Domain
lib.ru
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of lib.ru
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
Hosting IPs
—
A/AAAA targets
Subdomains
—
CT + scan + body
Record Types
—
seen in DNS
Observed Certs
—
in our scans
DNS Records
A
—
AAAA
—
MX
—
NS
—
TXT
—
CNAME
—
CAA
—
WHOIS / Registration
Registration data planned
Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.
Subdomains
Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.
| Subdomain | Resolves to | Last seen |
|---|---|---|
| alternativa.lib.ru | 2026-07-22 11:08:56.444 | |
| ancharov.lib.ru | 2026-07-22 11:08:56.444 | |
| andronati.lib.ru | 1970-01-01 00:00:00.000 | |
| annenskij.lib.ru | 1970-01-01 00:00:00.000 | |
| annensky.lib.ru | 2026-07-22 11:08:56.444 | |
| artefact.lib.ru | 2026-07-22 11:08:56.444 | |
| avia.lib.ru | 2026-07-22 11:08:56.444 | |
| az.lib.ru | 2026-07-22 11:08:56.444 | |
| belousenko.lib.ru | 1970-01-01 00:00:00.000 | |
| bolotin.lib.ru | 2026-07-22 11:08:56.444 | |
| bt.lib.ru | 2026-07-22 11:08:56.444 | |
| bujold.lib.ru | 2026-07-22 11:08:56.444 | |
| bukvitsa.lib.ru | 2026-07-22 11:08:56.444 | |
| calvino.lib.ru | 2026-07-22 11:08:56.444 | |
| det.lib.ru | 2026-07-22 11:08:56.444 | |
| econom.lib.ru | 1970-01-01 00:00:00.000 | |
| fan.lib.ru | 2026-07-22 11:08:56.444 | |
| foto.lib.ru | 2026-07-22 11:08:56.444 | |
| golovkin.lib.ru | 2026-07-22 11:08:56.444 | |
| gorchev.lib.ru | 2026-07-22 11:08:56.444 | |
| guberman.lib.ru | 2026-07-22 11:08:56.444 | |
| ihtik.lib.ru | 2026-07-22 11:08:56.444 | |
| iph.lib.ru | 2026-07-22 11:08:56.444 | |
| it-history.lib.ru | 2026-07-22 11:08:56.444 | |
| krylov.lib.ru | 2026-07-22 11:08:56.444 | |
| lazandr.lib.ru | 2026-07-22 11:08:56.444 | |
| ldn-knigi.lib.ru | 2026-07-22 11:08:56.444 | |
| lib.ru | 2026-07-26 01:00:40.135 | |
| lit.lib.ru | 2026-07-22 11:08:56.444 | |
| militera.lib.ru | 2026-07-22 11:08:56.444 | |
| mp3.lib.ru | 1970-01-01 00:00:00.000 | |
| music.lib.ru | 2026-07-22 11:08:56.444 | |
| noskoff.lib.ru | 2026-07-22 11:08:56.444 | |
| platonov.lib.ru | 2026-07-22 11:08:56.444 | |
| psi.lib.ru | 2026-07-22 11:08:56.444 | |
| publ.lib.ru | 2026-07-22 11:08:56.444 | |
| pulp.lib.ru | 2026-06-19 18:52:11.369 | |
| revich.lib.ru | 2026-07-22 11:08:56.444 | |
| slovar.lib.ru | 2026-07-22 11:08:56.444 | |
| soc.lib.ru | 2026-07-22 11:08:56.444 | |
| stalker.lib.ru | 2026-07-22 11:08:56.444 | |
| sukharev.lib.ru | 2026-07-22 11:08:56.444 | |
| tarranova.lib.ru | 2026-07-22 11:08:56.444 | |
| traduko.lib.ru | 1970-01-01 00:00:00.000 | |
| turizm.lib.ru | 2026-07-22 11:08:56.444 | |
| vernadsky.lib.ru | 2026-07-22 11:08:56.444 | |
| vgershov.lib.ru | 1970-01-01 00:00:00.000 | |
| wesha.lib.ru | 2026-07-22 11:08:56.444 | |
| world.lib.ru | 2026-07-22 11:08:56.444 | |
| www.lib.ru | 2026-07-22 11:08:56.444 | |
| www.stalker.lib.ru | 1970-01-01 00:00:00.000 | |
| yanko.lib.ru | 2026-07-22 11:08:56.444 | |
| zhurnal.lib.ru | 2026-06-22 17:48:06.100 | |
| zhzl.lib.ru | 1970-01-01 00:00:00.000 | |
| zzl.lib.ru | 2026-07-22 11:08:56.444 |
Tech Stack
Tech detection pending
Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.
