Check-Host.cc

Try 1.1.1.1 AS13335 check-host.cc /country/de /tld/cc
Domain

nic.edu

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

DNS Check HTTP Check Run Full Scan .edu TLD

Run a live full scan of nic.edu

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now
Hosting IPs
20
A/AAAA targets
Subdomains
52
CT + scan + body
Record Types
5
seen in DNS
Observed Certs
5
in our scans

DNS Records

A
—
AAAA
—
MX
—
NS
—
TXT
—
CNAME
—
CAA
—

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.

Subdomain Resolves to Last seen
events.nic.edu
3.19.122.211 16.59.110.115 16.59.71.45 3.151.56.230 +2
2026-06-19 23:33:36.158
www.nic.edu
44.231.49.130 32.185.142.58 44.227.103.220 44.227.71.80 +2
2026-07-19 14:43:33.020
apply.nic.edu
100.24.161.219 35.171.125.31 54.156.216.231 35.153.124.200
2026-07-19 14:43:33.020
catalog.nic.edu
16.59.110.115 3.19.122.211 16.59.71.45
2026-06-19 23:33:36.158
nic.edu
52.223.47.149 35.71.187.224
2026-07-19 14:43:33.020
campusrec.nic.edu
1970-01-01 00:00:00.000
collui.nic.edu
1970-01-01 00:00:00.000
croa1.nic.edu
1970-01-01 00:00:00.000
ddi-1.net.nic.edu
1970-01-01 00:00:00.000
ddi-2.net.nic.edu
1970-01-01 00:00:00.000
ddi.net.nic.edu
1970-01-01 00:00:00.000
elk8-prod.nic.edu
1970-01-01 00:00:00.000
elk9-test.nic.edu
1970-01-01 00:00:00.000
ezproxy1.nic.edu
1970-01-01 00:00:00.000
ftpsec.nic.edu
198.187.233.68
2026-06-17 06:21:34.252
hvac.nic.edu
1970-01-01 00:00:00.000
hzn-cnx-01.nic.edu
1970-01-01 00:00:00.000
hzn-cnx-02.nic.edu
1970-01-01 00:00:00.000
hzn-cnx.nic.edu
1970-01-01 00:00:00.000
login.ezproxy1.nic.edu
1970-01-01 00:00:00.000
nextcatalog.nic.edu
1970-01-01 00:00:00.000
panorama.net.nic.edu
1970-01-01 00:00:00.000
panorama.nic.edu
1970-01-01 00:00:00.000
sftp.nic.edu
1970-01-01 00:00:00.000
tcollui.nic.edu
1970-01-01 00:00:00.000
tethoscon.nic.edu
1970-01-01 00:00:00.000
vc-prod1.vs.nic.edu
1970-01-01 00:00:00.000
websvcfe.nic.edu
198.187.233.43
2026-07-19 14:43:33.020
wft-idrac.nic.edu
1970-01-01 00:00:00.000
x-careertraining.nic.edu
1970-01-01 00:00:00.000

