Domain
5000999.com
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of 5000999.com
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
Hosting IPs
30
A/AAAA targets
Subdomains
6
CT + scan + body
Record Types
3
seen in DNS
Observed Certs
11
in our scans
DNS Records
A
18.239.105.110, 18.239.105.51, 18.239.105.84, 18.239.105.88, 18.66.112.104, 18.66.112.59, 18.66.112.88, 18.66.112.92
AAAA
2600:9000:25e8:1000:a:99a4:b3c0:93a1, 2600:9000:25e8:2a00:a:99a4:b3c0:93a1, 2600:9000:25e8:2c00:a:99a4:b3c0:93a1, 2600:9000:25e8:3a00:a:99a4:b3c0:93a1, 2600:9000:25e8:3c00:a:99a4:b3c0:93a1, 2600:9000:25e8:4200:a:99a4:b3c0:93a1, 2600:9000:25e8:4400:a:99a4:b3c0:93a1, 2600:9000:25e8:4e00:a:99a4:b3c0:93a1
MX
—
NS
colin.ns.cloudflare.com, noor.ns.cloudflare.com
TXT
—
CNAME
—
CAA
—
WHOIS / Registration
Registration data planned
Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.
Subdomains
Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.
| Subdomain | Resolves to | Last seen |
|---|---|---|
| 5000999.com | 2026-07-28 09:50:51.502 | |
| www.5000999.com | 1970-01-01 00:00:00.000 |
Tech Stack
Tech detection pending
Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.
TLS Certificates
Certificate observations pending
TLS certs naming this domain in subject or SANs will appear here as our scan-layer catches them.
IPs Citing This Domain
No citing IPs found yet
As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.
Origin / IP-Leak
USP
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
No origin-IP leaks detected (yet)
Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.
CT-Log Evidence
Certificates from public Certificate Transparency logs whose subject or SAN names this domain — including historic certs we never observed live.
7711d42ef41ba5c3…
google · argon2026h2
Subject: *.49740.top
Issuer: Amazon RSA 2048 M01
SANs: *.49740.top, *.49533.cyou, *.886115.com, *.49208.cyou, 886115.com, 886254.com, *.49042.cyou, 48779.cc, 6421111.com, *.499854.com, *.459511.com, *.886254.com, 459511.com, 5000999.com, 499854.com, h5.49232.xyz, 6423333.com, *.49836.top, *.48779.cc, 459511.cc, *.294017.com, *.49564.top, *.49248.cyou, 49769.cc, *.49844.xyz, h5.49151.xyz, 36678.vip, *.49013.top, 5000666.com, *.6421111.com, *.833311.com, 492267.com, 6425555.com, *.492267.com, *.49341.top, *.49063.link, h5.49096.xyz, *.36678.vip, *.5000666.com, *.6423333.com, *.459511.cc, *.49769.cc, 833311.com, *.293966.com, *.49277.xyz, *.6425555.com, 293966.com, *.5000999.com, *.49025.cyou
Valid: 2025-11-23 00:00:00 → 2026-12-22 23:59:59
90554bbe83e0bfc8…
google · argon2026h2
Subject: *.49740.top
Issuer: Amazon RSA 2048 M01
