Domain
com.do
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of com.do
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
Hosting IPs
—
A/AAAA targets
Subdomains
—
CT + scan + body
Record Types
—
seen in DNS
Observed Certs
—
in our scans
DNS Records
A
—
AAAA
—
MX
—
NS
—
TXT
—
CNAME
—
CAA
—
WHOIS / Registration
Registration data planned
Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.
Subdomains
Subdomain enumeration pending
Every subdomain ever issued a TLS cert under this apex — extracted from Certificate Transparency logs, our own scan observations and body references.
Tech Stack
Tech detection pending
Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.
TLS Certificates
Subject: *.bhd.com.do
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: *.bhd.com.do, *.bhdleon.com.do, bhd.com.do, bhdleon.com.do
Subject: ubnt.pga.com.do
Issuer: YR1
SANs: ubnt.pga.com.do
Subject: 5424681.goldcube.com.do
Issuer: 5424681.goldcube.com.do
SANs: 5424681.goldcube.com.do
Subject: cegesta.com.do
Issuer: Starfield Secure Certificate Authority - G2
SANs: cegesta.com.do, www.cegesta.com.do
Subject: recom.docer.wps.cn
Issuer: Encryption Everywhere DV TLS CA - G1
SANs: recom.docer.wps.cn
Subject: chukumlagoon.com.do
Issuer: YR1
SANs: chukumlagoon.com.do, www.chukumlagoon.com.do
Subject: strikebowling.abacus-erp.com.do
Issuer: YE2
SANs: strikebowling.abacus-erp.com.do
Subject: wfh1.uno.com.do
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: wfh1.uno.com.do, www.wfh1.uno.com.do
Subject: pacs.mca.com.do
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: pacs.mca.com.do, www.pacs.mca.com.do
Subject: *.ecf.com.do
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.ecf.com.do, ecf.com.do
Subject: ftp.transunion.com.do
Issuer: Entrust OV TLS Issuing RSA CA 2
SANs: ftp.transunion.com.do
Subject: galeno.intellisys.com.do
Issuer: WR3
SANs: chat.galeno.intellisys.com.do, galeno.intellisys.com.do, integracion-qa.galeno.intellisys.com.do, integracion.galeno.intellisys.com.do, protocol.galeno.intellisys.com.do, triaje.galeno.intellisys.com.do
Subject: bravova-api-dev.superbravo.com.do
Issuer: WR3
SANs: admin-api-dev.bravova.app, api-dev.bravova.app, bravova-admin-api-dev.superbravo.com.do, bravova-api-dev.superbravo.com.do, bravova-instaleap-api-dev.superbravo.com.do, instaleap-api-dev.bravova.app
Subject: guibei.com.do
Issuer: YE2
SANs: guibei.com.do, www.guibei.com.do
Subject: adomeint.inspira.com.do
Issuer: YR2
SANs: adomeint.inspira.com.do
Subject: api-dev.merqa.com.do
Issuer: YR2
SANs: api-dev.merqa.com.do
Subject: *.portaldom.com.do
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.portaldom.com.do, portaldom.com.do
Subject: sansouci.com.do
Issuer: YR2
SANs: sansouci.com.do, www.sansouci.com.do
Subject: disagro.com.do
Issuer: YR2
SANs: disagro.com.do, www.disagro.com.do
Subject: api.innonfc.grsoft.com.do
Issuer: YR1
SANs: api.innonfc.grsoft.com.do
Subject: pd1-tk.bancosantacruz.com.do
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: pd1-tk.bancosantacruz.com.do, www.pd1-tk.bancosantacruz.com.do
Subject: *.humano.com.do
Issuer: RapidSSL TLS RSA CA G1
SANs: *.humano.com.do, humano.com.do
Subject: figurella.com.do
Issuer: YR2
SANs: figurella.com.do, www.figurella.com.do
Subject: mail.hunter.com.do
Issuer: R12
SANs: mail.hunter.com.do
Subject: *.lcdn.claro.com.do
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.lcdn.claro.com.do, lcdn.claro.com.do
Subject: ov.casadeespana.com.do
Issuer: Go Daddy Secure Certificate Authority - G2
SANs: ov.casadeespana.com.do, www.ov.casadeespana.com.do
Subject: mail.conciencia.com.do
Issuer: YR2
SANs: mail.conciencia.com.do
Subject: promo-dev.bravo.com.do
Issuer: WR3
SANs: promo-dev.bravo.com.do, promos-cloud-dev.bravo.com.do, promos-online-dev.bravo.com.do
Subject: *.bhd.com.do
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: *.bhd.com.do, *.bhdleon.com.do, bhd.com.do, bhdleon.com.do
Subject: *.alfacare.com.do
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.alfacare.com.do, alfacare.com.do
IPs Citing This Domain
No citing IPs found yet
As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.
