Check-Host.cc

Domain

bac.net

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

Run a live full scan of bac.net

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now
Hosting IPs
58
A/AAAA targets
Subdomains
39
CT + scan + body
Record Types
3
seen in DNS
Observed Certs
1
in our scans

DNS Records

A
AAAA
MX
0 bac-net.mail.protection.outlook.com, 10 mail.bac.net, 20 mail1.bac.net
NS
ns1.credomatic.com, ns3.credomatic.com
TXT
MS=ms73521613, MS=ms86418146, RNjIMcNZ29uziZjP1e1moQIVp/F+MgvP5I3i5dU0x7s=, VasJnl7IuhY9u10BxnlkSjwYU2J+teE8MLafgtBVFGw=, _1cxkx8cwpmlytryj7iau8lcypaawlza, _globalsign-domain-verification=0fLNMOjqcn4TM3t0ANx-VsaPRReDQiz9j1Bn66h780, _globalsign-domain-verification=83Nbp82fR9WJ3CbEBYs7zyH2yI2a8ovHqvSrfjqFZX, _globalsign-domain-verification=OA9Hbgho3ByHXT8n5iTDdqSY-m6BDEqHz-wUTFBXlr
CNAME
CAA

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

Subject: *.sjc4.zsurbac.net
Issuer: Amazon RSA 2048 M01
SANs: *.ams2.zsurbac.net, *.chi1.zsurbac.net, *.fra4.zsurbac.net, *.sjc4.zsurbac.net, *.was1.zsurbac.net, *.zrh1.zsurbac.net
Subject: portal.mobac.net
Issuer: Cybertrust Japan SureServer EV CA G3
SANs: portal.mobac.net, www.mobac.net
Subject: *.bac.net
Issuer: GlobalSign RSA OV SSL CA 2018
SANs: *.bac.net, bac.net
Subject: *.eu1.mgmt.zsurbac.net
Issuer: Amazon RSA 2048 M04
SANs: *.eu1.mgmt.zsurbac.net
Subject: *.eu2.mgmt.zsurbac.net
Issuer: Amazon RSA 2048 M01
SANs: *.eu2.mgmt.zsurbac.net
Subject: *.us1.mgmt.zsurbac.net
Issuer: Amazon RSA 2048 M04
SANs: *.us1.mgmt.zsurbac.net
Subject: portal.mobac.net
Issuer: Cybertrust Japan SureServer EV CA G3
SANs: portal.mobac.net, www.mobac.net
Subject: *.us1.zsurbac.net
Issuer: Amazon RSA 2048 M01
SANs: *.us1.zsurbac.net
Subject: *.us1.zsurbac.net
Issuer: Amazon RSA 2048 M01
SANs: *.us1.zsurbac.net
Subject: *.eu2.mgmt.zsurbac.net
Issuer: Amazon RSA 2048 M01
SANs: *.eu2.mgmt.zsurbac.net
Subject: *.bjbac.net
Issuer: RapidSSL TLS RSA CA G1
SANs: *.bjbac.net, bjbac.net
Subject: *.us1.zsurbac.net
Issuer: Amazon RSA 2048 M01
SANs: *.us1.zsurbac.net
Subject: *.bac.net
Issuer: GlobalSign RSA OV SSL CA 2018
SANs: *.bac.net, bac.net
Subject: portal.mobac.net
Issuer: Cybertrust Japan SureServer EV CA G3
SANs: portal.mobac.net, www.mobac.net
Subject: *.bac.net
Issuer: GlobalSign RSA OV SSL CA 2018
SANs: *.bac.net, bac.net
Subject: *.bjbac.net
Issuer: RapidSSL TLS RSA CA G1
SANs: *.bjbac.net, bjbac.net

IPs Citing This Domain

No citing IPs found yet

As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

Origin IP Origin ASN CDN ASN Confidence Reasoning
211.77.96.25 AS9674 AS20940 95% cert c7b6f468… served by 211.77.96.25 (AS9674) carries SAN firmasbac.pa.bac.net which currently resolves through Akamai (AS20940) at 2a02:26f0:1180:19c::1c2, 23.220.112.21, 2a02:26f0:1180:184::1c2, 104.85.0.37
211.77.96.25 AS9674 AS16625 95% cert c7b6f468… served by 211.77.96.25 (AS9674) carries SAN paybac.pa.bac.net which currently resolves through Akamai (AS16625) at 23.212.53.235, 23.45.175.6, 23.204.242.252, 184.24.64.21
116.197.28.34 AS10081 AS16625 95% cert c7b6f468… served by 116.197.28.34 (AS10081) carries SAN paybac.pa.bac.net which currently resolves through Akamai (AS16625) at 23.212.53.235, 23.204.242.252, 184.24.64.21, 23.55.131.229
116.197.28.34 AS10081 AS20940 95% cert c7b6f468… served by 116.197.28.34 (AS10081) carries SAN firmasbac.pa.bac.net which currently resolves through Akamai (AS20940) at 104.85.0.37, 2a02:26f0:1180:184::1c2, 2a02:26f0:1180:19c::1c2, 23.220.112.21
23.208.176.22 AS9498 AS16625 95% cert c7b6f468… served by 23.208.176.22 (AS9498) carries SAN firmasbac.pa.bac.net which currently resolves through Akamai (AS16625) at 23.220.112.21, 2a02:26f0:1180:184::1c2, 2a02:26f0:1180:19c::1c2, 184.30.156.26
23.52.75.254 AS55836 AS16625 95% cert 86608eec… served by 23.52.75.254 (AS55836) carries SAN firmasbac.pa.bac.net which currently resolves through Akamai (AS16625) at 23.222.196.24, 2a02:26f0:1180:184::1c2, 2a02:26f0:1180:19c::1c2, 184.30.156.26
183.171.187.35 AS10030 AS16625 95% cert 86608eec… served by 183.171.187.35 (AS10030) carries SAN firmasbac.pa.bac.net which currently resolves through Akamai (AS16625) at 23.220.112.21, 2a02:26f0:1180:184::1c2, 2a02:26f0:1180:19c::1c2, 104.85.0.37
2.17.232.39 AS9121 AS20940 95% cert 86608eec… served by 2.17.232.39 (AS9121) carries SAN firmasbac.pa.bac.net which currently resolves through Akamai (AS20940) at 104.85.0.37, 2a02:26f0:480:129a::1c2, 2a02:26f0:480:1291::1c2, 23.58.104.24
2.17.232.39 AS9121 AS16625 95% cert 86608eec… served by 2.17.232.39 (AS9121) carries SAN paybac.pa.bac.net which currently resolves through Akamai (AS16625) at 23.41.180.235, 23.212.53.235