SANs: *.49740.top, *.49533.cyou, *.886115.com, *.49208.cyou, 886115.com, 886254.com, *.49042.cyou, 48779.cc, 6421111.com, *.499854.com, *.459511.com, *.886254.com, 459511.com, 5000999.com, 499854.com, h5.49232.xyz, 6423333.com, *.49836.top, *.48779.cc, 459511.cc, *.294017.com, *.49564.top, *.49248.cyou, 49769.cc, *.49844.xyz, h5.49151.xyz, 36678.vip, *.49013.top, 5000666.com, *.6421111.com, *.833311.com, 492267.com, 6425555.com, *.492267.com, *.49341.top, *.49063.link, h5.49096.xyz, *.36678.vip, *.5000666.com, *.6423333.com, *.459511.cc, *.49769.cc, 833311.com, *.293966.com, *.49277.xyz, *.6425555.com, 293966.com, *.5000999.com, *.49025.cyou
Valid: 2025-11-23 00:00:00 → 2026-12-22 23:59:59
7711d42ef41ba5c3…
google · xenon2026h2
Subject: *.49740.top
Issuer: Amazon RSA 2048 M01
SANs: *.49740.top, *.49533.cyou, *.886115.com, *.49208.cyou, 886115.com, 886254.com, *.49042.cyou, 48779.cc, 6421111.com, *.499854.com, *.459511.com, *.886254.com, 459511.com, 5000999.com, 499854.com, h5.49232.xyz, 6423333.com, *.49836.top, *.48779.cc, 459511.cc, *.294017.com, *.49564.top, *.49248.cyou, 49769.cc, *.49844.xyz, h5.49151.xyz, 36678.vip, *.49013.top, 5000666.com, *.6421111.com, *.833311.com, 492267.com, 6425555.com, *.492267.com, *.49341.top, *.49063.link, h5.49096.xyz, *.36678.vip, *.5000666.com, *.6423333.com, *.459511.cc, *.49769.cc, 833311.com, *.293966.com, *.49277.xyz, *.6425555.com, 293966.com, *.5000999.com, *.49025.cyou
Valid: 2025-11-23 00:00:00 → 2026-12-22 23:59:59
90554bbe83e0bfc8…
google · xenon2026h2
Subject: *.49740.top
Issuer: Amazon RSA 2048 M01
SANs: *.49740.top, *.49533.cyou, *.886115.com, *.49208.cyou, 886115.com, 886254.com, *.49042.cyou, 48779.cc, 6421111.com, *.499854.com, *.459511.com, *.886254.com, 459511.com, 5000999.com, 499854.com, h5.49232.xyz, 6423333.com, *.49836.top, *.48779.cc, 459511.cc, *.294017.com, *.49564.top, *.49248.cyou, 49769.cc, *.49844.xyz, h5.49151.xyz, 36678.vip, *.49013.top, 5000666.com, *.6421111.com, *.833311.com, 492267.com, 6425555.com, *.492267.com, *.49341.top, *.49063.link, h5.49096.xyz, *.36678.vip, *.5000666.com, *.6423333.com, *.459511.cc, *.49769.cc, 833311.com, *.293966.com, *.49277.xyz, *.6425555.com, 293966.com, *.5000999.com, *.49025.cyou
Valid: 2025-11-23 00:00:00 → 2026-12-22 23:59:59
Threat Intelligence
Domain threat-intel pending
Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.
History
Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.
| Type | Value | First seen | Last seen |
|---|---|---|---|
| AAAA | 2600:9000:25e8:b400:a:99a4:b3c0:93a1 | 2026-06-15 18:33:04.793 | 2026-06-15 18:33:04.793 |
| A | 18.239.105.110 | 2026-06-15 18:33:04.793 | 2026-07-21 20:15:59.644 |
| AAAA | 2600:9000:25e8:5c00:a:99a4:b3c0:93a1 | 2026-06-15 18:33:04.793 | 2026-06-15 18:33:04.793 |
