Domain

nextcloud.com

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

DNS Check HTTP Check Run Full Scan .com TLD

Run a live full scan of nextcloud.com

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now

Hosting IPs

A/AAAA targets

Subdomains

184

CT + scan + body

Record Types

seen in DNS

Observed Certs

in our scans

DNS Records

65.109.84.172, 85.10.195.17

AAAA

2a01:4f8:a0:3068::2, 2a01:4f9:3051:52aa::2

10 mx1.nextcloud.com

ns.inwx.de, ns2.inwx.de, ns3.inwx.eu

TXT

MS=2FF4FDA4B4C49AE44213D37A308105AA0D4EBF39, apple-domain-verification=dTWDbt2uCnxS9nIG, google-site-verification=BRRA-GQB6KD9WDj8KhccsNho8-E0Feba52m32uuDZ5w, v=spf1 mx include:sendgrid.net include:amazonses.com include:_spf.eu.sparkpostmail.com -all

CNAME

—

CAA

0 issue "letsencrypt.org"

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.

Subdomain	Resolves to	Last seen
docs.nextcloud.com	185.199.109.153 2606:50c0:8000::153 2606:50c0:8002::153 2606:50c0:8003::153 +4	2026-07-28 20:47:52.650
nextcloud.com	65.109.84.172 2a01:4f8:a0:3068::2 85.10.195.17 2a01:4f9:3051:52aa::2	2026-07-28 20:47:52.650
www.nextcloud.com	65.109.84.172 2a01:4f9:3051:52aa::2 85.10.195.17 2a01:4f8:a0:3068::2	2026-07-22 03:41:57.833
aio-testing.nextcloud.com	65.108.215.1 2a01:4f9:c010:6870::1	2026-07-23 13:01:37.719
apps.nextcloud.com	65.21.231.50 2a01:4f9:6a:1de8::2	2026-06-20 16:36:29.331
arcade.ltd1.nextcloud.com	95.217.44.166 2a01:4f9:2a:3119::2	2026-06-18 22:35:50.578
asapcloud.ltd3.nextcloud.com	95.216.37.161 2a01:4f9:2a:25de::2	2026-07-19 11:07:11.364
auth.nextcloud.com	176.9.217.50 2a01:4f8:130:32f1::50	2026-05-26 05:05:02.592
c0003.customerpush.nextcloud.com	95.217.53.156 2a01:4f9:2b:29dc::156	2026-05-26 00:32:50.780
c0004.customerpush.nextcloud.com	95.217.53.157 2a01:4f9:2b:29dc::157	2026-05-27 17:49:03.731
c0007.customerpush.nextcloud.com	95.217.53.150 2a01:4f9:2b:29dc::150	2026-05-27 04:19:56.370
cjis.ltd1.nextcloud.com	95.217.44.166 2a01:4f9:2a:3119::2	2026-06-24 00:22:59.305
cloud.nextcloud.com	116.202.53.135 2a01:4f8:231:37ef::2	2026-07-20 05:16:16.230
collabora.nextcloud.com	116.202.53.135 2a01:4f8:231:37ef::2	2026-07-16 14:36:55.147
collabora.services.nextcloud.com	135.181.142.32 2a01:4f9:3a:161f::2	2026-06-21 05:12:35.952
declarative-ui.ltd1.nextcloud.com	95.217.44.166 2a01:4f9:2a:3119::2	2026-06-19 02:50:36.224
demo.nextcloud.com	95.217.64.182 2a01:4f9:2a:3119::182	2026-06-20 16:36:29.331
demo1.nextcloud.com	95.216.226.156 2a01:4f9:2b:1fe3::2	2026-05-27 07:55:11.904
demo2.nextcloud.com	95.216.98.232 2a01:4f9:2b:122a::2	2026-06-21 13:06:50.586
dienetzwerft.ltd3.nextcloud.com	95.216.37.161 2a01:4f9:2a:25de::2	2026-07-23 08:39:46.689
download.nextcloud.com	5.9.202.145 2a01:4f8:210:21c8::145	2026-06-18 16:39:36.706
eo.services.nextcloud.com	135.181.142.32 2a01:4f9:3a:161f::2	2026-07-24 14:19:37.096
garm1.nextcloud.com	65.109.20.140 2a01:4f9:5a:1299::2	2026-07-23 14:29:10.954
help.nextcloud.com	95.217.53.158 2a01:4f9:2b:29dc::146	2026-07-28 12:44:20.043
