Realurls

Rapid7

Also known as metasploit framework, metasploit-framework, rapid7/metasploit-framework. GitHub rapid7.

Official domains: rapid7.com

Identity anchored by github-history:rapid7/metasploit-framework(age=15y,contrib=1724,stars=38945). Display name from github_org_display_name(self-declared).

rapid7.com verified primary · confidence 0.83 · verified 2026-09-05

1 independent anchor(s) + 2 independent corroboration(s): meets the verified threshold

EvidenceWhat it shows
A1 anchor GitHub verified this organization's domain (DNS-level check performed by GitHub)
org=rapid7 org_verified=true blog=http://www.rapid7.com/
 source
A8 not counted Anchored repository's homepage points here, and this site links back
repo=rapid7/metasploit-framework org=rapid7 repo_anchored=true homepage=https://www.metasploit.com/ backlink=false stars=38945 age_days=5485 contributors=1724
 source
A3 not counted Corporate registrar fingerprint (brand-protection registrar, long prepaid term, registry locks)
registrar=MarkMonitor Inc. created=2000-05-25 expires=2027-05-25 remaining_days=262 locks=["delete","transfer","update"]
 source
A4 not counted TLS certificate carries the organization name (OV/EV)
subject_org= validation_type=DV issuer=Amazon san_count=3
 TLS handshake rapid7.com:443
B1 not counted Wikidata official-website claim (P856) on the anchored item
qid=Q85874460 label=Rapid7 site=https://www.rapid7.com/ sitelinks=1 competing_items=0
 source
B5 corroboration Tranco top-1M ranking
rank=1798 source=top-1m list
 source
B4 corroboration Wayback Machine history
first_snapshot=2000-12-06 history_days=9404
 source
4 piece(s) of evidence not counted — why
  • A8: repository homepage (https://www.metasploit.com/) does not point to this domain
  • A3: fewer than 1095 days until expiry; not the long prepaid term typical of corporate registrations
  • A4: DV certificate carries no organization name (most modern tech companies use DV; this is expected)
  • B1: entity not anchored: no canonical Wikidata item, so an arbitrary item's P856 cannot corroborate
Reproduce this yourself
# A1 — GitHub verified this org's domain
curl -s https://api.github.com/orgs/rapid7 | jq '{name, blog, is_verified}'

# A8 — anchored repo's homepage
curl -s https://api.github.com/repos/rapid7/metasploit-framework | jq '{homepage, created_at, stargazers_count}'

# A3 — registrar / dates / locks
curl -sL https://rdap.org/domain/rapid7.com | jq '{status, events, registrar: [.entities[]|select(.roles[]=="registrar")|.vcardArray[1][1][3]]}'

# B5 — Tranco rank
curl -s https://tranco-list.eu/api/ranks/domain/rapid7.com

# B4 — first Wayback snapshot
curl -s "http://web.archive.org/cdx/search/cdx?url=rapid7.com&limit=1&output=json"

# Re-run the whole pipeline for this domain
git clone https://github.com/zhouchungong/realurls-registry && cd realurls-registry && pip install -e . && python -m src.verify rapid7.com

Think this is wrong? Open a dispute — the burden of proof is on us, and the record is downgraded while we check. Source record: YAML.