Domain
hive.forms.cloud.microsoft
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of hive.forms.cloud.microsoft
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
Hosting IPs
—
A/AAAA targets
Subdomains
—
CT + scan + body
Record Types
—
seen in DNS
Observed Certs
—
in our scans
DNS Records
A
13.107.6.202, 52.109.16.136, 52.109.16.40, 52.109.68.84, 52.109.76.65, 52.109.88.172, 52.111.231.74, 52.111.231.75
AAAA
2603:1026:2400:1::45, 2603:1026:2400:1::46, 2603:1026:2400::32, 2603:1026:2404:1::61, 2603:1026:2404::30, 2603:1026:2405:1::66, 2603:1026:2405:1::67, 2603:1026:2405::15
MX
—
NS
—
TXT
—
CNAME
—
CAA
—
WHOIS / Registration
Registration data planned
Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.
Subdomains
Subdomain enumeration pending
Every subdomain ever issued a TLS cert under this apex — extracted from Certificate Transparency logs, our own scan observations and body references.
Tech Stack
Tech detection pending
Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.
TLS Certificates
Subject: lists.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 02
SANs: *.hive.forms.cloud.microsoft, *.lists.office.com, *.lists.osi.office.net, hive.forms.cloud.microsoft, hive.forms.usercontent.microsoft, lists.office.com
Subject: lists.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 02
SANs: *.hive.forms.cloud.microsoft, *.lists.office.com, *.lists.osi.office.net, hive.forms.cloud.microsoft, hive.forms.usercontent.microsoft, lists.office.com
Subject: lists.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 02
SANs: *.hive.forms.cloud.microsoft, *.lists.office.com, *.lists.osi.office.net, hive.forms.cloud.microsoft, hive.forms.usercontent.microsoft, lists.office.com
Subject: lists.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 10
SANs: *.hive.forms.cloud.microsoft, *.lists.office.com, *.lists.osi.office.net, hive.forms.cloud.microsoft, hive.forms.usercontent.microsoft, lists.office.com
Subject: lists.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 02
SANs: *.hive.forms.cloud.microsoft, *.lists.office.com, *.lists.osi.office.net, hive.forms.cloud.microsoft, hive.forms.usercontent.microsoft, lists.office.com
Subject: lists.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 02
SANs: *.hive.forms.cloud.microsoft, *.lists.office.com, *.lists.osi.office.net, hive.forms.cloud.microsoft, hive.forms.usercontent.microsoft, lists.office.com
Subject: lists.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 04
SANs: *.hive.forms.cloud.microsoft, *.lists.office.com, *.lists.osi.office.net, hive.forms.cloud.microsoft, hive.forms.usercontent.microsoft, lists.office.com
Subject: lists.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 10
SANs: *.hive.forms.cloud.microsoft, *.lists.office.com, *.lists.osi.office.net, hive.forms.cloud.microsoft, hive.forms.usercontent.microsoft, lists.office.com
Subject: lists.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 02
SANs: *.hive.forms.cloud.microsoft, *.lists.office.com, *.lists.osi.office.net, hive.forms.cloud.microsoft, hive.forms.usercontent.microsoft, lists.office.com
Subject: lists.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 10
SANs: *.hive.forms.cloud.microsoft, *.lists.office.com, *.lists.osi.office.net, hive.forms.cloud.microsoft, hive.forms.usercontent.microsoft, lists.office.com
Subject: lists.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 02
SANs: *.hive.forms.cloud.microsoft, *.lists.office.com, *.lists.osi.office.net, hive.forms.cloud.microsoft, hive.forms.usercontent.microsoft, lists.office.com
Subject: lists.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 02
SANs: *.hive.forms.cloud.microsoft, *.lists.office.com, *.lists.osi.office.net, hive.forms.cloud.microsoft, hive.forms.usercontent.microsoft, lists.office.com
Subject: lists.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 16
SANs: *.hive.forms.cloud.microsoft, *.lists.office.com, *.lists.osi.office.net, hive.forms.cloud.microsoft, hive.forms.usercontent.microsoft, lists.office.com
Subject: lists.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 02
SANs: *.hive.forms.cloud.microsoft, *.lists.office.com, *.lists.osi.office.net, hive.forms.cloud.microsoft, hive.forms.usercontent.microsoft, lists.office.com
Subject: lists.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 10
SANs: *.hive.forms.cloud.microsoft, *.lists.office.com, *.lists.osi.office.net, hive.forms.cloud.microsoft, hive.forms.usercontent.microsoft, lists.office.com
Subject: lists.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 16
SANs: *.hive.forms.cloud.microsoft, *.lists.office.com, *.lists.osi.office.net, hive.forms.cloud.microsoft, hive.forms.usercontent.microsoft, lists.office.com
Subject: lists.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 02
SANs: *.hive.forms.cloud.microsoft, *.lists.office.com, *.lists.osi.office.net, hive.forms.cloud.microsoft, hive.forms.usercontent.microsoft, lists.office.com
Subject: lists.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 10
