Domain

whitecase.com

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

DNS Check HTTP Check Run Full Scan .com TLD

Run a live full scan of whitecase.com

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now

Hosting IPs

128

A/AAAA targets

Subdomains

255

CT + scan + body

Record Types

seen in DNS

Observed Certs

in our scans

DNS Records

23.34.59.12, 23.34.59.5

AAAA

—

10 mxa-0016a202.gslb.pphosted.com, 10 mxb-0016a202.gslb.pphosted.com

a1-158.akam.net, a13-64.akam.net, a18-67.akam.net, a20-66.akam.net, a24-67.akam.net, a9-67.akam.net

TXT

MS=ms57591675, adobe-idp-site-verification=d7070f313190be218cdc3023d1defd933c418b3e2592fe2b18fbd0864b24cbef, anthropic-domain-verification-8q81gv=9GFCCHOGLMMhP53b0zlkkoIOd, atlassian-domain-verification=iBV3ew4bRc9j0Ja7hfGou3NUT0BjGgTZtpZyX6YGWCz8S7i8QJ5I2dBWzwdaQpN6, box-domain-verification=94bc9c02b09318d4b70df142298f61b21408425d902bb9056a82e65f413036f7, docusign=4ca6ecc5-aee5-4add-afa4-3c7846d05f93, dropbox-domain-verification=vojclw4l1huh, eCl-6PADuhY_YS9_yiOxpDCx96hr7fznBDhNBpak7DI

CNAME

—

CAA

—

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.

