Check-Host.cc

Domain

rf.ru

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

Run a live full scan of rf.ru

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now
Hosting IPs
A/AAAA targets
Subdomains
CT + scan + body
Record Types
seen in DNS
Observed Certs
in our scans

DNS Records

A
AAAA
MX
NS
TXT
CNAME
CAA

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Subdomain enumeration pending

Every subdomain ever issued a TLS cert under this apex — extracted from Certificate Transparency logs, our own scan observations and body references.

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

Subject: proxy.yarurf.ru
Issuer: YE1
SANs: proxy.yarurf.ru
Subject: api-mastervisarf.ru
Issuer: YR2
SANs: api-mastervisarf.ru
Subject: cisar-disc.fparf.ru
Issuer: YR1
SANs: cisar-disc.fparf.ru
Subject: crm.ts-rf.ru
Issuer: YR2
SANs: crm.ts-rf.ru
Subject: demodorf.rufmobilstag.fcio.net
Issuer: YE1
SANs: demodorf.rufmobilstag.fcio.net
Subject: expe1-sc.rost.meteorf.ru
Issuer: R12
SANs: collab-edge.rost.meteorf.ru, connect.rost.meteorf.ru, expe-sc.rost.meteorf.ru, expe1-sc.rost.meteorf.ru, expe2-sc.rost.meteorf.ru
Subject: minoboronarf.ru
Issuer: YE1
SANs: minoboronarf.ru, www.minoboronarf.ru
Subject: *.meteorf.ru
Issuer: GlobalSign GCC R3 DV TLS CA 2020
SANs: *.meteorf.ru, meteorf.ru
Subject: zadelrf.ru
Issuer: E7
SANs: zadelrf.ru
Subject: api.bankrotstvojuristrf.ru
Issuer: YE2
SANs: api.bankrotstvojuristrf.ru
Subject: prod.fl-node-01-routing.security-sbrf.ru
Issuer: YE1
SANs: prod.fl-node-01-routing.security-sbrf.ru
Subject: pfrf.ru
Issuer: YE1
SANs: *.pfrf.ru, pfrf.ru
Subject: 1win-clubrf.ru
Issuer: YE2
SANs: 1win-clubrf.ru
Subject: *.mag-rf.ru
Issuer: GlobalSign GCC R6 AlphaSSL CA 2025
SANs: *.mag-rf.ru, mag-rf.ru
Subject: service.cn2rf.ru
Issuer: R12
SANs: service.cn2rf.ru, testservice.cn2rf.ru
Subject: *.iterrf.ru
Issuer: GlobalSign GCC R6 AlphaSSL CA 2025
SANs: *.iterrf.ru, iterrf.ru
Subject: *.frprf.ru
Issuer: GlobalSign GCC R6 AlphaSSL CA 2025
SANs: *.frprf.ru, frprf.ru
Subject: mx.stud.gumrf.ru
Issuer: YR2
SANs: mx.stud.gumrf.ru, stud.gumrf.ru
Subject: *.izv-udprf.ru
Issuer: GlobalSign GCC R3 DV TLS CA 2020
SANs: *.izv-udprf.ru, izv-udprf.ru
Subject: *.rssrf.ru
Issuer: GlobalSign GCC R3 DV TLS CA 2020
SANs: *.rssrf.ru, rssrf.ru
Subject: *.izv-udprf.ru
Issuer: GlobalSign GCC R3 DV TLS CA 2020
SANs: *.izv-udprf.ru, izv-udprf.ru
Subject: 1win-clubrf.ru
Issuer: YE2
SANs: 1win-clubrf.ru
Subject: *.pptrf.ru
Issuer: GlobalSign GCC R3 DV TLS CA 2020
SANs: *.pptrf.ru, autodiscover.pptrf.ru, mail.pptrf.ru, owa.pptrf.ru, pptrf.ru
Subject: images.gosrf.ru
Issuer: YE1
SANs: images.gosrf.ru
Subject: gstrf.ru
Issuer: COMODO RSA Domain Validation Secure Server CA
SANs: gstrf.ru, www.gstrf.ru
Subject: mail2.tavridarf.ru
Issuer: YR2
SANs: autodiscover.tavridarf.ru, mail2.tavridarf.ru
Subject: prod.pl-node-02.security-sbrf.ru
Issuer: YE2
SANs: prod.pl-node-02.security-sbrf.ru
Subject: api.aileadrf.ru
Issuer: YR1
SANs: api.aileadrf.ru
Subject: acs1.sbrf.ru
Issuer: Russian Trusted Sub CA
SANs: acs1.sbrf.ru, acs10.sbrf.ru, acs11.sbrf.ru, acs12.sbrf.ru, acs2.sbrf.ru, acs3.sbrf.ru, acs4.sbrf.ru, acs5.sbrf.ru, acs6.sbrf.ru, acs7.sbrf.ru, acs8.sbrf.ru, acs9.sbrf.ru
Subject: pay.woodbookrf.ru
Issuer: YR1
SANs: pay.woodbookrf.ru

IPs Citing This Domain

No citing IPs found yet

As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

No origin-IP leaks detected (yet)

Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Domain timeline pending

Passive-DNS history accumulates as our forward-DNS crawler observes A/AAAA/MX/NS/TXT records over time.