Domain

nextcloud.com

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

DNS Check HTTP Check Run Full Scan .com TLD

Run a live full scan of nextcloud.com

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now

Hosting IPs

—

A/AAAA targets

Subdomains

—

CT + scan + body

Record Types

—

seen in DNS

Observed Certs

—

in our scans

DNS Records

—

AAAA

—

TXT

—

CNAME

—

CAA

—

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.

Subdomain	Resolves to	Last seen
docs.nextcloud.com	185.199.109.153 2606:50c0:8003::153 2606:50c0:8002::153 2606:50c0:8001::153 +4	2026-07-28 20:47:52.650
nextcloud.com	65.109.84.172 2a01:4f8:a0:3068::2 85.10.195.17 2a01:4f9:3051:52aa::2	2026-07-28 20:47:52.650
www.nextcloud.com	85.10.195.17 2a01:4f8:a0:3068::2 65.109.84.172 2a01:4f9:3051:52aa::2	2026-07-22 03:41:57.833
aio-testing.nextcloud.com	65.108.215.1 2a01:4f9:c010:6870::1	2026-07-23 13:01:37.719
apps.nextcloud.com	65.21.231.50 2a01:4f9:6a:1de8::2	2026-06-20 16:36:29.331
arcade.ltd1.nextcloud.com	95.217.44.166 2a01:4f9:2a:3119::2	2026-06-18 22:35:50.578
asapcloud.ltd3.nextcloud.com	95.216.37.161 2a01:4f9:2a:25de::2	2026-07-19 11:07:11.364
auth.nextcloud.com	176.9.217.50 2a01:4f8:130:32f1::50	2026-05-26 05:05:02.592
c0003.customerpush.nextcloud.com	95.217.53.156 2a01:4f9:2b:29dc::156	2026-05-26 00:32:50.780
c0004.customerpush.nextcloud.com	95.217.53.157 2a01:4f9:2b:29dc::157	2026-05-27 17:49:03.731
c0007.customerpush.nextcloud.com	95.217.53.150 2a01:4f9:2b:29dc::150	2026-05-27 04:19:56.370
cjis.ltd1.nextcloud.com	95.217.44.166 2a01:4f9:2a:3119::2	2026-06-24 00:22:59.305
cloud.nextcloud.com	116.202.53.135 2a01:4f8:231:37ef::2	2026-07-20 05:16:16.230
collabora.nextcloud.com	116.202.53.135 2a01:4f8:231:37ef::2	2026-07-16 14:36:55.147
collabora.services.nextcloud.com	135.181.142.32 2a01:4f9:3a:161f::2	2026-06-21 05:12:35.952
declarative-ui.ltd1.nextcloud.com	95.217.44.166 2a01:4f9:2a:3119::2	2026-06-19 02:50:36.224
demo.nextcloud.com	95.217.64.182 2a01:4f9:2a:3119::182	2026-06-20 16:36:29.331
demo1.nextcloud.com	95.216.226.156 2a01:4f9:2b:1fe3::2	2026-05-27 07:55:11.904
demo2.nextcloud.com	95.216.98.232 2a01:4f9:2b:122a::2	2026-06-21 13:06:50.586
dienetzwerft.ltd3.nextcloud.com	95.216.37.161 2a01:4f9:2a:25de::2	2026-07-23 08:39:46.689
download.nextcloud.com	5.9.202.145 2a01:4f8:210:21c8::145	2026-06-18 16:39:36.706
eo.services.nextcloud.com	135.181.142.32 2a01:4f9:3a:161f::2	2026-07-24 14:19:37.096
garm1.nextcloud.com	65.109.20.140 2a01:4f9:5a:1299::2	2026-07-23 14:29:10.954
help.nextcloud.com	95.217.53.158 2a01:4f9:2b:29dc::146	2026-07-28 12:44:20.043
hpb.services.nextcloud.com	135.181.142.32 2a01:4f9:3a:161f::2	2026-06-20 16:43:41.373
hz.ltd3.nextcloud.com	95.216.37.161 2a01:4f9:2a:25de::2	2026-07-21 03:37:10.277
itb.ltd3.nextcloud.com	95.216.37.161 2a01:4f9:2a:25de::2	2026-06-23 04:59:59.710
ldap.nextcloud.com	176.9.217.54 2a01:4f8:130:32f1::54	2026-06-20 00:35:55.293
