Check-Host.cc

Domain

ms.ro

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

Run a live full scan of ms.ro

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now
Hosting IPs
3
A/AAAA targets
Subdomains
24
CT + scan + body
Record Types
5
seen in DNS
Observed Certs
4
in our scans

DNS Records

A
195.242.244.149
AAAA
MX
10 mx1.stsmail.ro, 10 mx2.stsmail.ro
NS
ns1.stsisp.ro, ns2.stsisp.ro, ns3.stsisp.ro
TXT
v=spf1 mx ip4:193.151.29.160/27 include:stsmail.ro ~all
CNAME
CAA

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.

Subdomain Resolves to Last seen
infrastructura-sanatate.ms.ro 2026-07-19 14:00:32.786
com-pnsp.ms.ro
1970-01-01 00:00:00.000
keycloak-pnsp.ms.ro
1970-01-01 00:00:00.000
ms.ro 2026-06-25 20:22:31.777
pnsp.ms.ro
1970-01-01 00:00:00.000
pusher-pnsp.ms.ro
1970-01-01 00:00:00.000
registry-pnsp.ms.ro
1970-01-01 00:00:00.000
ser.ms.ro
1970-01-01 00:00:00.000
soketi-pnsp.ms.ro
1970-01-01 00:00:00.000
www.ms.ro 2026-07-16 16:38:04.380

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

Subject: www.nms.rocks
Issuer: YR2
SANs: www.nms.rocks
Subject: *.ams-claims.ro
Issuer: *.ams-claims.ro
SANs: *.ams-claims.ro, ams-claims.ro, localhost, productie, productie.hype.ro
Subject: cms.robo-taxi.ru
Issuer: YR1
SANs: cms.robo-taxi.ru
Subject: lms.routeswitch.xyz
Issuer: YE1
SANs: lms.routeswitch.xyz
Subject: eden.core-systems.ro
Issuer: YR2
SANs: eden.core-systems.ro
Subject: jms.rongtai-china.com
Issuer: YE2
SANs: jms.rongtai-china.com
Subject: web01-ams.robinboersma.nl
Issuer: YE1
SANs: web01-ams.robinboersma.nl
Subject: autoconfig.ns1.romcustoms.ro
Issuer: YR1
SANs: autoconfig.ns1.romcustoms.ro, autodiscover.ns1.romcustoms.ro, cpanel.ns1.romcustoms.ro, cpcalendars.ns1.romcustoms.ro, cpcontacts.ns1.romcustoms.ro, ipv6.ns1.romcustoms.ro, mail.ns1.romcustoms.ro, ns1.romcustoms.ro, webdisk.ns1.romcustoms.ro, webmail.ns1.romcustoms.ro, whm.ns1.romcustoms.ro, www.ns1.romcustoms.ro
Subject: eco-forms.ro
Issuer: YE1
SANs: eco-forms.ro, ecoforms.ro, www.eco-forms.ro, www.ecoforms.ro
Subject: legalcustoms.ro
Issuer: Encryption Everywhere DV TLS CA - G2
SANs: legalcustoms.ro, www.legalcustoms.ro
Subject: ems.robberechts.be
Issuer: YE2
SANs: ems.robberechts.be
Subject: *.fiscalsystems.ro
Issuer: YR1
SANs: *.fiscalsystems.ro, fiscalsystems.ro
Subject: planet.ms.robocare.tn
Issuer: YE2
SANs: planet.ms.robocare.tn
Subject: mail.globalsocialplatforms.ro
Issuer: YR2
SANs: globalsocialplatforms.ro, mail.globalsocialplatforms.ro, www.globalsocialplatforms.ro
Subject: synaptic-systems.ro
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: synaptic-systems.ro, www.synaptic-systems.ro
Subject: *.ucms.ro
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.ucms.ro, ucms.ro
Subject: asc-systems.ro
Issuer: YR1
SANs: *.asc-systems.ro, asc-systems.ro
Subject: agile-systems.ro
Issuer: YR2
SANs: *.agile-systems.ro, agile-systems.ro
Subject: isms.roboyo.global
Issuer: YR2
SANs: isms-back.roboyo.global, isms.roboyo.global
Subject: vipitsystems.ro
Issuer: vipitsystems.ro
SANs: autodiscover.vipitsystems.ro, cpanel.vipitsystems.ro, cpcalendars.vipitsystems.ro, cpcontacts.vipitsystems.ro, mail.vipitsystems.ro, vipitsystems.ro, webdisk.vipitsystems.ro, webmail.vipitsystems.ro, www.vipitsystems.ro
Subject: dms.rongyi.site
Issuer: E7
SANs: dms.rongyi.site
Subject: *.epicrooms.ro
Issuer: YR2
SANs: *.epicrooms.ro, epicrooms.ro
Subject: forms.rocketpages.com.br
Issuer: YE1
SANs: forms.rocketpages.com.br
Subject: cms.rocklab.de
Issuer: YE1
SANs: cms.rocklab.de
Subject: analytics.nsystems.ro
Issuer: YR2
SANs: analytics.nsystems.ro
Subject: termosystems.ro
Issuer: YR1
SANs: *.termosystems.ro, termosystems.ro
Subject: ufibernms.router12.net
Issuer: YR2
SANs: ufibernms.router12.net
Subject: server.mobrafilms.ro
Issuer: R13
SANs: server.mobrafilms.ro
Subject: *.dev.ws.rms.rocks
Issuer: Amazon RSA 2048 M04
SANs: *.dev.ws.rms.rocks
Subject: wonderful.api.ai.rms.rocks
Issuer: Amazon RSA 2048 M01
SANs: wonderful.api.ai.rms.rocks, wonderful.app.ai.rms.rocks, wonderful.auth.ai.rms.rocks

