Domain
forms.cloud.dev.microsoft
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of forms.cloud.dev.microsoft
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
Hosting IPs
51
A/AAAA targets
Subdomains
—
CT + scan + body
Record Types
2
seen in DNS
Observed Certs
98
in our scans
DNS Records
A
23.103.224.0, 23.103.224.145, 23.103.224.153, 23.103.224.159, 23.103.224.161, 23.103.224.29, 23.103.224.31, 23.103.224.50
AAAA
2603:1061:1600:220d::365:c0, 2603:1061:1600:220e::365:c0, 2603:1061:1600:2210::365:c0, 2603:1061:1600:221d::365:c0, 2603:1061:1600:2d00::365:c0, 2603:1061:1600:2d01::365:c0, 2603:1061:1600:2d02::365:c0, 2603:1061:1600:2d08::365:c0
MX
—
NS
—
TXT
—
CNAME
—
CAA
—
WHOIS / Registration
Registration data planned
Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.
Subdomains
Subdomain enumeration pending
Every subdomain ever issued a TLS cert under this apex — extracted from Certificate Transparency logs, our own scan observations and body references.
Tech Stack
Tech detection pending
Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.
TLS Certificates
Subject: forms.office-int.com
Issuer: Microsoft TLS G2 RSA CA OCSP 04
SANs: *.customervoice.microsoft-int.com, *.forms.office-int.com, *.forms.osi.office-int.net, customervoice.microsoft-int.com, forms.cloud.dev.microsoft, forms.guest.usercontent.dev.microsoft, forms.microsoft-int.com, forms.office-int.com, forms.static.dev.microsoft
Subject: forms.office-int.com
Issuer: Microsoft TLS G2 RSA CA OCSP 04
SANs: *.customervoice.microsoft-int.com, *.forms.office-int.com, *.forms.osi.office-int.net, customervoice.microsoft-int.com, forms.cloud.dev.microsoft, forms.guest.usercontent.dev.microsoft, forms.microsoft-int.com, forms.office-int.com, forms.static.dev.microsoft
IPs Citing This Domain
No citing IPs found yet
As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.
Origin / IP-Leak
USP
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
No origin-IP leaks detected (yet)
Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.
CT-Log Evidence
Certificates from public Certificate Transparency logs whose subject or SAN names this domain — including historic certs we never observed live.
ca86c12ffbc51f8d…
google · xenon2026h2
Subject: forms.office-int.com
Issuer: Microsoft TLS G2 RSA CA OCSP 02
SANs: forms.cloud.dev.microsoft, forms.microsoft-int.com, eu.forms.office-int.com, forms.guest.usercontent.dev.microsoft, forms-int.office.net, forms.static.dev.microsoft, forms.office-int.com
Valid: 2026-04-02 07:34:09 → 2026-10-17 07:34:09
ab5fb37a7ae71ed5…
google · xenon2026h2
Subject: forms.office-int.com
Issuer: Microsoft TLS G2 RSA CA OCSP 04
SANs: forms.cloud.dev.microsoft, forms.microsoft-int.com, eu.forms.office-int.com, forms.guest.usercontent.dev.microsoft, forms-int.office.net, forms.static.dev.microsoft, forms.office-int.com
Valid: 2026-04-02 06:42:53 → 2026-10-17 06:42:53
239e2f784c2ac633…
google · xenon2026h2
Subject: forms.office-int.com
Issuer: Microsoft TLS G2 RSA CA OCSP 02
SANs: forms.cloud.dev.microsoft, forms.microsoft-int.com, eu.forms.office-int.com, forms.guest.usercontent.dev.microsoft, forms-int.office.net, forms.static.dev.microsoft, forms.office-int.com
Valid: 2026-03-25 06:59:42 → 2026-10-09 06:59:42
76da05a35b4bb493…
google · xenon2026h2
Subject: forms.office-int.com
Issuer: Microsoft TLS G2 RSA CA OCSP 02
