Domain

gnu.org

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

DNS Check HTTP Check Run Full Scan .org TLD

Run a live full scan of gnu.org

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now

Hosting IPs

A/AAAA targets

Subdomains

138

CT + scan + body

Record Types

seen in DNS

Observed Certs

in our scans

DNS Records

209.51.188.116

AAAA

2001:470:142:5::116

10 eggs.gnu.org

ns1.gnu.org, ns2.gnu.org, ns4.gnu.org

TXT

v=spf1 ip4:209.51.188.0/24 ip6:2001:470:142::/48 ip4:18.4.89.21 ip4:15.204.209.91 ip6:2604:2dc0:101:200::1d07 -all

CNAME

—

CAA

0 issue "letsencrypt.org"

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Subdomain enumeration pending

Every subdomain ever issued a TLS cert under this apex — extracted from Certificate Transparency logs, our own scan observations and body references.

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

185.112.147.164:443 c5daf9f663ff…

Subject: https.git.savannah.gnu.org

Issuer: YE2

SANs: https.git.savannah.gnu.org, https.git.savannah.nongnu.org, https.git.sv.gnu.org, https.git.sv.nongnu.org

88.99.80.160:443 07a0c6c6f1c1…

Subject: bugzilla.dgnu.org

Issuer: YE2

SANs: bugzilla.dgnu.org, buildbot.dgnu.org, dgnu.org, irc.dgnu.org, staging.dgnu.org

176.12.70.187:443 9f1788410963…

Subject: wildebeest1p.gnu.org

Issuer: R12

SANs: classpath.org, digitalspeech.org, donate.digitalspeech.org, dotgnu.org, emacs.org, glibc.gnu.org, gnewsense.org, gnu.org, gnukids.org, gplfaq.org, hurd.gnu.org, ipv6.nongnu.org, playfreedom.org, playogg.com, playogg.org, upgradefromwindows.com, upgradefromwindows8.org, vcdimager.org, wildebeest.ipv6.gnu.org, wildebeest1p.gnu.org, www.classpath.org, www.digitalspeech.org, www.emacs.org, www.gnu.org, www.gnukids.org, www.hurd.gnu.org, www.ipv6.gnu.org, www.ipv6.nongnu.org, www.nongnu.org, www.playfreedom.org, www.playogg.com, www.upgradefromwindows.com, www.upgradefromwindows8.org, www6.gnu.org

209.51.188.47:443 ac746dd13a6d…

Subject: rt.gnu.org

Issuer: R12

SANs: rt.gnu.org, rt2p.gnu.org

89.127.216.249:443 9f1788410963…

Subject: wildebeest1p.gnu.org

Issuer: R12

209.51.188.89:443 0e3ea182ca5c…

Subject: elpa.gnu.org

Issuer: R13

SANs: elpa.gnu.org

5.180.82.186:443 9f1788410963…

Subject: wildebeest1p.gnu.org

Issuer: R12

144.31.189.15:443 9f1788410963…

Subject: wildebeest1p.gnu.org

Issuer: R12

209.51.188.200:443 f203690e9e15…

Subject: download.savannah.gnu.org

Issuer: R12

SANs: dl.savannah.gnu.org, dl.savannah.nongnu.org, dl.sv.gnu.org, dl.sv.nongnu.org, download.savannah.gnu.org, download.savannah.nongnu.org, download.sv.gnu.org, download.sv.nongnu.org

209.51.188.72:443 1c4d51c3dc55…

Subject: savannah.gnu.org

Issuer: E8

SANs: file.savannah.gnu.org, file.savannah.nongnu.org, savannah.gnu.org, savannah.nongnu.org, sv.gnu.org, sv.nongnu.org

51.195.191.94:443 d39ecd74cf59…

Subject: ftp.gnu.org.uk

Issuer: E7

SANs: ftp.gnu.org.uk

45.61.149.91:443 9f1788410963…

Subject: wildebeest1p.gnu.org

Issuer: R12

209.51.188.20:443 64724c349331…

Subject: ftp.gnu.org

Issuer: R13

SANs: alpha.gnu.org, ftp.gnu.org

209.51.188.23:443 6819acf1333a…

Subject: audio-video2p.gnu.org

Issuer: R12

SANs: audio-video2p.gnu.org

209.51.188.74:443 6f6f3c90f1c4…

Subject: gold.savannah.gnu.org

Issuer: E7

SANs: gold.savannah.gnu.org

116.80.76.90:443 34f207bd32eb…

Subject: https.git.savannah.gnu.org

Issuer: E7

SANs: https.git.savannah.gnu.org, https.git.savannah.nongnu.org, https.git.sv.gnu.org, https.git.sv.nongnu.org

IPs Citing This Domain

Hosts whose HTML body references this domain. Strong signal for origin/mirror/embed discovery.

72.167.133.16:443 href · ×8

185.125.202.164:443 href · ×5

116.80.78.250:443 href · ×4

5.189.196.198:443 href · ×2

162.220.11.242:443 href · ×2

151.248.118.58:80 href · ×2

89.167.66.81:443 href · ×2

52.5.170.25:443 href · ×2

142.93.235.220:443 href · ×1

52.86.195.90:443 href · ×1

141.94.245.67:443 href · ×1

89.107.68.133:443 href · ×1

64.176.58.68:80 href · ×1

209.51.188.20:443 href · ×1

92.27.6.192:80 href · ×1

51.15.207.90:443 href · ×1

202.61.193.183:443 href · ×1

199.212.143.222:443 href · ×1

100.42.184.85:443 href · ×1

192.241.193.157:80 href · ×1

178.79.150.233:80 href · ×1

167.172.42.174:80 href · ×1

199.212.143.222:80 href · ×1

142.93.235.220:80 href · ×1

64.176.58.68:443 href · ×1

78.47.90.182:443 href · ×1

46.142.108.117:443 href · ×1

51.15.207.90:80 href · ×1

92.27.6.192:443 href · ×1

45.117.168.21:80 href · ×1

173.255.238.110:80 href · ×1

189.36.129.67:443 href · ×1

162.215.222.142:443 href · ×1

195.49.215.226:443 href · ×1

13.89.191.124:443 href · ×1

138.68.77.116:80 href · ×1

157.22.191.185:443 href · ×1

104.236.193.155:443 href · ×1

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

No origin-IP leaks detected (yet)

Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.

Type	Value	First seen	Last seen
NS	ns2.gnu.org	2026-05-26 00:07:44.959	2026-07-28 10:49:00.176
AAAA	2001:470:142:5::116	2026-05-26 00:07:44.959	2026-07-28 10:49:00.176
A	209.51.188.116	2026-05-26 00:07:44.959	2026-07-28 10:49:00.176
MX	10 eggs.gnu.org	2026-05-26 00:07:44.959	2026-07-28 10:49:00.176
TXT	v=spf1 ip4:209.51.188.0/24 ip6:2001:470:142::/48 ip4:18.4.89.21 ip4:15.204.209.91 ip6:2604:2dc0:101:200::1d07 -all	2026-05-26 00:07:44.959	2026-07-28 10:49:00.176
NS	ns4.gnu.org	2026-05-26 00:07:44.959	2026-07-28 10:49:00.176
NS	ns1.gnu.org	2026-05-26 00:07:44.959	2026-07-28 10:49:00.176
CAA	0 issue "letsencrypt.org"	2026-05-26 00:07:44.959	2026-07-28 10:49:00.176