IPs Citing This Domain

Hosts whose HTML body references this domain. Strong signal for origin/mirror/embed discovery.

86.124.131.200:80 href · ×6
86.124.131.200:443 href · ×6
94.176.2.31:443 href · ×1

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

No origin-IP leaks detected (yet)

Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.

CT-Log Evidence

Certificates from public Certificate Transparency logs whose subject or SAN names this domain — including historic certs we never observed live.

38f8d1bad2d2f60f… google · xenon2026h2
Subject: *.ms.ro
Issuer: RapidSSL TLS RSA CA G1
SANs: *.ms.ro, ms.ro
Valid: 2026-03-16 00:00:00 → 2026-09-30 23:59:59
f66eb3a1d22e7143… google · xenon2026h2
Subject: *.ms.ro
Issuer: RapidSSL TLS RSA CA G1
SANs: *.ms.ro, ms.ro
Valid: 2026-03-16 00:00:00 → 2026-09-30 23:59:59

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.

Type Value First seen Last seen
SRV _autodiscover._tcp 0 0 443 stsmail.ro 2026-05-27 12:18:07.214 2026-06-25 20:22:31.777
NS ns3.stsisp.ro 2026-05-27 12:18:07.214 2026-06-25 20:22:31.777
NS ns1.stsisp.ro 2026-05-27 12:18:07.214 2026-06-25 20:22:31.777
MX 10 mx1.stsmail.ro 2026-05-27 12:18:07.214 2026-06-25 20:22:31.777
MX 10 mx2.stsmail.ro 2026-05-27 12:18:07.214 2026-06-25 20:22:31.777
NS ns2.stsisp.ro 2026-05-27 12:18:07.214 2026-06-25 20:22:31.777
TXT v=spf1 mx ip4:193.151.29.160/27 include:stsmail.ro ~all 2026-05-27 12:18:07.214 2026-06-25 20:22:31.777
A 195.242.244.149 2026-05-27 12:18:07.214 2026-06-25 20:22:31.777