Origin IP Lookup

Find the real server IP behind Cloudflare, Fastly and other CDNs. DNS lookup, cert transparency, subdomain probing, IP intelligence.

Origin IP Lookup helps you discover the true origin server behind websites that use CDN or proxy services like Cloudflare, Fastly, Akamai, or AWS CloudFront. Click the extension icon on any website and get a comprehensive infrastructure report in seconds. HOW IT WORKS 1. Click the extension icon while on any website 2. The extension performs parallel lookups using public DNS and certificate transparency services 3. Results appear instantly in the popup showing resolved IPs, CDN detection, and infrastructure details 4. Copy the full report to your clipboard with one click WHAT IT REVEALS For each website, the extension queries multiple public services to build a complete picture: - Resolved IP Addresses — A record lookups via Google DNS and Cloudflare DNS, cross-validated for discrepancies - CDN Detection — Identifies 40+ known CDN/proxy IP ranges and 12+ ASN identifiers (Cloudflare, Akamai, Fastly, AWS CloudFront, and more) - IP Intelligence — Geolocation, hosting provider, ASN, and organization via ipinfo.io - Subdomain Probes — Tests common subdomains (direct, origin, mail, ftp, cpanel, webmail, admin) that may bypass CDN and expose the origin server - Certificate Transparency — Searches crt.sh for related hostnames from SSL certificate logs - MX Records — Mail server information that often reveals the hosting provider - TXT/SPF Records — Infrastructure details exposed in DNS text records REPORT EXPORT Click "Copy Report" to get a formatted text report of all findings, ready to paste into documentation or share with your team. SERVICES USED This extension queries the following public services — no API keys required: - Google Public DNS (dns.google) — DNS resolution - Cloudflare DNS (cloudflare-dns.com) — Cross-validation - crt.sh — Certificate transparency logs - ipinfo.io — IP geolocation and ASN data PRIVACY - No personal data is collected or stored - Only the domain of the website you are currently visiting is sent to public DNS services - No browsing history is accessed - No tracking or analytics - All queries are to well-known public services via HTTPS Built for security researchers, system administrators, penetration testers, and web developers who need to understand website infrastructure. Made by Cosmos Web Tech — Digital Solutions for Sydney Businesses