Subdomain	Resolves to	Last seen
assets.whitecase.com	3.174.46.42 2600:9000:20ab:1600:1e:5b85:1700:93a1 2600:9000:20ab:3c00:1e:5b85:1700:93a1 18.239.50.63 +19	2026-07-28 05:01:29.903
events.whitecase.com	2.19.195.41 23.53.43.48 23.53.43.59 2.19.195.35 +2	2026-07-28 05:01:29.903
news.whitecase.com	13.43.9.56 13.43.167.12 13.135.156.56 16.60.251.245 +2	2026-07-28 05:01:29.903
remote.whitecase.com	2.19.195.41 2.19.195.35 104.115.82.33 104.115.82.10 +2	2026-07-28 05:01:29.903
services.whitecase.com	2.19.195.35 2.19.195.41 104.115.82.10 104.115.82.33 +2	2026-07-28 05:01:29.903
brainspace.eu.whitecase.com	104.18.35.236 172.64.152.20 2606:4700:4406::ac40:9814 2606:4700:4406::6812:23ec	2026-06-22 22:04:45.034
brainspace.us.whitecase.com	104.18.35.236 172.64.152.20 2a06:98c1:3108::6812:23ec 2606:4700:4405::ac40:9814	2026-07-25 01:04:40.245
relativity.eu.whitecase.com	172.64.151.184 104.18.36.72 2606:4700:4405::6812:2448 2606:4700:4408::ac40:97b8	2026-07-26 23:22:41.648
share3.whitecase.com	104.18.2.146 104.18.16.246 104.18.17.246 104.18.3.146	2026-07-26 09:28:25.968
share4.whitecase.com	104.18.6.156 104.18.5.9 104.18.4.9 104.18.7.156	2026-07-27 06:28:37.595
shop.whitecase.com	172.66.41.7 172.66.42.249 2606:4700:3108::ac42:2907 2606:4700:3108::ac42:2af9	2026-07-28 05:01:29.903
uat.whitecase.com	23.196.3.190 23.196.3.172 2.19.195.49 2.19.195.123	2026-07-28 05:01:29.903
caserooms-eu.whitecase.com	2.16.6.154 2.16.27.75 2.16.6.146	2026-07-18 12:38:39.694
portal.whitecase.com	2.19.195.41 2.19.195.35 2.19.195.48	2026-06-17 13:33:11.734
www.whitecase.com	23.53.11.142 23.53.11.137 23.55.163.137	2026-07-28 05:01:29.903
amfilesweb.whitecase.com	104.110.240.162 104.110.240.64	2026-06-21 16:31:21.272
caserooms-ap.whitecase.com	104.110.240.160 104.110.240.81	2026-07-18 12:38:39.694
caserooms-au.whitecase.com	2.18.64.14 2.18.64.10	2026-07-18 12:38:39.694
caserooms-auoos.whitecase.com	104.110.240.160 104.110.240.81	2026-07-18 12:38:39.694
caserooms-dev.whitecase.com	2.16.6.204 2.16.6.222	2026-07-18 12:38:39.694
caserooms-devoos.whitecase.com	23.221.227.208 23.221.227.198	2026-07-18 12:38:39.694
caserooms-euoos.whitecase.com	104.110.240.81 104.110.240.160	2026-07-18 12:38:39.694
caserooms-sa.whitecase.com	104.110.240.160 104.110.240.81	2026-07-18 12:38:39.694
caserooms-saoos.whitecase.com	104.110.240.81 104.110.240.160	2026-07-18 12:38:39.694
caserooms-us.whitecase.com	104.110.240.160 104.110.240.81	2026-07-18 12:38:39.694
caserooms-usoos.whitecase.com	23.200.88.59 23.200.88.61	2026-07-18 12:38:39.694
caserooms.whitecase.com	104.110.240.160 104.110.240.81	2026-07-18 12:38:39.694
collab-edge.whitecase.com	62.96.244.23 63.131.130.220	2026-07-22 12:32:35.760
conference.whitecase.com	2.17.22.145 95.101.79.11	2026-06-17 13:33:11.734
connect.whitecase.com	23.53.43.59 23.53.43.48	2026-06-17 13:33:11.734
