Domain

customs.ro

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

DNS Check HTTP Check Run Full Scan .ro TLD

Run a live full scan of customs.ro

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now

Hosting IPs

A/AAAA targets

Subdomains

CT + scan + body

Record Types

seen in DNS

Observed Certs

in our scans

DNS Records

80.96.3.81

AAAA

—

10 dgv.customs.ro, 20 mail2.customs.ro, 30 mail3.customs.ro

ns1.mfinante.ro, ns2.mfinante.ro

TXT

MS=ms21275199, v=spf1 ip4:80.96.3.0/24 ~all

CNAME

—

CAA

—

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.

Subdomain	Resolves to	Last seen
customs.ro	80.96.3.81	2026-06-04 22:21:22.594
www.customs.ro	80.96.3.81	2026-06-14 22:23:29.853

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

89.36.224.227:443 81050f0e35b5…

Subject: autoconfig.ns1.romcustoms.ro

Issuer: YR1

SANs: autoconfig.ns1.romcustoms.ro, autodiscover.ns1.romcustoms.ro, cpanel.ns1.romcustoms.ro, cpcalendars.ns1.romcustoms.ro, cpcontacts.ns1.romcustoms.ro, ipv6.ns1.romcustoms.ro, mail.ns1.romcustoms.ro, ns1.romcustoms.ro, webdisk.ns1.romcustoms.ro, webmail.ns1.romcustoms.ro, whm.ns1.romcustoms.ro, www.ns1.romcustoms.ro

185.236.87.181:443 9326619748b3…

Subject: legalcustoms.ro

Issuer: Encryption Everywhere DV TLS CA - G2

SANs: legalcustoms.ro, www.legalcustoms.ro

185.181.242.48:443 b7d7832ed6cb…

Subject: www.seasidecustoms.ro

Issuer: R13

SANs: seasidecustoms.ro, www.seasidecustoms.ro

89.36.224.230:443 9a121d5e5167…

Subject: autoconfig.ns1.romcustoms.ro

Issuer: R13

IPs Citing This Domain

No citing IPs found yet

As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

No origin-IP leaks detected (yet)

Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.

CT-Log Evidence

Certificates from public Certificate Transparency logs whose subject or SAN names this domain — including historic certs we never observed live.

ac6a7f63572f1da2… google · argon2026h2

Subject: *.customs.ro

Issuer: RapidSSL TLS RSA CA G1

SANs: *.customs.ro, customs.ro

Valid: 2025-08-24 00:00:00 → 2026-09-24 23:59:59

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.

Type	Value	First seen	Last seen
MX	20 mail2.customs.ro	2026-06-01 23:09:42.711	2026-06-04 22:21:22.594
MX	10 dgv.customs.ro	2026-06-01 23:09:42.711	2026-06-04 22:21:22.594
TXT	MS=ms21275199	2026-06-01 23:09:42.711	2026-06-04 22:21:22.594
TXT	v=spf1 ip4:80.96.3.0/24 ~all	2026-06-01 23:09:42.711	2026-06-04 22:21:22.594
NS	ns1.mfinante.ro	2026-06-01 23:09:42.711	2026-06-04 22:21:22.594
A	80.96.3.81	2026-06-01 23:09:42.711	2026-06-04 22:21:22.594
MX	30 mail3.customs.ro	2026-06-01 23:09:42.711	2026-06-04 22:21:22.594
NS	ns2.mfinante.ro	2026-06-01 23:09:42.711	2026-06-04 22:21:22.594