Domain

www.56.com

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

DNS Check HTTP Check Run Full Scan .com TLD

Run a live full scan of www.56.com

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now

Hosting IPs

—

A/AAAA targets

Subdomains

—

CT + scan + body

Record Types

—

seen in DNS

Observed Certs

—

in our scans

DNS Records

138.113.136.126, 138.113.149.152, 138.113.20.41, 163.171.130.131, 168.235.193.74

AAAA

2a01:53c0:ff0b:1::1e, 2a01:53c0:ff0c::54

—

TXT

—

CNAME

—

CAA

—

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Subdomain enumeration pending

Every subdomain ever issued a TLS cert under this apex — extracted from Certificate Transparency logs, our own scan observations and body references.

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

211.100.53.70:443 cd057192bc3b…

Subject: www.56.com

Issuer: GeoTrust G2 TLS CN RSA4096 SHA256 2022 CA1

SANs: *.56.com, *.56.sohuno.com, *.56img.com, *.56imgs.com, *.qf.56.com, *.qf.com.cn, *.qianfan.tv, 56.com, 56img.com, 56imgs.com, icaneasy.com, icanvideo.com, qf.com.cn, qianfan.tv, somama.com, stat.qf.v-56.com, v-56.com, vicovico.com, www.56.com, www.icaneasy.com, www.icanvideo.com, www.somama.com, www.v-56.com, www.vicovico.com

219.136.249.83:443 cd057192bc3b…

Subject: www.56.com

Issuer: GeoTrust G2 TLS CN RSA4096 SHA256 2022 CA1

IPs Citing This Domain

Hosts whose HTML body references this domain. Strong signal for origin/mirror/embed discovery.

114.55.145.97:443 href · ×4

154.31.232.140:443 href · ×3

154.31.232.139:443 href · ×2

38.190.220.91:443 href · ×2

38.190.220.70:443 href · ×2

60.205.120.179:443 href · ×2

154.31.233.144:443 href · ×2

154.31.238.158:443 href · ×2

43.161.236.100:443 href · ×2

117.50.70.115:443 href · ×2

154.31.236.133:443 href · ×2

154.221.21.159:443 href · ×2

154.31.234.133:443 href · ×2

154.31.237.153:443 href · ×2

154.31.233.134:443 href · ×2

38.190.220.97:443 href · ×1

154.31.239.153:443 href · ×1

38.190.220.84:443 href · ×1

149.30.180.199:443 href · ×1

38.190.218.112:443 href · ×1

1.94.66.174:443 href · ×1

38.190.218.68:443 href · ×1

38.190.216.88:443 href · ×1

38.190.220.96:443 href · ×1

38.190.218.99:443 href · ×1

38.190.216.89:443 href · ×1

154.31.232.158:443 href · ×1

154.31.234.130:443 href · ×1

154.31.236.156:443 href · ×1

38.190.216.68:443 href · ×1

38.190.220.112:443 href · ×1

154.31.232.144:443 href · ×1

149.30.180.227:443 href · ×1

154.31.239.137:443 href · ×1

38.190.218.88:443 href · ×1

206.119.66.138:443 href · ×1

154.31.238.147:443 href · ×1

154.31.236.143:443 href · ×1

38.190.216.111:443 href · ×1

38.190.216.114:443 href · ×1

149.30.180.196:443 href · ×1

154.31.238.156:443 href · ×1

154.31.234.140:443 href · ×1

47.99.117.200:443 href · ×1

154.31.237.152:443 href · ×1

154.31.235.153:443 href · ×1

154.31.239.133:443 href · ×1

154.31.239.149:443 href · ×1

154.31.233.136:443 href · ×1

154.31.238.141:443 href · ×1

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

No origin-IP leaks detected (yet)

Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.

Type	Value	First seen	Last seen
AAAA	2a01:53c0:ff0c::54	2026-05-26 00:03:35.658	2026-07-27 13:11:59.618
A	168.235.193.74	2026-05-26 00:03:35.658	2026-07-22 08:10:40.435
A	138.113.20.41	2026-05-26 19:13:09.389	2026-06-21 18:34:02.515
A	138.113.136.126	2026-06-14 22:36:55.780	2026-07-27 12:29:13.784
AAAA	2a01:53c0:ff0b:1::1e	2026-06-14 22:36:55.780	2026-06-21 11:07:41.227
A	163.171.130.131	2026-07-18 03:21:34.075	2026-07-22 08:20:08.673
A	138.113.149.152	2026-07-22 13:13:04.256	2026-07-27 13:11:59.618