Domain

d.ford.com

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

DNS Check HTTP Check Run Full Scan .com TLD

Run a live full scan of d.ford.com

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now

Hosting IPs

—

A/AAAA targets

Subdomains

—

CT + scan + body

Record Types

—

seen in DNS

Observed Certs

—

in our scans

DNS Records

104.110.240.89, 104.110.240.91, 104.115.82.27, 104.115.82.8, 184.86.103.205, 184.86.103.220, 2.16.27.81, 2.16.27.85

AAAA

2600:1408:c400:11::17cd:6b4b, 2600:1408:c400:11::17cd:6b51, 2600:141b:1c00:36::17d2:5ca4, 2600:141b:1c00:36::17d2:5ca5, 2a02:26f0:1180:7b::215:179f, 2a02:26f0:1180:7b::215:17ac, 2a02:26f0:11a::5f65:1741, 2a02:26f0:11a::5f65:174b

—

TXT

—

CNAME

—

CAA

—

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Subdomain enumeration pending

Every subdomain ever issued a TLS cert under this apex — extracted from Certificate Transparency logs, our own scan observations and body references.

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

23.203.180.196:443 14af1b3c4b0e…

Subject: www.ford.com

Issuer: GeoTrust TLS RSA CA G1

SANs: accessories.ford.com, accessories.lincoln.com, account.ford.com, bca.ford.com, bp3.ford.com, bp3.lincoln.com, build.ford.com, buildfoc.ford.com, campaign-social.ford.com, campaign-socialqa.ford.com, commercialsolutions.ford.com, d.ford.com, emailpages.efordcreditemail.com, emailpages.elincolnafsemail.com, emailpages.email-ford.com, emailpages.email-lincoln.com, es.commercialsolutions.ford.com, es.telematics.ford.com, ford.com, help.ford.com, help.lincoln.com, local.ford.com, m.ford.com, media.ford.com, media.lincoln.com, mymustang.ford.com, owner.ford.com, owner.lincoln.com, social.ford.com, socialqa.ford.com, staging.media.ford.com, staging.media.lincoln.com, www.account.ford.com, www.advocacy.ford.com, www.buyfordnow.com, www.commercialsolutions.ford.com, www.connectedlincoln.com, www.fcsre.ford.com, www.ford.com, www.fordconnected.com, www.fordx.com, www.insurance.ford.com, www.inventory.ford.com, www.inventory.lincoln.com, www.local.ford.com, www.media.ford.com, www.media.lincoln.com, www.nvcaem.ford.com, www.nvcaem.lincoln.com, www.owner.ford.com, www.owner.lincoln.com, www.subscriptions.ford.com, www.telematics.ford.com, www.vrmedia.ford.com, wwwperf.ford.com, wwwqa-test.insurance.ford.com, wwwqa.account.ford.co.uk, wwwqa.account.ford.com, wwwqa.advocacy.ford.com, wwwqa.bca.ford.com, wwwqa.bp3.ford.com, wwwqa.bp3.lincoln.com, wwwqa.build.ford.com, wwwqa.buildfoc.ford.com, wwwqa.buyfordnow.com, wwwqa.dg.ford.com, wwwqa.dgfoc.ford.com, wwwqa.fordx.com, wwwqa.insurance.ford.com, wwwqa.media.ford.com, wwwqa.media.lincoln.com, wwwqa.mymustang.ford.com, wwwqa.nvcaem.ford.com, wwwqa.nvcaem.lincoln.com, wwwqa.subscriptions.ford.com, wwwqa.vrmedia.ford.com, wwwqa2.buyfordnow.com, wwwqa2.local.ford.com, wwwqa3.buyfordnow.com, wwwstg.ford.com

