Reports / portswigger.net
portswigger.net
We found 51 subdomains of portswigger.net in certificate transparency logs, passive DNS and DNS brute force; 30 resolve right now, including login.portswigger.net, id.portswigger.net and status.portswigger.net. portswigger.net is registered with Name.com, Inc. since 2001-09-09 and expires 2027-09-09. Its SSL certificate from Amazon expires in 120 days. For email it has an SPF record, DMARC set to quarantine and DKIM keys on 1 common selector.
- Registration
- Name.com, Inc.Since 2001-09-09 · expires 2027-09-09
- SSL certificate
- 120 days leftAmazon
- Subdomains
- 30 live51 discovered in total
- Email authentication
- SPF, DMARC, DKIMDMARC policy: quarantine
DNS records
6 of 7 types| A4 |
|
| AAAA | No AAAA records |
| MX7 |
|
| TXT23 |
Show all 23
|
| NS4 |
|
| CAA5 |
|
| SOA1 |
|
Live lookup, cached up to 5 min.
WHOIS / RDAP
via rdap.org- Registrar
- Name.com, Inc.
- Registered
- 2001-09-09
- Expires
- 2027-09-09
- Last updated
- 2026-08-08
- Registry handle
- 77090119_DOMAIN_NET-VRSN
- Nameservers
- ns-1337.awsdns-39.orgns-194.awsdns-24.comns-1955.awsdns-52.co.ukns-573.awsdns-07.net
- Status
- client transfer prohibited
RDAP with port-43 WHOIS fallback, cached up to 1 h.
SSL certificate
Valid, 120 days left- Issuer
- AmazonCN=Amazon RSA 2048 M01,O=Amazon,C=US
- Subject
- portswigger.net
- Valid from
- 2026-07-18 00:00 UTC
- Valid until
- 2027-01-31 23:59 UTC
- Serial number
- 8883837946949355722463544450523095980
- Names covered (1)
- portswigger.net
Live TLS handshake on port 443, cached up to 6 h.
Subdomains
30 live · 51 discovered- analytics.portswigger.net52.19.241.127
- burpcollaborator2.portswigger.net3.248.33.252
- collections.portswigger.net3.167.56.108
- csat.portswigger.net104.21.27.147
- customer-hub.portswigger.net216.150.1.65
- dast-user-reporting.portswigger.net3.171.38.108
- direct.portswigger.net34.240.175.156
- email-tracking.portswigger.net104.18.2.17
- enquiries.portswigger.net176.34.116.232
- enterprise.portswigger.net104.18.34.21
- formsubmission.portswigger.net108.132.186.128
- forum.portswigger.net176.34.116.232
- go.portswigger.net18.208.125.13
- id.portswigger.net3.170.3.111
- jml-automations.portswigger.net3.170.3.105
- licensing.portswigger.net34.241.178.141
- links.portswigger.net18.160.46.101
- login.portswigger.net104.18.34.171
- perfdata.portswigger.net108.129.50.13
- perncuah3mv82cmoptm4jauen3ocmq9p.portswigger.net34.240.175.156
- pm-bounces.portswigger.netpm.mtasv.net
- portswigger.net108.138.85.105
- pro.portswigger.net176.34.116.232
- releases.portswigger.net176.34.116.232
- share.portswigger.net13.35.78.116
- status.portswigger.net3.170.19.27
- tech-radar.portswigger.net3.170.19.121
- technology.portswigger.net13.226.209.48
- telemetry.portswigger.net3.170.42.23
- trust.portswigger.net104.18.4.130
No subdomains found.
21 more seen in CT logs and passive DNS that don't resolve now
- a787d072fe3d51121845f169bdc36cbe.portswigger.net
- ai.portswigger.net
- auth.portswigger.net
- blog.portswigger.net
- burpcollaborator1.portswigger.net
- cheat-sheets.portswigger.net
- cloudfront.direct.portswigger.net
- docs.portswigger.net
- enterprise-demo.portswigger.net
- flags.portswigger.net
- jeeves.portswigger.net
- locking-rgthanwoasxdyb5nz2ajemahntfkwzsz.portswigger.net
- meetings.portswigger.net
- my.portswigger.net
- perfdata2.portswigger.net
- support.portswigger.net
- survey.portswigger.net
- surveys.portswigger.net
- tools.portswigger.net
- www.my.portswigger.net
- www.portswigger.net
Shared infrastructure, collapsed:
Sources: virustotal 48 · rapiddns 11 · subfinder 3
From CT logs, passive DNS (25+ sources) and brute-force. Live means it resolves now.
Email security
SPF Present
v=spf1 ip4:23.249.220.34/32 ip4:23.249.220.35/32 ip4:54.240.55.173/32 ip4:54.240.55.174/32 include:_spf.google.com include:spf.redpoints.com include:_spf.salesforce.com ~all
DMARC Present
p=quarantine
v=DMARC1; p=quarantine; sp=reject; rua=mailto:postmaster@portswigger.net; fo=1
DKIM 1 found
google._domainkey
Show public keys
google._domainkey.portswigger.net
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlq8CZh+e7dHEp6zGnF9utiAQ9UenS8ApGWjYvNnDow6hudUIxezxHZ/TTFvwpyt4UznnrjkhrRmRdR0CP5W7F89Brg6ML+7zO7T1y84QV4hAO9xm3xCHvHjnlpikSDyMWX/TeC/gidY/RcdH5QwmPXHjWo1a3/JFIlfQuZMychmg9ekHyYc/DwxbSQosndQQdEtkd2dgQDnqkthm7qyu8t2hc/ua8IktNO4udyETT1d8L0gsSsbhc6esiiWBVCUUWuXXxnT6tXXsLyTRLl/1TzcmQdfV1uJaBaTiVsVwjbp4ICpceW0FqQAy8jM06YP8h1wn6Enuai+Er4q0QvRhhQIDAQAB
DKIM checked on 29 common selectors; custom ones can't be discovered. Cached up to 1 h.
Get this report as JSON
One call returns everything on this page. Each section is also its own endpoint.
curl "https://domain-intelligence-api.p.rapidapi.com/lookup/portswigger.net" \
-H "X-RapidAPI-Host: domain-intelligence-api.p.rapidapi.com" \
-H "X-RapidAPI-Key: YOUR_RAPIDAPI_KEY"
import requests
r = requests.get(
"https://domain-intelligence-api.p.rapidapi.com/lookup/portswigger.net",
headers={
"X-RapidAPI-Host": "domain-intelligence-api.p.rapidapi.com",
"X-RapidAPI-Key": "YOUR_RAPIDAPI_KEY",
},
timeout=30,
)
print(r.json())
// Node 18+ (built-in fetch)
const res = await fetch(
"https://domain-intelligence-api.p.rapidapi.com/lookup/portswigger.net",
{ headers: {
"X-RapidAPI-Host": "domain-intelligence-api.p.rapidapi.com",
"X-RapidAPI-Key": "YOUR_RAPIDAPI_KEY",
} }
);
console.log(await res.json());
<?php
$ch = curl_init("https://domain-intelligence-api.p.rapidapi.com/lookup/portswigger.net");
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_HTTPHEADER, [
"X-RapidAPI-Host: domain-intelligence-api.p.rapidapi.com",
"X-RapidAPI-Key: YOUR_RAPIDAPI_KEY",
]);
$data = json_decode(curl_exec($ch), true);
print_r($data);
1,000 requests a month free, no card
Paid plans up to 5M a month
?wait=1 waits for every subdomain source to finish