Check-Host.cc

Try 1.1.1.1 AS13335 check-host.cc /country/de /tld/cc
Domain

flow.microsoft.com

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

DNS Check HTTP Check Run Full Scan .com TLD

Run a live full scan of flow.microsoft.com

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now
Hosting IPs
—
A/AAAA targets
Subdomains
—
CT + scan + body
Record Types
—
seen in DNS
Observed Certs
—
in our scans

DNS Records

A
13.107.213.65, 13.107.226.53, 13.107.246.65, 13.107.253.53, 150.171.109.100, 150.171.109.101, 150.171.109.183, 150.171.109.197
AAAA
2603:1061:14:133::1, 2603:1061:14:135::1, 2603:1061:14:137::1, 2603:1061:14:23::1, 2603:1061:14:32::1, 2603:1061:14:34::1, 2603:1061:14:63::1, 2603:1061:14:64::1
MX
—
NS
—
TXT
—
CNAME
—
CAA
—

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Subdomain enumeration pending

Every subdomain ever issued a TLS cert under this apex — extracted from Certificate Transparency logs, our own scan observations and body references.

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

43.200.29.23:443 717f808f0f56…
Subject: api.flow.microsoft.com
Issuer: Monoly Root CA
SANs: *.api.flow.microsoft.com, *.asyncgw.teams.microsoft.com, *.augloop.office.com, *.flightproxy.teams.microsoft.com, *.graph.microsoft.com, *.mediap.svc.ms, *.officeapps.live.com, *.outlook.office.com, *.outlook.office365.com, *.pptservicescast.officeapps.live.com, *.relay.teams.microsoft.com, *.sharepoint.com, *.substrate.office.com, *.tasks.office.com, *.teams.microsoft.com, *.trouter.teams.microsoft.com, *.web.yammer.com, *.whiteboard.microsoft.com, api.flow.microsoft.com, asyncgw.teams.microsoft.com, augloop.office.com, flightproxy.teams.microsoft.com, graph.microsoft.com, mediap.svc.ms, officeapps.live.com, outlook.office.com, outlook.office365.com, pptservicescast.officeapps.live.com, relay.teams.microsoft.com, sharepoint.com, substrate.office.com, tasks.office.com, teams.microsoft.com, trouter.teams.microsoft.com, web.yammer.com, whiteboard.microsoft.com

IPs Citing This Domain

Hosts whose HTML body references this domain. Strong signal for origin/mirror/embed discovery.

52.126.44.41:443 href · ×2
52.243.238.247:443 href · ×2
74.177.106.81:443 href · ×2
20.66.129.61:443 href · ×2
4.176.32.117:443 href · ×2
48.199.209.138:443 href · ×2
57.167.119.24:443 href · ×2

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

No origin-IP leaks detected (yet)

Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.

CT-Log Evidence

Certificates from public Certificate Transparency logs whose subject or SAN names this domain — including historic certs we never observed live.