SANs: *.forms.osi.office-int.net, *.forms.office-int.com, forms.microsoft-int.com, customervoice.microsoft-int.com, *.customervoice.microsoft-int.com, forms.office-int.com, forms.cloud.dev.microsoft, forms.static.dev.microsoft, forms.guest.usercontent.dev.microsoft
Valid: 2026-03-25 05:52:28 → 2026-09-21 05:52:28
5482fc1dd9b000c5…
google · xenon2026h2
Subject: forms.office-int.com
Issuer: Microsoft TLS G2 RSA CA OCSP 02
SANs: *.forms.osi.office-int.net, *.forms.office-int.com, forms.microsoft-int.com, customervoice.microsoft-int.com, *.customervoice.microsoft-int.com, forms.office-int.com, forms.cloud.dev.microsoft, forms.static.dev.microsoft, forms.guest.usercontent.dev.microsoft
Valid: 2026-03-25 05:51:48 → 2026-09-21 05:51:48
365991dd7f9fd05b…
google · xenon2026h2
Subject: forms.office-int.com
Issuer: Microsoft TLS G2 RSA CA OCSP 02
SANs: *.forms.osi.office-int.net, *.forms.office-int.com, forms.microsoft-int.com, customervoice.microsoft-int.com, *.customervoice.microsoft-int.com, forms.office-int.com, forms.cloud.dev.microsoft, forms.static.dev.microsoft, forms.guest.usercontent.dev.microsoft
Valid: 2026-03-25 05:51:45 → 2026-09-21 05:51:45
9177ef626b20b6d1…
google · xenon2026h2
Subject: forms.office-int.com
Issuer: Microsoft TLS G2 RSA CA OCSP 04
SANs: forms.cloud.dev.microsoft, forms.microsoft-int.com, eu.forms.office-int.com, forms.guest.usercontent.dev.microsoft, forms-int.office.net, forms.static.dev.microsoft, forms.office-int.com
Valid: 2026-03-18 07:53:54 → 2026-10-02 07:53:54
461050b94168cf88…
google · xenon2026h2
Subject: forms.office-int.com
Issuer: Microsoft TLS G2 RSA CA OCSP 16
SANs: *.forms.osi.office-int.net, *.forms.office-int.com, forms.microsoft-int.com, customervoice.microsoft-int.com, *.customervoice.microsoft-int.com, forms.office-int.com, forms.cloud.dev.microsoft, forms.static.dev.microsoft, forms.guest.usercontent.dev.microsoft
Valid: 2026-03-16 06:29:53 → 2026-09-12 06:29:53
2b3a99b031c87988…
google · xenon2026h2
Subject: forms.office-int.com
Issuer: Microsoft TLS G2 RSA CA OCSP 16
SANs: *.forms.osi.office-int.net, *.forms.office-int.com, forms.microsoft-int.com, customervoice.microsoft-int.com, *.customervoice.microsoft-int.com, forms.office-int.com, forms.cloud.dev.microsoft, forms.static.dev.microsoft, forms.guest.usercontent.dev.microsoft
Valid: 2026-03-16 06:29:03 → 2026-09-12 06:29:03
5ca4ac52c615a359…
google · xenon2026h2
Subject: forms.office-int.com
Issuer: Microsoft TLS G2 RSA CA OCSP 02
SANs: *.forms.osi.office-int.net, *.forms.office-int.com, forms.microsoft-int.com, customervoice.microsoft-int.com, *.customervoice.microsoft-int.com, forms.office-int.com, forms.cloud.dev.microsoft, forms.static.dev.microsoft, forms.guest.usercontent.dev.microsoft
Valid: 2026-03-16 06:29:01 → 2026-09-12 06:29:01
a2549f4d5b23820b…
google · xenon2026h2
Subject: forms.office-int.com
Issuer: Microsoft TLS G2 RSA CA OCSP 02
SANs: *.forms.osi.office-int.net, *.forms.office-int.com, forms.microsoft-int.com, customervoice.microsoft-int.com, *.customervoice.microsoft-int.com, forms.office-int.com, forms.cloud.dev.microsoft, forms.static.dev.microsoft, forms.guest.usercontent.dev.microsoft
Valid: 2026-03-16 06:29:01 → 2026-09-12 06:29:01
a01cd841de935b1d…
google · xenon2026h2
Subject: forms.office-int.com
Issuer: Microsoft TLS G2 RSA CA OCSP 16
SANs: *.forms.osi.office-int.net, *.forms.office-int.com, forms.microsoft-int.com, customervoice.microsoft-int.com, *.customervoice.microsoft-int.com, forms.office-int.com, forms.cloud.dev.microsoft, forms.static.dev.microsoft, forms.guest.usercontent.dev.microsoft
