Domain
marriott.de
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of marriott.de
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
Hosting IPs
49
A/AAAA targets
Subdomains
63
CT + scan + body
Record Types
5
seen in DNS
Observed Certs
16
in our scans
DNS Records
A
104.116.96.100, 104.85.0.86, 104.99.232.124, 184.30.156.126, 2.20.168.117, 2.22.120.164, 23.192.16.124, 23.209.208.141
AAAA
—
MX
10 marriott-de.mail.protection.outlook.com
NS
eur1.akam.net, ns1-22.akam.net, ns1-7.akam.net
TXT
adobe-idp-site-verification=b58a812cb8a67904b7b89c5ba71e21242157d93cc4609f572f4d63398d2f1c95, docusign=03399c35-17f3-4ab4-b906-88e889db7d7e, facebook-domain-verification=dwhzxrdpab5ocd627ksunjhufh8xcl, ms=ms88734311, v=spf1 include:spf.marriott.com include:spf.protection.outlook.com -all
CNAME
—
CAA
—
WHOIS / Registration
Registration data planned
Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.
Subdomains
Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.
| Subdomain | Resolves to | Last seen |
|---|---|---|
| www.marriott.de | 2026-07-28 16:46:46.383 | |
| marriott.de | 2026-07-28 16:46:46.383 | |
| www.mi-ramdev001.marriott.de | 2026-07-28 15:52:41.560 | |
| www.swi-bpv.marriott.de | 2026-07-28 16:36:45.579 | |
| www.miram-uat01.marriott.de | 2026-07-26 17:56:24.590 | |
| www.uat03.marriott.de | 2026-07-28 14:46:42.850 | |
| www.uat05.marriott.de | 2026-07-28 14:46:42.850 | |
| www.ram-preprod.marriott.de | 2026-07-28 14:46:42.850 | |
| www.aries-prodreplica.marriott.de | 2026-07-28 14:46:42.850 | |
| www.uat02.marriott.de | 2026-07-28 14:46:42.850 | |
| www.uat04.marriott.de | 2026-07-28 14:46:42.850 | |
| mobileapp.marriott.de | 2026-07-20 20:21:16.503 | |
| mysupport.marriott.de | 2026-07-20 20:10:33.424 | |
| www.mysupport.marriott.de | 2026-07-20 20:33:45.127 | |
| ausbildung.marriott.de | 1970-01-01 00:00:00.000 | |
| buypoints.marriott.de | 1970-01-01 00:00:00.000 | |
| clean.marriott.de | 1970-01-01 00:00:00.000 | |
| giftpoints.marriott.de | 1970-01-01 00:00:00.000 | |
| karrieren.marriott.de | 1970-01-01 00:00:00.000 | |
| www.buypoints.marriott.de | 1970-01-01 00:00:00.000 | |
| www.clean.marriott.de | 1970-01-01 00:00:00.000 | |
| www.giftpoints.marriott.de | 1970-01-01 00:00:00.000 | |
| www.karrieren.marriott.de | 1970-01-01 00:00:00.000 | |
| www.ose-intdev2.marriott.de | 1970-01-01 00:00:00.000 |
Tech Stack
Tech detection pending
Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.
TLS Certificates
Certificate observations pending
TLS certs naming this domain in subject or SANs will appear here as our scan-layer catches them.
IPs Citing This Domain
No citing IPs found yet
As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.
