keys.so
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of keys.so
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
DNS Records
WHOIS / Registration
Registration data planned
Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.
Subdomains
Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.
| Subdomain | Resolves to | Last seen |
|---|---|---|
| keys-so-video.keys.so | 2026-07-27 14:59:09.817 | |
| 1ba45586-4891-4240-be19-b369163d9d33.keys.so | 2026-06-18 01:44:49.693 | |
| admin.keys.so | 1970-01-01 00:00:00.000 | |
| admin.my.keys.so | 2026-06-21 19:00:41.346 | |
| admin.services.keys.so | 1970-01-01 00:00:00.000 | |
| admin.www.db0.keys.so | 1970-01-01 00:00:00.000 | |
| admin.www.security.keys.so | 2026-07-19 12:57:13.301 | |
| anto.keys.so | 1970-01-01 00:00:00.000 | |
| api.app.keys.so | 1970-01-01 00:00:00.000 | |
| api.c50.keys.so | 1970-01-01 00:00:00.000 | |
| api.db0.keys.so | 1970-01-01 00:00:00.000 | |
| api.keys.so | 1970-01-01 00:00:00.000 | |
| api.services.keys.so | 1970-01-01 00:00:00.000 | |
| api.www.db0.keys.so | 1970-01-01 00:00:00.000 | |
| apidoc.keys.so | 1970-01-01 00:00:00.000 | |
| apiserpnode4.keys.so | 2026-06-20 09:06:38.372 | |
| app.keys.so | 1970-01-01 00:00:00.000 | |
| app.siteadmin.keys.so | 2026-07-18 18:09:57.951 | |
| app.www.security.keys.so | 2026-07-19 12:57:13.301 | |
| app.wwwwordpress.keys.so | 1970-01-01 00:00:00.000 | |
| atlasio.keys.so | 1970-01-01 00:00:00.000 | |
| backend.keys.so | 1970-01-01 00:00:00.000 | |
| beta.keys.so | 2026-06-18 01:12:39.601 | |
| browsernode11.keys.so | 2026-06-15 08:00:25.230 | |
| browsernode32.keys.so | 1970-01-01 00:00:00.000 | |
| browsernode40.keys.so | 1970-01-01 00:00:00.000 | |
| bugbounty.keys.so | 2026-07-28 16:36:45.579 | |
| c40.keys.so | 1970-01-01 00:00:00.000 | |
| c60.keys.so | 1970-01-01 00:00:00.000 | |
| cms.keys.so | 1970-01-01 00:00:00.000 | |
| correo.keys.so | 1970-01-01 00:00:00.000 | |
| demo.keys.so | 1970-01-01 00:00:00.000 | |
| demo.siteadmin.keys.so | 2026-07-18 18:09:57.951 | |
| dev.c50.keys.so | 1970-01-01 00:00:00.000 | |
| dev2.keys.so | 2026-07-24 19:48:50.891 | |
| directparser.keys.so | 2026-07-26 17:56:24.590 | |
| docs.keys.so | 1970-01-01 00:00:00.000 | |
| dqegl2f8klmzzvl.keys.so | 1970-01-01 00:00:00.000 | |
| elk.keys.so | 1970-01-01 00:00:00.000 | |
| email.keys.so | 1970-01-01 00:00:00.000 | |
| harbor.keys.so | 1970-01-01 00:00:00.000 | |
| host.keys.so | 2026-07-27 17:10:00.750 | |
| keys-so-email.keys.so | 1970-01-01 00:00:00.000 | |
| keys-so-rsya.keys.so | 1970-01-01 00:00:00.000 | |
| keys.so | 1970-01-01 00:00:00.000 | |
| mail1.keys.so | 1970-01-01 00:00:00.000 | |
| mail3.keys.so | 1970-01-01 00:00:00.000 | |
| mail5.keys.so | 1970-01-01 00:00:00.000 | |
| mail8.keys.so | 1970-01-01 00:00:00.000 | |
| mail9.keys.so | 1970-01-01 00:00:00.000 | |
| nexus.keys.so | 1970-01-01 00:00:00.000 | |
| qa.keys.so | 1970-01-01 00:00:00.000 | |
| sandbox.cegl8wyays.keys.so | 2026-06-21 18:44:16.226 | |
| shop.keys.so | 1970-01-01 00:00:00.000 | |
| siteadmin.keys.so | 1970-01-01 00:00:00.000 | |
| smail.keys.so | 1970-01-01 00:00:00.000 | |
| smtpauth.keys.so | 1970-01-01 00:00:00.000 | |
| staging.app.keys.so | 1970-01-01 00:00:00.000 | |