Valid: 2026-03-12 01:37:47 → 2026-09-08 01:37:47
466dc11780ca3f35…
google · xenon2026h2
Subject: forms.office-int.com
Issuer: Microsoft TLS G2 RSA CA OCSP 10
SANs: *.forms.osi.office-int.net, *.forms.office-int.com, forms.microsoft-int.com, customervoice.microsoft-int.com, *.customervoice.microsoft-int.com, forms.office-int.com, forms.cloud.dev.microsoft, forms.static.dev.microsoft, forms.guest.usercontent.dev.microsoft
Valid: 2026-03-12 01:15:45 → 2026-09-08 01:15:45
0ae6dc56befa78d6…
google · xenon2026h2
Subject: forms.office-int.com
Issuer: Microsoft TLS G2 RSA CA OCSP 02
SANs: *.forms.osi.office-int.net, *.forms.office-int.com, forms.microsoft-int.com, customervoice.microsoft-int.com, *.customervoice.microsoft-int.com, forms.office-int.com, forms.cloud.dev.microsoft, forms.static.dev.microsoft, forms.guest.usercontent.dev.microsoft
Valid: 2026-03-11 11:40:38 → 2026-09-07 11:40:38
e7206ae695018c1a…
google · xenon2026h2
Subject: forms.office-int.com
Issuer: Microsoft TLS G2 RSA CA OCSP 02
SANs: *.forms.osi.office-int.net, *.forms.office-int.com, forms.microsoft-int.com, customervoice.microsoft-int.com, *.customervoice.microsoft-int.com, forms.office-int.com, forms.cloud.dev.microsoft, forms.static.dev.microsoft, forms.guest.usercontent.dev.microsoft
Valid: 2026-03-11 11:40:38 → 2026-09-07 11:40:38
2c1a51433a079260…
google · xenon2026h2
Subject: forms.cloud.dev.microsoft
Issuer: Microsoft TLS G2 RSA CA OCSP 10
SANs: forms.cloud.dev.microsoft, forms.office-int.com, forms.microsoft-int.com, eu.forms.office-int.com, forms.guest.usercontent.dev.microsoft, afd.forms-int.office.net, forms-int.office.net, forms.static.dev.microsoft
Valid: 2026-03-06 14:57:48 → 2026-09-02 14:57:48
55bcf48a3b1b5917…
google · xenon2026h2
Subject: forms.cloud.dev.microsoft
Issuer: Microsoft TLS G2 RSA CA OCSP 10
SANs: forms.cloud.dev.microsoft, forms.office-int.com, forms.microsoft-int.com, eu.forms.office-int.com, forms.guest.usercontent.dev.microsoft, afd.forms-int.office.net, forms-int.office.net, forms.static.dev.microsoft
Valid: 2026-03-06 14:57:48 → 2026-09-02 14:57:48
31558223f61ac087…
google · xenon2026h2
Subject: forms.office-int.com
Issuer: Microsoft TLS G2 RSA CA OCSP 02
SANs: *.forms.osi.office-int.net, *.forms.office-int.com, forms.microsoft-int.com, customervoice.microsoft-int.com, *.customervoice.microsoft-int.com, forms.office-int.com, forms.cloud.dev.microsoft, forms.static.dev.microsoft, forms.guest.usercontent.dev.microsoft
Valid: 2026-01-27 06:29:39 → 2026-07-26 06:29:39
70c067483b1e07e9…
google · xenon2026h2
Subject: forms.office-int.com
Issuer: Microsoft TLS G2 RSA CA OCSP 04
SANs: *.forms.osi.office-int.net, *.forms.office-int.com, forms.microsoft-int.com, customervoice.microsoft-int.com, *.customervoice.microsoft-int.com, forms.office-int.com, forms.cloud.dev.microsoft, forms.static.dev.microsoft, forms.guest.usercontent.dev.microsoft
Valid: 2026-01-27 06:29:34 → 2026-07-26 06:29:34
2c4cf4bd6ecd5b71…
google · xenon2026h2
Subject: forms.office-int.com
Issuer: Microsoft TLS G2 RSA CA OCSP 02
SANs: *.forms.osi.office-int.net, *.forms.office-int.com, forms.microsoft-int.com, customervoice.microsoft-int.com, *.customervoice.microsoft-int.com, forms.office-int.com, forms.cloud.dev.microsoft, forms.static.dev.microsoft, forms.guest.usercontent.dev.microsoft
Valid: 2026-01-27 06:29:31 → 2026-07-26 06:29:31
Threat Intelligence
Domain threat-intel pending
Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.
