Domain
1.ls
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of 1.ls
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
Hosting IPs
8
A/AAAA targets
Subdomains
2
CT + scan + body
Record Types
3
seen in DNS
Observed Certs
7
in our scans
DNS Records
A
104.21.44.26, 172.67.194.81, 188.114.96.0, 188.114.97.0
AAAA
2606:4700:3033::6815:2c1a, 2606:4700:3033::ac43:c251, 2a06:98c1:3120::, 2a06:98c1:3121::
MX
—
NS
audrey.ns.cloudflare.com, fred.ns.cloudflare.com, mustafa.ns.cloudflare.com, vita.ns.cloudflare.com
TXT
—
CNAME
—
CAA
—
WHOIS / Registration
Registration data planned
Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.
Subdomains
Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.
| Subdomain | Resolves to | Last seen |
|---|---|---|
| 1.ls | 2026-07-20 18:03:09.936 |
Tech Stack
Tech detection pending
Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.
TLS Certificates
Subject: samk01.lsan.ca.frontiernet.net
Issuer: YE1
SANs: samk01.lsan.ca.frontiernet.net
Subject: web11.lsce.ipsl.fr
Issuer: GEANT TLS RSA 1
SANs: agrochrono-test.lsce.ipsl.fr, agrochrono.lsce.ipsl.fr, c-rock-test.lsce.ipsl.fr, c-rock.lsce.ipsl.fr, cland-test.lsce.ipsl.fr, cland.lsce.ipsl.fr, gamechange-test.lsce.ipsl.fr, gamechange.lsce.ipsl.fr, prevent-test.lsce.ipsl.fr, prevent.lsce.ipsl.fr, riomar-test.lsce.ipsl.fr, riomar.lsce.ipsl.fr, web11.lsce.ipsl.fr
Subject: mwp5-sl61.ls.apple.com
Issuer: Apple Public Server ECC CA 1 - G1
SANs: mwp5-sl61.ls.apple.com
Subject: sv01.lshort.co.jp
Issuer: YR1
SANs: sv01.lshort.co.jp
Subject: userdata.t1.lseg.com
Issuer: Sectigo Public Server Authentication CA OV R36
SANs: userdata.t1.lseg.com
Subject: printsrv1.lsce.ipsl.fr
Issuer: GEANT TLS RSA 1
SANs: printsrv1.ipht.fr, printsrv1.lsce.ipsl.fr
Subject: reportshzl-wealth.advisor.t1.lseg.com
Issuer: COMODO RSA Organization Validation Secure Server CA
SANs: *.thomsononeadvisor.com, reports-wealth.advisor.t1.lseg.com, reportshzl-wealth.advisor.t1.lseg.com
Subject: gsp51-sl61-a01.ls.apple.com
Issuer: Apple Public Server ECC CA 1 - G1
SANs: gsp51-kr.ls.apple.com, gsp51-sl61-a01.ls.apple.com, gsp51-sl81-ssl.ls.apple.com
Subject: server01.lsdradio.com
Issuer: YE2
SANs: server01.lsdradio.com
Subject: srp.t1.lseg.com
Issuer: Sectigo Public Server Authentication CA OV R36
SANs: srp.ha.refinitiv.com, srp.t1.lseg.com
Subject: lsu-dev-01.ls-int.superkinglabs.com
Issuer: YR1
SANs: lsu-dev-01.ls-int.superkinglabs.com
Subject: gsp-ms15-ssl-e1491.ls.apple.com
Issuer: Apple Public Server ECC CA 1 - G1
SANs: gsp-ms15-ssl-e1491.ls.apple.com, gsp-ssl-e1491.ls.apple.com
Subject: rz-infpmg01.lsz-vt.de
Issuer: YR1
SANs: rz-infpmg01.lsz-vt.de
Subject: CloudFlare Origin Certificate
Issuer: C=US, O=CloudFlare\, Inc., OU=CloudFlare Origin SSL Certificate Authority, L=San Francisco, ST=California
SANs: *.1.ls, 1.ls
Subject: *.eos.ecso.scls-1.lseccso.cn
Issuer: SHECA OV TLS RSA CA A1
SANs: *.eos.ecso.scls-1.lseccso.cn, eos.ecso.scls-1.lseccso.cn
Subject: gsp19-1-sl61.ls.apple.com
Issuer: Apple Public Server ECC CA 1 - G1
SANs: gsp19-1-sl61.ls.apple.com
Subject: ls-dev-01.ls-int.superkinglabs.com
Issuer: YR1
SANs: ls-dev-01.ls-int.superkinglabs.com
Subject: mwp19-sl61.ls.apple.com