Origin / IP-Leak
USP
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
| Origin IP | Origin ASN | CDN ASN | Confidence | Reasoning |
|---|---|---|---|---|
| 143.244.207.208 | AS14061 | AS16625 | 95% | cert 00399d76… served by 143.244.207.208 (AS14061) carries SAN marriott.de which currently resolves through Akamai (AS16625) at 23.209.208.141, 184.30.156.126, 23.220.112.106, 72.246.29.19 |
| 146.70.227.189 | AS9009 | AS16625 | 95% | cert 00399d76… served by 146.70.227.189 (AS9009) carries SAN marriott.de which currently resolves through Akamai (AS16625) at 184.30.156.126, 23.220.112.106, 72.246.29.19, 2.20.168.117 |
| 172.239.62.8 | AS63949 | AS16625 | 95% | cert 00399d76… served by 172.239.62.8 (AS63949) carries SAN marriott.de which currently resolves through Akamai (AS16625) at 184.30.156.126, 2.20.168.117, 104.116.96.100, 23.210.16.126 |
| 89.168.31.148 | AS31898 | AS16625 | 95% | cert 00399d76… served by 89.168.31.148 (AS31898) carries SAN marriott.de which currently resolves through Akamai (AS16625) at 184.30.156.126, 104.116.96.100, 2.20.168.117, 23.210.16.126 |
| 172.238.119.235 | AS63949 | AS16625 | 95% | cert 00399d76… served by 172.238.119.235 (AS63949) carries SAN marriott.de which currently resolves through Akamai (AS16625) at 2.20.168.117, 23.209.208.141, 184.30.156.126, 23.220.112.106 |
| 23.208.208.102 | AS6057 | AS16625 | 95% | cert 00399d76… served by 23.208.208.102 (AS6057) carries SAN marriott.de which currently resolves through Akamai (AS16625) at 184.30.156.126, 2.20.168.117, 23.220.112.106, 104.99.232.124 |
| 163.47.11.31 | AS14061 | AS16625 | 95% | cert 00399d76… served by 163.47.11.31 (AS14061) carries SAN marriott.de which currently resolves through Akamai (AS16625) at 2.20.168.117, 184.30.156.126, 23.220.112.106, 104.99.232.124 |
| 172.233.114.254 | AS63949 | AS16625 | 95% | cert 00399d76… served by 172.233.114.254 (AS63949) carries SAN marriott.de which currently resolves through Akamai (AS16625) at 184.30.156.126, 2.20.168.117, 23.220.112.106, 104.99.232.124 |
| 184.24.125.186 | AS7470 | AS16625 | 95% | cert 2b3db0a8… served by 184.24.125.186 (AS7470) carries SAN www.swi-bpv.marriott.de which currently resolves through Akamai (AS16625) at 23.222.58.144, 95.101.59.202, 23.13.167.96 |
| 23.217.31.73 | AS7713 | AS16625 | 95% | cert 2b3db0a8… served by 23.217.31.73 (AS7713) carries SAN www.swi-bpv.marriott.de which currently resolves through Akamai (AS16625) at 95.101.59.202, 23.13.167.96, 23.222.58.144 |
| 172.237.156.63 | AS63949 | AS16625 | 95% | cert 00399d76… served by 172.237.156.63 (AS63949) carries SAN marriott.de which currently resolves through Akamai (AS16625) at 184.30.156.126, 2.20.168.117, 23.220.112.106, 104.99.232.124 |
| 46.105.58.69 | AS16276 | AS16625 | 95% | cert 00399d76… served by 46.105.58.69 (AS16276) carries SAN marriott.de which currently resolves through Akamai (AS16625) at 2.20.168.117, 184.30.156.126, 23.220.112.106, 104.99.232.124 |
| 165.22.101.12 | AS14061 | AS16625 | 95% | cert 00399d76… served by 165.22.101.12 (AS14061) carries SAN marriott.de which currently resolves through Akamai (AS16625) at 184.30.156.126, 23.220.112.106, 2.20.168.117, 104.99.232.124 |
