Domain
cern.ch
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of cern.ch
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
Hosting IPs
1,221
A/AAAA targets
Subdomains
3,206
CT + scan + body
Record Types
6
seen in DNS
Observed Certs
2
in our scans
DNS Records
A
—
AAAA
—
MX
—
NS
—
TXT
—
CNAME
—
CAA
—
WHOIS / Registration
Registration data planned
Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.
Subdomains
Subdomain enumeration pending
Every subdomain ever issued a TLS cert under this apex — extracted from Certificate Transparency logs, our own scan observations and body references.
Tech Stack
Tech detection pending
Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.
TLS Certificates
Subject: st-120-100gb-mxhgdo.cern.ch
Issuer: CERN Grid Certification Authority
SANs: st-120-100gb-mxhgdo.cern.ch
Subject: linuxsoft.cern.ch
Issuer: Sectigo Public Server Authentication CA OV R36
SANs: linuxsoft.cern.ch, www.linuxsoft.cern.ch
Subject: tzoradmin91.cern.ch
Issuer: CERN Grid Certification Authority
SANs: tzoradmin91.cern.ch
Subject: *.cernbox.cern.ch
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.cernbox.cern.ch, cernbox.cern.ch
Subject: www.cern.ch
Issuer: Sectigo Public Server Authentication CA OV R36
SANs: *.app.cern.ch, *.apptest.cern.ch, *.docs.cern.ch, *.web.cern.ch, *.webtest.cern.ch, about.cern, accelerating-news.eu, acceleratingnews.eu, accelerators.cern, againstcovid19.cern, alice.cern, aliceinfo.cern.ch, ams02.space, antimatter.cern, arts.cern, at.cern, atlas.cern, awake.cern, beamlineforschools.cern, beams.cern, belgium.cern, bulletinserv.cern.ch, careers.cern, cern.ch, cern.int, cern70.cern, cernandsocietyfoundation.cern, chis.cern, cixp.net, clear.cern, clic.cern, cms.cern, computing.cern, cosmicrays.cern, darkmatter.cern, dashb-cms-vo-feed.cern.ch, education.cern, engineering.cern, environment.cern, europeanstrategy.cern, experiments.cern, flair.cern, fluka.cern, giving.cern, groups.cern.ch, higgsboson.cern, home.cern, hse.cern, ideasquare.cern, ifast-project.eu, info.cern.ch, internationalrelations.cern, ippog.org, isolde.cern, jobs.cern, knowledge.cern, kt.cern, learn.cern, lhc.cern, library.cern, medicis.cern, monit.cern.ch, news.cern, newsroom.cern, nic.cern, norway.cern, open-quantum-institute.cern, opendays.cern, openlab.cern, openscience.cern, opensource.cern, oqi.cern, particles.cern, pensionfund.cern.ch, physics.cern, press.cern, quantum.cern, quantum.cern.ch, root.cern, root.cern.ch, science.cern, sciencegateway.cern, scienceinschool.org, scientific-info.cern, search.cern.ch, sparks.cern, staff-association.cern, standardmodel.cern, supersymmetry.cern, teachers.cern, technology.cern, theory.cern, united-states.cern, ventureconnect.cern, visit.cern, voisins.cern, webfest.cern, www.ams02.space, www.arts.cern, www.atlas.cern, www.cern, www.cern.ch, www.cern.int, www.cixp.net, www.home.cern
Subject: monit-grafana.cern.ch
