Domain
list.lu
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of list.lu
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
Hosting IPs
89
A/AAAA targets
Subdomains
447
CT + scan + body
Record Types
5
seen in DNS
Observed Certs
4
in our scans
DNS Records
A
158.64.60.23
AAAA
—
MX
0 list-lu.mail.protection.outlook.com
NS
ns1.eurodns.com, ns2.eurodns.com, ns3.eurodns.com, ns4.eurodns.com
TXT
HARICA-81Kl8WTOAsvotTLrRVj, HARICA-bupKMp0XgLmP2qkR1ki, MS=1582DE2EAACDF60B7D48EE75C9B4B53E18E81556, adobe-idp-site-verification=4a716d12317f80e4536e4e825cac2d845ffbe5f6d7b8c7916a47d367d4cc9b17, anthropic-domain-verification-882hgq=9B6a0nJi0GiyNZqHqqFd0VMIg, apple-domain-verification=X2WU2KFfGhnX9u39, asv=35edb564da765b43641f22018caca480, brevo-code:9c8cde6823b603dd05afe61f929b202a
CNAME
—
CAA
—
WHOIS / Registration
Registration data planned
Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.
Subdomains
Subdomain enumeration pending
Every subdomain ever issued a TLS cert under this apex — extracted from Certificate Transparency logs, our own scan observations and body references.
Tech Stack
Tech detection pending
Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.
TLS Certificates
Subject: alist.luosu.top
Issuer: YR1
SANs: alist.luosu.top
Subject: ewers-gis.list.lu
Issuer: GEANT TLS RSA 1
SANs: ewers-gis.list.lu, rp-ewersgis.private.list.lu
Subject: liaison.list.lu
Issuer: GEANT TLS RSA 1
SANs: liaison.list.lu, www.liaison.list.lu
Subject: dmp.list.lu
Issuer: GEANT TLS RSA 1
SANs: dmp.list.lu, dmp.private.list.lu, itp-dmp.private.list.lu
Subject: appmfa.list.lu
Issuer: GEANT TLS RSA 1
SANs: appmfa.list.lu
Subject: iems.list.lu
Issuer: GEANT TLS RSA 1
SANs: erp-iems.private.list.lu, iems.list.lu
Subject: *.vdlbee.list.lu
Issuer: GEANT TLS RSA 1
SANs: *.vdlbee.list.lu, vdlbee.list.lu
Subject: analytics.list.lu
Issuer: GEANT TLS RSA 1
SANs: analytics.list.lu
Subject: api.semanticlca-sensors.list.lu
Issuer: GEANT TLS RSA 1
SANs: api.semanticlca-sensors.list.lu
Subject: lds-connector.list.lu
Issuer: GEANT TLS RSA 1
SANs: lds-connector.list.lu
Subject: retime-gis.list.lu
Issuer: GEANT TLS RSA 1
SANs: retime-gis.list.lu, rp-retime.private.list.lu
Subject: serafin.list.lu
Issuer: GEANT TLS RSA 1
SANs: serafin.list.lu
Subject: mail.pcspezialist.lu
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: autodiscover.pcspezialist.lu, mail.pcspezialist.lu, remote.pcspezialist.lu
Subject: itd-htraining.list.lu
Issuer: GEANT TLS RSA 1
SANs: itd-htraining.list.lu
Subject: ai-sandbox.list.lu
Issuer: GEANT TLS RSA 1
SANs: ai-sandbox.list.lu, rp-aisandbox.private.list.lu
Subject: maps.list.lu
Issuer: GEANT TLS ECC 1
SANs: maps.list.lu
Subject: lamda.list.lu
Issuer: GEANT TLS RSA 1
SANs: lamda.list.lu
Subject: d4h.list.lu
Issuer: GEANT TLS RSA 1
SANs: d4h.list.lu
Subject: ai-sandbox.aida.list.lu
Issuer: GEANT TLS RSA 1
SANs: ai-sandbox.aida.list.lu
Subject: ewers-gis.list.lu
Issuer: GEANT TLS RSA 1
SANs: ewers-gis.list.lu, rp-ewersgis.private.list.lu
Subject: con-net-platform.list.lu
Issuer: GEANT TLS RSA 1
SANs: con-net-platform.list.lu
Subject: framework.list.lu
Issuer: GEANT TLS RSA 1
SANs: erp-framework.private.list.lu, framework.list.lu
Subject: shift.list.lu
Issuer: GEANT TLS RSA 1
SANs: shift.list.lu
Subject: viana.list.lu
Issuer: GEANT TLS RSA 1
SANs: viana.list.lu
Subject: papyrus.list.lu
Issuer: GEANT TLS RSA 1
SANs: papyrus.list.lu
Subject: greener.list.lu
Issuer: GEANT TLS RSA 1
SANs: greener.list.lu, itp-greener.private.list.lu
Subject: d2et-openscience.list.lu
Issuer: GEANT TLS RSA 1
SANs: d2et-openscience.list.lu, rp-d2etopensci.private.list.lu
Subject: twisco.list.lu
Issuer: GEANT TLS RSA 1
SANs: twisco.list.lu
Subject: connet-bck.list.lu
Issuer: GEANT TLS RSA 1
SANs: connet-bck.list.lu
Subject: twisco-irma.list.lu
Issuer: GEANT TLS RSA 1
SANs: twisco-irma.list.lu
IPs Citing This Domain
No citing IPs found yet
As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.