History
Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.
| Type | Value | First seen | Last seen |
|---|---|---|---|
| AAAA | 2603:1061:1600:220e::365:c0 | 2026-05-31 01:47:40.849 | 2026-05-31 01:47:40.849 |
| AAAA | 2603:1061:1600:220d::365:c0 | 2026-05-31 01:47:40.849 | 2026-05-31 01:47:40.849 |
| AAAA | 2603:1061:1600:2210::365:c0 | 2026-05-31 01:47:40.849 | 2026-05-31 01:47:40.849 |
| A | 23.103.241.74 | 2026-05-31 01:47:40.849 | 2026-05-31 01:47:40.849 |
| A | 23.103.241.62 | 2026-05-31 01:47:40.849 | 2026-05-31 01:47:40.849 |
| A | 23.103.241.63 | 2026-05-31 01:47:40.849 | 2026-05-31 01:47:40.849 |
| AAAA | 2603:1061:1600:221d::365:c0 | 2026-05-31 01:47:40.849 | 2026-05-31 01:47:40.849 |
| A | 23.103.241.75 | 2026-05-31 01:47:40.849 | 2026-05-31 01:47:40.849 |
| AAAA | 2603:1061:1600:9a::365:c0 | 2026-06-14 22:23:29.853 | 2026-06-14 22:23:29.853 |
| AAAA | 2603:1061:1600:9c::365:c0 | 2026-06-14 22:23:29.853 | 2026-06-14 22:23:29.853 |
| A | 23.103.224.153 | 2026-06-14 22:23:29.853 | 2026-06-14 22:23:29.853 |
| AAAA | 2603:1061:1600:70::365:c0 | 2026-06-14 22:23:29.853 | 2026-06-14 22:23:29.853 |
| A | 23.103.224.31 | 2026-06-14 22:23:29.853 | 2026-06-14 22:23:29.853 |
| A | 23.103.224.159 | 2026-06-14 22:23:29.853 | 2026-06-14 22:23:29.853 |
| AAAA | 2603:1061:1600:57::365:c0 | 2026-06-14 22:23:29.853 | 2026-06-14 22:23:29.853 |
| A | 23.103.224.161 | 2026-06-14 22:23:29.853 | 2026-06-14 22:23:29.853 |
| A | 23.103.242.138 | 2026-06-15 16:40:26.825 | 2026-06-15 16:40:26.825 |
| AAAA | 2603:1061:1600:3400::365:c0 | 2026-06-15 16:40:26.825 | 2026-06-15 16:40:26.825 |
| A | 23.103.242.137 | 2026-06-15 16:40:26.825 | 2026-06-15 16:40:26.825 |
| AAAA | 2603:1061:1600:3401::365:c0 | 2026-06-15 16:40:26.825 | 2026-06-15 16:40:26.825 |
| A | 23.103.242.132 | 2026-06-15 16:40:26.825 | 2026-06-15 16:40:26.825 |
| AAAA | 2603:1061:1600:3405::365:c0 | 2026-06-15 16:40:26.825 | 2026-06-15 16:40:26.825 |
| A | 23.103.242.139 | 2026-06-15 16:40:26.825 | 2026-06-15 16:40:26.825 |
| AAAA | 2603:1061:1600:3406::365:c0 | 2026-06-15 16:40:26.825 | 2026-06-15 16:40:26.825 |