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

188.246.233.93:443 2291f6696871…
Subject: amoapi.unic.edu.ru
Issuer: R11
SANs: amoapi.unic.edu.ru, amoapitest.unic.edu.ru, api.azimut.unic.edu.ru, azimut.unic.edu.ru, test.api.azimut.unic.edu.ru, test.azimut.unic.edu.ru, test.widgets.unic.edu.ru, widgets.unic.edu.ru
103.245.251.182:443 bc1ad6a730d1…
Subject: *.bachvietpolytechnic.edu.vn
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.bachvietpolytechnic.edu.vn, bachvietpolytechnic.edu.vn
128.245.17.106:443 13451b5ecb59…
Subject: cloud.email.melbournepolytechnic.edu.au
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: cloud.email.melbournepolytechnic.edu.au
35.71.187.224:443 5f6dd8ab01b8…
Subject: nic.edu
Issuer: Amazon RSA 2048 M01
SANs: nic.edu, www.nic.edu
54.203.26.221:443 5d4f11776495…
Subject: nic.edu
Issuer: InCommon RSA Server CA
SANs: nic.edu, www.nic.edu
198.187.233.142:443 b96c520b82b4…
Subject: *.nic.edu
Issuer: InCommon RSA Server CA 2
SANs: *.nic.edu
103.245.251.182:443 bc1ad6a730d1…
Subject: *.bachvietpolytechnic.edu.vn
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.bachvietpolytechnic.edu.vn, bachvietpolytechnic.edu.vn
198.187.233.42:443 b96c520b82b4…
Subject: *.nic.edu
Issuer: InCommon RSA Server CA 2
SANs: *.nic.edu
162.144.48.37:443 8ed24844d3c8…
Subject: lagoscitypolytechnic.edu.ng
Issuer: Sectigo RSA Domain Validation Secure Server CA
SANs: lagoscitypolytechnic.edu.ng, www.lagoscitypolytechnic.edu.ng
203.12.139.122:443 e282f0a10cca…
Subject: *.libproxy.melbournepolytechnic.edu.au
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: *.libproxy.melbournepolytechnic.edu.au, libproxy.melbournepolytechnic.edu.au
198.187.233.99:443 b96c520b82b4…
Subject: *.nic.edu
Issuer: InCommon RSA Server CA 2
SANs: *.nic.edu
54.203.26.221:443 5d4f11776495…
Subject: nic.edu
Issuer: InCommon RSA Server CA
SANs: nic.edu, www.nic.edu

IPs Citing This Domain

No citing IPs found yet

As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

Origin IP Origin ASN CDN ASN Confidence Reasoning
198.187.233.142 AS27282 AS16509 95% cert b96c520b… served by 198.187.233.142 (AS27282) carries SAN nic.edu which currently resolves through Amazon (AS16509) at 35.71.187.224, 52.223.47.149
198.187.233.42 AS27282 AS16509 95% cert b96c520b… served by 198.187.233.42 (AS27282) carries SAN nic.edu which currently resolves through Amazon (AS16509) at 35.71.187.224, 52.223.47.149
198.187.233.99 AS27282 AS16509 95% cert b96c520b… served by 198.187.233.99 (AS27282) carries SAN nic.edu which currently resolves through Amazon (AS16509) at 35.71.187.224, 52.223.47.149

CT-Log Evidence

Certificates from public Certificate Transparency logs whose subject or SAN names this domain — including historic certs we never observed live.

15b0732d7ad4bde9… cloudflare · nimbus2026
Subject: nic.edu
Issuer: Amazon RSA 2048 M03
SANs: nic.edu, www.nic.edu
Valid: 2025-07-29 00:00:00 → 2026-08-27 23:59:59
22ec09d2a41392fd… cloudflare · nimbus2026
Subject: nic.edu
Issuer: Amazon RSA 2048 M04
SANs: nic.edu
Valid: 2025-07-29 00:00:00 → 2026-08-27 23:59:59
6779ae8f68347549… cloudflare · nimbus2026
Subject: nic.edu
Issuer: Amazon RSA 2048 M03
SANs: nic.edu, www.nic.edu
Valid: 2025-07-29 00:00:00 → 2026-08-27 23:59:59

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.

