Domain

api.no

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

DNS Check HTTP Check Run Full Scan .no TLD

Run a live full scan of api.no

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now

Hosting IPs

A/AAAA targets

Subdomains

1,294

CT + scan + body

Record Types

seen in DNS

Observed Certs

in our scans

DNS Records

87.238.38.1, 87.238.38.2

AAAA

2a02:c0:ac::e51:1

1 aspmx.l.google.com, 10 alt3.aspmx.l.google.com, 10 alt4.aspmx.l.google.com, 5 alt1.aspmx.l.google.com, 5 alt2.aspmx.l.google.com

nsb.dnsnode.net, nsp.dnsnode.net, nsu.dnsnode.net

TXT

6e3fe8279f8a40258a48f35bd15bc493, google-site-verification=BmX8cezo6eB-heWcTEeMnMlpzYL0SqnAMYIFIoocxcg, v=spf1 include:_spf.aid.no -all

CNAME

—

CAA

—

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.

Subdomain	Resolves to	Last seen
www.polkaposten.no.cloudflare-snap5.api.no	104.18.12.115 104.18.13.115 2606:4700::6812:c73 2606:4700::6812:d73	2026-07-25 19:50:31.305
www.salsaposten.no.cloudflare-snap5.api.no	104.18.12.115 104.18.13.115 2606:4700::6812:c73 2606:4700::6812:d73	2026-07-25 17:33:10.209
www.tangotidende.no.cloudflare-snap5.api.no	104.18.12.115 104.18.13.115 2606:4700::6812:d73 2606:4700::6812:c73	2026-06-17 15:27:15.011
admin.api.no	87.238.38.20 2a02:c0:ac::1:1411:1 87.238.38.21	2026-07-19 02:01:41.861
api.no	87.238.38.2 2a02:c0:ac::e51:1 87.238.38.1	2026-06-26 01:31:22.086
services.api.no	87.238.38.5 2a02:c0:ac::bed:1 87.238.38.6	2026-07-19 02:01:41.861
www.api.no	87.238.38.2 2a02:c0:ac::e51:1 87.238.38.1	2026-07-19 02:01:41.861
g.api.no	87.238.38.4 87.238.38.3	2026-06-16 09:27:04.441
www.aasanetidende.no.snap6.api.no	87.238.37.243 87.238.38.103	2026-07-26 11:21:26.669
www.amta.no.snap6.api.no	87.238.37.243 87.238.38.103	2026-07-26 11:21:26.669
www.an.no.snap6.api.no	87.238.38.103 87.238.37.243	2026-07-26 11:21:26.669
www.avisa-valdres.no.snap6.api.no	87.238.38.103 87.238.37.243	2026-07-26 11:21:26.669
www.avisagaula.no.snap6.api.no	87.238.38.103 87.238.37.243	2026-07-26 11:21:26.669
www.avisendanmark.dk.snap6.api.no	87.238.38.103 87.238.37.243	2026-07-26 11:21:26.669
www.berlingske.dk.cloudflare-test.api.no	104.18.7.234 104.18.6.234	2026-07-28 17:23:57.234
www.blv.no.snap6.api.no	87.238.38.103 87.238.37.243	2026-07-26 11:21:26.669
www.bodonu.no.snap6.api.no	87.238.37.243 87.238.38.103	2026-07-26 11:21:26.669
www.bondebladet.no.snap6.api.no	87.238.37.243 87.238.38.103	2026-07-26 11:21:26.669
www.braedstrup-avis.dk.snap6.api.no	87.238.37.243 87.238.38.103	2026-07-26 11:21:26.669
www.bt.dk.cloudflare-test.api.no	104.18.7.234 104.18.6.234	2026-07-28 17:23:57.234
www.budstikka.no.snap6.api.no	87.238.37.243 87.238.38.103	2026-07-26 11:21:26.669
www.dagbladet-holstebro-struer.dk.snap6.api.no	87.238.37.243 87.238.38.103	2026-07-26 11:21:26.669
www.drangedalsposten.no.snap6.api.no	87.238.37.243 87.238.38.103	2026-07-26 11:21:26.669
www.dt.no.snap6.api.no	87.238.37.243 87.238.38.103	2026-07-26 11:21:26.669
www.euroinvestor.dk.cloudflare-test.api.no	104.18.6.234 104.18.7.234	2026-07-28 17:23:57.234
www.f-b.no.snap6.api.no	87.238.37.243 87.238.38.103	2026-07-26 11:21:26.669