| staging.www.db0.keys.so | 1970-01-01 00:00:00.000 | |
| status.wwwwordpress.keys.so | 1970-01-01 00:00:00.000 | |
| test.my.keys.so | 2026-06-21 19:00:41.346 | |
| test.siteadmin.keys.so | 2026-07-18 18:09:57.951 | |
| test.www.m2.keys.so | 1970-01-01 00:00:00.000 | |
| uat.keys.so | 1970-01-01 00:00:00.000 | |
| www.1ba45586-4891-4240-be19-b369163d9d33.keys.so | 2026-06-03 03:25:16.265 | |
| www.2f8klmzzvl.keys.so | 2026-06-18 00:30:21.677 | |
| www.4330dbed-fe2c-4852-8d03-92108475d10c.keys.so | 2026-06-03 00:14:57.362 | |
| www.app.keys.so | 2026-07-18 03:46:09.680 | |
| www.autoconfig.keys.so | 1970-01-01 00:00:00.000 | |
| www.browsernode.keys.so | 2026-06-15 21:26:50.500 | |
| www.c21.keys.so | 1970-01-01 00:00:00.000 | |
| www.c40.keys.so | 1970-01-01 00:00:00.000 | |
| www.c41.keys.so | 1970-01-01 00:00:00.000 | |
| www.c51.keys.so | 1970-01-01 00:00:00.000 | |
| www.c60.keys.so | 1970-01-01 00:00:00.000 | |
| www.cegl8wyays.keys.so | 1970-01-01 00:00:00.000 | |
| www.d2o8g4e4m1ts73fhaevg.keys.so | 2026-06-03 00:14:57.362 | |
| www.d2o8h9u4m1ts73fhagg0.keys.so | 2026-06-03 00:14:57.362 | |
| www.db0.keys.so | 2026-07-28 17:34:09.807 | |
| www.dbm3.keys.so | 2026-06-17 01:09:34.968 | |
| www.dev2.keys.so | 2026-07-24 03:54:40.750 | |
| www.duroxhelp.keys.so | 1970-01-01 00:00:00.000 | |
| www.elk.keys.so | 1970-01-01 00:00:00.000 | |
| www.keys.so | 1970-01-01 00:00:00.000 | |
| www.m1.keys.so | 2026-06-02 17:10:19.055 | |
| www.m2.keys.so | 2026-06-02 17:10:19.055 | |
| www.new2.keys.so | 1970-01-01 00:00:00.000 | |
| www.nexus.keys.so | 1970-01-01 00:00:00.000 | |
| www.security.keys.so | 2026-07-19 12:57:13.301 | |
| www.servicenode.keys.so | 1970-01-01 00:00:00.000 | |
| www.shop.keys.so | 2026-06-18 12:40:21.708 | |
| www.sitemap.keys.so | 2026-06-03 17:56:55.822 | |
| www.staging.keys.so | 2026-06-16 15:20:24.806 | |
| www.support.keys.so | 2026-07-24 03:54:40.750 | |
| www.sys.keys.so | 1970-01-01 00:00:00.000 | |
| www.test.keys.so | 2026-07-21 17:04:22.645 | |
| www.vpn-xray.keys.so | 2026-06-16 21:44:53.816 | |
| www.webmail.keys.so | 1970-01-01 00:00:00.000 | |
| www.wwwsecure3.keys.so | 2026-06-15 20:51:30.134 | |
| wwwbrowsernode13.keys.so | 1970-01-01 00:00:00.000 | |
| wwwbrowsernode9.keys.so | 2026-06-20 05:50:12.117 | |
| wwwch.keys.so | 1970-01-01 00:00:00.000 | |
| wwwch21.keys.so | 2026-06-16 14:18:16.913 | |
| wwwdqegl2f8klmzzvl.keys.so | 1970-01-01 00:00:00.000 | |
| wwwmail8.keys.so | 1970-01-01 00:00:00.000 |
Tech Stack
Tech detection pending
Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.
TLS Certificates
IPs Citing This Domain
No citing IPs found yet
As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.
Origin / IP-Leak
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
No origin-IP leaks detected (yet)
Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.
CT-Log Evidence
Certificates from public Certificate Transparency logs whose subject or SAN names this domain — including historic certs we never observed live.
Threat Intelligence
Domain threat-intel pending
Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.
History
Domain timeline pending
Passive-DNS history accumulates as our forward-DNS crawler observes A/AAAA/MX/NS/TXT records over time.