1337xx.to
Domain report: WHOIS, DNS, hosting, SSL and safety. Checked .
HTTP 403Family DNS blockedSSL: 72 days left5 years oldTranco #69947
45
1337xx.to was registered on 28 Mar 2021 via Tonic and the registry expiry is 28 Mar 2028. WHOIS data came from RDAP at https://rdap.tonicregistry.to/rdap/domain/1337xx.to.
1337xx.to publishes 2 nameservers. DNSSEC is not signed.
1337xx.to has 2 IPv4 addresses (188.114.96.3, 188.114.97.3) and 2 IPv6 addresses (2a06:98c1:3120::3, 2a06:98c1:3121::3). The geolocation database places 188.114.96.3 in Toronto, Canada.
The TLS certificate from WE1 is valid and has 72 days left (TLS 1.3).
Tech detection named Cloudflare and HTTP/3. The fingerprints ran on the homepage that was already downloaded.
Domain · RDAP/WHOIS
1337xx.to was registered on 28 Mar 2021 via Tonic. The registry returned 1 status value and 2 nameservers from https://rdap.tonicregistry.to/rdap/domain/1337xx.to.
| Registered | since 28 Mar 2021 |
|---|---|
| Created | 28 March 2021 |
| Updated | 18 December 2023 |
| Expires | 28 March 2028 |
| Registrar | Tonic |
| Status | active |
| Nameservers | clyde.ns.cloudflare.com, poppy.ns.cloudflare.com |
| DNSSEC | no |
| Source | https://rdap.tonicregistry.to/rdap/domain/1337xx.to |
Nameserver clyde.ns.cloudflare.com is published for 1337xx.to in the registration record from https://rdap.tonicregistry.to/rdap/domain/1337xx.to.
Nameserver poppy.ns.cloudflare.com is published for 1337xx.to in the registration record from https://rdap.tonicregistry.to/rdap/domain/1337xx.to.
DNS
1337xx.to has 4 address records, 0 mail exchangers and 2 nameservers, measured at 1.1.1.1:53.
| A | 188.114.96.3, 188.114.97.3 |
|---|---|
| AAAA | 2a06:98c1:3120::3, 2a06:98c1:3121::3 |
| NS | clyde.ns.cloudflare.com, poppy.ns.cloudflare.com |
| MX | — |
| SPF | absent |
| DMARC | absent |
| CAA | — |
| Wildcard | off |
| DNSSEC | not signed |
| Resolver | 1.1.1.1:53 |
IPv4 address 188.114.96.3 answers for 1337xx.to at resolver 1.1.1.1:53.
IPv4 address 188.114.97.3 answers for 1337xx.to at resolver 1.1.1.1:53.
IPv6 address 2a06:98c1:3120::3 answers for 1337xx.to at resolver 1.1.1.1:53.
IPv6 address 2a06:98c1:3121::3 answers for 1337xx.to at resolver 1.1.1.1:53.
Hosting and geo
1337xx.to is placed in Toronto, Canada by the local geolocation database (db-ip).
| Address | 188.114.96.3 |
|---|---|
| Country | Canada |
| City | Toronto |
| Source | db-ip |
SSL/TLS
The certificate for 1337xx.to is valid, with 72 days left and 2 subject alternative names. Source: tls:443.
| Issuer | WE1 |
|---|---|
| Subject | 1337xx.to |
| Valid from | 14 October 2026 |
| Valid until | 12 January 2027 |
| Days left | 72 |
| SAN count | 2 |
| Protocol | TLS 1.3 |
| Source | tls:443 |
Subject alternative names: *.1337xx.to, 1337xx.to.
Tech stack
Tech detection checked the fetched homepage and named 2 products. Source: wappalyzergo.
- Cloudflare · CDN
- HTTP/3 · Miscellaneous
Cloudflare is filed under CDN.
HTTP/3 is filed under Miscellaneous.
On-page checks
The homepage returned HTTP 403 in 33 ms. The target title is 16 characters and the page has 0 H1 headings.
| Status | 403 |
|---|---|
| TTFB | 33 ms |
| Title length | 16 yes |
| Quoted title | "Just a moment..." |
| Meta description | none no |
| H1 count | 0 |
| HSTS | no no |
| CSP | yes |
| X-Frame-Options | SAMEORIGIN |
| Robots meta | noindex,nofollow |
| Canonical | — |
| Language | en-US |
| Links | 0 |
| Images | 0 |
| Favicon | no |
The quoted title and meta description are measurements of the other site. They are not this page's title or description.
Security
Family DNS for 1337xx.to is blocked, and URLhaus is clear. Source: family DNS and local lists.
| Family DNS | blocked |
|---|---|
| URLhaus | clear |
| UT1 | — |
| Web Risk | not run |
| Source | family DNS and local lists |
| HSTS | no |
| CSP | yes |
Cloudflare family DNS returned a block for 1337xx.to. That resolver covers adult and malware names.
Google Web Risk did not run. No API key is configured, and this report does not invent a clean result from that service.
Score breakdown
Availability 10 of 25. DNS answer plus a homepage status in the 2xx or 3xx range.
TLS 20 of 20. A valid certificate, with extra points when it has at least 14 days left.
DNS hygiene 0 of 20. SPF, DMARC, CAA, and DNSSEC are five points each.
Security headers 10 of 15. HSTS, CSP, and X-Frame-Options or CSP frame-ancestors.
Safety lists 0 of 15. Points only when the checks ran and came back clean. Unknown is not clean.
Domain age 5 of 5. Five points at one year, two points at 30 days.
Change history
- October 2026: dns a changed from 188.114.96.4,188.114.97.4 to 188.114.96.3,188.114.97.3.
Questions
Is 1337xx.to safe?
Cloudflare family DNS returned a block for 1337xx.to. That resolver covers adult and malware names.
Who hosts 1337xx.to?
1337xx.to is placed in Toronto, Canada.
When does 1337xx.to expire?
1337xx.to expires on 28 March 2028 according to https://rdap.tonicregistry.to/rdap/domain/1337xx.to.
Who owns 1337xx.to?
The registry did not return a person or a company for 1337xx.to. RDAP often redacts the registrant. The registrar on file is Tonic.
Sources
- RDAP source https://rdap.tonicregistry.to/rdap/domain/1337xx.to at 2026-10-30T15:15:06Z
- DNS source 1.1.1.1:53 at 2026-10-30T15:15:06Z
- TLS source tls:443 at 2026-10-30T15:15:06Z
- HTTP source https://1337xx.to/ at 2026-10-30T15:15:06Z
- Tech source wappalyzergo at 2026-10-30T15:15:06Z
- Geo source db-ip at 2026-10-30T15:15:06Z
- Safety source family DNS and local lists at 2026-10-30T15:15:06Z
Related reports
No other indexable reports share this TLD, host, or registrar yet.
Owner of this site?
Ask for a correction or for the report to be removed from search. Public DNS facts stay on the page. An optional badge is not inserted for you.
How to read this report
The sentences under each heading are filled from the latest snapshot. If a collector had nothing to say, that sentence is left out. The target site's own title and meta description, when shown, are quoted as measurements. They are not this page's title. Change history only lists a difference between two snapshots, so the first check starts the clock and later edits are the history. A malware blocklist is the only reason the homepage body is skipped. That fact stays on the report. It does not by itself drop the page from the sitemap or from related-report links.