Reports / hackthebox.com

hackthebox.com

Generated 2026-10-03 06:58 UTC Refresh data

We found 76 subdomains of hackthebox.com in certificate transparency logs, passive DNS and DNS brute force; 42 resolve right now, including app.hackthebox.com, account.hackthebox.com and status.hackthebox.com. hackthebox.com is registered with Amazon Registrar, Inc. since 2010-03-18 and expires 2027-03-18. Its SSL certificate from Google Trust Services expires in 89 days. For email it has an SPF record, DMARC set to quarantine and DKIM keys on 5 common selectors.

Registration: Amazon Registrar, Inc.Since 2010-03-18 · expires 2027-03-18
SSL certificate: 89 days leftGoogle Trust Services
Subdomains: 42 live76 discovered in total
Email authentication: SPF, DMARC, DKIMDMARC policy: quarantine

DNS records

5 of 7 types

GET/domain/hackthebox.com/dns

A2	109.176.239.69 109.176.239.70
AAAA	No AAAA records
MX5	10 alt3.aspmx.l.google.com. 5 alt1.aspmx.l.google.com. 1 aspmx.l.google.com. 5 alt2.aspmx.l.google.com. 10 alt4.aspmx.l.google.com.
TXT13	"figma-domain-verification=d1cdada4c1c15f86d6b7cc65fbd95c5e34502a4c8bb6950368a680433f521c02-1763047074" "google-site-verification=5Zgk1p8QogX_Q_WaZ3PNUx0jaBMcR2CXXD1SYeHk_uM" "google-site-verification=VdT_w4v3nriJ_MIknhzw01nVw10T_DFVf3JP8yVD1C8" "google-site-verification=p8Ke_ETLIL22PW1uxiNOfE_-hLZ2LQd9KmdQS9bARa8" "oneuptime-verification-gKfEKTDuakVmbIHNRkpU" "slack-domain-verification=XJrLipfXUDw7kCGV5rK68GS1d92cVqE51H4UZ6fP" Show all 13 "v=spf1 include:_u.hackthebox.com._spf.smart.ondmarc.com ~all" "1password-site-verification=4ZZGMSMKHBCCTHWRCUW5TEFLCA" "apple-domain-verification=nJdetwYEnUhgLT8W" "atlassian-domain-verification=BOEsvQIaiNXegte2TKsFBSjaCETV5f2f7rvcTiirvI/v9l56nU97DGOQfJIXWJJN" "atlassian-sending-domain-verification=469d03af-e04b-4609-a67a-0c4161077605" "brevo-code:293be74b395c496ce75d12a22ce91aee" "facebook-domain-verification=2ic10ka7c5jbl7ou7nva60919jn15w"
NS2	jill.ns.cloudflare.com. cody.ns.cloudflare.com.
CAA	No CAA records
SOA1	cody.ns.cloudflare.com. sysops.hackthebox.eu. 2416437195 10000 2400 604800 1800

Live lookup, cached up to 5 min.

WHOIS / RDAP

via rdap.org

GET/domain/hackthebox.com/whois

Registrar: Amazon Registrar, Inc.
Registered: 2010-03-18
Expires: 2027-03-18
Last updated: 2026-05-15
Registry handle: 1589213536_DOMAIN_COM-VRSN
Nameservers: cody.ns.cloudflare.comjill.ns.cloudflare.com
Status: client transfer prohibited

RDAP with port-43 WHOIS fallback, cached up to 1 h.

SSL certificate

Valid, 89 days left

GET/domain/hackthebox.com/ssl

Issuer: Google Trust ServicesCN=WE1,O=Google Trust Services,C=US
Subject: hackthebox.com
Valid from: 2026-10-02 13:31 UTC
Valid until: 2026-12-31 14:30 UTC
Serial number: 268770054740877702185603245138316301033
Names covered (2): hackthebox.comadvent-of-the-relics-forum.hackthebox.com

Live TLS handshake on port 443, cached up to 6 h.

