Check-Host.cc

Try 1.1.1.1 AS13335 check-host.cc /country/de /tld/cc
Domain

live.com

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

DNS Check HTTP Check Run Full Scan .com TLD

Run a live full scan of live.com

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now
Hosting IPs
—
A/AAAA targets
Subdomains
—
CT + scan + body
Record Types
—
seen in DNS
Observed Certs
—
in our scans

DNS Records

A
204.79.197.212
AAAA
—
MX
2 live-com.olc.protection.outlook.com
NS
ns1-37.azure-dns.com, ns2-37.azure-dns.net, ns3-37.azure-dns.org, ns4-37.azure-dns.info
TXT
facebook-domain-verification=atvthxwtzc3u4ubnsozavn76cusuaj, google-site-verification=0mLTLcpaFxdFNO4m1TfqB2WQ4rGtz7xpPmFwDJ9O_9Q, google-site-verification=DVGpQUbbQCBRPGlmWiTVUMyQGfLPlEVw6Z4pm39AAj4, google-site-verification=N9kowue62gCm511Op0_N2LO1JZTcjA2GYzOE22SBaiI, google-site-verification=aqgIxrIS1nghF9FDjR5tN7t6xgIVr3Dg254rmyDNwRU, google-site-verification=er-XGn5evjhwRiwIPwWyQjyHB1pigvhw-mp8saZxLCA, v=spf1 include:spf-a.hotmail.com include:spf-b.hotmail.com include:spf-c.hotmail.com include:spf-d.hotmail.com include:spf.protection.outlook.com ~all
CNAME
—
CAA
0 contactemail "caarecordaware@microsoft.com", 0 iodef "mailto:domains@microsoft.com", 0 issue "digicert.com", 0 issue "dtrust.de", 0 issue "entrust.net", 0 issue "globalsign.com", 0 issue "microsoft.com"

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.