lists.nextcloud.com	176.9.217.56 2a01:4f8:130:32f1::56	2026-06-22 10:47:12.675
lookup.nextcloud.com	65.21.231.50 2a01:4f9:6a:1de8::2	2026-06-05 20:34:11.345
ltd3.nextcloud.com	95.216.37.161 2a01:4f9:2a:25de::2	2026-06-15 23:44:55.060
ltd4.nextcloud.com	157.180.9.89 2a01:4f9:3100:3186::2	2026-07-22 22:23:09.022
mdm.ltd2.nextcloud.com	37.27.104.209 2a01:4f9:3070:1b62::2	2026-07-26 23:16:40.732
nextcloud-experience.ltd.nextcloud.com	95.217.44.166 2a01:4f9:2a:3119::2	2026-07-18 14:17:26.744
onlyoffice.services.nextcloud.com	135.181.142.32 2a01:4f9:3a:161f::2	2026-06-21 08:39:40.594
pedro-collabora.ltd2.nextcloud.com	37.27.104.209 2a01:4f9:3070:1b62::2	2026-07-22 10:30:16.117
portal.nextcloud.com	65.21.231.50 2a01:4f9:6a:1de8::2	2026-07-22 23:01:08.738
quobis.ltd2.nextcloud.com	37.27.104.209 2a01:4f9:3070:1b62::2	2026-06-21 06:31:50.622
ram.ltd1.nextcloud.com	95.217.44.166 2a01:4f9:2a:3119::2	2026-06-20 20:24:43.358
scan.nextcloud.com	95.217.53.149 2a01:4f9:2b:29dc::149	2026-07-16 22:12:43.539
securfox.ltd2.nextcloud.com	37.27.104.209 2a01:4f9:3070:1b62::2	2026-07-18 09:07:18.786
services.nextcloud.com	135.181.142.32 2a01:4f9:3a:161f::2	2026-06-20 16:43:41.373
sgdsn.ltd3.nextcloud.com	95.216.37.161 2a01:4f9:2a:25de::2	2026-07-24 14:19:37.096
sse.ltd1.nextcloud.com	95.217.44.166 2a01:4f9:2a:3119::2	2026-07-21 22:39:47.486
stats.nextcloud.com	95.217.53.147 2a01:4f9:2b:29dc::147	2026-06-20 16:36:29.331
status.nextcloud.com	135.181.180.95 2a01:4f9:3a:224f::2	2026-06-17 14:30:12.294
sytexltd.ltd3.nextcloud.com	95.216.37.161 2a01:4f9:2a:25de::2	2026-06-04 16:23:39.797
tattersalllorenz.ltd2.nextcloud.com	37.27.104.209 2a01:4f9:3070:1b62::2	2026-07-25 02:24:50.387
toolsandsolutions.ltd1.nextcloud.com	95.217.44.166 2a01:4f9:2a:3119::2	2026-07-19 02:23:27.822
transifex-sync.nextcloud.com	95.217.53.152 2a01:4f9:2b:29dc::152	2026-05-26 10:27:10.433
try.nextcloud.com	5.9.202.148 2a01:4f8:210:21c8::148	2026-06-20 16:36:29.331
turn.services.nextcloud.com	135.181.142.14 2a01:4f9:3a:161f::cafe	2026-06-20 16:43:41.373
usercontent.apps.nextcloud.com	5.9.202.145 2a01:4f8:210:21c8::145	2026-06-15 15:43:46.707
vbl.ltd1.nextcloud.com	95.217.44.166 2a01:4f9:2a:3119::2	2026-06-20 20:24:43.358
zitsh.nextcloud.com	95.216.9.12 2a01:4f9:2a:962::2	2026-06-23 23:44:49.582
adientpather.ltd2.nextcloud.com		1970-01-01 00:00:00.000
alexanderm.ltd4.nextcloud.com		1970-01-01 00:00:00.000
allinbrowser.ltd2.nextcloud.com		1970-01-01 00:00:00.000
amf.ltd3.nextcloud.com		1970-01-01 00:00:00.000
antitrust.nextcloud.com		1970-01-01 00:00:00.000
bechtlech.ltd4.nextcloud.com	157.180.9.89	2026-07-23 20:07:33.346
btcag.ltd4.nextcloud.com		1970-01-01 00:00:00.000
capitalonecom.ltd2.nextcloud.com		1970-01-01 00:00:00.000
cegeka.ltd2.nextcloud.com		1970-01-01 00:00:00.000
ciimarup.pt.ltd2.nextcloud.com		1970-01-01 00:00:00.000
codeuniquearchitekten.ltd4.nextcloud.com	157.180.9.89	2026-06-21 15:56:43.796
