Reports / sans.org

sans.org

Generated Refresh data

We found 399 subdomains of sans.org in certificate transparency logs, passive DNS and DNS brute force; 224 resolve right now, including api.sans.org, login.sans.org and auth.sans.org. sans.org is registered with DomainPeople, Inc. since 1995-08-04 and expires 2027-08-03. Its SSL certificate from GlobalSign nv-sa expires in 60 days. For email it has an SPF record, DMARC set to reject and DKIM keys on 4 common selectors.

Registration
DomainPeople, Inc.Since 1995-08-04 · expires 2027-08-03
SSL certificate
60 days leftGlobalSign nv-sa
Subdomains
224 live399 discovered in total
Email authentication
SPF, DMARC, DKIMDMARC policy: reject

DNS records

6 of 7 types
A2
  • 45.60.31.34
  • 45.60.103.34
AAAA No AAAA records
MX2
  • 10 mxa-002c1802.gslb.pphosted.com.
  • 10 mxb-002c1802.gslb.pphosted.com.
TXT23
  • "globalsign-domain-verification=5A7590462E4F93599A03DB2BC4AC1426"
  • "atlassian-domain-verification=6NyU75cdG0l2wc7/BZnvjf0Vk6le6u8mecfnfsB0aAODfOm0qF5qbI90rXXmVGWN"
  • "jetbrains-domain-verification=9d0spo0t1rbzwx801jejq5z9i"
  • "asv=c92bd4107a8a4880020e898eef0586e7"
  • "apple-domain-verification=ZZoZ4NmnUelze8au"
  • "google-site-verification=fdFAbK_U8Wu9OJDEauVhmgZ0OuJxWA-P4DQhZGx3hjs"
Show all 23
  • "_globalsign-domain-verification=XbqPoFvyLnW1lHWyrKazU_F9bRAXRI-_SoC2KhQHxT"
  • "MS=ms15381092"
  • "v=spf1 include:%{i}._ip.%{h}._ehlo.%{d}._spf.vali.email ~all"
  • "google-site-verification=qP6oSPKijvCWSIP7JqPOF_HuU0NmQX8NTC8Eln8hXMg"
  • "zapier-domain-verification-challenge=b166a197-0f75-4a5a-932e-8c66e7e10991"
  • "pardot928673=573fbfb6e48d50fe412afebd0623144f1667d7fd7e780b3a403bca1493ef624e"
  • "openai-domain-verification=dv-mQdOkfMBQ2VUSYimMob17Cj0"
  • "_globalsign-domain-verification=Z0fOVJB0oLvstFlL9BBVBnLszC-egXTqDZTeNuWdCx"
  • "dropbox-domain-verification=q0ksfx82ki2b"
  • "miro-verification=cb513e5bc26e25d81c0b82a55d647d153d95e378"
  • "amazonses:s3qWj+9usSfVvw6sOrHcxcLqSLUHe4+xX2Bcz382ZY4="
  • "canva-site-verification=SBkYH7bWYvbsjI0sPM-yIw"
  • "anthropic-domain-verification-d54pt1=NypbYImJLv9tPPkjFVZ4ohUN4"
  • "status-page-domain-verification=2w964jh22625"
  • "parallels-domain-verification=d6efc2b9b49e46d292bb3257cf202b17fe4c8b0530e849e7977a803f436ed225"
  • "YOfxOkgh96cLKDUd0042Sx/iL9bDXs/ZIJ11T2OczGY4TajTWwW8RXLmRajj6sSrD+sNdelF3pXA0PPmx3cE5Q=="
  • "jamf-site-verification=2ipudMToEuJ3J3ihrRVRlw"
NS4
  • ns-1746.awsdns-26.co.uk.
  • ns-1270.awsdns-30.org.
  • ns-749.awsdns-29.net.
  • ns-282.awsdns-35.com.
CAA9
  • 0 issue "globalsign.com"
  • 0 issue "amazon.com"
  • 0 issue "sectigo.com"
  • 0 issuewild "globalsign.com"
  • 0 issuewild "sectigo.com"
  • 0 iodef "mailto:security@sans.org"
Show all 9
  • 0 issuewild "amazon.com"
  • 0 issue "digicert.com"
  • 0 issue "letsencrypt.org"
SOA1
  • ns-1746.awsdns-26.co.uk. awsdns-hostmaster.amazon.com. 1 7200 900 1209600 86400

Live lookup, cached up to 5 min.

