Domain
g.cn
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of g.cn
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
Hosting IPs
18
A/AAAA targets
Subdomains
14
CT + scan + body
Record Types
6
seen in DNS
Observed Certs
108
in our scans
DNS Records
A
142.251.168.94, 142.251.39.131, 172.217.17.195, 172.217.20.67, 216.58.198.35, 216.58.198.99
AAAA
2a00:1450:4001:c17::5e, 2a00:1450:4002:400::2003, 2a00:1450:400c:c0b::5e, 2a00:1450:400e:804::2003, 2a00:1450:400e:814::2003, 2a00:1450:4017:81e::2003, 2a00:1450:4025:401::5e
MX
0 smtp.google.com
NS
ns1.google.com, ns2.google.com, ns3.google.com, ns4.google.com
TXT
v=spf1 -all
CNAME
—
CAA
0 issue "pki.goog"
WHOIS / Registration
Registration data planned
Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.
Tech Stack
Tech detection pending
Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.
TLS Certificates
Subject: xi-rang.cn
Issuer: Encryption Everywhere DV TLS CA - G2
SANs: www.xi-rang.cn, xi-rang.cn
Subject: juwei.hnxueding.cn
Issuer: R11
SANs: juwei.hnxueding.cn
Subject: apis.hhj.org.cn
Issuer: YR1
SANs: apis.hhj.org.cn
Subject: dcii.org.cn
Issuer: YR2
SANs: dcii.org.cn
Subject: jjh.worldgoodmorning.cn
Issuer: TrustAsia DV TLS RSA CA 2025
SANs: jjh.worldgoodmorning.cn
Subject: crm.yumeikang.cn
Issuer: RapidSSL TLS RSA CA G1
SANs: crm.yumeikang.cn, www.crm.yumeikang.cn
Subject: 002keleappxiazai7.org.cn
Issuer: YR1
SANs: 002keleappxiazai7.org.cn
Subject: *.nifdc.org.cn
Issuer: CFCA OV OCA
SANs: *.nifdc.org.cn, nifdc.org.cn
Subject: dumuxing.cn
Issuer: YE2
SANs: dumuxing.cn, www.dumuxing.cn
Subject: www.haorang.cn
Issuer: YR2
SANs: haorang.cn, www.haorang.cn
Subject: shop.qianmingtang.cn
Issuer: YR1
SANs: shop.qianmingtang.cn
Subject: *.yueyuechuxing.cn
Issuer: Encryption Everywhere DV TLS CA - G2
SANs: *.yueyuechuxing.cn, yueyuechuxing.cn
Subject: longtech.org.cn
Issuer: YE2
SANs: longtech.org.cn, www.longtech.org.cn
Subject: ease.preprod.cn-north-1.ml-platform.aws.a2z.org.cn
Issuer: Amazon RSA 2048 M01
SANs: ease.preprod.cn-north-1.ml-platform.aws.a2z.org.cn
Subject: blog.zhubaofang.cn
Issuer: TrustAsia DV TLS RSA CA 2025
SANs: blog.zhubaofang.cn
Subject: vgdog.cn
Issuer: YR2
SANs: vgdog.cn, www.vgdog.cn
Subject: agent.sebo.org.cn
Issuer: Encryption Everywhere DV TLS CA - G2
SANs: agent.sebo.org.cn, www.agent.sebo.org.cn
Subject: ckcdog.cn
Issuer: YR1
SANs: ckcdog.cn, ckcpet.com, www.ckcdog.cn, www.ckcpet.com
Subject: abcd.sddianfeng.cn
Issuer: R3
SANs: abcd.sddianfeng.cn
Subject: 007bifenwangjishipaiqiufen.org.cn
Issuer: YR2
SANs: 007bifenwangjishipaiqiufen.org.cn
Subject: www.kktrading.cn
Issuer: Encryption Everywhere DV TLS CA - G2
SANs: kktrading.cn, www.kktrading.cn
Subject: www.yunhebaoming.cn
Issuer: YR1
SANs: www.yunhebaoming.cn
Subject: b-bjs-1.metadata.cn-north-1.kronos.alameda.a2z.org.cn
Issuer: Amazon RSA 2048 M01
