Check-Host.cc
Try 1.1.1.1 AS13335 check-host.cc /country/de /tld/cc
Domain

402.so

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

DNS Check HTTP Check Run Full Scan .so TLD

Run a live full scan of 402.so

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now
Hosting IPs
1
A/AAAA targets
Subdomains
5
CT + scan + body
Record Types
3
seen in DNS
Observed Certs
2
in our scans

DNS Records

A
15.235.207.91
AAAA
—
MX
—
NS
ns1.premiumdoms.io, ns2.premiumdoms.io
TXT
2cw5ntfsdpkgd5ynahgmhpyqnu, 39705e7dbd9865f4e600700bdb849a2cd21d9f16, 3edae6422655b544fadec6f8d044fa4f88331ed6, 56bbda8726764ffcad38ff5414fc4ce7, 961de0bf-0042-4654-85ab-37e418504448, afternic-verification-WAGbpNQ88xSRJxZ7EbbzF2, d0add6ccb21bd461f70d01ccc3bf106d4867cd053b384de201e3022b05f1ccac, nameshift=cw0gk2
CNAME
—
CAA
—

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.

Subdomain Resolves to Last seen
402.so
15.235.207.91
2026-08-25 17:33:50.364
www.402.so
15.235.207.91
2026-08-25 17:33:50.364

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

Certificate observations pending

TLS certs naming this domain in subject or SANs will appear here as our scan-layer catches them.

IPs Citing This Domain

No citing IPs found yet

As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

No origin-IP leaks detected (yet)

Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.

CT-Log Evidence

Certificates from public Certificate Transparency logs whose subject or SAN names this domain — including historic certs we never observed live.

b26f17185ef4eed7… google · argon2026h2
Subject: www.domains.space
Issuer: YR1
SANs: 402.so, alts.gg, beach.xyz, bid.gg, boite.ai, build.space, client.sh, cna.xyz, con.xyz, coupons.sh, depin.sh, dividend.sh, domain.report, domains.space, dpth.ai, drift.sh, expert.sh, forex.xyz, fx.xyz, hevn.ai, hydrogen.sh, infiltrate.io, intrusion.io, kiosk.xyz, language.sh, legend.sh, lockedin.so, lovd.ai, meth.gg, mixer.sh, original.sh, pick.xyz, pki.xyz, press.sh, profit.sh, rapid.sh, rckt.ai, rflx.ai, scot.sh, stvl.xyz, ta.xyz, taint.io, tomorrow.sh, tradfi.xyz, triangle.sh, unicorn.sh, vision.xyz, watch.sh, www.402.so, www.alts.gg, www.beach.xyz, www.bid.gg, www.boite.ai, www.build.space, www.client.sh, www.cna.xyz, www.con.xyz, www.coupons.sh, www.depin.sh, www.dividend.sh, www.domain.report, www.domains.space, www.dpth.ai, www.drift.sh, www.expert.sh, www.forex.xyz, www.fx.xyz, www.hevn.ai, www.hydrogen.sh, www.infiltrate.io, www.intrusion.io, www.kiosk.xyz, www.language.sh, www.legend.sh, www.lockedin.so, www.lovd.ai, www.meth.gg, www.mixer.sh, www.original.sh, www.pick.xyz, www.pki.xyz, www.press.sh, www.profit.sh, www.rapid.sh, www.rckt.ai, www.rflx.ai, www.scot.sh, www.stvl.xyz, www.ta.xyz, www.taint.io, www.tomorrow.sh, www.tradfi.xyz, www.triangle.sh, www.unicorn.sh, www.vision.xyz, www.watch.sh, www.x402.so, x402.so
Valid: 2026-08-12 16:06:53 → 2026-11-10 16:06:52
fd34dc9abf576c2f… digicert · wyvern2026h2
Subject: www.domains.space
Issuer: YR1
SANs: 402.so, alts.gg, beach.xyz, bid.gg, boite.ai, build.space, client.sh, cna.xyz, con.xyz, coupons.sh, depin.sh, dividend.sh, domain.report, domains.space, dpth.ai, drift.sh, expert.sh, forex.xyz, fx.xyz, hevn.ai, hydrogen.sh, infiltrate.io, intrusion.io, kiosk.xyz, language.sh, legend.sh, lockedin.so, lovd.ai, meth.gg, mixer.sh, original.sh, pick.xyz, pki.xyz, press.sh, profit.sh, rapid.sh, rckt.ai, rflx.ai, scot.sh, stvl.xyz, ta.xyz, taint.io, tomorrow.sh, tradfi.xyz, triangle.sh, unicorn.sh, vision.xyz, watch.sh, www.402.so, www.alts.gg, www.beach.xyz, www.bid.gg, www.boite.ai, www.build.space, www.client.sh, www.cna.xyz, www.con.xyz, www.coupons.sh, www.depin.sh, www.dividend.sh, www.domain.report, www.domains.space, www.dpth.ai, www.drift.sh, www.expert.sh, www.forex.xyz, www.fx.xyz, www.hevn.ai, www.hydrogen.sh, www.infiltrate.io, www.intrusion.io, www.kiosk.xyz, www.language.sh, www.legend.sh, www.lockedin.so, www.lovd.ai, www.meth.gg, www.mixer.sh, www.original.sh, www.pick.xyz, www.pki.xyz, www.press.sh, www.profit.sh, www.rapid.sh, www.rckt.ai, www.rflx.ai, www.scot.sh, www.stvl.xyz, www.ta.xyz, www.taint.io, www.tomorrow.sh, www.tradfi.xyz, www.triangle.sh, www.unicorn.sh, www.vision.xyz, www.watch.sh, www.x402.so, x402.so
Valid: 2026-08-12 16:06:53 → 2026-11-10 16:06:52

