Domain
cursor.com
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of cursor.com
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
Hosting IPs
103
A/AAAA targets
Subdomains
43
CT + scan + body
Record Types
4
seen in DNS
Observed Certs
3
in our scans
DNS Records
A
76.76.21.21
AAAA
—
MX
1 aspmx.l.google.com, 10 alt3.aspmx.l.google.com, 10 alt4.aspmx.l.google.com, 5 alt1.aspmx.l.google.com, 5 alt2.aspmx.l.google.com
NS
ns-1366.awsdns-42.org, ns-1758.awsdns-27.co.uk, ns-265.awsdns-33.com, ns-682.awsdns-21.net
TXT
MS=ms66950797, afternic-verification-hyPeMFwWREkaDpMSPT6FPJ, anthropic-domain-verification-1er2cj=fcUJsdJ7kfq2Lp6XgYABnKuOo, apple-domain-verification=6WmKH1DQgWyhoqQT, docusign=cf0819bc-9ccb-4b86-8fb2-587d8f103d9b, doordash-verification=9ZAkHrNetG2LEg7f8Tuq2jU64bEmjT, figma-domain-verification=d7a81001ff0da28fcf26c182906e70d4adcc3860d2208054b56adeb46f57fb7c-1778743381, google-site-verification=9UChtu6OmXW-_O3sToc8Cl5kIhXjYRBpx_o1M6XlBlA
CNAME
—
CAA
—
WHOIS / Registration
Registration data planned
Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.
Subdomains
Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.
| Subdomain | Resolves to | Last seen |
|---|---|---|
| origin.cursor.com | 2026-06-23 18:07:47.027 | |
| www.cursor.com | 2026-07-27 20:43:03.212 | |
| review.cursor.com | 2026-06-22 04:16:31.791 | |
| docs.cursor.com | 2026-07-23 20:30:23.856 | |
| downloads.cursor.com | 2026-06-18 08:32:34.679 | |
| forum.cursor.com | 2026-05-27 00:08:10.042 | |
| review.stg.cursor.com | 2026-06-20 08:35:10.022 | |
| api.cursor.com | 2026-05-26 10:27:10.433 | |
| cluster-controller.internal.cursor.com | 2026-06-23 22:52:33.689 | |
| origin-staging.cursor.com | 2026-05-27 17:49:03.731 | |
| ss-gtm.cursor.com | 2026-06-20 01:11:46.306 | |
| cursor.com | 2026-07-28 19:02:52.609 | |
| downloads-290bb7e2.cursor.com | 1970-01-01 00:00:00.000 | |
| forum-ca97698b16aa.cursor.com | 1970-01-01 00:00:00.000 | |
| gitlabprivatelinktest-4b6b9287.cursor.com | 1970-01-01 00:00:00.000 | |
| status.cursor.com | 1970-01-01 00:00:00.000 |
Tech Stack
Tech detection pending
Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.
TLS Certificates
Certificate observations pending
TLS certs naming this domain in subject or SANs will appear here as our scan-layer catches them.
IPs Citing This Domain
Hosts whose HTML body references this domain. Strong signal for origin/mirror/embed discovery.
45.32.124.148:443
href · ×9
182.92.221.242:80
href · ×6
121.41.105.109:80
href · ×4
64.90.0.203:443
href · ×2
8.152.192.115:80
href · ×2
34.126.174.82:443
href · ×2
42.192.39.170:443
href · ×2
186.241.76.86:80
href · ×2
124.222.208.232:8080
href · ×2
8.138.102.141:443
href · ×2
158.101.12.126:80
href · ×2
45.207.212.17:443
href · ×1
167.71.161.196:80
href · ×1
95.169.6.107:80
href · ×1
101.34.249.107:443
href · ×1
109.224.229.158:80
href · ×1
213.199.34.90:443
href · ×1
162.251.165.181:443
href · ×1
43.167.176.207:443
href · ×1
47.115.91.87:443
href · ×1
116.203.80.32:443
href · ×1
43.163.92.65:80
href · ×1
51.83.122.131:443
href · ×1
155.212.167.197:443
href · ×1
109.123.240.151:80
href · ×1
188.255.118.111:443
href · ×1
121.40.54.69:443
href · ×1
47.237.200.84:993
href · ×1
152.67.62.100:443
href · ×1
Origin / IP-Leak
USP
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
| Origin IP | Origin ASN | CDN ASN | Confidence | Reasoning |
|---|---|---|---|---|
| 91.107.250.13 | AS24940 | AS16509 | 95% | cert 807f0501… served by 91.107.250.13 (AS24940) carries SAN cursor.com which currently resolves through Amazon (AS16509) at 76.76.21.21 |
Threat Intelligence
Domain threat-intel pending
Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.
