Check-Host.cc
Domain

2raf.org

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

Run a live full scan of 2raf.org

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now
Hosting IPs
1
A/AAAA targets
Subdomains
2
CT + scan + body
Record Types
3
seen in DNS
Observed Certs
1
in our scans

DNS Records

A
199.36.158.100
AAAA
MX
NS
ns41.domaincontrol.com, ns42.domaincontrol.com
TXT
google-site-verification=0ro3mmZb02RHjKSSkFtN8MpSA0sXDP79v5i8PsloBvQ
CNAME
CAA

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.

Subdomain Resolves to Last seen
2raf.org 2026-08-21 04:29:18.286

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

Certificate observations pending

TLS certs naming this domain in subject or SANs will appear here as our scan-layer catches them.

IPs Citing This Domain

No citing IPs found yet

As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

No origin-IP leaks detected (yet)

Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.

CT-Log Evidence

Certificates from public Certificate Transparency logs whose subject or SAN names this domain — including historic certs we never observed live.

eb82cee13487fe61… cloudflare · nimbus2026
Subject: app.zhylar.com
Issuer: WR3
SANs: app.zhylar.com, www.zwirc.com, dl.onshop.lk, www.countrymile.in, suicidehotline.org, www.vettedworkers.com, ptiqa1.pti.health, my32.pro, www.shahinkhan.pro.bd, senfieldllc.org, admin.usdevsforhire.com, sparkstmc.org, asociaciondelaboralistasdegrancanaria.es, www.trament.in, link.restranslate.com, www.g2m.dev, redirect.acatar.pl, www.megatown.one, www.meinprojekt-digital.ch, explorr.app, wakadori-karuizawa.jp, bonusbrothers.hu, 2raf.org, viettien55.id.vn, sms.sjc.co.za, www.clintgoodman.com, www.sub3software.co.uk, www.synaptiq.co, nutrineo.app, www.jjsk.wedding, amfpromotora.xptoconsig.com.br, cromptonapps.com.au, app.trivion.online, www.nutrioid.app, engineering.polymerize.io, www.buikema.work, trinitybrands.co.za, liff.nobunaga.life, paddock.simcompany.hu, staging.ecflow.app, www.fitchecklabs.app, generalists.co, dev-admin.choy-san.jp, chamaodelivery.com, cleanwaterai.com, dev.app.cupcake.29k.org, www.instanteats.co.za, tagpad.matsuchiyo.com, www.nominallogic.com, referral.unibot.app, yjkim.kr, jeaphianne.com, www.blinkoffr.com, publicplus.app, gecapa.com.br, 11521871.peerly.app, www.auroracomedy.com, guitarmartin.com, binhaidar-energy.com, www.tchicktchick.be, myromanager.com, link.inishare.com, komputant.com, www.digitaldesignproductions.com, khaita.com, mysimhub.com, www.zacharyinserra.com, www.10tacle.app, soiree-communautes.breizhcamp.org, test.valiscode.hu, nickthedeveloper.com, egc.whyq.com.au, longson.logivan.com, admin.referaku.com, www.crosslog.life, www.covid19enmexico.com, cross-stitch-art.com, benty.ewetechnology.com, mobiona.com, thegoodprojxct.com, www.2150design.com, liloop.in, www.caritansiivous.fi, www.jyvaskylanlentoasema.fi, www.mosaics.fm, qt-develop.judicialappointments.digital, ethanwei.me, console.corder.alexkovrigin.me, icsvns.org.in, datamat.me, sieidi.com, roveapp.net, golfsolitaire.games.tetherstudios.com, test.ardaacar.net, ridersmap.app, tamlinh.io.vn, www.iosdev.com.au, www.online-pdf-tools.com, app.staging.ukufu.com, a.weva.my.id
Valid: 2026-07-28 03:04:28 → 2026-10-26 04:02:44

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.

Type Value First seen Last seen
NS ns41.domaincontrol.com 2026-06-15 04:34:44.040 2026-08-21 04:29:18.286
A 199.36.158.100 2026-06-15 04:34:44.040 2026-08-21 04:29:18.286
NS ns42.domaincontrol.com 2026-06-15 04:34:44.040 2026-08-21 04:29:18.286
TXT google-site-verification=0ro3mmZb02RHjKSSkFtN8MpSA0sXDP79v5i8PsloBvQ 2026-06-15 04:34:44.040 2026-08-21 04:29:18.286