Reports / sophos.com
sophos.com
We found 224 subdomains of sophos.com in certificate transparency logs, passive DNS and DNS brute force; 161 resolve right now, including login.sophos.com, id.sophos.com and portal.sophos.com. sophos.com is registered with Lexsynergy Limited since 1995-02-17 and expires 2027-02-18. Its SSL certificate from Let's Encrypt expires in 45 days. For email it has an SPF record, DMARC set to quarantine and DKIM keys on 4 common selectors.
- Registration
- Lexsynergy LimitedSince 1995-02-17 · expires 2027-02-18
- SSL certificate
- 45 days leftLet's Encrypt
- Subdomains
- 161 live224 discovered in total
- Email authentication
- SPF, DMARC, DKIMDMARC policy: quarantine
DNS records
6 of 7 types| A2 |
|
| AAAA2 |
|
| MX2 |
|
| TXT52 |
Show all 52
|
| NS6 |
|
| CAA | No CAA records |
| SOA1 |
|
Live lookup, cached up to 5 min.
WHOIS / RDAP
via rdap.org- Registrar
- Lexsynergy Limited
- Registered
- 1995-02-17
- Expires
- 2027-02-18
- Last updated
- 2026-01-19
- Registry handle
- 4318203_DOMAIN_COM-VRSN
- Nameservers
- a1-100.akam.neta10-65.akam.neta11-66.akam.neta14-67.akam.neta18-64.akam.neta9-65.akam.net
- Status
- client delete prohibitedclient transfer prohibitedclient update prohibitedserver delete prohibitedserver transfer prohibitedserver update prohibited
RDAP with port-43 WHOIS fallback, cached up to 1 h.
SSL certificate
Valid, 45 days left- Issuer
- Let's EncryptCN=YR1,O=Let's Encrypt,C=US
- Subject
- www.sophos.com
- Valid from
- 2026-08-19 06:54 UTC
- Valid until
- 2026-11-17 06:54 UTC
- Serial number
- 597254742782362383239687073404118727764970
- Names covered (27)
- assets.sophos.comclub.sophos.comdemo.sophos.comdev-login.sophos.comdev.preview.sophos.comdiscover.sophos.comhome.sophos.cominvestors.sophos.comlogin.sophos.commy.astaro.commyutm.sophos.comnews.sophos.compartnernews.sophos.compartnerportal.sophos.compartners.sophos.comqa.preview.sophos.comsecure2.sophos.comsophos.comsophserv.sophos.comstage.preview.sophos.comtest-login.sophos.comwww.hitmanpro.comwww.secureworks.comwww.secureworks.jp
Show all 27
www.sophos.comwww.surfright.comwww.surfright.nl
Live TLS handshake on port 443, cached up to 6 h.
