Domain
nginx.com
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of nginx.com
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
Hosting IPs
—
A/AAAA targets
Subdomains
—
CT + scan + body
Record Types
—
seen in DNS
Observed Certs
—
in our scans
DNS Records
A
159.60.134.0
AAAA
—
MX
10 mx1.hc5801-97.iphmx.com, 10 mx2.hc5801-97.iphmx.com
NS
ns1.f5clouddns.com, ns2.f5clouddns.com
TXT
MS=ms49391549, atlassian-domain-verification=Iv/Cm1UielF25k9FOYOH+QWS9iqMJUFKzUNVB9RqH3uwzIEPziCRKryf2/dKbws8, citrix-verification-code=7e4cb6c1-154c-48ed-bdfa-65d310d86ec1, docusign=ec7fb56d-ee75-4979-b3e5-10bfbff0ab9e, dropbox-domain-verification=gl56nwvh4szl, google-site-verification=JrwNJWq0sLGx6H5Voxu-bQyH6-Fj6ifMzyNzIppraFc, google-site-verification=Q2uo9nRIztLd374gimJdAb-Bfkw-MdywUFjH59AAkeE, google-site-verification=m76lJj_wpFCOdcQ91QngVK7pk83_xTMtIp9m0Vi8qjQ
CNAME
—
CAA
—
WHOIS / Registration
Registration data planned
Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.
Subdomains
Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.
| Subdomain | Resolves to | Last seen |
|---|---|---|
| docs.nginx.com | 2026-07-24 23:43:35.842 | |
| demo.nginx.com | 2026-05-26 16:35:41.755 | |
| receiver.amplify.nginx.com | 2026-06-15 13:26:28.533 | |
| acme-test.testenv.ctrl.nginx.com | 1970-01-01 00:00:00.000 | |
| amplify.nginx.com | 1970-01-01 00:00:00.000 | |
| imap.nginx.com | 1970-01-01 00:00:00.000 | |
| internal-beta-docs.nginx.com | 2026-05-26 22:14:46.475 | |
| internal-docs.nginx.com | 2026-06-16 09:21:55.413 | |
| mail.nginx.com | 1970-01-01 00:00:00.000 | |
| mwl.nginx.com | 1970-01-01 00:00:00.000 | |
| nginx.com | 2026-07-26 05:01:06.184 | |
| node1-test.nginx.com | 1970-01-01 00:00:00.000 | |
| ns3.nginx.com | 1970-01-01 00:00:00.000 | |
| packages.amplify.nginx.com | 1970-01-01 00:00:00.000 | |
| srv.nginx.com | 1970-01-01 00:00:00.000 | |
| tempo.detools.testenv.ctrl.nginx.com | 1970-01-01 00:00:00.000 | |
| university.nginx.com | 2026-06-04 01:46:01.496 | |
| www.nginx.com | 2026-07-25 23:19:12.188 |
Tech Stack
Tech detection pending
Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.
TLS Certificates
Subject: nginx.com
Issuer: nginx.com
SANs: nginx.com
Subject: node1-test.nginx.com
Issuer: node1-test.nginx.com
SANs: node1-test.nginx.com
Subject: internal-docs.nginx.com
Issuer: Entrust OV TLS Issuing RSA CA 2
SANs: internal-docs.nginx.com
Subject: oma.cloudenginx.com
Issuer: E7
SANs: oma.cloudenginx.com
Subject: nginx.com
Issuer: nginx.com
SANs: nginx.com
Subject: internal-beta-docs.nginx.com
Issuer: Entrust OV TLS Issuing RSA CA 2
SANs: internal-beta-docs.nginx.com
IPs Citing This Domain
Hosts whose HTML body references this domain. Strong signal for origin/mirror/embed discovery.
