Domain
so.com
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of so.com
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
Hosting IPs
—
A/AAAA targets
Subdomains
—
CT + scan + body
Record Types
—
seen in DNS
Observed Certs
—
in our scans
DNS Records
A
104.192.110.226
AAAA
—
MX
—
NS
dns1.360safe.com, dns2.360safe.com, dns3.360safe.com, dns7.360safe.com, dns8.360safe.com, dns9.360safe.com
TXT
9eb0c5f406eb4a7e49d01e5ddc441b544e844a991e554eaf8e9bc334e3e5463e, bb2d51db8345014285466ee75f74ce0bd16b6fdd46eb30ae08b68534b16e6638, v=spf1 include:spf1.360.cn -all
CNAME
—
CAA
—
WHOIS / Registration
Registration data planned
Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.
Subdomains
Subdomain enumeration pending
Every subdomain ever issued a TLS cert under this apex — extracted from Certificate Transparency logs, our own scan observations and body references.
Tech Stack
Tech detection pending
Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.
TLS Certificates
Subject: prod.tanobolso.com.br
Issuer: YR2
SANs: prod.tanobolso.com.br, tanobolso.com.br, www.tanobolso.com.br
Subject: *.nespresso.com
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: *.nespresso.com, nespresso.com
Subject: *.oci.nespresso.com
Issuer: DigiCert Global G3 TLS ECC SHA384 2020 CA1
SANs: *.oci.nespresso.com, oci.nespresso.com
Subject: *.janrainsso.com
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: *.au.janrainsso.com, *.eu.janrainsso.com, *.janrainsso.com, *.sg.janrainsso.com, *.us.janrainsso.com, au.janrainsso.com, eu.janrainsso.com, janrainsso.com, sg.janrainsso.com, us.janrainsso.com
Subject: *.globalso.com
Issuer: Certum DV TLS G2 R39 CA
SANs: *.globalso.com, globalso.com
Subject: sa.atgso.com.cn
Issuer: LiteSSL RSA CA 2025
SANs: sa.atgso.com.cn
Subject: *.nespresso.com
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: *.nespresso.com, nespresso.com
Subject: optomcongreso.com
Issuer: Thawte RSA CA 2018
SANs: optomcongreso.com, www.optomcongreso.com
Subject: *.rfc-friso.com
Issuer: DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1
SANs: *.rfc-friso.com, rfc-friso.com
Subject: *.globalso.com
Issuer: Certum DV TLS G2 R39 CA
SANs: *.globalso.com, globalso.com
Subject: vietyen.bacninhso.com
Issuer: YE2
SANs: api.vietyen.bacninhso.com, vietyen.bacninhso.com
Subject: *.globalso.com
Issuer: Certum DV TLS G2 R39 CA
SANs: *.globalso.com, globalso.com
Subject: lote-dev.api.enseso.com
Issuer: YE1
SANs: lote-dev-dl.enseso.com, lote-dev.api.enseso.com, lote-dev.capture.enseso.com, lote-dev.enseso.com, lote-dev.helper.enseso.com, lote-dev.sync.enseso.com, wfl.enseso.com
Subject: b2b.also.com
Issuer: GeoTrust TLS RSA CA G1
SANs: b2b.actebis.com, b2b.also.com
Subject: ssl4.denso.com
Issuer: DigiCert Global G3 TLS ECC SHA384 2020 CA1
SANs: denso-group1216.denso.com, dichdsc.denso.com.cn, dichgit.denso.com.cn, dmgzsmse.denso.com.cn, dmgzsmsewh.denso.com.cn, doss.denso.com.cn, qtreserv.q-revo-test.com, service.denso.co.th, ssl4.denso.com, supplier.nadenso.com, supplieruat.nadenso.com, supplierweb.nadenso.com, supplierwebuat.nadenso.com, techday.j-quad.co.jp, weborder.denso.com.sg, workpermit.siamdenso.co.th, www.carsolpf.com, www.denso-blossom.co.jp, www.denso-create.jp, www.denso-ten.com, www.denso-ts.com, www.denso-yamagata.co.jp, www.denso.co.id, www.denso.cz, www.dnas.co.jp, www.dnhems.com, www.eclipse-td.com, www.eclipse-web.com, www.fujitsu-ten.co.jp, www.fujitsu-ten.com, www.hondaopensourcefh.com, www.kobejazz.jp, www.tdet.co.th, www.userlist-eclipse-td.com
Subject: *.globalso.com
Issuer: Certum DV TLS G2 R39 CA
SANs: *.globalso.com, globalso.com
Subject: *.globalso.com
Issuer: Certum DV TLS G2 R39 CA
SANs: *.globalso.com, globalso.com
Subject: *.nespresso.com
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: *.nespresso.com, nespresso.com
Subject: *.oci.nespresso.com
Issuer: DigiCert Global G3 TLS ECC SHA384 2020 CA1
SANs: *.oci.nespresso.com, oci.nespresso.com
