Domain
s.id
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of s.id
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
Hosting IPs
6
A/AAAA targets
Subdomains
33
CT + scan + body
Record Types
5
seen in DNS
Observed Certs
15
in our scans
DNS Records
A
104.26.0.149, 104.26.1.149, 172.67.68.185
AAAA
2606:4700:20::681a:195, 2606:4700:20::681a:95, 2606:4700:20::ac43:44b9
MX
10 mail.s.id, 10 users.pandi.id, 9 mail.adg.id
NS
elijah.ns.cloudflare.com, magdalena.ns.cloudflare.com
TXT
google-gws-recovery-domain-verification=52787658, google-site-verification=ND8fdMM37VqYMuaqz-kGvBBxM1B6zqxOdaZnSb32vBE, google-site-verification=i-Buqafmw8gEcy_tN36jqr2_wFi9jNgK_8sfqzv704s, google-site-verification=jFXXXfP-5j1444VIVQxxqdeGbg-5jUPf_ru2F5x_5a8, google-site-verification=k9b75WcL9ECjps5ri4IifUSOEvKum9r9vn9OjNVRPDY, v=spf1 ip4:45.126.58.130 ip4:103.19.176.109 include:amazonses.com -all
CNAME
—
CAA
—
WHOIS / Registration
Registration data planned
Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.
Subdomains
Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.
| Subdomain | Resolves to | Last seen |
|---|---|---|
| api-uat.s.id | 2026-06-15 04:19:34.285 | |
| app-uat.s.id | 2026-07-19 22:14:36.975 | |
| assets-uat.s.id | 2026-07-19 22:14:36.975 | |
| dash-uat.s.id | 2026-07-15 09:36:04.871 | |
| s.id | 2026-07-28 02:31:53.233 | |
| adm-uat.s.id | 1970-01-01 00:00:00.000 | |
| adm.s.id | 1970-01-01 00:00:00.000 | |
| api.s.id | 1970-01-01 00:00:00.000 | |
| app.s.id | 1970-01-01 00:00:00.000 | |
| assets.s.id | 1970-01-01 00:00:00.000 | |
| blog-uat.s.id | 1970-01-01 00:00:00.000 | |
| blog.s.id | 1970-01-01 00:00:00.000 | |
| home-t.s.id | 1970-01-01 00:00:00.000 | |
| home-uat.s.id | 1970-01-01 00:00:00.000 | |
| home.s.id | 1970-01-01 00:00:00.000 | |
| microsite-uat.s.id | 1970-01-01 00:00:00.000 | |
| microsite.s.id | 1970-01-01 00:00:00.000 | |
| nl2.s.id | 1970-01-01 00:00:00.000 | |
| reseller.s.id | 1970-01-01 00:00:00.000 | |
| shop.s.id | 1970-01-01 00:00:00.000 | |
| status.s.id | 1970-01-01 00:00:00.000 |
Tech Stack
Tech detection pending
Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.
