Domain
or.jp
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of or.jp
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
Hosting IPs
—
A/AAAA targets
Subdomains
—
CT + scan + body
Record Types
—
seen in DNS
Observed Certs
—
in our scans
DNS Records
A
—
AAAA
—
MX
—
NS
—
TXT
—
CNAME
—
CAA
—
WHOIS / Registration
Registration data planned
Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.
Subdomains
Subdomain enumeration pending
Every subdomain ever issued a TLS cert under this apex — extracted from Certificate Transparency logs, our own scan observations and body references.
Tech Stack
Tech detection pending
Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.
TLS Certificates
Subject: *.newsapp.nhk.or.jp
Issuer: Cybertrust Japan SureServer CA G4
SANs: *.newsapp.nhk.or.jp
Subject: dbg-debo-lb.dbs.channel.or.jp
Issuer: WR3
SANs: dbg-debo-admin.dbs.channel.or.jp, dbg-debo-bot.dbs.channel.or.jp, dbg-debo-lb.dbs.channel.or.jp, dbg-debo-spanner.dbs.channel.or.jp, dbg-debo.dbs.channel.or.jp
Subject: *.classnk.or.jp
Issuer: GlobalSign RSA OV SSL CA 2018
SANs: *.classnk.or.jp, classnk.or.jp
Subject: *.nhk.or.jp
Issuer: Cybertrust Japan SureServer CA G4
SANs: *.nhk.or.jp
Subject: sp8ana-vpn.spring8.or.jp
Issuer: NII Open Domain CA - G8 RSA
SANs: sp8ana-vpn.spring8.or.jp
Subject: neo.cosmos.channel.or.jp
Issuer: WR3
SANs: neo.cosmos.channel.or.jp
Subject: *.classnk.or.jp
Issuer: GeoTrust TLS RSA CA G1
SANs: *.classnk.or.jp, classnk.or.jp
Subject: *.nhk.or.jp
Issuer: Cybertrust Japan SureServer CA G4
SANs: *.nhk.or.jp
Subject: *.bleach-mh.channel.or.jp
Issuer: GeoTrust TLS RSA CA G1
SANs: *.bleach-mh.channel.or.jp, bleach-mh.channel.or.jp
Subject: *.jane.or.jp
Issuer: GlobalSign GCC R6 AlphaSSL CA 2025
SANs: *.jane.or.jp, jane.or.jp
Subject: hoansha.or.jp
Issuer: GeoTrust TLS RSA CA G1
SANs: hoansha.or.jp, www.hoansha.or.jp
Subject: www.konomachi.or.jp
Issuer: GeoTrust TLS RSA CA G1
SANs: www.konomachi.or.jp
Subject: rafflesia.interline.or.jp
Issuer: rafflesia.interline.or.jp
SANs: rafflesia.interline.or.jp
Subject: meditopia.or.jp
Issuer: JPRS Domain Validation Authority - G4
SANs: meditopia.or.jp, www.meditopia.or.jp
Subject: *.nhk.or.jp
Issuer: Cybertrust Japan SureServer CA G4
SANs: *.nhk.or.jp
Subject: www.moyashi.or.jp
Issuer: GlobalSign Domain Validation CA - G2
SANs: moyashi.or.jp, www.moyashi.or.jp
Subject: saigai.dentsu-kyosai.or.jp
Issuer: YR2
SANs: saigai.dentsu-kyosai.or.jp
Subject: qdh-sensor.jp
Issuer: SECOM Passport for Web SR 3.0 CA
SANs: qdh-sensor.jp
Subject: *.cosmos.channel.or.jp
Issuer: GeoTrust TLS RSA CA G1
SANs: *.cosmos.channel.or.jp, cosmos.channel.or.jp
Subject: kddi-foundation.or.jp
Issuer: WR3
SANs: info.kddi-foundation.or.jp, kddi-foundation.or.jp, www.kddi-foundation.or.jp
Subject: tsushima-cci.or.jp
Issuer: JPRS Domain Validation Authority - G4
SANs: tsushima-cci.or.jp, www.tsushima-cci.or.jp
Subject: www.yonden-seikyo.or.jp
Issuer: GeoTrust TLS RSA CA G1
SANs: www.yonden-seikyo.or.jp
Subject: sweets-seika.kyoto-fsci.or.jp
Issuer: YR1
SANs: sweets-seika.kyoto-fsci.or.jp, www.sweets-seika.kyoto-fsci.or.jp
Subject: www.acas.or.jp
Issuer: Cybertrust Japan SureServer EV CA G3
SANs: www.acas.or.jp
Subject: mail.y-shiozaki.or.jp
Issuer: JPRS Domain Validation Authority - G4
SANs: mail.y-shiozaki.or.jp
Subject: *.nhk.or.jp
Issuer: Cybertrust Japan SureServer CA G4
SANs: *.nhk.or.jp
Subject: has.or.jp
Issuer: ZeroSSL RSA DV SSL CA 2
SANs: has.or.jp, www.has.or.jp
Subject: y-kaigi.or.jp
Issuer: GlobalSign GCC R3 DV TLS CA 2020
SANs: y-kaigi.or.jp
Subject: gs.tmk.or.jp
Issuer: YE1
SANs: gs.tmk.or.jp
Subject: jhn.or.jp
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: jhn.or.jp, www.jhn.or.jp
IPs Citing This Domain
No citing IPs found yet
As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.