Issuer: Apple Public Server ECC CA 1 - G1
SANs: mwp19-sl61.ls.apple.com
Subject: gsp57-ssl-e1344-gs01.ls.apple.com
Issuer: Apple Public Server ECC CA 1 - G1
SANs: gsp57-ssl-e1344-gs01.ls.apple.com
Subject: userdatawarehouse.t1.lseg.com
Issuer: Sectigo Public Server Authentication CA OV R36
SANs: userdatawarehouse.t1.lseg.com
Subject: symbologyac.t1.lseg.com
Issuer: Sectigo Public Server Authentication CA OV R36
SANs: symbologyac.t1.lseg.com
Subject: sea.t1.lseg.com
Issuer: COMODO RSA Organization Validation Secure Server CA
SANs: sea.t1.lseg.com
Subject: LSAUDEV1.lsau.local
Issuer: LSAUDEV1.lsau.local
SANs: LSAUDEV1.lsau.local
Subject: rz-infpmg01.lsz-vt.de
Issuer: YR1
SANs: rz-infpmg01.lsz-vt.de
Subject: gsp70-ssl-e1511.ls.apple.com
Issuer: Apple Public Server ECC CA 1 - G1
SANs: gsp70-ssl-e1511.ls.apple.com
Subject: alerttriggerws.t1.lseg.com
Issuer: Sectigo Public Server Authentication CA OV R36
SANs: alerttriggerws.t1.lseg.com
Subject: *.prod-e1.lsp.cbsicloud.com
Issuer: Amazon RSA 2048 M04
SANs: *.prod-e1.lsp.cbsicloud.com
Subject: *.prod-e1.lsp.cbsicloud.com
Issuer: Amazon RSA 2048 M04
SANs: *.prod-e1.lsp.cbsicloud.com
Subject: biosci-web1.lsu.edu
Issuer: InCommon RSA Server CA 2
SANs: biosci-web1.lsu.edu, stickle.lsu.edu, vourekas.biology.lsu.edu, www.fsheldon.biology.lsu.edu, www.hding.biology.lsu.edu, www.introbio.biology.lsu.edu, www.jcronin.biology.lsu.edu, www.kmaruska.biology.lsu.edu, www.licatalab.biology.lsu.edu, www.morgankelly.biology.lsu.edu, www.museum.lsu.edu, www.nkato.biology.lsu.edu, www.pettislab.biology.lsu.edu, www.pmoroney.biology.lsu.edu, www.vchua.biology.lsu.edu
Subject: securityservices.t1.lseg.com
Issuer: Sectigo Public Server Authentication CA OV R36
SANs: securityservices.t1.lseg.com
IPs Citing This Domain
No citing IPs found yet
As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.
Origin / IP-Leak
USP
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
No origin-IP leaks detected (yet)
Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.
Threat Intelligence
Domain threat-intel pending
Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.
History
Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.
| Type | Value | First seen | Last seen |
|---|---|---|---|
| NS | mustafa.ns.cloudflare.com | 2026-06-18 10:56:46.113 | 2026-06-23 18:17:07.818 |
| NS | audrey.ns.cloudflare.com | 2026-06-18 10:56:46.113 | 2026-06-23 18:17:07.818 |
| AAAA | 2606:4700:3033::ac43:c251 | 2026-06-23 18:17:07.818 | 2026-06-23 18:17:07.818 |
| A | 104.21.44.26 | 2026-06-23 18:17:07.818 | 2026-06-23 18:17:07.818 |
| A | 172.67.194.81 | 2026-06-23 18:17:07.818 | 2026-06-23 18:17:07.818 |
| AAAA | 2606:4700:3033::6815:2c1a | 2026-06-23 18:17:07.818 | 2026-06-23 18:17:07.818 |
| NS | vita.ns.cloudflare.com | 2026-07-20 18:03:09.936 | 2026-07-20 18:03:09.936 |
| AAAA | 2a06:98c1:3120:: | 2026-07-20 18:03:09.936 | 2026-07-20 18:03:09.936 |
| A | 188.114.96.0 | 2026-07-20 18:03:09.936 | 2026-07-20 18:03:09.936 |
| NS | fred.ns.cloudflare.com | 2026-07-20 18:03:09.936 | 2026-07-20 18:03:09.936 |
| A | 188.114.97.0 | 2026-07-20 18:03:09.936 | 2026-07-20 18:03:09.936 |
| AAAA | 2a06:98c1:3121:: | 2026-07-20 18:03:09.936 | 2026-07-20 18:03:09.936 |