sans.org
We found 399 subdomains of sans.org in certificate transparency logs, passive DNS and DNS brute force; 224 resolve right now, including api.sans.org, login.sans.org and auth.sans.org. sans.org is registered with DomainPeople, Inc. since 1995-08-04 and expires 2027-08-03. Its SSL certificate from GlobalSign nv-sa expires in 60 days. For email it has an SPF record, DMARC set to reject and DKIM keys on 4 common selectors.
- Registration
- DomainPeople, Inc.Since 1995-08-04 · expires 2027-08-03
- SSL certificate
- 60 days leftGlobalSign nv-sa
- Subdomains
- 224 live399 discovered in total
- Email authentication
- SPF, DMARC, DKIMDMARC policy: reject
DNS records
6 of 7 types| A2 |
|
| AAAA | No AAAA records |
| MX2 |
|
| TXT23 |
Show all 23
|
| NS4 |
|
| CAA9 |
Show all 9
|
| SOA1 |
|
Live lookup, cached up to 5 min.
WHOIS / RDAP
via rdap.org- Registrar
- DomainPeople, Inc.
- Registered
- 1995-08-04
- Expires
- 2027-08-03
- Last updated
- 2026-08-12
- Nameservers
- ns-1270.awsdns-30.orgns-1746.awsdns-26.co.ukns-282.awsdns-35.comns-749.awsdns-29.net
- Status
- client transfer prohibited
RDAP with port-43 WHOIS fallback, cached up to 1 h.
SSL certificate
Valid, 60 days left- Issuer
- GlobalSign nv-saCN=GlobalSign Atlas R46 DV TLS CA 2026 Q3,O=GlobalSign nv-sa,C=BE
- Subject
- imperva.com
- Valid from
- 2026-09-03 12:43 UTC
- Valid until
- 2026-12-02 12:43 UTC
- Serial number
- 2231948684423153638173370124434334389
- Names covered (32)
- *.sans.edu*.innovation.sans.org*.sans.co*.widgetxco.org*.cyberleaders.sans.orgdev.sans-foundations.com*.feedback.sans.orgsans.org*.ranges.io*.giac.org*.sans.orgsans.cosans-foundations.comqms.sans.org*.giac.netsans.edu*.uat.sans-foundations.comimperva.com*.sans-foundations.comgiac.net*.dev.sans-foundations.com*.labs.sans.orgwidgetxco.org*.cyberwarriorchallenge.sans.org
Show all 32
giac.orgqa.sans-foundations.com*.ukcyberteam.sans.orgcontent.sans.orguat.sans-foundations.com*.qa.sans-foundations.comranges.ioisc.sans.edu
Live TLS handshake on port 443, cached up to 6 h.
Subdomains
224 live · 399 discovered- access.sans.org777jdxx.x.incapdns.net
- ace.securityawareness.sans.org3.87.232.108
- aclp-files.sans.orgd1glb64akertql.cloudfront.net
- admin.labs.sans.org45.60.31.34
- admin.sans.org45.60.31.34
- api.develop.devhq.sans.org100.25.130.138
- api.develop.oasis.labs.sans.org13.35.107.105
- api.devhq.sans.org100.28.77.213
- api.eu-central-1.securityawareness.sans.org18.160.46.118
- api.labs.sans.org18.225.145.54
- api.oasis.labs.sans.org18.154.227.125
- api.odin.devlabs.sans.org3.238.182.230
- api.odin.labs.sans.org44.204.94.156
- api.sandbox.devhq.sans.org3.232.242.77
- api.sandbox.oasis.labs.sans.org13.227.65.106
- api.sandbox.securityawareness.sans.org13.35.107.108
- api.sans.org45.60.31.34
- api.securityawareness.sans.org13.226.238.26
- apply.immersionacademy.sans.org34.198.122.35
- auth.sans.org8g8jxhr.impervadns.net
- autodiscover.sans.org40.104.16.248
- blogs.sans.org45.60.31.34
- brochure.sans.org18.238.4.4
- bvt-api.sans.orgd9vke0xwqyog2.cloudfront.net