23.203.86.195:443 14af1b3c4b0e…

Subject: www.ford.com

Issuer: GeoTrust TLS RSA CA G1

23.42.205.164:443 14af1b3c4b0e…

Subject: www.ford.com

Issuer: GeoTrust TLS RSA CA G1

104.110.135.36:443 14af1b3c4b0e…

Subject: www.ford.com

Issuer: GeoTrust TLS RSA CA G1

184.29.97.45:443 14af1b3c4b0e…

Subject: www.ford.com

Issuer: GeoTrust TLS RSA CA G1

23.198.140.194:443 14af1b3c4b0e…

Subject: www.ford.com

Issuer: GeoTrust TLS RSA CA G1

19.12.96.192:443 e1315d4a65c5…

Subject: www.changepassword.ford.com

Issuer: GlobalSign RSA OV SSL CA 2018

SANs: api-changepassword.app.ford.com, api.changepassword.ford.com, changepassword.ford.com, www-changepassword-ext.app.ford.com, www-changepassword.app.ford.com, www.changepassword.ford.com

19.12.96.203:443 434f3876a575…

Subject: ito123259.hosts.cloud.ford.com

Issuer: GlobalSign RSA OV SSL CA 2018

SANs: ito123259.hosts.cloud.ford.com

40.162.212.166:443 5058f617698b…

Subject: www.vha-vehicle-user-preprod.ford.com

Issuer: GlobalSign RSA OV SSL CA 2018

SANs: vha-vehicle-user-preprod.ford.com, www.vha-vehicle-user-preprod.ford.com

19.12.112.108:443 0347cda7622a…

Subject: www.ffsupload.ford.com

Issuer: GlobalSign RSA OV SSL CA 2018

SANs: ffsupload.ford.com, web.ffsupload.ford.com, www-ffsupload.app.ford.com, www.ffsupload.ford.com

2.22.188.158:443 14af1b3c4b0e…

Subject: www.ford.com

Issuer: GeoTrust TLS RSA CA G1

96.6.220.161:443 14af1b3c4b0e…

Subject: www.ford.com

Issuer: GeoTrust TLS RSA CA G1

23.222.222.116:443 14af1b3c4b0e…

Subject: www.ford.com

Issuer: GeoTrust TLS RSA CA G1

173.222.216.38:443 14af1b3c4b0e…

Subject: www.ford.com

Issuer: GeoTrust TLS RSA CA G1

23.198.133.125:443 14af1b3c4b0e…

Subject: www.ford.com

Issuer: GeoTrust TLS RSA CA G1

23.61.21.19:443 14af1b3c4b0e…

Subject: www.ford.com

Issuer: GeoTrust TLS RSA CA G1

184.24.170.5:443 14af1b3c4b0e…

Subject: www.ford.com

Issuer: GeoTrust TLS RSA CA G1

40.162.201.215:443 d8b167e5b11e…

Subject: fstools-demo-preprod.ford.com.cn

Issuer: GlobalSign RSA OV SSL CA 2018

SANs: fstools-demo-preprod.ford.com.cn, www.fstools-demo-preprod.ford.com.cn

23.9.141.19:443 14af1b3c4b0e…

Subject: www.ford.com

Issuer: GeoTrust TLS RSA CA G1

23.202.206.37:443 14af1b3c4b0e…

Subject: www.ford.com

Issuer: GeoTrust TLS RSA CA G1

72.246.163.41:443 14af1b3c4b0e…

Subject: www.ford.com

Issuer: GeoTrust TLS RSA CA G1

23.201.112.142:443 14af1b3c4b0e…

Subject: www.ford.com

Issuer: GeoTrust TLS RSA CA G1

34.8.104.183:443 d607bed94c61…

Subject: wwwqa.eused.ford.com

Issuer: WR3

SANs: wwwqa.eused.dealerconnection.com, wwwqa.eused.ford.com

34.8.142.47:443 22d50f4836c3…

Subject: wwwqa.wings-outbound.ford.com

Issuer: WR3

SANs: wwwqa.wings-outbound.ford.com

23.38.139.142:443 14af1b3c4b0e…

Subject: www.ford.com

Issuer: GeoTrust TLS RSA CA G1

104.104.130.178:443 14af1b3c4b0e…

Subject: www.ford.com

Issuer: GeoTrust TLS RSA CA G1

34.36.148.161:443 a6bdb7a1f853…

Subject: www.fordconnected.ford.com

Issuer: GlobalSign RSA OV SSL CA 2018

SANs: fordconnected.ford.com, www.connectedlincoln.ford.com, www.fordconnected.ford.com