Subject: ssl3.denso.com
Issuer: DigiCert Global G3 TLS ECC SHA384 2020 CA1
SANs: ad-osm.denso.co.jp, dicas.densokorea.com, dichtzdsc.denso.com.cn, drs.densokorea.com, dsbox.denso-solution.com, dswpm.denso-solution.com, fa.denso.com, fornecedores.denso.com.br, gitlab.autoid.denso-wave.co.jp, m.qrqrq.com, nsbr05.denso.com.br, portal.denso.com.br, recof.denso.com.br, recruit.densokorea.com, s10004imweb.denso-daishin.co.jp, samrai-mobile.denso-solution.co.jp, ssl3.denso.com, supplierinfo.denso.com.cn, visit.densokorea.com, www-test.dnhems.com, www.aubass.co.jp, www.aubass.com, www.comp-system.com, www.denso-careers.com, www.denso-electronics.com, www.denso-recruit.jp, www.denso-service-hokurikukai.com, www.drivenippon.com, www.dsjp-ems-ele.com, www.service-reports.denso-wave.com
Subject: ssl3.denso.com
Issuer: DigiCert Global G3 TLS ECC SHA384 2020 CA1
SANs: ad-osm.denso.co.jp, dicas.densokorea.com, dichtzdsc.denso.com.cn, drs.densokorea.com, dsbox.denso-solution.com, dswpm.denso-solution.com, fa.denso.com, fornecedores.denso.com.br, gitlab.autoid.denso-wave.co.jp, m.qrqrq.com, nsbr05.denso.com.br, portal.denso.com.br, recof.denso.com.br, recruit.densokorea.com, s10004imweb.denso-daishin.co.jp, samrai-mobile.denso-solution.co.jp, ssl3.denso.com, supplierinfo.denso.com.cn, visit.densokorea.com, www-test.dnhems.com, www.aubass.co.jp, www.aubass.com, www.comp-system.com, www.denso-careers.com, www.denso-electronics.com, www.denso-recruit.jp, www.denso-service-hokurikukai.com, www.drivenippon.com, www.dsjp-ems-ele.com, www.service-reports.denso-wave.com
Subject: *.so.com
Issuer: WoTrus DV Server CA [Run by the Issuer]
SANs: *.app.m.so.com, *.baike.so.com, *.fanyi.so.com, *.haoso.com, *.haosou.com, *.haosou.com.cn, *.haosou.net, *.image.so.com, *.m.so.com, *.map.so.com, *.news.so.com, *.onebox.so.com, *.so.360.cn, *.so.com, *.ssl.so.com, *.sug.so.com, *.tu.so.com, *.tupian.so.com, *.wenda.so.com, *.www.so.com, app.m.so.com, baike.so.com, fanyi.so.com, haoso.com, haosou.com, haosou.com.cn, haosou.net, image.so.com, m.so.com, map.so.com, news.so.com, onebox.so.com, so.360.cn, so.com, ssl.so.com, sug.so.com, tu.so.com, tupian.so.com, wenda.so.com, www.haoso.com, www.haosou.com, www.haosou.net, www.so.com
Subject: samereso.com
Issuer: YR1
SANs: samereso.com, www.samereso.com
Subject: wavefinancial.cloudflaresso.com
Issuer: WE1
SANs: *.wavefinancial.cloudflaresso.com, wavefinancial.cloudflaresso.com
Subject: amount.cloudflaresso.com
Issuer: WE1
SANs: *.amount.cloudflaresso.com, amount.cloudflaresso.com
Subject: ssl2.denso.com
Issuer: DigiCert Global G3 TLS ECC SHA384 2020 CA1
SANs: fqr-businesscard.q-revo.com, gate.dcinc.jp, pass-portal.denso.co.th, secure.denso-careers.com, ssl2.denso.com, test.dnwu.jp, www.d-katsuyama.com, www.ddd.co.jp, www.denso-create.blog, www.denso-daishin.co.jp, www.denso-fukushima.co.jp, www.denso-fy.co.jp, www.denso-hokkaido.co.jp, www.denso-logitem.com, www.denso-mtec.co.jp, www.denso-si-solution.com, www.denso-taiyo.co.jp, www.denso-wave.com, www.denso-welfare-reservation.com, www.denso-wipersys.com, www.densofacilities.co.jp, www.densoremani.co.jp, www.densotechno.co.jp, www.densotrim.co.jp, www.dnwu.jp, www.fa-manuals.denso-wave.com, www.lifevision.net, www.lightning-review.com, www.nextdesign.app, www.nwb.co.jp, www.originaldesignmanufacturer.com, www.qrcode.com, www.remo.jp, www.sankyo-rad.co.jp, www.soken-labs.com, www.timetracker.jp
Subject: *.aidso.com
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.aidso.com, aidso.com
Subject: www.ebidding.storaenso.com.cn
Issuer: Corporation Service Company RSA OV SSL CA 2
SANs: ebidding.storaenso.com.cn, www.ebidding.storaenso.com.cn
Subject: angelfructuoso.com
Issuer: R13
SANs: angelfructuoso.com, www.angelfructuoso.com
Subject: sanluisobiso.com
Issuer: YR2
SANs: sanluisobiso.com
IPs Citing This Domain
No citing IPs found yet
As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.