deepl.whitecase.com	23.53.43.48 23.53.43.59	2026-06-17 13:33:11.734
dev-toolkit.whitecase.com	95.101.79.11 2.17.22.145	2026-06-17 13:33:11.734
dev-wcreview-us.whitecase.com	2.16.6.200 2.16.6.206	2026-07-21 10:32:26.139
devsfs.whitecase.com	104.110.240.162 104.110.240.64	2026-06-21 16:31:21.272
directspaces-dev.whitecase.com	2.17.22.145 95.101.79.11	2026-06-17 13:33:11.734
directspaces.whitecase.com	2.19.195.48 2.19.195.41	2026-06-17 13:33:11.734
dm76.uk.whitecase.com	172.65.215.36 2606:4700:90:0:a52c:2c3e:266a:c2e1	2026-06-22 20:14:25.197
geoexpe001.gslb.whitecase.com	63.131.130.220 62.96.244.24	2026-07-22 12:32:35.760
hkgrad.whitecase.com	2.19.195.41 2.19.195.48	2026-06-17 13:33:11.734
hqekmam.whitecase.com	2.19.195.41 2.19.195.48	2026-06-17 13:33:11.734
jabberservice.whitecase.com	2.19.195.48 2.19.195.41	2026-06-17 13:33:11.734
localcounsel.whitecase.com	2.19.195.41 2.19.195.48	2026-06-17 13:33:11.734
meetam.whitecase.com	63.131.130.220 63.131.130.222	2026-07-22 12:32:35.760
meetap.whitecase.com	128.106.13.17 128.106.13.18	2026-07-22 12:32:35.760
meetem.whitecase.com	62.96.244.23 62.96.244.24	2026-07-22 12:32:35.760
mydesk.whitecase.com	2.19.195.48 2.19.195.41	2026-06-17 13:33:11.734
pra.whitecase.com	35.156.14.214 3.120.102.156	2026-06-17 06:18:40.991
publications.whitecase.com	23.50.131.134 23.50.131.146	2026-06-17 13:33:11.734
remotework.gslb.whitecase.com	63.131.130.229 62.96.244.49	2026-06-23 16:42:22.434
remotework.whitecase.com	63.131.130.229 62.96.244.49	2026-06-23 16:42:22.434
sfs.whitecase.com	104.110.240.64 104.110.240.162	2026-06-21 16:31:21.272
share.us.whitecase.com	104.18.14.121 104.18.15.121	2026-07-20 11:02:17.624
share.whitecase.com	104.18.26.21 104.18.27.21	2026-07-20 11:02:17.624
spam.whitecase.com	23.50.131.146 23.50.131.134	2026-06-17 13:33:11.734
srv.whitecase.com	23.53.43.48 23.53.43.59	2026-06-17 13:33:11.734
stg-toolkit.whitecase.com	95.101.111.143 95.101.111.136	2026-06-17 13:33:11.734
surveys.whitecase.com	23.53.43.48 23.53.43.59	2026-06-17 13:33:11.734
sv.whitecase.com	23.53.43.48 23.53.43.59	2026-06-17 13:33:11.734
toolkit.whitecase.com	2.19.195.48 2.19.195.41	2026-06-17 13:33:11.734
uslawcareers.whitecase.com	2.19.195.41 2.19.195.48	2026-06-17 13:33:11.734
uslegalassistants.whitecase.com	95.101.79.11 2.17.22.145	2026-06-17 13:33:11.734
venio.whitecase.com	23.53.43.59 23.53.43.48	2026-06-17 13:33:11.734
virecruitsystems.whitecase.com	2.19.195.48 2.19.195.41	2026-06-17 13:33:11.734
wccitrix.whitecase.com	23.53.43.48 23.53.43.59	2026-06-17 13:33:11.734
wcluminance-eu.whitecase.com	23.53.43.59 23.53.43.48	2026-06-17 13:33:11.734
wcluminance-us.whitecase.com	23.53.43.59 23.53.43.48	2026-06-17 13:33:11.734
wcreview-ap.whitecase.com	2.19.195.33 2.19.195.27	2026-07-21 10:32:26.139
wcreview-eu.whitecase.com	2.19.195.24 2.19.195.33	2026-07-21 10:32:26.139