Origin / IP-Leak
USP
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
No origin-IP leaks detected (yet)
Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.
Threat Intelligence
Domain threat-intel pending
Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.
History
Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.
| Type | Value | First seen | Last seen |
|---|---|---|---|
| TXT | docusign=b5542f48-1242-4423-a5c3-1dd7c2c49ea7 | 2026-06-04 21:47:25.595 | 2026-06-04 21:47:25.595 |
| TXT | brevo-code:9c8cde6823b603dd05afe61f929b202a | 2026-06-04 21:47:25.595 | 2026-06-04 21:47:25.595 |
| NS | ns4.eurodns.com | 2026-06-04 21:47:25.595 | 2026-06-04 21:47:25.595 |
| TXT | adobe-idp-site-verification=4a716d12317f80e4536e4e825cac2d845ffbe5f6d7b8c7916a47d367d4cc9b17 | 2026-06-04 21:47:25.595 | 2026-06-04 21:47:25.595 |
| TXT | spycloud-domain-verification=02173591-5a08-4097-ae8f-64d1432ccb4e | 2026-06-04 21:47:25.595 | 2026-06-04 21:47:25.595 |
| TXT | miro-verification=2081025cf48c9a89712df95270df827a79591fd4 | 2026-06-04 21:47:25.595 | 2026-06-04 21:47:25.595 |
| NS | ns2.eurodns.com | 2026-06-04 21:47:25.595 | 2026-06-04 21:47:25.595 |
| TXT | HARICA-bupKMp0XgLmP2qkR1ki | 2026-06-04 21:47:25.595 | 2026-06-04 21:47:25.595 |
| NS | ns3.eurodns.com | 2026-06-04 21:47:25.595 | 2026-06-04 21:47:25.595 |
| A | 158.64.60.23 | 2026-06-04 21:47:25.595 | 2026-06-04 21:47:25.595 |
| TXT | HARICA-81Kl8WTOAsvotTLrRVj | 2026-06-04 21:47:25.595 | 2026-06-04 21:47:25.595 |
| TXT | asv=35edb564da765b43641f22018caca480 | 2026-06-04 21:47:25.595 | 2026-06-04 21:47:25.595 |
| TXT | anthropic-domain-verification-882hgq=9B6a0nJi0GiyNZqHqqFd0VMIg | 2026-06-04 21:47:25.595 | 2026-06-04 21:47:25.595 |
| NS | ns1.eurodns.com | 2026-06-04 21:47:25.595 | 2026-06-04 21:47:25.595 |
| TXT | v=spf1 ip4:158.64.4.0/24 ip4:158.64.60.0/24 ip4:192.103.2.24 ip4:192.103.2.25 ip4:192.103.2.27 ip4:192.103.2.117 ip4:192.103.2.106 ip4:54.236.128.150 ip4:54.236.109.30 ip4:23.21.201.230 ip4:54.246.220.150 ip4:54.246.224.90 ip4:198.21.6.129 ?include:servers.mcsv.net include:spf.protection.outlook.com include:mg.bleexo.com include:_spf.profils.org ~all | 2026-06-04 21:47:25.595 | 2026-06-04 21:47:25.595 |
| MX | 0 list-lu.mail.protection.outlook.com | 2026-06-04 21:47:25.595 | 2026-06-04 21:47:25.595 |
| SRV | _sipfederationtls._tcp 100 1 5061 sipfed.online.lync.com | 2026-06-04 21:47:25.595 | 2026-06-04 21:47:25.595 |
| TXT | apple-domain-verification=X2WU2KFfGhnX9u39 | 2026-06-04 21:47:25.595 | 2026-06-04 21:47:25.595 |
| TXT | MS=1582DE2EAACDF60B7D48EE75C9B4B53E18E81556 | 2026-06-04 21:47:25.595 | 2026-06-04 21:47:25.595 |