hpb.services.nextcloud.com	135.181.142.32 2a01:4f9:3a:161f::2	2026-06-20 16:43:41.373
hz.ltd3.nextcloud.com	95.216.37.161 2a01:4f9:2a:25de::2	2026-07-21 03:37:10.277
itb.ltd3.nextcloud.com	95.216.37.161 2a01:4f9:2a:25de::2	2026-06-23 04:59:59.710
ldap.nextcloud.com	176.9.217.54 2a01:4f8:130:32f1::54	2026-06-20 00:35:55.293
lists.nextcloud.com	176.9.217.56 2a01:4f8:130:32f1::56	2026-06-22 10:47:12.675
lookup.nextcloud.com	65.21.231.50 2a01:4f9:6a:1de8::2	2026-06-05 20:34:11.345
ltd3.nextcloud.com	95.216.37.161 2a01:4f9:2a:25de::2	2026-06-15 23:44:55.060
ltd4.nextcloud.com	157.180.9.89 2a01:4f9:3100:3186::2	2026-07-22 22:23:09.022
mdm.ltd2.nextcloud.com	37.27.104.209 2a01:4f9:3070:1b62::2	2026-07-26 23:16:40.732
nextcloud-experience.ltd.nextcloud.com	95.217.44.166 2a01:4f9:2a:3119::2	2026-07-18 14:17:26.744
onlyoffice.services.nextcloud.com	135.181.142.32 2a01:4f9:3a:161f::2	2026-06-21 08:39:40.594
pedro-collabora.ltd2.nextcloud.com	37.27.104.209 2a01:4f9:3070:1b62::2	2026-07-22 10:30:16.117
portal.nextcloud.com	65.21.231.50 2a01:4f9:6a:1de8::2	2026-07-22 23:01:08.738
quobis.ltd2.nextcloud.com	37.27.104.209 2a01:4f9:3070:1b62::2	2026-06-21 06:31:50.622
ram.ltd1.nextcloud.com	95.217.44.166 2a01:4f9:2a:3119::2	2026-06-20 20:24:43.358
scan.nextcloud.com	95.217.53.149 2a01:4f9:2b:29dc::149	2026-07-16 22:12:43.539
securfox.ltd2.nextcloud.com	37.27.104.209 2a01:4f9:3070:1b62::2	2026-07-18 09:07:18.786
services.nextcloud.com	135.181.142.32 2a01:4f9:3a:161f::2	2026-06-20 16:43:41.373
sgdsn.ltd3.nextcloud.com	95.216.37.161 2a01:4f9:2a:25de::2	2026-07-24 14:19:37.096
sse.ltd1.nextcloud.com	95.217.44.166 2a01:4f9:2a:3119::2	2026-07-21 22:39:47.486
stats.nextcloud.com	95.217.53.147 2a01:4f9:2b:29dc::147	2026-06-20 16:36:29.331
status.nextcloud.com	135.181.180.95 2a01:4f9:3a:224f::2	2026-06-17 14:30:12.294
sytexltd.ltd3.nextcloud.com	95.216.37.161 2a01:4f9:2a:25de::2	2026-06-04 16:23:39.797
tattersalllorenz.ltd2.nextcloud.com	37.27.104.209 2a01:4f9:3070:1b62::2	2026-07-25 02:24:50.387
toolsandsolutions.ltd1.nextcloud.com	95.217.44.166 2a01:4f9:2a:3119::2	2026-07-19 02:23:27.822
transifex-sync.nextcloud.com	95.217.53.152 2a01:4f9:2b:29dc::152	2026-05-26 10:27:10.433
try.nextcloud.com	5.9.202.148 2a01:4f8:210:21c8::148	2026-06-20 16:36:29.331
turn.services.nextcloud.com	135.181.142.14 2a01:4f9:3a:161f::cafe	2026-06-20 16:43:41.373
usercontent.apps.nextcloud.com	5.9.202.145 2a01:4f8:210:21c8::145	2026-06-15 15:43:46.707
vbl.ltd1.nextcloud.com	95.217.44.166 2a01:4f9:2a:3119::2	2026-06-20 20:24:43.358
zitsh.nextcloud.com	95.216.9.12 2a01:4f9:2a:962::2	2026-06-23 23:44:49.582
adientpather.ltd2.nextcloud.com		1970-01-01 00:00:00.000
alexanderm.ltd4.nextcloud.com		1970-01-01 00:00:00.000
allinbrowser.ltd2.nextcloud.com		1970-01-01 00:00:00.000
amf.ltd3.nextcloud.com		1970-01-01 00:00:00.000
antitrust.nextcloud.com		1970-01-01 00:00:00.000
bechtlech.ltd4.nextcloud.com	157.180.9.89	2026-07-23 20:07:33.346
btcag.ltd4.nextcloud.com		1970-01-01 00:00:00.000
capitalonecom.ltd2.nextcloud.com		1970-01-01 00:00:00.000
cegeka.ltd2.nextcloud.com		1970-01-01 00:00:00.000