www.faa.dk.snap6.api.no	87.238.37.243 87.238.38.103	2026-07-26 11:21:26.669
www.firda.no.snap6.api.no	87.238.38.103 87.238.37.243	2026-07-26 11:21:26.669
www.gjengangeren.no.snap6.api.no	87.238.37.243 87.238.38.103	2026-07-26 11:21:26.669
www.h-avis.no.snap6.api.no	87.238.37.243 87.238.38.103	2026-07-26 11:21:26.669
www.hammerfestingen.no.snap6.api.no	87.238.38.103 87.238.37.243	2026-07-26 11:21:26.669
www.helg.no.snap6.api.no	87.238.38.103 87.238.37.243	2026-07-26 11:21:26.669
www.ifinnmark.no.snap6.api.no	87.238.38.103 87.238.37.243	2026-07-26 11:21:26.669
www.ilevanger.no.snap6.api.no	87.238.38.103 87.238.37.243	2026-07-26 11:21:26.669
www.karmoynytt.no.snap6.api.no	87.238.38.103 87.238.37.243	2026-07-26 11:21:26.669
www.krs.no.snap6.api.no	87.238.38.103 87.238.37.243	2026-07-26 11:21:26.669
www.kv.no.snap6.api.no	87.238.37.243 87.238.38.103	2026-07-26 11:21:26.669
www.kvinnheringen.no.snap6.api.no	87.238.37.243 87.238.38.103	2026-07-26 11:21:26.669
www.lofotposten.no.snap6.api.no	87.238.37.243 87.238.38.103	2026-07-26 11:21:26.669
www.lokalavisen-lemvig.dk.snap6.api.no	87.238.37.243 87.238.38.103	2026-07-26 11:21:26.669
www.lokalavisenassens.dk.snap6.api.no	87.238.37.243 87.238.38.103	2026-07-26 11:21:26.669
www.lokalavisennyborg.dk.snap6.api.no	87.238.37.243 87.238.38.103	2026-07-26 11:21:26.669
www.nationen.no.snap6.api.no	87.238.38.103 87.238.37.243	2026-07-26 11:21:26.669
www.noblad.no.snap6.api.no	87.238.38.103 87.238.37.243	2026-07-26 11:21:26.669
www.nord24.no.snap6.api.no	87.238.38.103 87.238.37.243	2026-07-26 11:21:26.669
www.nordlys.no.snap6.api.no	87.238.38.103 87.238.37.243	2026-07-26 11:21:26.669
www.norsklandbruk.no.snap6.api.no	87.238.38.103 87.238.37.243	2026-07-26 11:21:26.669
www.nsnet.dk.snap6.api.no	87.238.38.103 87.238.37.243	2026-07-26 11:21:26.669
www.nt24.no.snap6.api.no	87.238.38.103 87.238.37.243	2026-07-26 11:21:26.669
www.odderavis.dk.snap6.api.no	87.238.37.243 87.238.38.103	2026-07-26 11:21:26.669
www.op.no.snap6.api.no	87.238.37.243 87.238.38.103	2026-07-26 11:21:26.669
www.oyene.no.snap6.api.no	87.238.38.103 87.238.37.243	2026-07-26 11:21:26.669
www.r-a.no.snap6.api.no	87.238.38.103 87.238.37.243	2026-07-26 11:21:26.669
www.ranano.no.snap6.api.no	87.238.38.103 87.238.37.243	2026-07-26 11:21:26.669
www.retten.no.snap6.api.no	87.238.38.103 87.238.37.243	2026-07-26 11:21:26.669
www.rha.no.snap6.api.no	87.238.38.103 87.238.37.243	2026-07-26 11:21:26.669
www.ringblad.no.snap6.api.no	87.238.38.103 87.238.37.243	2026-07-26 11:21:26.669
www.ringsaker-blad.no.snap6.api.no	87.238.38.103 87.238.37.243	2026-07-26 11:21:26.669
www.salsaposten.no.snap6.api.no	87.238.38.103 87.238.37.243	2026-07-26 11:21:26.669
www.skoleavisa.no.snap6.api.no	87.238.38.103 87.238.37.243	2026-07-26 11:21:26.669
www.smaalenene.no.snap6.api.no	87.238.38.103 87.238.37.243	2026-07-26 11:21:26.669
www.snasningen.no.snap6.api.no	87.238.38.103 87.238.37.243	2026-07-26 11:21:26.669
www.sognavis.no.snap6.api.no	87.238.38.103 87.238.37.243	2026-07-26 11:21:26.669
www.strandbuen.no.snap6.api.no	87.238.37.243 87.238.38.103	2026-07-26 11:21:26.669
www.t-a.no.snap6.api.no	87.238.38.103 87.238.37.243	2026-07-26 11:21:26.669