fab68519bba64270… google · xenon2026h2
Subject: flow.microsoft.com
Issuer: Microsoft Azure RSA TLS Issuing CA 04
SANs: flow.microsoft.com, *.flow.microsoft.com
Valid: 2026-04-05 04:08:34 → 2026-08-25 23:59:59
347e8bdaa2aea956… google · xenon2026h2
Subject: flow.microsoft.com
Issuer: Microsoft Azure RSA TLS Issuing CA 07
SANs: flow.microsoft.com, *.flow.microsoft.com
Valid: 2026-04-04 19:32:15 → 2026-08-25 23:59:59
02c55c28461b8d9f… google · xenon2026h2
Subject: flow.microsoft.com
Issuer: Microsoft Azure RSA TLS Issuing CA 08
SANs: flow.microsoft.com, *.flow.microsoft.com
Valid: 2026-04-04 10:34:19 → 2026-08-25 23:59:59
917fa15616da54b7… google · xenon2026h2
Subject: flow.microsoft.com
Issuer: Microsoft Azure RSA TLS Issuing CA 07
SANs: flow.microsoft.com, *.flow.microsoft.com
Valid: 2026-04-03 08:14:05 → 2026-08-25 23:59:59
0c676d99f1cf4082… google · xenon2026h2
Subject: flow.microsoft.com
Issuer: Microsoft Azure RSA TLS Issuing CA 08
SANs: flow.microsoft.com, us.flow.microsoft.com, preview.flow.microsoft.com, emea.flow.microsoft.com, asia.flow.microsoft.com, australia.flow.microsoft.com, india.flow.microsoft.com, japan.flow.microsoft.com, canada.flow.microsoft.com, uk.flow.microsoft.com, unitedkingdom.flow.microsoft.com, ms.flow.microsoft.com, southamerica.flow.microsoft.com, tip0.flow.microsoft.com, preview.portal.processsimple.trafficmanager.net, portal.processsimple.trafficmanager.net, france.flow.microsoft.com, unitedarabemirates.flow.microsoft.com, *.asia.flow.microsoft.com, *.australia.flow.microsoft.com, *.canada.flow.microsoft.com, *.emea.flow.microsoft.com, *.france.flow.microsoft.com, *.germany.flow.microsoft.com, *.india.flow.microsoft.com, *.japan.flow.microsoft.com, *.preview.flow.microsoft.com, *.southamerica.flow.microsoft.com, *.uk.flow.microsoft.com, *.unitedarabemirates.flow.microsoft.com, *.us.flow.microsoft.com, germany.flow.microsoft.com, switzerland.flow.microsoft.com, *.switzerland.flow.microsoft.com, *.unitedkingdom.flow.microsoft.com, korea.flow.microsoft.com, *.korea.flow.microsoft.com, norway.flow.microsoft.com, *.norway.flow.microsoft.com, southafrica.flow.microsoft.com, *.southafrica.flow.microsoft.com, singapore.flow.microsoft.com, *.singapore.flow.microsoft.com, sweden.flow.microsoft.com, *.sweden.flow.microsoft.com, italy.flow.microsoft.com, *.italy.flow.microsoft.com
Valid: 2026-04-03 01:42:02 → 2026-08-25 23:59:59
411e07af4437eae2… google · xenon2026h2
Subject: flow.microsoft.com
Issuer: Microsoft Azure RSA TLS Issuing CA 08
SANs: flow.microsoft.com, us.flow.microsoft.com, preview.flow.microsoft.com, emea.flow.microsoft.com, asia.flow.microsoft.com, australia.flow.microsoft.com, india.flow.microsoft.com, japan.flow.microsoft.com, canada.flow.microsoft.com, uk.flow.microsoft.com, unitedkingdom.flow.microsoft.com, ms.flow.microsoft.com, southamerica.flow.microsoft.com, tip0.flow.microsoft.com, preview.portal.processsimple.trafficmanager.net, portal.processsimple.trafficmanager.net, france.flow.microsoft.com, unitedarabemirates.flow.microsoft.com, *.asia.flow.microsoft.com, *.australia.flow.microsoft.com, *.canada.flow.microsoft.com, *.emea.flow.microsoft.com, *.france.flow.microsoft.com, *.germany.flow.microsoft.com, *.india.flow.microsoft.com, *.japan.flow.microsoft.com, *.preview.flow.microsoft.com, *.southamerica.flow.microsoft.com, *.uk.flow.microsoft.com, *.unitedarabemirates.flow.microsoft.com, *.us.flow.microsoft.com, germany.flow.microsoft.com, switzerland.flow.microsoft.com, *.switzerland.flow.microsoft.com, *.unitedkingdom.flow.microsoft.com, korea.flow.microsoft.com, *.korea.flow.microsoft.com, norway.flow.microsoft.com, *.norway.flow.microsoft.com, southafrica.flow.microsoft.com, *.southafrica.flow.microsoft.com, singapore.flow.microsoft.com, *.singapore.flow.microsoft.com, sweden.flow.microsoft.com, *.sweden.flow.microsoft.com, italy.flow.microsoft.com, *.italy.flow.microsoft.com