Subdomains
161 live · 224 discovered- academy.sophos.com3.170.19.3
- account-correlation-cloudhub-eu-west-1.qa.hydra.sophos.comtf-account-correlation-d2d1b1fe-2108008956.eu-west-1.elb.amazonaws.com
- accounts-cloudhub-eu-west-1.dev.hydra.sophos.comtf-accounts-4591fda7-2027601829.eu-west-1.elb.amazonaws.com
- advisor.sophos.com206.132.28.69
- ai.sophos.com52.18.246.176
- airgap.u2d.sophos.com13.226.238.108
- analysis.sophos.com35.169.16.109
- apac.analysis.sophos.com54.168.233.198
- api-au01.central.sophos.com23.48.203.5
- api-br01.central.sophos.comapi.central.sophos.com.edgekey.net
- api-ca01.central.sophos.com23.53.35.141
- api-cloudstation-eu-central-1.prod.hydra.sophos.comapi-spinnaker-2098312200.eu-central-1.elb.amazonaws.com
- api-eu01.central.sophos.com23.53.35.141
- api-eu02.central.sophos.com23.212.251.197
- api-in01.central.sophos.com23.48.203.5
- api-jp01.central.sophos.comapi.central.sophos.com.edgekey.net
- api-us01.central.sophos.com23.48.203.5
- api-us02.central.sophos.com3.95.137.44
- api-us03.central.sophos.comapi.central.sophos.com.edgekey.net
- api-us03.inf.central.sophos.com54.145.119.171
- api.central.sophos.com23.53.35.141
- apuv3dev.apu.sophos.com13.36.123.234
- apuv3hubdev.apu.sophos.com15.188.191.140
- attend.sophos.com3.170.3.114
- au-ftp1.sophos.com125.7.49.103
- au.analysis.sophos.com13.210.250.121
- au.sophos.com195.171.192.217
- autodiscover.sophos.comautodiscover.outlook.com
- blogs.sophos.com192.0.66.227
- bos-acc.sophos.com198.144.101.4
- bos-vpn.sophos.com207.190.231.82
- brand.sophos.com3.171.61.15
- careers.sophos.com3.167.37.10
- cdn-portal.sophos.com104.18.16.208
- cdn.staging.analysis.sophos.com3.162.103.30
- central-2.sophos.com23.48.203.15
- central.sophos.com40.180.99.81
- chat.sophos.com172.234.159.31
- ci.sophos.com195.171.192.186
- cloud.sophos.com40.180.99.81
- community.sophos.com45.60.31.181
- connect.labs.sophos.com18.135.204.211
- csia.sophos.com195.171.192.81
- de.analysis.sophos.com3.124.178.105
- demo.sophos.com23.53.35.134
- dev-export-compliance.api.sophos.com108.132.243.245
- dev-macfeedback.sophos.comdev-macfeedback.sophos.com.edgekey.net
- dev1.test.analysis.sophos.com18.135.223.250
- dev2.test.analysis.sophos.com13.135.130.201
- dev3.test.analysis.sophos.com13.134.173.35
- developer.sophos.com3.162.125.112
- discover.sophos.com23.53.35.134
- docs.sophos.com23.222.202.37
- documentation.test.analysis.sophos.com13.226.209.4
- download.sophos.com23.222.202.37
- downloads.sophos.com23.222.202.37
- emeasip.sophos.com185.19.101.100
- encrypt4.sophos.com198.144.101.72
- eu.analysis.sophos.com13.134.113.197
- eu1.apu.sophos.com34.250.54.98
- eu2.apu.sophos.com54.228.158.66
- event.sophos.com18.204.28.102
- eventhub.sophos.comeventhub.goldcast.io
- events.sophos.com18.204.28.102
- export-compliance.api.sophos.com3.170.19.104
- factory.sophos.com3.162.103.39
- federation-dev.sophos.com104.18.34.171
- federation-qa.sophos.com104.18.34.171
- federation.sophos.com104.18.34.171
- feedback.sophos.com107.23.139.220
- fhc-login.sophos.comsophos-fhc-dev.azurefd.net
- firewallsizing-internal.sophos.com172.234.159.31
- firewallsizing.sophos.comfirewallsizing-partner-lb-577645360.us-east-1.elb.amazonaws.com
- ftp.sophos.com195.171.192.29
- ftp8.sophos.com125.7.49.103
- fw-ca.sophos.com209.139.197.120
- fw-us.sophos.com72.248.114.194
- go.sophos.com141.145.8.10
