Check-Host.cc

Domain

2b1a.com

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

Run a live full scan of 2b1a.com

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now
Hosting IPs
A/AAAA targets
Subdomains
CT + scan + body
Record Types
seen in DNS
Observed Certs
in our scans

DNS Records

A
192.0.78.147, 192.0.78.252
AAAA
MX
1 aspmx.l.google.com, 10 alt3.aspmx.l.google.com, 10 alt4.aspmx.l.google.com, 5 alt1.aspmx.l.google.com, 5 alt2.aspmx.l.google.com
NS
ns1.wordpress.com, ns2.wordpress.com, ns3.wordpress.com
TXT
google-site-verification=STswECsRXUB1Wh1ccPv3Jbt_jlK4fQUZVdXQfiUGb1w, v=spf1 include:_spf.google.com include:_spf.wpcloud.com ~all
CNAME
CAA

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.

Subdomain Resolves to Last seen
2b1a.com 2026-06-15 11:58:46.165
www.2b1a.com
1970-01-01 00:00:00.000

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

Certificate observations pending

TLS certs naming this domain in subject or SANs will appear here as our scan-layer catches them.

IPs Citing This Domain

No citing IPs found yet

As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

No origin-IP leaks detected (yet)

Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.

CT-Log Evidence

Certificates from public Certificate Transparency logs whose subject or SAN names this domain — including historic certs we never observed live.

ed39a3790c3c502f… sectigo · elephant2026h1
Subject: tls.automattic.com
Issuer: E7
SANs: 2b1a.com, bellaloonaart.blog, booksandcookiez.com, cypresseditorial.com, dossiermastenbroek.com, falarportuguesagora.com, gracefullyempowering.com, homolog.meuletrix.com.br, linhcnguyen.com, linxglobal.company, littlebentleyeventingshop.com, liveinthetreesca.com, mashrafiantu.info, mindybakesthings.com, narcissistslayer.com, nyspta.org, oliversmithstudentportfolio.com, otteriffic.blog, overthecoalsrestaurant.com, ownersassociation.net, palmettoblueys.com, parkwoodpropertyinspections.com, partnersinanimalwelfare.org, petstravel.info, tls.automattic.com, www.audrey0zen.com, www.biltongparadys.co.za, www.booksandcookiez.com, www.civilwarbluejackets.com, www.classiccarjobs.us, www.constantmischief.com, www.cypresseditorial.com, www.dossiermastenbroek.com, www.goplanneragencia.com, www.helene-goyette.ca, www.homolog.meuletrix.com.br, www.juscarts.com, www.keto-good.com, www.kunfused.uk, www.littlebeautyboxcheshire.com, www.littleparenthesis.com, www.liveinthetreesca.com, www.liveketofab.com, www.lonnabattles.com, www.mariestaunton.com, www.mashrafiantu.info, www.oliversmithstudentportfolio.com, www.oneconversation.com, www.opopractik.com, www.parcoaltamurgiabnb.com, www.parkwoodpropertyinspections.com
Valid: 2026-02-03 10:07:07 → 2026-05-04 10:07:06
1895617cac24cbe5… sectigo · elephant2026h1
Subject: tls.automattic.com
Issuer: E7
SANs: 2b1a.com, actuencontinu.law.blog, bellaloonaart.blog, booksandcookiez.com, candicehernandezhealth.com, dossiermastenbroek.com, gracefullyempowering.com, ipsa-culpa-reprehenderit-corruptiblog.health.blog, linhcnguyen.com, linxglobal.company, littlebentleyeventingshop.com, liveinthetreesca.com, love.health.blog, mashrafiantu.info, mindybakesthings.com, oliversmithstudentportfolio.com, otteriffic.blog, palmettoblueys.com, parkwoodpropertyinspections.com, petstravel.info, pinebridgecounseling.org, plenteousredemption.com, qualityfirstbuiilders.finance.blog, quangbet.code.blog, relationship19.family.blog, tls.automattic.com, www.audrey0zen.com, www.biltongparadys.co.za, www.booksandcookiez.com, www.dossiermastenbroek.com, www.emtect.code.blog, www.goplanneragencia.com, www.helene-goyette.ca, www.juscarts.com, www.kidsfootballgames.family.blog, www.kunfused.uk, www.littleparenthesis.com, www.liveinthetreesca.com, www.liveketofab.com, www.mashrafiantu.info, www.maxclub.fitness.blog, www.notices.health.blog, www.oliversmithstudentportfolio.com, www.parkwoodpropertyinspections.com, www.petstravel.info, www.platterivers.com, www.plenteousredemption.com, www.poproszedokladke.pl, www.qualityfirstbuiilders.finance.blog, www.studioconde.com, www.wells58kastrup.health.blog
Valid: 2025-12-03 11:05:07 → 2026-03-03 11:05:06
e5cf20cd10905566… sectigo · elephant2026h1
Subject: tls.automattic.com
Issuer: E7
SANs: 2b1a.com, actuencontinu.law.blog, bellaloonaart.blog, booksandcookiez.com, candicehernandezhealth.com, dossiermastenbroek.com, gracefullyempowering.com, ipsa-culpa-reprehenderit-corruptiblog.health.blog, linhcnguyen.com, linxglobal.company, littlebentleyeventingshop.com, liveinthetreesca.com, love.health.blog, mashrafiantu.info, mindybakesthings.com, oliversmithstudentportfolio.com, otteriffic.blog, palmettoblueys.com, parkwoodpropertyinspections.com, petstravel.info, pinebridgecounseling.org, plenteousredemption.com, qualityfirstbuiilders.finance.blog, quangbet.code.blog, relationship19.family.blog, tls.automattic.com, www.audrey0zen.com, www.biltongparadys.co.za, www.booksandcookiez.com, www.dossiermastenbroek.com, www.emtect.code.blog, www.goplanneragencia.com, www.helene-goyette.ca, www.juscarts.com, www.kidsfootballgames.family.blog, www.kunfused.uk, www.littleparenthesis.com, www.liveinthetreesca.com, www.liveketofab.com, www.mashrafiantu.info, www.maxclub.fitness.blog, www.notices.health.blog, www.oliversmithstudentportfolio.com, www.parkwoodpropertyinspections.com, www.petstravel.info, www.platterivers.com, www.plenteousredemption.com, www.poproszedokladke.pl, www.qualityfirstbuiilders.finance.blog, www.studioconde.com, www.wells58kastrup.health.blog
Valid: 2025-12-03 11:05:07 → 2026-03-03 11:05:06

