Domain
ku.dk
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of ku.dk
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
Hosting IPs
—
A/AAAA targets
Subdomains
—
CT + scan + body
Record Types
—
seen in DNS
Observed Certs
—
in our scans
DNS Records
A
130.226.237.173
AAAA
—
MX
10 ku-dk.mail.protection.outlook.com
NS
ns1.ku.dk, ns2.ku.dk
TXT
6c2c989745ec4c9da07a07aa9545b83e45af62d32706b6c50f, HARICA-B6JlbUNpY6FLRGLjreG, HARICA-KALlY5x8AK07V5fax3e, HARICA-Lf19ojXj0uGvZSRtbuY, HARICA-iGPCG7sxTBIHB30kPXW, MS=ms39433918, University of Copenhagen, ZOOM_verify_XLNNoB6ABQscd0JcOGAjPn
CNAME
—
CAA
0 iodef "mailto:hostmaster@ku.dk", 0 issue "amazon.com", 0 issue "comodoca.com", 0 issue "digicert.com", 0 issue "globalsign.com", 0 issue "harica.gr", 0 issue "letsencrypt.org", 0 issue "sectigo.com"
WHOIS / Registration
Registration data planned
Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.
Subdomains
Subdomain enumeration pending
Every subdomain ever issued a TLS cert under this apex — extracted from Certificate Transparency logs, our own scan observations and body references.
Tech Stack
Tech detection pending
Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.
TLS Certificates
Subject: *.ku.dk
Issuer: GEANT TLS RSA 1
SANs: *.ku.dk
Subject: *.ku.dk
Issuer: GEANT TLS RSA 1
SANs: *.ku.dk
Subject: www.jdku.dk
Issuer: GlobalSign GCC R6 AlphaSSL CA 2025
SANs: jdku.dk, www.jdku.dk
Subject: phagecloudstwo.ku.dk
Issuer: R11
SANs: phagecloudstwo.ku.dk
Subject: *.ku.dk
Issuer: GEANT TLS RSA 1
SANs: *.ku.dk
Subject: *.net.ku.dk
Issuer: GEANT OV RSA CA 4
SANs: *.net.ku.dk, net.ku.dk
Subject: cphunigis.ku.dk
Issuer: R13
SANs: cphunigis.ku.dk
Subject: cope.science.ku.dk
Issuer: YE1
SANs: cope.science.ku.dk
Subject: glpages.nbi.ku.dk
Issuer: R12
SANs: *.glpages.nbi.ku.dk, eastgrip.org, glpages.nbi.ku.dk, python-intro.nbi.ku.dk, www.eastgrip.org, www.python-intro.nbi.ku.dk
Subject: andreord.nors.ku.dk
Issuer: R11
SANs: andreord.nors.ku.dk, fedterm.nors.ku.dk, wordnetloom.nors.ku.dk, wordties.nors.ku.dk
Subject: innodia.cpr.ku.dk
Issuer: YR1
SANs: innodia.cpr.ku.dk
Subject: specify-au.science.ku.dk
Issuer: YE1
SANs: specify-au.science.ku.dk
Subject: *.net.ku.dk
Issuer: GEANT OV RSA CA 4
SANs: *.net.ku.dk, net.ku.dk
Subject: specify-oesm.science.ku.dk
Issuer: YE2
SANs: specify-oesm.science.ku.dk
Subject: mfmapp01fw.ku.dk
Issuer: R13
SANs: mfmapp01fw.ku.dk
Subject: indico.nbi.ku.dk
Issuer: E7
SANs: indico.nbi.ku.dk
Subject: specify-nhma.science.ku.dk
Issuer: YE1
SANs: specify-nhma.science.ku.dk
Subject: indkoeb22.ki.ku.dk
Issuer: R13
SANs: indkoeb22.ki.ku.dk
Subject: specify-msjn.science.ku.dk
Issuer: YE1
SANs: specify-msjn.science.ku.dk
Subject: support.nbi.ku.dk
Issuer: R13
SANs: support.nbi.ku.dk
Subject: indkoeb22.ki.ku.dk
Issuer: R13
SANs: indkoeb22.ki.ku.dk
Subject: specify-naturama.science.ku.dk
Issuer: E8
SANs: specify-naturama.science.ku.dk
Subject: cope.science.ku.dk
Issuer: R3
SANs: cope.science.ku.dk
Subject: specify-test3.science.ku.dk
Issuer: E7
SANs: specify-test3.science.ku.dk
Subject: specify-staging.science.ku.dk
Issuer: E7
SANs: specify-staging.science.ku.dk
IPs Citing This Domain
No citing IPs found yet
As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.
Origin / IP-Leak
USP
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
No origin-IP leaks detected (yet)
Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.
Threat Intelligence
Domain threat-intel pending
Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.
