So-net
Certificate findings for So-net
DomainSpoof matched these hostnames, from public certificate logs, to So-net's name or to lookalike spellings of its official domains. Each was reported or listed by one of our sources, or resolved to an address on Spamhaus DROP or DomainSpoof's phishing-host list.
Published now · 1 findings, grouped by hostname
- www.so-net.cloud US · AS14061 · DigitalOcean, LLCPhishing hostDigitalOceanAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 6 d ago
DetailsHide details for www.so-net.cloud
- Hostname
- www.so-net.cloud
- First seen
- 2026-10-30 13:06 UTC
- First published
- 2026-11-02 18:02 UTC
- DNS
- Not resolving · checked 2026-11-05 10:31 UTC
- Checks
- Overdue since 2026-11-04 18:10 UTC
- Phishing host
- A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 134.209.100.240.
- Resolved to 134.209.100.240
- Phishing-host list fetched with the address
- Brand
- So-net
- Addresses
- 134.209.100.240 · United States · AS14061 DIGITALOCEAN-ASN - DigitalOcean, LLC · DigitalOcean (cloud provider)
- DigitalOcean
- DigitalOcean (134.209.100.240): a cloud provider. It rents servers and addresses to its customers.
- Domain
- so-net.cloud
- Registered
- 2026-10-30 · GoDaddy
- MX
- Publishes no mail exchanger
- SPF
- Publishes no SPF record
- DMARC
- Publishes no DMARC policy
- Checked
- 2026-11-04 19:26 UTC
How certificate findings are selected
Reported: PhishTank or PhishDestroy reports the hostname as phishing. Listed: CERT Polska, MetaMask, USOM, MODA, NPA 165, JPCERT/CC, the AMF, the FSMA or BaFin lists it, in the source's own category. Phishing host: the name resolves to an address on DomainSpoof's phishing-host list, the addresses that hosted confirmed phishing in the last 48 hours. Spamhaus DROP: it resolves to an address on the Spamhaus DROP list. Same certificate: it shares a certificate with a finding and has listing evidence of its own, a report or listing by a source or its own Spamhaus DROP address.
DomainSpoof reads public certificate logs and the feeds on Sources every hour. A hostname matches So-net when a label carries the brand's name, by the rules on How it works. A lookalike spelling of an official domain matches too. A hostname with two kinds of finding is one row. Details shows the recorded checks, the source's claim and the check times available. How it works · Sources