Subdomain Resolves to Last seen
mail.services.live.com
40.98.16.3 2603:1026:900:29::f 2603:1026:c11:918::2 2603:1026:900:29::3 +634
2026-07-28 20:39:29.599
outlook.live.com
52.97.250.194 2603:1026:900:29::4 2603:1026:c03:581b::2 2603:1026:c03:707e::2 +590
2026-07-28 19:11:54.346
login.live.com
40.126.32.140 40.126.32.74 40.126.32.133 20.190.160.131 +164
2026-07-28 17:05:15.597
ocws.officeapps.live.com
52.110.0.108 2603:1063:2001:2d0b::365:ff1 2603:1063:2001:2d00::365:ff1 2603:1063:2001:2d0e::365:ff1 +113
2026-07-28 02:31:53.233
ocws-df.officeapps.live.com
52.110.0.125 2603:1063:2001:91::365:ff1 2603:1063:2001:3f::365:ff1 2603:1063:2001:2d08::365:ff1 +102
2026-07-28 02:31:53.233
signup.live.com
20.190.147.1 20.190.159.0 20.190.159.128 20.190.159.71 +93
2026-07-28 11:08:40.176
ocws-eu.officeapps.live.com
52.110.18.131 2603:1063:2001:2d02::365:ff1 2603:1063:2001:2d03::365:ff1 2603:1063:2001:94::365:ff1 +91
2026-07-28 02:31:53.233
ocws-usdc.officeapps.live.com
52.110.17.60 2603:1063:2001:2d0e::365:ff1 2603:1063:2001:2d0d::365:ff1 2603:1063:2001:2d0c::365:ff1 +79
2026-07-28 02:31:53.233
roaming-eu.officeapps.live.com
52.110.18.139 2603:1063:2001:2226::365:ff1 2603:1063:2001:222f::365:ff1 2603:1063:2001:2207::365:ff1 +75
2026-07-26 15:01:01.531
account.live.com
20.190.147.8 20.190.159.0 20.190.159.128 20.190.159.71 +74
2026-07-28 11:08:40.176
roaming-df.officeapps.live.com
52.110.18.142 2603:1063:2001:3001::365:ff1 2603:1063:2001:3002::365:ff1 2603:1063:2001:2d03::365:ff1 +68
2026-07-26 15:01:01.531
officeapps.live.com
52.108.8.12 2603:1063:2000::12 2603:1063:2000:1::12 2603:1063:2001:2c03::365:ff1 +66
2026-07-28 23:25:36.694
odc-eu.officeapps.live.com
52.110.18.140 2603:1063:2001:2219::365:ff1 2603:1063:2001:2228::365:ff1 2603:1063:2001:2211::365:ff1 +64
2026-07-28 21:47:28.942
odc.officeapps.live.com
52.110.17.53 2603:1063:2001:2d0b::365:ff1 2603:1063:2001:2d04::365:ff1 2603:1063:2001:2d0a::365:ff1 +63
2026-07-28 21:47:28.942
roaming.officeapps.live.com
52.110.18.131 2603:1063:2001:3003::365:ff1 2603:1063:2001:3000::365:ff1 2603:1063:2001:2d0e::365:ff1 +63
2026-07-26 15:01:01.531
odcsm.officeapps.live.com
52.110.17.25 2603:1063:2001:222a::365:ff1 2603:1063:2001:2203::365:ff1 2603:1063:2001:2211::365:ff1 +60
2026-07-28 21:47:28.942
config-df.officeapps.live.com
52.110.0.19 2603:1063:2001:2d01::365:ff1 2603:1063:2001:2d0e::365:ff1 2603:1063:2001:2213::365:ff1 +59
2026-07-28 23:25:36.694
odc-df.officeapps.live.com
52.110.4.158 2603:1063:2001:2d0b::365:ff1 2603:1063:2001:2d0c::365:ff1 2603:1063:2001:2d01::365:ff1 +54
2026-07-28 21:47:28.942
view.officeapps.live.com
52.108.9.12 2603:1063:2000:1::12 2603:1063:2000::12 2603:1063:2001:2c01::365:ff1 +51
2026-07-28 15:14:01.364
config.officeapps.live.com
52.110.17.63 2603:1063:2001:2231::365:ff1 2603:1063:2001:2212::365:ff1 2603:1063:2001:2d0d::365:ff1 +48
2026-07-28 23:25:36.694
mrodevicemgr.edog.officeapps.live.com
52.110.17.32 2603:1063:2001:2d03::365:ff1 2603:1063:2001:2d0d::365:ff1 2603:1063:2001:2d05::365:ff1 +34
2026-07-22 19:34:12.721
roaming.edog.officeapps.live.com
52.110.18.129 2603:1063:2001:2d0e::365:ff1 2603:1063:2001:2d0c::365:ff1 2603:1063:2001:2d00::365:ff1 +31
2026-07-27 00:29:28.424
nexusrules.officeapps.live.com
150.171.109.150 2620:1ec:48:1::70 2603:1061:14:95::1 150.171.110.177 +24