ciimarup.pt.ltd2.nextcloud.com		1970-01-01 00:00:00.000
codeuniquearchitekten.ltd4.nextcloud.com	157.180.9.89	2026-06-21 15:56:43.796
crossroad.ltd1.nextcloud.com		1970-01-01 00:00:00.000
csit.ltd4.nextcloud.com		1970-01-01 00:00:00.000
customerupdates.nextcloud.com		1970-01-01 00:00:00.000
dcuk.ltd1.nextcloud.com		1970-01-01 00:00:00.000
debeka.ltd4.nextcloud.com		1970-01-01 00:00:00.000
deckbenchmark1.ltd3.nextcloud.com		1970-01-01 00:00:00.000
deckbenchmark2.ltd4.nextcloud.com		1970-01-01 00:00:00.000
demo-mist.ltd2.nextcloud.com		1970-01-01 00:00:00.000
diakoniewerkduisburg.ltd4.nextcloud.com		1970-01-01 00:00:00.000
docker28-3.ltd1.nextcloud.com		1970-01-01 00:00:00.000
drone.nextcloud.com		1970-01-01 00:00:00.000
druzinasi.ltd2.nextcloud.com		1970-01-01 00:00:00.000
eaio-testing.nextcloud.com		1970-01-01 00:00:00.000
edpb.ltd4.nextcloud.com		1970-01-01 00:00:00.000
friedrichshafen.ltd4.nextcloud.com		1970-01-01 00:00:00.000
garm5.nextcloud.com		1970-01-01 00:00:00.000
go2solve.ltd3.nextcloud.com		1970-01-01 00:00:00.000
gpk.ltd3.nextcloud.com		1970-01-01 00:00:00.000
holdinova.ltd2.nextcloud.com		1970-01-01 00:00:00.000
hpb-server.nextcloud.com		1970-01-01 00:00:00.000
hpb.meeting.nextcloud.com		1970-01-01 00:00:00.000
hz-university.ltd4.nextcloud.com		1970-01-01 00:00:00.000
ibos.ltd2.nextcloud.com		1970-01-01 00:00:00.000
indisol.ltd2.nextcloud.com		1970-01-01 00:00:00.000
isulacorsica.ltd2.nextcloud.com		1970-01-01 00:00:00.000
itegrupal.ltd4.nextcloud.com		1970-01-01 00:00:00.000
janderijkcom.ltd4.nextcloud.com	157.180.9.89	2026-06-21 14:12:21.927
jarven.ltd4.nextcloud.com		1970-01-01 00:00:00.000
landkreisvechta.ltd4.nextcloud.com		1970-01-01 00:00:00.000
leadventures.ltd4.nextcloud.com		1970-01-01 00:00:00.000
lkpotsdammittelmark.ltd3.nextcloud.com		1970-01-01 00:00:00.000
mautic.nextcloud.com		1970-01-01 00:00:00.000
mc30.ltd2.nextcloud.com		1970-01-01 00:00:00.000
ncd.nextcloud.com		1970-01-01 00:00:00.000
ncp.nextcloud.com		1970-01-01 00:00:00.000
newsletter.nextcloud.com		1970-01-01 00:00:00.000
nhlstenden.ltd3.nextcloud.com		1970-01-01 00:00:00.000
odoo.nextcloud.com		1970-01-01 00:00:00.000
op.nextcloud.com		1970-01-01 00:00:00.000
pragma.ltd4.nextcloud.com		1970-01-01 00:00:00.000
projects.nextcloud.com		1970-01-01 00:00:00.000
psstjdedd.ltd4.nextcloud.com	157.180.9.89	2026-06-19 03:17:20.580
push.ltd4.nextcloud.com	157.180.9.89	2026-07-27 18:35:24.031
recording-server.nextcloud.com	46.4.108.5	2026-07-21 00:27:24.781
recording.meeting.nextcloud.com		1970-01-01 00:00:00.000
s4.nextcloud.com		1970-01-01 00:00:00.000
se.nextcloud.com		1970-01-01 00:00:00.000
smsconstructionltd.ltd3.nextcloud.com		1970-01-01 00:00:00.000
solidatech.ltd3.nextcloud.com		1970-01-01 00:00:00.000
staging.cloud.nextcloud.com		1970-01-01 00:00:00.000
staging.collabora.nextcloud.com		1970-01-01 00:00:00.000
staging.nextcloud.com		1970-01-01 00:00:00.000
staging.push.cloud.nextcloud.com		1970-01-01 00:00:00.000
tobi2.ltd3.nextcloud.com		1970-01-01 00:00:00.000

