Domain

11plus.co

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

DNS Check HTTP Check Run Full Scan .co TLD

Run a live full scan of 11plus.co

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now

Hosting IPs

—

A/AAAA targets

Subdomains

—

CT + scan + body

Record Types

—

seen in DNS

Observed Certs

—

in our scans

DNS Records

13.226.244.100, 13.226.244.106, 13.226.244.120, 13.226.244.76, 3.173.161.12, 3.173.161.14, 3.173.161.81, 3.173.161.97

AAAA

—

1 aspmx.l.google.com, 10 alt3.aspmx.l.google.com, 10 alt4.aspmx.l.google.com, 5 alt1.aspmx.l.google.com, 5 alt2.aspmx.l.google.com

ns-1128.awsdns-13.org, ns-1881.awsdns-43.co.uk, ns-268.awsdns-33.com, ns-530.awsdns-02.net

TXT

google-site-verification=3k17RHLNbk0s2M56qP3VVh3Nc2AJ6iJGM7cnBxD68D8, v=spf1 include:mail.stibee.com ~all

CNAME

—

CAA

—

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.

Subdomain	Resolves to	Last seen
11plus.co	3.173.161.81 3.173.161.97 3.173.161.12 3.173.161.14 +4	2026-07-17 22:38:42.382
app-test.11plus.co	44.230.115.150 44.252.253.233 35.167.216.18	2026-06-03 08:55:41.968
app.11plus.co	44.230.115.150 44.252.253.233 35.167.216.18	2026-06-23 11:33:35.645
api.11plus.co	54.180.53.205 52.78.1.31	2026-06-21 04:50:17.969
socket.11plus.co	54.116.149.218 43.200.108.253	2026-06-20 10:40:06.065

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

43.200.108.253:443 5e568ce93f10…

Subject: socket.11plus.co

Issuer: Amazon RSA 2048 M01

SANs: socket.11plus.co

63.35.6.23:443 fbbe305ed172…

Subject: *.bond11plus.co.uk

Issuer: Amazon RSA 2048 M01

SANs: *.bond11plus.co.uk, bond11plus.co.uk

52.16.60.54:443 fbbe305ed172…

Subject: *.bond11plus.co.uk

Issuer: Amazon RSA 2048 M01

SANs: *.bond11plus.co.uk, bond11plus.co.uk

16.16.249.93:443 866b0789b701…

Subject: student.sqillup11plus.com

Issuer: E7

SANs: student.sqillup11plus.com

206.189.246.82:443 3b927f28c163…

Subject: bofa11plus.com

Issuer: Sectigo RSA Domain Validation Secure Server CA

SANs: bofa11plus.com, bofaclassroom.co.uk, bofaks2.co.uk, bofamaths.co.uk, london-11plus.co.uk, pre-test.co.uk, www.bofa11plus.com, www.bofaclassroom.co.uk, www.bofaks2.co.uk, www.bofamaths.co.uk, www.london-11plus.co.uk, www.pre-test.co.uk

52.56.54.239:443 d9addd839891…

Subject: prod.boost11plus.com

Issuer: Amazon RSA 2048 M04

SANs: prod.boost11plus.com

79.125.4.90:443 fbbe305ed172…

Subject: *.bond11plus.co.uk

Issuer: Amazon RSA 2048 M01

SANs: *.bond11plus.co.uk, bond11plus.co.uk

IPs Citing This Domain

No citing IPs found yet

As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

No origin-IP leaks detected (yet)

Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.

CT-Log Evidence

Certificates from public Certificate Transparency logs whose subject or SAN names this domain — including historic certs we never observed live.

3d0c950e4141b55a… cloudflare · nimbus2026

Subject: 11plus.co

Issuer: Encryption Everywhere DV TLS CA - G2

SANs: 11plus.co

Valid: 2025-10-29 00:00:00 → 2026-01-26 23:59:59

ebb87f7e49d8955b… cloudflare · nimbus2026

Subject: 11plus.co

Issuer: Encryption Everywhere DV TLS CA - G2

SANs: 11plus.co

Valid: 2025-10-29 00:00:00 → 2026-01-26 23:59:59

ebb87f7e49d8955b… sectigo · elephant2026h1

Subject: 11plus.co

Issuer: Encryption Everywhere DV TLS CA - G2

SANs: 11plus.co

Valid: 2025-10-29 00:00:00 → 2026-01-26 23:59:59

08a006798eac7f75… google · argon2026h2

Subject: moim-proxy.com

Issuer: Amazon RSA 2048 M01

SANs: moim-proxy.com, contentsplus.co.kr, padobox.kr, frend.me, *.vake.io, *.11plus.co, communitylab.us, *.dhtea.kr, *.padobox.kr, newgle.co.kr, dapp11plus.xyz, *.communitylab.us, mouda.app, showbox.co.kr, vake.io, *.newgle.co.kr, dancewithbees.com, joinreppin.com, cand.xyz, dhtea.kr, *.contentsplus.co.kr, *.dapp11plus.xyz, *.moim-proxy.com, damispace.com, *.dancewithbees.com, *.ziggleziggle.com, *.cand.xyz, *.ikamper.com, *.damispace.com, *.showbox.co.kr, *.frend.me, *.mouda.app, ziggleziggle.com, *.joinreppin.com, 11plus.co, *.pience.net, pience.net