- gse.sophos.com184.169.165.227
- guides.sophos.com18.216.227.159
- gw-it.sophos.com80.20.236.41
- hello.sophos.comfe518c56-4d28-49c1-bcb4-ca313c1289c4.outrch.com
- home.sophos.com23.53.35.134
- hub-staging.analysis.sophos.com13.41.39.165
- hub.analysis.sophos.com13.41.177.88
- id.sophos.com3.167.69.40
- integration.analysis.sophos.com16.60.22.8
- intelix.sophos.com18.160.46.118
- internal.analysis.sophos.com13.41.39.165
- itvigilante.sophos.com195.171.192.217
- job.sophos.comdomain-redirect-649404360.eu-west-1.elb.amazonaws.com
- jobs.sophos.com52.18.246.176
- labsdev.test.analysis.sophos.com16.60.22.8
- login.sophos.com23.53.35.175
- marketing-webservices.sophos.com195.171.192.200
- mta-sts.sophos.commta-sts-policy.sophosdmarc.net
- mx1.sophos.com64.86.143.227
- mx2.sophos.com195.171.192.119
- my.sophos.com151.101.1.195
- mysophos-static-dev.sophos.com13.227.65.22
- mysophos-static-dev3.sophos.com13.227.65.22
- mysophos-static-prod.sophos.comdb36mim9vkon2.cloudfront.net
- mysophos-static-qa.sophos.com13.227.65.22
- news.sophos.com23.12.147.69
- ns2.sophos.com216.6.116.219
- ns4.sophos.com195.171.192.165
- ntp.sophos.comgw-uk.sophos.com
- origin-cn.sophos.com195.171.192.217
- origin-downloads.sophos.com195.171.192.219
- origin-podcasts.sophos.com195.171.192.217
- origin-tw.sophos.com195.171.192.217
- outsidemail.sophos.com23.212.251.136
- oz.sophos.com195.171.192.217
- p0.q.hmr.sophos.com3.248.14.203
- packages.sophos.comd2zu0gljg038ea.cloudfront.net
- partner.sophos.comdomain-redirect-649404360.eu-west-1.elb.amazonaws.com
- partners.sophos.com23.212.249.207
- pm-bounces.sophos.com18.227.176.23
- pmx-static-uk1.sophos.com195.171.192.221
- portal.sophos.com63.174.23.41
- renewals.sophos.com141.145.8.10
- research.sophos.com195.171.192.217
- salesvigilante.sophos.com195.171.192.217
- sandbox.sophos.com35.169.16.109
- sasi-uk.sophos.com195.171.192.223
- scr-portal.sophos.com13.135.178.153
- scr-stage-new-portal.sophos.com16.60.234.149
- scr-stage-new.sophos.com16.61.98.70
- search.sophos.com52.18.246.176
- secure.sophos.comd30v7i0kora5sx.cloudfront.net
- security.sophos.comproxy-ssl.webflow.com
- sendsafely-integration-sandbox.sophos.com40.180.87.241
- sftelemetry-test.sophos.com3.170.42.27
- slapui.analysis.sophos.com3.167.56.111
- solo.sophos.com195.171.192.197
- spoke-test.analysis.sophos.com13.210.250.121
- ssh.sophos.com195.171.192.94
- staging.analysis.sophos.com16.61.119.56
- static-sendsafely-integration-sandbox.sophos.com40.180.87.241
- status.sophos.com150.171.109.74
- store.sophos.com13.35.78.115
- support.sophos.com155.226.157.176
- supportaccess.sophos.com180.87.95.130
- surveys.sophos.com23.53.35.143
- test-connect.labs.sophos.com18.135.71.227
- test-export-compliance.api.sophos.com108.131.233.180
- test.analysis.sophos.com16.60.22.8
- training.sophos.comd2cme3fj7lu6km.cloudfront.net
- uat.sophos.com195.171.192.174
- uk-ocsav.sophos.com195.171.192.13
- uk.sophos.com195.171.192.217
- uksecure.sophos.comuk-csg1.sophos.com
- us-col-ocswc.sophos.com216.47.234.214
- us-ocsav.sophos.com216.47.234.215
- us-ocswebfarm1.sophos.com216.47.234.217
- us-vc.sophos.com198.144.101.87
- uunet-gw.sophos.com194.203.134.254
- view.sophos.com104.18.40.252
- www-origin-3.sophos.com193.67.162.116
- www-test.sophos.com195.171.192.159
- www.sophos.com23.12.147.69
No subdomains found.