Type Value First seen Last seen
MX 0 nic-edu.mail.protection.outlook.com 2026-05-26 00:28:48.843 2026-07-19 14:43:33.020
TXT 66e12213-a25e-4610-83c9-25c9dcfdf9fc 2026-05-26 00:28:48.843 2026-07-19 14:43:33.020
NS nicns2.nic.edu 2026-05-26 00:28:48.843 2026-07-19 14:43:33.020
TXT mMBSgtdxdjYkIlqpvlER59ZNFNh93z4bipcjQvNfSDfXLZIWBalQMt0az4PMOxqNVZdrK/UOGC7MJBUqSk27vA== 2026-05-26 00:28:48.843 2026-07-19 14:43:33.020
TXT 3BB7339E3FC76F341B1504FC3FDB27E5 2026-05-26 00:28:48.843 2026-07-19 14:43:33.020
A 52.223.47.149 2026-05-26 00:28:48.843 2026-07-19 14:43:33.020
TXT apple-domain-verification=JpDaCTkfW38VXojY 2026-05-26 00:28:48.843 2026-07-19 14:43:33.020
TXT v=spf1 ip4:104.130.72.30 ip4:146.20.14.105 ip4:146.66.71.202 ip4:147.160.167.0/26 ip4:167.89.16.8 ip4:174.129.194.241 ip4:184.168.131.241 ip4:191.236.119.221 ip4:198.187.233.141 ip4:198.187.233.249 ip4:198.187.233.250 ip4:198.187.233.56 ip4:198.244.55.48 ip4:198.37.149.128 ip4:205.207.104.0/22 ip4:208.74.204.9 ip4:208.75.120.0/22 ip4:216.17.150.242 ip4:216.17.150.251 ip4:216.17.93.137 ip4:3.221.22.26 ip4:34.198.24.3 ip4:50.207.218.237 ip4:50.56.130.220 ip4:52.206.158.238 ip4:52.4.134.204 ip4:52.45.50.190 ip4:54.146.129.215 ip4:64.74.237.230 ip4:64.74.237.231 ip4:69.72.33.74 ip4:74.122.104.0/22 include:spf.protection.outlook.com include:spf.constantcontact.com include:_spf.psm.knowbe4.com include:spf.watermarkinsights.com include:_spf.regroupcloud.com ~all 2026-05-26 00:28:48.843 2026-07-19 14:43:33.020
TXT docusign=0a56abf1-c554-4332-903e-e322d448aa2e 2026-05-26 00:28:48.843 2026-07-19 14:43:33.020
TXT jdknstf566qlns04og2agra6pq 2026-05-26 00:28:48.843 2026-07-19 14:43:33.020
TXT paloaltonetworks-site-verification=65ebbc0106293f6f1554e452bff2fe4f0101b826c910bb5388fd628d10ed11bb 2026-05-26 00:28:48.843 2026-07-19 14:43:33.020
TXT brevo-code:8b90447cf39dbb54a090c2076316d03c 2026-05-26 00:28:48.843 2026-07-19 14:43:33.020
TXT 6Ds7hnbiLcQNRvVO5TfojihtMOd44Hzy6qSSvyGr0Z+wxxlLzkD+vrUCH/+jnuv+MFD7lEjcLTeyr1HdR9EHAA== 2026-05-26 00:28:48.843 2026-07-19 14:43:33.020
NS nicns1.nic.edu 2026-05-26 00:28:48.843 2026-07-19 14:43:33.020
TXT BE7E097F0F9A0A5805B7009B8B4AA766 2026-05-26 00:28:48.843 2026-07-19 14:43:33.020
TXT MS=ms13018749 2026-05-26 00:28:48.843 2026-07-19 14:43:33.020
A 35.71.187.224 2026-05-26 00:28:48.843 2026-07-19 14:43:33.020
TXT adobe-idp-site-verification=da83b73e492d8f979b763c4c98b7107f09a76362ab882bdda2c6dfd800beff16 2026-05-26 00:28:48.843 2026-07-19 14:43:33.020
SRV _sipfederationtls._tcp 100 1 5061 sipfed.online.lync.com 2026-05-26 00:28:48.843 2026-07-19 14:43:33.020
SRV _sip._tcp 10 10 5060 vcse.nic.edu 2026-05-26 00:28:48.843 2026-07-19 14:43:33.020
SRV _sips._tcp 10 10 5061 vcse.nic.edu 2026-05-26 00:28:48.843 2026-07-19 14:43:33.020
SRV _autodiscover._tcp 0 0 443 mail.nic.edu 2026-05-26 00:28:48.843 2026-07-19 14:43:33.020
TXT google-gws-recovery-domain-verification=72836193 2026-07-19 14:43:33.020 2026-07-19 14:43:33.020
TXT 00D1U000000oew5=1TBRm00000002Hx 2026-07-19 14:43:33.020 2026-07-19 14:43:33.020