Reports / portswigger.net
portswigger.net
We found 51 subdomains of portswigger.net in certificate transparency logs, passive DNS and DNS brute force; 39 resolve right now, including login.portswigger.net, auth.portswigger.net and id.portswigger.net. portswigger.net is registered with Name.com, Inc. since 2001-09-09 and expires 2027-09-09. Its SSL certificate from Amazon expires in 116 days. For email it has an SPF record, DMARC set to quarantine and DKIM keys on 1 common selector.
- Registration
- Name.com, Inc.Since 2001-09-09 · expires 2027-09-09
- SSL certificate
- 116 days leftAmazon
- Subdomains
- 39 live51 discovered in total
- Email authentication
- SPF, DMARC, DKIMDMARC policy: quarantine
DNS records
6 of 7 types| A4 |
|
| AAAA | No AAAA records |
| MX7 |
|
| TXT23 |
Show all 23
|
| NS4 |
|
| CAA5 |
|
| SOA1 |
|
Live lookup, cached up to 5 min.
WHOIS / RDAP
via rdap.org- Registrar
- Name.com, Inc.
- Registered
- 2001-09-09
- Expires
- 2027-09-09
- Last updated
- 2026-08-08
- Registry handle
- 77090119_DOMAIN_NET-VRSN
- Nameservers
- ns-1337.awsdns-39.orgns-194.awsdns-24.comns-1955.awsdns-52.co.ukns-573.awsdns-07.net
- Status
- client transfer prohibited
RDAP with port-43 WHOIS fallback, cached up to 1 h.
SSL certificate
Valid, 116 days left- Issuer
- AmazonCN=Amazon RSA 2048 M01,O=Amazon,C=US
- Subject
- portswigger.net
- Valid from
- 2026-07-18 00:00 UTC
- Valid until
- 2027-01-31 23:59 UTC
- Serial number
- 8883837946949355722463544450523095980
- Names covered (1)
- portswigger.net
Live TLS handshake on port 443, cached up to 6 h.
Subdomains
39 live · 51 discovered- ai.portswigger.net18.67.76.113
- analytics.portswigger.net52.210.254.210
- auth.portswigger.net13.226.238.114
- blog.portswigger.net54.171.6.110
- burpcollaborator1.portswigger.net54.77.139.23
- burpcollaborator2.portswigger.net3.248.33.252
- collections.portswigger.net3.167.56.108
- csat.portswigger.net104.21.27.147
- customer-hub.portswigger.net216.150.1.193
- dast-user-reporting.portswigger.net3.171.38.108
- direct.portswigger.net108.128.249.86
- email-tracking.portswigger.net104.18.2.17
- enquiries.portswigger.net54.171.6.110
- enterprise.portswigger.net104.18.34.21
- formsubmission.portswigger.net46.137.4.119
- forum.portswigger.net54.171.6.110
- go.portswigger.net18.208.125.13
- id.portswigger.net3.170.3.111
- jeeves.portswigger.net3.171.100.10
- jml-automations.portswigger.net3.170.3.105
- licensing.portswigger.net34.241.178.141
- links.portswigger.net18.160.46.101
- login.portswigger.net104.18.34.171
- perfdata.portswigger.net34.255.165.4
- perfdata2.portswigger.net34.255.165.4
- perncuah3mv82cmoptm4jauen3ocmq9p.portswigger.net108.128.249.86
- pm-bounces.portswigger.net18.227.176.23
- portswigger.net108.138.85.105
- pro.portswigger.net54.171.6.110
- releases.portswigger.net54.171.6.110
- share.portswigger.net13.35.78.116
- status.portswigger.net3.170.19.27
- support.portswigger.net54.171.6.110
- tech-radar.portswigger.net3.170.19.121
- technology.portswigger.net13.226.209.48
- telemetry.portswigger.net3.170.42.23
- tools.portswigger.net3.171.61.32
- trust.portswigger.net104.18.4.130
- www.portswigger.net54.171.6.110
No subdomains found.
