Domain

account.microsoft.com

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

DNS Check HTTP Check Run Full Scan .com TLD

Run a live full scan of account.microsoft.com

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now

Hosting IPs

A/AAAA targets

Subdomains

—

CT + scan + body

Record Types

seen in DNS

Observed Certs

in our scans

DNS Records

104.85.1.84, 104.99.233.177, 184.30.157.138, 2.19.102.25, 2.19.86.100, 23.208.220.163, 23.210.17.167, 23.219.139.163

AAAA

—

5 mx1.hotmail.com, 5 mx2.hotmail.com, 5 mx3.hotmail.com, 5 mx4.hotmail.com

—

TXT

—

CNAME

—

CAA

—

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Subdomain enumeration pending

Every subdomain ever issued a TLS cert under this apex — extracted from Certificate Transparency logs, our own scan observations and body references.

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

23.199.85.21:443 c42c83f4da24…

Subject: businessaccount.microsoft.com

Issuer: Microsoft TLS G2 ECC CA OCSP 02

SANs: businessaccount.microsoft.com

184.84.103.162:443 c33bda2ec10f…

Subject: account.microsoft.com

Issuer: Microsoft TLS G2 ECC CA OCSP 06

SANs: *.account.microsoft.com, *.origin.account.microsoft.com, accont.microsoft.com, accoun.microsoft.com, account.microsoft.com, accounts.live.com, accounts.microsoft.com, accout.microsoft.com, accoutn.microsoft.com, accuont.microsoft.com, acount.microsoft.com, choice.bing.com, choice.live.com, choice.microsoft.com, choice.msn.com, family.microsoft.com, familysafety.microsoft.com, member.microsoft.com, members.msn.com, membership.microsoft.com, my.microsoft.com, mymicrosoft.com, origin.account.microsoft.com, profile.live.com, redeem.microsoft.com, www.accounts.microsoft.com