Valid: 2026-04-03 01:42:02 → 2026-08-25 23:59:59
b9d87e90f54dcbfa… google · xenon2026h2
Subject: flow.microsoft.com
Issuer: Microsoft Azure RSA TLS Issuing CA 07
SANs: flow.microsoft.com, *.flow.microsoft.com
Valid: 2026-04-02 23:21:18 → 2026-08-25 23:59:59
8447258753ad0433… google · xenon2026h2
Subject: flow.microsoft.com
Issuer: Microsoft Azure RSA TLS Issuing CA 03
SANs: flow.microsoft.com, *.flow.microsoft.com
Valid: 2026-04-02 21:32:07 → 2026-08-25 23:59:59
ae0a1003729e3a35… google · xenon2026h2
Subject: flow.microsoft.com
Issuer: Microsoft Azure RSA TLS Issuing CA 07
SANs: flow.microsoft.com, *.flow.microsoft.com
Valid: 2026-04-02 05:55:04 → 2026-08-25 23:59:59
fc3ec966f8659f16… google · xenon2026h2
Subject: flow.microsoft.com
Issuer: Microsoft Azure RSA TLS Issuing CA 04
SANs: flow.microsoft.com, *.flow.microsoft.com
Valid: 2026-04-01 15:07:37 → 2026-08-25 23:59:59
60333456122620c2… google · xenon2026h2
Subject: flow.microsoft.com
Issuer: Microsoft Azure RSA TLS Issuing CA 08
SANs: flow.microsoft.com, *.flow.microsoft.com
Valid: 2026-03-29 21:01:11 → 2026-08-25 23:59:59
790c5dcd5375632a… google · xenon2026h2
Subject: flow.microsoft.com
Issuer: Microsoft Azure RSA TLS Issuing CA 07
SANs: flow.microsoft.com, *.flow.microsoft.com
Valid: 2026-03-29 05:24:24 → 2026-08-25 23:59:59
299b6258bcd75052… google · xenon2026h2
Subject: flow.microsoft.com
Issuer: Microsoft Azure RSA TLS Issuing CA 03
SANs: flow.microsoft.com, *.flow.microsoft.com
Valid: 2026-03-27 19:23:53 → 2026-08-25 23:59:59
7941e4394bc581f7… google · xenon2026h2
Subject: flow.microsoft.com
Issuer: Microsoft Azure RSA TLS Issuing CA 03
SANs: flow.microsoft.com, *.flow.microsoft.com
Valid: 2026-03-27 12:19:49 → 2026-08-25 23:59:59
efd7e1d164a6a391… google · xenon2026h2
Subject: flow.microsoft.com
Issuer: Microsoft Azure RSA TLS Issuing CA 08
SANs: flow.microsoft.com, *.flow.microsoft.com
Valid: 2026-03-25 18:04:47 → 2026-08-25 23:59:59
ba78c75b42d849dc… google · xenon2026h2
Subject: flow.microsoft.com
Issuer: Microsoft Azure RSA TLS Issuing CA 07
SANs: flow.microsoft.com, *.flow.microsoft.com
Valid: 2026-03-22 22:51:29 → 2026-08-25 23:59:59
20c7ed80d6881579… google · xenon2026h2
Subject: flow.microsoft.com
Issuer: Microsoft Azure RSA TLS Issuing CA 08
SANs: flow.microsoft.com, *.flow.microsoft.com
Valid: 2026-03-21 06:53:10 → 2026-08-25 23:59:59
2eaf40a134bcfaf8… google · xenon2026h2
Subject: flow.microsoft.com
Issuer: Microsoft Azure RSA TLS Issuing CA 04
SANs: flow.microsoft.com, *.flow.microsoft.com
Valid: 2026-03-21 06:52:48 → 2026-08-25 23:59:59
4f1980e039845cee… google · xenon2026h2
Subject: flow.microsoft.com
Issuer: Microsoft Azure RSA TLS Issuing CA 03
SANs: flow.microsoft.com, *.flow.microsoft.com
Valid: 2026-03-21 05:52:30 → 2026-08-25 23:59:59
ae5087ca0aadd231… google · xenon2026h2
Subject: flow.microsoft.com
Issuer: Microsoft Azure RSA TLS Issuing CA 03
SANs: flow.microsoft.com, *.flow.microsoft.com
Valid: 2026-03-20 06:51:01 → 2026-08-25 23:59:59