WHOIS / RDAP

via rdap.org
Registrar
DomainPeople, Inc.
Registered
1995-08-04
Expires
2027-08-03
Last updated
2026-08-12
Nameservers
ns-1270.awsdns-30.orgns-1746.awsdns-26.co.ukns-282.awsdns-35.comns-749.awsdns-29.net
Status
client transfer prohibited

RDAP with port-43 WHOIS fallback, cached up to 1 h.

SSL certificate

Valid, 60 days left
Issuer
GlobalSign nv-saCN=GlobalSign Atlas R46 DV TLS CA 2026 Q3,O=GlobalSign nv-sa,C=BE
Subject
imperva.com
Valid from
2026-09-03 12:43 UTC
Valid until
2026-12-02 12:43 UTC
Serial number
2231948684423153638173370124434334389
Names covered (32)
*.sans.edu*.innovation.sans.org*.sans.co*.widgetxco.org*.cyberleaders.sans.orgdev.sans-foundations.com*.feedback.sans.orgsans.org*.ranges.io*.giac.org*.sans.orgsans.cosans-foundations.comqms.sans.org*.giac.netsans.edu*.uat.sans-foundations.comimperva.com*.sans-foundations.comgiac.net*.dev.sans-foundations.com*.labs.sans.orgwidgetxco.org*.cyberwarriorchallenge.sans.org
Show all 32
giac.orgqa.sans-foundations.com*.ukcyberteam.sans.orgcontent.sans.orguat.sans-foundations.com*.qa.sans-foundations.comranges.ioisc.sans.edu

Live TLS handshake on port 443, cached up to 6 h.