| 172.237.60.113 | AS63949 | AS16625 | 95% | cert 00399d76… served by 172.237.60.113 (AS63949) carries SAN marriott.de which currently resolves through Akamai (AS16625) at 184.30.156.126, 23.220.112.106, 2.20.168.117, 104.99.232.124 |
| 172.234.109.179 | AS63949 | AS16625 | 95% | cert 00399d76… served by 172.234.109.179 (AS63949) carries SAN marriott.de which currently resolves through Akamai (AS16625) at 184.30.156.126, 23.220.112.106, 2.20.168.117, 104.99.232.124 |
| 146.190.206.139 | AS14061 | AS16625 | 95% | cert 00399d76… served by 146.190.206.139 (AS14061) carries SAN marriott.de which currently resolves through Akamai (AS16625) at 184.30.156.126, 23.220.112.106, 2.20.168.117, 104.99.232.124 |
| 172.234.141.11 | AS63949 | AS16625 | 95% | cert 00399d76… served by 172.234.141.11 (AS63949) carries SAN marriott.de which currently resolves through Akamai (AS16625) at 184.30.156.126, 23.220.112.106, 2.20.168.117, 104.99.232.124 |
| 174.138.96.22 | AS14061 | AS16625 | 95% | cert 00399d76… served by 174.138.96.22 (AS14061) carries SAN marriott.de which currently resolves through Akamai (AS16625) at 184.30.156.126, 2.20.168.117, 23.220.112.106, 104.99.232.124 |
| 172.232.143.37 | AS63949 | AS16625 | 95% | cert 00399d76… served by 172.232.143.37 (AS63949) carries SAN marriott.de which currently resolves through Akamai (AS16625) at 184.30.156.126, 2.20.168.117, 23.220.112.106, 104.99.232.124 |
| 178.33.250.238 | AS16276 | AS16625 | 95% | cert 00399d76… served by 178.33.250.238 (AS16276) carries SAN marriott.de which currently resolves through Akamai (AS16625) at 184.30.156.126, 2.20.168.117, 23.220.112.106, 104.99.232.124 |
| 138.197.232.100 | AS14061 | AS16625 | 95% | cert 00399d76… served by 138.197.232.100 (AS14061) carries SAN marriott.de which currently resolves through Akamai (AS16625) at 184.30.156.126, 2.20.168.117, 23.220.112.106, 104.99.232.124 |
| 172.232.128.202 | AS63949 | AS16625 | 95% | cert 00399d76… served by 172.232.128.202 (AS63949) carries SAN marriott.de which currently resolves through Akamai (AS16625) at 184.30.156.126, 2.20.168.117, 23.220.112.106, 104.99.232.124 |
| 132.145.74.210 | AS31898 | AS16625 | 95% | cert 00399d76… served by 132.145.74.210 (AS31898) carries SAN marriott.de which currently resolves through Akamai (AS16625) at 184.30.156.126, 2.20.168.117, 23.220.112.106, 104.99.232.124 |
| 146.190.247.90 | AS14061 | AS16625 | 95% | cert 00399d76… served by 146.190.247.90 (AS14061) carries SAN marriott.de which currently resolves through Akamai (AS16625) at 184.30.156.126, 23.220.112.106, 104.99.232.124, 2.20.168.117 |
| 89.45.7.218 | AS9009 | AS16625 | 95% | cert 00399d76… served by 89.45.7.218 (AS9009) carries SAN marriott.de which currently resolves through Akamai (AS16625) at 23.220.112.106, 184.30.156.126, 104.99.232.124, 2.20.168.117 |
CT-Log Evidence
Certificates from public Certificate Transparency logs whose subject or SAN names this domain — including historic certs we never observed live.
