Domain
wn.com
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of wn.com
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
Hosting IPs
60
A/AAAA targets
Subdomains
374
CT + scan + body
Record Types
5
seen in DNS
Observed Certs
52
in our scans
DNS Records
A
195.149.84.100, 195.149.84.101
AAAA
2001:67c:38c::64, 2001:67c:38c::65
MX
1 aspmx.l.google.com, 2 alt1.aspmx.l.google.com, 3 alt2.aspmx.l.google.com, 4 aspmx2.googlemail.com, 5 aspmx3.googlemail.com, 6 aspmx4.googlemail.com, 7 aspmx5.googlemail.com
NS
redbusprimarydns.wn.com, redbussecondarydns.wn.com
TXT
v=spf1 mx include:_spf.google.com include:spf.mandrillapp.com include:servers.mcsv.net ip4:195.149.84.0/24 ip6:2001:67c:38c::/48 -all
CNAME
—
CAA
—
WHOIS / Registration
Registration data planned
Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.
Subdomains
Subdomain enumeration pending
Every subdomain ever issued a TLS cert under this apex — extracted from Certificate Transparency logs, our own scan observations and body references.
Tech Stack
Tech detection pending
Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.
TLS Certificates
Subject: copyrightakedown.com
Issuer: YE2
SANs: copyrightakedown.com, www.copyrightakedown.com
Subject: sandlakefundtown.com
Issuer: sslTrus (RSA) DV CA
SANs: sandlakefundtown.com, www.sandlakefundtown.com
Subject: vpn.cypresslawn.com
Issuer: Go Daddy Secure Certificate Authority - G2
SANs: vpn.cypresslawn.com, www.vpn.cypresslawn.com
Subject: bd.duodown.com
Issuer: YR1
SANs: bd.duodown.com
Subject: www.englishtown.com
Issuer: GeoTrust TLS RSA CA G1
SANs: ak.frontrunner.ef.com, ak.highflyers.ef.com, ak.trailblazers.ef.com, akmedia.frontrunner.ef.com, akmedia.highflyers.ef.com, akmedia.trailblazers.ef.com, app.efset.org, cdn.efset.org, ec.ef-cdn.com, ec1.ef-cdn.com, ec2.ef-cdn.com, englishtown.com, et.ef-cdn.com, et1.ef-cdn.com, et2.ef-cdn.com, hult.ef-cdn.com, hultmedia.ef-cdn.com, media.eftours.com, nvk.ef-cdn.com, nvk1.ef-cdn.com, nvk2.ef-cdn.com, qa-app.efset.org, qa-cdn.efset.org, qa-ec.ef-cdn.com, qa-et.ef-cdn.com, qa-hult.ef-cdn.com, qa-nvk.ef-cdn.com, qa.efset.org, stg-app.efset.org, stg-cdn.efset.org, stg-ec.ef-cdn.com, stg-et.ef-cdn.com, stg-hult.ef-cdn.com, stg-nvk.ef-cdn.com, stg.efset.org, www.efset.org, www.englishtown.com
Subject: static.askyawn.com
Issuer: WR3
SANs: static.askyawn.com
Subject: sovdawn.com
Issuer: YE1
SANs: sovdawn.com, sovdawn.kicks-ass.net, www.sovdawn.com
Subject: ekdawn.com
Issuer: YE1
SANs: 12.ekdawn.com, berylfire.com, cloudy.horse64.org, contactmail.ekdawn.com, ekdawn.com, files.ekdawn.com, horse64.com, horse64.net, horse64.org, m64.horse64.org, mail.ekdawn.com, packages.horse64.org, private.horse64.org, rfs-api.horse64.org, rfs.horse64.org, root.horse64.org, stream.ekdawn.com, thatwriterellie.ekdawn.com, webtest.horse64.org, www.berylfire.com, www.ekdawn.com, www.horse64.com, www.horse64.net, www.horse64.org
Subject: aigcdown.com
Issuer: YR2
SANs: aigcdown.com, app.aigcdown.com, www.aigcdown.com
Subject: newhouseintown.com
Issuer: Encryption Everywhere DV TLS CA - G2
SANs: newhouseintown.com, www.newhouseintown.com
Subject: copadavis.showdown.com.mx
Issuer: YR1
SANs: copadavis.showdown.com.mx
Subject: *.sillytown.com
Issuer: YR2
SANs: *.sillytown.com, sillytown.com
Subject: johanbrown.com
Issuer: YE1
SANs: johanbrown.com, o-wow.net, olibrary.johanbrown.com, www.johanbrown.com, www.o-wow.net
Subject: partner.crown.com
Issuer: DigiCert EV RSA CA G2
SANs: partner.crown.com
Subject: *.simstown.com
Issuer: YR1
SANs: *.simstown.com, simstown.com
Subject: ah.hibiya.tokyo-midtown.com
Issuer: Cybertrust Japan SureServer CA G4
SANs: ah.hibiya.tokyo-midtown.com
Subject: remote.webrown.com
Issuer: RapidSSL TLS RSA CA G1
SANs: remote.webrown.com, www.remote.webrown.com
Subject: www.englishtown.com
Issuer: GeoTrust TLS RSA CA G1