2026-07-18 15:36:47.008
msagfx.live.com
23.222.59.30 2a02:26f0:b200:38b::34ef 2a02:26f0:b200:3a8::34ef 2600:1408:c400:183::34ef +21
2026-07-28 17:23:57.234
odc.edog.officeapps.live.com
52.110.18.129 2603:1063:2001:2d0c::365:ff1 2603:1063:2001:2d0a::365:ff1 2603:1063:2001:2d05::365:ff1 +21
2026-07-22 18:09:12.423
api.login.live.com
20.190.159.0 20.190.160.14 20.190.160.2 20.231.128.67 +20
2026-07-27 07:02:22.555
autodiscover.live.com
52.98.232.50 2603:1026:c0d:1001::2 2603:1026:c0d:1029::2 52.98.252.98 +20
2026-07-18 18:22:20.483
excelcs.officeapps.live.com
52.111.231.20 52.111.231.33 52.111.243.51 2603:1026:2400:1::17 +20
2026-07-28 04:09:46.054
odcsm.edog.officeapps.live.com
52.110.17.54 2603:1063:2001:2d0c::365:ff1 2603:1063:2001:2d0b::365:ff1 2603:1063:2001:2240::365:ff1 +20
2026-07-22 18:09:12.423
pop3.live.com
40.99.204.34 2603:1026:c0d:100b::2 2603:1026:c0d:100c::2 52.98.252.226 +20
2026-07-18 18:22:20.483
mrodevicemgr.officeapps.live.com
52.110.17.62 2603:1063:2001:2d04::365:ff1 2603:1063:2001:2d08::365:ff1 52.110.18.142 +19
2026-07-28 06:23:49.431
ocws.edog.officeapps.live.com
52.110.18.130 2603:1063:2001:2d0a::365:ff1 2603:1063:2001:2d02::365:ff1 2603:1063:2001:2d08::365:ff1 +19
2026-07-25 16:14:56.777
excelca.officeapps.live.com
52.111.231.20 52.111.231.33 52.111.243.50 52.111.243.51 +17
2026-07-28 04:09:46.054
excelps.officeapps.live.com
52.111.231.20 52.111.231.33 52.111.243.49 52.111.243.51 +17
2026-07-28 04:09:46.054
presence.teams.live.com
52.112.102.180 52.112.101.25 52.123.136.77 52.123.145.126 +14
2026-07-27 07:19:40.268
wordca.officeapps.live.com
52.111.243.47 52.111.236.20 2603:1026:2405::22 2603:1026:2400:1::4 +14
2026-07-28 04:09:46.054
offline.officeapps.live.com
23.222.60.48 2a02:26f0:b200:2b5::363e 2a02:26f0:b200:2b9::363e 2a02:26f0:b200:1a3::363e +13
2026-07-28 03:15:39.983
choice.live.com
23.56.163.159 104.85.1.84 184.30.157.138 23.220.113.77 +12
2026-07-28 08:57:56.840
pptca.officeapps.live.com
52.109.89.45 2603:1026:2405:1::47 52.111.243.83 2603:1026:2400:1::2b +12
2026-07-26 17:56:24.590
pptsgs.edog.officeapps.live.com
52.111.240.54 2603:1046:1402:1::30 2603:1046:1402:1::2f 2603:1046:1404:1::18 +12
2026-07-28 10:09:41.387
config.edog.officeapps.live.com
52.110.17.71 2603:1063:2001:2d03::365:ff1 52.110.18.32 52.110.18.34 +11
2026-07-28 19:22:00.900
designerapp.officeapps.live.com
52.111.243.65 2603:1026:2405:1::3a 2603:1026:2400:1::27 2603:1026:2404:1::31 +11
2026-07-28 08:49:24.096
pptps.officeapps.live.com
52.109.89.45 2603:1026:2405:1::47 52.111.243.83 2603:1026:2400:1::2b +11
2026-07-26 17:56:24.590
pptsgs.officeapps.live.com
52.111.236.64 2603:1026:2400:1::28 52.111.231.39 2603:1026:2400:1::1e +11
2026-07-28 10:09:41.387
profile.live.com
184.30.157.138 23.220.113.77 23.210.17.167 104.85.1.84 +11
2026-07-28 08:57:56.840
wordps.officeapps.live.com
52.111.243.47 52.111.231.4 52.111.236.20 2603:1026:2405::22 +11
2026-07-28 04:09:46.054
pptcs.officeapps.live.com
52.109.89.45 2603:1026:2405:1::47 52.111.243.83 2603:1026:2400:1::2b +10
2026-07-26 17:56:24.590
pptmobius.officeapps.live.com
52.111.243.57 2603:1026:2400:1::19 2603:1026:2404:1::2e 2603:1026:2405:1::32 +10
2026-07-28 10:49:00.176
textanalysis.officeapps.live.com
52.111.243.62 52.111.236.58 52.111.243.64 2603:1026:2405:1::37 +10