63 more seen in CT logs and passive DNS that don't resolve now
- abn-lyncedge1.sophos.com
- ap-south-1.dev.ztna.access.sophos.com
- ap-south-1.prod.ztna.access.sophos.com
- ap-south-1.qa.ztna.access.sophos.com
- apc-easy.sophos.com
- api-ae01.central.sophos.com
- api.station.ap-northeast-1.central.sophos.com
- api.station.ap-south-1.central.sophos.com
- api.station.ap-southeast-2.central.sophos.com
- assets.sophos.com
- astaro.sophos.com
- auth-downloads.sophos.com
- bos-lyncedge.sophos.com
- ca-repo1.sophos.com
- cdn.analysis.sophos.com
- cdn.sophos.com
- cdn.test.analysis.sophos.com
- centraistatus.sophos.com
- cleverbridge.sophos.com
- de.sophos.com
- doc.sophos.com
- emeawebapps01.sophos.com
- encrypt2.sophos.com
- es-central-2.sophos.com
- es-central-3.sophos.com
- es-latest-3.sophos.com
- es-web-3.sophos.com
- es-web2.sophos.com
- eu1.sophos.com
- flinders.sophos.com
- floyd.sophos.com
- free.sophos.com
- ftp-tst-insecure.sophos.com
- ftp-tst.sophos.com
- ftp1.sophos.com
- ftp5.sophos.com
- fusion.sophos.com
- fw-fr.sophos.com
- fw-uk.sophos.com
- get.sophos.com
- gw-uk.sophos.com
- iefrdocs.sophos.com
- jp.sophos.com
- json-schema.sophos.com
- link16.sophos.com
- nacpatchupdate.sophos.com
- nacsigdefupdate.sophos.com
- network-ftp.sophos.com
- peer1.ff.staging.labs.sophos.com
- pmw-dynamic.sophos.com
- pmx-static.sophos.com
- scr-stage-portal.sophos.com
- sso-test.sophos.com
- sso.sophos.com
- suppot.sophos.com
- taegis.sophos.com
- uk-vc.sophos.com
- uk.analysis.sophos.com
- us.analysis.sophos.com
- us.sophos.com
- wvw.sophos.com
- www-origin-5.sophos.com
- xmpp.sophos.com
Shared infrastructure, collapsed:
43× *.access.sophos.com42× *.hydra.sophos.com
Sources: rapiddns 55 · dns-brute 38 · virustotal 175 · subfinder 90
From CT logs, passive DNS (25+ sources) and brute-force. Live means it resolves now.
Email security
SPF Present
v=spf1 redirect=sophos.com.spf.sophosdmarc.net
DMARC Present
p=quarantine
v=DMARC1; p=quarantine; pct=100; fo=0:s; rua=mailto:a.z2zesduo@reports.sophosdmarc.net,mailto:dmarc_rua@sophos.com; ruf=mailto:dmarc_ruf@sophos.com
DKIM 4 found
selector1._domainkeyk1._domainkeyk2._domainkeyk3._domainkey
Show public keys
selector1._domainkey.sophos.com
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+qjPlU1J1EORRLh9/nMn6aTEZ6hbyPlbshbumgwYjP8m/0X23zAUQIzmtL0l+RsxkeMfiVspq8ttaDQ/FfU386PVExznVYQ8fsu05eNuDT9tqenPmlxZVZIqm6WcfKOp+f4kR3czLlYIW2lkFF1+vPB8ntPAQqv/6hA7NMOVdIdQ8oqr9Ydyw43Pfr7TL8DZZUzghH+fpLyEZFuXDi63eTvXSZB0QYn7FhnbD7ksaFJmKic0wTm5RWblKorJJMGZyRpt38TeS0RHcZwgEYrMtMgubmd2gZPJ1QbVqGHlBJkXbjjOsXFXwMs8fGpEyc+RZvQ6VfQyGucSU6HvM5xMQIDAQAB;