Issuer: Sectigo Public Server Authentication CA OV R36
SANs: monit-grafana-open.cern.ch, monit-grafana.cern.ch
Subject: st-096-100gb-ip311-3f101.cern.ch
Issuer: CERN Grid Certification Authority
SANs: st-096-100gb-ip311-3f101.cern.ch
Subject: p06636710d54379.cern.ch
Issuer: CERN Grid Certification Authority
SANs: p06636710d54379.cern.ch
Subject: st-048-a02076a6.cern.ch
Issuer: CERN Grid Certification Authority
SANs: st-048-a02076a6.cern.ch
Subject: p06636710r35645.cern.ch
Issuer: CERN Grid Certification Authority
SANs: p06636710r35645.cern.ch
Subject: aipanda105.cern.ch
Issuer: CERN Grid Certification Authority
SANs: aipanda105.cern.ch
Subject: keystone.cern.ch
Issuer: Sectigo Public Server Authentication CA OV R36
SANs: keystone.cern.ch, www.keystone.cern.ch
Subject: mdm-storage-1.cern.ch
Issuer: YE2
SANs: mdm-storage-1.cern.ch
Subject: st-096-gg500b5c.cern.ch
Issuer: CERN Grid Certification Authority
SANs: st-096-gg500b5c.cern.ch
Subject: aipanda159.cern.ch
Issuer: CERN Grid Certification Authority
SANs: aipanda159.cern.ch
Subject: keystone.cern.ch
Issuer: Sectigo Public Server Authentication CA OV R36
SANs: keystone.cern.ch, www.keystone.cern.ch
Subject: aiatlas191.cern.ch
Issuer: CERN Grid Certification Authority
SANs: aiatlas191.cern.ch, atlas-runquery.cern.ch
Subject: vocms045.cern.ch
Issuer: YE2
SANs: frontierdev1.cern.ch, frontiermondev.cern.ch, frontiermondev1.cern.ch, vocms045.cern.ch
Subject: network.cern.ch
Issuer: Sectigo Public Server Authentication CA OV R36
SANs: bs-csweb-sb.cern.ch, bs-csweb.cern.ch, cernphone-dev.cern.ch, cernphone-prod.cern.ch, cernphone-qa.cern.ch, cernphone-standby.cern.ch, cernphone.cern.ch, csdb-dev.cern.ch, csdb-prod.cern.ch, csdb-qa.cern.ch, csdb-standby.cern.ch, csdb.cern.ch, landb-api.cern.ch, landb-dev.cern.ch, landb-prod.cern.ch, landb-qa.cern.ch, landb-rest-dev.cern.ch, landb-rest-qa.cern.ch, landb-rest.cern.ch, landb-standby.cern.ch, landb.cern.ch, landbext.cern.ch, network-dev.cern.ch, network-legacy.cern.ch, network-prod.cern.ch, network-qa.cern.ch, network-services-dev.cern.ch, network-services-ip1.cern.ch, network-services-its-external.cern.ch, network-services-its-internal.cern.ch, network-services-qa.cern.ch, network-services.cern.ch, network-standby.cern.ch, network-upgrade.cern.ch, network.cern.ch, webreq-dev.cern.ch, webreq-prod.cern.ch, webreq-qa.cern.ch, webreq-standby.cern.ch, wifi-visitors-dev.cern.ch, wifi-visitors-qa.cern.ch, wifi-visitors.cern.ch, www.network.cern.ch
Subject: eisdwa.cern.ch
Issuer: CERN Grid Certification Authority
SANs: eisdmaps.cern.ch, eisdportal.cern.ch, eisdwa.cern.ch
Subject: st-120-100gb-d9vbda.cern.ch
Issuer: CERN Grid Certification Authority
SANs: st-120-100gb-d9vbda.cern.ch
Subject: cmsweb.cern.ch
Issuer: CERN Grid Certification Authority
SANs: cmsweb.cern.ch
Subject: linuxsoft.cern.ch
Issuer: Sectigo Public Server Authentication CA OV R36