Origin / IP-Leak
USP
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
| Origin IP | Origin ASN | CDN ASN | Confidence | Reasoning |
|---|---|---|---|---|
| 74.208.50.68 | AS8560 | AS13335 | 95% | cert a1d2d70c… served by 74.208.50.68 (AS8560) carries SAN jchookahvape.abacus-erp.com.do which currently resolves through Cloudflare (AS13335) at 188.114.97.3, 188.114.96.3, 2a06:98c1:3120::3, 2a06:98c1:3121::3 |
| 23.39.90.159 | AS45758 | AS16509 | 95% | cert 0eeaab8e… served by 23.39.90.159 (AS45758) carries SAN enfabebe.com.do which currently resolves through Amazon (AS16509) at 3.173.161.92, 3.173.161.121, 3.173.161.122, 3.173.161.101 |
| 111.84.188.121 | AS9587 | AS16625 | 95% | cert 934f9a5e… served by 111.84.188.121 (AS9587) carries SAN aa.com.do which currently resolves through Akamai (AS16625) at 23.220.112.122, 104.99.232.146, 184.30.156.143 |
| 23.49.71.59 | AS6762 | AS16625 | 95% | cert b66ffa9b… served by 23.49.71.59 (AS6762) carries SAN www.wyndhamalltra.com.do which currently resolves through Akamai (AS16625) at 184.24.31.50, 2a02:26f0:1180:186::209f, 2a02:26f0:1180:181::209f |
| 23.49.71.59 | AS6762 | AS14618 | 95% | cert b66ffa9b… served by 23.49.71.59 (AS6762) carries SAN wyndhamallinclusiveresorts.com.do which currently resolves through Amazon (AS14618) at 167.124.104.41 |
| 23.39.96.196 | AS45758 | AS16625 | 95% | cert 934f9a5e… served by 23.39.96.196 (AS45758) carries SAN aa.com.do which currently resolves through Akamai (AS16625) at 23.220.112.122, 104.99.232.146, 184.30.156.143 |
| 23.8.147.241 | AS17639 | AS16625 | 95% | cert 0417d1a9… served by 23.8.147.241 (AS17639) carries SAN www.nexcare.3m.com.do which currently resolves through Akamai (AS16625) at 23.13.165.224, 2a02:26f0:1700:392::34fe, 2a02:26f0:1700:382::34fe |
| 23.12.223.129 | AS9498 | AS19551 | 95% | cert 87489b1c… served by 23.12.223.129 (AS9498) carries SAN www.johnsoncontrols.com.do which currently resolves through Imperva (AS19551) at 45.60.198.141 |
| 204.126.129.84 | AS271959 | AS16509 | 95% | cert 6314bb79… served by 204.126.129.84 (AS271959) carries SAN bhd.com.do which currently resolves through Amazon (AS16509) at 52.223.13.11, 15.197.95.40 |
| 204.126.128.144 | AS271959 | AS16509 | 95% | cert 6314bb79… served by 204.126.128.144 (AS271959) carries SAN bhd.com.do which currently resolves through Amazon (AS16509) at 52.223.13.11, 15.197.95.40 |
| 164.68.108.231 | AS51167 | AS13335 | 95% | cert b04d03ce… served by 164.68.108.231 (AS51167) carries SAN qadv.sumate.com.do which currently resolves through Cloudflare (AS13335) at 104.21.2.49, 172.67.152.136, 2606:4700:3030::6815:231, 2606:4700:3033::ac43:9888 |
| 190.166.236.22 | AS6400 | AS13335 | 95% | cert a4cdf70e… served by 190.166.236.22 (AS6400) carries SAN mapfresaludars.com.do which currently resolves through Cloudflare (AS13335) at 104.18.13.145, 104.18.12.145, 2606:4700::6812:d91, 2606:4700::6812:c91 |
