Download websites that use Kerberos
1 live site using Kerberos right now
Security · by MIT · since 1988 · Open Source
Preview Kerberos site datasets
Kerberos detection is a value inside the Technologies column. Two datasets carry it, switch between them to compare what's included.
| Domain | TLD suffix | TLD | Domain type | HTTP status | IP address | Country by IP | Social networks | Technologies last data checked | Technologies | PR value | Harmonic value | Domain creation date | Domain expiration date |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| gotaproject.com | com | com | ICANN | HTTP 401 | 184.70.243.237 | CA | — | 2026-09-03 | NTLM, Digest, SPNEGO, Kerberos | 0.00000000332178 | 10,804,687 | 2019-01-25 | 2027-01-25 |
| … | … | … | … | … | … | … | … | … | … | … | … | … | … |
| Domain | TLD suffix | TLD | Domain type | HTTP status | IP address | Country by IP | Social networks | Technologies last data checked | Technologies | DNS last data checked | DNS Status | DNS records | PR value | Harmonic value | RDAP/WHOIS last data checked | RDAP/WHOIS method | Domain creation date | Domain expiration date | Domain last changed | Registrar | RDAP/WHOIS Record | Response Status RDAP/WHOIS |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| gotaproject.com | com | com | ICANN | HTTP 401 | 184.70.243.237 | CA | — | 2026-09-03 | NTLM, Digest, SPNEGO, Kerberos | 2026-09-25 | TRUE | {"A":["184.70.243.237"],"MX":[{"host":"mail.gotaproject.com","priority":10}],"NS":["ns85.worldnic.com","ns86.worldnic.com"],"SOA":{"mname":"NS85.WORLDNIC.com","retry":3600,"rname":"namehost.WORLDNIC.com","expire":604800,"serial":124123023,"minimum":3600,"refresh":10800}} | 0.00000000332178 | 10,804,687 | 2025-12-27 | RDAP | 2019-01-25 | 2027-01-25 | 2025-12-27 | Network Solutions, LLC | {"raw_response":{"links":[{"rel":"self","href":"https://rdap.verisign.com/com/v1/domain/GOTAPROJECT.COM","type":"application/rdap+json","value":"https://rdap.verisign.com/com/v1/domain/GOTAPROJECT.COM"},{"rel":"related","href":"https://rdap.networksolutions.com/rdap/domain/GOTAPROJECT.COM","type":"application/rdap+json","value":"https://rdap.networksolutions.com/rdap/domain/GOTAPROJECT.COM"}],"events":[{"eventDate":"2019-01-25T06:23:09Z","eventAction":"registration"},{"eventDate":"2027-01-25T06:23:09Z","eventAction":"expiration"},{"eventDate":"2025-11-26T07:32:34Z","eventAction":"last changed"},{"eventDate":"2025-12-27T00:21:03Z","eventAction":"last update of RDAP database"}],"handle":"2355336899_DOMAIN_COM-VRSN","status":["client transfer prohibited"],"ldhName":"GOTAPROJECT.COM","notices":[{"links":[{"rel":"terms-of-service","href":"https://www.verisign.com/domain-names/registration-data-access-protocol/terms-service/index.xhtml","type":"text/html","value":"https://rdap.verisign.com/com/v1/domain/gotaproject.com"}],"title":"Terms of Service","description":["Service subject to Terms of Use."]},{"links":[{"href":"https://icann.org/epp","type":"text/html"}],"title":"Status Codes","description":["For more information on domain status codes, please visit https://icann.org/epp"]},{"links":[{"rel":"help","href":"https://icann.org/wicf","type":"text/html","value":"https://rdap.verisign.com/com/v1/domain/gotaproject.com"}],"title":"RDDS Inaccuracy Complaint Form","description":["URL of the ICANN RDDS Inaccuracy Complaint Form: https://icann.org/wicf"]}],"entities":[{"links":[{"rel":"about","href":"http://networksolutions.com","type":"text/html","value":"https://rdap.networksolutions.com/rdap/"}],"roles":["registrar"],"handle":"2","entities":[{"roles":["abuse"],"vcardArray":["vcard",[["version",{},"text","4.0"],["fn",{},"text",""],["tel",{"type":"voice"},"uri","tel:+1.8777228662"],["email",{},"text","domain.operations@web.com"]]],"objectClassName":"entity"}],"publicIds":[{"type":"IANA Registrar ID","identifier":"2"}],"vcardArray":["vcard",[["version",{},"text","4.0"],["fn",{},"text","Network Solutions, LLC"]]],"objectClassName":"entity"}],"secureDNS":{"delegationSigned":false},"nameservers":[{"ldhName":"NS85.WORLDNIC.COM","objectClassName":"nameserver"},{"ldhName":"NS86.WORLDNIC.COM","objectClassName":"nameserver"}],"objectClassName":"domain","rdapConformance":["rdap_level_0","icann_rdap_technical_implementation_guide_1","icann_rdap_response_profile_1"]}} | Domain is active |
| … | … | … | … | … | … | … | … | … | … | … | … | … | … | … | … | … | … | … | … | … | … | … |
The Kerberos dataset
Every site we've detected as running Kerberos, with version, hosting, country, TLD and traffic rank.