SANs: linuxsoft.cern.ch, www.linuxsoft.cern.ch
Subject: rog.cern.ch
Issuer: Sectigo Public Server Authentication CA OV R36
SANs: rog-dev.cern.ch, rog-next.cern.ch, rog-old.cern.ch, rog.cern.ch, rog7.cern.ch, rog9-dev.cern.ch, rog9.cern.ch
Subject: www.cern.ch
Issuer: Sectigo Public Server Authentication CA OV R36
SANs: *.app.cern.ch, *.apptest.cern.ch, *.docs.cern.ch, *.web.cern.ch, *.webtest.cern.ch, about.cern, accelerating-news.eu, acceleratingnews.eu, accelerators.cern, againstcovid19.cern, alice.cern, aliceinfo.cern.ch, ams02.space, antimatter.cern, arts.cern, at.cern, atlas.cern, awake.cern, beamlineforschools.cern, beams.cern, belgium.cern, bulletinserv.cern.ch, careers.cern, cern.ch, cern.int, cern70.cern, cernandsocietyfoundation.cern, chis.cern, cixp.net, clear.cern, clic.cern, cms.cern, computing.cern, cosmicrays.cern, darkmatter.cern, dashb-cms-vo-feed.cern.ch, education.cern, engineering.cern, environment.cern, europeanstrategy.cern, experiments.cern, flair.cern, fluka.cern, giving.cern, groups.cern.ch, higgsboson.cern, home.cern, hse.cern, ideasquare.cern, ifast-project.eu, info.cern.ch, internationalrelations.cern, ippog.org, isolde.cern, jobs.cern, knowledge.cern, kt.cern, learn.cern, lhc.cern, library.cern, medicis.cern, monit.cern.ch, news.cern, newsroom.cern, nic.cern, norway.cern, open-quantum-institute.cern, opendays.cern, openlab.cern, openscience.cern, opensource.cern, oqi.cern, particles.cern, pensionfund.cern.ch, physics.cern, press.cern, quantum.cern, quantum.cern.ch, root.cern, root.cern.ch, science.cern, sciencegateway.cern, scienceinschool.org, scientific-info.cern, search.cern.ch, sparks.cern, staff-association.cern, standardmodel.cern, supersymmetry.cern, teachers.cern, technology.cern, theory.cern, united-states.cern, ventureconnect.cern, visit.cern, voisins.cern, webfest.cern, www.ams02.space, www.arts.cern, www.atlas.cern, www.cern, www.cern.ch, www.cern.int, www.cixp.net, www.home.cern
Subject: atlas-glance.cern.ch
Issuer: Sectigo Public Server Authentication CA OV R36
SANs: atlas-glance.cern.ch, www.atlas-glance.cern.ch
Subject: *.s3.cern.ch
Issuer: Sectigo Public Server Authentication CA OV R36
SANs: *.s3-fr-prevessin-1.cern.ch, *.s3-fr-website.cern.ch, *.s3-mu-website.cern.ch, *.s3-mu.cern.ch, *.s3-website.cern.ch, *.s3.cern.ch, s3-fr-prevessin-1.cern.ch, s3-fr-website.cern.ch, s3-mu-website.cern.ch, s3-mu.cern.ch, s3-website.cern.ch, s3.cern.ch
Subject: osclhcb301.cern.ch
Issuer: CERN Grid Certification Authority
SANs: os-lhcb-dirac.cern.ch, os-lhcb-dirac2.cern.ch, osclhcb301.cern.ch
Subject: st-096-100gb-ip309-ed774.cern.ch
Issuer: CERN Grid Certification Authority
SANs: st-096-100gb-ip309-ed774.cern.ch
Subject: st-048-5279d3fb.cern.ch
Issuer: CERN Grid Certification Authority
SANs: st-048-5279d3fb.cern.ch
IPs Citing This Domain
Hosts whose HTML body references this domain. Strong signal for origin/mirror/embed discovery.