www.tangotidende.no.snap6.api.no	87.238.38.103 87.238.37.243	2026-07-26 11:21:26.669
www.tk.no.snap6.api.no	87.238.38.103 87.238.37.243	2026-07-26 11:21:26.669
www.totenidag.no.snap6.api.no	87.238.38.103 87.238.37.243	2026-07-26 11:21:26.669
www.tronderdebatt.no.snap6.api.no	87.238.38.103 87.238.37.243	2026-07-26 11:21:26.669
www.ugeavisen-varde.dk.snap6.api.no	87.238.38.103 87.238.37.243	2026-07-26 11:21:26.669
www.ugeavisenodense.dk.snap6.api.no	87.238.38.103 87.238.37.243	2026-07-26 11:21:26.669
www.ugeavisenoeboen.dk.snap6.api.no	87.238.38.103 87.238.37.243	2026-07-26 11:21:26.669
www.vestbyavis.no.snap6.api.no	87.238.38.103 87.238.37.243	2026-07-26 11:21:26.669
www.weekendavisen.dk.cloudflare-test.api.no	104.18.7.234 104.18.6.234	2026-07-28 17:23:57.234
amediaannonse.no.snap0.api.no		1970-01-01 00:00:00.000
app.api.no	87.238.38.2	2026-07-19 02:01:41.861
argocd.apps-snap6.api.no		1970-01-01 00:00:00.000
argocd.apps-sre.api.no		1970-01-01 00:00:00.000
argocd.cue-prod.api.no		1970-01-01 00:00:00.000
assets.acdn.no.snap0.api.no		1970-01-01 00:00:00.000
assets.acdn.no.snap1.api.no	87.238.38.118	2026-06-04 17:02:10.425
assets.acdn.no.snap3.api.no	87.238.37.200	2026-06-18 17:43:12.293
assets.acdn.no.snap6.api.no	87.238.38.103	2026-06-19 13:51:59.137
assets.acdn.no.test.api.no		1970-01-01 00:00:00.000
avisna-sse.cue-snap0.api.no		1970-01-01 00:00:00.000
cloudflare-test.api.no		1970-01-01 00:00:00.000
dk.auto.api.no		1970-01-01 00:00:00.000
dk.snap0.api.no		1970-01-01 00:00:00.000
dk.snap1.api.no		1970-01-01 00:00:00.000
dk.snap3.api.no		1970-01-01 00:00:00.000
dk.snap6.api.no		1970-01-01 00:00:00.000
ftp.api.no	87.238.38.10	2026-07-19 02:01:41.861
iscado.gcloud.api.no	34.160.216.166	2026-07-24 16:27:56.489
jenkins.api.no	87.238.38.15	2026-07-19 02:01:41.861
jump.api.no	87.238.38.22	2026-07-19 02:01:41.861
login.api.no	87.238.38.2	2026-07-19 02:01:41.861
maximinus.gcloud.api.no	35.244.178.221	2026-06-23 01:48:26.040
mobile.api.no	195.159.152.205	2026-07-19 02:01:41.861
no.auto.api.no		1970-01-01 00:00:00.000
no.snap0.api.no		1970-01-01 00:00:00.000
no.snap1.api.no		1970-01-01 00:00:00.000
no.snap3.api.no		1970-01-01 00:00:00.000
no.snap6.api.no		1970-01-01 00:00:00.000
no.test.api.no		1970-01-01 00:00:00.000
oksnes-sse.cue-snap0.api.no		1970-01-01 00:00:00.000
oksnes-um.cue-snap0.api.no		1970-01-01 00:00:00.000
oksnes.cue-snap0.api.no		1970-01-01 00:00:00.000
ostlen-um.cue.api.no	87.238.55.12	2026-07-22 21:08:41.701
ping.api.no	87.238.38.2	2026-07-19 02:01:41.861
pluss.nettavisen.no.auto.api.no		1970-01-01 00:00:00.000
pluss.nettavisen.no.snap0.api.no		1970-01-01 00:00:00.000
pluss.nettavisen.no.snap1.api.no	87.238.38.118	2026-06-04 17:02:10.425
pluss.nettavisen.no.snap3.api.no	87.238.37.200	2026-06-18 17:43:12.293
pluss.nettavisen.no.snap6.api.no	87.238.38.103	2026-06-19 13:51:59.137
pluss.nettavisen.no.test.api.no		1970-01-01 00:00:00.000
polpos-sse.cue-snap0.api.no		1970-01-01 00:00:00.000
polpos-sse.cue.api.no		1970-01-01 00:00:00.000
polpos.cue.api.no		1970-01-01 00:00:00.000
r-snap0.api.no		1970-01-01 00:00:00.000
r-snap1.api.no	87.238.37.202	2026-06-04 17:02:10.425