Kerberos lives inside 2 datasets
Kerberos detection is part of Technologies (€159/mo) and All data (€599/mo). Buy either to filter the full 1-site list, or grab a free preview first.
About Kerberos
An authentication scheme built for a campus network, where every machine and every user was already registered with a central authority, has no obvious business turning up in a survey of the public web. And yet Kerberos does turn up, rarely, and each appearance says something quite specific about the host it was found on.
Kerberos came out of MIT in 1988 and is published as Open Source software. The design is a ticket system: a client proves itself once to a trusted third party, receives a time limited ticket, and presents that ticket to services instead of sending a password anywhere. Decades of enterprise identity infrastructure were built on that idea, and the protocol remains the authentication core of large corporate directory deployments.
What makes Kerberos visible to a crawler is a negotiation header. A server wanting integrated authentication answers an unauthenticated request with a challenge naming the mechanism, and a browser inside the right domain answers the challenge silently. Everything about that exchange is designed for an internal network, so finding it on a hostname that resolves from the open internet means an internal application has been published outward, deliberately or otherwise.
As of October 2026 we record Kerberos on 1 site in our Security data. The figure should be read as a floor, and a narrow one. Resources protected this way normally sit behind a VPN, on split horizon DNS, or on hostnames no crawler will ever be handed, and none of those enter a public survey. What the count captures is the exposed remainder.
The exposed remainder is the interesting part for several kinds of researcher. Security teams building an external attack surface picture want to know which of their own hostnames answer with an enterprise challenge, because an answer like that leaks internal architecture to anyone who asks politely. Vendors selling single sign on migration want the same list from the other direction, since a host still offering the old challenge is a host still running the old identity stack. And anyone modelling how legacy enterprise authentication persists needs names, not a percentage.
A per domain lookup answers the question you already knew to ask. The value of a downloadable list is the reverse query: every host we saw offering this, with no domain supplied in advance. For a protocol whose entire purpose is to stay inside the perimeter, the interesting record is the one that ended up outside it.
Frequently asked questions
How many websites use Kerberos?
webatla detects Kerberos on 1 website, refreshed daily, with its domain, DNS, WHOIS, IP, country and ranking.
Can I download the list of websites using Kerberos?
Yes, as structured JSONL. Grab a free sample first.
What's included for each site, and how fresh is it?
Domain, DNS, RDAP/WHOIS, the full technology stack, IP & country, PageRank and Harmonic, re-detected and re-exported daily.
How do I find the websites using Kerberos?
Buy the technology dataset, then download the complete list of domains we detect using Kerberos, re-exported every day.
What else is in the Kerberos technology data?
Each row places Kerberos next to the other technology on the same site, plus DNS, WHOIS, IP, country and ranking.
Can I download just the sites using Kerberos, or the whole database?
Both. Every site running Kerberos comes in the Technologies dataset, one downloadable file. Or buy All data for the entire database: technologies plus identity, ranking, DNS and RDAP/WHOIS for every domain, combined in one file. Daily fresh export.
How do I download the list of websites using Kerberos?
Three steps: (1) grab the free 10,000-row sample to inspect the schema, (2) buy the Technologies dataset, (3) download the full list of every domain we detect running Kerberos as a JSON Lines file. It is re-exported daily, so you can re-download the freshest list any time inside your access window. Each row carries the domain plus DNS, WHOIS, IP, hosting country and rank.
Get the full list of websites using Kerberos
Pick the dataset that covers what you need. Each one includes Kerberos and downloads as JSONL, rebuilt daily.
Full website tech stack per site: CMS, payments, analytics, frameworks.
Everything we have, in a single package. The full webatla universe.
Want to compare every dataset side by side? Visit the pricing page
Related technologies