TLS Certificates
Subject: groundtools-services.idds.boeingservices.com
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: groundtools-services.idds.boeingservices.com, uat.groundtools-services.idds.digitalaviationservices.com
Subject: *.pmisys.id
Issuer: Sectigo RSA Domain Validation Secure Server CA
SANs: *.pmisys.id, pmisys.id
Subject: *.accounts.idenvs.com
Issuer: DigiCert Global G3 TLS ECC SHA384 2020 CA1
SANs: *.accounts.idenvs.com, accounts.idenvs.com
Subject: *.dim-ads.id
Issuer: RapidSSL TLS RSA CA G1
SANs: *.dim-ads.id, dim-ads.id
Subject: *.curtis.idm.oclc.org
Issuer: OCLC TLS Issuing RSA SubCA R1
SANs: *.curtis.idm.oclc.org, curtis.idm.oclc.org
Subject: us-gov-west-1.prod.account-events.identity.aws.dev
Issuer: Amazon RSA 2048 M04
SANs: us-gov-west-1.prod.account-events.identity.aws.dev
Subject: api.console.staging.mlm.indogames.id
Issuer: YR2
SANs: api.console.staging.mlm.indogames.id
Subject: cloud.fibermaxs.id
Issuer: YE2
SANs: cloud.fibermaxs.id
Subject: id2enroll.mcas.id2access.com
Issuer: Amazon RSA 2048 M04
SANs: id2enroll.mcas.id2access.com
Subject: albatross.idn.lv
Issuer: YE1
SANs: albatross.idn.lv
Subject: streaming.klcbs.id
Issuer: YE1
SANs: streaming.klcbs.id, streaming.klcbsofficial.com
Subject: mitrawiramas.id
Issuer: YR1
SANs: mitrawiramas.id, www.mitrawiramas.id
Subject: eps.idealpartners.com
Issuer: R3
SANs: eps.idealpartners.com
Subject: *.wrs.idm.oclc.org
Issuer: OCLC TLS Issuing RSA SubCA R1
SANs: *.wrs.idm.oclc.org, wrs.idm.oclc.org
Subject: *.praxis.id
Issuer: Sectigo Public Server Authentication CA OV R36
SANs: *.praxis.id, praxis.id
Subject: v2.whatbrideneeds.id
Issuer: YE2
SANs: v2.api.whatbrideneeds.id, v2.whatbrideneeds.id
Subject: belajarcpns.id
Issuer: YR2
SANs: belajarcpns.id, www.belajarcpns.id
Subject: xpress.idisc.es
Issuer: R3
SANs: idisc.cat, idisc.com.es, idisc.com.mx, idisc.eu, idisc.info, idisc.lat, idisc.mx, idisc.net, idisc.pt, idisc.us, idiscit.com, seguretat.idisc.cat, seguretat.idisc.com, seguretat.idisc.es, seguridad.idisc.cat, seguridad.idisc.com, seguridad.idisc.es, www.idisc.cat, www.idisc.com.es, www.idisc.com.mx, www.idisc.eu, www.idisc.info, www.idisc.lat, www.idisc.mx, www.idisc.net, www.idisc.pt, www.idisc.us, www.idiscit.com, xpress.idisc.cat, xpress.idisc.es, xpress.idisc.mx, xpress.idisc.net
Subject: *.xapiens.id
Issuer: SSL.com RSA SSL subCA
SANs: *.xapiens.id, xapiens.id
Subject: orleans.idvision.fr
Issuer: YE1
SANs: orleans.idvision.fr
Subject: apis.idhws.com
Issuer: YE2
SANs: apis.idhws.com
Subject: docs.iddsport.com
Issuer: YR2
SANs: docs.iddsport.com
Subject: *.pmisys.id
Issuer: Sectigo RSA Domain Validation Secure Server CA
SANs: *.pmisys.id, pmisys.id
Subject: indogamers.id
Issuer: YR2
SANs: indogamers.id, www.indogamers.id
Subject: server.bks.id
Issuer: YR2
SANs: server.bks.id
Subject: panel.wikilabs.id
Issuer: YR2
SANs: panel.wikilabs.id
Subject: allseasons.id
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: allseasons.id, www.allseasons.id
Subject: *.accounts.idenvs.com
Issuer: DigiCert Global G3 TLS ECC SHA384 2020 CA1
SANs: *.accounts.idenvs.com, accounts.idenvs.com
Subject: log.ap-paris-idpt.sls.idptcloud06api.alibaba
Issuer: RapidSSL TLS RSA CA G1
SANs: log.ap-paris-idpt.sls.idptcloud06api.alibaba, www.log.ap-paris-idpt.sls.idptcloud06api.alibaba
Subject: server.silagas.id
Issuer: server.silagas.id
SANs: server.silagas.id
IPs Citing This Domain
Hosts whose HTML body references this domain. Strong signal for origin/mirror/embed discovery.