Subdomains

224 live · 399 discovered
  • access.sans.org777jdxx.x.incapdns.net
  • ace.securityawareness.sans.org3.87.232.108
  • aclp-files.sans.orgd1glb64akertql.cloudfront.net
  • admin.labs.sans.org45.60.31.34
  • admin.sans.org45.60.31.34
  • api.develop.devhq.sans.org100.25.130.138
  • api.develop.oasis.labs.sans.org13.35.107.105
  • api.devhq.sans.org100.28.77.213
  • api.eu-central-1.securityawareness.sans.org18.160.46.118
  • api.labs.sans.org18.225.145.54
  • api.oasis.labs.sans.org18.154.227.125
  • api.odin.devlabs.sans.org3.238.182.230
  • api.odin.labs.sans.org44.204.94.156
  • api.sandbox.devhq.sans.org3.232.242.77
  • api.sandbox.oasis.labs.sans.org13.227.65.106
  • api.sandbox.securityawareness.sans.org13.35.107.108
  • api.sans.org45.60.31.34
  • api.securityawareness.sans.org13.226.238.26
  • apply.immersionacademy.sans.org34.198.122.35
  • auth.sans.org8g8jxhr.impervadns.net
  • autodiscover.sans.org40.104.16.248
  • blogs.sans.org45.60.31.34
  • brochure.sans.org18.238.4.4
  • bvt-api.sans.orgd9vke0xwqyog2.cloudfront.net
  • cc.sans.org13.224.202.101
  • ciso-network.sans.orgsansciso.forumbee.com
  • click.email.sans.org136.147.189.155
  • computer-forensics.sans.org45.60.31.34
  • connect.labs.sans.org45.60.31.34
  • content-asset-manager.sandbox.securityawareness.sans.org3.170.19.108
  • content-asset-manager.securityawareness.sans.org3.162.125.21
  • content-cdn.develop.securityawareness.sans.org52.85.193.110
  • content-cdn.sandbox.securityawareness.sans.org108.138.64.36
  • content-cdn.securityawareness.sans.org13.35.107.109
  • content.sans.org45.60.31.34
  • courseware.sans.org45.60.31.34
  • cyber-defense.sans.org13.224.202.120
  • cyberleaders.sans.org45.60.31.34
  • cyberwarriorchallenge.sans.org45.60.31.34
  • dashboards.odin.devlabs.sans.org3.238.182.230
  • dashboards.odin.labs.sans.org44.204.94.156
  • defiant.sans.org208.255.174.6
  • dev-api.sans.org45.60.31.34
  • dev-auth.sans.org45.60.31.34
  • dev-cmp-admin.sans.orgdm34jvo46jtzc.cloudfront.net
  • dev-cmp-api.sans.org3.12.42.158
  • dev-cmp.sans.orgd2ljk2hhvnxb7w.cloudfront.net
  • dev-idp.sans.orgh7ixnnf.impervadns.net
  • dev-login.sans.org45.60.31.34
  • dev-roi-calculator.innovation.sans.org45.60.31.34
  • dev-www.sans.org45.60.31.34
  • develop.sans-training-content.sans.org13.226.238.116
  • devhq.sans.org100.28.77.213
  • devlabs.sans.org204.51.94.233
  • dfir.sans.org45.60.31.34
  • digital-forensics.sans.org45.60.31.34
  • email.sans.org136.147.129.27
  • eno.event.sans.org6elm52hcexnejnys.5dyval89yzn2dwpqw.ngrok-cname.com
  • ep.sans.org160.109.226.11
  • faq.develop.securityawareness.sans.org3.167.112.22
  • faq.sandbox.securityawareness.sans.org13.35.107.39
  • faq.securityawareness.sans.org13.35.107.113
  • feedback.sans.org45.60.31.34
  • fin-mta.sans.org66.35.60.2
  • for526-c02-shells.labs.sans.orglabs-sans-org-644986796.us-east-2.elb.amazonaws.com
  • for610-d01.devlabs.sans.orgdevlabs-sans-org-459773013.us-east-2.elb.amazonaws.com
  • forensics.sans.org45.60.31.34
  • fwr.odin.devlabs.sans.org3.238.182.230
  • fwr.odin.labs.sans.org44.204.94.156
  • gitlab.tbt570.sans.org35.226.225.220
  • go.sans.org45.60.31.34
  • gw1-dev-aws.sans.org100.26.66.12
  • gw1-prod-aws.sans.org3.233.212.116
  • gw2-dev-aws.sans.org34.226.171.194
  • gw2-prod-aws.sans.org34.192.32.13
  • gw3-prod-aws.sans.org35.171.37.63
  • gw4-dev-aws.sans.org54.90.161.96
  • gw4-prod-aws.sans.org52.202.199.117
  • handlers.sans.org159.223.154.178
  • ics-community.sans.org35.165.247.157
  • idp.sans.org45.60.31.34
  • image.email.sans.org3.170.42.113
  • info.sans.org13.111.133.66
  • innovation.sans.org45.60.31.34
  • integration-api.sans.orgd1jdbc9dmfwuw9.cloudfront.net