SANs: ak.frontrunner.ef.com, ak.highflyers.ef.com, ak.trailblazers.ef.com, akmedia.frontrunner.ef.com, akmedia.highflyers.ef.com, akmedia.trailblazers.ef.com, app.efset.org, cdn.efset.org, ec.ef-cdn.com, ec1.ef-cdn.com, ec2.ef-cdn.com, englishtown.com, et.ef-cdn.com, et1.ef-cdn.com, et2.ef-cdn.com, hult.ef-cdn.com, hultmedia.ef-cdn.com, media.eftours.com, nvk.ef-cdn.com, nvk1.ef-cdn.com, nvk2.ef-cdn.com, qa-app.efset.org, qa-cdn.efset.org, qa-ec.ef-cdn.com, qa-et.ef-cdn.com, qa-hult.ef-cdn.com, qa-nvk.ef-cdn.com, qa.efset.org, stg-app.efset.org, stg-cdn.efset.org, stg-ec.ef-cdn.com, stg-et.ef-cdn.com, stg-hult.ef-cdn.com, stg-nvk.ef-cdn.com, stg.efset.org, www.efset.org, www.englishtown.com
Subject: waodown.com
Issuer: TrustAsia DV TLS RSA CA 2024
SANs: waodown.com, www.waodown.com
Subject: spitfire.vancebrown.com
Issuer: GeoTrust TLS RSA CA G1
SANs: spitfire.vancebrown.com
Subject: *.yaotown.com
Issuer: RapidSSL TLS RSA CA G1
SANs: *.yaotown.com, yaotown.com
Subject: rdg.sterlingtown.com
Issuer: Starfield Secure Certificate Authority - G2
SANs: rdg.sterlingtown.com, www.rdg.sterlingtown.com
Subject: mail.whyismyperiodbrown.com
Issuer: YE2
SANs: mail.whyismyperiodbrown.com
Subject: *.upvsdown.com
Issuer: Sectigo RSA Domain Validation Secure Server CA
SANs: *.upvsdown.com, upvsdown.com
Subject: *.florencetown.com
Issuer: RapidSSL TLS RSA CA G1
SANs: *.florencetown.com, florencetown.com
Subject: *.upvsdown.com
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.upvsdown.com, upvsdown.com
Subject: *.funtown.com.tw
Issuer: Sectigo RSA Organization Validation Secure Server CA
SANs: *.funtown.com.tw, funtown.com.tw
Subject: *.americandawn.com
Issuer: GoDaddy TLS Intermediate CA DV - R1v1
SANs: *.americandawn.com, americandawn.com
Subject: *.watchourown.com
Issuer: Go Daddy Secure Certificate Authority - G2
SANs: *.watchourown.com, watchourown.com
Subject: *.moddown.com
Issuer: GeoTrust G2 TLS CN RSA4096 SHA256 2022 CA1
SANs: *.moddown.com, moddown.com
IPs Citing This Domain
Hosts whose HTML body references this domain. Strong signal for origin/mirror/embed discovery.
195.149.84.100:80
href · ×771
195.149.84.110:80
href · ×389
195.149.84.110:443
href · ×361
195.149.84.32:443
href · ×357
46.249.196.56:80
href · ×1
Origin / IP-Leak
USP
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
No origin-IP leaks detected (yet)
Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.
Threat Intelligence
Domain threat-intel pending
Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.
History
Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.
| Type | Value | First seen | Last seen |
|---|---|---|---|
| A | 195.149.84.101 | 2026-05-26 14:39:36.757 | 2026-07-28 12:54:15.595 |
| AAAA | 2001:67c:38c::64 | 2026-05-26 14:39:36.757 | 2026-07-28 12:54:15.595 |
| MX | 5 aspmx3.googlemail.com | 2026-05-26 14:39:36.757 | 2026-07-28 12:54:15.595 |
| TXT | v=spf1 mx include:_spf.google.com include:spf.mandrillapp.com include:servers.mcsv.net ip4:195.149.84.0/24 ip6:2001:67c:38c::/48 -all | 2026-05-26 14:39:36.757 | 2026-07-28 12:54:15.595 |
| A | 195.149.84.100 | 2026-05-26 14:39:36.757 | 2026-07-28 12:54:15.595 |
| MX | 6 aspmx4.googlemail.com | 2026-05-26 14:39:36.757 | 2026-07-28 12:54:15.595 |
| AAAA | 2001:67c:38c::65 | 2026-05-26 14:39:36.757 | 2026-07-28 12:54:15.595 |
| NS | redbussecondarydns.wn.com | 2026-05-26 14:39:36.757 | 2026-07-28 12:54:15.595 |
| MX | 3 alt2.aspmx.l.google.com | 2026-05-26 14:39:36.757 | 2026-07-28 12:54:15.595 |
| MX | 4 aspmx2.googlemail.com | 2026-05-26 14:39:36.757 | 2026-07-28 12:54:15.595 |
| MX | 1 aspmx.l.google.com | 2026-05-26 14:39:36.757 | 2026-07-28 12:54:15.595 |
| NS | redbusprimarydns.wn.com | 2026-05-26 14:39:36.757 | 2026-07-28 12:54:15.595 |
| MX | 2 alt1.aspmx.l.google.com | 2026-05-26 14:39:36.757 | 2026-07-28 12:54:15.595 |
| MX | 7 aspmx5.googlemail.com | 2026-05-26 14:39:36.757 | 2026-07-28 12:54:15.595 |