Check-Host.cc

Domain

mas.to

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

Run a live full scan of mas.to

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now
Hosting IPs
10
A/AAAA targets
Subdomains
16
CT + scan + body
Record Types
5
seen in DNS
Observed Certs
8
in our scans

DNS Records

A
104.21.11.154, 172.67.166.96
AAAA
2606:4700:3031::ac43:a660, 2606:4700:3032::ac43:a660, 2606:4700:3035::6815:b9a, 2606:4700:3037::6815:b9a
MX
10 loaf.email
NS
audrey.ns.cloudflare.com, rocky.ns.cloudflare.com
TXT
brevo-code:87c1e578480734256afabc770b7907fa, google-site-verification=0ky_6dh6WidVdccYzANEruJ1GglBPXPIX2J4YVEqV8s, v=spf1 mx a ~all
CNAME
CAA

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.

Subdomain Resolves to Last seen
mas.to 2026-07-27 22:55:00.916
status.mas.to 2026-06-20 13:44:49.731
uptime.mas.to 2026-06-21 15:56:43.796
help.mas.to 2026-07-19 09:16:04.855
r.email.mas.to 2026-06-18 00:03:50.129

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

Subject: www.playmas.today
Issuer: YR1
SANs: cpanel.playmas.today, mail.playmas.today, playmas.today, webdisk.playmas.today, www.playmas.today
Subject: www.leetomas.top
Issuer: YR2
SANs: www.leetomas.top
Subject: oposnik-mas.top
Issuer: Let's Encrypt Authority X3
SANs: oposnik-mas.top, www.oposnik-mas.top
Subject: testtomas.total-unyu.co.jp
Issuer: YR2
SANs: testtomas.total-unyu.co.jp
Subject: vps.panoramas.top
Issuer: E7
SANs: vps.panoramas.top
Subject: smas.top
Issuer: E7
SANs: smas.top
Subject: vps.miamas.top
Issuer: E8
SANs: vps.miamas.top
Subject: files.lssistemas.top
Issuer: YE1
SANs: files.lssistemas.top
Subject: sgpp.saude.palmas.to.gov.br
Issuer: R3
SANs: sgpp.saude.palmas.to.gov.br
Subject: vpn.palmas.to.gov.br
Issuer: R13
SANs: vpn.palmas.to.gov.br
Subject: vmas.tollendalevillage.ca
Issuer: vmas.tollendalevillage.ca
SANs: *.tollendalevillage.ca, 10.0.0.11, 67.215.197.196, tollendalevillage.ca, vmas, vmas.tollendalevillage.ca
Subject: esus.palmas.to.gov.br
Issuer: R13
SANs: esus.palmas.to.gov.br
Subject: vpn.palmas.to.gov.br
Issuer: R13
SANs: vpn.palmas.to.gov.br
Subject: oposnik-mas.top
Issuer: Let's Encrypt Authority X3
SANs: oposnik-mas.top, www.oposnik-mas.top
Subject: www.racmas.tohoku.ac.jp
Issuer: NII Open Domain CA - G7 RSA
SANs: www.racmas.tohoku.ac.jp
Subject: healingai.schemas.top
Issuer: TrustAsia DV TLS RSA CA 2025
SANs: healingai.schemas.top
Subject: vps.panoramas.top
Issuer: E7
SANs: vps.panoramas.top

IPs Citing This Domain

No citing IPs found yet

As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

No origin-IP leaks detected (yet)

Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.

Type Value First seen Last seen
A 172.67.166.96 2026-05-25 22:09:29.497 2026-07-27 22:55:00.916
AAAA 2606:4700:3037::6815:b9a 2026-05-25 22:09:29.497 2026-06-19 09:14:05.242
TXT brevo-code:87c1e578480734256afabc770b7907fa 2026-05-25 22:09:29.497 2026-07-27 22:55:00.916
TXT v=spf1 mx a ~all 2026-05-25 22:09:29.497 2026-07-27 22:55:00.916
NS rocky.ns.cloudflare.com 2026-05-25 22:09:29.497 2026-07-27 22:55:00.916
MX 10 loaf.email 2026-05-25 22:09:29.497 2026-07-27 22:55:00.916
A 104.21.11.154 2026-05-25 22:09:29.497 2026-07-27 22:55:00.916
AAAA 2606:4700:3032::ac43:a660 2026-05-25 22:09:29.497 2026-06-19 09:14:05.242
TXT google-site-verification=0ky_6dh6WidVdccYzANEruJ1GglBPXPIX2J4YVEqV8s 2026-05-25 22:09:29.497 2026-07-27 22:55:00.916
NS audrey.ns.cloudflare.com 2026-05-25 22:09:29.497 2026-07-27 22:55:00.916
AAAA 2606:4700:3031::ac43:a660 2026-07-15 20:04:13.980 2026-07-27 22:55:00.916
AAAA 2606:4700:3035::6815:b9a 2026-07-15 20:04:13.980 2026-07-27 22:55:00.916