23.37.241.178:443 14af1b3c4b0e…

Subject: www.ford.com

Issuer: GeoTrust TLS RSA CA G1

19.12.96.166:443 7e2170d89662…

Subject: ito033627.hosts.cloud.ford.com

Issuer: GlobalSign RSA OV SSL CA 2018

SANs: amroclaims.ford.com, ito033627.hosts.cloud.ford.com, www-amroclaims.app.ford.com, www-duckcreek.app.ford.com, www.amroclaims.ford.com, www.duckcreek.ford.com

23.36.215.29:443 14af1b3c4b0e…

Subject: www.ford.com

Issuer: GeoTrust TLS RSA CA G1

IPs Citing This Domain

No citing IPs found yet

As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

No origin-IP leaks detected (yet)

Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.

Type	Value	First seen	Last seen
AAAA	2a02:26f0:1700:11::b856:679b	2026-05-25 21:32:03.363	2026-05-27 16:23:56.477
AAAA	2a02:26f0:1700:11::b856:678b	2026-05-25 21:32:03.363	2026-05-27 16:23:56.477
A	184.86.103.205	2026-05-25 21:32:03.363	2026-07-26 16:20:59.102
A	184.86.103.220	2026-05-25 21:32:03.363	2026-07-26 16:20:59.102
A	104.115.82.27	2026-05-25 23:59:40.866	2026-05-27 10:09:22.383
A	104.115.82.8	2026-05-25 23:59:40.866	2026-05-27 10:09:22.383
A	23.36.162.212	2026-05-26 00:21:04.925	2026-05-31 06:49:40.773
A	23.36.162.223	2026-05-26 00:21:04.925	2026-05-31 06:49:40.773
AAAA	2a02:26f0:2c::213:6149	2026-05-26 02:43:02.200	2026-05-31 06:49:40.773
A	2.19.96.184	2026-05-26 02:43:02.200	2026-05-27 01:04:22.283
AAAA	2a02:26f0:2c::213:6143	2026-05-26 02:43:02.200	2026-05-31 06:49:40.773
A	2.19.96.226	2026-05-26 02:43:02.200	2026-05-27 01:04:22.283
A	2.18.64.18	2026-05-26 03:59:06.816	2026-05-26 21:29:52.339
A	2.18.64.6	2026-05-26 03:59:06.816	2026-05-26 21:29:52.339
A	92.123.12.154	2026-05-26 05:00:16.508	2026-05-26 15:53:54.251
A	92.123.12.160	2026-05-26 05:00:16.508	2026-05-26 15:53:54.251
AAAA	2a02:26f0:e600::170f:b220	2026-05-26 06:40:34.301	2026-05-27 10:09:22.383
AAAA	2a02:26f0:e600::170f:b239	2026-05-26 06:40:34.301	2026-05-27 10:09:22.383
A	2.17.22.58	2026-05-26 11:33:13.424	2026-05-27 14:49:12.821
A	2.17.22.64	2026-05-26 11:33:13.424	2026-05-27 14:49:12.821
A	23.11.206.96	2026-05-26 11:51:50.538	2026-05-27 04:52:50.881
AAAA	2a02:26f0:1700:1c::217:62c	2026-05-26 13:52:57.285	2026-05-27 14:49:12.821
AAAA	2a02:26f0:1700:1c::217:60c	2026-05-26 13:52:57.285	2026-05-27 14:49:12.821
A	23.50.131.153	2026-05-27 07:50:23.553	2026-05-27 07:50:23.553
A	23.50.131.147	2026-05-27 07:50:23.553	2026-05-27 07:50:23.553