  • internal-resources.sans.org13.224.202.111
  • isc.sans.org3.166.192.110
  • isc1.sans.org3.162.125.114
  • isc11.sans.org3.166.192.110
  • isc2.sans.org3.166.192.110
  • iscxml.sans.org3.166.192.110
  • jasport.sans.org45.60.31.34
  • labs.sans.org45.60.31.34
  • launcher.devnetwars.sans.org35.188.16.178
  • learn.sans.org45.60.31.34
  • learnmore.sans.org3.227.34.77
  • lists-mta.sans.org66.35.60.136
  • lists-ng-mta.sans.org66.35.60.137
  • lists-ng.sans.org66.35.60.135
  • lists.sans.org45.60.103.34
  • lists3.sans.org13.35.107.112
  • login.sans.org45.60.31.34
  • lomapper.sans.orgd3izzsj31xgsse.cloudfront.net
  • mail.sans.org13.35.107.112
  • mlm.sans.org45.60.31.34
  • mta.email.sans.org136.147.188.21
  • mylabs-admin.sans.org7behm3r.ng.impervadns.net
  • mylabs.odin.devlabs.sans.org13.35.107.41
  • mylabs.odin.labs.sans.org13.35.78.118
  • nwt-dfir-continuous-659.netwars.sans.orgnetwars-sans-org-1701873958.us-east-2.elb.amazonaws.com
  • nwt7-608.devnetwars.sans.orgdevnetwars-sans-org-781735875.us-east-2.elb.amazonaws.com
  • nwt7-621.netwars.sans.orgnetwars-sans-org-1701873958.us-east-2.elb.amazonaws.com
  • nwt7-624.netwars.sans.orgnetwars-sans-org-1701873958.us-east-2.elb.amazonaws.com
  • nwt7-632.netwars.sans.orgnetwars-sans-org-1701873958.us-east-2.elb.amazonaws.com
  • nwt7-638.netwars.sans.orgnetwars-sans-org-1701873958.us-east-2.elb.amazonaws.com
  • nwt7-639.netwars.sans.orgnetwars-sans-org-1701873958.us-east-2.elb.amazonaws.com
  • nwt7-644.netwars.sans.orgnetwars-sans-org-1701873958.us-east-2.elb.amazonaws.com
  • nwt7-648.netwars.sans.orgnetwars-sans-org-1701873958.us-east-2.elb.amazonaws.com
  • nwt7-677.netwars.sans.orgnetwars-sans-org-1701873958.us-east-2.elb.amazonaws.com
  • nwt7-730.netwars.sans.orgnetwars-sans-org-1701873958.us-east-2.elb.amazonaws.com
  • nwt7-733.netwars.sans.orgnetwars-sans-org-1701873958.us-east-2.elb.amazonaws.com
  • nwt7-734.netwars.sans.orgnetwars-sans-org-1701873958.us-east-2.elb.amazonaws.com
  • nwt7-7766.netwars.sans.orgnetwars-sans-org-1701873958.us-east-2.elb.amazonaws.com
  • nwt7-777.devnetwars.sans.orgdevnetwars-sans-org-781735875.us-east-2.elb.amazonaws.com
  • nwt7-7771.devnetwars.sans.orgdevnetwars-sans-org-781735875.us-east-2.elb.amazonaws.com
  • nwt7-7776.devnetwars.sans.orgdevnetwars-sans-org-781735875.us-east-2.elb.amazonaws.com
  • nwt7-7777.devnetwars.sans.orgdevnetwars-sans-org-781735875.us-east-2.elb.amazonaws.com
  • nwt7-7777.netwars.sans.orgnetwars-sans-org-1701873958.us-east-2.elb.amazonaws.com
  • nwt7-8881.devnetwars.sans.orgdevnetwars-sans-org-781735875.us-east-2.elb.amazonaws.com
  • nwt7-999.devnetwars.sans.orgdevnetwars-sans-org-781735875.us-east-2.elb.amazonaws.com
  • nwt7-9991.netwars.sans.orgnetwars-sans-org-1701873958.us-east-2.elb.amazonaws.com
  • nwt7-9992.devnetwars.sans.orgdevnetwars-sans-org-781735875.us-east-2.elb.amazonaws.com
  • odadmin.sans.org13.224.202.103
  • oidc.odin.devlabs.sans.org13.224.202.33
  • oidc.odin.labs.sans.org13.35.107.42
  • olt-content-supplements.sans.org3.167.114.47
  • olt-content-test.sans.org18.238.4.105
  • olt-content.sans.orgd1g6vk7ai7o4rc.cloudfront.net
  • olt-players.sans.org18.238.8.73
  • ondemand-player.sans.org45.60.31.34
  • ondemand-search.sans.org3.170.3.117
  • ondemand-supplements.sans.org13.224.202.20
  • ondemand-support.sans.orgscznyic.impervadns.net
  • oracle.sans.org10.10.10.10
  • pages.sans.org13.111.23.20
  • partnerportal.sans.org18.194.120.222
  • pen-testing.sans.org13.224.202.120
  • pen-testing3.sans.org13.224.202.120
  • pentesting.sans.org13.224.202.120
  • phish-eu.sans.org54.93.55.235
  • phish-landing.sans.org45.60.31.34
  • phishing.sans.org777jdxx.x.incapdns.net
  • pre-odadmin.sans.org3.166.192.59
