Domain
go.th
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of go.th
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
Hosting IPs
—
A/AAAA targets
Subdomains
—
CT + scan + body
Record Types
—
seen in DNS
Observed Certs
—
in our scans
DNS Records
A
—
AAAA
—
MX
—
NS
—
TXT
—
CNAME
—
CAA
—
WHOIS / Registration
Registration data planned
Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.
Subdomains
Subdomain enumeration pending
Every subdomain ever issued a TLS cert under this apex — extracted from Certificate Transparency logs, our own scan observations and body references.
Tech Stack
Tech detection pending
Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.
TLS Certificates
Certificate observations pending
TLS certs naming this domain in subject or SANs will appear here as our scan-layer catches them.
IPs Citing This Domain
No citing IPs found yet
As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.
Origin / IP-Leak
USP
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
| Origin IP | Origin ASN | CDN ASN | Confidence | Reasoning |
|---|---|---|---|---|
| 159.192.99.148 | AS131090 | AS13335 | 95% | cert 49dd8da2… served by 159.192.99.148 (AS131090) carries SAN kalasin-pao.go.th which currently resolves through Cloudflare (AS13335) at 172.67.167.187, 104.21.12.217, 2606:4700:3037::6815:cd9, 2606:4700:3037::ac43:a7bb |
| 202.139.211.46 | AS135566 | AS8075 | 95% | cert 4b1a6611… served by 202.139.211.46 (AS135566) carries SAN autodiscover.nhso.go.th which currently resolves through Microsoft (AS8075) at 2603:1026:c11:915::8, 40.98.16.76, 2603:1026:900:3::f, 2603:1026:c11:919::8 |
| 202.139.211.33 | AS135566 | AS8075 | 95% | cert 4b1a6611… served by 202.139.211.33 (AS135566) carries SAN autodiscover.nhso.go.th which currently resolves through Microsoft (AS8075) at 52.98.232.24, 2603:1026:c03:7073::8, 52.97.200.136, 2603:1026:c03:3032::8 |
| 209.15.115.187 | AS135566 | AS13335 | 95% | cert 2cc17039… served by 209.15.115.187 (AS135566) carries SAN bangkok.go.th which currently resolves through Cloudflare (AS13335) at 104.18.25.169, 104.18.24.169 |
| 164.115.45.208 | AS9835 | AS13335 | 95% | cert 6924a1d8… served by 164.115.45.208 (AS9835) carries SAN bb.go.th which currently resolves through Cloudflare (AS13335) at 104.18.9.134, 104.18.8.134, 2606:4700::6812:886, 2606:4700::6812:986 |
| 14.207.128.140 | AS45458 | AS13335 | 95% | cert cce8de50… served by 14.207.128.140 (AS45458) carries SAN ieat.go.th which currently resolves through Cloudflare (AS13335) at 104.18.29.152, 104.18.28.152 |
| 14.207.128.145 | AS45458 | AS13335 | 95% | cert cce8de50… served by 14.207.128.145 (AS45458) carries SAN ieat.go.th which currently resolves through Cloudflare (AS13335) at 104.18.29.152, 104.18.28.152 |
| 202.139.212.201 | AS135566 | AS19551 | 95% | cert d9fec7db… served by 202.139.212.201 (AS135566) carries SAN boi.go.th which currently resolves through Imperva (AS19551) at 45.60.32.44, 45.60.38.44 |
| 209.15.113.90 | AS135566 | AS13335 | 95% | cert 8bfc7bb7… served by 209.15.113.90 (AS135566) carries SAN nso.go.th which currently resolves through Cloudflare (AS13335) at 104.26.2.138, 172.67.69.152, 104.26.3.138, 2606:4700:20::ac43:4598 |
| 203.209.117.134 | AS7693 | AS19551 | 95% | cert 2c73d3a6… served by 203.209.117.134 (AS7693) carries SAN dbd.go.th which currently resolves through Imperva (AS19551) at 45.60.35.172, 45.60.33.172 |