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

Certificate observations pending

TLS certs naming this domain in subject or SANs will appear here as our scan-layer catches them.

IPs Citing This Domain

Hosts whose HTML body references this domain. Strong signal for origin/mirror/embed discovery.

185.189.50.36:80 href · ×192

91.231.113.219:443 href · ×44

91.231.113.171:443 href · ×44

159.69.155.87:443 href · ×8

95.217.53.149:81 href · ×6

89.125.52.206:443 href · ×5

2.26.252.165:443 href · ×4

176.109.109.59:443 href · ×4

178.159.249.178:443 href · ×3

72.56.247.186:443 href · ×3

82.24.174.87:443 href · ×3

94.130.125.236:8080 href · ×3

91.221.4.32:443 href · ×2

72.252.209.116:80 href · ×2

157.119.71.27:443 href · ×2

5.39.88.37:443 href · ×2

185.161.175.175:443 href · ×2

90.154.6.53:443 href · ×2

90.160.60.165:443 href · ×2

75.119.149.214:443 href · ×2

130.83.238.98:443 href · ×2

153.127.247.125:443 href · ×2

178.105.146.46:443 href · ×2

155.212.168.43:443 href · ×2

51.77.210.198:443 href · ×2

94.183.177.72:443 href · ×2

188.44.55.130:443 href · ×2

155.212.190.69:443 href · ×2

5.39.95.35:443 href · ×2

195.112.117.90:443 href · ×2

190.181.58.94:80 href · ×2

80.0.155.185:443 href · ×2

192.241.218.198:443 href · ×2

73.127.10.33:443 href · ×2

212.87.224.78:443 href · ×2

130.0.191.190:443 href · ×2

13.79.63.82:443 href · ×2

86.238.204.121:443 href · ×2

161.97.79.110:443 href · ×2

82.65.11.16:443 href · ×2

129.159.53.192:443 href · ×2

37.205.12.185:443 href · ×2

51.79.152.21:443 href · ×2

112.168.211.120:443 href · ×2

37.208.109.96:443 href · ×2

94.23.199.15:443 href · ×2

154.17.231.45:443 href · ×2

62.176.232.202:443 href · ×2

173.212.214.33:443 href · ×2

131.153.22.5:443 href · ×2

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

No origin-IP leaks detected (yet)

Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.

Type	Value	First seen	Last seen
A	85.10.195.17	2026-05-25 21:56:50.553	2026-07-20 14:53:35.212
AAAA	2a01:4f8:a0:3068::2	2026-05-25 21:56:50.553	2026-07-20 14:53:35.212
NS	ns2.inwx.de	2026-05-25 22:07:29.493	2026-07-28 20:47:52.650
TXT	apple-domain-verification=dTWDbt2uCnxS9nIG	2026-05-25 22:07:29.493	2026-07-28 20:47:52.650
NS	ns3.inwx.eu	2026-05-25 22:07:29.493	2026-07-28 20:47:52.650
TXT	v=spf1 mx include:sendgrid.net include:amazonses.com include:_spf.eu.sparkpostmail.com -all	2026-05-25 22:07:29.493	2026-07-28 20:47:52.650
NS	ns.inwx.de	2026-05-25 22:07:29.493	2026-07-28 20:47:52.650
TXT	MS=2FF4FDA4B4C49AE44213D37A308105AA0D4EBF39	2026-05-25 22:07:29.493	2026-07-28 20:47:52.650
MX	10 mx1.nextcloud.com	2026-05-25 22:07:29.493	2026-07-28 20:47:52.650
TXT	google-site-verification=BRRA-GQB6KD9WDj8KhccsNho8-E0Feba52m32uuDZ5w	2026-05-25 22:07:29.493	2026-07-28 20:47:52.650
CAA	0 issue "letsencrypt.org"	2026-05-25 23:59:40.866	2026-07-28 20:47:52.650
A	65.109.84.172	2026-07-20 15:02:44.839	2026-07-28 20:47:52.650
AAAA	2a01:4f9:3051:52aa::2	2026-07-20 15:02:44.839	2026-07-28 20:47:52.650