- cc.sans.org13.224.202.101
- ciso-network.sans.orgsansciso.forumbee.com
- click.email.sans.org136.147.189.155
- computer-forensics.sans.org45.60.31.34
- connect.labs.sans.org45.60.31.34
- content-asset-manager.sandbox.securityawareness.sans.org3.170.19.108
- content-asset-manager.securityawareness.sans.org3.162.125.21
- content-cdn.develop.securityawareness.sans.org52.85.193.110
- content-cdn.sandbox.securityawareness.sans.org108.138.64.36
- content-cdn.securityawareness.sans.org13.35.107.109
- content.sans.org45.60.31.34
- courseware.sans.org45.60.31.34
- cyber-defense.sans.org13.224.202.120
- cyberleaders.sans.org45.60.31.34
- cyberwarriorchallenge.sans.org45.60.31.34
- dashboards.odin.devlabs.sans.org3.238.182.230
- dashboards.odin.labs.sans.org44.204.94.156
- defiant.sans.org208.255.174.6
- dev-api.sans.org45.60.31.34
- dev-auth.sans.org45.60.31.34
- dev-cmp-admin.sans.orgdm34jvo46jtzc.cloudfront.net
- dev-cmp-api.sans.org3.12.42.158
- dev-cmp.sans.orgd2ljk2hhvnxb7w.cloudfront.net
- dev-idp.sans.orgh7ixnnf.impervadns.net
- dev-login.sans.org45.60.31.34
- dev-roi-calculator.innovation.sans.org45.60.31.34
- dev-www.sans.org45.60.31.34
- develop.sans-training-content.sans.org13.226.238.116
- devhq.sans.org100.28.77.213
- devlabs.sans.org204.51.94.233
- dfir.sans.org45.60.31.34
- digital-forensics.sans.org45.60.31.34
- email.sans.org136.147.129.27
- eno.event.sans.org6elm52hcexnejnys.5dyval89yzn2dwpqw.ngrok-cname.com
- ep.sans.org160.109.226.11
- faq.develop.securityawareness.sans.org3.167.112.22
- faq.sandbox.securityawareness.sans.org13.35.107.39
- faq.securityawareness.sans.org13.35.107.113
- feedback.sans.org45.60.31.34
- fin-mta.sans.org66.35.60.2
- for526-c02-shells.labs.sans.orglabs-sans-org-644986796.us-east-2.elb.amazonaws.com
- for610-d01.devlabs.sans.orgdevlabs-sans-org-459773013.us-east-2.elb.amazonaws.com
- forensics.sans.org45.60.31.34
- fwr.odin.devlabs.sans.org3.238.182.230
- fwr.odin.labs.sans.org44.204.94.156
- gitlab.tbt570.sans.org35.226.225.220
- go.sans.org45.60.31.34
- gw1-dev-aws.sans.org100.26.66.12
- gw1-prod-aws.sans.org3.233.212.116
- gw2-dev-aws.sans.org34.226.171.194
- gw2-prod-aws.sans.org34.192.32.13
- gw3-prod-aws.sans.org35.171.37.63
- gw4-dev-aws.sans.org54.90.161.96
- gw4-prod-aws.sans.org52.202.199.117
- handlers.sans.org159.223.154.178
- ics-community.sans.org35.165.247.157
- idp.sans.org45.60.31.34
- image.email.sans.org3.170.42.113
- info.sans.org13.111.133.66
- innovation.sans.org45.60.31.34
- integration-api.sans.orgd1jdbc9dmfwuw9.cloudfront.net
- internal-resources.sans.org13.224.202.111
- isc.sans.org3.166.192.110
- isc1.sans.org3.162.125.114
- isc11.sans.org3.166.192.110
- isc2.sans.org3.166.192.110
- iscxml.sans.org3.166.192.110
- jasport.sans.org45.60.31.34
- labs.sans.org45.60.31.34
- launcher.devnetwars.sans.org35.188.16.178
- learn.sans.org45.60.31.34
- learnmore.sans.org3.227.34.77
- lists-mta.sans.org66.35.60.136
- lists-ng-mta.sans.org66.35.60.137
- lists-ng.sans.org66.35.60.135
- lists.sans.org45.60.103.34