ffa925c3fb4034d0…
google · argon2026h2
Subject: www.marriott.com
Issuer: Sectigo Public Server Authentication CA OV R36
SANs: www.marriott.com, CI-PropertyConversionPortal.marriott.com, arabic.marriott.com, arabic.reservations.bulgarihotels.com, auth.marriott.com, cache.marriott.com, cache.marriott.com.cn, channel-portal.homes-and-villas.marriott.com, clean.marriott.com, cwp.marriott.com, empower-enrollment.marriott.com.cn, espanol.marriott.com, gaylordnationaltickets.com, gaylordpalmstickets.com, gaylordtexantickets.com, getgaylordtickets.com, homes-and-villas.marriott.com, journey.ritzcarlton.com, learningcontent.marriott.com, marriott.co.jp, marriott.co.kr, marriott.co.uk, marriott.com, marriott.com.au, marriott.com.br, marriott.com.cn, marriott.com.ru, marriott.com.tr, marriott.de, marriott.fr, marriott.it, marriott.pt, news.marriott.com, oci-prod-integration-mipaasiaasservices-dlz.marriott.com, oci-prod-integration-mipaasiaasservices-hireright.marriott.com, oci-prod-integration-mipaasiaasservices-iam.marriott.com, prod-mipaasiaasservices.marriott.com, qrcode.marriott.com, reservations.bulgarihotel.com.cn, reservations.bulgarihotels.co.kr, reservations.bulgarihotels.com, reservations.bulgarihotels.com.ru, reservations.bulgarihotels.fr, reservations.bulgarihotels.it, reservations.bulgarihotels.jp, reservations.gaylordnational.gaylordhotels.com, reservations.gaylordpalms.gaylordhotels.com, reservations.ritzcarlton.cn, reservations.ritzcarlton.com, reservations.ritzcarlton.jp, reservations.texas.gaylordhotels.com, rewards.ritzcarlton.cn, rewards.ritzcarlton.com, rewards.ritzcarlton.jp, ritzcarlton.com, webhook.hvmi.marriott.com, wechat.api.marriott.com.cn, whattoexpect.marriott.com, www.arabic.marriott.com, www.auth.marriott.com, www.deltahotels.com, www.engage.marriott.com, www.engagecris.marriott.com, www.engageproperty.marriott.com, www.espanol.marriott.com, www.gaylordnationaltickets.com, www.gaylordpalmstickets.com, www.gaylordtexantickets.com, www.getgaylordtickets.com, www.grouppartners.marriott.com, www.homes-and-villas.marriott.com, www.journey.ritzcarlton.com, www.marriott.bh, www.marriott.co.jp, www.marriott.co.kr, www.marriott.co.uk, www.marriott.com.au, www.marriott.com.br, www.marriott.com.cn, www.marriott.com.qa, www.marriott.com.ru, www.marriott.com.tr, www.marriott.com.tw, www.marriott.de, www.marriott.fr, www.marriott.it, www.marriott.om, www.marriott.pl, www.marriott.pt, www.marriott.sa, www.ritzcarlton.com, www.travelagents.marriott.com
Valid: 2025-10-01 00:00:00 → 2026-10-01 23:59:59
f4e00734bf0fbb61…
google · xenon2026h2
Subject: www.marriott.com
Issuer: Sectigo Public Server Authentication CA OV R36
SANs: www.marriott.com, CI-PropertyConversionPortal.marriott.com, arabic.marriott.com, arabic.reservations.bulgarihotels.com, auth.marriott.com, cache.marriott.com, cache.marriott.com.cn, channel-portal.homes-and-villas.marriott.com, clean.marriott.com, cwp.marriott.com, empower-enrollment.marriott.com.cn, espanol.marriott.com, gaylordnationaltickets.com, gaylordpalmstickets.com, gaylordtexantickets.com, getgaylordtickets.com, homes-and-villas.marriott.com, journey.ritzcarlton.com, learningcontent.marriott.com, marriott.co.jp, marriott.co.kr, marriott.co.uk, marriott.com, marriott.com.au, marriott.com.br, marriott.com.cn, marriott.com.ru, marriott.com.tr, marriott.de, marriott.fr, marriott.it, marriott.pt, news.marriott.com, oci-prod-integration-mipaasiaasservices-dlz.marriott.com, oci-prod-integration-mipaasiaasservices-hireright.marriott.com, oci-prod-integration-mipaasiaasservices-iam.marriott.com, prod-mipaasiaasservices.marriott.com, qrcode.marriott.com, reservations.bulgarihotel.com.cn, reservations.bulgarihotels.co.kr, reservations.bulgarihotels.com, reservations.bulgarihotels.com.ru, reservations.bulgarihotels.fr, reservations.bulgarihotels.it, reservations.bulgarihotels.jp, reservations