2 entries are registered on port 2096. It is a registered port (1024–49151) — IANA records an assignee, but nothing stops other software from listening here, which is why the number carries more than one entry.
Port 2096 is commonly used by cPanel's webmail service over an encrypted SSL/TLS connection. It enables users to securely access their email accounts via a web-based interface, providing convenient email management for domains hosted on servers utilizing cPanel. The SSL encryption ensures data privacy during transmission, protecting sensitive email content from interception by unauthorized parties.
The registry says what 2096 is registered to. What is listening on it right now is decided by the host, and only the host can be asked. Each of these prints the process behind the socket.
linux
ss -ltnp | grep ':2096\b'
macos
lsof -nP -iTCP:2096 -sTCP:LISTEN
windows
netstat -ano | findstr :2096
On Linux and Windows the process name comes back with the socket; on macOS lsof needs sudo to name a process that isn't yours. Match what it prints against the 2 entries above.
A port number is not a service. Anything may listen on 2096 — what you actually met is decided by the host, not the registry. If a service is missing here, it belongs in the registry.