151.158.1.252:80
href · ×6
188.185.6.133:443
href · ×3
188.185.25.66:80
href · ×2
109.190.115.225:80
href · ×2
188.185.65.205:443
href · ×2
188.184.75.179:443
href · ×2
137.138.153.169:443
href · ×2
188.185.67.156:443
href · ×2
134.75.125.247:8000
href · ×2
164.46.46.228:443
href · ×1
151.127.196.54:443
href · ×1
77.42.250.178:8443
href · ×1
188.184.91.124:443
href · ×1
77.42.250.186:8443
href · ×1
159.93.37.11:8443
href · ×1
159.93.37.12:8443
href · ×1
128.6.227.231:443
href · ×1
Origin / IP-Leak
USP
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
No origin-IP leaks detected (yet)
Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.
CT-Log Evidence
Certificates from public Certificate Transparency logs whose subject or SAN names this domain — including historic certs we never observed live.
170d6b789464bcc4…
google · argon2026h2
Subject: www.cern.ch
Issuer: Sectigo Public Server Authentication CA OV R36
SANs: www.cern.ch, *.app.cern.ch, *.apptest.cern.ch, *.docs.cern.ch, *.web.cern.ch, *.webtest.cern.ch, about.cern, accelerating-news.eu, acceleratingnews.eu, accelerators.cern, againstcovid19.cern, alice.cern, aliceinfo.cern.ch, ams02.space, antimatter.cern, arts.cern, at.cern, atlas.cern, awake.cern, beamlineforschools.cern, beams.cern, belgium.cern, bulletinserv.cern.ch, careers.cern, cern.ch, cern.int, cern70.cern, cernandsocietyfoundation.cern, chis.cern, cixp.net, clear.cern, clic.cern, cms.cern, computing.cern, cosmicrays.cern, darkmatter.cern, dashb-cms-vo-feed.cern.ch, education.cern, engineering.cern, environment.cern, europeanstrategy.cern, experiments.cern, flair.cern, fluka.cern, giving.cern, groups.cern.ch, higgsboson.cern, home.cern, hse.cern, ideasquare.cern, ifast-project.eu, info.cern.ch, internationalrelations.cern, ippog.org, isolde.cern, jobs.cern, knowledge.cern, kt.cern, learn.cern, lhc.cern, library.cern, medicis.cern, monit.cern.ch, news.cern, newsroom.cern, nic.cern, norway.cern, open-quantum-institute.cern, opendays.cern, openlab.cern, openscience.cern, opensource.cern, oqi.cern, particles.cern, pensionfund.cern.ch, physics.cern, press.cern, quantum.cern, quantum.cern.ch, root.cern, root.cern.ch, science.cern, sciencegateway.cern, scienceinschool.org, scientific-info.cern, search.cern.ch, sparks.cern, staff-association.cern, standardmodel.cern, supersymmetry.cern, teachers.cern, technology.cern, theory.cern, united-states.cern, ventureconnect.cern, visit.cern, voisins.cern, webfest.cern, www.ams02.space, www.arts.cern, www.atlas.cern, www.cern, www.cern.int, www.cixp.net, www.home.cern
Valid: 2025-11-05 00:00:00 → 2026-11-24 23:59:59
170d6b789464bcc4…
google · xenon2026h2
Subject: www.cern.ch
Issuer: Sectigo Public Server Authentication CA OV R36
SANs: www.cern.ch, *.app.cern.ch, *.apptest.cern.ch, *.docs.cern.ch, *.web.cern.ch, *.webtest.cern.ch, about.cern, accelerating-news.eu, acceleratingnews.eu, accelerators.cern, againstcovid19.cern, alice.cern, aliceinfo.cern.ch, ams02.space, antimatter.cern, arts.cern, at.cern, atlas.cern, awake.cern, beamlineforschools.cern, beams.cern, belgium.cern, bulletinserv.cern.ch, careers.cern, cern.ch, cern.int, cern70.cern, cernandsocietyfoundation.cern, chis.cern, cixp.net, clear.cern, clic.cern, cms