4flow.de
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of 4flow.de
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
DNS Records
WHOIS / Registration
Registration data planned
Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.
Subdomains
Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.
| Subdomain | Resolves to | Last seen |
|---|---|---|
| autodiscover.4flow.de | 2026-08-18 15:01:45.332 | |
| 4flow.de | 2026-08-02 20:00:37.785 | |
| alpha.4flow.de | 2026-08-18 15:01:45.332 | |
| analytics2.4flow.de | 2026-08-27 12:21:50.811 | |
| mail.4flow.de | 2026-08-18 15:01:45.332 | |
| mail2.4flow.de | 2026-08-18 15:01:45.332 | |
| newsletter.4flow.de | 2026-08-18 15:01:45.332 | |
| support.4flow.de | 2026-08-18 15:01:45.332 | |
| vpn.4flow.de | 2026-08-18 15:01:45.332 | |
| www.4flow.de | 2026-08-18 15:01:45.332 | |
| analytics.4flow.de | DNS pending | — |
| herbstmx.4flow.de | DNS pending | — |
| oftp2.4flow.de | DNS pending | — |
| www.herbstmx.4flow.de | DNS pending | — |
| www.oftp2.4flow.de | DNS pending | — |
Tech Stack
Tech detection pending
Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.
TLS Certificates
Certificate observations pending
TLS certs naming this domain in subject or SANs will appear here as our scan-layer catches them.
IPs Citing This Domain
No citing IPs found yet
As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.
Origin / IP-Leak
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
No origin-IP leaks detected (yet)
Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.
CT-Log Evidence
Certificates from public Certificate Transparency logs whose subject or SAN names this domain — including historic certs we never observed live.
Threat Intelligence
Domain threat-intel pending
Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.
History
Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.
| Type | Value | First seen | Last seen |
|---|---|---|---|
| TXT | _globalsign-domain-verification=ikuX5RgsWP0kHqr673ZYNqQWytMJDBJxK-RftWaiPv | 2026-07-25 20:08:55.600 | 2026-08-02 20:00:37.785 |
| TXT | MS=ms98276793 | 2026-07-25 20:08:55.600 | 2026-08-02 20:00:37.785 |
| A | 4.231.112.82 | 2026-07-25 20:08:55.600 | 2026-08-02 20:00:37.785 |
| TXT | openai-domain-verification=dv-FfVSvGivoEGtOhHsrFDGc1oQ | 2026-07-25 20:08:55.600 | 2026-08-02 20:00:37.785 |
| TXT | TW7fByybYwCOlURbs0X6QZHpnAaNSK0V/5bLu7+j2exwG7Zvek80/aE3kj4FOA1zysxEGz8PZWVX95nAaBZN8g== | 2026-07-25 20:08:55.600 | 2026-08-02 20:00:37.785 |
| NS | ns1.herbst.de | 2026-07-25 20:08:55.600 | 2026-08-02 20:00:37.785 |
| NS | ns3.herbst.de | 2026-07-25 20:08:55.600 | 2026-08-02 20:00:37.785 |
| TXT | docusign=edaf5402-e596-4ad6-9a2f-353a5dd4d320 | 2026-07-25 20:08:55.600 | 2026-08-02 20:00:37.785 |
| TXT | atlassian-domain-verification=8PCcEJ7f30Fot0QTtqJg1R6OKkyofjBFZZxv8pHDB9fxuwts0hFhwU9tMxIPHgaO | 2026-07-25 20:08:55.600 | 2026-08-02 20:00:37.785 |
| NS | ns2.herbst.de | 2026-07-25 20:08:55.600 | 2026-08-02 20:00:37.785 |
| SRV | _autodiscover._tcp 1 60 443 mail.4flow.de | 2026-07-25 20:08:55.600 | 2026-08-02 20:00:37.785 |
| TXT | apple-domain-verification=qSJZfhaa3DrY90bF | 2026-07-25 20:08:55.600 | 2026-08-02 20:00:37.785 |
| TXT | v=spf1 ip4:62.96.204.55 include:25287525.spf07.hubspotemail.net include:spf.protection.outlook.com include:spf-de.emailsignatures365.com include:spf.nl2go.com ip4:213.61.105.226 ip4:217.110.189.196 ip4:85.25.89.120 ip4:85.214.41.136 ip4:213.61.135.242 ip4:213.61.60.245 ip4:213.61.60.244 ip4:46.30.83.27 ip4:91.203.202.123 ip4:91.203.202.35 ip4:62.96.204.60 ip4:46.30.85.66 ip4:46.30.85.67 ip4:46.30.83.27 ip4:91.203.202.55 ip4:46.30.83.103 -all | 2026-07-25 20:08:55.600 | 2026-08-02 20:00:37.785 |
| TXT | google-site-verification=u0EAw9pS2SWHi87IGfxYWOJLYGfgye_4oDGdNujUvU0 | 2026-07-25 20:08:55.600 | 2026-08-02 20:00:37.785 |
| SRV | _sipfederationtls._tcp 100 1 5061 sipfed.online.lync.com | 2026-07-25 20:08:55.600 | 2026-08-02 20:00:37.785 |
| MX | 0 4flow-de.mail.protection.outlook.com | 2026-07-25 20:08:55.600 | 2026-08-02 20:00:37.785 |