url.cn
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of url.cn
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
DNS Records
WHOIS / Registration
Registration data planned
Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.
Subdomains
Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.
| Subdomain | Resolves to | Last seen |
|---|---|---|
| s.url.cn | 2026-05-27 14:05:53.127 | |
| eary11.cdnhelper.url.cn | 2026-06-23 06:18:40.838 | |
| url.cn | 2026-07-28 20:14:18.483 | |
| w.url.cn | 2026-07-22 13:48:19.906 | |
| q.url.cn | 2026-07-26 20:04:11.963 | |
| 10.url.cn | 1970-01-01 00:00:00.000 | |
| 12.url.cn | 1970-01-01 00:00:00.000 | |
| 7.url.cn | 1970-01-01 00:00:00.000 | |
| 9.url.cn | 1970-01-01 00:00:00.000 | |
| boodo.url.cn | 2026-07-16 14:29:22.220 | |
| c.url.cn | 1970-01-01 00:00:00.000 | |
| cc.url.cn | 1970-01-01 00:00:00.000 | |
| cpicrs.url.cn | 1970-01-01 00:00:00.000 | |
| d.url.cn | 1970-01-01 00:00:00.000 | |
| dev-c.url.cn | 1970-01-01 00:00:00.000 | |
| dl.url.cn | 1970-01-01 00:00:00.000 | |
| es.monitor.url.cn | 1970-01-01 00:00:00.000 | |
| hb.url.cn | 1970-01-01 00:00:00.000 | |
| hbd.url.cn | 1970-01-01 00:00:00.000 | |
| hytest.url.cn | 1970-01-01 00:00:00.000 | |
| infopic.url.cn | 2026-06-16 12:05:48.018 | |
| outband.url.cn | 1970-01-01 00:00:00.000 | |
| pic.url.cn | 1970-01-01 00:00:00.000 | |
| report.url.cn | 1970-01-01 00:00:00.000 | |
| ups-dl.url.cn | 1970-01-01 00:00:00.000 | |
| ups-hbd.url.cn | 1970-01-01 00:00:00.000 | |
| ups-infopic.url.cn | 1970-01-01 00:00:00.000 | |
| www.url.cn | 1970-01-01 00:00:00.000 | |
| wx.url.cn | 1970-01-01 00:00:00.000 | |
| x2s.url.cn | 1970-01-01 00:00:00.000 |
Tech Stack
Tech detection pending
Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.
TLS Certificates
IPs Citing This Domain
No citing IPs found yet
As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.
Origin / IP-Leak
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
| Origin IP | Origin ASN | CDN ASN | Confidence | Reasoning |
|---|---|---|---|---|
| 121.12.1.116 | AS4134 | AS45090 | 95% | cert be9b147f… served by 121.12.1.116 (AS4134) carries SAN url.cn which currently resolves through Tencent (AS45090) at 101.226.141.21, 113.96.19.161, 2402:4e00:1900:1409:0:95a7:1cfe:7236, 2402:4e00:1020:140d:0:95a7:1d47:c7d8 |
| 111.6.232.20 | AS9808 | AS45090 | 95% | cert be9b147f… served by 111.6.232.20 (AS9808) carries SAN url.cn which currently resolves through Tencent (AS45090) at 101.226.141.21, 113.96.19.161, 2402:4e00:1900:1409:0:95a7:1cfe:7236, 2402:4e00:1020:140d:0:95a7:1d47:c7d8 |
| 150.139.142.189 | AS136195 | AS45090 | 95% | cert a1b86bd0… served by 150.139.142.189 (AS136195) carries SAN url.cn which currently resolves through Tencent (AS45090) at 101.226.141.21, 113.96.19.161, 2402:4e00:1900:1409:0:95a7:1cfe:7236, 2402:4e00:1020:140d:0:95a7:1d47:c7d8 |
| 59.38.103.11 | AS134763 | AS45090 | 95% | cert a1b86bd0… served by 59.38.103.11 (AS134763) carries SAN url.cn which currently resolves through Tencent (AS45090) at 101.226.141.21, 113.96.19.161, 2402:4e00:1900:1409:0:95a7:1cfe:7236, 2402:4e00:1020:140d:0:95a7:1d47:c7d8 |
| 182.40.66.5 | AS58540 | AS45090 | 95% | cert be9b147f… served by 182.40.66.5 (AS58540) carries SAN url.cn which currently resolves through Tencent (AS45090) at 101.226.141.21, 113.96.19.161, 2402:4e00:1900:1409:0:95a7:1cfe:7236, 2402:4e00:1020:140d:0:95a7:1d47:c7d8 |