k1._domainkey.sophos.com
k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDbNrX2cY/GUKIFx2G/1I00ftdAj713WP9AQ1xir85i89sA2guU0ta4UX1Xzm06XIU6iBP41VwmPwBGRNofhBVR+e6WHUoNyIR4Bn84LVcfZE20rmDeXQblIupNWBqLXM1Q+VieI/eZu/7k9/vOkLSaQQdml4Cv8lb3PcnluMVIhQIDAQAB;
k2._domainkey.sophos.com
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA0b90ObWaLDc+i9MtTNmGeWO009hr20fIxhGg6XBT2kjZ1DTThopSe1nAndsupmcBwlQ5Q6LJ+ZAxLcujnPIxM0ZBLmgpkv8u6RfY4eFP8OLvdAW3oSuB0DyLDigQX4Sj8wBO4YIdQH6AAmBeOsidsKAFNFUCpc3vCxtBDR12U+cBg724l3sBkMQ8evnz6idnqxq9QAVYh8k4kJ+RP+6cqTdy7LjIm8xY/bQNpQIpGUAuDo2DjLcCDun9DAI4Q/3z+Q0o9QuQIDAQAB;
k3._domainkey.sophos.com
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYGiMSn7fsUqSvfSX40x9R1OlRtbNiCY80lHRIlcKx3XDIR7257aUx+q9CSIARdfTL6KCuLGNFx5g9TgVr6png4ajcieSQGtOehBgxnkDN8aAA5TX0FmFrcefJU0JoxLOF09EKgXxhSSHCk/ekVb0PXSboHXoZ9+EI404F1qhcwXXIgHXTaUthHTut2P6BBZhIXIgvDe/w49GchR7MRJqjNb7neEBbYHbgWuBTvvHCg7Gy6m6n9krYK+ROWq3dVvXy9plAGK3ygM+HtjIiMt7arRGMOF0WgDTz7YdN9BGpt6BvXxLnjiQcgS5T9n+cIyPZgiWzDMXNlaEEdKTEKxrwIDAQAB;
DKIM checked on 29 common selectors; custom ones can't be discovered. Cached up to 1 h.
Get this report as JSON
One call returns everything on this page. Each section is also its own endpoint.
curl "https://domain-intelligence-api.p.rapidapi.com/lookup/sophos.com" \
-H "X-RapidAPI-Host: domain-intelligence-api.p.rapidapi.com" \
-H "X-RapidAPI-Key: YOUR_RAPIDAPI_KEY"
import requests
r = requests.get(
"https://domain-intelligence-api.p.rapidapi.com/lookup/sophos.com",
headers={
"X-RapidAPI-Host": "domain-intelligence-api.p.rapidapi.com",
"X-RapidAPI-Key": "YOUR_RAPIDAPI_KEY",
},
timeout=30,
)
print(r.json())
// Node 18+ (built-in fetch)
const res = await fetch(
"https://domain-intelligence-api.p.rapidapi.com/lookup/sophos.com",
{ headers: {
"X-RapidAPI-Host": "domain-intelligence-api.p.rapidapi.com",
"X-RapidAPI-Key": "YOUR_RAPIDAPI_KEY",
} }
);
console.log(await res.json());
<?php
$ch = curl_init("https://domain-intelligence-api.p.rapidapi.com/lookup/sophos.com");
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_HTTPHEADER, [
"X-RapidAPI-Host: domain-intelligence-api.p.rapidapi.com",
"X-RapidAPI-Key: YOUR_RAPIDAPI_KEY",
]);
$data = json_decode(curl_exec($ch), true);
print_r($data);
1,000 requests a month free, no card
Paid plans up to 5M a month
?wait=1 waits for every subdomain source to finish