  • pre-ondemand.sans.orgwfa58nr.x.incapdns.net
  • public-resources.sans.org13.226.209.117
  • qa-api.sans.org45.60.31.34
  • qa-auth.sans.org45.60.31.34
  • qa-idp.sans.orggp8oeno.impervadns.net
  • qa-login.sans.org45.60.31.34
  • qa-www.sans.org45.60.31.34
  • qms.sans.org45.60.31.34
  • r2.odin.devlabs.sans.org34.230.232.36
  • r2.odin.labs.sans.org34.202.119.206
  • ra-security-awareness.sans.org13.35.107.112
  • recordings-api.sans.org13.226.235.162
  • recordings.sans.org3.166.195.67
  • redmine.sans.orgdl7b8r4.impervadns.net
  • registration.sans.org45.60.31.34
  • remote-player-cdn.develop.securityawareness.sans.org13.35.107.20
  • remote-player-cdn.sandbox.securityawareness.sans.org18.238.4.115
  • remote-player-cdn.securityawareness.sans.org3.171.100.29
  • report.sans.org777jdxx.x.incapdns.net
  • roi-calculator.innovation.sans.org45.60.31.34
  • sa-cab.sans.org35.165.247.157
  • sandbox-api.sans.orgd1dtzxew39bwep.cloudfront.net
  • sans-training-content.sans.org13.224.202.108
  • sans-training.sans.orgcustomer.litmos.com
  • sans.org45.60.103.34
  • sansphishing.sans.org54.80.160.189
  • sec699-f02-vmc-gen.vpn.labs.sans.org44.196.20.131
  • sec699-g01-vmc-live-01.vpn.labs.sans.org34.203.111.102
  • securemail.sans.org205.220.161.71
  • securingthehuman.sans.org3.171.85.10
  • security-awareness.sans.org13.35.107.112
  • sftp.sans.org18.210.78.160
  • sic.sans.org3.171.85.10
  • smtp-relay.sans.org54.198.215.48
  • smtp-relay1.sans.org35.153.22.119
  • software-security.sans.org45.60.31.34
  • sparkle.sans.org10.216.134.242
  • ssahub.sans.org34.229.9.238
  • staging-cdn.develop.securityawareness.sans.org52.85.193.12
  • staging-cdn.eu-central-1.securityawareness.sans.org13.35.107.22
  • staging-cdn.sandbox.securityawareness.sans.org3.167.56.125
  • staging-cdn.securityawareness.sans.org13.35.107.127
  • standby.sans.orgd33bjvn037sg7o.cloudfront.net
  • status.sans.org52.85.193.10
  • stg-content.sans.org13.226.238.128
  • sth-community.sans.org35.165.247.157
  • storyline-scripts.develop.securityawareness.sans.org13.35.78.120
  • storyline-scripts.sandbox.securityawareness.sans.org13.224.202.11
  • storyline-scripts.securityawareness.sans.org13.35.107.23
  • survey.sans.org23.53.11.164
  • tableau.sans.org10.216.8.72
  • template01-gameserver.devlabs.sans.orgdevlabs-sans-org-459773013.us-east-2.elb.amazonaws.com
  • text.sans.org34.48.58.236
  • thanos.odin.devlabs.sans.org3.238.182.230
  • thanos.odin.labs.sans.org44.204.94.156
  • tools.event.sans.org3.129.163.177
  • transfer.sans.org45.60.31.34
  • trap.sans.org10.216.88.8
  • uat-api.sans.org45.60.31.34
  • uat-auth.sans.org45.60.31.34
  • uat-login.sans.org45.60.31.34
  • uat-www.sans.org45.60.31.34
  • uk.sans.org13.224.202.120
  • ukcyberteam.sans.org45.60.31.34
  • uscyberacademy.sans.org13.35.107.112
  • view.email.sans.orgtl7fc7tjq20dxxlshlkn7d2h0z20.view-sap.sfmc-marketing.com
  • vlive-simulcast.sans.org3.167.51.77
  • webcast.sans.org3.167.104.42
  • www.brochure.sans.org18.238.4.4
  • www.sans.org45.60.31.34
  • zeus.vpn.sans.org66.35.60.20
175 more seen in CT logs and passive DNS that don't resolve now
  • 8.netwars.sans.org
  • abyss.sans.org
  • aclp-kb.sans.org
  • alerts.odin.devlabs.sans.org
  • alerts.odin.labs.sans.org
  • api.develop.securityawareness.sans.org
  • api.eu-central-1.develop.securityawareness.sans.org
  • api.eu-central-1.sandbox.securityawareness.sans.org
  • arti-ai.sandbox.securityawareness.sans.org
  • computer-forensics11.sans.org
  • computer-forensics22.sans.org
  • computerforensics.sans.org
  • confluence.sans.org
  • content-asset-manager.develop.securityawareness.sans.org
  • cyber-defence.sans.org
  • dev-registration.sans.org
  • develop.devhq.sans.org
  • develop.oasis.labs.sans.org