Origin / IP-Leak
USP
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
| Origin IP | Origin ASN | CDN ASN | Confidence | Reasoning |
|---|---|---|---|---|
| 23.221.118.200 | AS9299 | AS16625 | 95% | cert 504817d2… served by 23.221.118.200 (AS9299) carries SAN www.asahigroupkenpo.or.jp which currently resolves through Akamai (AS16625) at 184.24.25.60, 23.49.186.96, 23.201.248.148 |
| 23.0.153.166 | AS12252 | AS16625 | 95% | cert 504817d2… served by 23.0.153.166 (AS12252) carries SAN www.asahigroupkenpo.or.jp which currently resolves through Akamai (AS16625) at 184.24.25.60, 23.49.186.96, 23.201.248.148 |
| 23.41.203.24 | AS55836 | AS16625 | 95% | cert 504817d2… served by 23.41.203.24 (AS55836) carries SAN www.asahigroupkenpo.or.jp which currently resolves through Akamai (AS16625) at 184.24.25.60, 23.49.186.96, 23.201.248.148 |
| 23.0.146.193 | AS12252 | AS16625 | 95% | cert 1ebdc768… served by 23.0.146.193 (AS12252) carries SAN grants.suntory-foundation.or.jp which currently resolves through Akamai (AS16625) at 184.24.18.100, 2a02:26f0:1180:197::130a, 2a02:26f0:1180:19c::130a, 2600:141b:1c00:1397::130a |
| 104.118.151.46 | AS7713 | AS16625 | 95% | cert 1ebdc768… served by 104.118.151.46 (AS7713) carries SAN grants.suntory-foundation.or.jp which currently resolves through Akamai (AS16625) at 184.24.18.100, 2600:141b:1c00:1397::130a, 2600:141b:1c00:1382::130a, 2a02:26f0:1180:197::130a |
| 111.87.123.147 | AS2516 | AS54113 | 95% | cert 6df08b7b… served by 111.87.123.147 (AS2516) carries SAN www.komei.or.jp which currently resolves through Fastly (AS54113) at 151.101.2.133, 151.101.194.133, 151.101.130.133, 151.101.66.133 |
| 133.105.12.128 | AS17944 | AS54113 | 95% | cert deea1515… served by 133.105.12.128 (AS17944) carries SAN api.jwa.or.jp which currently resolves through Fastly (AS54113) at 151.101.194.132, 151.101.2.132, 151.101.66.132, 151.101.130.132 |
| 111.87.123.157 | AS2516 | AS54113 | 95% | cert 6df08b7b… served by 111.87.123.157 (AS2516) carries SAN www.komei.or.jp which currently resolves through Fastly (AS54113) at 151.101.2.133, 151.101.194.133, 151.101.130.133, 151.101.66.133 |
| 111.87.123.152 | AS2516 | AS54113 | 95% | cert 6df08b7b… served by 111.87.123.152 (AS2516) carries SAN www.komei.or.jp which currently resolves through Fastly (AS54113) at 151.101.2.133, 151.101.194.133, 151.101.130.133, 151.101.66.133 |
| 210.135.97.120 | AS37898 | AS13335 | 95% | cert 0a7139f3… served by 210.135.97.120 (AS37898) carries SAN www.dpfp.or.jp which currently resolves through Cloudflare (AS13335) at 188.114.96.0, 2a06:98c1:3121::, 2a06:98c1:3120::, 188.114.97.0 |
| 210.135.97.123 | AS37898 | AS13335 | 95% | cert 1bdef07a… served by 210.135.97.123 (AS37898) carries SAN minshin.or.jp which currently resolves through Cloudflare (AS13335) at 104.21.53.199, 172.67.218.117, 2606:4700:3032::ac43:da75, 2606:4700:3037::6815:35c7 |
| 133.105.13.69 | AS17944 | AS54113 | 95% | cert 5d8a39fc… served by 133.105.13.69 (AS17944) carries SAN micos-sc.jwa.or.jp which currently resolves through Fastly (AS54113) at 151.101.65.91, 151.101.193.91, 151.101.129.91, 151.101.1.91 |
