Check-Host.cc

Domain

subaru.es

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

Run a live full scan of subaru.es

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now
Hosting IPs
168
A/AAAA targets
Subdomains
11
CT + scan + body
Record Types
5
seen in DNS
Observed Certs
6
in our scans

DNS Records

A
145.239.53.173
AAAA
MX
0 subaru-es.mail.protection.outlook.com
NS
ns1-06.azure-dns.com, ns2-06.azure-dns.net, ns3-06.azure-dns.org, ns4-06.azure-dns.info
TXT
JvteX05bHtTAH6lPa+wsdYUNOSpha+ucQR6s620PlSGXtpEzyJyeM/eMUj/VuFU2YuAXxGu1CXz92QCdTXDM9w==, MS=ms66640642, _20v79zvyubwivitknufmqrnde65nu9e, gDXHOrJDRkQxwiCfbrwcLVFRSQQhrikMtlRNQCFqGc+TGe/rOzLY7IMwpu5/Dk8J1buZDd7BUlbQrPERiqYW+A==, google-site-verification=OgTxMZXjkoMSEW3VSI0fixIXpMFHvUiPvfmrep8p0lY, v=spf1 include:bams.bsi1870.net ip4:104.45.95.115 ip4:145.239.53.170 include:spf.protection.outlook.com include:spf.mailjet.com ~all
CNAME
CAA

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.

Subdomain Resolves to Last seen
image.mail.subaru.es 2026-07-28 09:41:22.792
click.mail.subaru.es
1970-01-01 00:00:00.000
cloud.mail.subaru.es
1970-01-01 00:00:00.000
dev.subaru.es
1970-01-01 00:00:00.000
e-brochure.subaru.es
1970-01-01 00:00:00.000
subaru.es 2026-06-02 17:34:51.470
view.mail.subaru.es
1970-01-01 00:00:00.000

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

Certificate observations pending

TLS certs naming this domain in subject or SANs will appear here as our scan-layer catches them.

IPs Citing This Domain

No citing IPs found yet

As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

Origin IP Origin ASN CDN ASN Confidence Reasoning
23.12.210.146 AS9498 AS16509 95% cert ef1642f8… served by 23.12.210.146 (AS9498) carries SAN image.mail.subaru.es which currently resolves through Amazon (AS16509) at 2600:9000:2090:3600:3:cf9f:b2c0:93a1, 2600:9000:2090:4000:3:cf9f:b2c0:93a1, 2600:9000:2090:a600:3:cf9f:b2c0:93a1, 2600:9000:2090:3000:3:cf9f:b2c0:93a1
23.39.82.69 AS45758 AS16509 95% cert ef1642f8… served by 23.39.82.69 (AS45758) carries SAN image.mail.subaru.es which currently resolves through Amazon (AS16509) at 18.238.243.6, 2600:9000:2090:8400:3:cf9f:b2c0:93a1, 2600:9000:2090:ea00:3:cf9f:b2c0:93a1, 2600:9000:2090:1c00:3:cf9f:b2c0:93a1
23.221.114.144 AS9299 AS16509 95% cert ef1642f8… served by 23.221.114.144 (AS9299) carries SAN image.mail.subaru.es which currently resolves through Amazon (AS16509) at 18.238.243.91, 18.238.243.22, 18.238.243.58, 18.238.243.6

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.

Type Value First seen Last seen
NS ns2-06.azure-dns.net 2026-06-01 01:33:35.322 2026-06-02 17:34:51.470
TXT MS=ms66640642 2026-06-01 01:33:35.322 2026-06-02 17:34:51.470
TXT _20v79zvyubwivitknufmqrnde65nu9e 2026-06-01 01:33:35.322 2026-06-02 17:34:51.470
NS ns3-06.azure-dns.org 2026-06-01 01:33:35.322 2026-06-02 17:34:51.470
MX 0 subaru-es.mail.protection.outlook.com 2026-06-01 01:33:35.322 2026-06-02 17:34:51.470
TXT JvteX05bHtTAH6lPa+wsdYUNOSpha+ucQR6s620PlSGXtpEzyJyeM/eMUj/VuFU2YuAXxGu1CXz92QCdTXDM9w== 2026-06-01 01:33:35.322 2026-06-02 17:34:51.470
NS ns1-06.azure-dns.com 2026-06-01 01:33:35.322 2026-06-02 17:34:51.470
TXT v=spf1 include:bams.bsi1870.net ip4:104.45.95.115 ip4:145.239.53.170 include:spf.protection.outlook.com include:spf.mailjet.com ~all 2026-06-01 01:33:35.322 2026-06-02 17:34:51.470
TXT google-site-verification=OgTxMZXjkoMSEW3VSI0fixIXpMFHvUiPvfmrep8p0lY 2026-06-01 01:33:35.322 2026-06-02 17:34:51.470
SRV _sipfederationtls._tcp 100 1 5061 sipfed.online.lync.com 2026-06-01 01:33:35.322 2026-06-02 17:34:51.470
NS ns4-06.azure-dns.info 2026-06-01 01:33:35.322 2026-06-02 17:34:51.470
TXT gDXHOrJDRkQxwiCfbrwcLVFRSQQhrikMtlRNQCFqGc+TGe/rOzLY7IMwpu5/Dk8J1buZDd7BUlbQrPERiqYW+A== 2026-06-01 01:33:35.322 2026-06-02 17:34:51.470
A 145.239.53.173 2026-06-01 01:33:35.322 2026-06-02 17:34:51.470