| AAAA | 2600:9000:25e8:2a00:a:99a4:b3c0:93a1 | 2026-06-15 18:33:04.793 | 2026-06-15 18:33:04.793 |
| A | 18.239.105.84 | 2026-06-15 18:33:04.793 | 2026-07-21 20:15:59.644 |
| AAAA | 2600:9000:25e8:5600:a:99a4:b3c0:93a1 | 2026-06-15 18:33:04.793 | 2026-07-28 09:50:51.502 |
| A | 18.239.105.51 | 2026-06-15 18:33:04.793 | 2026-07-21 20:15:59.644 |
| AAAA | 2600:9000:25e8:7200:a:99a4:b3c0:93a1 | 2026-06-15 18:33:04.793 | 2026-06-15 18:33:04.793 |
| AAAA | 2600:9000:25e8:8600:a:99a4:b3c0:93a1 | 2026-06-15 18:33:04.793 | 2026-06-15 18:33:04.793 |
| A | 18.239.105.88 | 2026-06-15 18:33:04.793 | 2026-07-21 20:15:59.644 |
| AAAA | 2600:9000:25e8:f400:a:99a4:b3c0:93a1 | 2026-06-15 18:33:04.793 | 2026-06-15 18:33:04.793 |
| NS | colin.ns.cloudflare.com | 2026-06-15 18:33:04.793 | 2026-07-28 09:50:51.502 |
| AAAA | 2600:9000:25e8:2c00:a:99a4:b3c0:93a1 | 2026-06-15 18:33:04.793 | 2026-06-15 18:33:04.793 |
| NS | noor.ns.cloudflare.com | 2026-06-15 18:33:04.793 | 2026-07-28 09:50:51.502 |
| AAAA | 2600:9000:25e8:b000:a:99a4:b3c0:93a1 | 2026-07-21 20:15:59.644 | 2026-07-21 20:15:59.644 |
| AAAA | 2600:9000:25e8:4200:a:99a4:b3c0:93a1 | 2026-07-21 20:15:59.644 | 2026-07-28 09:50:51.502 |
| AAAA | 2600:9000:25e8:ca00:a:99a4:b3c0:93a1 | 2026-07-21 20:15:59.644 | 2026-07-21 20:15:59.644 |
| AAAA | 2600:9000:25e8:4400:a:99a4:b3c0:93a1 | 2026-07-21 20:15:59.644 | 2026-07-21 20:15:59.644 |
| AAAA | 2600:9000:25e8:7c00:a:99a4:b3c0:93a1 | 2026-07-21 20:15:59.644 | 2026-07-21 20:15:59.644 |
| AAAA | 2600:9000:25e8:a800:a:99a4:b3c0:93a1 | 2026-07-21 20:15:59.644 | 2026-07-21 20:15:59.644 |
| AAAA | 2600:9000:25e8:1000:a:99a4:b3c0:93a1 | 2026-07-21 20:15:59.644 | 2026-07-21 20:15:59.644 |
| AAAA | 2600:9000:25e8:4e00:a:99a4:b3c0:93a1 | 2026-07-21 20:15:59.644 | 2026-07-21 20:15:59.644 |
| AAAA | 2600:9000:25e8:3c00:a:99a4:b3c0:93a1 | 2026-07-28 09:50:51.502 | 2026-07-28 09:50:51.502 |
| AAAA | 2600:9000:25e8:e00:a:99a4:b3c0:93a1 | 2026-07-28 09:50:51.502 | 2026-07-28 09:50:51.502 |
| AAAA | 2600:9000:25e8:ee00:a:99a4:b3c0:93a1 | 2026-07-28 09:50:51.502 | 2026-07-28 09:50:51.502 |
| AAAA | 2600:9000:25e8:5e00:a:99a4:b3c0:93a1 | 2026-07-28 09:50:51.502 | 2026-07-28 09:50:51.502 |
| A | 18.66.112.88 | 2026-07-28 09:50:51.502 | 2026-07-28 09:50:51.502 |
| A | 18.66.112.59 | 2026-07-28 09:50:51.502 | 2026-07-28 09:50:51.502 |
| AAAA | 2600:9000:25e8:3a00:a:99a4:b3c0:93a1 | 2026-07-28 09:50:51.502 | 2026-07-28 09:50:51.502 |
| A | 18.66.112.92 | 2026-07-28 09:50:51.502 | 2026-07-28 09:50:51.502 |
| A | 18.66.112.104 | 2026-07-28 09:50:51.502 | 2026-07-28 09:50:51.502 |
| AAAA | 2600:9000:25e8:9200:a:99a4:b3c0:93a1 | 2026-07-28 09:50:51.502 | 2026-07-28 09:50:51.502 |