Origin / IP-Leak
USP
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
No origin-IP leaks detected (yet)
Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.
CT-Log Evidence
Certificates from public Certificate Transparency logs whose subject or SAN names this domain — including historic certs we never observed live.
c30457723cf57411…
google · xenon2026h2
Subject: map.360.cn
Issuer: WoTrus DV Server CA [Run by the Issuer]
SANs: map.360.cn, *.haosou.com, *.map.haosou.com, *.map.so.com, *.so.com, api.map.360.cn, haosou.com, m.map.360.cn, map.haosou.com, map.so.com, restapi.map.360.cn, so.com
Valid: 2025-09-09 00:00:00 → 2026-10-10 23:59:59
fca0073043b4aa82…
google · argon2026h2
Subject: map.360.cn
Issuer: WoTrus DV Server CA [Run by the Issuer]
SANs: map.360.cn, *.haosou.com, *.map.haosou.com, *.map.so.com, *.so.com, api.map.360.cn, haosou.com, m.map.360.cn, map.haosou.com, map.so.com, restapi.map.360.cn, so.com
Valid: 2025-09-09 00:00:00 → 2026-10-10 23:59:59
199acf4d3da87e77…
google · argon2026h2
Subject: *.so.com
Issuer: WoTrus DV Server CA [Run by the Issuer]
SANs: *.so.com, *.app.m.so.com, *.baike.so.com, *.fanyi.so.com, *.haoso.com, *.haosou.com, *.haosou.com.cn, *.haosou.net, *.image.so.com, *.m.so.com, *.map.so.com, *.news.so.com, *.onebox.so.com, *.so.360.cn, *.ssl.so.com, *.sug.so.com, *.tu.so.com, *.tupian.so.com, *.wenda.so.com, *.www.so.com, app.m.so.com, baike.so.com, fanyi.so.com, haoso.com, haosou.com, haosou.com.cn, haosou.net, image.so.com, m.so.com, map.so.com, news.so.com, onebox.so.com, so.360.cn, so.com, ssl.so.com, sug.so.com, tu.so.com, tupian.so.com, wenda.so.com, www.haoso.com, www.haosou.com, www.haosou.net, www.so.com
Valid: 2025-08-28 00:00:00 → 2026-09-28 23:59:59
fe0d0ad8d8ce9302…
google · argon2026h2
Subject: *.so.com
Issuer: WoTrus DV Server CA [Run by the Issuer]
SANs: *.so.com, *.app.m.so.com, *.baike.so.com, *.fanyi.so.com, *.haoso.com, *.haosou.com, *.haosou.com.cn, *.haosou.net, *.image.so.com, *.m.so.com, *.map.so.com, *.news.so.com, *.onebox.so.com, *.so.360.cn, *.ssl.so.com, *.sug.so.com, *.tu.so.com, *.tupian.so.com, *.wenda.so.com, *.www.so.com, app.m.so.com, baike.so.com, fanyi.so.com, haoso.com, haosou.com, haosou.com.cn, haosou.net, image.so.com, m.so.com, map.so.com, news.so.com, onebox.so.com, so.360.cn, so.com, ssl.so.com, sug.so.com, tu.so.com, tupian.so.com, wenda.so.com, www.haoso.com, www.haosou.com, www.haosou.net, www.so.com
Valid: 2025-08-28 00:00:00 → 2026-09-28 23:59:59
Threat Intelligence
Domain threat-intel pending
Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.
History
Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.
| Type | Value | First seen | Last seen |
|---|---|---|---|
| A | 104.192.110.226 | 2026-05-25 21:32:03.363 | 2026-07-28 16:02:09.164 |
| NS | dns2.360safe.com | 2026-05-25 23:59:40.866 | 2026-05-27 17:11:49.618 |
| NS | dns8.360safe.com | 2026-05-25 23:59:40.866 | 2026-05-27 17:11:49.618 |
| NS | dns9.360safe.com | 2026-05-25 23:59:40.866 | 2026-05-27 17:11:49.618 |
| NS | dns3.360safe.com | 2026-05-25 23:59:40.866 | 2026-05-27 17:11:49.618 |
| NS | dns1.360safe.com | 2026-05-25 23:59:40.866 | 2026-05-27 17:11:49.618 |
| TXT | bb2d51db8345014285466ee75f74ce0bd16b6fdd46eb30ae08b68534b16e6638 | 2026-05-25 23:59:40.866 | 2026-05-27 17:11:49.618 |
| NS | dns7.360safe.com | 2026-05-25 23:59:40.866 | 2026-05-27 17:11:49.618 |
| TXT | 9eb0c5f406eb4a7e49d01e5ddc441b544e844a991e554eaf8e9bc334e3e5463e | 2026-05-25 23:59:40.866 | 2026-05-27 17:11:49.618 |
| TXT | v=spf1 include:spf1.360.cn -all | 2026-05-25 23:59:40.866 | 2026-05-27 17:11:49.618 |