Domain

rand.com

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

DNS Check HTTP Check Run Full Scan .com TLD

Run a live full scan of rand.com

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now

Hosting IPs

—

A/AAAA targets

Subdomains

—

CT + scan + body

Record Types

—

seen in DNS

Observed Certs

—

in our scans

DNS Records

141.193.213.21

AAAA

—

0 us-smtp-inbound-1.mimecast.com, 10 us-smtp-inbound-2.mimecast.com

pdns13.domaincontrol.com, pdns14.domaincontrol.com

TXT

0ed1fe018ae2de1b5ad6fc4940a9224e9af3cb83ca, adobe-idp-site-verification=6e3c1b5ae16214c9cf8cb16b491ed86089d643ae00d114aeb9bebfd78166034d, anthropic-domain-verification-2byex7=ydROAtxJUkMzYtraxRpF3Jzyh, autodesk-domain-verification=zTTfe3Zv57CilMx8YXGU, docusign-mad-eda92f43-63f9-43e8-8cac-c2e14187f8c9, docusign=2590f9a3-fdfd-4b0e-9e70-78135cf1fbae, docusign=ade02090-3804-44ab-9a6b-a2c4cd596587, google-site-verification=K-Unv6CpUk7JiRWEmuC3pbkRUzvanEvpp2iqkOxFC10

CNAME

—

CAA

—

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Subdomain enumeration pending

Every subdomain ever issued a TLS cert under this apex — extracted from Certificate Transparency logs, our own scan observations and body references.

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

69.161.196.112:443 3a91c5f7a90b…

Subject: vps1.revbayaibrand.com

Issuer: vps1.revbayaibrand.com

SANs: vps1.revbayaibrand.com

20.230.89.107:443 08548fbd4b69…

Subject: *.hillenbrand.com

Issuer: Go Daddy Secure Certificate Authority - G2

SANs: *.hillenbrand.com, hillenbrand.com

23.37.78.84:443 1641148f307a…

Subject: www.leafbrand.com

Issuer: DigiCert TLS RSA SHA256 2020 CA1

SANs: failover.budgeting.thenest.com.demandstudios.com, failover.healthyeating.sfgate.com.demandstudios.com, failover.homeguides.sfgate.com.demandstudios.com, failover.smallbusiness.chron.com.demandstudios.com, failover.traveltips.usatoday.com.demandstudios.com, failover.work.chron.com.demandstudios.com, ir.studiod.cc, leafbrand.com, www.leafbrand.com

159.69.46.2:443 d580fb8ede85…

Subject: *.bakebrand.com

Issuer: *.bakebrand.com

SANs: *.bakebrand.com, bakebrand.com, localhost, vps10, vps10.bakebrand.com

23.42.38.37:443 2ce08a72c92b…

Subject: www.mgmgrand.com

Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1

SANs: aria.mgmresorts.com, beaurivage.mgmresorts.com, bellagio.mgmresorts.com, borgata.mgmresorts.com, cabanas.mgmresorts.com, content.mgmresorts.com, cosmopolitanlasvegas.mgmresorts.com, delanolasvegas.mgmresorts.com, empirecitycasino.mgmresorts.com, excalibur.mgmresorts.com, luxor.mgmresorts.com, mandalaybay.mgmresorts.com, mgmgrand.mgmresorts.com, mgmgranddetroit.mgmresorts.com, mgmnationalharbor.mgmresorts.com, mgmnorthfieldpark.mgmresorts.com, mgmspringfield.mgmresorts.com, mirage.mgmresorts.com, newyorknewyork.mgmresorts.com, nomadlasvegas.mgmresorts.com, parkmgm.mgmresorts.com, signaturemgmgrand.mgmresorts.com, static.mgmresorts.com, thereserveatparkmgm.mgmresorts.com, vdara.mgmresorts.com, wlasvegas.mgmresorts.com, www.aria.com, www.beaurivage.com, www.bellagio.com, www.cosmopolitanlasvegas.com, www.delanolasvegas.com, www.excalibur.com, www.luxor.com, www.mandalaybay.com, www.mgmgrand.com, www.mgmgranddetroit.com, www.mgmnationalharbor.com, www.mgmresorts.com, www.mgmrewards.com, www.mgmspringfield.com, www.mirage.com, www.mlife.com, www.newyorknewyork.com, www.nomadlasvegas.com, www.parkmgm.com, www.signaturemgmgrand.com, www.theborgata.com, www.theparkvegas.com, www.vdara.com