| 133.130.96.43 | AS7506 | AS13335 | 95% | cert 4610d10f… served by 133.130.96.43 (AS7506) carries SAN gdm.or.jp which currently resolves through Cloudflare (AS13335) at 172.66.150.222, 104.20.36.45, 2606:4700:10::ac42:96de, 2606:4700:10::6814:242d |
| 133.105.13.162 | AS17944 | AS54113 | 95% | cert 5d8a39fc… served by 133.105.13.162 (AS17944) carries SAN micos-sc.jwa.or.jp which currently resolves through Fastly (AS54113) at 151.101.65.91, 151.101.193.91, 151.101.129.91, 151.101.1.91 |
| 111.87.123.135 | AS2516 | AS54113 | 95% | cert 6df08b7b… served by 111.87.123.135 (AS2516) carries SAN www.komei.or.jp which currently resolves through Fastly (AS54113) at 151.101.194.133, 151.101.2.133, 151.101.130.133, 151.101.66.133 |
| 150.60.173.56 | AS9597 | AS16509 | 95% | cert 15ce3128… served by 150.60.173.56 (AS9597) carries SAN www.yobou.or.jp which currently resolves through Amazon (AS16509) at 52.198.225.10, 18.178.123.165 |
| 160.16.85.44 | AS9370 | AS16509 | 95% | cert 38c8c4f4… served by 160.16.85.44 (AS9370) carries SAN pedal.or.jp which currently resolves through Amazon (AS16509) at 13.159.51.227, 18.178.115.58, 2001:e42:102:1518:160:16:85:44 |
| 133.105.12.129 | AS17944 | AS54113 | 95% | cert deea1515… served by 133.105.12.129 (AS17944) carries SAN api.jwa.or.jp which currently resolves through Fastly (AS54113) at 151.101.194.132, 151.101.2.132, 151.101.66.132, 151.101.130.132 |
| 111.87.123.154 | AS2516 | AS54113 | 95% | cert 6df08b7b… served by 111.87.123.154 (AS2516) carries SAN www.komei.or.jp which currently resolves through Fastly (AS54113) at 151.101.194.133, 151.101.2.133, 151.101.130.133, 151.101.66.133 |
| 219.121.233.83 | AS18121 | AS16509 | 95% | cert a8a0ac70… served by 219.121.233.83 (AS18121) carries SAN www.memberservice.gesui-databank.or.jp which currently resolves through Amazon (AS16509) at 18.181.73.254, 18.178.129.128, 54.64.102.35 |
| 164.46.54.175 | AS4694 | AS16509 | 95% | cert 28f5e76b… served by 164.46.54.175 (AS4694) carries SAN www.airc.or.jp which currently resolves through Amazon (AS16509) at 43.206.53.0 |
| 211.7.65.180 | AS10010 | AS19551 | 95% | cert 49310745… served by 211.7.65.180 (AS10010) carries SAN www.auth.tokai.or.jp which currently resolves through Imperva (AS19551) at 45.60.155.10 |
| 133.130.122.243 | AS7506 | AS13335 | 95% | cert 4610d10f… served by 133.130.122.243 (AS7506) carries SAN gdm.or.jp which currently resolves through Cloudflare (AS13335) at 172.66.150.222, 104.20.36.45, 2606:4700:10::ac42:96de, 2606:4700:10::6814:242d |
| 210.232.0.82 | AS4713 | AS16509 | 95% | cert 35d7f934… served by 210.232.0.82 (AS4713) carries SAN www.gyouzaisei.or.jp which currently resolves through Amazon (AS16509) at 35.72.240.202 |
| 133.130.99.167 | AS7506 | AS13335 | 95% | cert 4610d10f… served by 133.130.99.167 (AS7506) carries SAN gdm.or.jp which currently resolves through Cloudflare (AS13335) at 172.66.150.222, 104.20.36.45, 2606:4700:10::ac42:96de, 2606:4700:10::6814:242d |
Threat Intelligence
Domain threat-intel pending
Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.
History
Domain timeline pending
Passive-DNS history accumulates as our forward-DNS crawler observes A/AAAA/MX/NS/TXT records over time.