marriott.com
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of marriott.com
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
DNS Records
WHOIS / Registration
Registration data planned
Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.
Subdomains
Subdomain enumeration pending
Every subdomain ever issued a TLS cert under this apex — extracted from Certificate Transparency logs, our own scan observations and body references.
Tech Stack
Tech detection pending
Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.
TLS Certificates
Certificate observations pending
TLS certs naming this domain in subject or SANs will appear here as our scan-layer catches them.
IPs Citing This Domain
Hosts whose HTML body references this domain. Strong signal for origin/mirror/embed discovery.
Origin / IP-Leak
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
| Origin IP | Origin ASN | CDN ASN | Confidence | Reasoning |
|---|---|---|---|---|
| 143.244.207.208 | AS14061 | AS20940 | 95% | cert 00399d76… served by 143.244.207.208 (AS14061) carries SAN oci-prod-integration-mipaasiaasservices-hireright.marriott.com which currently resolves through Akamai (AS20940) at 2a02:26f0:fe00:18f::b49, 23.220.112.106, 2a02:26f0:fe00:1ac::b49, 2600:141b:1c00:2298::b49 |
| 143.244.207.208 | AS14061 | AS209242 | 95% | cert 00399d76… served by 143.244.207.208 (AS14061) carries SAN clean.marriott.com which currently resolves through Cloudflare (AS209242) at 141.193.213.11, 141.193.213.10 |
| 143.244.207.208 | AS14061 | AS16509 | 95% | cert 00399d76… served by 143.244.207.208 (AS14061) carries SAN news.marriott.com which currently resolves through Amazon (AS16509) at 18.65.39.51, 18.65.39.110, 18.65.39.29, 18.65.39.70 |
| 143.244.207.208 | AS14061 | AS16625 | 95% | cert 00399d76… served by 143.244.207.208 (AS14061) carries SAN auth.marriott.com which currently resolves through Akamai (AS16625) at 23.220.112.106, 23.62.104.124, 23.34.124.115, 23.222.196.124 |
| 146.70.227.189 | AS9009 | AS16625 | 95% | cert 00399d76… served by 146.70.227.189 (AS9009) carries SAN auth.marriott.com which currently resolves through Akamai (AS16625) at 23.62.104.124, 23.220.112.106, 23.34.124.115, 23.222.196.124 |
| 146.70.227.189 | AS9009 | AS20940 | 95% | cert 00399d76… served by 146.70.227.189 (AS9009) carries SAN oci-prod-integration-mipaasiaasservices-dlz.marriott.com which currently resolves through Akamai (AS20940) at 2a02:26f0:fe00:18f::b49, 23.220.112.106, 2a02:26f0:fe00:1ac::b49, 2a02:26f0:1180:682::b49 |
| 146.70.227.189 | AS9009 | AS209242 | 95% | cert 00399d76… served by 146.70.227.189 (AS9009) carries SAN clean.marriott.com which currently resolves through Cloudflare (AS209242) at 141.193.213.11, 141.193.213.10 |
| 146.70.227.189 | AS9009 | AS16509 | 95% | cert 00399d76… served by 146.70.227.189 (AS9009) carries SAN news.marriott.com which currently resolves through Amazon (AS16509) at 18.65.39.51, 18.65.39.110, 18.65.39.29, 18.65.39.70 |
| 172.239.62.8 | AS63949 | AS209242 | 95% | cert 00399d76… served by 172.239.62.8 (AS63949) carries SAN clean.marriott.com which currently resolves through Cloudflare (AS209242) at 141.193.213.11, 141.193.213.10 |
| 172.239.62.8 | AS63949 | AS20940 | 95% | cert 00399d76… served by 172.239.62.8 (AS63949) carries SAN learningcontent.marriott.com which currently resolves through Akamai (AS20940) at 2a02:26f0:fe00:18f::b49, 23.220.112.106, 2a02:26f0:fe00:1ac::b49, 2600:141b:1c00:22a7::b49 |
| 172.239.62.8 | AS63949 | AS16625 | 95% | cert 00399d76… served by 172.239.62.8 (AS63949) carries SAN auth.marriott.com which currently resolves through Akamai (AS16625) at 23.220.112.106, 23.222.196.124, 184.30.156.126, 88.221.168.83 |
