Check-Host.cc

Try 1.1.1.1 AS13335 check-host.cc /country/de /tld/cc
Domain

ip.cn

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

DNS Check HTTP Check Run Full Scan .cn TLD

Run a live full scan of ip.cn

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now
Hosting IPs
—
A/AAAA targets
Subdomains
—
CT + scan + body
Record Types
—
seen in DNS
Observed Certs
—
in our scans

DNS Records

A
138.113.136.126, 138.113.136.83, 138.113.149.152, 138.113.20.41, 138.113.20.50, 138.113.20.52, 14.0.37.154, 14.0.37.180
AAAA
—
MX
—
NS
ns3.dnsv2.com, ns4.dnsv2.com
TXT
—
CNAME
—
CAA
—

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Subdomain enumeration pending

Every subdomain ever issued a TLS cert under this apex — extracted from Certificate Transparency logs, our own scan observations and body references.

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

47.94.47.81:443 2cb7aae7d80d…
Subject: service-vip.cn
Issuer: Encryption Everywhere DV TLS CA - G2
SANs: service-vip.cn, www.service-vip.cn
114.215.255.147:443 9592a0dffb7d…
Subject: tianlingip.cn
Issuer: E6
SANs: tianlingip.cn, www.tianlingip.cn
47.77.2.243:443 0ae13387aa1b…
Subject: www.jegotrip.cn
Issuer: GeoTrust G2 TLS CN RSA4096 SHA256 2022 CA1
SANs: *.jegotrip.com, *.jegotrip.com.cn, jegotrip.cn, www.jegotrip.cn
120.232.188.48:443 dd4e3bb75068…
Subject: *.cmicvip.cn
Issuer: SHECA DV Server CA G5
SANs: *.cmicvip.cn, cmicvip.cn
47.106.94.56:443 0ae13387aa1b…
Subject: www.jegotrip.cn
Issuer: GeoTrust G2 TLS CN RSA4096 SHA256 2022 CA1
SANs: *.jegotrip.com, *.jegotrip.com.cn, jegotrip.cn, www.jegotrip.cn
101.42.128.141:443 a44008971bf4…
Subject: *.bingtrip.cn
Issuer: WoTrus RSA DV SSL CA 2
SANs: *.bingtrip.cn, bingtrip.cn
47.108.218.242:443 25c9fb527204…
Subject: *.allintrip.cn
Issuer: WoTrus RSA DV SSL CA 2
SANs: *.allintrip.cn, allintrip.cn
47.84.33.44:443 6b82b64485a3…
Subject: bt.xiangvip.cn
Issuer: YR2
SANs: bt.xiangvip.cn
101.42.28.66:443 e18ea3ae1a56…
Subject: www.xiaojingvip.cn
Issuer: R12
SANs: www.xiaojingvip.cn
123.57.195.239:443 78fe46c762eb…
Subject: smart-trip.cn
Issuer: Encryption Everywhere DV TLS CA - G2
SANs: smart-trip.cn, www.smart-trip.cn
124.70.64.143:443 986f6ab835da…
Subject: *.hc-trip.cn
Issuer: WoTrus DV Server CA [Run by the Issuer]
SANs: *.hc-trip.cn, hc-trip.cn
46.252.193.14:443 be59efb136dc…
Subject: magnochip.cn-digital.de
Issuer: YE2
SANs: magnochip.cn-digital.de
47.110.79.205:443 bb9cb630f7d5…
Subject: shop.guovip.cn
Issuer: Encryption Everywhere DV TLS CA - G1
SANs: shop.guovip.cn
158.178.231.148:443 568e1c07aeec…
Subject: 52svip.cn
Issuer: ZeroSSL ECC DV SSL CA 2
SANs: *.52svip.cn, 52svip.cn
8.142.80.56:443 da16b14fdc2e…
Subject: *.mirrorship.cn
Issuer: Xcc Trust DV SSL CA
SANs: *.mirrorship.cn, mirrorship.cn
121.43.150.246:443 24265e061c39…
Subject: *.zjtulip.cn
Issuer: RapidSSL TLS RSA CA G1
SANs: *.zjtulip.cn, zjtulip.cn
211.149.141.146:443 4b8ac9b58924…
Subject: *.miip.cn
Issuer: WR1
SANs: *.miip.cn, miip.cn
168.76.220.44:443 6984b60beff8…
Subject: cctvvip.cn
Issuer: YR2
SANs: cctvvip.cn, m.cctvvip.cn, m.wakqm.cn, m.ynyxjt.cn, m.znzcgc.com, wakqm.cn, www.cctvvip.cn, www.wakqm.cn, www.ynyxjt.cn, www.znzcgc.com, ynyxjt.cn, znzcgc.com
168.76.221.28:443 6984b60beff8…
Subject: cctvvip.cn
Issuer: YR2
SANs: cctvvip.cn, m.cctvvip.cn, m.wakqm.cn, m.ynyxjt.cn, m.znzcgc.com, wakqm.cn, www.cctvvip.cn, www.wakqm.cn, www.ynyxjt.cn, www.znzcgc.com, ynyxjt.cn, znzcgc.com
124.71.74.39:443 0930b3590312…
Subject: furuivip.cn
Issuer: JoySSL DV TLS G2 R33 CA
SANs: furuivip.cn, www.furuivip.cn
168.76.221.27:443 6984b60beff8…
Subject: cctvvip.cn
Issuer: YR2
SANs: cctvvip.cn, m.cctvvip.cn, m.wakqm.cn, m.ynyxjt.cn, m.znzcgc.com, wakqm.cn, www.cctvvip.cn, www.wakqm.cn, www.ynyxjt.cn, www.znzcgc.com, ynyxjt.cn, znzcgc.com
47.254.88.179:443 d6d42aead1e6…
Subject: *.6supervvip.cn
Issuer: RapidSSL TLS RSA CA G1
SANs: *.6supervvip.cn, 6supervvip.cn
47.120.22.68:443 57ca289bc813…
Subject: admin.signvip.cn
Issuer: Encryption Everywhere DV TLS CA - G2
SANs: admin.signvip.cn, www.admin.signvip.cn
8.215.16.160:443 c6198b51ecf5…
Subject: *.z-trip.cn
Issuer: RapidSSL TLS RSA CA G1
SANs: *.z-trip.cn, z-trip.cn
47.242.130.170:443 aba6e0bb0482…
Subject: note.timeslip.cn
Issuer: Encryption Everywhere DV TLS CA - G2
SANs: note.timeslip.cn, www.note.timeslip.cn
8.137.183.37:443 25c9fb527204…
Subject: *.allintrip.cn
Issuer: WoTrus RSA DV SSL CA 2
SANs: *.allintrip.cn, allintrip.cn
47.104.24.231:443 1bc9063174f2…
Subject: h5.fortrip.cn
Issuer: Encryption Everywhere DV TLS CA - G2
SANs: h5.fortrip.cn, www.h5.fortrip.cn
120.53.106.225:443 46c7baba8245…
Subject: axb.cnsip.cn
Issuer: Encryption Everywhere DV TLS CA - G2
SANs: axb.cnsip.cn
47.115.163.151:443 c90c6d3ae596…
Subject: *.igotrip.cn
Issuer: Encryption Everywhere DV TLS CA - G2
SANs: *.igotrip.cn, igotrip.cn
168.76.220.49:443 6984b60beff8…
Subject: cctvvip.cn
Issuer: YR2
SANs: cctvvip.cn, m.cctvvip.cn, m.wakqm.cn, m.ynyxjt.cn, m.znzcgc.com, wakqm.cn, www.cctvvip.cn, www.wakqm.cn, www.ynyxjt.cn, www.znzcgc.com, ynyxjt.cn, znzcgc.com