| 204.126.129.104 | AS271959 | AS16509 | 95% | cert 6314bb79… served by 204.126.129.104 (AS271959) carries SAN bhd.com.do which currently resolves through Amazon (AS16509) at 52.223.13.11, 15.197.95.40 |
| 66.116.237.67 | AS31898 | AS13335 | 95% | cert 566fdb84… served by 66.116.237.67 (AS31898) carries SAN iamart.com.do which currently resolves through Cloudflare (AS13335) at 188.114.96.0, 188.114.97.0, 2606:4700:3031::ac43:93df, 2606:4700:3031::6815:39ae |
| 204.126.129.102 | AS271959 | AS16509 | 95% | cert 6314bb79… served by 204.126.129.102 (AS271959) carries SAN bhd.com.do which currently resolves through Amazon (AS16509) at 52.223.13.11, 15.197.95.40 |
| 204.126.128.130 | AS271959 | AS16509 | 95% | cert 6314bb79… served by 204.126.128.130 (AS271959) carries SAN bhd.com.do which currently resolves through Amazon (AS16509) at 52.223.13.11, 15.197.95.40 |
| 149.137.236.110 | AS12213 | AS8075 | 95% | cert 0b6be405… served by 149.137.236.110 (AS12213) carries SAN lacolonial.com.do which currently resolves through Microsoft (AS8075) at 13.107.253.41 |
| 191.97.91.13 | AS263212 | AS19551 | 95% | cert d675d17f… served by 191.97.91.13 (AS263212) carries SAN promerica.com.do which currently resolves through Imperva (AS19551) at 45.60.75.39, 45.60.135.39 |
| 34.23.207.206 | AS396982 | AS13335 | 95% | cert a1a6a6d8… served by 34.23.207.206 (AS396982) carries SAN ochoa.com.do which currently resolves through Cloudflare (AS13335) at 104.20.31.244, 172.66.161.114, 2606:4700:10::ac42:a172, 2606:4700:10::6814:1ff4 |
| 204.126.129.130 | AS271959 | AS16509 | 95% | cert a03f67bf… served by 204.126.129.130 (AS271959) carries SAN bhd.com.do which currently resolves through Amazon (AS16509) at 52.223.13.11, 15.197.95.40 |
| 67.225.186.153 | AS32244 | AS8075 | 95% | cert 8fc9a43c… served by 67.225.186.153 (AS32244) carries SAN quantium.com.do which currently resolves through Microsoft (AS8075) at 135.237.190.201 |
| 66.98.56.52 | AS6400 | AS19551 | 95% | cert e756de18… served by 66.98.56.52 (AS6400) carries SAN pruebas.azul.com.do which currently resolves through Imperva (AS19551) at 45.60.64.158 |
| 204.126.128.124 | AS271959 | AS16509 | 95% | cert a03f67bf… served by 204.126.128.124 (AS271959) carries SAN bhd.com.do which currently resolves through Amazon (AS16509) at 52.223.13.11, 15.197.95.40 |
| 202.58.11.48 | AS24247 | AS13335 | 95% | cert 90677439… served by 202.58.11.48 (AS24247) carries SAN www.intertek.com.do which currently resolves through Cloudflare (AS13335) at 172.64.155.213, 104.18.32.43, 2a06:98c1:310d::ac40:9bd5, 2a06:98c1:3104::6812:202b |
| 23.95.73.125 | AS136258 | AS13335 | 95% | cert ec14b1b4… served by 23.95.73.125 (AS136258) carries SAN crediflux.com.do which currently resolves through Cloudflare (AS13335) at 172.67.163.131, 104.21.49.139, 2606:4700:3035::ac43:a383, 2606:4700:3033::6815:318b |
Threat Intelligence
Domain threat-intel pending
Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.
History
Domain timeline pending
Passive-DNS history accumulates as our forward-DNS crawler observes A/AAAA/MX/NS/TXT records over time.