2026-07-28 13:22:58.632
to-do.live.com
52.98.179.50 2603:1026:c0d:1801::2 2603:1026:c0d:c29::2 2603:1026:c0d:c1f::2 +10
2026-07-25 09:45:42.465
wordcs.officeapps.live.com
52.111.231.4 52.111.236.20 2603:1026:2405::22 2603:1026:2400:1::4 +10
2026-07-28 04:09:46.054
gcc.office.live.com
23.67.128.130 184.24.26.219 2a02:26f0:b200:19b::1c24 2a02:26f0:b200:1ae::1c24 +9
2026-07-26 01:56:04.715
cnweb.search.live.com
88.221.25.169 23.216.77.8 88.221.25.145 88.221.25.155 +8
2026-07-28 13:03:27.210
voice.officeapps.live.com
52.111.243.122 2603:1036:2404:1::67 2603:1026:2405:1::74 2603:1026:2405:1::77 +8
2026-07-28 03:44:05.366
pptservicescast.officeapps.live.com
52.111.243.80 2603:1026:2405:1::4b 2603:1026:2405:1::48 52.111.243.79 +7
2026-07-28 03:44:05.366
appsforoffice.edog.officeapps.live.com
104.109.143.158 2620:1ec:29:1::38 2620:1ec:48:1::38 104.109.143.150 +6
2026-07-21 15:07:11.688
images.live.com
84.53.175.8 104.124.11.11 104.124.11.72 84.53.175.11 +5
2026-07-28 13:03:27.210
msgapi.teams.live.com
20.23.50.66 4.209.222.231 135.236.68.20 135.225.15.79 +5
2026-07-28 15:34:02.265
test.live.com
9.9.9.11 6.6.6.6 6.6.6.7 6.6.6.8 +5
2026-07-18 18:22:20.483
cdn.uci.officeapps.live.com
23.216.77.184 23.216.77.165 23.216.77.158 23.216.77.147 +4
2026-05-31 08:05:40.858
concierge.live.com
150.171.109.51 2603:1061:14:23::1 13.107.226.67 13.107.253.67 +4
2026-07-26 22:47:09.700
mediasnap.edog.officeapps.live.com
52.111.230.20 2603:1036:2405:1::13 52.109.0.105 2603:1036:2400::a0 +4
2026-07-26 08:37:17.900
nexus.officeapps.live.com
150.171.110.52 150.171.109.100 2603:1061:14:c5::1 2603:1061:14:34::1 +4
2026-07-28 19:31:00.676
office.live.com
52.108.8.12 2603:1063:2000:1::12 2603:1063:2000::12 52.108.9.12 +4
2026-07-28 18:27:17.459
oloobe.officeapps.live.com
150.171.109.53 150.171.109.34 2603:1061:14:34::1 150.171.109.101 +4
2026-07-28 05:49:37.765
outlook-sdf.live.com
40.97.22.19 2603:1036:903:4::25 40.97.4.122 40.97.4.98 +4
2026-07-23 20:30:23.856
storage.live.com
20.135.4.173 20.135.6.15 168.62.7.82 20.135.6.7 +4
2026-07-27 18:25:56.107
teams.live.com
52.123.129.14 2603:1063:27:3::14 2603:1063:27:4::14 2603:1063:27:2::14 +4
2026-07-27 06:01:55.389
wap.live.com
150.171.30.10 150.171.27.10 2620:1ec:33:1::10 2620:1ec:33::10 +4
2026-07-28 13:03:27.210
nexus.edog.officeapps.live.com
150.171.109.51 150.171.109.36 2603:1061:14:22::1 2603:1061:14:23::1 +3
2026-07-28 19:31:00.676
present.edog.officeapps.live.com
52.111.230.23 2603:1036:2405:1::16 52.109.60.23 52.111.229.135 +3
2026-07-28 10:49:00.176
api.live.com
4.208.64.238 20.191.57.76 20.241.67.65 20.72.98.42 +2
2026-07-25 13:59:40.236
excelcs.edog.officeapps.live.com
104.42.79.173 2a01:111:f100:1002::4134:c7ce 2603:1030:a02::14a 2603:1030:803:c::8 +2
2026-07-28 04:09:46.054
getitemsworker.edog.officeapps.live.com
52.111.230.19 2603:1046:1407::8 2603:1036:2404:1::51 2603:1036:2405:1::a +2
2026-07-28 11:08:40.176
imganalysissvc.officeapps.live.com
52.109.88.144 2603:1026:2400::1e 2603:1026:2405::36 2603:1026:2404::26 +2
2026-07-28 01:47:12.379
ols.edog.officeapps.live.com
52.109.0.34 2603:1030:a04:14::11a 2603:1030:805:b::45 52.109.16.77 +2
2026-07-27 00:54:54.678
ols.officeapps.live.com
52.109.0.35 2a01:111:f100:3000::a83e:176b 2a01:111:f100:1002::4134:d428 52.109.20.20 +2
2026-07-25 08:28:24.067
