Check-Host.cc
Domain

2018hh.com

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

Run a live full scan of 2018hh.com

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now
Hosting IPs
2
A/AAAA targets
Subdomains
3
CT + scan + body
Record Types
2
seen in DNS
Observed Certs
in our scans

DNS Records

A
154.85.132.74, 198.44.160.118
AAAA
MX
NS
ns1.domainnamedns.com, ns2.domainnamedns.com, ns3.domainnamedns.com, ns4.domainnamedns.com
TXT
CNAME
CAA

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.

Subdomain Resolves to Last seen
2018hh.com 2026-08-21 03:50:09.172
m.2018hh.com 2026-08-21 03:50:09.172
www.2018hh.com 2026-08-21 03:50:09.172

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

Subject: 6909hh.com
Issuer: R12
SANs: 1095hh.com, 2015hh.com, 2018hh.com, 31399hh.com, 5353hh.com, 66318hh.com, 6909hh.com, 9996hh.com, esb8060.com, esb8090.com, esb8802.com, esb9178.com, esb9509.com, esb9598.com, esb9691.com, hh5303.com, hjdc978.com, m.1095hh.com, m.2015hh.com, m.2018hh.com, m.31399hh.com, m.5353hh.com, m.66318hh.com, m.6909hh.com, m.9996hh.com, m.esb8060.com, m.esb8090.com, m.esb8802.com, m.esb9178.com, m.esb9509.com, m.esb9598.com, m.esb9691.com, m.hh5303.com, m.hjdc978.com, m.xy23333.com, m.xy240.com, m.xy3773.com, m.xy384.com, m.xy412.com, m.xy96.vip, m.xy96888.com, m.xyc2326.com, m.xyc2329.com, m.xycp173.com, m.xycp195.com, m.xycp265.com, m.xycp289.com, m.xycp392.com, m.xycp736.com, m.xyyl77.com, www.1095hh.com, www.2015hh.com, www.2018hh.com, www.31399hh.com, www.5353hh.com, www.66318hh.com, www.6909hh.com, www.9996hh.com, www.esb8060.com, www.esb8090.com, www.esb8802.com, www.esb9178.com, www.esb9509.com, www.esb9598.com, www.esb9691.com, www.hh5303.com, www.hjdc978.com, www.xy23333.com, www.xy240.com, www.xy3773.com, www.xy384.com, www.xy412.com, www.xy96.vip, www.xy96888.com, www.xyc2326.com, www.xyc2329.com, www.xycp173.com, www.xycp195.com, www.xycp265.com, www.xycp289.com, www.xycp392.com, www.xycp736.com, www.xyyl77.com, xy23333.com, xy240.com, xy3773.com, xy384.com, xy412.com, xy96.vip, xy96888.com, xyc2326.com, xyc2329.com, xycp173.com, xycp195.com, xycp265.com, xycp289.com, xycp392.com, xycp736.com, xyyl77.com

IPs Citing This Domain

No citing IPs found yet

As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

No origin-IP leaks detected (yet)

Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.

Type Value First seen Last seen
NS ns2.domainnamedns.com 2026-05-31 11:55:40.742 2026-08-21 03:50:09.172
A 198.44.160.118 2026-05-31 11:55:40.742 2026-05-31 11:59:40.851
NS ns4.domainnamedns.com 2026-05-31 11:55:40.742 2026-08-21 03:50:09.172
NS ns1.domainnamedns.com 2026-05-31 11:55:40.742 2026-08-21 03:50:09.172
NS ns3.domainnamedns.com 2026-05-31 11:55:40.742 2026-08-21 03:50:09.172
A 154.85.132.74 2026-08-21 03:50:09.172 2026-08-21 03:50:09.172