Reports / metasploit.com

metasploit.com

Generated Refresh data

We found 33 subdomains of metasploit.com in certificate transparency logs, passive DNS and DNS brute force; 18 resolve right now, including docs.metasploit.com, help.metasploit.com and blog.metasploit.com. metasploit.com is registered with MarkMonitor Inc. since 2003-06-10 and expires 2028-06-10. Its SSL certificate from Amazon expires in 179 days. For email it has an SPF record, DMARC set to quarantine and DKIM keys on 3 common selectors.

Registration
MarkMonitor Inc.Since 2003-06-10 · expires 2028-06-10
SSL certificate
179 days leftAmazon
Subdomains
18 live33 discovered in total
Email authentication
SPF, DMARC, DKIMDMARC policy: quarantine

DNS records

5 of 7 types
A4
  • 3.166.192.105
  • 3.166.192.35
  • 3.166.192.54
  • 3.166.192.57
AAAA No AAAA records
MX5
  • 1 aspmx.l.google.com.
  • 10 alt3.aspmx.l.google.com.
  • 10 alt4.aspmx.l.google.com.
  • 5 alt1.aspmx.l.google.com.
  • 5 alt2.aspmx.l.google.com.
TXT7
  • "msu7hdpr3s9t605hgk30nulv61"
  • "v=spf1 include:metasploit.com._nspf.vali.email include:%{i}._ip.%{h}._ehlo.%{d}._spf.vali.email ~all"
  • "MS=ms22912677"
  • "_sqs23fmfbpaz67lwwf0fkq9it2igs4f"
  • "box-domain-verification=0a173e1b45d2e739bf8c843716f8558ff893a61db4675ebc372299d827c0f781"
  • "google-site-verification=3c5G707h36r_fLqn_xjqIXpiZ8PXrb12BD7YHTNpU-I"
  • "gs9ft0rj82ipad4qackth7mc9h"
NS4
  • ns-1709.awsdns-21.co.uk.
  • ns-290.awsdns-36.com.
  • ns-627.awsdns-14.net.
  • ns-1441.awsdns-52.org.
CAA No CAA records
SOA1
  • ns-290.awsdns-36.com. awsdns-hostmaster.amazon.com. 1 7200 900 1209600 86400

Live lookup, cached up to 5 min.

WHOIS / RDAP

via rdap.org
Registrar
MarkMonitor Inc.
Registered
2003-06-10
Expires
2028-06-10
Last updated
2026-05-09
Registry handle
98973533_DOMAIN_COM-VRSN
Nameservers
ns-1441.awsdns-52.orgns-1709.awsdns-21.co.ukns-290.awsdns-36.comns-627.awsdns-14.net
Status
client delete prohibitedclient transfer prohibitedclient update prohibited

RDAP with port-43 WHOIS fallback, cached up to 1 h.

SSL certificate

Valid, 179 days left
Issuer
AmazonCN=Amazon RSA 2048 M04,O=Amazon,C=US
Subject
www.metasploit.com
Valid from
2026-09-15 00:00 UTC
Valid until
2027-03-31 23:59 UTC
Serial number
12910377584340942579273872264114891013
Names covered (2)
www.metasploit.commetasploit.com

Live TLS handshake on port 443, cached up to 6 h.