.cern, computing.cern, cosmicrays.cern, darkmatter.cern, dashb-cms-vo-feed.cern.ch, education.cern, engineering.cern, environment.cern, europeanstrategy.cern, experiments.cern, flair.cern, fluka.cern, giving.cern, groups.cern.ch, higgsboson.cern, home.cern, hse.cern, ideasquare.cern, ifast-project.eu, info.cern.ch, internationalrelations.cern, ippog.org, isolde.cern, jobs.cern, knowledge.cern, kt.cern, learn.cern, lhc.cern, library.cern, medicis.cern, monit.cern.ch, news.cern, newsroom.cern, nic.cern, norway.cern, open-quantum-institute.cern, opendays.cern, openlab.cern, openscience.cern, opensource.cern, oqi.cern, particles.cern, pensionfund.cern.ch, physics.cern, press.cern, quantum.cern, quantum.cern.ch, root.cern, root.cern.ch, science.cern, sciencegateway.cern, scienceinschool.org, scientific-info.cern, search.cern.ch, sparks.cern, staff-association.cern, standardmodel.cern, supersymmetry.cern, teachers.cern, technology.cern, theory.cern, united-states.cern, ventureconnect.cern, visit.cern, voisins.cern, webfest.cern, www.ams02.space, www.arts.cern, www.atlas.cern, www.cern, www.cern.int, www.cixp.net, www.home.cern
Valid: 2025-11-05 00:00:00 → 2026-11-24 23:59:59
2ca7797c813e9bee…
google · xenon2026h2
Subject: www.cern.ch
Issuer: Sectigo Public Server Authentication CA OV R36
SANs: www.cern.ch, *.app.cern.ch, *.apptest.cern.ch, *.docs.cern.ch, *.web.cern.ch, *.webtest.cern.ch, about.cern, accelerating-news.eu, acceleratingnews.eu, accelerators.cern, againstcovid19.cern, alice.cern, aliceinfo.cern.ch, ams02.space, antimatter.cern, arts.cern, at.cern, atlas.cern, awake.cern, beamlineforschools.cern, beams.cern, belgium.cern, bulletinserv.cern.ch, careers.cern, cern.ch, cern.int, cern70.cern, cernandsocietyfoundation.cern, chis.cern, cixp.net, clear.cern, clic.cern, cms.cern, computing.cern, cosmicrays.cern, darkmatter.cern, dashb-cms-vo-feed.cern.ch, education.cern, engineering.cern, environment.cern, europeanstrategy.cern, experiments.cern, flair.cern, fluka.cern, giving.cern, groups.cern.ch, higgsboson.cern, home.cern, hse.cern, ideasquare.cern, ifast-project.eu, info.cern.ch, internationalrelations.cern, ippog.org, isolde.cern, jobs.cern, knowledge.cern, kt.cern, learn.cern, lhc.cern, library.cern, medicis.cern, monit.cern.ch, news.cern, newsroom.cern, nic.cern, norway.cern, open-quantum-institute.cern, opendays.cern, openlab.cern, openscience.cern, opensource.cern, oqi.cern, particles.cern, pensionfund.cern.ch, physics.cern, press.cern, quantum.cern, quantum.cern.ch, root.cern, root.cern.ch, science.cern, sciencegateway.cern, scienceinschool.org, scientific-info.cern, search.cern.ch, sparks.cern, staff-association.cern, standardmodel.cern, supersymmetry.cern, teachers.cern, technology.cern, theory.cern, united-states.cern, ventureconnect.cern, visit.cern, voisins.cern, webfest.cern, www.ams02.space, www.arts.cern, www.atlas.cern, www.cern, www.cern.int, www.cixp.net, www.home.cern
Valid: 2025-11-05 00:00:00 → 2026-11-24 23:59:59
Threat Intelligence
Domain threat-intel pending
Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.
History
Domain timeline pending
Passive-DNS history accumulates as our forward-DNS crawler observes A/AAAA/MX/NS/TXT records over time.