Domain
so.com
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of so.com
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
Hosting IPs
21
A/AAAA targets
Subdomains
151
CT + scan + body
Record Types
3
seen in DNS
Observed Certs
4
in our scans
DNS Records
A
—
AAAA
—
MX
—
NS
—
TXT
—
CNAME
—
CAA
—
WHOIS / Registration
Registration data planned
Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.
Subdomains
Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.
| Subdomain | Resolves to | Last seen |
|---|---|---|
| m.so.com | 2026-07-28 16:02:09.164 | |
| ai.so.com | 2026-07-21 18:01:40.440 | |
| chacha.so.com | 2026-07-22 09:42:26.799 | |
| e.so.com | 2026-07-26 01:35:16.053 | |
| image.so.com | 2026-07-28 16:02:09.164 | |
| map.so.com | 2026-07-28 16:02:09.164 | |
| news.so.com | 2026-07-26 18:04:46.919 | |
| spro.so.com | 2026-06-14 23:52:20.226 | |
| tu.so.com | 2026-06-22 00:04:36.859 | |
| tupian.so.com | 2026-06-22 00:04:36.859 | |
| www.so.com | 2026-07-28 18:18:26.354 | |
| aivod.onebox.so.com | 1970-01-01 00:00:00.000 | |
| app.m.so.com | 1970-01-01 00:00:00.000 | |
| app.so.com | 2026-05-27 11:49:57.393 | |
| baike.so.com | 2026-07-28 16:02:09.164 | |
| captcha.so.com | 1970-01-01 00:00:00.000 | |
| ditu.so.com | 1970-01-01 00:00:00.000 | |
| fanyi.so.com | 2026-07-28 16:02:09.164 | |
| index.so.com | 1970-01-01 00:00:00.000 | |
| info.so.com | 1970-01-01 00:00:00.000 | |
| ly.so.com | 2026-05-27 08:12:55.831 | |
| m.baike.so.com | 1970-01-01 00:00:00.000 | |
| m.image.so.com | 1970-01-01 00:00:00.000 | |
| m.map.so.com | 1970-01-01 00:00:00.000 | |
| m.news.so.com | 1970-01-01 00:00:00.000 | |
| m.wenda.so.com | 1970-01-01 00:00:00.000 | |
| music.so.com | 1970-01-01 00:00:00.000 | |
| onebox.so.com | 1970-01-01 00:00:00.000 | |
| so.com | 2026-07-28 16:02:09.164 | |
| soft.so.com | 2026-06-16 07:05:08.110 | |
| ssl.so.com | 1970-01-01 00:00:00.000 | |
| sug.so.com | 1970-01-01 00:00:00.000 | |
| trends.so.com | 2026-05-26 02:50:09.561 | |
| video.so.com | 2026-07-26 12:32:01.270 | |
| vod.baike.so.com | 1970-01-01 00:00:00.000 | |
| wenda.so.com | 1970-01-01 00:00:00.000 | |
| www.yunying.so.com | 1970-01-01 00:00:00.000 | |
| xinzhi.wenda.so.com | 2026-05-27 00:59:12.512 | |
| xueshu.so.com | 2026-06-22 09:20:14.839 | |
| yue.so.com | 1970-01-01 00:00:00.000 | |
| yunying.so.com | 1970-01-01 00:00:00.000 | |
| zhanzhang.so.com | 2026-05-26 21:52:25.161 |
Tech Stack
Tech detection pending
Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.