crossroad.ltd1.nextcloud.com		1970-01-01 00:00:00.000
csit.ltd4.nextcloud.com		1970-01-01 00:00:00.000
customerupdates.nextcloud.com		1970-01-01 00:00:00.000
dcuk.ltd1.nextcloud.com		1970-01-01 00:00:00.000
debeka.ltd4.nextcloud.com		1970-01-01 00:00:00.000
deckbenchmark1.ltd3.nextcloud.com		1970-01-01 00:00:00.000
deckbenchmark2.ltd4.nextcloud.com		1970-01-01 00:00:00.000
demo-mist.ltd2.nextcloud.com		1970-01-01 00:00:00.000
diakoniewerkduisburg.ltd4.nextcloud.com		1970-01-01 00:00:00.000
docker28-3.ltd1.nextcloud.com		1970-01-01 00:00:00.000
drone.nextcloud.com		1970-01-01 00:00:00.000
druzinasi.ltd2.nextcloud.com		1970-01-01 00:00:00.000
eaio-testing.nextcloud.com		1970-01-01 00:00:00.000
edpb.ltd4.nextcloud.com		1970-01-01 00:00:00.000
friedrichshafen.ltd4.nextcloud.com		1970-01-01 00:00:00.000
garm5.nextcloud.com		1970-01-01 00:00:00.000
go2solve.ltd3.nextcloud.com		1970-01-01 00:00:00.000
gpk.ltd3.nextcloud.com		1970-01-01 00:00:00.000
holdinova.ltd2.nextcloud.com		1970-01-01 00:00:00.000
hpb-server.nextcloud.com		1970-01-01 00:00:00.000
hpb.meeting.nextcloud.com		1970-01-01 00:00:00.000
hz-university.ltd4.nextcloud.com		1970-01-01 00:00:00.000
ibos.ltd2.nextcloud.com		1970-01-01 00:00:00.000
indisol.ltd2.nextcloud.com		1970-01-01 00:00:00.000
isulacorsica.ltd2.nextcloud.com		1970-01-01 00:00:00.000
itegrupal.ltd4.nextcloud.com		1970-01-01 00:00:00.000
janderijkcom.ltd4.nextcloud.com	157.180.9.89	2026-06-21 14:12:21.927
jarven.ltd4.nextcloud.com		1970-01-01 00:00:00.000
landkreisvechta.ltd4.nextcloud.com		1970-01-01 00:00:00.000
leadventures.ltd4.nextcloud.com		1970-01-01 00:00:00.000
lkpotsdammittelmark.ltd3.nextcloud.com		1970-01-01 00:00:00.000
mautic.nextcloud.com		1970-01-01 00:00:00.000
mc30.ltd2.nextcloud.com		1970-01-01 00:00:00.000
ncd.nextcloud.com		1970-01-01 00:00:00.000
ncp.nextcloud.com		1970-01-01 00:00:00.000
newsletter.nextcloud.com		1970-01-01 00:00:00.000
nhlstenden.ltd3.nextcloud.com		1970-01-01 00:00:00.000
odoo.nextcloud.com		1970-01-01 00:00:00.000
op.nextcloud.com		1970-01-01 00:00:00.000
pragma.ltd4.nextcloud.com		1970-01-01 00:00:00.000
projects.nextcloud.com		1970-01-01 00:00:00.000
psstjdedd.ltd4.nextcloud.com	157.180.9.89	2026-06-19 03:17:20.580
push.ltd4.nextcloud.com	157.180.9.89	2026-07-27 18:35:24.031
recording-server.nextcloud.com	46.4.108.5	2026-07-21 00:27:24.781
recording.meeting.nextcloud.com		1970-01-01 00:00:00.000
s4.nextcloud.com		1970-01-01 00:00:00.000
se.nextcloud.com		1970-01-01 00:00:00.000
smsconstructionltd.ltd3.nextcloud.com		1970-01-01 00:00:00.000
solidatech.ltd3.nextcloud.com		1970-01-01 00:00:00.000
staging.cloud.nextcloud.com		1970-01-01 00:00:00.000
staging.collabora.nextcloud.com		1970-01-01 00:00:00.000
staging.nextcloud.com		1970-01-01 00:00:00.000
staging.push.cloud.nextcloud.com		1970-01-01 00:00:00.000
tobi2.ltd3.nextcloud.com		1970-01-01 00:00:00.000