wcreview-sa.whitecase.com	2.19.195.33 2.19.195.24	2026-07-21 10:32:26.139
wcreview-uk.whitecase.com	2.19.195.24 2.19.195.33	2026-07-21 10:32:26.139
wcreview-us.whitecase.com	2.19.195.24 2.19.195.33	2026-07-21 10:32:26.139
wcreview.whitecase.com	2.19.195.24 2.19.195.33	2026-07-21 10:32:26.139
whitecase.com	23.34.59.5 23.34.59.12	2026-07-15 20:04:13.980
abuvpn.whitecase.com	5.32.87.220	2026-07-16 22:29:32.809
access-lab.whitecase.com		1970-01-01 00:00:00.000
am1apsd200.whitecase.com		1970-01-01 00:00:00.000
am1avcm241.wcnet.whitecase.com		1970-01-01 00:00:00.000
am1avcm242.wcnet.whitecase.com		1970-01-01 00:00:00.000
am1expe010.whitecase.com		1970-01-01 00:00:00.000
am1expe011.whitecase.com	63.131.130.220	2026-07-22 12:32:35.760
am1expe012.whitecase.com	63.131.130.222	2026-07-22 12:32:35.760
am1msgw021.whitecase.com		1970-01-01 00:00:00.000
am1msgw022.whitecase.com		1970-01-01 00:00:00.000
am1sbc001.whitecase.com		1970-01-01 00:00:00.000
am1sbc002.whitecase.com		1970-01-01 00:00:00.000
am1sbc1.whitecase.com		1970-01-01 00:00:00.000
am1sbc2.whitecase.com		1970-01-01 00:00:00.000
amfiles.whitecase.com		1970-01-01 00:00:00.000
amvcse.whitecase.com		1970-01-01 00:00:00.000
ap1-aiakos.whitecase.com	128.106.13.29	2026-06-17 20:24:49.898
ap1expe010.whitecase.com		1970-01-01 00:00:00.000
ap1expe011.whitecase.com	128.106.13.17	2026-07-22 12:32:35.760
ap1expe012.whitecase.com		1970-01-01 00:00:00.000
ap1msgw021.whitecase.com		1970-01-01 00:00:00.000
ap1msgw022.whitecase.com		1970-01-01 00:00:00.000
ap1sbc001.whitecase.com		1970-01-01 00:00:00.000
ap1sbc002.whitecase.com		1970-01-01 00:00:00.000
ap1sbc1.whitecase.com		1970-01-01 00:00:00.000
ap1sbc2.whitecase.com		1970-01-01 00:00:00.000
apvcse.whitecase.com		1970-01-01 00:00:00.000
apvpn.whitecase.com	128.106.13.1	2026-07-16 22:29:32.809
atlas-stg.whitecase.com	51.107.185.19	2026-06-20 02:54:48.498
auth.localcounsel.whitecase.com		1970-01-01 00:00:00.000
autodiscover.whitecase.com	209.18.96.84	2026-07-28 05:01:29.903
bankidprague-stg.whitecase.com		1970-01-01 00:00:00.000
bankidprague.whitecase.com		1970-01-01 00:00:00.000
brainspace.uk.whitecase.com		1970-01-01 00:00:00.000
browser-access.whitecase.com		1970-01-01 00:00:00.000
caserooms-apoos.whitecase.com	104.97.14.114	2026-07-18 12:38:39.694
collabedge.whitecase.com	63.131.130.220	2026-07-22 12:32:35.760
debtexplorer.whitecase.com		1970-01-01 00:00:00.000
dm76.eu.whitecase.com		1970-01-01 00:00:00.000
dm76.us.whitecase.com		1970-01-01 00:00:00.000
em1apsd102.whitecase.com		1970-01-01 00:00:00.000
em1avcm241.wcnet.whitecase.com		1970-01-01 00:00:00.000
em1expe001.whitecase.com	62.96.244.15	2026-07-22 12:32:35.760
em1expe010.whitecase.com		1970-01-01 00:00:00.000
em1expe011.whitecase.com	62.96.244.23	2026-07-22 12:32:35.760
em1expe012.whitecase.com	62.96.244.24	2026-07-22 12:32:35.760
em1msgw021.whitecase.com		1970-01-01 00:00:00.000