- lists3.sans.org13.35.107.112
- login.sans.org45.60.31.34
- lomapper.sans.orgd3izzsj31xgsse.cloudfront.net
- mail.sans.org13.35.107.112
- mlm.sans.org45.60.31.34
- mta.email.sans.org136.147.188.21
- mylabs-admin.sans.org7behm3r.ng.impervadns.net
- mylabs.odin.devlabs.sans.org13.35.107.41
- mylabs.odin.labs.sans.org13.35.78.118
- nwt-dfir-continuous-659.netwars.sans.orgnetwars-sans-org-1701873958.us-east-2.elb.amazonaws.com
- nwt7-608.devnetwars.sans.orgdevnetwars-sans-org-781735875.us-east-2.elb.amazonaws.com
- nwt7-621.netwars.sans.orgnetwars-sans-org-1701873958.us-east-2.elb.amazonaws.com
- nwt7-624.netwars.sans.orgnetwars-sans-org-1701873958.us-east-2.elb.amazonaws.com
- nwt7-632.netwars.sans.orgnetwars-sans-org-1701873958.us-east-2.elb.amazonaws.com
- nwt7-638.netwars.sans.orgnetwars-sans-org-1701873958.us-east-2.elb.amazonaws.com
- nwt7-639.netwars.sans.orgnetwars-sans-org-1701873958.us-east-2.elb.amazonaws.com
- nwt7-644.netwars.sans.orgnetwars-sans-org-1701873958.us-east-2.elb.amazonaws.com
- nwt7-648.netwars.sans.orgnetwars-sans-org-1701873958.us-east-2.elb.amazonaws.com
- nwt7-677.netwars.sans.orgnetwars-sans-org-1701873958.us-east-2.elb.amazonaws.com
- nwt7-730.netwars.sans.orgnetwars-sans-org-1701873958.us-east-2.elb.amazonaws.com
- nwt7-733.netwars.sans.orgnetwars-sans-org-1701873958.us-east-2.elb.amazonaws.com
- nwt7-734.netwars.sans.orgnetwars-sans-org-1701873958.us-east-2.elb.amazonaws.com
- nwt7-7766.netwars.sans.orgnetwars-sans-org-1701873958.us-east-2.elb.amazonaws.com
- nwt7-777.devnetwars.sans.orgdevnetwars-sans-org-781735875.us-east-2.elb.amazonaws.com
- nwt7-7771.devnetwars.sans.orgdevnetwars-sans-org-781735875.us-east-2.elb.amazonaws.com
- nwt7-7776.devnetwars.sans.orgdevnetwars-sans-org-781735875.us-east-2.elb.amazonaws.com
- nwt7-7777.devnetwars.sans.orgdevnetwars-sans-org-781735875.us-east-2.elb.amazonaws.com
- nwt7-7777.netwars.sans.orgnetwars-sans-org-1701873958.us-east-2.elb.amazonaws.com
- nwt7-8881.devnetwars.sans.orgdevnetwars-sans-org-781735875.us-east-2.elb.amazonaws.com
- nwt7-999.devnetwars.sans.orgdevnetwars-sans-org-781735875.us-east-2.elb.amazonaws.com
- nwt7-9991.netwars.sans.orgnetwars-sans-org-1701873958.us-east-2.elb.amazonaws.com
- nwt7-9992.devnetwars.sans.orgdevnetwars-sans-org-781735875.us-east-2.elb.amazonaws.com
- odadmin.sans.org13.224.202.103
- oidc.odin.devlabs.sans.org13.224.202.33
- oidc.odin.labs.sans.org13.35.107.42
- olt-content-supplements.sans.org3.167.114.47
- olt-content-test.sans.org18.238.4.105
- olt-content.sans.orgd1g6vk7ai7o4rc.cloudfront.net
- olt-players.sans.org18.238.8.73
- ondemand-player.sans.org45.60.31.34
- ondemand-search.sans.org3.170.3.117
- ondemand-supplements.sans.org13.224.202.20
- ondemand-support.sans.orgscznyic.impervadns.net
- oracle.sans.org10.10.10.10
- pages.sans.org13.111.23.20
- partnerportal.sans.org18.194.120.222
- pen-testing.sans.org13.224.202.120
- pen-testing3.sans.org13.224.202.120
- pentesting.sans.org13.224.202.120
- phish-eu.sans.org54.93.55.235
- phish-landing.sans.org45.60.31.34