  • devnetwars.sans.org
  • digital-forensics31.sans.org
  • digital-forensics32.sans.org
  • digitalforensics.sans.org
  • dns21a.sans.org
  • dns21b.sans.org
  • dns31a.sans.org
  • dns31b.sans.org
  • eu-central-1.sandbox.securityawareness.sans.org
  • event.sans.org
  • faq-cdn.sandbox.securityawareness.sans.org
  • ftp.sans.org
  • gw3-dev-aws.sans.org
  • host101.sans.org
  • host103.sans.org
  • host104.sans.org
  • host109.sans.org
  • host111.sans.org
  • host112.sans.org
  • host113.sans.org
  • host114.sans.org
  • host122.sans.org
  • host128.sans.org
  • host129.sans.org
  • host133.sans.org
  • host135.sans.org
  • host140.sans.org
  • host141.sans.org
  • host143.sans.org
  • host144.sans.org
  • host145.sans.org
  • host146.sans.org
  • host151.sans.org
  • host156.sans.org
  • host159.sans.org
  • host160.sans.org
  • host162.sans.org
  • host163.sans.org
  • host164.sans.org
  • host166.sans.org
  • host167.sans.org
  • host168.sans.org
  • host169.sans.org
  • host176.sans.org
  • host177.sans.org
  • host178.sans.org
  • host181.sans.org
  • host182.sans.org
  • host183.sans.org
  • host186.sans.org
  • host190.sans.org
  • host191.sans.org
  • host192.sans.org
  • host195.sans.org
  • host197.sans.org
  • host198.sans.org
  • host22.sans.org
  • host25.sans.org
  • host26.sans.org
  • host27.sans.org
  • host29.sans.org
  • host31.sans.org
  • host32.sans.org
  • host35.sans.org
  • host36.sans.org
  • host40.sans.org
  • host41.sans.org
  • host45.sans.org
  • host49.sans.org
  • host51.sans.org
  • host52.sans.org
  • host54.sans.org
  • host56.sans.org
  • host57.sans.org
  • host60.sans.org
  • host62.sans.org
  • host63.sans.org
  • host64.sans.org
  • host68.sans.org
  • host69.sans.org
  • host70.sans.org
  • host73.sans.org
  • host74.sans.org
  • host75.sans.org
  • host76.sans.org
  • host77.sans.org
  • host79.sans.org
  • host83.sans.org
  • host86.sans.org
  • host87.sans.org
  • host88.sans.org
  • host90.sans.org
  • host92.sans.org
  • host94.sans.org
  • host96.sans.org
  • host98.sans.org
  • host99.sans.org
  • ics.sans.org
  • intrepid.sans.org
  • jira.sans.org
  • labplatform.sans.org
  • launcher.netwars.sans.org
  • mlm-mta.sans.org
  • mylabs.sans.org
  • netwars.sans.org
  • nwt7-667.netwars.sans.org
  • nwt7-670.netwars.sans.org
  • nwt7-8888.devnetwars.sans.org
  • oasis.labs.sans.org
  • olt-apis.sans.org
  • olt-content-fargate-test.sans.org
  • ondemand.sans.org
  • ondemand2.sans.org
  • ondemand3.sans.org
  • pen-test-ing.sans.org
  • pentest.sans.org
  • phish-smtp.aws.sans.org
  • phish.sans.org
  • pokey.sans.org
  • pre-ondemand-search.sans.org
  • preview.sans.org
  • pywars.labs.sans.org
  • rundeck-mydev.devlabs.sans.org
  • rundeck-prod.labs.sans.org
  • s124-www.sans.org
  • s125-www.sans.org
  • s96-www.sans.org
  • sandbox.devhq.sans.org
  • sandbox.oasis.labs.sans.org
  • sandbox.sans-training-content.sans.org
  • savfw21a.sans.org
  • search.sans.org
  • server2.sans.org
  • sh5e-ltr.sans.org
  • smtp21a.sans.org
  • smtp21b.sans.org
  • sore.sans.org
  • stage-cc.sans.org
  • staging-api.sans.org
  • staging-cdn.eu-central-1.develop.securityawareness.sans.org
  • staging-cdn.eu-central-1.sandbox.securityawareness.sans.org
  • stg-security-awareness.sans.org
  • uneq.uald.sans.org
  • v0la4-tl.sans.org
  • valid-sunfish.sroclabs.sans.org
  • vpn.sans.org
  • ww.sans.org
  • wws.sans.org
  • www.dev-login.sans.org
  • www.ep.sans.org
  • www.login.sans.org
  • www.qa-login.sans.org
  • www.securemail.sans.org
  • www.uat-login.sans.org
  • www.zeus.vpn.sans.org
  • wwww.sans.org
  • z.den-1a.vpn.sans.org
Sources: rapiddns 69 · certspotter 86 · dns-brute 7 · virustotal 252 · subfinder 147