23.209.109.166:443 c33bda2ec10f…

Subject: account.microsoft.com

Issuer: Microsoft TLS G2 ECC CA OCSP 06

172.178.167.201:443 4a690b51f9d4…

Subject: privacy.view.api.account.microsoft.com

Issuer: Microsoft TLS G2 RSA CA OCSP 04

SANs: privacy.view.api.account.microsoft.com

23.206.191.146:443 c33bda2ec10f…

Subject: account.microsoft.com

Issuer: Microsoft TLS G2 ECC CA OCSP 06

23.32.245.86:443 c33bda2ec10f…

Subject: account.microsoft.com

Issuer: Microsoft TLS G2 ECC CA OCSP 06

104.85.232.246:443 c42c83f4da24…

Subject: businessaccount.microsoft.com

Issuer: Microsoft TLS G2 ECC CA OCSP 02

SANs: businessaccount.microsoft.com

23.8.32.253:443 c33bda2ec10f…

Subject: account.microsoft.com

Issuer: Microsoft TLS G2 ECC CA OCSP 06

23.53.209.164:443 c33bda2ec10f…

Subject: account.microsoft.com

Issuer: Microsoft TLS G2 ECC CA OCSP 06

23.37.89.166:443 c33bda2ec10f…

Subject: account.microsoft.com

Issuer: Microsoft TLS G2 ECC CA OCSP 06

23.217.253.16:443 c33bda2ec10f…

Subject: account.microsoft.com

Issuer: Microsoft TLS G2 ECC CA OCSP 06

23.194.133.171:443 c33bda2ec10f…

Subject: account.microsoft.com

Issuer: Microsoft TLS G2 ECC CA OCSP 06

23.36.97.156:443 c33bda2ec10f…

Subject: account.microsoft.com

Issuer: Microsoft TLS G2 ECC CA OCSP 06

157.197.145.146:443 c33bda2ec10f…

Subject: account.microsoft.com

Issuer: Microsoft TLS G2 ECC CA OCSP 06

104.104.23.121:443 c33bda2ec10f…

Subject: account.microsoft.com

Issuer: Microsoft TLS G2 ECC CA OCSP 06

48.209.112.227:443 be1612c27404…

Subject: orders.view.api.account.microsoft.com

Issuer: Microsoft TLS G2 RSA CA OCSP 02

SANs: orders.view.api.account.microsoft.com

23.0.95.221:443 c42c83f4da24…

Subject: businessaccount.microsoft.com

Issuer: Microsoft TLS G2 ECC CA OCSP 02

SANs: businessaccount.microsoft.com

23.36.21.150:443 c33bda2ec10f…

Subject: account.microsoft.com

Issuer: Microsoft TLS G2 ECC CA OCSP 06

173.223.153.208:443 c33bda2ec10f…

Subject: account.microsoft.com

Issuer: Microsoft TLS G2 ECC CA OCSP 06

23.216.250.56:443 c42c83f4da24…

Subject: businessaccount.microsoft.com

Issuer: Microsoft TLS G2 ECC CA OCSP 02

SANs: businessaccount.microsoft.com

104.100.52.121:443 c33bda2ec10f…

Subject: account.microsoft.com

Issuer: Microsoft TLS G2 ECC CA OCSP 06

111.84.61.86:443 c33bda2ec10f…

Subject: account.microsoft.com

Issuer: Microsoft TLS G2 ECC CA OCSP 06

23.12.225.31:443 c33bda2ec10f…

Subject: account.microsoft.com

Issuer: Microsoft TLS G2 ECC CA OCSP 06

23.40.87.74:443 c33bda2ec10f…

Subject: account.microsoft.com

Issuer: Microsoft TLS G2 ECC CA OCSP 06

23.43.184.93:443 c33bda2ec10f…

Subject: account.microsoft.com

Issuer: Microsoft TLS G2 ECC CA OCSP 06

23.203.137.82:443 c33bda2ec10f…

Subject: account.microsoft.com

Issuer: Microsoft TLS G2 ECC CA OCSP 06

104.69.35.126:443 c42c83f4da24…

Subject: businessaccount.microsoft.com

Issuer: Microsoft TLS G2 ECC CA OCSP 02

SANs: businessaccount.microsoft.com

23.210.28.21:443 c42c83f4da24…

Subject: businessaccount.microsoft.com

Issuer: Microsoft TLS G2 ECC CA OCSP 02

SANs: businessaccount.microsoft.com

23.219.115.179:443 c42c83f4da24…

Subject: businessaccount.microsoft.com

Issuer: Microsoft TLS G2 ECC CA OCSP 02

SANs: businessaccount.microsoft.com

23.38.161.148:443 c33bda2ec10f…

Subject: account.microsoft.com

Issuer: Microsoft TLS G2 ECC CA OCSP 06

IPs Citing This Domain

Hosts whose HTML body references this domain. Strong signal for origin/mirror/embed discovery.