- phishing.sans.org777jdxx.x.incapdns.net
- pre-odadmin.sans.org3.166.192.59
- pre-ondemand.sans.orgwfa58nr.x.incapdns.net
- public-resources.sans.org13.226.209.117
- qa-api.sans.org45.60.31.34
- qa-auth.sans.org45.60.31.34
- qa-idp.sans.orggp8oeno.impervadns.net
- qa-login.sans.org45.60.31.34
- qa-www.sans.org45.60.31.34
- qms.sans.org45.60.31.34
- r2.odin.devlabs.sans.org34.230.232.36
- r2.odin.labs.sans.org34.202.119.206
- ra-security-awareness.sans.org13.35.107.112
- recordings-api.sans.org13.226.235.162
- recordings.sans.org3.166.195.67
- redmine.sans.orgdl7b8r4.impervadns.net
- registration.sans.org45.60.31.34
- remote-player-cdn.develop.securityawareness.sans.org13.35.107.20
- remote-player-cdn.sandbox.securityawareness.sans.org18.238.4.115
- remote-player-cdn.securityawareness.sans.org3.171.100.29
- report.sans.org777jdxx.x.incapdns.net
- roi-calculator.innovation.sans.org45.60.31.34
- sa-cab.sans.org35.165.247.157
- sandbox-api.sans.orgd1dtzxew39bwep.cloudfront.net
- sans-training-content.sans.org13.224.202.108
- sans-training.sans.orgcustomer.litmos.com
- sans.org45.60.103.34
- sansphishing.sans.org54.80.160.189
- sec699-f02-vmc-gen.vpn.labs.sans.org44.196.20.131
- sec699-g01-vmc-live-01.vpn.labs.sans.org34.203.111.102
- securemail.sans.org205.220.161.71
- securingthehuman.sans.org3.171.85.10
- security-awareness.sans.org13.35.107.112
- sftp.sans.org18.210.78.160
- sic.sans.org3.171.85.10
- smtp-relay.sans.org54.198.215.48
- smtp-relay1.sans.org35.153.22.119
- software-security.sans.org45.60.31.34
- sparkle.sans.org10.216.134.242
- ssahub.sans.org34.229.9.238
- staging-cdn.develop.securityawareness.sans.org52.85.193.12
- staging-cdn.eu-central-1.securityawareness.sans.org13.35.107.22
- staging-cdn.sandbox.securityawareness.sans.org3.167.56.125
- staging-cdn.securityawareness.sans.org13.35.107.127
- standby.sans.orgd33bjvn037sg7o.cloudfront.net
- status.sans.org52.85.193.10
- stg-content.sans.org13.226.238.128
- sth-community.sans.org35.165.247.157
- storyline-scripts.develop.securityawareness.sans.org13.35.78.120
- storyline-scripts.sandbox.securityawareness.sans.org13.224.202.11
- storyline-scripts.securityawareness.sans.org13.35.107.23
- survey.sans.org23.53.11.164
- tableau.sans.org10.216.8.72
- template01-gameserver.devlabs.sans.orgdevlabs-sans-org-459773013.us-east-2.elb.amazonaws.com
- text.sans.org34.48.58.236
- thanos.odin.devlabs.sans.org3.238.182.230
- thanos.odin.labs.sans.org44.204.94.156
- tools.event.sans.org3.129.163.177
- transfer.sans.org45.60.31.34
- trap.sans.org10.216.88.8
- uat-api.sans.org45.60.31.34
- uat-auth.sans.org45.60.31.34
- uat-login.sans.org45.60.31.34
- uat-www.sans.org45.60.31.34
- uk.sans.org13.224.202.120
- ukcyberteam.sans.org45.60.31.34
- uscyberacademy.sans.org13.35.107.112
- view.email.sans.orgtl7fc7tjq20dxxlshlkn7d2h0z20.view-sap.sfmc-marketing.com
- vlive-simulcast.sans.org3.167.51.77
- webcast.sans.org3.167.104.42
- www.brochure.sans.org18.238.4.4
- www.sans.org45.60.31.34
- zeus.vpn.sans.org66.35.60.20
No subdomains found.
