Check-Host.cc

Domain

redbus.pro

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

Run a live full scan of redbus.pro

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now
Hosting IPs
23
A/AAAA targets
Subdomains
25
CT + scan + body
Record Types
seen in DNS
Observed Certs
4
in our scans

DNS Records

A
AAAA
MX
NS
TXT
CNAME
CAA

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

Certificate observations pending

TLS certs naming this domain in subject or SANs will appear here as our scan-layer catches them.

IPs Citing This Domain

No citing IPs found yet

As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

Origin IP Origin ASN CDN ASN Confidence Reasoning
171.102.12.139 AS7470 AS16625 95% cert 7382ae65… served by 171.102.12.139 (AS7470) carries SAN m.redbus.pro which currently resolves through Akamai (AS16625) at 23.222.41.51, 2a02:26f0:1180:89c::27b2, 2a02:26f0:1180:8a3::27b2, 23.54.189.102
23.216.89.189 AS7303 AS16625 95% cert 7382ae65… served by 23.216.89.189 (AS7303) carries SAN m.redbus.pro which currently resolves through Akamai (AS16625) at 23.222.41.51, 2a02:26f0:1180:89c::27b2, 2a02:26f0:1180:8a3::27b2, 23.54.189.102
23.216.27.182 AS12252 AS16625 95% cert 7382ae65… served by 23.216.27.182 (AS12252) carries SAN m.redbus.pro which currently resolves through Akamai (AS16625) at 23.222.41.51, 2a02:26f0:1180:89c::27b2, 2a02:26f0:1180:8a3::27b2, 104.102.39.106
104.71.99.224 AS55836 AS16625 95% cert 7382ae65… served by 104.71.99.224 (AS55836) carries SAN m.redbus.pro which currently resolves through Akamai (AS16625) at 104.102.39.106, 2a02:26f0:1180:89c::27b2, 2a02:26f0:1180:8a3::27b2, 23.222.41.51
23.192.180.139 AS24203 AS16625 95% cert 7382ae65… served by 23.192.180.139 (AS24203) carries SAN m.redbus.pro which currently resolves through Akamai (AS16625) at 23.222.41.51, 2a02:26f0:1180:89c::27b2, 2a02:26f0:1180:8a3::27b2, 23.54.189.102

CT-Log Evidence

Certificates from public Certificate Transparency logs whose subject or SAN names this domain — including historic certs we never observed live.

34e64d64ea1e779b… google · xenon2026h2
Subject: *.redbus.pro
Issuer: Amazon RSA 2048 M04
SANs: *.redbus.pro, redbus.pro
Valid: 2026-03-17 00:00:00 → 2026-09-30 23:59:59
b9ab2dfeb6382ccf… google · xenon2026h2
Subject: *.redbus.pro
Issuer: Amazon RSA 2048 M04
SANs: *.redbus.pro, redbus.pro
Valid: 2026-03-17 00:00:00 → 2026-09-30 23:59:59

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Domain timeline pending

Passive-DNS history accumulates as our forward-DNS crawler observes A/AAAA/MX/NS/TXT records over time.