200.170.84.120:443 05925f65dce5…

Subject: cloud-dev-ia.durand.com.br

Issuer: YE1

SANs: cloud-dev-ia.durand.com.br

23.12.102.31:443 2ce08a72c92b…

Subject: www.mgmgrand.com

Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1

132.226.28.22:443 e7f31bcef3b1…

Subject: *.ingersollrand.com

Issuer: RapidSSL TLS RSA CA G1

SANs: *.ingersollrand.com, ingersollrand.com

46.247.41.117:443 a0baf58d53ee…

Subject: esko-brand.com

Issuer: YE1

SANs: esko-brand.com, www.esko-brand.com

23.58.64.197:443 1641148f307a…

Subject: www.leafbrand.com

Issuer: DigiCert TLS RSA SHA256 2020 CA1

104.93.110.25:443 2ce08a72c92b…

Subject: www.mgmgrand.com

Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1

2.20.212.112:443 1641148f307a…

Subject: www.leafbrand.com

Issuer: DigiCert TLS RSA SHA256 2020 CA1

23.198.182.85:443 2ce08a72c92b…

Subject: www.mgmgrand.com

Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1

104.102.102.27:443 2ce08a72c92b…

Subject: www.mgmgrand.com

Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1

149.56.80.100:443 4c69480d9a75…

Subject: creativerebrand.com

Issuer: YE2

SANs: creativerebrand.com, www.creativerebrand.com

200.23.32.201:443 b1854a3d43e0…

Subject: *.logrand.com

Issuer: Sectigo Public Server Authentication CA DV R36

SANs: *.logrand.com, logrand.com

23.216.59.109:443 1641148f307a…

Subject: www.leafbrand.com

Issuer: DigiCert TLS RSA SHA256 2020 CA1

47.104.74.115:443 28b688f6d807…

Subject: *.chn-brand.com

Issuer: Encryption Everywhere DV TLS CA - G2

SANs: *.chn-brand.com, chn-brand.com

178.128.252.239:8443 a89c16936e86…

Subject: hl1.xiaomi-brand.com

Issuer: YE1

SANs: hl1.xiaomi-brand.com

128.199.101.155:443 f3f0894ec112…

Subject: admiria-v.ajax.themesbrand.com

Issuer: YR1

SANs: admiria-v.ajax.themesbrand.com

23.196.98.161:443 1641148f307a…

Subject: www.leafbrand.com

Issuer: DigiCert TLS RSA SHA256 2020 CA1

201.163.37.82:443 b1854a3d43e0…

Subject: *.logrand.com

Issuer: Sectigo Public Server Authentication CA DV R36

SANs: *.logrand.com, logrand.com

23.5.145.221:443 2ce08a72c92b…

Subject: www.mgmgrand.com

Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1

23.10.110.22:443 2ce08a72c92b…

Subject: www.mgmgrand.com

Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1

184.31.68.215:443 1641148f307a…

Subject: www.leafbrand.com

Issuer: DigiCert TLS RSA SHA256 2020 CA1

2.27.62.225:443 b7fc8c10bdf9…

Subject: accessparameterbrand.com

Issuer: Sectigo Public Server Authentication CA DV R36

SANs: accessparameterbrand.com, www.accessparameterbrand.com

120.27.17.170:443 28b688f6d807…

Subject: *.chn-brand.com

Issuer: Encryption Everywhere DV TLS CA - G2

SANs: *.chn-brand.com, chn-brand.com

167.99.129.102:443 72922fc358bd…

Subject: *.ebrand.com

Issuer: Sectigo Public Server Authentication CA DV R36

SANs: *.ebrand.com, ebrand.com

193.36.85.72:443 ae3f7d2a7354…

Subject: hamzehmarand.com

Issuer: YE2

SANs: hamzehmarand.com, www.hamzehmarand.com

65.120.232.183:443 ed86806c1ddd…

Subject: remote.roselbrand.com

Issuer: Go Daddy Secure Certificate Authority - G2

SANs: autodiscover.rrafirm.com, mail.roselbrand.com, mail.rrafirm.com, remote.roselbrand.com, www.remote.roselbrand.com

IPs Citing This Domain

No citing IPs found yet

As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

No origin-IP leaks detected (yet)

Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.

Type	Value	First seen	Last seen
NS	pdns14.domaincontrol.com	2026-05-26 06:40:34.301	2026-06-16 09:39:03.347
TXT	docusign-mad-eda92f43-63f9-43e8-8cac-c2e14187f8c9	2026-05-26 06:40:34.301	2026-06-16 09:39:03.347
TXT	docusign=2590f9a3-fdfd-4b0e-9e70-78135cf1fbae	2026-05-26 06:40:34.301	2026-06-16 09:39:03.347
MX	10 us-smtp-inbound-2.mimecast.com	2026-05-26 06:40:34.301	2026-06-16 09:39:03.347
TXT	v=spf1 include:_spf.rand_com._d.easydmarc.pro ~all	2026-05-26 06:40:34.301	2026-06-16 09:39:03.347
TXT	autodesk-domain-verification=zTTfe3Zv57CilMx8YXGU	2026-05-26 06:40:34.301	2026-06-16 09:39:03.347
TXT	adobe-idp-site-verification=6e3c1b5ae16214c9cf8cb16b491ed86089d643ae00d114aeb9bebfd78166034d	2026-05-26 06:40:34.301	2026-06-16 09:39:03.347
TXT	anthropic-domain-verification-2byex7=ydROAtxJUkMzYtraxRpF3Jzyh	2026-05-26 06:40:34.301	2026-06-16 09:39:03.347
TXT	0ed1fe018ae2de1b5ad6fc4940a9224e9af3cb83ca	2026-05-26 06:40:34.301	2026-06-16 09:39:03.347
TXT	wpe-verification=randworldwide	2026-05-26 06:40:34.301	2026-06-16 09:39:03.347
TXT	docusign=ade02090-3804-44ab-9a6b-a2c4cd596587	2026-05-26 06:40:34.301	2026-06-16 09:39:03.347
A	141.193.213.21	2026-05-26 06:40:34.301	2026-06-16 09:39:03.347
NS	pdns13.domaincontrol.com	2026-05-26 06:40:34.301	2026-06-16 09:39:03.347
TXT	google-site-verification=K-Unv6CpUk7JiRWEmuC3pbkRUzvanEvpp2iqkOxFC10	2026-05-26 06:40:34.301	2026-06-16 09:39:03.347
MX	0 us-smtp-inbound-1.mimecast.com	2026-05-26 06:40:34.301	2026-06-16 09:39:03.347
SRV	_sipfederationtls._tcp 100 1 5061 sipfed.online.lync.com	2026-05-26 06:40:34.301	2026-06-16 09:39:03.347