A	104.110.240.91	2026-06-03 13:08:32.671	2026-07-28 15:14:01.364
A	104.110.240.89	2026-06-03 13:08:32.671	2026-07-28 15:14:01.364
AAAA	2a02:26f0:b200::58dd:1960	2026-06-03 13:08:32.671	2026-07-20 15:12:15.058
AAAA	2a02:26f0:b200::58dd:1981	2026-06-03 13:08:32.671	2026-07-28 19:39:40.097
AAAA	2a02:26f0:b200::58dd:196b	2026-06-15 23:30:08.693	2026-07-28 19:39:40.097
AAAA	2a02:26f0:1180:7b::215:179f	2026-06-16 20:44:34.340	2026-07-24 16:59:50.420
A	2.16.27.85	2026-06-16 20:44:34.340	2026-07-28 19:39:40.097
A	2.16.27.81	2026-06-16 20:44:34.340	2026-06-16 20:44:34.340
AAAA	2a02:26f0:1180:7b::215:17ac	2026-06-16 20:44:34.340	2026-07-24 16:59:50.420
A	2.16.6.28	2026-07-16 12:19:38.393	2026-07-16 12:19:38.393
A	2.16.6.12	2026-07-16 12:19:38.393	2026-07-16 12:19:38.393
A	23.53.35.165	2026-07-17 01:03:55.008	2026-07-17 01:03:55.008
A	23.53.35.179	2026-07-17 01:03:55.008	2026-07-17 01:03:55.008
A	23.48.203.101	2026-07-17 05:58:17.649	2026-07-17 05:58:17.649
A	23.48.203.109	2026-07-17 05:58:17.649	2026-07-17 05:58:17.649
A	23.48.224.196	2026-07-18 08:02:41.926	2026-07-18 08:02:41.926
A	23.48.224.199	2026-07-18 08:02:41.926	2026-07-18 08:02:41.926
A	2.16.6.204	2026-07-21 20:05:55.793	2026-07-26 13:46:30.523
A	2.16.6.200	2026-07-21 20:05:55.793	2026-07-26 13:46:30.523
AAAA	2a02:26f0:11a::5f65:1741	2026-07-21 20:15:59.644	2026-07-21 20:15:59.644
AAAA	2a02:26f0:11a::5f65:174b	2026-07-21 20:15:59.644	2026-07-21 20:15:59.644
AAAA	2600:141b:1c00:36::17d2:5ca4	2026-07-22 10:30:16.117	2026-07-22 10:30:16.117
AAAA	2600:141b:1c00:36::17d2:5ca5	2026-07-22 10:30:16.117	2026-07-22 10:30:16.117
A	95.101.23.65	2026-07-22 10:30:16.117	2026-07-22 10:30:16.117
A	95.101.23.75	2026-07-22 10:30:16.117	2026-07-22 10:30:16.117
AAAA	2600:1408:c400:11::17cd:6b4b	2026-07-22 19:14:48.546	2026-07-22 19:14:48.546
AAAA	2600:1408:c400:11::17cd:6b51	2026-07-22 19:14:48.546	2026-07-22 19:14:48.546
A	88.221.24.227	2026-07-23 19:26:25.914	2026-07-23 19:26:25.914
A	88.221.24.226	2026-07-23 19:26:25.914	2026-07-23 19:26:25.914
AAAA	2a02:26f0:3500:18::1724:a294	2026-07-26 16:20:59.102	2026-07-26 16:20:59.102
AAAA	2a02:26f0:3500:18::1724:a289	2026-07-26 16:20:59.102	2026-07-26 16:20:59.102
AAAA	2a02:26f0:2780:70::215:ef14	2026-07-28 15:14:01.364	2026-07-28 15:14:01.364
AAAA	2a02:26f0:2780:70::215:ef21	2026-07-28 15:14:01.364	2026-07-28 15:14:01.364
A	2.16.27.90	2026-07-28 19:39:40.097	2026-07-28 19:39:40.097