From CT logs, passive DNS (25+ sources) and brute-force. Live means it resolves now.

SPF Present
v=spf1 include:%{i}._ip.%{h}._ehlo.%{d}._spf.vali.email ~all
DMARC Present
p=reject
v=DMARC1; p=reject; rua=mailto:dmarc_agg@vali.email
DKIM 4 found
selector2._domainkeys1._domainkeys2._domainkeym1._domainkey
Show public keys
selector2._domainkey.sans.org
v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDZqhGXswYvDhtwcHuUGPizh6vtV5N16gNSU75GIPkPBc43RZrZ6r4rQKREiiyETOPEbDKftHHOrE4o9XuZL4urAM+UYTsR4WfBmwgVqdyXHh8aQ8pUR2y872+sP+LpU3htaX7mAasp7Rf6h36fwjnhTv0dh1cLK4S0BN7yW99d6QIDAQAB;
s1._domainkey.sans.org
k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuz6LrARRV26F9CG+GO+Yzr1MoMm0+b8F3VEs3ryo7ns6kg4TdLyXNiHDxlfVQsFalgYiXf98F2PELg3EIC0hufkstsrCljoadl12tPf473QOyl748slJME9eXy54AysmkSF3NW8xan54Czocr+AoYZY2BSqQAZnoH8hR8JqNPRo/pMXYMwpZOy8UUho+Cgg2yM8X6IIZV02qWeUUnBQXIiwUQDZP4Ub0GyjxYN3XjqT/i/j4M31SmmAvA5rMMcQa6qfQDzqv8APSNE0h4msleoiegKSVCBl1Zn9IroVk/CNWw4ViJPC902Xcd1eKGjBbT18OOWyiONOnAyPmcU6IjQIDAQAB
s2._domainkey.sans.org
k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC8oyCbl+tIwrQCEpXrWfVOtV1ZnTau1xAeLEpYySt1MIFex7xRT0uKFg+aMsHOJKen8b+XC/fe3BvyDNacfwXPuKtNcgDo27U0zayjnwYsayUKJCunIYl66RfPBZunfRE7TI2u57dZvi4aNtKNzkV79z6sEBV+RGGSALjWyU84MwIDAQAB
m1._domainkey.sans.org
v=DKIM1; k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDCUsMXVyvoTUJ3Ov/NAsONt5pXDjUfIJF8h4gZ4qcswAdOXZ8BBqGfLz5uq8PWXdfwZTP8k4aPiqgm8MuGNYXa2Hk974OtgXJSMkJ4XToZHhIXJTxcTO2dpcdn71PBuc4hotsfOGmMP6js3iT2tIppDv+3omcJ/bpb+NoRxpjOuwIDAQAB

DKIM checked on 29 common selectors; custom ones can't be discovered. Cached up to 1 h.

Get this report as JSON

One call returns everything on this page. Each section is also its own endpoint.

curl "https://domain-intelligence-api.p.rapidapi.com/lookup/sans.org" \
  -H "X-RapidAPI-Host: domain-intelligence-api.p.rapidapi.com" \
  -H "X-RapidAPI-Key: YOUR_RAPIDAPI_KEY"
1,000 requests a month free, no card Paid plans up to 5M a month ?wait=1 waits for every subdomain source to finish

More reports