolves through Cloudflare (AS13335) at 172.67.73.29, 104.26.15.96, 104.26.14.96, 2606:4700:20::ac43:491d |
| 139.162.45.84 | AS63949 | AS13335 | 95% | cert e7df8b43… served by 139.162.45.84 (AS63949) carries SAN citkitcharao.edu.ph which currently resolves through Cloudflare (AS13335) at 172.67.206.153, 104.21.44.249, 2606:4700:3037::ac43:ce99, 2606:4700:3036::6815:2cf9 |
| 50.116.16.243 | AS63949 | AS13335 | 95% | cert 8f78c42a… served by 50.116.16.243 (AS63949) carries SAN upb-geportal.upou.edu.ph which currently resolves through Cloudflare (AS13335) at 104.20.24.175, 172.66.151.11, 2606:4700:10::ac42:970b, 2606:4700:10::6814:18af |
| 104.64.205.142 | AS63949 | AS13335 | 95% | cert f03f9b9a… served by 104.64.205.142 (AS63949) carries SAN cums.lsjfi.edu.ph which currently resolves through Cloudflare (AS13335) at 188.114.97.3, 188.114.96.3, 2a06:98c1:3120::3, 2a06:98c1:3121::3 |
| 143.44.187.122 | AS17639 | AS13335 | 95% | cert 431bc90a… served by 143.44.187.122 (AS17639) carries SAN applicant.mcpi.edu.ph which currently resolves through Cloudflare (AS13335) at 172.67.217.38, 104.21.61.243, 2606:4700:3030::6815:3df3, 2606:4700:3030::ac43:d926 |
| 158.178.228.73 | AS31898 | AS13335 | 95% | cert 554e797e… served by 158.178.228.73 (AS31898) carries SAN ust.edu.ph which currently resolves through Cloudflare (AS13335) at 104.18.14.162, 104.18.15.162, 2606:4700::6812:ea2, 2606:4700::6812:fa2 |
| 104.64.205.142 | AS63949 | AS13335 | 95% | cert bacc332a… served by 104.64.205.142 (AS63949) carries SAN cums.lsjfi.edu.ph which currently resolves through Cloudflare (AS13335) at 188.114.97.3, 188.114.96.3, 2a06:98c1:3120::3, 2a06:98c1:3121::3 |
| 172.104.56.127 | AS63949 | AS13335 | 95% | cert 884d75e9… served by 172.104.56.127 (AS63949) carries SAN smccnasipit.edu.ph which currently resolves through Cloudflare (AS13335) at 172.67.72.155, 104.26.11.147, 104.26.10.147, 2606:4700:20::681a:a93 |
| 104.155.229.31 | AS396982 | AS13335 | 95% | cert e4fef208… served by 104.155.229.31 (AS396982) carries SAN dtrs.upou.edu.ph which currently resolves through Cloudflare (AS13335) at 104.20.24.175, 172.66.151.11, 2606:4700:10::ac42:970b, 2606:4700:10::6814:18af |
| 202.92.144.73 | AS45209 | AS13335 | 95% | cert 98a4bbc5… served by 202.92.144.73 (AS45209) carries SAN actsproject.uplb.edu.ph which currently resolves through Cloudflare (AS13335) at 172.66.167.22, 104.20.31.145, 2606:4700:10::ac42:a716, 2606:4700:10::6814:1f91 |
| 172.104.57.125 | AS63949 | AS13335 | 95% | cert 6d6d1a8a… served by 172.104.57.125 (AS63949) carries SAN koha-intra.upou.edu.ph which currently resolves through Cloudflare (AS13335) at 104.20.24.175, 172.66.151.11, 2606:4700:10::ac42:970b, 2606:4700:10::6814:18af |
| 126.209.86.102 | AS152584 | AS30148 | 95% | cert c85829d0… served by 126.209.86.102 (AS152584) carries SAN tup.edu.ph which currently resolves through Sucuri (AS30148) at 192.124.249.12 |
| 122.55.22.98 | AS9299 | AS13335 | 95% | cert 0440ca00… served by 122.55.22.98 (AS9299) carries SAN wfp.bicol-u.edu.ph which currently resolves through Cloudflare (AS13335) at 188.114.97.3, 188.114.96.3, 2a06:98c1:3120::3, 2a06:98c1:3121::3 |
| 202.92.144.23 | AS45209 | AS13335 | 95% | cert ffcbf188… served by 202.92.144.23 (AS45209) carries SAN dashboard.uplb.edu.ph which currently resolves through Cloudflare (AS13335) at 172.66.167.22, 104.20.31.145, 2606:4700:10::ac42:a716, 2606:4700:10::6814:1f91 |
| 103.131.95.124 | AS17448 | AS13335 | 95% | cert 98f1f6e3… served by 103.131.95.124 (AS17448) carries SAN asu.edu.ph which currently resolves through Cloudflare (AS13335) at 172.67.204.43, 104.21.22.99, 2606:4700:3032::6815:1663, 2606:4700:3034::ac43:cc2b |
| 103.29.250.90 | AS58437 | AS13335 | 95% | cert 9a7e0913… served by 103.29.250.90 (AS58437) carries SAN mapua.edu.ph which currently resolves through Cloudflare (AS13335) at 104.18.24.75, 104.18.25.75, 2606:4700::6812:184b, 2606:4700::6812:194b |
Threat Intelligence
Domain threat-intel pending
Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.
History
Domain timeline pending
Passive-DNS history accumulates as our forward-DNS crawler observes A/AAAA/MX/NS/TXT records over time.