12 more seen in CT logs and passive DNS that don't resolve now
- a787d072fe3d51121845f169bdc36cbe.portswigger.net
- cheat-sheets.portswigger.net
- cloudfront.direct.portswigger.net
- docs.portswigger.net
- enterprise-demo.portswigger.net
- flags.portswigger.net
- locking-rgthanwoasxdyb5nz2ajemahntfkwzsz.portswigger.net
- meetings.portswigger.net
- my.portswigger.net
- survey.portswigger.net
- surveys.portswigger.net
- www.my.portswigger.net
Shared infrastructure, collapsed:
Sources: virustotal 50 · rapiddns 11 · certspotter 27 · subfinder 1
From CT logs, passive DNS (25+ sources) and brute-force. Live means it resolves now.
Email security
SPF Present
v=spf1 ip4:23.249.220.34/32 ip4:23.249.220.35/32 ip4:54.240.55.173/32 ip4:54.240.55.174/32 include:_spf.google.com include:spf.redpoints.com include:_spf.salesforce.com ~all
DMARC Present
p=quarantine
v=DMARC1; p=quarantine; sp=reject; rua=mailto:postmaster@portswigger.net; fo=1
DKIM 1 found
google._domainkey
Show public keys
google._domainkey.portswigger.net
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlq8CZh+e7dHEp6zGnF9utiAQ9UenS8ApGWjYvNnDow6hudUIxezxHZ/TTFvwpyt4UznnrjkhrRmRdR0CP5W7F89Brg6ML+7zO7T1y84QV4hAO9xm3xCHvHjnlpikSDyMWX/TeC/gidY/RcdH5QwmPXHjWo1a3/JFIlfQuZMychmg9ekHyYc/DwxbSQosndQQdEtkd2dgQDnqkthm7qyu8t2hc/ua8IktNO4udyETT1d8L0gsSsbhc6esiiWBVCUUWuXXxnT6tXXsLyTRLl/1TzcmQdfV1uJaBaTiVsVwjbp4ICpceW0FqQAy8jM06YP8h1wn6Enuai+Er4q0QvRhhQIDAQAB
DKIM checked on 29 common selectors; custom ones can't be discovered. Cached up to 1 h.
Got an email from portswigger.net asking you to change bank details? Check it before you pay
Get this report as JSON
One call returns everything on this page. Each section is also its own endpoint.
curl "https://domain-intelligence-api.p.rapidapi.com/lookup/portswigger.net" \
-H "X-RapidAPI-Host: domain-intelligence-api.p.rapidapi.com" \
-H "X-RapidAPI-Key: YOUR_RAPIDAPI_KEY"
import requests
r = requests.get(
"https://domain-intelligence-api.p.rapidapi.com/lookup/portswigger.net",
headers={
"X-RapidAPI-Host": "domain-intelligence-api.p.rapidapi.com",
"X-RapidAPI-Key": "YOUR_RAPIDAPI_KEY",
},
timeout=30,
)
print(r.json())
// Node 18+ (built-in fetch)
const res = await fetch(
"https://domain-intelligence-api.p.rapidapi.com/lookup/portswigger.net",
{ headers: {
"X-RapidAPI-Host": "domain-intelligence-api.p.rapidapi.com",
"X-RapidAPI-Key": "YOUR_RAPIDAPI_KEY",
} }
);
console.log(await res.json());
<?php
$ch = curl_init("https://domain-intelligence-api.p.rapidapi.com/lookup/portswigger.net");
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_HTTPHEADER, [
"X-RapidAPI-Host: domain-intelligence-api.p.rapidapi.com",
"X-RapidAPI-Key: YOUR_RAPIDAPI_KEY",
]);
$data = json_decode(curl_exec($ch), true);
print_r($data);
1,000 requests a month free, no card
Paid plans up to 5M a month
?wait=1 waits for every subdomain source to finish