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

162.55.156.171:443 c1d714ff000c…

Subject: api.nobank.app

Issuer: YR1

SANs: api.nobank.app

38.207.179.242:443 43badb30f5e2…

Subject: api.novascriber.com

Issuer: YR1

SANs: api.novascriber.com

34.144.213.14:443 4022c1acd6fd…

Subject: se.api.nowpay.cloud

Issuer: WR3

SANs: se.api.nowpay.cloud

83.228.250.91:443 04bd7e18f8e6…

Subject: api.notarportal.ch

Issuer: YE2

SANs: api.notarportal.ch

141.227.151.216:443 6445586675c1…

Subject: ksefapi.nomee.pl

Issuer: YE2

SANs: ksefapi.nomee.pl

137.74.215.143:443 9e65f3cfbd9f…

Subject: api.noleggio.expert

Issuer: YR2

SANs: api.noleggio.expert

116.203.2.207:443 208560b43a70…

Subject: accounts-api.noqta.ps

Issuer: YE1

SANs: accounts-api.noqta.ps, www.accounts-api.noqta.ps

125.25.201.10:443 3e803d09b6e3…

Subject: api.north.cat.net.th

Issuer: E7

SANs: api.north.cat.net.th

23.196.156.207:443 cb5a09ffaf37…

Subject: identify-api.nordea.com

Issuer: DigiCert G3 TLS EU ECC P-384 SHA384 2022 CA1

SANs: identify-api.nordea.com

204.168.140.88:443 91e97f221f47…

Subject: api.noticiasambientales.com

Issuer: YE2

SANs: api.noticiasambientales.com

66.175.221.233:443 dfd596bb81cb…

Subject: api.noiseandweather.com

Issuer: YR2

SANs: api.noiseandweather.com

77.56.83.167:443 0ce1cbffda30…

Subject: api.noahpombas.ch

Issuer: YR2

SANs: api.noahpombas.ch

188.253.17.78:9443 df555162a803…

Subject: api.noekigor.org

Issuer: YE2

SANs: api.noekigor.org

47.253.190.2:443 a35b7eb6d318…

Subject: api.nottycat.com

Issuer: Encryption Everywhere DV TLS CA - G2

SANs: api.nottycat.com, www.api.nottycat.com

23.32.58.242:443 cb5a09ffaf37…

Subject: identify-api.nordea.com

Issuer: DigiCert G3 TLS EU ECC P-384 SHA384 2022 CA1

SANs: identify-api.nordea.com

157.10.160.115:443 46109bb496ac…

Subject: api.nontonku.com

Issuer: api.nontonku.com

SANs: api.nontonku.com

23.49.121.205:443 cb5a09ffaf37…

Subject: identify-api.nordea.com

Issuer: DigiCert G3 TLS EU ECC P-384 SHA384 2022 CA1

SANs: identify-api.nordea.com

112.124.12.188:443 5a35ad7dc438…

Subject: www.api.norya.cn

Issuer: Encryption Everywhere DV TLS CA - G2

SANs: api.norya.cn, www.api.norya.cn

34.102.139.23:443 666f515e0402…

Subject: nucleus-api.nonprod.zdnet.com

Issuer: WR3

SANs: nucleus-api.nonprod.zdnet.com

34.56.28.231:443 6b6deb33efb6…

Subject: gpt-api.nominis.io

Issuer: YE2

SANs: gpt-api.nominis.io

13.71.157.193:443 e4f2822d338e…

Subject: sub2api.noetes.dpdns.org

