Domen
co.th
Agregirano iz javnih BGP feedova, CT logova, našeg sloja skeniranja, honeypota i globalnih proba.
Run a live full scan of co.th
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
Hosting IPs
—
A/AAAA targets
Subdomains
—
CT + scan + body
Record Types
—
seen in DNS
Observed Certs
—
in our scans
DNS zapisi
A
—
AAAA
—
MX
—
NS
—
TXT
—
CNAME
—
CAA
—
WHOIS / Registration
Registration data planned
Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.
Subdomeni
Subdomain enumeration pending
Every subdomain ever issued a TLS cert under this apex — extracted from Certificate Transparency logs, our own scan observations and body references.
Tehnološki stek
Tech detection pending
Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.
TLS sertifikati
Subject: app-cdn.airportthai.co.th
Issuer: WR3
SANs: app-cdn.airportthai.co.th
Subject: *.cpf.co.th
Issuer: Sectigo RSA Domain Validation Secure Server CA
SANs: *.cpf.co.th, cpf.co.th
Subject: dcloud.co.th
Issuer: R12
SANs: dcloud.co.th
Subject: *.cuel.co.th
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: *.cuel.co.th, cuel.co.th
Subject: services.amazon.co.th
Issuer: Amazon RSA 2048 M04
SANs: services.amazon.co.th
Subject: services.amazon.co.th
Issuer: Amazon RSA 2048 M04
SANs: services.amazon.co.th
Subject: *.netbay.co.th
Issuer: Sectigo Public Server Authentication CA OV R36
SANs: *.netbay.co.th, netbay.co.th
Subject: web.howa.co.th
Issuer: Go Daddy Secure Certificate Authority - G2
SANs: web.howa.co.th, www.web.howa.co.th
Subject: sell.amazon.co.th
Issuer: Amazon RSA 2048 M04
SANs: sell.amazon.co.th
Subject: *.tngroup.co.th
Issuer: Sectigo RSA Domain Validation Secure Server CA
SANs: *.tngroup.co.th, tngroup.co.th
Subject: *.chatme.co.th
Issuer: GlobalSign GCC R6 AlphaSSL CA 2025
SANs: *.chatme.co.th, chatme.co.th
Subject: *.moneydd.co.th
Issuer: Thawte TLS RSA CA G1
SANs: *.moneydd.co.th, moneydd.co.th
Subject: *.bol.co.th
Issuer: GlobalSign RSA OV SSL CA 2018
SANs: *.bol.co.th, bol.co.th
Subject: *.nlddev.co.th
Issuer: GlobalSign GCC R6 AlphaSSL CA 2025
SANs: *.nlddev.co.th, nlddev.co.th
Subject: edoc.blissintelligence.co.th
Issuer: YR2
SANs: edoc.blissintelligence.co.th
Subject: sell.amazon.co.th
Issuer: Amazon RSA 2048 M04
SANs: sell.amazon.co.th
Subject: mail.comexpert.co.th
Issuer: YR1
SANs: mail.comexpert.co.th
Subject: *.jib.co.th
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: *.jib.co.th, jib.co.th
Subject: owa.kuiburifruit.co.th
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: autodiscover.kuiburifruit.co.th, owa.kuiburifruit.co.th
Subject: twms.twss.co.th
Issuer: twms.twss.co.th
SANs: twms.twss.co.th
Subject: member.thepaseo.co.th
Issuer: YE1
SANs: member.thepaseo.co.th
Subject: *.dtac.co.th
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: *.dtac.co.th, dtac.co.th
Subject: *.topcharoen.co.th
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.topcharoen.co.th, topcharoen.co.th
Subject: *.truecorp.co.th
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: *.truecorp.co.th, truecorp.co.th
Subject: heishin.co.th
Issuer: YR1
SANs: heishin.co.th
Subject: cloud.penso.co.th
Issuer: YR2
SANs: cloud.penso.co.th
Subject: *.winwin.co.th
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.winwin.co.th, winwin.co.th
Subject: ssc.sdm.denso.co.th
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: ssc.sdm.denso.co.th, www.ssc.sdm.denso.co.th
Subject: *.ktc.co.th
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: *.ktc.co.th, ktc.co.th
Subject: *.precisionvalve.co.th
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.precisionvalve.co.th, precisionvalve.co.th
IPs Citing This Domain
No citing IPs found yet
As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.
