3 Ways to Uncover Origin IP Address Behind Cloudflare | Website OSINT

In this video, we will look at 3 ways to find the origin IP address of a website using Cloudflare:

1. Viewing historical DNS records with SecurityTrails

2. Looking up hosts sharing the same website certificate with Censys

3. Using Shodan to search for websites using the same favicon

Please like, comment, and subscribe! Thank you for watching!

[NormanPashley]

Hey Christian!

Great content, helped in understanding the true dynamics behind the scene. Also, would need your help with few things. Where I can write you to regarding that?

[EnglishLaw]

What I do is search the domain for the MX record, and then search the MX record. 8 times of out 10 the email server is the web server and so Voilà

[freepalestine_stop_genocide]

This actually worked. I did not think it might be possible, but man, just wanna thank you from the bottom of my heart.

[akroidofficial]

that favicon was goddamn man thanks! <3

[kasta]

Hey great video❤ I currently investigate an IP which is behind Cloudflare but it's scanning my AWS instance so it's not a Web traffic. Is there a way to find who is behind this Ip 🤔🧐

[vespeneprotoss]

You mentioned that you look at historical A organizations to send subpoenas to. Just out of curiosity, does Cloudflare not respond to subpoenas or something? Why not just send it to them?

[trulyinformationnuskhe-]

My problem can't find ip address website in cloudflare. My domain in godady but hosting in profreepost .

[trulyinformationnuskhe-]

Sir, picture quality not very clear in mobile watching can't see a word

[ejonesss]

well you could make your video at work and then do a lot of blurring to block out things in the background or find another job that does not take your time away.

[maxl]

is any paid service to get real ip behind clouflare?

[sirnad]

You should hack cloudflare to find the origin ip address 😂

[GhaithAlMasri-cvdg]

how can i contact you for a job
i want u to do something for me plz