Check-Host.cc
Domain

2duit.com

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

Run a live full scan of 2duit.com

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now
Hosting IPs
1
A/AAAA targets
Subdomains
2
CT + scan + body
Record Types
4
seen in DNS
Observed Certs
2
in our scans

DNS Records

A
103.224.212.141
AAAA
MX
10 park-mx.above.com
NS
ns1.abovedomains.com, ns2.abovedomains.com
TXT
v=spf1 ip6:fdcf:abda:4154::/48 -all
CNAME
CAA

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.

Subdomain Resolves to Last seen
2duit.com 2026-08-23 15:29:27.200

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

Certificate observations pending

TLS certs naming this domain in subject or SANs will appear here as our scan-layer catches them.

IPs Citing This Domain

No citing IPs found yet

As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

No origin-IP leaks detected (yet)

Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.

CT-Log Evidence

Certificates from public Certificate Transparency logs whose subject or SAN names this domain — including historic certs we never observed live.

801c806c09280499… google · xenon2026h2
Subject: dub.lol
Issuer: YR1
SANs: *.2duit.com, *.6618.in, *.6hwaik.shop, *.94cw.cc, *.agenticai.food, *.anatoliabots.pro, *.appleid-iphone.com, *.argentumconsulting.info, *.ayv4.com, *.babyfacemerchandise.shop, *.baozunyun.com, *.bistrofund.com, *.blackmtnfinancial.com, *.botlabtr.com, *.burgergirl.net, *.celebratedweddingdays.beauty, *.chinasuantai.com, *.dividapositivo.cfd, *.diyprojectspioneer.vip, *.dub.lol, *.gruponaga.it.com, *.gzswxxw.com, *.halo69g.net, *.halo69g.one, *.hengdianjj.com, *.ikaek.app, *.mapquest.us.com, *.melody.cn.com, *.raidstation.wtf, *.see-sbi.com, *.selquora.com, *.smart-bulbs-03.click, *.snowx.io, *.spencersvibe.com, *.swissfinanzconsultag.com, *.theatres.uk.com, *.tougenanki.shop, *.truetieweddings.beauty, *.turn.uk.com, *.twlefu.cfd, *.txca6868.com, *.vavada202.fun, *.vertexpuzzle311.top, *.weirentch.com, *.zoom.de.com, 2duit.com, 6618.in, 6hwaik.shop, 94cw.cc, agenticai.food, anatoliabots.pro, appleid-iphone.com, argentumconsulting.info, ayv4.com, babyfacemerchandise.shop, baozunyun.com, bistrofund.com, blackmtnfinancial.com, botlabtr.com, burgergirl.net, celebratedweddingdays.beauty, chinasuantai.com, dividapositivo.cfd, diyprojectspioneer.vip, dub.lol, gruponaga.it.com, gzswxxw.com, halo69g.net, halo69g.one, hengdianjj.com, ikaek.app, mapquest.us.com, melody.cn.com, raidstation.wtf, see-sbi.com, selquora.com, smart-bulbs-03.click, snowx.io, spencersvibe.com, swissfinanzconsultag.com, theatres.uk.com, tougenanki.shop, truetieweddings.beauty, turn.uk.com, twlefu.cfd, txca6868.com, vavada202.fun, vertexpuzzle311.top, weirentch.com, zoom.de.com
Valid: 2026-08-15 01:47:21 → 2026-11-13 01:47:20
f7ecc22d6bab9e0c… google · argon2026h2
Subject: dub.lol
Issuer: YR1
SANs: *.2duit.com, *.6618.in, *.6hwaik.shop, *.94cw.cc, *.agenticai.food, *.anatoliabots.pro, *.appleid-iphone.com, *.argentumconsulting.info, *.ayv4.com, *.babyfacemerchandise.shop, *.baozunyun.com, *.bistrofund.com, *.blackmtnfinancial.com, *.botlabtr.com, *.burgergirl.net, *.celebratedweddingdays.beauty, *.chinasuantai.com, *.dividapositivo.cfd, *.diyprojectspioneer.vip, *.dub.lol, *.gruponaga.it.com, *.gzswxxw.com, *.halo69g.net, *.halo69g.one, *.hengdianjj.com, *.ikaek.app, *.mapquest.us.com, *.melody.cn.com, *.raidstation.wtf, *.see-sbi.com, *.selquora.com, *.smart-bulbs-03.click, *.snowx.io, *.spencersvibe.com, *.swissfinanzconsultag.com, *.theatres.uk.com, *.tougenanki.shop, *.truetieweddings.beauty, *.turn.uk.com, *.twlefu.cfd, *.txca6868.com, *.vavada202.fun, *.vertexpuzzle311.top, *.weirentch.com, *.zoom.de.com, 2duit.com, 6618.in, 6hwaik.shop, 94cw.cc, agenticai.food, anatoliabots.pro, appleid-iphone.com, argentumconsulting.info, ayv4.com, babyfacemerchandise.shop, baozunyun.com, bistrofund.com, blackmtnfinancial.com, botlabtr.com, burgergirl.net, celebratedweddingdays.beauty, chinasuantai.com, dividapositivo.cfd, diyprojectspioneer.vip, dub.lol, gruponaga.it.com, gzswxxw.com, halo69g.net, halo69g.one, hengdianjj.com, ikaek.app, mapquest.us.com, melody.cn.com, raidstation.wtf, see-sbi.com, selquora.com, smart-bulbs-03.click, snowx.io, spencersvibe.com, swissfinanzconsultag.com, theatres.uk.com, tougenanki.shop, truetieweddings.beauty, turn.uk.com, twlefu.cfd, txca6868.com, vavada202.fun, vertexpuzzle311.top, weirentch.com, zoom.de.com
Valid: 2026-08-15 01:47:21 → 2026-11-13 01:47:20

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.

Type Value First seen Last seen
A 103.224.212.141 2026-08-15 08:25:45.310 2026-08-23 15:29:27.200
NS ns1.abovedomains.com 2026-08-15 08:25:45.310 2026-08-23 15:29:27.200
TXT v=spf1 ip6:fdcf:abda:4154::/48 -all 2026-08-15 08:25:45.310 2026-08-23 15:29:27.200
NS ns2.abovedomains.com 2026-08-15 08:25:45.310 2026-08-23 15:29:27.200
MX 10 park-mx.above.com 2026-08-15 08:25:45.310 2026-08-23 15:29:27.200