Check-Host.cc

Try 1.1.1.1 AS13335 check-host.cc /country/de /tld/cc
Domain

redbus.id

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

DNS Check HTTP Check Run Full Scan .id TLD

Run a live full scan of redbus.id

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now
Hosting IPs
76
A/AAAA targets
Subdomains
25
CT + scan + body
Record Types
4
seen in DNS
Observed Certs
4
in our scans

DNS Records

A
18.141.102.204, 46.137.218.251, 52.220.49.90, 52.77.9.27
AAAA
—
MX
1 aspmx.l.google.com, 10 aspmx2.googlemail.com, 10 aspmx3.googlemail.com, 5 alt1.aspmx.l.google.com, 5 alt2.aspmx.l.google.com
NS
ns-1121.awsdns-12.org, ns-1726.awsdns-23.co.uk, ns-430.awsdns-53.com, ns-847.awsdns-41.net
TXT
google-site-verification=edykYZz20ka9xrmnWCravs4IUEtWt6Wenw5v-iGxzhQ, v=spf1 ip4:175.41.136.193 ip4:54.251.251.109 ip4:13.228.140.34 ip4:54.240.38.172 ip4:54.240.38.173 include:amazonses.com -all
CNAME
—
CAA
—

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.

Subdomain Resolves to Last seen
www.redbus.id
2.21.23.180 2.19.100.133 2a02:26f0:1700:189::27b2 2a02:26f0:1700:18b::27b2 +45
2026-07-28 21:06:34.628
m.redbus.id
2.21.23.180 2600:1408:ec00:e::1730:cb44 2600:1408:ec00:e::1730:cb49 2.21.23.146 +41
2026-07-28 21:06:34.628
redbus.id
46.137.218.251 18.141.102.204 52.220.49.90 52.77.9.27
2026-06-16 03:56:43.086

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

Certificate observations pending

TLS certs naming this domain in subject or SANs will appear here as our scan-layer catches them.

IPs Citing This Domain

No citing IPs found yet

As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

Origin IP Origin ASN CDN ASN Confidence Reasoning
171.102.12.139 AS7470 AS20940 95% cert 7382ae65… served by 171.102.12.139 (AS7470) carries SAN m.redbus.id which currently resolves through Akamai (AS20940) at 2.21.23.146, 2.21.23.180, 2a02:26f0:1180:31::210:6c4, 2a02:26f0:1180:31::210:6cf
23.216.89.189 AS7303 AS20940 95% cert 7382ae65… served by 23.216.89.189 (AS7303) carries SAN m.redbus.id which currently resolves through Akamai (AS20940) at 2.21.23.146, 2.21.23.180, 2a02:26f0:1180:31::210:6c4, 2a02:26f0:1180:31::210:6cf
23.216.27.182 AS12252 AS20940 95% cert 7382ae65… served by 23.216.27.182 (AS12252) carries SAN m.redbus.id which currently resolves through Akamai (AS20940) at 2.21.23.146, 2.21.23.180, 2a02:26f0:1180:31::210:6c4, 2a02:26f0:1180:31::210:6cf
104.71.99.224 AS55836 AS20940 95% cert 7382ae65… served by 104.71.99.224 (AS55836) carries SAN m.redbus.id which currently resolves through Akamai (AS20940) at 23.72.254.46, 23.72.254.13, 2a02:26f0:1180:31::210:6c4, 2a02:26f0:1180:31::210:6cf
23.192.180.139 AS24203 AS20940 95% cert 7382ae65… served by 23.192.180.139 (AS24203) carries SAN m.redbus.id which currently resolves through Akamai (AS20940) at 2.21.23.146, 2.21.23.180, 2a02:26f0:2780:60::214:f560, 2a02:26f0:2780:60::214:f558

CT-Log Evidence

Certificates from public Certificate Transparency logs whose subject or SAN names this domain — including historic certs we never observed live.

45ffa63869f37989… google · argon2026h2
Subject: redbus.in
Issuer: Amazon RSA 2048 M01
SANs: redbus.in, redbus.my, redbus.co, redbus.id, redbus.pe, redbus.sg
Valid: 2025-10-15 00:00:00 → 2026-11-12 23:59:59
b913cf26722eb55a… google · argon2026h2
Subject: redbus.in
Issuer: Amazon RSA 2048 M01
SANs: redbus.in, redbus.my, redbus.co, redbus.id, redbus.pe, redbus.sg
Valid: 2025-10-15 00:00:00 → 2026-11-12 23:59:59
45ffa63869f37989… cloudflare · nimbus2026
Subject: redbus.in
Issuer: Amazon RSA 2048 M01
SANs: redbus.in, redbus.my, redbus.co, redbus.id, redbus.pe, redbus.sg
Valid: 2025-10-15 00:00:00 → 2026-11-12 23:59:59
b913cf26722eb55a… cloudflare · nimbus2026
Subject: redbus.in
Issuer: Amazon RSA 2048 M01
SANs: redbus.in, redbus.my, redbus.co, redbus.id, redbus.pe, redbus.sg
Valid: 2025-10-15 00:00:00 → 2026-11-12 23:59:59
537a9ec6f93b40ad… google · argon2026h2
Subject: *.redbus.id
Issuer: DigiCert Global G3 TLS ECC SHA384 2020 CA1
SANs: *.redbus.id, redbus.id
Valid: 2025-09-09 00:00:00 → 2026-09-09 23:59:59
ef495bee017d36b9… google · argon2026h2
Subject: *.redbus.id
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: *.redbus.id, redbus.id
Valid: 2025-09-09 00:00:00 → 2026-09-09 23:59:59

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.

Type Value First seen Last seen
NS ns-847.awsdns-41.net 2026-05-26 16:31:02.505 2026-06-16 03:56:43.086
NS ns-1121.awsdns-12.org 2026-05-26 16:31:02.505 2026-06-16 03:56:43.086
MX 10 aspmx3.googlemail.com 2026-05-26 16:31:02.505 2026-06-16 03:56:43.086
NS ns-430.awsdns-53.com 2026-05-26 16:31:02.505 2026-06-16 03:56:43.086
NS ns-1726.awsdns-23.co.uk 2026-05-26 16:31:02.505 2026-06-16 03:56:43.086
MX 10 aspmx2.googlemail.com 2026-05-26 16:31:02.505 2026-06-16 03:56:43.086
MX 5 alt2.aspmx.l.google.com 2026-05-26 16:31:02.505 2026-06-16 03:56:43.086
MX 1 aspmx.l.google.com 2026-05-26 16:31:02.505 2026-06-16 03:56:43.086
A 52.220.49.90 2026-05-26 16:31:02.505 2026-05-27 15:32:49.575
TXT v=spf1 ip4:175.41.136.193 ip4:54.251.251.109 ip4:13.228.140.34 ip4:54.240.38.172 ip4:54.240.38.173 include:amazonses.com -all 2026-05-26 16:31:02.505 2026-06-16 03:56:43.086
MX 5 alt1.aspmx.l.google.com 2026-05-26 16:31:02.505 2026-06-16 03:56:43.086
A 18.141.102.204 2026-05-26 16:31:02.505 2026-05-27 15:32:49.575
TXT google-site-verification=edykYZz20ka9xrmnWCravs4IUEtWt6Wenw5v-iGxzhQ 2026-05-26 16:31:02.505 2026-06-16 03:56:43.086
A 46.137.218.251 2026-06-15 00:54:33.538 2026-06-16 03:56:43.086
A 52.77.9.27 2026-06-15 00:54:33.538 2026-06-16 03:56:43.086