History
Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.
| Type | Value | First seen | Last seen |
|---|---|---|---|
| NS | ns-265.awsdns-33.com | 2026-05-26 00:03:35.658 | 2026-07-28 19:02:52.609 |
| TXT | google-site-verification=p0mgu1Q9aaBWxi6VA-ZLmy0hD0fpjJcGcc-85fN1I5Y | 2026-05-26 00:03:35.658 | 2026-07-28 19:02:52.609 |
| TXT | google-site-verification=SuWrNWVELfhz1BqkMA_vjQsc9UgxN45anv_IbuYEgrs | 2026-05-26 00:03:35.658 | 2026-07-28 19:02:52.609 |
| NS | ns-1366.awsdns-42.org | 2026-05-26 00:03:35.658 | 2026-07-28 19:02:52.609 |
| TXT | apple-domain-verification=6WmKH1DQgWyhoqQT | 2026-05-26 00:03:35.658 | 2026-07-28 19:02:52.609 |
| NS | ns-682.awsdns-21.net | 2026-05-26 00:03:35.658 | 2026-07-28 19:02:52.609 |
| TXT | v=spf1 include:_spf.google.com include:stspg-customer.com ~all | 2026-05-26 00:03:35.658 | 2026-05-27 17:53:26.325 |
| TXT | slack-domain-verification=4Sf7wlouKi1sD9xYl9EpiJ4aodbUvAUKk9DaSbhM | 2026-05-26 00:03:35.658 | 2026-07-28 19:02:52.609 |
| A | 76.76.21.21 | 2026-05-26 00:03:35.658 | 2026-07-28 19:02:52.609 |
| TXT | status-page-domain-verification=35154jm3n03g | 2026-05-26 00:03:35.658 | 2026-07-28 19:02:52.609 |
| TXT | qa-wolf-domain-verification-6h5xrg=dQu6gFedE39PvjusH3m942jfj | 2026-05-26 00:03:35.658 | 2026-07-28 19:02:52.609 |
| MX | 5 alt1.aspmx.l.google.com | 2026-05-26 00:03:35.658 | 2026-07-28 19:02:52.609 |
| TXT | figma-domain-verification=d7a81001ff0da28fcf26c182906e70d4adcc3860d2208054b56adeb46f57fb7c-1778743381 | 2026-05-26 00:03:35.658 | 2026-07-28 19:02:52.609 |
| MX | 10 alt3.aspmx.l.google.com | 2026-05-26 00:03:35.658 | 2026-07-28 19:02:52.609 |
| TXT | docusign=cf0819bc-9ccb-4b86-8fb2-587d8f103d9b | 2026-05-26 00:03:35.658 | 2026-07-28 19:02:52.609 |
| TXT | afternic-verification-hyPeMFwWREkaDpMSPT6FPJ | 2026-05-26 00:03:35.658 | 2026-07-28 19:02:52.609 |
| MX | 5 alt2.aspmx.l.google.com | 2026-05-26 00:03:35.658 | 2026-07-28 19:02:52.609 |
| TXT | google-site-verification=WKZ3eIhRdWCd3HfP2ta6r0UpB9UquBrSIDDlBH5cIfg | 2026-05-26 00:03:35.658 | 2026-07-28 19:02:52.609 |
| MX | 10 alt4.aspmx.l.google.com | 2026-05-26 00:03:35.658 | 2026-07-28 19:02:52.609 |
| MX | 1 aspmx.l.google.com | 2026-05-26 00:03:35.658 | 2026-07-28 19:02:52.609 |
| TXT | google-site-verification=9UChtu6OmXW-_O3sToc8Cl5kIhXjYRBpx_o1M6XlBlA | 2026-05-26 00:03:35.658 | 2026-07-28 19:02:52.609 |
| TXT | anthropic-domain-verification-1er2cj=fcUJsdJ7kfq2Lp6XgYABnKuOo | 2026-05-26 00:03:35.658 | 2026-07-28 19:02:52.609 |
| TXT | MS=ms66950797 | 2026-05-26 00:03:35.658 | 2026-07-28 19:02:52.609 |
| NS | ns-1758.awsdns-27.co.uk | 2026-05-26 00:03:35.658 | 2026-07-28 19:02:52.609 |
| TXT | doordash-verification=9ZAkHrNetG2LEg7f8Tuq2jU64bEmjT | 2026-06-01 23:09:42.711 | 2026-07-28 19:02:52.609 |
| TXT | v=spf1 include:_spf.google.com include:stspg-customer.com include:spf.mtasv.net ~all | 2026-06-01 23:09:42.711 | 2026-07-28 19:02:52.609 |
| TXT | google-site-verification=RIBekzSG62DswbquPtJvqhmMb1eqMR9ZaLraPx5POh0 | 2026-06-01 23:09:42.711 | 2026-07-28 19:02:52.609 |
| TXT | google-site-verification=F5bnStEi35Uh-OdvzB2MiRUIeTwUV1xev2ro3cP2gzs | 2026-07-21 14:42:12.780 | 2026-07-28 19:02:52.609 |