175 more seen in CT logs and passive DNS that don't resolve now
- 8.netwars.sans.org
- abyss.sans.org
- aclp-kb.sans.org
- alerts.odin.devlabs.sans.org
- alerts.odin.labs.sans.org
- api.develop.securityawareness.sans.org
- api.eu-central-1.develop.securityawareness.sans.org
- api.eu-central-1.sandbox.securityawareness.sans.org
- arti-ai.sandbox.securityawareness.sans.org
- computer-forensics11.sans.org
- computer-forensics22.sans.org
- computerforensics.sans.org
- confluence.sans.org
- content-asset-manager.develop.securityawareness.sans.org
- cyber-defence.sans.org
- dev-registration.sans.org
- develop.devhq.sans.org
- develop.oasis.labs.sans.org
- devnetwars.sans.org
- digital-forensics31.sans.org
- digital-forensics32.sans.org
- digitalforensics.sans.org
- dns21a.sans.org
- dns21b.sans.org
- dns31a.sans.org
- dns31b.sans.org
- eu-central-1.sandbox.securityawareness.sans.org
- event.sans.org
- faq-cdn.sandbox.securityawareness.sans.org
- ftp.sans.org
- gw3-dev-aws.sans.org
- host101.sans.org
- host103.sans.org
- host104.sans.org
- host109.sans.org
- host111.sans.org
- host112.sans.org
- host113.sans.org
- host114.sans.org
- host122.sans.org
- host128.sans.org
- host129.sans.org
- host133.sans.org
- host135.sans.org
- host140.sans.org
- host141.sans.org
- host143.sans.org
- host144.sans.org
- host145.sans.org
- host146.sans.org
- host151.sans.org
- host156.sans.org
- host159.sans.org
- host160.sans.org
- host162.sans.org
- host163.sans.org
- host164.sans.org
- host166.sans.org
- host167.sans.org
- host168.sans.org
- host169.sans.org
- host176.sans.org
- host177.sans.org
- host178.sans.org
- host181.sans.org
- host182.sans.org
- host183.sans.org
- host186.sans.org
- host190.sans.org
- host191.sans.org
- host192.sans.org
- host195.sans.org
- host197.sans.org
- host198.sans.org
- host22.sans.org
- host25.sans.org
- host26.sans.org
- host27.sans.org
- host29.sans.org
- host31.sans.org
- host32.sans.org
- host35.sans.org
- host36.sans.org
- host40.sans.org
- host41.sans.org
- host45.sans.org
- host49.sans.org
- host51.sans.org
- host52.sans.org
- host54.sans.org
- host56.sans.org
- host57.sans.org
- host60.sans.org
- host62.sans.org
- host63.sans.org
- host64.sans.org
- host68.sans.org
- host69.sans.org
- host70.sans.org
- host73.sans.org
- host74.sans.org
- host75.sans.org
- host76.sans.org
- host77.sans.org
- host79.sans.org
- host83.sans.org
- host86.sans.org
- host87.sans.org
- host88.sans.org
- host90.sans.org
- host92.sans.org
- host94.sans.org
- host96.sans.org
- host98.sans.org
- host99.sans.org
- ics.sans.org
- intrepid.sans.org
- jira.sans.org
- labplatform.sans.org
- launcher.netwars.sans.org
- mlm-mta.sans.org