Subdomains

42 live · 76 discovered

GET/domain/hackthebox.com/subdomains

academy-cdn.hackthebox.com109.176.239.69
academy.hackthebox.com109.176.239.69
account.hackthebox.com109.176.239.69
analytics.hackthebox.com109.176.239.69
api.jobs.hackthebox.com109.176.239.69
app.hackthebox.com109.176.239.69
artemis.hackthebox.com109.176.239.69
cdn.hackthebox.com109.176.239.69
certificates.hackthebox.com109.176.239.69
challenges-cdn.hackthebox.com109.176.239.69
enterprise-help.hackthebox.com109.176.239.69
enterprise.hackthebox.com109.176.239.69
experience.hackthebox.com109.176.239.69
forum.hackthebox.com109.176.239.69
fygapokei.hackthebox.com109.176.239.69
get.hackthebox.com199.60.103.227
hackthebox.com109.176.239.69
help.hackthebox.com109.176.239.69
hs.hackthebox.com109.176.239.69
labs.hackthebox.com109.176.239.69
linkedin.hackthebox.com109.176.239.69
m.hackthebox.com34.111.99.212
maintenance.hackthebox.com109.176.239.69
mcp.ai.hackthebox.com109.176.239.69
mobile.hackthebox.com109.176.239.69
okt.hackthebox.com23.22.90.252
parrot-storage.hackthebox.com109.176.239.69
profile.hackthebox.com109.176.239.69
proxy.academy.hackthebox.com146.190.139.22
proxy.enterprise-staging.hackthebox.com146.190.139.22
proxy.enterprise.hackthebox.com146.190.139.22
proxy.hackthebox.com146.190.139.22
regex-safety-validator.hackthebox.com109.176.239.69
resources.hackthebox.com199.60.103.227
roadmap.hackthebox.comcname.canny.io
static.hackthebox.com109.176.239.69
status.hackthebox.com109.176.239.69
store.hackthebox.comshops.myshopify.com
t.apc215132.hackthebox.com34.110.180.34
trust.hackthebox.com104.18.41.248
workspace.hackthebox.com109.176.239.69
www.hackthebox.com109.176.239.69

34 more seen in CT logs and passive DNS that don't resolve now

advent-of-the-relics-forum.hackthebox.com
affiliate.hackthebox.com
ai.hackthebox.com
airflow.data-dev.hackthebox.com
analytics-dev.hackthebox.com
api.jobs.stg.hackthebox.com
app-new.hackthebox.com
atlas.hackthebox.com
ctf-api.hackthebox.com
ctf.hackthebox.com
data.hackthebox.com
dbt.data-dev.hackthebox.com
dev.hackthebox.com
email.hackthebox.com
events.hackthebox.com
flock-ng-dev.hackthebox.com
flock-ng.hackthebox.com
forum-staging.hackthebox.com
infra.cluster.hackthebox.com
jobs.hackthebox.com
k8s.flock-ng-dev.hackthebox.com
mail.hackthebox.com
meltano.data-dev.hackthebox.com
mta-sts.hackthebox.com
noahbot-dev.hackthebox.com
noahbot.hackthebox.com
pop.hackthebox.com
referral.hackthebox.com
smtp.hackthebox.com
sso.hackthebox.com
tableau.hackthebox.com
wayback.hackthebox.com
webmail.hackthebox.com
zap.hackthebox.com

Sources: rapiddns 17 · virustotal 62 · dns-brute 2 · subfinder 12

From CT logs, passive DNS (25+ sources) and brute-force. Live means it resolves now.

Email security

GET/domain/hackthebox.com/email-security

SPF Present

v=spf1 include:_u.hackthebox.com._spf.smart.ondmarc.com ~all

DMARC Present

p=quarantine

v=DMARC1; p=quarantine; pct=100; sp=quarantine; rua=mailto:69d7f41b@inbox.ondmarc.com; ruf=mailto:69d7f41b@inbox.ondmarc.com; adkim=r; aspf=r; fo=1; rf=afrf; ri=3600

DKIM 5 found

google._domainkeymail._domainkeydkim._domainkeyemail._domainkeyintercom._domainkey

Show public keys

google._domainkey.hackthebox.com

v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgtSAAoBzIPD1UHG6mS3VJxw4HnfvXgLdwkID3ugGo0NeSkWD+G1TJGtS0ekMcG9sNNZ9aiWnXnUlTHBihLIznGdHOT99d8+hFpfsdx3GFeFTyPJTxj1zjUd4qzYgZZ9CSA86/1GCQk+2m5xqTRc+phWQXfnxwbXdXRbjpE6dhDxCzgmDAgQc3y7KU1FQvbLuXHs5H3A7vzV0AIOLcgOxk5A8nQIvHWA+ZPhnHTLfPlir0ByxCX9UKvDrQsDlQU98afejwxEjFPZsl5xqlqEobaf7zy5ul0rC0k0kuZf3LmOsQ/rIjVn4HqAxmxuk/QwCCgA5aMYKI3I7h9XPbQjxIwIDAQAB