| 172.239.62.8 | AS63949 | AS16509 | 95% | cert 00399d76… served by 172.239.62.8 (AS63949) carries SAN news.marriott.com which currently resolves through Amazon (AS16509) at 18.65.39.51, 18.65.39.110, 18.65.39.29, 18.65.39.70 |
| 207.35.139.123 | AS577 | AS16625 | 95% | cert d168185e… served by 207.35.139.123 (AS577) carries SAN marriott.com which currently resolves through Akamai (AS16625) at 184.30.156.126, 2.20.168.117, 23.209.208.141, 104.99.232.124 |
| 89.168.31.148 | AS31898 | AS16625 | 95% | cert 00399d76… served by 89.168.31.148 (AS31898) carries SAN auth.marriott.com which currently resolves through Akamai (AS16625) at 23.220.112.106, 184.30.156.126, 88.221.168.83, 104.99.232.124 |
| 89.168.31.148 | AS31898 | AS16509 | 95% | cert 00399d76… served by 89.168.31.148 (AS31898) carries SAN news.marriott.com which currently resolves through Amazon (AS16509) at 18.65.39.51, 18.65.39.110, 18.65.39.29, 18.65.39.70 |
| 89.168.31.148 | AS31898 | AS20940 | 95% | cert 00399d76… served by 89.168.31.148 (AS31898) carries SAN oci-prod-integration-mipaasiaasservices-dlz.marriott.com which currently resolves through Akamai (AS20940) at 2a02:26f0:1180:697::b49, 184.30.156.126, 2a02:26f0:1180:682::b49, 88.221.168.83 |
| 89.168.31.148 | AS31898 | AS209242 | 95% | cert 00399d76… served by 89.168.31.148 (AS31898) carries SAN clean.marriott.com which currently resolves through Cloudflare (AS209242) at 141.193.213.11, 141.193.213.10 |
| 172.238.119.235 | AS63949 | AS20940 | 95% | cert 00399d76… served by 172.238.119.235 (AS63949) carries SAN learningcontent.marriott.com which currently resolves through Akamai (AS20940) at 2a02:26f0:fe00:18f::b49, 23.220.112.106, 2a02:26f0:fe00:1ac::b49, 2600:141b:1c00:22a7::b49 |
| 172.238.119.235 | AS63949 | AS209242 | 95% | cert 00399d76… served by 172.238.119.235 (AS63949) carries SAN clean.marriott.com which currently resolves through Cloudflare (AS209242) at 141.193.213.11, 141.193.213.10 |
| 172.238.119.235 | AS63949 | AS16509 | 95% | cert 00399d76… served by 172.238.119.235 (AS63949) carries SAN news.marriott.com which currently resolves through Amazon (AS16509) at 143.204.181.103, 143.204.181.69, 143.204.181.115, 143.204.181.56 |
| 172.238.119.235 | AS63949 | AS16625 | 95% | cert 00399d76… served by 172.238.119.235 (AS63949) carries SAN auth.marriott.com which currently resolves through Akamai (AS16625) at 23.220.112.106, 184.30.156.126, 23.219.4.84, 23.222.80.124 |
| 23.208.208.102 | AS6057 | AS20940 | 95% | cert 00399d76… served by 23.208.208.102 (AS6057) carries SAN oci-prod-integration-mipaasiaasservices-hireright.marriott.com which currently resolves through Akamai (AS20940) at 2a02:26f0:fe00:18f::b49, 23.220.112.106, 2a02:26f0:fe00:1ac::b49, 2a02:26f0:1700:387::b49 |
| 23.208.208.102 | AS6057 | AS16509 | 95% | cert 00399d76… served by 23.208.208.102 (AS6057) carries SAN news.marriott.com which currently resolves through Amazon (AS16509) at 18.65.39.51, 18.65.39.110, 18.65.39.29, 18.65.39.70 |
| 23.208.208.102 | AS6057 | AS209242 | 95% | cert 00399d76… served by 23.208.208.102 (AS6057) carries SAN clean.marriott.com which currently resolves through Cloudflare (AS209242) at 141.193.213.11, 141.193.213.10 |
| 23.208.208.102 | AS6057 | AS16625 | 95% | cert 00399d76… served by 23.208.208.102 (AS6057) carries SAN auth.marriott.com which currently resolves through Akamai (AS16625) at 23.220.112.106, 23.34.124.115, 184.30.156.126, 88.221.168.83 |
CT-Log Evidence
Certificates from public Certificate Transparency logs whose subject or SAN names this domain — including historic certs we never observed live.
