So-net

Telecom & ISP Japanso-net.ne.jpRank 496 of the most impersonated
Cert findings · 24 h
0
Cert findings · 7 days
1
1 on phishing hosts
Registered lookalikes
55
4 listed by a source or an address list
Official domains
13
verified from So-net's own sites and records

Certificate findings for So-net

Updated hourly · 2026-11-05 10:53 UTC

DomainSpoof matched these hostnames, from public certificate logs, to So-net's name or to lookalike spellings of its official domains. Each was reported or listed by one of our sources, or resolved to an address on Spamhaus DROP or DomainSpoof's phishing-host list.

Published now · 1 findings, grouped by hostname

  1. www.so-net.cloud US · AS14061 · DigitalOcean, LLC
    Phishing hostDigitalOceanAddress hosted confirmed phishing in the last 48 hMX absentSPF missingDMARC missingRegistered 6 d ago
    DetailsHide details for www.so-net.cloud
    Hostname
    www.so-net.cloud
    First seen
    2026-10-30 13:06 UTC
    First published
    2026-11-02 18:02 UTC
    DNS
    Not resolving · checked 2026-11-05 10:31 UTC
    Checks
    Overdue since 2026-11-04 18:10 UTC
    Phishing host
    A brand lookalike resolving to an address that hosted confirmed phishing in the last 48 hours. Address 134.209.100.240.
    1. Resolved to 134.209.100.240
    2. Phishing-host list fetched with the address
    Brand
    So-net
    Addresses
    134.209.100.240 · United States · AS14061 DIGITALOCEAN-ASN - DigitalOcean, LLC · DigitalOcean (cloud provider)
    DigitalOcean
    DigitalOcean (134.209.100.240): a cloud provider. It rents servers and addresses to its customers.
    Domain
    so-net.cloud
    Registered
    2026-10-30 · GoDaddy
    MX
    Publishes no mail exchanger
    SPF
    Publishes no SPF record
    DMARC
    Publishes no DMARC policy
    Checked
    2026-11-04 19:26 UTC

    Suggest a correction

How certificate findings are selected

Reported: PhishTank or PhishDestroy reports the hostname as phishing. Listed: CERT Polska, MetaMask, USOM, MODA, NPA 165, JPCERT/CC, the AMF, the FSMA or BaFin lists it, in the source's own category. Phishing host: the name resolves to an address on DomainSpoof's phishing-host list, the addresses that hosted confirmed phishing in the last 48 hours. Spamhaus DROP: it resolves to an address on the Spamhaus DROP list. Same certificate: it shares a certificate with a finding and has listing evidence of its own, a report or listing by a source or its own Spamhaus DROP address.

DomainSpoof reads public certificate logs and the feeds on Sources every hour. A hostname matches So-net when a label carries the brand's name, by the rules on How it works. A lookalike spelling of an official domain matches too. A hostname with two kinds of finding is one row. Details shows the recorded checks, the source's claim and the check times available. How it works · Sources

More brands in Telecom & ISP

All brands →