Check-Host.cc

Try 1.1.1.1 AS13335 check-host.cc /country/de /tld/cc
Domain

nber.org

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

DNS Check HTTP Check Run Full Scan .org TLD

Run a live full scan of nber.org

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now
Hosting IPs
20
A/AAAA targets
Subdomains
31
CT + scan + body
Record Types
6
seen in DNS
Observed Certs
5
in our scans

DNS Records

A
23.185.0.2
AAAA
2620:12a:8000::2, 2620:12a:8001::2
MX
10 smtp.nber.org
NS
a1-251.akam.net, a12-64.akam.net, a13-67.akam.net, a14-65.akam.net, a20-66.akam.net, a9-64.akam.net
TXT
MS=1919A71D3A6E75D2204D87450426F33919B5B82C, MS=ms98599286, _2054k27jjc62pg21uxmu9v3wl0ckg16, _dp7u7p4tl685hqjvl8x8endr7tz8owz, _plnq128kisw5qn6lm3vtco1x55xllta, _x3dp290k85ybkau5xibcskhm1f9m6le, atlassian-domain-verification=dBrjW25GtZgWrVcM0nNUUqu35hjEOMjjxwHdYp0TMnZ1tVMf8PojyXFOJ6tbj9AX, atlassian-sending-domain-verification=333de3e6-9fdc-4e1d-81ba-0c1edfe8ce6c
CNAME
—
CAA
0 issue "digicert.com", 0 issue "letsencrypt.org"

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Subdomain enumeration pending

Every subdomain ever issued a TLS cert under this apex — extracted from Certificate Transparency logs, our own scan observations and body references.

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

198.71.6.119:443 561d96998fd1…
Subject: *.nber.org
Issuer: GeoTrust TLS RSA CA G1
SANs: *.nber.org, nber.org
198.71.6.2:443 561d96998fd1…
Subject: *.nber.org
Issuer: GeoTrust TLS RSA CA G1
SANs: *.nber.org, nber.org
198.71.6.82:443 561d96998fd1…
Subject: *.nber.org
Issuer: GeoTrust TLS RSA CA G1
SANs: *.nber.org, nber.org

IPs Citing This Domain

Hosts whose HTML body references this domain. Strong signal for origin/mirror/embed discovery.

32.199.8.216:443 href · ×1

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

Origin IP Origin ASN CDN ASN Confidence Reasoning
198.71.6.119 AS26287 AS54113 95% cert 561d9699… served by 198.71.6.119 (AS26287) carries SAN nber.org which currently resolves through Fastly (AS54113) at 2620:12a:8000::2, 2620:12a:8001::2, 23.185.0.2
198.71.6.2 AS26287 AS54113 95% cert 561d9699… served by 198.71.6.2 (AS26287) carries SAN nber.org which currently resolves through Fastly (AS54113) at 2620:12a:8000::2, 2620:12a:8001::2, 23.185.0.2
198.71.6.82 AS26287 AS54113 95% cert 561d9699… served by 198.71.6.82 (AS26287) carries SAN nber.org which currently resolves through Fastly (AS54113) at 2620:12a:8000::2, 2620:12a:8001::2, 23.185.0.2

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.

Type Value First seen Last seen
A 23.185.0.2 2026-05-26 03:46:08.458 2026-07-15 20:04:13.980
TXT atlassian-sending-domain-verification=333de3e6-9fdc-4e1d-81ba-0c1edfe8ce6c 2026-05-26 03:46:08.458 2026-07-15 20:04:13.980
AAAA 2620:12a:8000::2 2026-05-26 03:46:08.458 2026-07-15 20:04:13.980
NS a12-64.akam.net 2026-05-26 03:46:08.458 2026-07-15 20:04:13.980
NS a13-67.akam.net 2026-05-26 03:46:08.458 2026-07-15 20:04:13.980
TXT MS=ms98599286 2026-05-26 03:46:08.458 2026-07-15 20:04:13.980
TXT MS=1919A71D3A6E75D2204D87450426F33919B5B82C 2026-05-26 03:46:08.458 2026-07-15 20:04:13.980
TXT duo_sso_verification=0tQrq6xK2Jt072l8RZ5zMtDGyPU37u9kofZGrpJOBRZBTVX27oejvcJtwcn3xzEM 2026-05-26 03:46:08.458 2026-07-15 20:04:13.980
NS a20-66.akam.net 2026-05-26 03:46:08.458 2026-07-15 20:04:13.980
NS a9-64.akam.net 2026-05-26 03:46:08.458 2026-07-15 20:04:13.980
NS a14-65.akam.net 2026-05-26 03:46:08.458 2026-07-15 20:04:13.980
TXT bw=K3XDRppE9jDowgO5KzHoXx8XjrJ5a4DKV33/HC7sK8Vk 2026-05-26 03:46:08.458 2026-07-15 20:04:13.980
CAA 0 issue "digicert.com" 2026-05-26 03:46:08.458 2026-07-15 20:04:13.980
TXT _dp7u7p4tl685hqjvl8x8endr7tz8owz 2026-05-26 03:46:08.458 2026-07-15 20:04:13.980
TXT v=spf1 ip4:198.71.6.0/23 ip4:131.239.125.82/32 ip4:159.183.200.84/32 ip4:23.185.0.2/32 ip4:10.200.0.0/24 ip4:10.200.12.0/24 ip4:172.16.0.0/24 ip4:172.16.99.0/24 include:_spf.google.com include:_spf.atlassian.net include:spf.serverdata.net include:_spf.psm.knowbe4.com ~all 2026-05-26 03:46:08.458 2026-07-15 20:04:13.980
MX 10 smtp.nber.org 2026-05-26 03:46:08.458 2026-07-15 20:04:13.980
TXT atlassian-domain-verification=dBrjW25GtZgWrVcM0nNUUqu35hjEOMjjxwHdYp0TMnZ1tVMf8PojyXFOJ6tbj9AX 2026-05-26 03:46:08.458 2026-07-15 20:04:13.980
TXT google-site-verification=mxoK3UIHRdAuGrKvk3hnRp1pBXgJ4LXyietKXcxvmq8 2026-05-26 03:46:08.458 2026-07-15 20:04:13.980
AAAA 2620:12a:8001::2 2026-05-26 03:46:08.458 2026-07-15 20:04:13.980
TXT google-site-verification=_tGboNGFSXvGY8Xt5gPSRaRXSHgCPngXqFyQ-g_tN8I 2026-05-26 03:46:08.458 2026-07-15 20:04:13.980
CAA 0 issue "letsencrypt.org" 2026-05-26 03:46:08.458 2026-07-15 20:04:13.980
NS a1-251.akam.net 2026-05-26 03:46:08.458 2026-07-15 20:04:13.980
TXT _plnq128kisw5qn6lm3vtco1x55xllta 2026-05-26 03:46:08.458 2026-07-15 20:04:13.980
TXT _2054k27jjc62pg21uxmu9v3wl0ckg16 2026-06-15 08:35:28.702 2026-06-17 11:19:04.151
TXT _x3dp290k85ybkau5xibcskhm1f9m6le 2026-07-15 20:04:13.980 2026-07-15 20:04:13.980