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

51.143.126.244:443 b974b0262934…

Subject: *.api.cubicnextcloud.com

Issuer: GoDaddy TLS Intermediate CA DV - R1v1

SANs: *.api.cubicnextcloud.com, api.cubicnextcloud.com

52.173.203.102:443 4dd4788ce683…

Subject: mapi.eil.cta.cubicnextcloud.com

Issuer: YR1

SANs: mapi.eil.cta.cubicnextcloud.com

20.40.120.127:443 c9cfae06dbd6…

Subject: *.npngts.cubicnextcloud.com.au

Issuer: Go Daddy Secure Certificate Authority - G2

SANs: *.npngts.cubicnextcloud.com.au, npngts.cubicnextcloud.com.au

51.75.253.68:443 002bab5ed111…

Subject: outletinformatica.oficinavirtual-nextcloud.com

Issuer: YR1

SANs: outletinformatica.oficinavirtual-nextcloud.com

111.230.57.121:443 c68bc8e2dce3…

Subject: iot.petnextcloud.com

Issuer: TrustAsia DV TLS RSA CA 2024

SANs: iot.petnextcloud.com

40.81.60.252:443 44d2faff0c8b…

Subject: *.cubicnextcloud.com.au

Issuer: Go Daddy Secure Certificate Authority - G2

SANs: *.cubicnextcloud.com.au, cubicnextcloud.com.au

40.113.143.127:443 6f01f88deb2a…

Subject: *.mbodev.cubicnextcloud.com

Issuer: R12

SANs: *.mbodev.cubicnextcloud.com

20.98.32.215:443 12435a7bf6d2…

Subject: *.npven3.cubicnextcloud.com

Issuer: Go Daddy Secure Certificate Authority - G2

SANs: *.npven3.cubicnextcloud.com, npven3.cubicnextcloud.com

135.181.142.32:443 a96bec47520d…

Subject: services.nextcloud.com

Issuer: E8

SANs: services.nextcloud.com

20.40.240.118:443 fabf67fc3cc5…

Subject: apigateway.npcta.cubicnextcloud.com

Issuer: YR1

SANs: apigateway.npcta.cubicnextcloud.com

95.217.53.157:443 661a9eb6c65f…

Subject: c0004.customerpush.nextcloud.com

Issuer: E7

SANs: c0004.customerpush.nextcloud.com

40.78.46.73:443 d11bd2eb58e8…

Subject: *.cubicnextcloud.com

Issuer: Go Daddy Secure Certificate Authority - G2

SANs: *.cubicnextcloud.com, cubicnextcloud.com

20.98.32.214:443 1d694c976adc…

Subject: *.npven3.cubicnextcloud.com

Issuer: Go Daddy Secure Certificate Authority - G2

SANs: *.npven3.cubicnextcloud.com, npven3.cubicnextcloud.com

95.217.53.150:443 b5d86af922e6…

Subject: c0007.customerpush.nextcloud.com

Issuer: E8

SANs: c0007.customerpush.nextcloud.com

40.81.62.149:443 44d2faff0c8b…

Subject: *.cubicnextcloud.com.au

Issuer: Go Daddy Secure Certificate Authority - G2

SANs: *.cubicnextcloud.com.au, cubicnextcloud.com.au

40.113.143.127:443 6f01f88deb2a…

Subject: *.mbodev.cubicnextcloud.com

Issuer: R12

SANs: *.mbodev.cubicnextcloud.com

40.81.60.252:443 44d2faff0c8b…

Subject: *.cubicnextcloud.com.au

Issuer: Go Daddy Secure Certificate Authority - G2

SANs: *.cubicnextcloud.com.au, cubicnextcloud.com.au

52.173.203.102:443 b31286a1f1a2…

Subject: mapi.eil.cta.cubicnextcloud.com

Issuer: R13

SANs: mapi.eil.cta.cubicnextcloud.com

104.46.115.22:443 b2a6ed44b0d8…

Subject: npmbta.cubicnextcloud.com

Issuer: E8

SANs: *.npmbta.cubicnextcloud.com, npmbta.cubicnextcloud.com

13.88.29.55:443 d11bd2eb58e8…

Subject: *.cubicnextcloud.com

