3 Ways to Uncover Origin IP Address Behind Cloudflare | Website OSINT

[@EnglishLaw]

What I do is search the domain for the MX record, and then search the MX record. 8 times of out 10 the email server is the web server and so Voilà

[@christianmurray1809]

Nice! DNS records are definitely a treasure trove when it comes to investigating websites! Thanks for watching and leaving a comment.

[@NormanPashley]

Hey Christian! Great content, helped in understanding the true dynamics behind the scene. Also, would need your help with few things. Where I can write you to regarding that?

[@뚜이-u1z]

Nice video~~ good luck to you✨👍🏻

[@christianmurray1809]

고마워요 송이~~ 😀

[@trulyinformationnuskhe-7786]

My problem can't find ip address website in cloudflare. My domain in godady but hosting in profreepost .

[@answer4274]

Nice video. I enjoyed watching..

[@christianmurray1809]

I’m glad to hear that! Thank you for watching and commenting!

[@akroidofficial]

that favicon was goddamn man thanks!

[@vespeneprotoss4346]

You mentioned that you look at historical A organizations to send subpoenas to. Just out of curiosity, does Cloudflare not respond to subpoenas or something? Why not just send it to them?

[@christianmurray1809]

That’s a good question! I prepare reports for a legal team, and the more opportunities to take action against a target, the better! Additionally, some tech companies respond more quickly than others, so it can be more efficient to know the entire landscape of a target’s infrastructure (e.g., Cloudflare may take 3 weeks to act upon a legal request whereas X may take 1 week). To answer your question, Cloudflare does respond to any kind of legal request quite well.

[@TheMessanger]

@@christianmurray1809 your good but looking for the topology or diagram of the server I got some tools but someone share the diagram image and it was awesome I know solarwinds have it but that's a paid service

[@jamessylvester3437]

Good video. Thank you, sir.

[@christianmurray1809]

Thank you for watching and leaving a comment! Please let me know if you have any suggestions for future videos!

[@kasta851984]

Hey great video❤ I currently investigate an IP which is behind Cloudflare but it's scanning my AWS instance so it's not a Web traffic. Is there a way to find who is behind this Ip 🤔🧐

[@christianmurray1809]

Hey! There’s quite a few different ways to find the origin IP address. What do you mean by “it’s scanning my AWS instance”? What is scanning your AWS instance?

[@kasta851984]

@@christianmurray1809 Thank you for your reply. I am using AWS GuardDuty service and I got an alert for port 22 being probed. So the traffic is not a web traffic. The IP is behind Cloudflare.

[@anapatricia5322]

Tell the ways​@@christianmurray1809

[@trulyinformationnuskhe-7786]

Sir, picture quality not very clear in mobile watching can't see a word

[@ejonesss]

well you could make your video at work and then do a lot of blurring to block out things in the background or find another job that does not take your time away.

[@christianmurray1809]

Thanks for the suggestion! That idea has crossed my mind, but I should have enough time for my KZbin channel from here on out. Thanks for taking the time to watch my video and leave a comment! I appreciate it!

[@shaolin60]

thx

[@maxl2081]

is any paid service to get real ip behind clouflare?

[@christianmurray1809]

There used to be a site called crimeflare that could find origin IP addresses protected by Cloudflare, but it’s no longer operating. It’s a cat-and-mouse game finding alternatives to crimeflare, and the alternatives probably don’t work as well as crimeflare did. I don’t know of any other services, paid or free.

[@sirnad7813]

You should hack cloudflare to find the origin ip address 😂

[@GhaithAlMasri-cv3dg]

how can i contact you for a job i want u to do something for me plz

[@christianmurray1809]

Message me on discord: @cmur97

[@GhaithAlMasri-cv3dg]

@@christianmurray1809 i couldnt sent you a message i sent u a friend request my name is ghaith

[@HH-xw7mq]

I need help. Please give me your contact information.