| AAAA | 2603:1061:1600:2d08::365:c0 | 2026-06-19 17:55:58.048 | 2026-06-20 11:43:22.120 |
| AAAA | 2603:1061:1600:2d00::365:c0 | 2026-06-19 17:55:58.048 | 2026-07-28 04:18:08.089 |
| A | 23.103.241.25 | 2026-06-19 17:55:58.048 | 2026-06-19 17:55:58.048 |
| AAAA | 2603:1061:1600:2d0c::365:c0 | 2026-06-19 17:55:58.048 | 2026-07-28 04:18:08.089 |
| A | 23.103.241.18 | 2026-06-19 17:55:58.048 | 2026-06-19 17:55:58.048 |
| AAAA | 2603:1061:1600:2d09::365:c0 | 2026-06-19 17:55:58.048 | 2026-07-28 04:18:08.089 |
| A | 23.103.241.64 | 2026-06-19 17:55:58.048 | 2026-06-19 17:55:58.048 |
| A | 23.103.241.15 | 2026-06-19 17:55:58.048 | 2026-06-19 17:55:58.048 |
| A | 23.103.241.45 | 2026-06-20 11:43:22.120 | 2026-06-20 11:43:22.120 |
| A | 23.103.241.69 | 2026-06-20 11:43:22.120 | 2026-06-20 11:43:22.120 |
| A | 23.103.241.53 | 2026-06-20 11:43:22.120 | 2026-06-20 11:43:22.120 |
| A | 23.103.241.32 | 2026-06-20 11:43:22.120 | 2026-06-20 11:43:22.120 |
| AAAA | 2603:1061:1600:2d02::365:c0 | 2026-06-20 11:43:22.120 | 2026-06-20 11:43:22.120 |
| AAAA | 2603:1061:1600:2d0d::365:c0 | 2026-06-20 11:43:22.120 | 2026-06-20 11:43:22.120 |
| A | 23.103.242.133 | 2026-07-28 04:18:08.089 | 2026-07-28 04:18:08.089 |
| A | 23.103.242.129 | 2026-07-28 04:18:08.089 | 2026-07-28 04:18:08.089 |
| A | 23.103.242.131 | 2026-07-28 04:18:08.089 | 2026-07-28 04:18:08.089 |
| A | 23.103.242.130 | 2026-07-28 04:18:08.089 | 2026-07-28 04:18:08.089 |
| AAAA | 2603:1061:1600:2d01::365:c0 | 2026-07-28 04:18:08.089 | 2026-07-28 04:18:08.089 |
| AAAA | 2603:1061:1600:73b::365:c0 | 2026-07-28 09:22:53.757 | 2026-07-28 09:22:53.757 |
| AAAA | 2603:1061:1600:707::365:c0 | 2026-07-28 09:22:53.757 | 2026-07-28 09:22:53.757 |
| A | 23.103.224.0 | 2026-07-28 09:22:53.757 | 2026-07-28 09:22:53.757 |
| A | 23.103.224.50 | 2026-07-28 09:22:53.757 | 2026-07-28 09:22:53.757 |
| A | 23.103.224.29 | 2026-07-28 09:22:53.757 | 2026-07-28 09:22:53.757 |
| AAAA | 2603:1061:1600:700::365:c0 | 2026-07-28 09:22:53.757 | 2026-07-28 09:22:53.757 |
| A | 23.103.224.145 | 2026-07-28 09:22:53.757 | 2026-07-28 09:22:53.757 |
| AAAA | 2603:1061:1600:731::365:c0 | 2026-07-28 09:22:53.757 | 2026-07-28 09:22:53.757 |