.gaylordnational.gaylordhotels.com, reservations.gaylordpalms.gaylordhotels.com, reservations.ritzcarlton.cn, reservations.ritzcarlton.com, reservations.ritzcarlton.jp, reservations.texas.gaylordhotels.com, rewards.ritzcarlton.cn, rewards.ritzcarlton.com, rewards.ritzcarlton.jp, ritzcarlton.com, webhook.hvmi.marriott.com, wechat.api.marriott.com.cn, whattoexpect.marriott.com, www.arabic.marriott.com, www.auth.marriott.com, www.deltahotels.com, www.engage.marriott.com, www.engagecris.marriott.com, www.engageproperty.marriott.com, www.espanol.marriott.com, www.gaylordnationaltickets.com, www.gaylordpalmstickets.com, www.gaylordtexantickets.com, www.getgaylordtickets.com, www.grouppartners.marriott.com, www.homes-and-villas.marriott.com, www.journey.ritzcarlton.com, www.marriott.bh, www.marriott.co.jp, www.marriott.co.kr, www.marriott.co.uk, www.marriott.com.au, www.marriott.com.br, www.marriott.com.cn, www.marriott.com.qa, www.marriott.com.ru, www.marriott.com.tr, www.marriott.com.tw, www.marriott.de, www.marriott.fr, www.marriott.it, www.marriott.om, www.marriott.pl, www.marriott.pt, www.marriott.sa, www.ritzcarlton.com, www.travelagents.marriott.com
Valid: 2025-10-01 00:00:00 → 2026-10-01 23:59:59
ffa925c3fb4034d0…
cloudflare · nimbus2026
Subject: www.marriott.com
Issuer: Sectigo Public Server Authentication CA OV R36
SANs: www.marriott.com, CI-PropertyConversionPortal.marriott.com, arabic.marriott.com, arabic.reservations.bulgarihotels.com, auth.marriott.com, cache.marriott.com, cache.marriott.com.cn, channel-portal.homes-and-villas.marriott.com, clean.marriott.com, cwp.marriott.com, empower-enrollment.marriott.com.cn, espanol.marriott.com, gaylordnationaltickets.com, gaylordpalmstickets.com, gaylordtexantickets.com, getgaylordtickets.com, homes-and-villas.marriott.com, journey.ritzcarlton.com, learningcontent.marriott.com, marriott.co.jp, marriott.co.kr, marriott.co.uk, marriott.com, marriott.com.au, marriott.com.br, marriott.com.cn, marriott.com.ru, marriott.com.tr, marriott.de, marriott.fr, marriott.it, marriott.pt, news.marriott.com, oci-prod-integration-mipaasiaasservices-dlz.marriott.com, oci-prod-integration-mipaasiaasservices-hireright.marriott.com, oci-prod-integration-mipaasiaasservices-iam.marriott.com, prod-mipaasiaasservices.marriott.com, qrcode.marriott.com, reservations.bulgarihotel.com.cn, reservations.bulgarihotels.co.kr, reservations.bulgarihotels.com, reservations.bulgarihotels.com.ru, reservations.bulgarihotels.fr, reservations.bulgarihotels.it, reservations.bulgarihotels.jp, reservations.gaylordnational.gaylordhotels.com, reservations.gaylordpalms.gaylordhotels.com, reservations.ritzcarlton.cn, reservations.ritzcarlton.com, reservations.ritzcarlton.jp, reservations.texas.gaylordhotels.com, rewards.ritzcarlton.cn, rewards.ritzcarlton.com, rewards.ritzcarlton.jp, ritzcarlton.com, webhook.hvmi.marriott.com, wechat.api.marriott.com.cn, whattoexpect.marriott.com, www.arabic.marriott.com, www.auth.marriott.com, www.deltahotels.com, www.engage.marriott.com, www.engagecris.marriott.com, www.engageproperty.marriott.com, www.espanol.marriott.com, www.gaylordnationaltickets.com, www.gaylordpalmstickets.com, www.gaylordtexantickets.com, www.getgaylordtickets.com, www.grouppartners.marriott.com, www.homes-and-villas.marriott.com, www.journey.ritzcarlton.com, www.marriott.bh, www.marriott.co.jp, www.marriott.co.kr, www.marriott.co.uk, www.marriott.com.au, www.marriott.com.br, www.marriott.com.cn, www.marriott.com.qa, www.marriott.com.ru, www.marriott.com.tr, www.marriott.com.tw, www.marriott.de, www.marriott.fr, www.marriott.it, www.marriott.om, www.marriott.pl, www.marriott.pt, www.marriott.sa, www.ritzcarlton.com, www.travelagents.marriott.com
Valid: 2025-10-01 00:00:00 → 2026-10-01 23:59:59
Threat Intelligence
Domain threat-intel pending
Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.