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

189.206.175.83:443 59c9718714c8…

Subject: mexvpn.whitecase.com

Issuer: Thawte TLS RSA CA G1

SANs: mexvpn.whitecase.com

157.120.229.250:443 11cdc2663254…

Subject: honvpn.whitecase.com

Issuer: Thawte TLS RSA CA G1

SANs: honvpn.whitecase.com

128.106.13.18:8443 e352f12fec7f…

Subject: collab-edge.whitecase.com

Issuer: Thawte TLS RSA CA G1

SANs: am1expe010.whitecase.com, am1expe011.whitecase.com, am1expe012.whitecase.com, ap1expe010.whitecase.com, ap1expe011.whitecase.com, ap1expe012.whitecase.com, collab-edge.whitecase.com, collabedge.whitecase.com, em1expe001.whitecase.com, em1expe010.whitecase.com, em1expe011.whitecase.com, em1expe012.whitecase.com, geoexpe001.gslb.whitecase.com, meet.whitecase.com, meetam.whitecase.com, meetap.whitecase.com, meetem.whitecase.com

128.106.13.13:443 c50c95e66173…

Subject: remotework.whitecase.com

Issuer: Thawte TLS RSA CA G1

SANs: remotework.gslb.whitecase.com, remotework.whitecase.com

172.65.215.36:443 8fc2f776cf6e…

Subject: dm76.uk.whitecase.com

Issuer: Thawte TLS RSA CA G1

SANs: dm76.uk.whitecase.com

62.96.244.15:8443 e352f12fec7f…

Subject: collab-edge.whitecase.com

Issuer: Thawte TLS RSA CA G1

62.96.244.16:443 642274cdd679…

Subject: emvpn.whitecase.com

Issuer: Thawte TLS RSA CA G1

SANs: emvpn.whitecase.com

185.94.187.184:443 8fc2f776cf6e…

Subject: dm76.uk.whitecase.com

Issuer: Thawte TLS RSA CA G1

SANs: dm76.uk.whitecase.com

194.223.132.66:443 1f1e56182f35…

Subject: apvpn.whitecase.com

Issuer: Thawte TLS RSA CA G1

SANs: apvpn.whitecase.com

180.232.96.115:443 c97fe21de48d…

Subject: manvpn.whitecase.com

Issuer: Thawte TLS RSA CA G1

SANs: manvpn.whitecase.com

122.53.120.182:443 c50c95e66173…

Subject: remotework.whitecase.com

Issuer: Thawte TLS RSA CA G1

SANs: remotework.gslb.whitecase.com, remotework.whitecase.com

IPs Citing This Domain

No citing IPs found yet

As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

Origin IP	Origin ASN	CDN ASN	Confidence	Reasoning
155.46.183.34	AS8681	AS13335	95%	cert 1f0cff11… served by 155.46.183.34 (AS8681) carries SAN share.us.whitecase.com which currently resolves through Cloudflare (AS13335) at 104.18.14.121, 104.18.15.121
155.46.180.22	AS15830	AS13335	95%	cert d0a223c7… served by 155.46.180.22 (AS15830) carries SAN share3.whitecase.com which currently resolves through Cloudflare (AS13335) at 104.18.17.246, 104.18.16.246
185.94.187.184	AS12703	AS13335	95%	cert 8fc2f776… served by 185.94.187.184 (AS12703) carries SAN dm76.uk.whitecase.com which currently resolves through Cloudflare (AS13335) at 172.65.215.36, 2606:4700:90:0:a52c:2c3e:266a:c2e1
155.46.184.22	AS57187	AS13335	95%	cert d0a223c7… served by 155.46.184.22 (AS57187) carries SAN share3.whitecase.com which currently resolves through Cloudflare (AS13335) at 104.18.17.246, 104.18.16.246

CT-Log Evidence

Certificates from public Certificate Transparency logs whose subject or SAN names this domain — including historic certs we never observed live.

3dcc1b3fe9a94fc4… google · argon2026h2

Subject: vcse.whitecase.com

Issuer: Thawte TLS RSA CA G1

SANs: vcse.whitecase.com, emvcse.whitecase.com, amvcse.whitecase.com, apvcse.whitecase.com, whitecase.com

Valid: 2025-09-11 00:00:00 → 2026-10-12 23:59:59

225266da63919cca… google · argon2026h2

Subject: hybrid.whitecase.com

Issuer: Thawte TLS RSA CA G1

SANs: hybrid.whitecase.com, autodiscover.whitecase.com, autodiscover.albahrlaw.com, autodiscover.gkcpartners.com, whitecase.com, amhybrid.whitecase.com, emhybrid.whitecase.com, aphybrid.whitecase.com

Valid: 2025-08-29 00:00:00 → 2026-09-29 23:59:59

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.