SANs: b-bjs-1.metadata.cn-north-1.kronos.alameda.a2z.org.cn
Subject: h5.quanchengyuexiang.cn
Issuer: LiteSSL RSA CA 2025
SANs: h5.quanchengyuexiang.cn
Subject: *.yulinlib.org.cn
Issuer: Encryption Everywhere DV TLS CA - G2
SANs: *.yulinlib.org.cn, yulinlib.org.cn
Subject: 002keleappxiazai7.org.cn
Issuer: YR1
SANs: 002keleappxiazai7.org.cn
Subject: marr.qixiaocheng.cn
Issuer: YR2
SANs: marr.qixiaocheng.cn
Subject: livetracking.prod.cn-north-1.hydratest.aws.a2z.org.cn
Issuer: Amazon RSA 2048 M04
SANs: livetracking.prod.cn-north-1.hydratest.aws.a2z.org.cn
Subject: metamjk.fastsong.cn
Issuer: Encryption Everywhere DV TLS CA - G2
SANs: metamjk.fastsong.cn, www.metamjk.fastsong.cn
Subject: *.exporeg.cn
Issuer: Xcc Trust DV SSL CA
SANs: *.exporeg.cn, exporeg.cn
IPs Citing This Domain
Hosts whose HTML body references this domain. Strong signal for origin/mirror/embed discovery.
101.254.113.7:443
href · ×1
Origin / IP-Leak
USP
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
No origin-IP leaks detected (yet)
Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.
Threat Intelligence
Domain threat-intel pending
Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.
History
Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.
| Type | Value | First seen | Last seen |
|---|---|---|---|
| TXT | v=spf1 -all | 2026-06-02 02:09:23.865 | 2026-07-25 10:24:59.810 |
| AAAA | 2a00:1450:4001:c17::5e | 2026-06-02 02:09:23.865 | 2026-06-02 02:09:23.865 |
| NS | ns3.google.com | 2026-06-02 02:09:23.865 | 2026-07-25 10:24:59.810 |
| NS | ns1.google.com | 2026-06-02 02:09:23.865 | 2026-07-25 10:24:59.810 |
| MX | 0 smtp.google.com | 2026-06-02 02:09:23.865 | 2026-07-25 10:24:59.810 |
| CAA | 0 issue "pki.goog" | 2026-06-02 02:09:23.865 | 2026-07-25 10:24:59.810 |
| NS | ns4.google.com | 2026-06-02 02:09:23.865 | 2026-07-25 10:24:59.810 |
| A | 142.251.168.94 | 2026-06-02 02:09:23.865 | 2026-06-02 02:09:23.865 |
| NS | ns2.google.com | 2026-06-02 02:09:23.865 | 2026-07-25 10:24:59.810 |
| AAAA | 2a00:1450:400c:c0b::5e | 2026-06-03 22:21:28.970 | 2026-06-03 22:21:28.970 |
| A | 172.217.17.195 | 2026-06-03 22:21:28.970 | 2026-06-03 22:21:28.970 |
| A | 142.251.39.131 | 2026-06-17 06:55:00.993 | 2026-07-15 18:20:13.830 |
| AAAA | 2a00:1450:400e:804::2003 | 2026-06-17 06:55:00.993 | 2026-07-15 18:20:13.830 |
| A | 216.58.198.35 | 2026-06-20 04:54:46.728 | 2026-07-25 10:24:59.810 |
| AAAA | 2a00:1450:400e:814::2003 | 2026-06-20 04:54:46.728 | 2026-07-25 10:24:59.810 |
| AAAA | 2a00:1450:4002:400::2003 | 2026-07-15 18:11:18.022 | 2026-07-15 18:11:18.022 |
| AAAA | 2a00:1450:4025:401::5e | 2026-07-15 20:04:13.980 | 2026-07-15 20:04:13.980 |
| A | 216.58.198.99 | 2026-07-15 20:04:13.980 | 2026-07-15 20:04:13.980 |
| AAAA | 2a00:1450:4017:81e::2003 | 2026-07-21 21:52:37.258 | 2026-07-21 21:52:37.258 |
| A | 172.217.20.67 | 2026-07-21 21:52:37.258 | 2026-07-21 21:52:37.258 |