in this article, i want to showing my trick how to find the real IP Address from origin server. why i use
Using SECURITYTRAILS.COM
Using Terminal DIG, WHOIS,
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
| ┌──(kali㉿kali)-[~]
└─$ dig santricyber.com
; <<>> DiG 9.18.4-2-Debian <<>> santricyber.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 20972
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; QUESTION SECTION:
;santricyber.com. IN A
;; ANSWER SECTION:
santricyber.com. 300 IN A 172.67.161.202
santricyber.com. 300 IN A 104.21.9.254
;; Query time: 3735 msec
;; SERVER: 192.168.122.1#53(192.168.122.1) (UDP)
;; WHEN: Wed Feb 26 11:38:49 WIB 2025
;; MSG SIZE rcvd: 76
┌──(kali㉿kali)-[~]
└─$ whois santricyber.com
Domain Name: SANTRICYBER.COM
Registry Domain ID: 2729029171_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.resellercamp.com
Registrar URL: http://www.idwebhost.com
Updated Date: 2024-10-01T07:49:08Z
Creation Date: 2022-10-01T03:45:52Z
Registry Expiry Date: 2025-10-01T03:45:52Z
Registrar: CV. Jogjacamp
Registrar IANA ID: 1478
Registrar Abuse Contact Email: [email protected]
Registrar Abuse Contact Phone: +62 82141570000
Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
Name Server: COEN.NS.CLOUDFLARE.COM
Name Server: MALEAH.NS.CLOUDFLARE.COM
DNSSEC: unsigned
URL of the ICANN Whois Inaccuracy Complaint Form: https://www.icann.org/wicf/
>>> Last update of whois database: 2025-02-26T04:46:29Z <<<
``````
3. Manual recon, search and find manual check by CENSYS.IO
4. Shodan command script to find IP Origin
```````
| ssl.cert.subject.CN:"targetdomain.com" 200 | find IP Origin
```````
|