| 185.123.53.236 | AS62005 | AS45090 | 95% | cert f4b1a6a1… served by 185.123.53.236 (AS62005) carries SAN url.cn which currently resolves through Tencent (AS45090) at 101.226.141.21, 113.96.19.161, 2402:4e00:1900:1409:0:95a7:1cfe:7236, 2402:4e00:1020:140d:0:95a7:1d47:c7d8 |
| 111.31.69.114 | AS9808 | AS45090 | 95% | cert be9b147f… served by 111.31.69.114 (AS9808) carries SAN url.cn which currently resolves through Tencent (AS45090) at 101.226.141.21, 113.96.19.161, 2402:4e00:1900:1409:0:95a7:1cfe:7236, 2402:4e00:1020:140d:0:95a7:1d47:c7d8 |
| 113.240.107.66 | AS4134 | AS45090 | 95% | cert a1b86bd0… served by 113.240.107.66 (AS4134) carries SAN url.cn which currently resolves through Tencent (AS45090) at 101.226.141.21, 113.96.19.161, 2402:4e00:1900:1409:0:95a7:1cfe:7236, 2402:4e00:1020:140d:0:95a7:1d47:c7d8 |
| 59.56.79.113 | AS133774 | AS45090 | 95% | cert be9b147f… served by 59.56.79.113 (AS133774) carries SAN url.cn which currently resolves through Tencent (AS45090) at 101.226.141.21, 113.96.19.161, 2402:4e00:1900:1409:0:95a7:1cfe:7236, 2402:4e00:1020:140d:0:95a7:1d47:c7d8 |
| 60.13.97.62 | AS4837 | AS45090 | 95% | cert a1b86bd0… served by 60.13.97.62 (AS4837) carries SAN url.cn which currently resolves through Tencent (AS45090) at 101.226.141.21, 113.96.19.161, 2402:4e00:1900:1409:0:95a7:1cfe:7236, 2402:4e00:1020:140d:0:95a7:1d47:c7d8 |
| 123.6.40.122 | AS4837 | AS45090 | 95% | cert bd8ba425… served by 123.6.40.122 (AS4837) carries SAN url.cn which currently resolves through Tencent (AS45090) at 101.226.141.21, 113.96.19.161, 2402:4e00:1900:1409:0:95a7:1cfe:7236, 2402:4e00:1020:140d:0:95a7:1d47:c7d8 |
| 101.33.10.108 | AS139341 | AS45090 | 95% | cert d359a132… served by 101.33.10.108 (AS139341) carries SAN url.cn which currently resolves through Tencent (AS45090) at 101.226.141.21, 113.96.19.161, 2402:4e00:1900:1409:0:95a7:1cfe:7236, 2402:4e00:1020:140d:0:95a7:1d47:c7d8 |
| 58.42.59.151 | AS139203 | AS45090 | 95% | cert a1b86bd0… served by 58.42.59.151 (AS139203) carries SAN url.cn which currently resolves through Tencent (AS45090) at 101.226.141.21, 113.96.19.161, 2402:4e00:1900:1409:0:95a7:1cfe:7236, 2402:4e00:1020:140d:0:95a7:1d47:c7d8 |
| 111.48.68.31 | AS9808 | AS45090 | 95% | cert a1b86bd0… served by 111.48.68.31 (AS9808) carries SAN url.cn which currently resolves through Tencent (AS45090) at 101.226.141.21, 113.96.19.161, 2402:4e00:1900:1409:0:95a7:1cfe:7236, 2402:4e00:1020:140d:0:95a7:1d47:c7d8 |
| 58.49.197.12 | AS58563 | AS45090 | 95% | cert a1b86bd0… served by 58.49.197.12 (AS58563) carries SAN url.cn which currently resolves through Tencent (AS45090) at 101.226.141.21, 113.96.19.161, 2402:4e00:1900:1409:0:95a7:1cfe:7236, 2402:4e00:1020:140d:0:95a7:1d47:c7d8 |
| 144.124.233.21 | AS216071 | AS45090 | 95% | cert f4b1a6a1… served by 144.124.233.21 (AS216071) carries SAN url.cn which currently resolves through Tencent (AS45090) at 101.226.141.21, 113.96.19.161, 2402:4e00:1900:1409:0:95a7:1cfe:7236, 2402:4e00:1020:140d:0:95a7:1d47:c7d8 |
| 223.113.137.14 | AS56046 | AS45090 | 95% | cert a1b86bd0… served by 223.113.137.14 (AS56046) carries SAN url.cn which currently resolves through Tencent (AS45090) at 101.226.141.21, 113.96.19.161, 2402:4e00:1900:1409:0:95a7:1cfe:7236, 2402:4e00:1020:140d:0:95a7:1d47:c7d8 |