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.

Type Value First seen Last seen
TXT nameshift=cw0gk2 2026-08-12 20:01:44.945 2026-08-25 17:33:50.364
TXT saw-market=a9e53b25-7298-4c48-94a1-cbf578c61394 2026-08-12 20:01:44.945 2026-08-25 17:33:50.364
NS ns2.premiumdoms.io 2026-08-12 20:01:44.945 2026-08-25 17:33:50.364
TXT 56bbda8726764ffcad38ff5414fc4ce7 2026-08-12 20:01:44.945 2026-08-25 17:33:50.364
TXT tsx80ms50hm6j7y7w97ce9kyrm43h5t95d7hjj5r 2026-08-12 20:01:44.945 2026-08-25 17:33:50.364
TXT d0add6ccb21bd461f70d01ccc3bf106d4867cd053b384de201e3022b05f1ccac 2026-08-12 20:01:44.945 2026-08-25 17:33:50.364
TXT v=spf1 +a +mx +ip4:15.235.207.91 ~all 2026-08-12 20:01:44.945 2026-08-12 20:01:44.945
TXT 39705e7dbd9865f4e600700bdb849a2cd21d9f16 2026-08-12 20:01:44.945 2026-08-25 17:33:50.364
TXT saw-market=2bedfc79-a526-4a9c-864e-c17cc5efaa50 2026-08-12 20:01:44.945 2026-08-25 17:33:50.364
TXT 3edae6422655b544fadec6f8d044fa4f88331ed6 2026-08-12 20:01:44.945 2026-08-25 17:33:50.364
TXT afternic-verification-WAGbpNQ88xSRJxZ7EbbzF2 2026-08-12 20:01:44.945 2026-08-25 17:33:50.364
A 15.235.207.91 2026-08-12 20:01:44.945 2026-08-25 17:33:50.364
NS ns1.premiumdoms.io 2026-08-12 20:01:44.945 2026-08-25 17:33:50.364
TXT 2cw5ntfsdpkgd5ynahgmhpyqnu 2026-08-12 20:01:44.945 2026-08-25 17:33:50.364
TXT 961de0bf-0042-4654-85ab-37e418504448 2026-08-12 20:01:44.945 2026-08-25 17:33:50.364
TXT saw-market=614837ea-e414-42ef-b977-e72f6f7d227 2026-08-25 17:33:50.364 2026-08-25 17:33:50.364