Subdomains

18 live · 33 discovered
  • apt.metasploit.com13.35.107.4
  • blog.metasploit.com16.15.207.58
  • cf-4d7edfh2s8knayh6.metasploit.com3.211.20.208
  • dev.metasploit.com13.35.107.26
  • docs.metasploit.com185.199.108.153
  • downloads.metasploit.com13.35.107.4
  • egadz-dev-admin.metasploit.com198.58.109.32
  • egadz-dev.metasploit.com198.58.109.32
  • egadz.metasploit.com198.58.109.32
  • framework.metasploit.com208.118.237.137
  • help.metasploit.com3.171.61.16
  • metasploit.com3.171.76.122
  • osx.metasploit.com13.35.107.4
  • resources.metasploit.com185.199.108.153
  • rpm.metasploit.com13.35.107.4
  • updates.metasploit.com100.30.16.83
  • windows.metasploit.com13.35.107.4
  • www.metasploit.com3.166.192.105
15 more seen in CT logs and passive DNS that don't resolve now
  • bolg.metasploit.com
  • cf-k21xv24o1z.metasploit.com
  • ci.metasploit.com
  • egadz1-admin.metasploit.com
  • framework-mirrors.metasploit.com
  • mail.metasploit.com
  • mail2.metasploit.com
  • msupdates.metasploit.com
  • slug.metasploit.com
  • spool.metasploit.com
  • staging.metasploit.com
  • sugar.metasploit.com
  • trac.metasploit.com
  • www.help.metasploit.com
  • www.updates.metasploit.com
Sources: virustotal 30 · rapiddns 16 · subfinder 3

From CT logs, passive DNS (25+ sources) and brute-force. Live means it resolves now.

SPF Present
v=spf1 include:metasploit.com._nspf.vali.email include:%{i}._ip.%{h}._ehlo.%{d}._spf.vali.email ~all
DMARC Present
p=quarantine
v=DMARC1; p=quarantine; rua=mailto:dmarc_agg@vali.email
DKIM 3 found
google._domainkeyselector1._domainkeyselector2._domainkey
Show public keys
google._domainkey.metasploit.com
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmH2O5npuAYHGWjJCHKLF+Vig6YQ1Lz+naSXT3TGcXuUfSzc/aJeYXlgdvd0tYCRPaSSKcV80ClVSNAZEEjwkDvYoME4qngPOXW2daabuzUUWnCqdMM+aOC6rr+56XB3oF0H5MIv4XIsvf4nzlFzSANG2orUeAyqq/W+5bPsB8BvLG1SlJrz/8iymhfUAZC8m58ryO/6p7IEP31Md77kQs+/vSFMdDbsTfnJoYV4y5e/69wNMldHDoPBgLoPvPGY5ayWlRNAH9pYTzKNrq+DKHLDXENDxsWwyuSHbOBZv5c4zG5ol9K3NatAQg9JmgOThpNtp+hIjZVR94y8FbOADJwIDAQAB
selector1._domainkey.metasploit.com
v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCU5Ccrx6NnJUcyK4/L4A4YFVBpwKr1QG7ECxTTEl2Y2Y0md6SZzUSiK3ZKIZm/+jhAvEqgQhI0ApmRBuAD1HobTJUtLi7dLY1LGWTSqCXj2yL10VJmHqW99PcfCAzxgfjDBKgXDok/NNN01UUr3o3YhmC0xK7Do2v7CZ+18jrz/wIDAQAB; n=1024,1450489273,1
selector2._domainkey.metasploit.com
v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDx9XGta+p/1Xv8G5OvG7qbsh0jx86lNtoNpTxG9AsvT5vNbH9vGoqE/BKP3z7yyzaIxPwiOnDBNx5s6LKOQ90XWWJoJTvCWwjt4SGrPO9T5krknPZxCTimLtiIVsF5X3orV7BgnRGwlUSHN9MniJG6C7Ps23145FOY9rvUQFNlhwIDAQAB; n=1024,1450489273,1

DKIM checked on 29 common selectors; custom ones can't be discovered. Cached up to 1 h.

Get this report as JSON

One call returns everything on this page. Each section is also its own endpoint.

curl "https://domain-intelligence-api.p.rapidapi.com/lookup/metasploit.com" \
  -H "X-RapidAPI-Host: domain-intelligence-api.p.rapidapi.com" \
  -H "X-RapidAPI-Key: YOUR_RAPIDAPI_KEY"
1,000 requests a month free, no card Paid plans up to 5M a month ?wait=1 waits for every subdomain source to finish

More reports