SANs: *.hive.forms.cloud.microsoft, *.lists.office.com, *.lists.osi.office.net, hive.forms.cloud.microsoft, hive.forms.usercontent.microsoft, lists.office.com
Subject: lists.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 04
SANs: *.hive.forms.cloud.microsoft, *.lists.office.com, *.lists.osi.office.net, hive.forms.cloud.microsoft, hive.forms.usercontent.microsoft, lists.office.com
Subject: lists.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 02
SANs: *.hive.forms.cloud.microsoft, *.lists.office.com, *.lists.osi.office.net, hive.forms.cloud.microsoft, hive.forms.usercontent.microsoft, lists.office.com
Subject: lists.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 04
SANs: *.hive.forms.cloud.microsoft, *.lists.office.com, *.lists.osi.office.net, hive.forms.cloud.microsoft, hive.forms.usercontent.microsoft, lists.office.com
Subject: lists.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 04
SANs: *.hive.forms.cloud.microsoft, *.lists.office.com, *.lists.osi.office.net, hive.forms.cloud.microsoft, hive.forms.usercontent.microsoft, lists.office.com
Subject: lists.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 04
SANs: *.hive.forms.cloud.microsoft, *.lists.office.com, *.lists.osi.office.net, hive.forms.cloud.microsoft, hive.forms.usercontent.microsoft, lists.office.com
Subject: lists.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 02
SANs: *.hive.forms.cloud.microsoft, *.lists.office.com, *.lists.osi.office.net, hive.forms.cloud.microsoft, hive.forms.usercontent.microsoft, lists.office.com
Subject: lists.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 02
SANs: *.hive.forms.cloud.microsoft, *.lists.office.com, *.lists.osi.office.net, hive.forms.cloud.microsoft, hive.forms.usercontent.microsoft, lists.office.com
Subject: lists.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 04
SANs: *.hive.forms.cloud.microsoft, *.lists.office.com, *.lists.osi.office.net, hive.forms.cloud.microsoft, hive.forms.usercontent.microsoft, lists.office.com
Subject: lists.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 04
SANs: *.hive.forms.cloud.microsoft, *.lists.office.com, *.lists.osi.office.net, hive.forms.cloud.microsoft, hive.forms.usercontent.microsoft, lists.office.com
Subject: lists.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 02
SANs: *.hive.forms.cloud.microsoft, *.lists.office.com, *.lists.osi.office.net, hive.forms.cloud.microsoft, hive.forms.usercontent.microsoft, lists.office.com
Subject: lists.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 02
SANs: *.hive.forms.cloud.microsoft, *.lists.office.com, *.lists.osi.office.net, hive.forms.cloud.microsoft, hive.forms.usercontent.microsoft, lists.office.com
Subject: lists.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 04
SANs: *.hive.forms.cloud.microsoft, *.lists.office.com, *.lists.osi.office.net, hive.forms.cloud.microsoft, hive.forms.usercontent.microsoft, lists.office.com
IPs Citing This Domain
No citing IPs found yet
As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.
Origin / IP-Leak
USP
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
No origin-IP leaks detected (yet)
Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.
Threat Intelligence
Domain threat-intel pending
Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.
History
Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.
| Type | Value | First seen | Last seen |
|---|---|---|---|
| AAAA | 2603:1026:2400:1::45 | 2026-05-25 21:52:03.357 | 2026-05-31 09:43:40.759 |
| A | 52.111.231.74 | 2026-05-25 21:52:03.357 | 2026-05-31 09:43:40.759 |
| AAAA | 2603:1026:2405:1::66 | 2026-05-26 00:12:34.719 | 2026-06-15 16:27:43.978 |
| A | 52.111.236.100 | 2026-05-26 05:18:44.431 | 2026-05-26 23:18:43.916 |
| AAAA | 2603:1026:2404:1::61 | 2026-05-26 21:05:36.962 | 2026-05-26 23:32:52.982 |
| A | 52.111.243.106 | 2026-05-26 23:14:12.044 | 2026-06-18 01:19:43.110 |
| AAAA | 2603:1026:2400:1::46 | 2026-05-27 01:53:31.573 | 2026-05-27 16:09:47.413 |
| A | 52.111.231.75 | 2026-05-27 01:53:31.573 | 2026-06-16 07:28:31.576 |
| A | 52.109.16.40 | 2026-05-27 02:17:37.200 | 2026-05-27 02:17:37.200 |
| AAAA | 2620:1ec:a92::202 | 2026-05-27 02:17:37.200 | 2026-07-28 08:41:52.746 |
| A | 13.107.6.202 | 2026-05-27 03:24:40.747 | 2026-07-28 08:41:52.746 |
| AAAA | 2603:1026:2400::32 | 2026-05-27 05:33:32.175 | 2026-05-27 05:33:32.175 |
| AAAA | 2603:1026:2405:1::67 | 2026-05-27 06:55:15.147 | 2026-06-20 01:49:05.336 |
| A | 52.111.236.101 | 2026-05-27 14:23:53.413 | 2026-06-20 14:10:44.514 |
| A | 52.109.16.136 | 2026-05-27 16:00:51.139 | 2026-05-27 16:00:51.139 |
| A | 52.109.68.84 | 2026-05-27 16:05:01.622 | 2026-05-31 09:41:40.800 |
| AAAA | 2603:1026:2405::15 | 2026-06-16 07:23:49.784 | 2026-06-20 14:10:44.514 |
| A | 52.111.243.107 | 2026-06-16 09:52:53.112 | 2026-06-20 00:45:44.931 |
| A | 52.109.88.172 | 2026-06-16 19:12:40.552 | 2026-06-19 17:17:30.691 |
| AAAA | 2603:1026:2404::30 | 2026-06-17 21:45:44.366 | 2026-06-18 01:19:43.110 |
| AAAA | 2603:1026:2405::18 | 2026-06-17 23:44:37.814 | 2026-06-17 23:44:37.814 |
| A | 52.109.76.65 | 2026-06-17 23:44:37.814 | 2026-06-17 23:44:37.814 |