mail._domainkey.hackthebox.com

k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDeMVIzrCa3T14JsNY0IRv5/2V1/v2itlviLQBwXsa7shBD6TrBkswsFUToPyMRWC9tbR/5ey0nRBH0ZVxp+lsmTxid2Y2z+FApQ6ra2VsXfbJP3HE6wAO0YTVEJt1TmeczhEd2Jiz/fcabIISgXEdSpTYJhb0ct0VJRxcg4c8c7wIDAQAB

dkim._domainkey.hackthebox.com

v=DKIM1;k=rsa;p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2gAtnNzEfzNxLKMcfPJuuFoocS/mMTkSMoCz0ClygNC7Ojqc3aXw1GW+NAIGO9M62EX+lfWTt+/4Eksdn7NovdR0FbjfDOrTlVAeaePwXB1S/kNBpOEk/4vTDYW3oam2uSm2GTMiQRMlj1vYKx/wG5jAjHyWNMblyOTYXsSd3iz4vjGEDsZMZplaAZX+Tkx3eAsCoDAPLEmsOFhLIm570WCAYwtXErPMhR6XcDzKpleN7f9koc5zcupX/pHalnWsIHTdSEcrJ9NNkXE9ZOllTz/9cjkZJu28UN/XRczjfrF6zuuBm+QkY2qHxU9edT3YUM1CqX6terkmxGUxVOLtwIDAQAB

email._domainkey.hackthebox.com

k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC+bFj+hClr+UByfNi6z6S3XJ5kR1v8G9+J5TT5cwzX8bgwChYYuogzXPdvcDt3AgN4sV5lbjbifZIfJ9yPswfcaGEoXLHUqBna1ud3R18IKVzl0xAi5edi6ofsx5ynhUt2B3C02FCQA5sdkbDzfiyB0sAdxhUIbT6PIv2BEeaqywIDAQAB

intercom._domainkey.hackthebox.com

k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDFxkChvfb5hT3Sn79r6tAGMrBPqxtFTUOv3LItUcLr0JDVw8jhw1YQYWc3+KHAIZS3jBSy3pCZWV2u+dfX/FBT35IHMiqrVYaood8c7HVr2Q8DBqmv/z5VBMWURlS5MdWXih9PttC8MvGIcZPWRXPoQkv8gRURvklvED+EaewZVQIDAQAB

DKIM checked on 29 common selectors; custom ones can't be discovered. Cached up to 1 h.

Get this report as JSON

One call returns everything on this page. Each section is also its own endpoint.

curl "https://domain-intelligence-api.p.rapidapi.com/lookup/hackthebox.com" \
  -H "X-RapidAPI-Host: domain-intelligence-api.p.rapidapi.com" \
  -H "X-RapidAPI-Key: YOUR_RAPIDAPI_KEY"

import requests

r = requests.get(
    "https://domain-intelligence-api.p.rapidapi.com/lookup/hackthebox.com",
    headers={
        "X-RapidAPI-Host": "domain-intelligence-api.p.rapidapi.com",
        "X-RapidAPI-Key": "YOUR_RAPIDAPI_KEY",
    },
    timeout=30,
)
print(r.json())

// Node 18+ (built-in fetch)
const res = await fetch(
  "https://domain-intelligence-api.p.rapidapi.com/lookup/hackthebox.com",
  { headers: {
      "X-RapidAPI-Host": "domain-intelligence-api.p.rapidapi.com",
      "X-RapidAPI-Key": "YOUR_RAPIDAPI_KEY",
  } }
);
console.log(await res.json());

<?php
$ch = curl_init("https://domain-intelligence-api.p.rapidapi.com/lookup/hackthebox.com");
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_HTTPHEADER, [
    "X-RapidAPI-Host: domain-intelligence-api.p.rapidapi.com",
    "X-RapidAPI-Key: YOUR_RAPIDAPI_KEY",
]);
$data = json_decode(curl_exec($ch), true);
print_r($data);

1,000 requests a month free, no card Paid plans up to 5M a month ?wait=1 waits for every subdomain source to finish

Get free API key See pricing

More reports

jetbrains.com docker.com kubernetes.io npmjs.com pypi.org rust-lang.org python.org nodejs.org All reports →