IPs Citing This Domain

No citing IPs found yet

As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

No origin-IP leaks detected (yet)

Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.

Type Value First seen Last seen
A 138.113.149.152 2026-05-25 22:02:50.525 2026-05-26 18:14:17.372
A 138.113.20.52 2026-05-25 22:02:50.525 2026-06-25 22:02:38.381
A 163.171.130.131 2026-05-25 22:02:50.525 2026-06-25 22:02:38.381
NS ns4.dnsv2.com 2026-05-25 22:11:29.484 2026-06-15 17:21:59.980
NS ns3.dnsv2.com 2026-05-25 22:11:29.484 2026-06-15 17:21:59.980
A 138.113.20.41 2026-05-26 19:13:09.389 2026-07-15 20:04:13.980
A 138.113.136.126 2026-06-14 22:23:29.853 2026-06-19 19:21:55.108
A 14.0.37.180 2026-06-14 22:23:29.853 2026-07-28 12:04:07.574
A 168.235.193.74 2026-07-15 20:04:13.980 2026-07-28 11:54:16.597
A 138.113.20.50 2026-07-15 20:04:13.980 2026-07-28 11:54:16.597
A 14.0.37.186 2026-07-16 15:00:40.066 2026-07-19 00:40:11.365
A 168.235.193.64 2026-07-18 16:14:14.426 2026-07-20 02:56:36.596
A 138.113.136.83 2026-07-21 18:32:07.021 2026-07-28 12:04:07.574
A 14.0.37.154 2026-07-23 01:41:29.025 2026-07-23 01:41:29.025