Issuer: Go Daddy Secure Certificate Authority - G2

SANs: *.cubicnextcloud.com, cubicnextcloud.com

20.53.82.61:443 c9cfae06dbd6…

Subject: *.npngts.cubicnextcloud.com.au

Issuer: Go Daddy Secure Certificate Authority - G2

SANs: *.npngts.cubicnextcloud.com.au, npngts.cubicnextcloud.com.au

20.53.192.48:443 c9cfae06dbd6…

Subject: *.npngts.cubicnextcloud.com.au

Issuer: Go Daddy Secure Certificate Authority - G2

SANs: *.npngts.cubicnextcloud.com.au, npngts.cubicnextcloud.com.au

95.217.53.152:443 35c60f2432ec…

Subject: transifex-sync.nextcloud.com

Issuer: R13

SANs: transifex-sync.nextcloud.com

85.10.195.17:443 98ef5542b3b0…

Subject: nextcloud.com

Issuer: E8

SANs: nextcloud.com, www.nextcloud.com

176.9.217.50:443 08bb0c7b7b5d…

Subject: auth.nextcloud.com

Issuer: E7

SANs: auth.nextcloud.com

95.217.53.156:443 c2f2d3097eaa…

Subject: c0003.customerpush.nextcloud.com

Issuer: E8

SANs: c0003.customerpush.nextcloud.com

4.197.254.172:443 c9cfae06dbd6…

Subject: *.npngts.cubicnextcloud.com.au

Issuer: Go Daddy Secure Certificate Authority - G2

SANs: *.npngts.cubicnextcloud.com.au, npngts.cubicnextcloud.com.au

IPs Citing This Domain

Hosts whose HTML body references this domain. Strong signal for origin/mirror/embed discovery.

185.189.50.36:80 href · ×192

91.231.113.219:443 href · ×44

91.231.113.171:443 href · ×44

159.69.155.87:443 href · ×8

95.217.53.149:81 href · ×6

89.125.52.206:443 href · ×5

2.26.252.165:443 href · ×4

176.109.109.59:443 href · ×4

178.159.249.178:443 href · ×3

72.56.247.186:443 href · ×3

82.24.174.87:443 href · ×3

94.130.125.236:8080 href · ×3

91.221.4.32:443 href · ×2

72.252.209.116:80 href · ×2

157.119.71.27:443 href · ×2

5.39.88.37:443 href · ×2

185.161.175.175:443 href · ×2

90.154.6.53:443 href · ×2

90.160.60.165:443 href · ×2

75.119.149.214:443 href · ×2

130.83.238.98:443 href · ×2

153.127.247.125:443 href · ×2

178.105.146.46:443 href · ×2

155.212.168.43:443 href · ×2

51.77.210.198:443 href · ×2

94.183.177.72:443 href · ×2

188.44.55.130:443 href · ×2

155.212.190.69:443 href · ×2

5.39.95.35:443 href · ×2

195.112.117.90:443 href · ×2

190.181.58.94:80 href · ×2

80.0.155.185:443 href · ×2

192.241.218.198:443 href · ×2

73.127.10.33:443 href · ×2

212.87.224.78:443 href · ×2

130.0.191.190:443 href · ×2

13.79.63.82:443 href · ×2

86.238.204.121:443 href · ×2

161.97.79.110:443 href · ×2

82.65.11.16:443 href · ×2

129.159.53.192:443 href · ×2

37.205.12.185:443 href · ×2

51.79.152.21:443 href · ×2

112.168.211.120:443 href · ×2

37.208.109.96:443 href · ×2

94.23.199.15:443 href · ×2

154.17.231.45:443 href · ×2

62.176.232.202:443 href · ×2

173.212.214.33:443 href · ×2

131.153.22.5:443 href · ×2

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

No origin-IP leaks detected (yet)

Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Domain timeline pending

Passive-DNS history accumulates as our forward-DNS crawler observes A/AAAA/MX/NS/TXT records over time.