92.205.16.157:80
href · ×61
185.125.202.164:443
href · ×8
78.47.41.108:80
href · ×7
85.206.165.10:80
href · ×4
8.130.129.82:80
href · ×4
57.129.81.164:80
href · ×4
49.232.193.232:80
href · ×4
20.198.188.84:80
href · ×4
47.99.197.164:80
href · ×4
213.166.80.177:80
href · ×4
192.3.204.106:80
href · ×4
118.145.227.48:80
href · ×4
212.83.164.196:80
href · ×4
103.142.106.227:80
href · ×4
142.132.186.29:80
href · ×4
112.140.160.9:80
href · ×4
217.168.245.231:80
href · ×3
37.27.253.196:80
href · ×3
185.222.242.229:80
href · ×3
45.77.212.239:80
href · ×3
38.47.125.239:80
href · ×3
138.199.233.160:80
href · ×3
146.190.2.137:443
href · ×3
161.35.196.245:80
href · ×3
120.224.29.34:80
href · ×3
178.128.16.212:443
href · ×3
64.176.229.35:80
href · ×3
23.238.47.132:80
href · ×3
167.235.129.38:80
href · ×3
1.13.206.2:80
href · ×3
47.100.55.165:80
href · ×3
117.56.220.206:8080
href · ×3
92.112.127.204:80
href · ×3
150.158.97.94:80
href · ×3
3.123.55.63:80
href · ×3
3.112.55.118:80
href · ×3
138.124.87.11:80
href · ×3
140.143.203.197:80
href · ×3
162.55.56.61:80
href · ×3
143.198.222.32:80
href · ×3
161.97.129.210:80
href · ×3
147.45.103.138:80
href · ×3
5.79.125.90:80
href · ×3
167.86.125.136:80
href · ×3
213.193.253.132:443
href · ×3
103.21.130.231:80
href · ×3
38.173.221.8:80
href · ×3
207.180.224.95:80
href · ×3
138.201.53.242:80
href · ×3
159.69.184.244:80
href · ×3
Origin / IP-Leak
USP
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
No origin-IP leaks detected (yet)
Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.
CT-Log Evidence
Certificates from public Certificate Transparency logs whose subject or SAN names this domain — including historic certs we never observed live.
824ab6f8f294d8b7…
sectigo · elephant2026h1
Subject: nginx.com
Issuer: R13
SANs: *.nginx.com, nginx.com
Valid: 2026-01-22 09:33:49 → 2026-04-22 09:33:48
9e18221517104e4f…
sectigo · elephant2026h1
Subject: nginx.com
Issuer: R13
SANs: *.nginx.com, nginx.com
Valid: 2026-01-22 09:33:49 → 2026-04-22 09:33:48
61565ca6c11e2c6b…
sectigo · elephant2026h1
Subject: nginx.com
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: nginx.com
Valid: 2026-01-06 00:00:00 → 2026-04-06 23:59:59
c67ababb4bd2028a…
sectigo · elephant2026h1
Subject: nginx.com
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: nginx.com
Valid: 2026-01-06 00:00:00 → 2026-04-06 23:59:59
91f947fa29dbb6b3…
sectigo · elephant2026h1
Subject: *.nginx.com
Issuer: E8
SANs: *.nginx.com, nginx.com
Valid: 2026-01-01 15:32:55 → 2026-04-01 15:32:54
ff68a7741a3ea8af…
cloudflare · nimbus2026
Subject: *.nginx.com
Issuer: E7
SANs: *.nginx.com, nginx.com
Valid: 2025-11-02 16:11:57 → 2026-01-31 16:11:56
ff68a7741a3ea8af…
sectigo · elephant2026h1
Subject: *.nginx.com
Issuer: E7
SANs: *.nginx.com, nginx.com
Valid: 2025-11-02 16:11:57 → 2026-01-31 16:11:56
0e75dd34dbcf9197…
cloudflare · nimbus2026
Subject: nginx.com
Issuer: R13
SANs: *.nginx.com, nginx.com
Valid: 2025-10-24 23:31:25 → 2026-01-22 23:31:24
0e75dd34dbcf9197…
sectigo · elephant2026h1
Subject: nginx.com
Issuer: R13
SANs: *.nginx.com, nginx.com
Valid: 2025-10-24 23:31:25 → 2026-01-22 23:31:24
Threat Intelligence
Domain threat-intel pending
Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.