Threat Intelligence
Domain threat-intel pending
Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.
History
Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.
| Type | Value | First seen | Last seen |
|---|---|---|---|
| NS | ns1-7.akam.net | 2026-05-26 23:00:20.000 | 2026-07-28 16:46:46.383 |
| TXT | postman-domain-verification=f50031b67f277c87b8d1fc380cdab9ae7c24fd70fe60547b6d37cb0f78bc3573949498c86dd8ca48648b3f2c4c225df73ee99f2dacae3513358a8911124ad0eb | 2026-05-26 23:00:20.000 | 2026-07-28 16:46:46.383 |
| TXT | v=spf1 include:spf.marriott.com include:spf.givex.com include:mail.zendesk.com a:c.spf.service-now.com include:spf.protection.outlook.com ip4:65.221.12.128 ip4:65.221.12.148 ip4:70.42.227.151 ip4:70.42.227.152 ip4:68.233.76.14 ip4:68.233.76.20 ip4:68.233.76.41 ip4:216.34.69.5 ip4:34.194.251.20 ip4:41.138.70.80/29 ip4:52.86.138.215 ip4:23.251.231.176/28 ip4:23.251.231.192/28 -all | 2026-05-26 23:00:20.000 | 2026-07-28 16:46:46.383 |
| TXT | e2ma-verification=hsbcb | 2026-05-26 23:00:20.000 | 2026-07-28 16:46:46.383 |
| TXT | EMMA-VALIDATION2-22-21 | 2026-05-26 23:00:20.000 | 2026-07-28 16:46:46.383 |
| TXT | Dynatrace-site-verification=b018e42d-1bf3-4214-a55d-b6d11d472484__dkbokapmaohqnqf6rjt4vc75d1 | 2026-05-26 23:00:20.000 | 2026-07-28 16:46:46.383 |
| TXT | e2ma-verification=t4xeb | 2026-05-26 23:00:20.000 | 2026-07-28 16:46:46.383 |
| NS | eur4.akam.net | 2026-05-26 23:00:20.000 | 2026-07-28 16:46:46.383 |
| TXT | amazonses:ycQqj6K4JaTXJZHZIcYKm+rZk3kf0+CDo58LI2UwkR0= | 2026-05-26 23:00:20.000 | 2026-07-28 16:46:46.383 |
| TXT | e2ma-verification=i7b3 | 2026-05-26 23:00:20.000 | 2026-07-28 16:46:46.383 |
| NS | eur3.akam.net | 2026-05-26 23:00:20.000 | 2026-07-28 16:46:46.383 |
| TXT | google-site-verification=Op26MVqGm5ezgYeMJ0t_6ZCjHTtBehaS43CpvlTFkPg | 2026-05-26 23:00:20.000 | 2026-07-28 16:46:46.383 |
| NS | use4.akam.net | 2026-05-26 23:00:20.000 | 2026-07-28 16:46:46.383 |
| TXT | e2ma-verification=r4qcb | 2026-05-26 23:00:20.000 | 2026-07-28 16:46:46.383 |
| TXT | bv-domain-verification=0d66f71c181efe6f149b1afc3bf7494520986eddfd13915969aa53da25a4a5f5 | 2026-05-26 23:00:20.000 | 2026-07-28 16:46:46.383 |
| TXT | amazonses:T+PiZncc85hp45Hh5rxnadRc3PqQCxeWhb2Iulxh+HI= | 2026-05-26 23:00:20.000 | 2026-07-28 16:46:46.383 |
| TXT | e2ma-verification=zhe3 | 2026-05-26 23:00:20.000 | 2026-07-28 16:46:46.383 |
| TXT | cursor-domain-verification-1fjpt7=Pu1dYBwqsDofgAhFP0N6ME9YW | 2026-05-26 23:00:20.000 | 2026-07-28 16:46:46.383 |
| TXT | meltwater_sso_20250515 | 2026-05-26 23:00:20.000 | 2026-07-28 16:46:46.383 |
| TXT | amazonses:dRwYaeqcRYgOr0nfuNpgfwcye7qC/+W7j9+4l95WmfA= | 2026-05-26 23:00:20.000 | 2026-07-28 16:46:46.383 |