Issuer: YR2

SANs: sub2api.noetes.dpdns.org

47.94.98.2:443 da46aa02c63a…

Subject: api.no-lord.com

Issuer: Encryption Everywhere DV TLS CA - G2

SANs: api.no-lord.com, www.api.no-lord.com

89.117.50.184:443 96a95e0bcdb4…

Subject: api.node-erp.taskenlab.com

Issuer: YE2

SANs: api.node-erp.taskenlab.com

23.36.232.207:443 cb5a09ffaf37…

Subject: identify-api.nordea.com

Issuer: DigiCert G3 TLS EU ECC P-384 SHA384 2022 CA1

SANs: identify-api.nordea.com

168.119.189.9:443 42154b299d8e…

Subject: api.nokai.uz

Issuer: YE1

SANs: api.nokai.uz

121.43.115.15:443 8400dda89f53…

Subject: api.nottamed.top

Issuer: E8

SANs: api.nottamed.top

82.165.56.223:443 b91032409592…

Subject: aapi.notetaking.app

Issuer: YR2

SANs: aapi.notetaking.app, notetaking.app

66.42.63.108:443 5c806a10734c…

Subject: ittp-collection-api.noburo.co

Issuer: YR2

SANs: ittp-collection-api.noburo.co, ittp-collection.noburo.co, ittp-report.noburo.co

34.107.159.168:443 4f7eb36b72a5…

Subject: api.notification.dev.lanthan-safe-sky.com

Issuer: WR3

SANs: api.notification.dev.lanthan-safe-sky.com

34.133.231.40:443 c20329ea7f71…

Subject: api.nostrumcapital.com

Issuer: YE2

SANs: api.nostrumcapital.com

IPs Citing This Domain

No citing IPs found yet

As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

No origin-IP leaks detected (yet)

Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.

Type	Value	First seen	Last seen
NS	nsb.dnsnode.net	2026-06-01 19:43:46.544	2026-06-26 01:31:22.086
TXT	v=spf1 include:_spf.aid.no -all	2026-06-01 19:43:46.544	2026-06-26 01:31:22.086
AAAA	2a02:c0:ac::e51:1	2026-06-01 19:43:46.544	2026-06-26 01:31:22.086
NS	nsu.dnsnode.net	2026-06-01 19:43:46.544	2026-06-26 01:31:22.086
A	87.238.38.2	2026-06-01 19:43:46.544	2026-06-26 01:31:22.086
MX	5 alt2.aspmx.l.google.com	2026-06-01 19:43:46.544	2026-06-26 01:31:22.086
TXT	6e3fe8279f8a40258a48f35bd15bc493	2026-06-01 19:43:46.544	2026-06-26 01:31:22.086
MX	10 alt4.aspmx.l.google.com	2026-06-01 19:43:46.544	2026-06-26 01:31:22.086
MX	1 aspmx.l.google.com	2026-06-01 19:43:46.544	2026-06-26 01:31:22.086
A	87.238.38.1	2026-06-01 19:43:46.544	2026-06-26 01:31:22.086
MX	5 alt1.aspmx.l.google.com	2026-06-01 19:43:46.544	2026-06-26 01:31:22.086
NS	nsp.dnsnode.net	2026-06-01 19:43:46.544	2026-06-26 01:31:22.086
MX	10 alt3.aspmx.l.google.com	2026-06-01 19:43:46.544	2026-06-26 01:31:22.086
TXT	google-site-verification=BmX8cezo6eB-heWcTEeMnMlpzYL0SqnAMYIFIoocxcg	2026-06-01 19:43:46.544	2026-06-26 01:31:22.086