History
Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.
| Type | Value | First seen | Last seen |
|---|---|---|---|
| A | 159.60.134.0 | 2026-05-25 21:54:50.392 | 2026-07-26 05:01:06.184 |
| TXT | google-site-verification=m76lJj_wpFCOdcQ91QngVK7pk83_xTMtIp9m0Vi8qjQ | 2026-05-25 22:05:29.416 | 2026-07-26 05:01:06.184 |
| TXT | dropbox-domain-verification=gl56nwvh4szl | 2026-05-25 22:05:29.416 | 2026-07-26 05:01:06.184 |
| TXT | google-site-verification=Q2uo9nRIztLd374gimJdAb-Bfkw-MdywUFjH59AAkeE | 2026-05-25 22:05:29.416 | 2026-07-26 05:01:06.184 |
| NS | ns1.f5clouddns.com | 2026-05-25 22:05:29.416 | 2026-07-26 05:01:06.184 |
| TXT | google-site-verification=uUuJd81gBFhTSzGpOtmzRFJndx0uHcICLcicMmjP_eQ | 2026-05-25 22:05:29.416 | 2026-07-26 05:01:06.184 |
| TXT | MS=ms49391549 | 2026-05-25 22:05:29.416 | 2026-07-26 05:01:06.184 |
| TXT | citrix-verification-code=7e4cb6c1-154c-48ed-bdfa-65d310d86ec1 | 2026-05-25 22:05:29.416 | 2026-07-26 05:01:06.184 |
| MX | 10 mx2.hc5801-97.iphmx.com | 2026-05-25 22:05:29.416 | 2026-07-26 05:01:06.184 |
| TXT | docusign=ec7fb56d-ee75-4979-b3e5-10bfbff0ab9e | 2026-05-25 22:05:29.416 | 2026-07-26 05:01:06.184 |
| NS | ns2.f5clouddns.com | 2026-05-25 22:05:29.416 | 2026-07-26 05:01:06.184 |
| TXT | google-site-verification=JrwNJWq0sLGx6H5Voxu-bQyH6-Fj6ifMzyNzIppraFc | 2026-05-25 22:05:29.416 | 2026-07-26 05:01:06.184 |
| MX | 10 mx1.hc5801-97.iphmx.com | 2026-05-25 22:05:29.416 | 2026-07-26 05:01:06.184 |
| TXT | v=spf1 ip4:206.251.255.60/30 ip4:94.130.165.194/32 ip4:206.251.255.64/31 ip4:104.219.104.14 ip4:104.219.105.14 ip4:104.219.106.14 ip4:104.219.107.14 ip4:167.89.0.0/17 ip4:208.117.48.0/20 ip4:50.31.32.0/19 ip4:198.37.144.0/20 ip4:198.21.0.0/21 ip4:192.254.112.0/20 ip4:168.245.0.0/17 ip4:149.72.0.0/16 include:spf.protection.outlook.com include:_spf.google.com include:mktomail.com include:spf1.mailgun.org include:spf2.mailgun.org ~all | 2026-05-25 22:05:29.416 | 2026-07-24 14:29:57.609 |
| TXT | libera-verification=libera-RDmNyEJHyhbWgEZwNf3L9fUN | 2026-05-25 22:05:29.416 | 2026-07-26 05:01:06.184 |
| TXT | atlassian-domain-verification=Iv/Cm1UielF25k9FOYOH+QWS9iqMJUFKzUNVB9RqH3uwzIEPziCRKryf2/dKbws8 | 2026-05-25 22:05:29.416 | 2026-07-26 05:01:06.184 |
| TXT | v=spf1 ip4:104.219.104.14 ip4:104.219.105.14 ip4:104.219.106.14 ip4:104.219.107.14 include:spf.protection.outlook.com exists:%{i}.spf.hc5801-97.iphmx.com ~all | 2026-07-24 14:39:07.778 | 2026-07-26 05:01:06.184 |