Type	Value	First seen	Last seen
TXT	eCl-6PADuhY_YS9_yiOxpDCx96hr7fznBDhNBpak7DI	2026-07-15 20:04:13.980	2026-07-15 20:04:13.980
TXT	adobe-idp-site-verification=d7070f313190be218cdc3023d1defd933c418b3e2592fe2b18fbd0864b24cbef	2026-07-15 20:04:13.980	2026-07-15 20:04:13.980
TXT	anthropic-domain-verification-8q81gv=9GFCCHOGLMMhP53b0zlkkoIOd	2026-07-15 20:04:13.980	2026-07-15 20:04:13.980
TXT	MS=ms57591675	2026-07-15 20:04:13.980	2026-07-15 20:04:13.980
A	23.34.59.5	2026-07-15 20:04:13.980	2026-07-15 20:04:13.980
TXT	box-domain-verification=94bc9c02b09318d4b70df142298f61b21408425d902bb9056a82e65f413036f7	2026-07-15 20:04:13.980	2026-07-15 20:04:13.980
NS	a1-158.akam.net	2026-07-15 20:04:13.980	2026-07-15 20:04:13.980
NS	a24-67.akam.net	2026-07-15 20:04:13.980	2026-07-15 20:04:13.980
SRV	_sips._tcp 20 20 5061 geoexpe001.gslb.whitecase.com	2026-07-15 20:04:13.980	2026-07-15 20:04:13.980
TXT	openai-domain-verification=dv-fsvAu3rhDs2OwwPeKK9gkdtu	2026-07-15 20:04:13.980	2026-07-15 20:04:13.980
TXT	nintex.68840cd4cb628ab54eee0ec8	2026-07-15 20:04:13.980	2026-07-15 20:04:13.980
TXT	nintex.68dfe8d935714b64e418c5d5	2026-07-15 20:04:13.980	2026-07-15 20:04:13.980
TXT	v=spf1 include:spf-0016a202.pphosted.com include:spfa.whitecase.com include:spfb.whitecase.com include:de._netblocks.mimecast.com ip4:62.96.244.1/26 ip4:63.131.130.192/26 ip4:128.106.13.8/31 ip4:27.111.211.128/27 ip4:205.220.162.156 ip4:205.220.174.152 a:b.spf.service-now.com a:c.spf.service-now.com a:d.spf.service-now.com -all	2026-07-15 20:04:13.980	2026-07-15 20:04:13.980
NS	a9-67.akam.net	2026-07-15 20:04:13.980	2026-07-15 20:04:13.980
MX	10 mxb-0016a202.gslb.pphosted.com	2026-07-15 20:04:13.980	2026-07-15 20:04:13.980
NS	a13-64.akam.net	2026-07-15 20:04:13.980	2026-07-15 20:04:13.980
TXT	new-relic-domain-verification=f3b6a85473d34044b3f3368f4d7a1083	2026-07-15 20:04:13.980	2026-07-15 20:04:13.980
NS	a20-66.akam.net	2026-07-15 20:04:13.980	2026-07-15 20:04:13.980
TXT	pexip-ms-tenant-domain-verification=7209e3b4-c780-49ef-89f8-c22db635655b	2026-07-15 20:04:13.980	2026-07-15 20:04:13.980
NS	a18-67.akam.net	2026-07-15 20:04:13.980	2026-07-15 20:04:13.980
TXT	smartsheet-site-validation=ak0tDLcsDyeBYv0U0JkS7nwXWObXTaIv	2026-07-15 20:04:13.980	2026-07-15 20:04:13.980
TXT	docusign=4ca6ecc5-aee5-4add-afa4-3c7846d05f93	2026-07-15 20:04:13.980	2026-07-15 20:04:13.980
A	23.34.59.12	2026-07-15 20:04:13.980	2026-07-15 20:04:13.980
TXT	dropbox-domain-verification=vojclw4l1huh	2026-07-15 20:04:13.980	2026-07-15 20:04:13.980
MX	10 mxa-0016a202.gslb.pphosted.com	2026-07-15 20:04:13.980	2026-07-15 20:04:13.980
TXT	atlassian-domain-verification=iBV3ew4bRc9j0Ja7hfGou3NUT0BjGgTZtpZyX6YGWCz8S7i8QJ5I2dBWzwdaQpN6	2026-07-15 20:04:13.980	2026-07-15 20:04:13.980
SRV	_sip._tcp 20 20 5060 geoexpe001.gslb.whitecase.com	2026-07-15 20:04:13.980	2026-07-15 20:04:13.980
TXT	miro-verification=58893bf0f96f56a10e0645bd36d0d45f11476ab3	2026-07-15 20:04:13.980	2026-07-15 20:04:13.980