| 203.150.72.209 | AS4618 | AS13335 | 95% | cert 425dddfe… served by 203.150.72.209 (AS4618) carries SAN mots.go.th which currently resolves through Cloudflare (AS13335) at 172.67.223.212, 2a06:98c1:3121::, 2a06:98c1:3120::, 104.21.48.145 |
| 209.15.98.193 | AS135566 | AS13335 | 95% | cert 2bee8d98… served by 209.15.98.193 (AS135566) carries SAN bb.go.th which currently resolves through Cloudflare (AS13335) at 104.18.9.134, 104.18.8.134, 2606:4700::6812:886, 2606:4700::6812:986 |
| 203.157.168.77 | AS9649 | AS13335 | 95% | cert 918bd7cf… served by 203.157.168.77 (AS9649) carries SAN moph.go.th which currently resolves through Cloudflare (AS13335) at 104.18.4.156, 104.18.5.156, 2606:4700::6812:49c, 2606:4700::6812:59c |
| 202.139.202.61 | AS9835 | AS13335 | 95% | cert 69e6b553… served by 202.139.202.61 (AS9835) carries SAN moph.go.th which currently resolves through Cloudflare (AS13335) at 104.18.4.156, 104.18.5.156, 2606:4700::6812:49c, 2606:4700::6812:59c |
| 164.115.23.67 | AS9835 | AS19551 | 95% | cert b1bf77c4… served by 164.115.23.67 (AS9835) carries SAN dld.go.th which currently resolves through Imperva (AS19551) at 45.60.36.44, 45.60.34.44 |
| 203.209.117.169 | AS7693 | AS19551 | 95% | cert 2c73d3a6… served by 203.209.117.169 (AS7693) carries SAN dbd.go.th which currently resolves through Imperva (AS19551) at 45.60.35.172, 45.60.33.172 |
| 27.131.179.198 | AS24187 | AS13335 | 95% | cert 217f9913… served by 27.131.179.198 (AS24187) carries SAN cad.go.th which currently resolves through Cloudflare (AS13335) at 104.18.17.205, 104.18.16.205 |
| 164.115.45.96 | AS9835 | AS19551 | 95% | cert 7e638704… served by 164.115.45.96 (AS9835) carries SAN gdcatalog.go.th which currently resolves through Imperva (AS19551) at 45.60.36.44, 45.60.34.44 |
| 202.28.55.164 | AS4621 | AS19551 | 95% | cert 66bbae1e… served by 202.28.55.164 (AS4621) carries SAN mhesi.go.th which currently resolves through Imperva (AS19551) at 87.124.9.4, 2a02:e980:d2::3 |
| 209.15.119.24 | AS135566 | AS13335 | 95% | cert 69e6b553… served by 209.15.119.24 (AS135566) carries SAN moph.go.th which currently resolves through Cloudflare (AS13335) at 104.18.4.156, 104.18.5.156, 2606:4700::6812:49c, 2606:4700::6812:59c |
| 202.139.198.46 | AS135566 | AS13335 | 95% | cert 8bfc7bb7… served by 202.139.198.46 (AS135566) carries SAN nso.go.th which currently resolves through Cloudflare (AS13335) at 104.26.2.138, 172.67.69.152, 104.26.3.138, 2606:4700:20::ac43:4598 |
| 209.15.113.232 | AS135566 | AS19551 | 95% | cert d9fec7db… served by 209.15.113.232 (AS135566) carries SAN boi.go.th which currently resolves through Imperva (AS19551) at 45.60.32.44, 45.60.38.44 |
| 110.164.176.113 | AS45758 | AS19551 | 95% | cert 66e809c6… served by 110.164.176.113 (AS45758) carries SAN nacc.go.th which currently resolves through Imperva (AS19551) at 45.60.49.63, 45.60.47.63 |
| 110.164.59.182 | AS45758 | AS30148 | 95% | cert 4d05d893… served by 110.164.59.182 (AS45758) carries SAN hss.moph.go.th which currently resolves through Sucuri (AS30148) at 192.124.249.39 |
| 209.15.118.169 | AS135566 | AS13335 | 95% | cert f4a43d86… served by 209.15.118.169 (AS135566) carries SAN healthlink.go.th which currently resolves through Cloudflare (AS13335) at 172.66.162.90, 104.20.43.94, 2606:4700:10::ac42:a25a, 2606:4700:10::6814:2b5e |
Threat Intelligence
Domain threat-intel pending
Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.
History
Domain timeline pending
Passive-DNS history accumulates as our forward-DNS crawler observes A/AAAA/MX/NS/TXT records over time.