Origin / IP-Leak
USP
Kada je hostname serviran iza CDN-a (npr. Cloudflare), origin server se ponekad može identifikovati podudaranjem TLS sertifikata sa zaštićenim hostname-om. Nalazi prikazani ovde su heuristički kandidati, a ne garancija.
| Origin IP | Origin ASN | CDN ASN | Confidence | Reasoning |
|---|---|---|---|---|
| 110.78.65.204 | AS9931 | AS13335 | 95% | cert a6155a76… served by 110.78.65.204 (AS9931) carries SAN sea.co.th which currently resolves through Cloudflare (AS13335) at 104.21.29.235, 172.67.171.227, 2606:4700:3035::6815:1deb, 2606:4700:3036::ac43:abe3 |
| 104.93.116.66 | AS7713 | AS20940 | 95% | cert e55f8d5e… served by 104.93.116.66 (AS7713) carries SAN expressresume.monster.co.th which currently resolves through Akamai (AS20940) at 104.85.0.51, 88.221.168.54, 23.48.8.57, 23.220.112.52 |
| 23.59.186.204 | AS55836 | AS16625 | 95% | cert a2d2a4e5… served by 23.59.186.204 (AS55836) carries SAN staging.lixil.co.th which currently resolves through Akamai (AS16625) at 184.24.160.131, 23.218.66.109 |
| 23.221.28.76 | AS12400 | AS45102 | 95% | cert 4886a080… served by 23.221.28.76 (AS12400) carries SAN lazada.co.th which currently resolves through Alibaba (AS45102) at 47.246.165.39, 47.246.165.182, 47.246.165.72, 47.246.167.210 |
| 184.87.245.245 | AS4775 | AS16625 | 95% | cert 8018056e… served by 184.87.245.245 (AS4775) carries SAN image.mail.citi.co.th which currently resolves through Akamai (AS16625) at 23.222.35.44, 104.71.176.77, 104.102.44.59, 23.218.51.123 |
| 23.208.136.52 | AS45758 | AS20940 | 95% | cert e55f8d5e… served by 23.208.136.52 (AS45758) carries SAN expressresume.monster.co.th which currently resolves through Akamai (AS20940) at 104.85.0.51, 184.30.156.63, 23.220.112.52, 23.222.196.63 |
| 171.102.240.67 | AS7470 | AS20940 | 95% | cert e55f8d5e… served by 171.102.240.67 (AS7470) carries SAN my.monster.co.th which currently resolves through Akamai (AS20940) at 104.85.0.51, 104.99.232.60, 23.220.112.52, 184.30.156.63 |
| 171.102.240.67 | AS7470 | AS16625 | 95% | cert e55f8d5e… served by 171.102.240.67 (AS7470) carries SAN expressresume.monster.co.th which currently resolves through Akamai (AS16625) at 184.30.156.63, 104.85.0.51, 23.220.112.52, 23.222.196.63 |
| 171.236.60.72 | AS7552 | AS45102 | 95% | cert 4886a080… served by 171.236.60.72 (AS7552) carries SAN lazada.co.th which currently resolves through Alibaba (AS45102) at 47.246.165.39, 47.246.165.182, 47.246.165.72, 47.246.167.210 |
| 23.53.102.183 | AS7470 | AS45102 | 95% | cert 059df7b2… served by 23.53.102.183 (AS7470) carries SAN lazada.co.th which currently resolves through Alibaba (AS45102) at 47.246.165.39, 47.246.165.182, 47.246.165.72, 47.246.165.115 |
| 61.19.59.65 | AS9931 | AS19551 | 95% | cert 95f349af… served by 61.19.59.65 (AS9931) carries SAN ghbank.co.th which currently resolves through Imperva (AS19551) at 45.60.16.183, 45.60.14.183, 2a02:e980:b4::b7, 2a02:e980:b6::b7 |
| 159.138.255.93 | AS136907 | AS13335 | 95% | cert 93249077… served by 159.138.255.93 (AS136907) carries SAN dailynews.co.th which currently resolves through Cloudflare (AS13335) at 172.66.161.64, 104.20.17.220, 2606:4700:10::6814:11dc, 2606:4700:10::ac42:a140 |