- mylabs.sans.org
- netwars.sans.org
- nwt7-667.netwars.sans.org
- nwt7-670.netwars.sans.org
- nwt7-8888.devnetwars.sans.org
- oasis.labs.sans.org
- olt-apis.sans.org
- olt-content-fargate-test.sans.org
- ondemand.sans.org
- ondemand2.sans.org
- ondemand3.sans.org
- pen-test-ing.sans.org
- pentest.sans.org
- phish-smtp.aws.sans.org
- phish.sans.org
- pokey.sans.org
- pre-ondemand-search.sans.org
- preview.sans.org
- pywars.labs.sans.org
- rundeck-mydev.devlabs.sans.org
- rundeck-prod.labs.sans.org
- s124-www.sans.org
- s125-www.sans.org
- s96-www.sans.org
- sandbox.devhq.sans.org
- sandbox.oasis.labs.sans.org
- sandbox.sans-training-content.sans.org
- savfw21a.sans.org
- search.sans.org
- server2.sans.org
- sh5e-ltr.sans.org
- smtp21a.sans.org
- smtp21b.sans.org
- sore.sans.org
- stage-cc.sans.org
- staging-api.sans.org
- staging-cdn.eu-central-1.develop.securityawareness.sans.org
- staging-cdn.eu-central-1.sandbox.securityawareness.sans.org
- stg-security-awareness.sans.org
- uneq.uald.sans.org
- v0la4-tl.sans.org
- valid-sunfish.sroclabs.sans.org
- vpn.sans.org
- ww.sans.org
- wws.sans.org
- www.dev-login.sans.org
- www.ep.sans.org
- www.login.sans.org
- www.qa-login.sans.org
- www.securemail.sans.org
- www.uat-login.sans.org
- www.zeus.vpn.sans.org
- wwww.sans.org
- z.den-1a.vpn.sans.org
From CT logs, passive DNS (25+ sources) and brute-force. Live means it resolves now.
Email security
Show public keys
DKIM checked on 29 common selectors; custom ones can't be discovered. Cached up to 1 h.
Get this report as JSON
One call returns everything on this page. Each section is also its own endpoint.
curl "https://domain-intelligence-api.p.rapidapi.com/lookup/sans.org" \
-H "X-RapidAPI-Host: domain-intelligence-api.p.rapidapi.com" \
-H "X-RapidAPI-Key: YOUR_RAPIDAPI_KEY"
import requests
r = requests.get(
"https://domain-intelligence-api.p.rapidapi.com/lookup/sans.org",
headers={
"X-RapidAPI-Host": "domain-intelligence-api.p.rapidapi.com",
"X-RapidAPI-Key": "YOUR_RAPIDAPI_KEY",
},
timeout=30,
)
print(r.json())
// Node 18+ (built-in fetch)
const res = await fetch(
"https://domain-intelligence-api.p.rapidapi.com/lookup/sans.org",
{ headers: {
"X-RapidAPI-Host": "domain-intelligence-api.p.rapidapi.com",
"X-RapidAPI-Key": "YOUR_RAPIDAPI_KEY",
} }
);
console.log(await res.json());
<?php
$ch = curl_init("https://domain-intelligence-api.p.rapidapi.com/lookup/sans.org");
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_HTTPHEADER, [
"X-RapidAPI-Host: domain-intelligence-api.p.rapidapi.com",
"X-RapidAPI-Key: YOUR_RAPIDAPI_KEY",
]);
$data = json_decode(curl_exec($ch), true);
print_r($data);
?wait=1 waits for every subdomain source to finish