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.

Type Value First seen Last seen
NS ns2.wordpress.com 2026-06-15 11:58:46.165 2026-06-15 11:58:46.165
A 192.0.78.147 2026-06-15 11:58:46.165 2026-06-15 11:58:46.165
TXT v=spf1 include:_spf.google.com include:_spf.wpcloud.com ~all 2026-06-15 11:58:46.165 2026-06-15 11:58:46.165
TXT google-site-verification=STswECsRXUB1Wh1ccPv3Jbt_jlK4fQUZVdXQfiUGb1w 2026-06-15 11:58:46.165 2026-06-15 11:58:46.165
MX 5 alt2.aspmx.l.google.com 2026-06-15 11:58:46.165 2026-06-15 11:58:46.165
MX 10 alt4.aspmx.l.google.com 2026-06-15 11:58:46.165 2026-06-15 11:58:46.165
MX 1 aspmx.l.google.com 2026-06-15 11:58:46.165 2026-06-15 11:58:46.165
MX 5 alt1.aspmx.l.google.com 2026-06-15 11:58:46.165 2026-06-15 11:58:46.165
NS ns1.wordpress.com 2026-06-15 11:58:46.165 2026-06-15 11:58:46.165
MX 10 alt3.aspmx.l.google.com 2026-06-15 11:58:46.165 2026-06-15 11:58:46.165
NS ns3.wordpress.com 2026-06-15 11:58:46.165 2026-06-15 11:58:46.165
A 192.0.78.252 2026-06-15 11:58:46.165 2026-06-15 11:58:46.165