| 185.125.100.31 | AS210644 | AS16509 | 95% | cert bae177f2… served by 185.125.100.31 (AS210644) carries SAN yahoo.co.th which currently resolves through Amazon (AS16509) at 76.223.84.192, 13.248.158.7 |
| 23.207.89.238 | AS55836 | AS16625 | 95% | cert 1904c33e… served by 23.207.89.238 (AS55836) carries SAN ebizws1.lmginsurance.co.th which currently resolves through Akamai (AS16625) at 184.24.28.74, 2a02:26f0:fe00:184::1d93, 2a02:26f0:fe00:191::1d93, 2a02:26f0:1700:391::1d93 |
| 23.44.156.19 | AS9299 | AS16625 | 95% | cert f3986937… served by 23.44.156.19 (AS9299) carries SAN www.rbauction.co.th which currently resolves through Akamai (AS16625) at 184.24.167.73, 23.218.54.54, 23.33.192.105, 2.16.32.194 |
| 104.71.116.44 | AS55836 | AS16625 | 95% | cert ceb96bd7… served by 104.71.116.44 (AS55836) carries SAN www.suntorypepsico.co.th which currently resolves through Akamai (AS16625) at 23.222.65.117, 104.102.60.137 |
| 125.25.184.174 | AS23969 | AS15169 | 95% | cert e0fde431… served by 125.25.184.174 (AS23969) carries SAN lt.co.th which currently resolves through Google (AS15169) at 35.213.171.213 |
| 96.30.77.26 | AS132280 | AS13335 | 95% | cert 360b079b… served by 96.30.77.26 (AS132280) carries SAN metrosystems.co.th which currently resolves through Cloudflare (AS13335) at 188.114.97.3, 2a06:98c1:3121::, 2a06:98c1:3120::, 188.114.96.3 |
| 27.131.132.75 | AS24187 | AS19551 | 95% | cert eac447fb… served by 27.131.132.75 (AS24187) carries SAN mfec.co.th which currently resolves through Imperva (AS19551) at 45.60.244.82, 45.60.242.82, 45.223.108.250, 45.223.103.250 |
| 203.150.35.4 | AS38184 | AS16509 | 95% | cert 58276dc9… served by 203.150.35.4 (AS38184) carries SAN thaivivat.co.th which currently resolves through Amazon (AS16509) at 13.214.79.42 |
| 202.43.57.239 | AS3786 | AS16625 | 95% | cert 63309d81… served by 202.43.57.239 (AS3786) carries SAN www.commercialfuels.esso.co.th which currently resolves through Akamai (AS16625) at 23.222.60.28, 23.0.30.186, 23.37.49.232 |
| 202.43.57.239 | AS3786 | AS8075 | 95% | cert 63309d81… served by 202.43.57.239 (AS3786) carries SAN www.esso.co.th which currently resolves through Microsoft (AS8075) at 52.191.18.94, 104.40.38.105 |
| 2.23.32.8 | AS55836 | AS16625 | 95% | cert 1fec2e05… served by 2.23.32.8 (AS55836) carries SAN www.mobil.co.th which currently resolves through Akamai (AS16625) at 23.222.37.76, 96.7.18.75, 23.38.20.35 |
| 2.23.32.8 | AS55836 | AS8075 | 95% | cert 1fec2e05… served by 2.23.32.8 (AS55836) carries SAN commercialfuels.esso.co.th which currently resolves through Microsoft (AS8075) at 13.64.199.231, 172.190.140.10 |
| 1.1.253.130 | AS23969 | AS13335 | 95% | cert a99c56bb… served by 1.1.253.130 (AS23969) carries SAN 40.co.th which currently resolves through Cloudflare (AS13335) at 104.21.58.148, 172.67.204.127, 2606:4700:3036::6815:3a94, 2606:4700:3031::ac43:cc7f |
Threat Intelligence
Domain threat-intel pending
Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.
Istorija
Domain timeline pending
Passive-DNS history accumulates as our forward-DNS crawler observes A/AAAA/MX/NS/TXT records over time.