TLS Certificates
Subject: prod.tanobolso.com.br
Issuer: YR2
SANs: prod.tanobolso.com.br, tanobolso.com.br, www.tanobolso.com.br
Subject: *.nespresso.com
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: *.nespresso.com, nespresso.com
Subject: *.oci.nespresso.com
Issuer: DigiCert Global G3 TLS ECC SHA384 2020 CA1
SANs: *.oci.nespresso.com, oci.nespresso.com
Subject: *.janrainsso.com
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: *.au.janrainsso.com, *.eu.janrainsso.com, *.janrainsso.com, *.sg.janrainsso.com, *.us.janrainsso.com, au.janrainsso.com, eu.janrainsso.com, janrainsso.com, sg.janrainsso.com, us.janrainsso.com
Subject: *.globalso.com
Issuer: Certum DV TLS G2 R39 CA
SANs: *.globalso.com, globalso.com
Subject: sa.atgso.com.cn
Issuer: LiteSSL RSA CA 2025
SANs: sa.atgso.com.cn
Subject: *.nespresso.com
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: *.nespresso.com, nespresso.com
Subject: optomcongreso.com
Issuer: Thawte RSA CA 2018
SANs: optomcongreso.com, www.optomcongreso.com
Subject: *.rfc-friso.com
Issuer: DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1
SANs: *.rfc-friso.com, rfc-friso.com
Subject: *.globalso.com
Issuer: Certum DV TLS G2 R39 CA
SANs: *.globalso.com, globalso.com
Subject: vietyen.bacninhso.com
Issuer: YE2
SANs: api.vietyen.bacninhso.com, vietyen.bacninhso.com
Subject: *.globalso.com
Issuer: Certum DV TLS G2 R39 CA
SANs: *.globalso.com, globalso.com
Subject: lote-dev.api.enseso.com
Issuer: YE1
SANs: lote-dev-dl.enseso.com, lote-dev.api.enseso.com, lote-dev.capture.enseso.com, lote-dev.enseso.com, lote-dev.helper.enseso.com, lote-dev.sync.enseso.com, wfl.enseso.com
Subject: b2b.also.com
Issuer: GeoTrust TLS RSA CA G1
SANs: b2b.actebis.com, b2b.also.com
Subject: ssl4.denso.com
Issuer: DigiCert Global G3 TLS ECC SHA384 2020 CA1
SANs: denso-group1216.denso.com, dichdsc.denso.com.cn, dichgit.denso.com.cn, dmgzsmse.denso.com.cn, dmgzsmsewh.denso.com.cn, doss.denso.com.cn, qtreserv.q-revo-test.com, service.denso.co.th, ssl4.denso.com, supplier.nadenso.com, supplieruat.nadenso.com, supplierweb.nadenso.com, supplierwebuat.nadenso.com, techday.j-quad.co.jp, weborder.denso.com.sg, workpermit.siamdenso.co.th, www.carsolpf.com, www.denso-blossom.co.jp, www.denso-create.jp, www.denso-ten.com, www.denso-ts.com, www.denso-yamagata.co.jp, www.denso.co.id, www.denso.cz, www.dnas.co.jp, www.dnhems.com, www.eclipse-td.com, www.eclipse-web.com, www.fujitsu-ten.co.jp, www.fujitsu-ten.com, www.hondaopensourcefh.com, www.kobejazz.jp, www.tdet.co.th, www.userlist-eclipse-td.com
Subject: *.globalso.com
Issuer: Certum DV TLS G2 R39 CA
SANs: *.globalso.com, globalso.com
Subject: *.globalso.com
Issuer: Certum DV TLS G2 R39 CA
SANs: *.globalso.com, globalso.com
Subject: *.nespresso.com
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: *.nespresso.com, nespresso.com
Subject: *.oci.nespresso.com
Issuer: DigiCert Global G3 TLS ECC SHA384 2020 CA1
SANs: *.oci.nespresso.com, oci.nespresso.com
Subject: ssl3.denso.com
Issuer: DigiCert Global G3 TLS ECC SHA384 2020 CA1
SANs: ad-osm.denso.co.jp, dicas.densokorea.com, dichtzdsc.denso.com.cn, drs.densokorea.com, dsbox.denso-solution.com, dswpm.denso-solution.com, fa.denso.com, fornecedores.denso.com.br, gitlab.autoid.denso-wave.co.jp, m.qrqrq.com, nsbr05.denso.com.br, portal.denso.com.br, recof.denso.com.br, recruit.densokorea.com, s10004imweb.denso-daishin.co.jp, samrai-mobile.denso-solution.co.jp, ssl3.denso.com, supplierinfo.denso.com.cn, visit.densokorea.com, www-test.dnhems.com, www.aubass.co.jp, www.aubass.com, www.comp-system.com, www.denso-careers.com, www.denso-electronics.com, www.denso-recruit.jp, www.denso-service-hokurikukai.com, www.drivenippon.com, www.dsjp-ems-ele.com, www.service-reports.denso-wave.com