| TXT | h1-domain-verification=3bPxkTRBe4uck7trDLA9BEguQdHUTpEsbin4kgsAepgHSnsi | 2026-05-26 23:00:20.000 | 2026-07-28 16:46:46.383 |
| TXT | docusign=b47573dd-01c3-49a8-9014-26e813e1c8d2 | 2026-05-26 23:00:20.000 | 2026-07-28 16:46:46.383 |
| TXT | facebook-domain-verification=7yktss7qob13nc0gahxo6028udc8ti | 2026-05-26 23:00:20.000 | 2026-07-28 16:46:46.383 |
| NS | usc1.akam.net | 2026-05-26 23:00:20.000 | 2026-07-28 16:46:46.383 |
| A | 184.30.156.126 | 2026-05-26 23:00:20.000 | 2026-07-28 16:46:46.383 |
| TXT | e2ma-verification=rohib | 2026-05-26 23:00:20.000 | 2026-07-28 16:46:46.383 |
| TXT | docusign=a75f5992-a1f4-42fb-b1fb-36850d8e976a | 2026-05-26 23:00:20.000 | 2026-07-28 16:46:46.383 |
| TXT | e2ma-verification=8oreb | 2026-05-26 23:00:20.000 | 2026-07-28 16:46:46.383 |
| TXT | atlassian-domain-verification=zzbKNynGXmBVVjHMpHdfFpEwzGxKV5plDTgGo00mBnx6f3sEd30UmA/w/TPcy9Ai | 2026-05-26 23:00:20.000 | 2026-07-28 16:46:46.383 |
| TXT | e2ma-verification=eqqgb | 2026-05-26 23:00:20.000 | 2026-07-28 16:46:46.383 |
| TXT | DocuSign-JAS-3f8670aa-a7b3-4c80-b87c-c4009cf24fef | 2026-05-26 23:00:20.000 | 2026-07-28 16:46:46.383 |
| TXT | e2ma-verification=5nbgb | 2026-05-26 23:00:20.000 | 2026-07-28 16:46:46.383 |
| TXT | smartsheet-site-validation=PYWle4OQif7gvVJpZX6Xo3bdBYQQX8Vu | 2026-05-26 23:00:20.000 | 2026-07-28 16:46:46.383 |
| TXT | e2ma-verification=5eigb | 2026-05-26 23:00:20.000 | 2026-07-28 16:46:46.383 |
| TXT | e2ma-verification=rzicb | 2026-05-26 23:00:20.000 | 2026-07-28 16:46:46.383 |
| TXT | canva-site-verification=jksL3Zvuljo2ex9weFenew | 2026-05-26 23:00:20.000 | 2026-07-28 16:46:46.383 |
| TXT | 9ea2de8a-d4af-4255-86f8-22e6410e7a3a | 2026-05-26 23:00:20.000 | 2026-07-28 16:46:46.383 |
| TXT | onetrust-domain-verification=c8419e55a9f44fd3a2aea1086589b47c | 2026-05-26 23:00:20.000 | 2026-07-28 16:46:46.383 |
| TXT | e2ma-verification=g23cb | 2026-05-26 23:00:20.000 | 2026-07-28 16:46:46.383 |
| TXT | cisco-ci-domain-verification=510f4042252171cd62c2992306c3623499318270fcef3f0266e4bc2bc4df9053 | 2026-05-26 23:00:20.000 | 2026-07-28 16:46:46.383 |
| NS | usc2.akam.net | 2026-05-26 23:00:20.000 | 2026-07-28 16:46:46.383 |
| TXT | flexera-domain-verification-jbnluuhrebvugcmr | 2026-05-26 23:00:20.000 | 2026-07-28 16:46:46.383 |
| TXT | e2ma-verification=puqeb | 2026-05-26 23:00:20.000 | 2026-07-28 16:46:46.383 |
| TXT | apple-domain-verification=0BpDQkck5deFVztA | 2026-05-26 23:00:20.000 | 2026-07-28 16:46:46.383 |
| TXT | NhJc80JClTwLvKuJzmJzVRWhiX7JEubBi8Tegyp1MyGbRSn0bMKddsgokifhxw2JuZ76PZ8qFHYEW9Aa8ykiwQ== | 2026-05-26 23:00:20.000 | 2026-07-28 16:46:46.383 |
| TXT | infoblox-domain-mastery=078e97082eaa5be71d1011466d456249102dd95393572d0c23d7652a65d4dec5cf | 2026-05-26 23:00:20.000 | 2026-07-28 16:46:46.383 |