154.12.50.191:80
href · ×10
168.138.178.121:8080
href · ×8
31.220.77.67:80
href · ×4
103.121.122.195:80
href · ×4
36.91.220.21:80
href · ×4
157.20.193.4:443
href · ×4
117.18.0.9:80
href · ×2
103.196.166.173:443
href · ×2
103.97.100.142:443
href · ×2
103.86.138.24:80
href · ×2
103.23.103.118:80
href · ×2
103.7.15.112:80
href · ×2
103.127.135.37:443
href · ×2
103.245.38.113:80
href · ×2
103.245.38.161:80
href · ×1
121.50.32.23:80
href · ×1
152.42.183.178:80
href · ×1
103.165.243.120:8081
href · ×1
157.245.192.248:443
href · ×1
43.157.248.73:80
href · ×1
210.48.222.84:443
href · ×1
45.32.119.0:80
href · ×1
103.174.223.121:443
href · ×1
103.235.75.206:443
href · ×1
103.17.178.13:443
href · ×1
139.180.137.107:443
href · ×1
49.50.10.105:80
href · ×1
103.151.155.37:443
href · ×1
64.23.200.108:443
href · ×1
103.107.245.165:443
href · ×1
103.129.148.54:443
href · ×1
103.179.89.98:443
href · ×1
103.47.60.46:80
href · ×1
103.5.148.42:80
href · ×1
114.7.195.178:80
href · ×1
103.205.56.45:443
href · ×1
Origin / IP-Leak
USP
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
No origin-IP leaks detected (yet)
Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.
Threat Intelligence
Domain threat-intel pending
Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.
History
Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.
| Type | Value | First seen | Last seen |
|---|---|---|---|
| MX | 10 mail.s.id | 2026-05-26 04:51:49.931 | 2026-07-28 02:31:53.233 |
| A | 104.26.1.149 | 2026-05-26 04:51:49.931 | 2026-07-28 02:31:53.233 |
| A | 104.26.0.149 | 2026-05-26 04:51:49.931 | 2026-07-28 02:31:53.233 |
| TXT | google-site-verification=k9b75WcL9ECjps5ri4IifUSOEvKum9r9vn9OjNVRPDY | 2026-05-26 04:51:49.931 | 2026-07-28 02:31:53.233 |
| TXT | google-site-verification=ND8fdMM37VqYMuaqz-kGvBBxM1B6zqxOdaZnSb32vBE | 2026-05-26 04:51:49.931 | 2026-07-28 02:31:53.233 |
| NS | magdalena.ns.cloudflare.com | 2026-05-26 04:51:49.931 | 2026-07-28 02:31:53.233 |
| AAAA | 2606:4700:20::ac43:44b9 | 2026-05-26 04:51:49.931 | 2026-07-28 02:31:53.233 |
| MX | 10 users.pandi.id | 2026-05-26 04:51:49.931 | 2026-07-28 02:31:53.233 |
| MX | 9 mail.adg.id | 2026-05-26 04:51:49.931 | 2026-07-28 02:31:53.233 |
| TXT | v=spf1 ip4:45.126.58.130 ip4:103.19.176.109 include:amazonses.com -all | 2026-05-26 04:51:49.931 | 2026-07-28 02:31:53.233 |
| A | 172.67.68.185 | 2026-05-26 04:51:49.931 | 2026-07-28 02:31:53.233 |
| TXT | google-gws-recovery-domain-verification=52787658 | 2026-05-26 04:51:49.931 | 2026-07-28 02:31:53.233 |
| TXT | google-site-verification=i-Buqafmw8gEcy_tN36jqr2_wFi9jNgK_8sfqzv704s | 2026-05-26 04:51:49.931 | 2026-07-28 02:31:53.233 |
| AAAA | 2606:4700:20::681a:95 | 2026-05-26 04:51:49.931 | 2026-07-28 02:31:53.233 |
| NS | elijah.ns.cloudflare.com | 2026-05-26 04:51:49.931 | 2026-07-28 02:31:53.233 |
| TXT | google-site-verification=jFXXXfP-5j1444VIVQxxqdeGbg-5jUPf_ru2F5x_5a8 | 2026-05-26 04:51:49.931 | 2026-07-28 02:31:53.233 |
| AAAA | 2606:4700:20::681a:195 | 2026-05-26 04:51:49.931 | 2026-07-28 02:31:53.233 |