Subject: ssl3.denso.com
Issuer: DigiCert Global G3 TLS ECC SHA384 2020 CA1
SANs: ad-osm.denso.co.jp, dicas.densokorea.com, dichtzdsc.denso.com.cn, drs.densokorea.com, dsbox.denso-solution.com, dswpm.denso-solution.com, fa.denso.com, fornecedores.denso.com.br, gitlab.autoid.denso-wave.co.jp, m.qrqrq.com, nsbr05.denso.com.br, portal.denso.com.br, recof.denso.com.br, recruit.densokorea.com, s10004imweb.denso-daishin.co.jp, samrai-mobile.denso-solution.co.jp, ssl3.denso.com, supplierinfo.denso.com.cn, visit.densokorea.com, www-test.dnhems.com, www.aubass.co.jp, www.aubass.com, www.comp-system.com, www.denso-careers.com, www.denso-electronics.com, www.denso-recruit.jp, www.denso-service-hokurikukai.com, www.drivenippon.com, www.dsjp-ems-ele.com, www.service-reports.denso-wave.com
Subject: *.so.com
Issuer: WoTrus DV Server CA [Run by the Issuer]
SANs: *.app.m.so.com, *.baike.so.com, *.fanyi.so.com, *.haoso.com, *.haosou.com, *.haosou.com.cn, *.haosou.net, *.image.so.com, *.m.so.com, *.map.so.com, *.news.so.com, *.onebox.so.com, *.so.360.cn, *.so.com, *.ssl.so.com, *.sug.so.com, *.tu.so.com, *.tupian.so.com, *.wenda.so.com, *.www.so.com, app.m.so.com, baike.so.com, fanyi.so.com, haoso.com, haosou.com, haosou.com.cn, haosou.net, image.so.com, m.so.com, map.so.com, news.so.com, onebox.so.com, so.360.cn, so.com, ssl.so.com, sug.so.com, tu.so.com, tupian.so.com, wenda.so.com, www.haoso.com, www.haosou.com, www.haosou.net, www.so.com
Subject: samereso.com
Issuer: YR1
SANs: samereso.com, www.samereso.com
Subject: wavefinancial.cloudflaresso.com
Issuer: WE1
SANs: *.wavefinancial.cloudflaresso.com, wavefinancial.cloudflaresso.com
Subject: amount.cloudflaresso.com
Issuer: WE1
SANs: *.amount.cloudflaresso.com, amount.cloudflaresso.com
Subject: ssl2.denso.com
Issuer: DigiCert Global G3 TLS ECC SHA384 2020 CA1
SANs: fqr-businesscard.q-revo.com, gate.dcinc.jp, pass-portal.denso.co.th, secure.denso-careers.com, ssl2.denso.com, test.dnwu.jp, www.d-katsuyama.com, www.ddd.co.jp, www.denso-create.blog, www.denso-daishin.co.jp, www.denso-fukushima.co.jp, www.denso-fy.co.jp, www.denso-hokkaido.co.jp, www.denso-logitem.com, www.denso-mtec.co.jp, www.denso-si-solution.com, www.denso-taiyo.co.jp, www.denso-wave.com, www.denso-welfare-reservation.com, www.denso-wipersys.com, www.densofacilities.co.jp, www.densoremani.co.jp, www.densotechno.co.jp, www.densotrim.co.jp, www.dnwu.jp, www.fa-manuals.denso-wave.com, www.lifevision.net, www.lightning-review.com, www.nextdesign.app, www.nwb.co.jp, www.originaldesignmanufacturer.com, www.qrcode.com, www.remo.jp, www.sankyo-rad.co.jp, www.soken-labs.com, www.timetracker.jp
Subject: *.aidso.com
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.aidso.com, aidso.com
Subject: www.ebidding.storaenso.com.cn
Issuer: Corporation Service Company RSA OV SSL CA 2
SANs: ebidding.storaenso.com.cn, www.ebidding.storaenso.com.cn
Subject: angelfructuoso.com
Issuer: R13
SANs: angelfructuoso.com, www.angelfructuoso.com
Subject: sanluisobiso.com
Issuer: YR2
SANs: sanluisobiso.com
IPs Citing This Domain
Hosts whose HTML body references this domain. Strong signal for origin/mirror/embed discovery.
106.53.15.165:80
href · ×1
Origin / IP-Leak
USP
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
No origin-IP leaks detected (yet)
Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.