| NS | eur1.akam.net | 2026-05-26 23:00:20.000 | 2026-07-28 16:46:46.383 |
| SRV | _sipfederationtls._tcp 100 1 5061 sipfed.online.lync.com | 2026-05-26 23:00:20.000 | 2026-07-28 16:46:46.383 |
| TXT | _vo9fuuxfwrimz2thuq6vane5ixcrnre | 2026-05-26 23:00:20.000 | 2026-07-28 16:46:46.383 |
| TXT | e2ma-verification=qohib | 2026-05-26 23:00:20.000 | 2026-07-28 16:46:46.383 |
| TXT | amazonses:TdaQ33Ma34JA3mbWth3J30gcPqfDoCkl/gpcDpdk1hM= | 2026-05-26 23:00:20.000 | 2026-07-28 16:46:46.383 |
| TXT | google-site-verification=vGWnWWqZZS-wOwob2dGmMK44ncOOD3s3Vy7mkUR2CQk | 2026-05-26 23:00:20.000 | 2026-07-28 16:46:46.383 |
| TXT | liveramp-site-verification=dphz_fboDvNf-L04XjGWSNpfcEjqykIGaOetpgtRFrY | 2026-05-26 23:00:20.000 | 2026-07-28 16:46:46.383 |
| TXT | figma-domain-verification=92316758906766ace0ee6271ca4f1ccf3795fce0f1925f846f4a5ee4c3dd0cfb-1732030374 | 2026-05-26 23:00:20.000 | 2026-07-28 16:46:46.383 |
| TXT | e2ma-verification=2m0fb | 2026-05-26 23:00:20.000 | 2026-07-28 16:46:46.383 |
| TXT | adobe-idp-site-verification=b58a812cb8a67904b7b89c5ba71e21242157d93cc4609f572f4d63398d2f1c95 | 2026-05-26 23:00:20.000 | 2026-07-28 16:46:46.383 |
| NS | ns1-22.akam.net | 2026-05-26 23:00:20.000 | 2026-07-28 16:46:46.383 |
| MX | 10 marriott-com.mail.protection.outlook.com | 2026-05-26 23:00:20.000 | 2026-07-28 16:46:46.383 |
| TXT | MS=ms72490600 | 2026-05-26 23:00:20.000 | 2026-07-28 16:46:46.383 |
| TXT | e2ma-verification=pzchb | 2026-05-26 23:00:20.000 | 2026-07-28 16:46:46.383 |
| TXT | e2ma-verification=g83fb | 2026-05-26 23:00:20.000 | 2026-07-28 16:46:46.383 |
| TXT | e2ma-verification=9ntgb | 2026-05-26 23:00:20.000 | 2026-07-28 16:46:46.383 |
| A | 23.52.180.103 | 2026-05-26 23:04:58.757 | 2026-07-27 22:37:10.641 |
| A | 72.246.29.19 | 2026-05-30 23:31:15.327 | 2026-07-28 08:20:36.771 |
| A | 23.220.112.106 | 2026-07-16 10:43:21.171 | 2026-07-26 09:19:36.474 |
| A | 2.20.168.117 | 2026-07-16 19:40:15.607 | 2026-07-27 21:00:01.298 |
| A | 104.99.232.124 | 2026-07-17 01:13:06.842 | 2026-07-28 14:37:33.901 |
| A | 104.85.0.86 | 2026-07-17 03:20:25.784 | 2026-07-17 03:20:25.784 |
| A | 2.22.44.82 | 2026-07-18 10:40:31.963 | 2026-07-18 10:40:31.963 |
| A | 23.34.124.115 | 2026-07-18 13:10:34.631 | 2026-07-19 02:10:19.907 |
| A | 23.209.208.141 | 2026-07-19 02:36:09.801 | 2026-07-25 05:14:18.766 |
| A | 88.221.168.83 | 2026-07-19 23:43:27.596 | 2026-07-27 13:31:15.179 |
| A | 23.210.16.126 | 2026-07-20 01:05:09.354 | 2026-07-20 01:14:08.161 |
| A | 2.19.84.76 | 2026-07-21 04:14:30.569 | 2026-07-21 04:14:30.569 |
| A | 2.19.100.130 | 2026-07-26 19:32:25.567 | 2026-07-26 19:32:25.567 |
| A | 23.58.104.123 | 2026-07-26 20:50:50.811 | 2026-07-26 21:15:12.570 |
| A | 2.22.120.164 | 2026-07-28 00:10:07.102 | 2026-07-28 00:10:07.102 |