172.237.30.215:80 href · ×6

178.128.31.91:443 href · ×5

172.237.79.147:443 href · ×4

172.237.21.17:80 href · ×4

172.237.30.53:443 href · ×4

172.235.35.88:443 href · ×4

172.239.68.129:443 href · ×4

45.63.48.139:443 href · ×4

157.245.221.112:443 href · ×3

172.237.21.225:80 href · ×2

172.239.117.240:443 href · ×2

172.237.81.112:80 href · ×2

172.236.141.193:80 href · ×2

172.236.138.79:80 href · ×2

155.138.155.247:443 href · ×2

172.235.35.180:443 href · ×2

172.237.30.153:443 href · ×2

172.237.30.9:443 href · ×2

172.237.79.78:443 href · ×2

172.237.12.180:443 href · ×2

172.239.67.38:80 href · ×2

172.237.30.145:443 href · ×2

172.237.71.132:443 href · ×2

172.237.79.143:80 href · ×2

172.238.24.49:80 href · ×2

172.239.67.117:80 href · ×2

172.237.65.230:443 href · ×2

172.237.30.215:443 href · ×2

194.195.123.197:443 href · ×2

45.76.210.210:80 href · ×2

172.236.142.112:80 href · ×2

172.236.152.77:80 href · ×2

172.239.233.104:443 href · ×2

202.182.111.24:80 href · ×2

172.237.30.207:80 href · ×2

172.237.79.100:80 href · ×2

82.21.81.48:443 href · ×2

172.105.106.140:443 href · ×2

172.235.35.232:443 href · ×2

172.236.145.230:80 href · ×2

172.239.68.204:443 href · ×2

172.237.80.44:80 href · ×2

172.237.19.108:443 href · ×2

40.76.105.28:443 href · ×2

172.237.30.232:80 href · ×2

172.236.137.235:80 href · ×2

172.237.71.56:80 href · ×2

172.239.67.216:80 href · ×2

199.247.21.20:443 href · ×2

172.239.67.13:443 href · ×2

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

No origin-IP leaks detected (yet)

Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.

CT-Log Evidence

Certificates from public Certificate Transparency logs whose subject or SAN names this domain — including historic certs we never observed live.

85591ea43de92789… google · xenon2026h2

Subject: account.microsoft.com

Issuer: Microsoft TLS G2 RSA CA OCSP 16

SANs: profile.live.com, my.microsoft.com, membership.microsoft.com, familysafety.microsoft.com, account.microsoft.com, *.account.microsoft.com, members.msn.com, accounts.microsoft.com, www.accounts.microsoft.com, accounts.live.com, origin.account.microsoft.com, *.origin.account.microsoft.com, member.microsoft.com, acount.microsoft.com, accuont.microsoft.com, accoutn.microsoft.com, accont.microsoft.com, accoun.microsoft.com, accout.microsoft.com, www.account.microsoft.com, mymicrosoft.com

Valid: 2026-03-09 05:20:13 → 2026-09-05 05:20:13

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.

Type	Value	First seen	Last seen
MX	5 mx2.hotmail.com	2026-05-26 02:38:03.884	2026-07-30 17:23:37.395
MX	5 mx4.hotmail.com	2026-05-26 02:38:03.884	2026-07-30 17:23:37.395
MX	5 mx3.hotmail.com	2026-05-26 02:38:03.884	2026-07-30 17:23:37.395
A	88.221.170.202	2026-05-26 02:38:03.884	2026-07-27 14:49:39.372
MX	5 mx1.hotmail.com	2026-05-26 02:38:03.884	2026-07-30 17:23:37.395
A	23.52.181.64	2026-05-26 02:43:02.200	2026-07-28 08:57:56.840
A	23.58.105.166	2026-05-26 03:41:45.201	2026-07-30 17:23:37.395
A	72.246.30.63	2026-05-26 04:11:07.627	2026-05-27 12:59:06.588
A	2.19.102.25	2026-05-26 06:40:34.301	2026-05-31 05:27:52.446
A	23.220.113.77	2026-06-15 00:23:13.348	2026-07-30 17:22:48.799
A	184.30.157.138	2026-06-15 00:54:33.538	2026-07-28 08:49:24.096
A	104.85.1.84	2026-06-15 01:07:50.467	2026-07-28 16:28:19.762
A	2.19.86.100	2026-06-23 10:39:25.000	2026-06-23 16:11:38.421
A	104.99.233.177	2026-07-16 11:52:15.984	2026-07-23 05:00:43.448
A	23.219.139.163	2026-07-16 17:12:01.194	2026-07-27 10:20:22.186
A	23.58.194.43	2026-07-20 01:31:52.254	2026-07-20 01:31:52.254
A	23.208.220.163	2026-07-20 04:02:26.036	2026-07-22 06:06:06.535
A	23.56.163.159	2026-07-20 04:47:45.676	2026-07-20 04:47:45.676
A	23.48.10.133	2026-07-21 04:14:30.569	2026-07-21 10:58:53.217
A	96.7.17.76	2026-07-22 21:36:32.436	2026-07-23 19:57:06.511
A	23.210.17.167	2026-07-23 14:19:07.887	2026-07-23 14:29:10.954
A	23.222.197.164	2026-07-27 12:37:28.859	2026-07-27 12:37:28.859