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.

Type Value First seen Last seen
A 150.171.109.197 2026-06-18 04:32:39.473 2026-06-22 20:48:44.464
AAAA 2603:1061:14:c5::1 2026-06-18 04:32:39.473 2026-06-22 10:47:12.675
AAAA 2603:1061:14:64::1 2026-06-18 12:10:16.796 2026-06-22 13:33:27.693
A 150.171.109.101 2026-06-18 12:10:16.796 2026-06-20 10:49:08.801
A 150.171.109.198 2026-06-18 19:50:24.427 2026-06-22 13:33:27.693
AAAA 2603:1061:14:c4::1 2026-06-18 19:50:24.427 2026-06-22 06:06:47.323
AAAA 2603:1061:14:137::1 2026-06-19 05:36:17.264 2026-06-19 05:36:17.264
A 150.171.109.33 2026-06-19 05:36:17.264 2026-06-19 05:36:17.264
A 13.107.213.65 2026-06-19 14:13:12.181 2026-06-19 14:17:35.972
AAAA 2620:1ec:bdf::65 2026-06-19 14:13:12.181 2026-06-19 14:17:35.972
A 13.107.246.65 2026-06-19 14:13:12.181 2026-06-19 14:17:35.972
AAAA 2620:1ec:46::65 2026-06-19 14:13:12.181 2026-06-19 14:17:35.972
A 13.107.226.53 2026-06-19 17:32:59.940 2026-06-19 17:32:59.940
AAAA 2620:1ec:29:1::53 2026-06-19 17:32:59.940 2026-06-19 17:32:59.940
A 13.107.253.53 2026-06-19 17:32:59.940 2026-06-19 17:32:59.940
AAAA 2620:1ec:48:1::53 2026-06-19 17:32:59.940 2026-06-19 17:32:59.940
A 150.171.110.56 2026-06-19 20:33:49.118 2026-07-15 22:21:10.369
A 150.171.109.183 2026-06-20 00:59:24.807 2026-06-20 00:59:24.807
A 150.171.109.100 2026-06-22 06:06:47.323 2026-06-22 06:06:47.323
AAAA 2603:1061:14:63::1 2026-06-22 20:45:42.777 2026-06-22 20:45:42.777
A 150.171.109.35 2026-06-22 20:45:42.777 2026-06-22 20:45:42.777
AAAA 2603:1061:14:23::1 2026-06-22 20:48:44.464 2026-07-17 21:43:35.241
AAAA 2603:1061:14:133::1 2026-07-15 22:21:10.369 2026-07-15 22:21:10.369
A 150.171.109.34 2026-07-17 21:43:35.241 2026-07-17 21:43:35.241
AAAA 2603:1061:14:34::1 2026-07-17 22:23:51.668 2026-07-22 17:20:12.010
A 150.171.109.51 2026-07-17 22:23:51.668 2026-07-22 17:20:12.010
AAAA 2603:1061:14:32::1 2026-07-18 05:50:37.128 2026-07-22 01:28:20.266
AAAA 2603:1061:14:135::1 2026-07-18 20:20:40.007 2026-07-22 21:25:56.628
A 150.171.110.53 2026-07-18 20:20:40.007 2026-07-18 20:20:40.007
A 150.171.109.53 2026-07-21 14:19:10.630 2026-07-22 01:28:20.266
A 150.171.109.36 2026-07-21 19:56:48.902 2026-07-21 19:56:48.902
A 150.171.110.54 2026-07-22 21:25:56.628 2026-07-22 21:25:56.628