CT-Log Evidence
Certificates from public Certificate Transparency logs whose subject or SAN names this domain — including historic certs we never observed live.
c30457723cf57411…
google · xenon2026h2
Subject: map.360.cn
Issuer: WoTrus DV Server CA [Run by the Issuer]
SANs: map.360.cn, *.haosou.com, *.map.haosou.com, *.map.so.com, *.so.com, api.map.360.cn, haosou.com, m.map.360.cn, map.haosou.com, map.so.com, restapi.map.360.cn, so.com
Valid: 2025-09-09 00:00:00 → 2026-10-10 23:59:59
fca0073043b4aa82…
google · argon2026h2
Subject: map.360.cn
Issuer: WoTrus DV Server CA [Run by the Issuer]
SANs: map.360.cn, *.haosou.com, *.map.haosou.com, *.map.so.com, *.so.com, api.map.360.cn, haosou.com, m.map.360.cn, map.haosou.com, map.so.com, restapi.map.360.cn, so.com
Valid: 2025-09-09 00:00:00 → 2026-10-10 23:59:59
199acf4d3da87e77…
google · argon2026h2
Subject: *.so.com
Issuer: WoTrus DV Server CA [Run by the Issuer]
SANs: *.so.com, *.app.m.so.com, *.baike.so.com, *.fanyi.so.com, *.haoso.com, *.haosou.com, *.haosou.com.cn, *.haosou.net, *.image.so.com, *.m.so.com, *.map.so.com, *.news.so.com, *.onebox.so.com, *.so.360.cn, *.ssl.so.com, *.sug.so.com, *.tu.so.com, *.tupian.so.com, *.wenda.so.com, *.www.so.com, app.m.so.com, baike.so.com, fanyi.so.com, haoso.com, haosou.com, haosou.com.cn, haosou.net, image.so.com, m.so.com, map.so.com, news.so.com, onebox.so.com, so.360.cn, so.com, ssl.so.com, sug.so.com, tu.so.com, tupian.so.com, wenda.so.com, www.haoso.com, www.haosou.com, www.haosou.net, www.so.com
Valid: 2025-08-28 00:00:00 → 2026-09-28 23:59:59
fe0d0ad8d8ce9302…
google · argon2026h2
Subject: *.so.com
Issuer: WoTrus DV Server CA [Run by the Issuer]
SANs: *.so.com, *.app.m.so.com, *.baike.so.com, *.fanyi.so.com, *.haoso.com, *.haosou.com, *.haosou.com.cn, *.haosou.net, *.image.so.com, *.m.so.com, *.map.so.com, *.news.so.com, *.onebox.so.com, *.so.360.cn, *.ssl.so.com, *.sug.so.com, *.tu.so.com, *.tupian.so.com, *.wenda.so.com, *.www.so.com, app.m.so.com, baike.so.com, fanyi.so.com, haoso.com, haosou.com, haosou.com.cn, haosou.net, image.so.com, m.so.com, map.so.com, news.so.com, onebox.so.com, so.360.cn, so.com, ssl.so.com, sug.so.com, tu.so.com, tupian.so.com, wenda.so.com, www.haoso.com, www.haosou.com, www.haosou.net, www.so.com
Valid: 2025-08-28 00:00:00 → 2026-09-28 23:59:59
Threat Intelligence
Domain threat-intel pending
Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.
History
Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.
| Type | Value | First seen | Last seen |
|---|---|---|---|
| A | 104.192.110.226 | 2026-05-25 21:32:03.363 | 2026-07-28 16:02:09.164 |
| NS | dns2.360safe.com | 2026-05-25 23:59:40.866 | 2026-05-27 17:11:49.618 |
| NS | dns8.360safe.com | 2026-05-25 23:59:40.866 | 2026-05-27 17:11:49.618 |
| NS | dns9.360safe.com | 2026-05-25 23:59:40.866 | 2026-05-27 17:11:49.618 |
| NS | dns3.360safe.com | 2026-05-25 23:59:40.866 | 2026-05-27 17:11:49.618 |
| NS | dns1.360safe.com | 2026-05-25 23:59:40.866 | 2026-05-27 17:11:49.618 |
| TXT | bb2d51db8345014285466ee75f74ce0bd16b6fdd46eb30ae08b68534b16e6638 | 2026-05-25 23:59:40.866 | 2026-05-27 17:11:49.618 |
| NS | dns7.360safe.com | 2026-05-25 23:59:40.866 | 2026-05-27 17:11:49.618 |
| TXT | 9eb0c5f406eb4a7e49d01e5ddc441b544e844a991e554eaf8e9bc334e3e5463e | 2026-05-25 23:59:40.866 | 2026-05-27 17:11:49.618 |
| TXT | v=spf1 include:spf1.360.cn -all | 2026-05-25 23:59:40.866 | 2026-05-27 17:11:49.618 |