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.

Type Value First seen Last seen
TXT _globalsign-domain-verification=OA9Hbgho3ByHXT8n5iTDdqSY-m6BDEqHz-wUTFBXlr 2026-05-26 23:59:17.863 2026-07-20 04:57:06.904
TXT _mdjvq8qan6pjuqx0ylxl6vmyo4pew5t 2026-05-26 23:59:17.863 2026-07-20 04:57:06.904
NS ns3.credomatic.com 2026-05-26 23:59:17.863 2026-07-20 04:57:06.904
TXT atlassian-domain-verification=jfJXvnEAdKnLl9y3IP1OuBovgkIZm4IjpfpqQ/cnugW0zE47BrG0yydU4IhU6SqJ 2026-05-26 23:59:17.863 2026-07-20 04:57:06.904
MX 20 mail1.bac.net 2026-05-26 23:59:17.863 2026-07-20 04:57:06.904
TXT _globalsign-domain-verification=x28nchw3Gt0wo9byXPygrdEzO9PMMnPmSjbrV12Bp_ 2026-05-26 23:59:17.863 2026-07-20 04:57:06.904
NS ns1.credomatic.com 2026-05-26 23:59:17.863 2026-07-20 04:57:06.904
TXT MS=ms73521613 2026-05-26 23:59:17.863 2026-07-20 04:57:06.904
TXT _globalsign-domain-verification=R8jb1eONngrP-AtU0AGy_dkvwa0qlb1lk2wNkorg6D 2026-05-26 23:59:17.863 2026-07-20 04:57:06.904
TXT v=spf1 include:_spf-a.credomatic.com.ni ip4:201.195.91.4 ip4:181.193.3.42 ip4:182.193.3.46 ip4:190.212.182.251 -all 2026-05-26 23:59:17.863 2026-07-20 04:57:06.904
TXT _globalsign-domain-verification=UVuCiZtnCbbvtaL5f1UZinj9LzX0x6ETq1c_8QZ5Dk 2026-05-26 23:59:17.863 2026-07-20 04:57:06.904
TXT VasJnl7IuhY9u10BxnlkSjwYU2J+teE8MLafgtBVFGw= 2026-05-26 23:59:17.863 2026-07-20 04:57:06.904
TXT RNjIMcNZ29uziZjP1e1moQIVp/F+MgvP5I3i5dU0x7s= 2026-05-26 23:59:17.863 2026-07-20 04:57:06.904
MX 0 bac-net.mail.protection.outlook.com 2026-05-26 23:59:17.863 2026-07-20 04:57:06.904
TXT kShfitV0gAVhYZyEvZpBuO4vqqwRSvmOUS6SIGHI2qs= 2026-05-26 23:59:17.863 2026-07-20 04:57:06.904
TXT _globalsign-domain-verification=zIyoIjOARiusylUcP-0YJdt7OSBwa0zfZPTI2VEZij 2026-05-26 23:59:17.863 2026-07-20 04:57:06.904
TXT _1cxkx8cwpmlytryj7iau8lcypaawlza 2026-05-26 23:59:17.863 2026-07-20 04:57:06.904
TXT _globalsign-domain-verification=0fLNMOjqcn4TM3t0ANx-VsaPRReDQiz9j1Bn66h780 2026-05-26 23:59:17.863 2026-07-20 04:57:06.904
MX 10 mail.bac.net 2026-05-26 23:59:17.863 2026-07-20 04:57:06.904
TXT t8g8pqmhp910qc1ch3mhvrd42fr692yr 2026-07-20 04:57:06.904 2026-07-20 04:57:06.904
TXT _globalsign-domain-verification=83Nbp82fR9WJ3CbEBYs7zyH2yI2a8ovHqvSrfjqFZX 2026-07-20 04:57:06.904 2026-07-20 04:57:06.904
TXT MS=ms86418146 2026-07-20 04:57:06.904 2026-07-20 04:57:06.904