| 39.145.32.13 | AS9808 | AS45090 | 95% | cert be9b147f… served by 39.145.32.13 (AS9808) carries SAN url.cn which currently resolves through Tencent (AS45090) at 101.226.141.21, 113.96.19.161, 2402:4e00:1900:1409:0:95a7:1cfe:7236, 2402:4e00:1020:140d:0:95a7:1d47:c7d8 |
| 218.201.18.28 | AS9808 | AS45090 | 95% | cert a1b86bd0… served by 218.201.18.28 (AS9808) carries SAN url.cn which currently resolves through Tencent (AS45090) at 101.226.141.21, 113.96.19.161, 2402:4e00:1900:1409:0:95a7:1cfe:7236, 2402:4e00:1020:140d:0:95a7:1d47:c7d8 |
| 112.28.169.34 | AS9808 | AS45090 | 95% | cert a1b86bd0… served by 112.28.169.34 (AS9808) carries SAN url.cn which currently resolves through Tencent (AS45090) at 101.226.141.21, 113.96.19.161, 2402:4e00:1900:1409:0:95a7:1cfe:7236, 2402:4e00:1020:140d:0:95a7:1d47:c7d8 |
| 117.163.57.87 | AS56045 | AS45090 | 95% | cert a1b86bd0… served by 117.163.57.87 (AS56045) carries SAN url.cn which currently resolves through Tencent (AS45090) at 101.226.141.21, 113.96.19.161, 2402:4e00:1900:1409:0:95a7:1cfe:7236, 2402:4e00:1020:140d:0:95a7:1d47:c7d8 |
| 219.151.137.188 | AS4134 | AS45090 | 95% | cert be9b147f… served by 219.151.137.188 (AS4134) carries SAN url.cn which currently resolves through Tencent (AS45090) at 101.226.141.21, 113.96.19.161, 2402:4e00:1900:1409:0:95a7:1cfe:7236, 2402:4e00:1020:140d:0:95a7:1d47:c7d8 |
| 36.163.63.177 | AS56046 | AS45090 | 95% | cert be9b147f… served by 36.163.63.177 (AS56046) carries SAN url.cn which currently resolves through Tencent (AS45090) at 101.226.141.21, 113.96.19.161, 2402:4e00:1900:1409:0:95a7:1cfe:7236, 2402:4e00:1020:140d:0:95a7:1d47:c7d8 |
| 36.25.246.182 | AS58461 | AS45090 | 95% | cert a1b86bd0… served by 36.25.246.182 (AS58461) carries SAN url.cn which currently resolves through Tencent (AS45090) at 101.226.141.21, 113.96.19.161, 2402:4e00:1900:1409:0:95a7:1cfe:7236, 2402:4e00:1020:140d:0:95a7:1d47:c7d8 |
| 58.144.195.177 | AS4837 | AS45090 | 95% | cert a1b86bd0… served by 58.144.195.177 (AS4837) carries SAN url.cn which currently resolves through Tencent (AS45090) at 101.226.141.21, 113.96.19.161, 2402:4e00:1900:1409:0:95a7:1cfe:7236, 2402:4e00:1020:140d:0:95a7:1d47:c7d8 |
CT-Log Evidence
Certificates from public Certificate Transparency logs whose subject or SAN names this domain — including historic certs we never observed live.
Threat Intelligence
Domain threat-intel pending
Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.
History
Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.
| Type | Value | First seen | Last seen |
|---|---|---|---|
| NS | ns1.qq.com | 2026-05-26 00:21:04.925 | 2026-07-28 20:14:18.483 |
| NS | ns4.qq.com | 2026-05-26 00:21:04.925 | 2026-07-28 20:14:18.483 |
| TXT | hj5w72m73gk87rnfqyrv6ztfg3pksrjr | 2026-05-26 00:21:04.925 | 2026-07-28 20:14:18.483 |
| NS | ns3.qq.com | 2026-05-26 00:21:04.925 | 2026-07-28 20:14:18.483 |
| AAAA | 2402:4e00:1020:140d:0:95a7:1d47:c7d8 | 2026-05-26 00:21:04.925 | 2026-07-28 20:14:18.483 |
| A | 113.96.19.161 | 2026-05-26 00:21:04.925 | 2026-07-28 20:14:18.483 |
| NS | ns2.qq.com | 2026-05-26 00:21:04.925 | 2026-07-28 20:14:18.483 |
| A | 101.226.141.21 | 2026-05-26 00:21:04.925 | 2026-07-28 20:14:18.483 |
| AAAA | 2402:4e00:1900:1409:0:95a7:1cfe:7236 | 2026-05-26 00:21:04.925 | 2026-07-28 20:14:18.483 |