History
Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.
| Type | Value | First seen | Last seen |
|---|---|---|---|
| TXT | 6c2c989745ec4c9da07a07aa9545b83e45af62d32706b6c50f | 2026-06-01 17:30:09.807 | 2026-07-27 13:11:59.618 |
| CAA | 0 issue "letsencrypt.org" | 2026-06-01 17:30:09.807 | 2026-07-27 13:11:59.618 |
| TXT | google-site-verification=lE8sxzeQUpSEaCB6mw86kRSKRemtlQs5T_TTdleZ4oU | 2026-06-01 17:30:09.807 | 2026-07-27 13:11:59.618 |
| CAA | 0 issue "sectigo.com" | 2026-06-01 17:30:09.807 | 2026-07-27 13:11:59.618 |
| TXT | bw=LJaWj0Fpx3l/58xzv+wMmBx/rnLA3H9DxR51iD2lNFGx | 2026-06-01 17:30:09.807 | 2026-07-27 13:11:59.618 |
| TXT | have-i-been-pwned-verification=dweb_brscgph7vtipz0x274w61rb7 | 2026-06-01 17:30:09.807 | 2026-07-27 13:11:59.618 |
| TXT | MS=ms39433918 | 2026-06-01 17:30:09.807 | 2026-07-27 13:11:59.618 |
| TXT | HARICA-iGPCG7sxTBIHB30kPXW | 2026-06-01 17:30:09.807 | 2026-07-27 13:11:59.618 |
| CAA | 0 issuewild "harica.gr" | 2026-06-01 17:30:09.807 | 2026-07-27 13:11:59.618 |
| TXT | apple-domain-verification=0dcdbMopnajFHOG4 | 2026-06-01 17:30:09.807 | 2026-07-27 13:11:59.618 |
| NS | ns2.ku.dk | 2026-06-01 17:30:09.807 | 2026-07-27 13:11:59.618 |
| CAA | 0 issue "amazon.com" | 2026-06-01 17:30:09.807 | 2026-07-27 13:11:59.618 |
| NS | ns1.ku.dk | 2026-06-01 17:30:09.807 | 2026-07-27 13:11:59.618 |
| TXT | adobe-idp-site-verification=668054226d35e53f8389a1ffef3706cd9e2536340ec998eb37738a0cb3a7ec58 | 2026-06-01 17:30:09.807 | 2026-07-27 13:11:59.618 |
| TXT | University of Copenhagen | 2026-06-01 17:30:09.807 | 2026-07-27 13:11:59.618 |
| SRV | _sipfederationtls._tcp 10 10 5061 sipacc.ku.dk | 2026-06-01 17:30:09.807 | 2026-07-27 13:11:59.618 |
| CAA | 0 issue "digicert.com" | 2026-06-01 17:30:09.807 | 2026-07-27 13:11:59.618 |
| TXT | klaviyo-site-verification=TxLiZh | 2026-06-01 17:30:09.807 | 2026-07-27 13:11:59.618 |
| TXT | HARICA-B6JlbUNpY6FLRGLjreG | 2026-06-01 17:30:09.807 | 2026-07-27 13:11:59.618 |
| TXT | jamf-site-verification=kJWBMvj-Hk0Uq4Vyz-_QVg | 2026-06-01 17:30:09.807 | 2026-07-27 13:11:59.618 |
| CAA | 0 issue "harica.gr" | 2026-06-01 17:30:09.807 | 2026-07-27 13:11:59.618 |
| TXT | ZOOM_verify_XLNNoB6ABQscd0JcOGAjPn | 2026-06-01 17:30:09.807 | 2026-07-27 13:11:59.618 |
| CAA | 0 issuewild "letsencrypt.org" | 2026-06-01 17:30:09.807 | 2026-07-27 13:11:59.618 |
| TXT | hibp-verify=dweb_2d2dhvr7zwre7wokvnhrl3mq | 2026-06-01 17:30:09.807 | 2026-07-27 13:11:59.618 |
| CAA | 0 iodef "mailto:hostmaster@ku.dk" | 2026-06-01 17:30:09.807 | 2026-07-27 13:11:59.618 |
| TXT | HARICA-KALlY5x8AK07V5fax3e | 2026-06-01 17:30:09.807 | 2026-07-27 13:11:59.618 |
| CAA | 0 issue "globalsign.com" | 2026-06-01 17:30:09.807 | 2026-07-27 13:11:59.618 |
| A | 130.226.237.173 | 2026-06-01 17:30:09.807 | 2026-07-27 13:11:59.618 |
| TXT | v=spf1 ip4:193.162.253.130 include:bulk.spf.ku.dk include:spf.protection.outlook.com a:unicph-gw.ku.dk a:mail.npkhosting.dk ~all | 2026-06-01 17:30:09.807 | 2026-07-27 13:11:59.618 |
| CAA | 0 issue "comodoca.com" | 2026-06-01 17:30:09.807 | 2026-07-27 13:11:59.618 |
| TXT | HARICA-Lf19ojXj0uGvZSRtbuY | 2026-06-01 17:30:09.807 | 2026-07-27 13:11:59.618 |
| MX | 10 ku-dk.mail.protection.outlook.com | 2026-06-01 17:30:09.807 | 2026-07-27 13:11:59.618 |