TLS Certificates
Subject: volglib.ru
Issuer: YR1
SANs: 9may.volglib.ru, centre-stalingrad.volglib.ru, csgb17.volglib.ru, csgb7.volglib.ru, dobrotvorec.volglib.ru, mail.volglib.ru, seniorstudent.volglib.ru, volg.nichost.ru, volglib.ru
Subject: alfa.donlib.ru
Issuer: YR1
SANs: alfa.donlib.ru
Subject: dc.reglib.ru
Issuer: YR1
SANs: dc.reglib.ru, www.dc.reglib.ru
Subject: api.kitaplib.ru
Issuer: YR1
SANs: api.kitaplib.ru
Subject: ostrovlib.ru
Issuer: YR2
SANs: irbis.ostrovlib.ru, ostrovlib.ru
Subject: artglib.ru
Issuer: YE2
SANs: api.pinaxly.com, api.pinaxly.ru, artglib.ru, cdnsys.ru, cms.pinaxly.com, demo.pinaxly.com, demo.pinaxly.ru, dobryeramki.ru, home.pinaxly.com, pinaxly.com, pinaxly.ru, stop-estakada.ru, tapart.cc
Subject: alfa.donlib.ru
Issuer: YR1
SANs: alfa.donlib.ru
Subject: lib.rus.ec
Issuer: YR1
SANs: lib.rus.ec
Subject: basfer.service-lib.ru
Issuer: E7
SANs: basfer.service-lib.ru
Subject: mdlib.ru
Issuer: YR1
SANs: mdlib.ru, www.mdlib.ru
Subject: tomilo-lib.ru
Issuer: YE2
SANs: cdn.tomilo-lib.ru, tomilo-lib.ru, tomiloweb.ru, www.tomilo-lib.ru, www.tomiloweb.ru
Subject: murmanlib.ru
Issuer: YR1
SANs: murmanlib.ru
Subject: def.elib.ru
Issuer: def.elib.ru
SANs: def.elib.ru
Subject: www.gslib.ru
Issuer: GlobalSign GCC R3 DV TLS CA 2020
SANs: autodiscover.gslib.ru, gslib.ru, mail.gslib.ru, owa.gslib.ru, www.gslib.ru
Subject: *.pskovlib.ru
Issuer: GlobalSign GCC R6 AlphaSSL CA 2025
SANs: *.pskovlib.ru, pskovlib.ru
Subject: hradfin.service-lib.ru
Issuer: R13
SANs: hradfin.service-lib.ru
Subject: lib.ru
Issuer: YE2
SANs: lib.ru, www.lib.ru
Subject: *.kamlib.ru
Issuer: GlobalSign GCC R6 AlphaSSL CA 2025
SANs: *.kamlib.ru, kamlib.ru
Subject: seolib.ru
Issuer: YR2
SANs: *.seolib.ru, seolib.ru
Subject: api.pythonlib.ru
Issuer: YR2
SANs: api.pythonlib.ru, www.api.pythonlib.ru
Subject: mx2.newmoslib.ru
Issuer: YR2
SANs: autoconfig.newmoslib.ru, autoconfig.okctinao.ru, autodiscover.newmoslib.ru, autodiscover.okctinao.ru, mail.newmoslib.ru, mail.okctinao.ru, mx2.newmoslib.ru, webmail.newmoslib.ru, webmail.okctinao.ru
Subject: forum.yulib.ru
Issuer: R13
SANs: forum.yulib.ru
Subject: mail.abutalib.ru
Issuer: YE2
SANs: mail.abutalib.ru, mx.abutalib.ru
Subject: lib.ru
Issuer: YE2
SANs: lib.ru, www.lib.ru
Subject: pythonlib.ru
Issuer: pythonlib.ru
SANs: pythonlib.ru
Subject: cp.irklib.ru
Issuer: YR2
SANs: cp.irklib.ru
Subject: cook-lib.ru
Issuer: E7
SANs: cook-lib.ru
Subject: de.node.intlib.ru
Issuer: E7
SANs: de.node.intlib.ru
Subject: np.chelreglib.ru
Issuer: R3
SANs: np.chelreglib.ru
Subject: analytics.livelib.ru
Issuer: R3
SANs: analytics.livelib.ru
IPs Citing This Domain
Hosts whose HTML body references this domain. Strong signal for origin/mirror/embed discovery.
87.242.117.42:443
href · ×5
81.176.66.163:80
href · ×5
143.47.244.86:443
href · ×5
77.73.71.127:8080
href · ×5
72.56.235.56:443
href · ×5
185.72.144.175:443
href · ×5
194.156.101.103:443
href · ×5
37.140.243.207:443
href · ×5
143.47.244.86:80
href · ×5
91.214.70.136:8080
href · ×5
81.176.66.163:443
href · ×5
139.59.141.15:443
href · ×2
78.41.139.237:80
href · ×1
149.154.71.66:80
href · ×1
185.71.196.191:443
href · ×1
81.176.66.171:443
href · ×1
81.176.66.169:80
href · ×1
89.253.220.9:80
href · ×1
Origin / IP-Leak
USP
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
No origin-IP leaks detected (yet)
Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.
Threat Intelligence
Domain threat-intel pending
Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.
History
Domain timeline pending
Passive-DNS history accumulates as our forward-DNS crawler observes A/AAAA/MX/NS/TXT records over time.