History
Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.
| Type | Value | First seen | Last seen |
|---|---|---|---|
| NS | ns1-7.akam.net | 2026-06-23 10:06:14.429 | 2026-07-28 16:46:46.383 |
| MX | 10 marriott-de.mail.protection.outlook.com | 2026-06-23 10:06:14.429 | 2026-07-28 16:46:46.383 |
| TXT | ms=ms88734311 | 2026-06-23 10:06:14.429 | 2026-07-28 16:46:46.383 |
| TXT | v=spf1 include:spf.marriott.com include:spf.protection.outlook.com -all | 2026-06-23 10:06:14.429 | 2026-07-28 16:46:46.383 |
| TXT | docusign=03399c35-17f3-4ab4-b906-88e889db7d7e | 2026-06-23 10:06:14.429 | 2026-07-28 16:46:46.383 |
| TXT | facebook-domain-verification=dwhzxrdpab5ocd627ksunjhufh8xcl | 2026-06-23 10:06:14.429 | 2026-07-28 16:46:46.383 |
| NS | eur1.akam.net | 2026-06-23 10:06:14.429 | 2026-07-28 16:46:46.383 |
| A | 23.220.112.106 | 2026-06-23 10:06:14.429 | 2026-07-28 08:20:36.771 |
| TXT | adobe-idp-site-verification=b58a812cb8a67904b7b89c5ba71e21242157d93cc4609f572f4d63398d2f1c95 | 2026-06-23 10:06:14.429 | 2026-07-28 16:46:46.383 |
| NS | ns1-22.akam.net | 2026-06-23 10:06:14.429 | 2026-07-28 16:46:46.383 |
| SRV | _sipfederationtls._tcp 100 1 5061 sipfed.online.lync.com | 2026-06-23 10:06:14.429 | 2026-07-28 16:46:46.383 |
| A | 184.30.156.126 | 2026-07-16 10:43:21.171 | 2026-07-28 16:46:46.383 |
| A | 2.20.168.117 | 2026-07-16 19:40:15.607 | 2026-07-27 21:00:01.298 |
| A | 104.99.232.124 | 2026-07-17 01:13:06.842 | 2026-07-17 01:13:06.842 |
| A | 72.246.29.19 | 2026-07-19 02:10:19.907 | 2026-07-22 17:59:06.998 |
| A | 2.22.120.164 | 2026-07-19 04:47:04.815 | 2026-07-19 04:47:04.815 |
| A | 23.192.16.124 | 2026-07-20 01:14:08.161 | 2026-07-20 01:14:08.161 |
| A | 23.209.208.141 | 2026-07-20 21:07:40.261 | 2026-07-26 09:19:36.474 |
| A | 23.210.16.126 | 2026-07-21 04:14:30.569 | 2026-07-21 04:24:51.682 |
| A | 104.116.96.100 | 2026-07-21 11:51:30.555 | 2026-07-21 11:51:30.555 |
| A | 104.85.0.86 | 2026-07-21 21:22:23.056 | 2026-07-26 01:09:31.754 |
| A | 88.221.168.83 | 2026-07-23 09:30:26.803 | 2026-07-23 09:30:26.803 |
| A | 23.52.180.103 | 2026-07-26 09:54:32.135 | 2026-07-26 09:54:32.135 |