pods.officeapps.live.com
52.109.68.57 2603:1026:2400::1b 52.109.76.136 2603:1026:2404::19 +2
2026-07-28 19:48:54.308
present.officeapps.live.com
52.109.68.42 2603:1026:2400::1a 2603:1026:2405::c 52.109.88.69 +2
2026-07-28 08:49:24.096
snap.edog.officeapps.live.com
52.111.230.15 2603:1036:2409:1::22 2603:1036:2405:1::12 52.109.60.0 +2
2026-07-26 21:06:46.258
beta.live.com
20.76.201.171 20.236.44.162 20.70.246.20 20.112.250.133 +1
2026-07-18 18:22:20.483
buy.live.com
150.171.109.53 2603:1061:14:34::1 2603:1061:14:21::1 150.171.109.101 +1
2026-07-28 19:22:00.900
download.live.com
20.70.246.20 20.76.201.171 20.112.250.133 20.231.239.246 +1
2026-05-27 14:44:10.079
explore.live.com
20.70.246.20 20.236.44.162 20.231.239.246 20.112.250.133 +1
2026-07-28 10:29:13.532
gallery.live.com
20.236.44.162 20.76.201.171 20.231.239.246 20.70.246.20 +1
2026-07-24 14:51:30.611
mobile.spaces.live.com
184.30.215.6 23.222.39.90 104.102.37.145 23.207.129.161 +1
2026-07-28 05:49:37.765
sacs.officeapps.live.com
52.109.20.91 52.109.13.35 52.109.24.91 52.109.4.41 +1
2026-07-26 17:56:24.590
support.office.live.com
150.171.109.51 2603:1061:14:21::1 150.171.110.52 150.171.109.196 +1
2026-07-26 03:22:47.889
webmasters.live.com
88.221.25.155 88.221.25.145 88.221.25.169 23.216.77.8 +1
2026-07-28 13:03:27.210
api-df.live.com
4.208.64.238 20.241.67.65 20.105.125.100 20.191.57.76
2026-07-25 13:59:40.236
api.dynamic.tiles.ditu.live.com
150.171.109.34 150.171.109.101 2603:1061:14:c3::1 2603:1061:14:20::1
2026-06-22 20:01:25.494
busbuy.live.com
13.107.226.43 13.107.253.43 2620:1ec:48:1::43 2620:1ec:29:1::43
2026-06-17 12:53:43.581
c.live.com
150.171.109.53 2603:1061:14:32::1 150.171.109.196 2603:1061:14:c4::1
2026-07-24 18:11:24.835
cobalt.df.storage.live.com
168.62.7.82 20.135.6.15 20.135.4.169 20.135.6.7
2026-07-25 13:59:40.236
docs.live.com
23.72.252.57 23.72.252.89 2.18.64.211 2.18.64.197
2026-07-18 18:22:20.483
excelca.edog.officeapps.live.com
104.42.79.173 20.88.40.114 2603:1030:a02::14a 2603:1030:803:c::8
2026-07-27 01:56:40.851
excelps.edog.officeapps.live.com
20.165.4.162 104.42.79.173 2603:1030:a02::14a 2a01:111:f100:1002::4134:c7ce
2026-07-27 01:56:40.851
imganalysissvc.edog.officeapps.live.com
52.109.0.147 2603:1036:2400::71 2a01:111:f100:3000::a83e:1a5b 20.237.190.255
2026-07-28 01:47:12.379
mediasnap.officeapps.live.com
52.111.242.23 52.111.236.84 52.111.231.58 52.109.32.35
2026-07-26 08:37:17.900
oauth.live.com
20.23.132.210 20.103.88.153 20.4.194.241 20.82.16.101
2026-07-25 13:59:40.236
onedrive.live.com
13.107.139.11 13.107.137.11 150.171.41.11 150.171.43.11
2026-07-28 19:11:54.346
origin.cnweb.search.live.com
204.79.197.200 13.107.21.200 131.253.33.200 13.107.22.200
2026-07-28 13:03:27.210
photos.live.com
20.23.132.210 20.103.88.153 20.82.16.101 20.4.194.241
2026-07-28 19:11:54.346
pods.edog.officeapps.live.com
52.109.4.8 2603:1036:2405::24 52.109.60.9 2603:1046:1407::5
2026-07-28 19:48:54.308
pptwrs.officeapps.live.com
52.109.68.77 52.109.76.6 52.109.68.100 20.61.151.214
2026-07-22 23:47:15.185
privacy.teams.live.com
52.123.129.14 52.123.128.14 2603:1063:27:2::14 2603:1063:27:1::14
2026-06-20 12:08:14.336
s2s-storage.live.com
20.135.6.8 20.135.6.14 40.90.130.192 13.105.74.62
2026-07-25 13:59:40.236
skydrive.live.com
20.23.132.210 20.4.194.241 20.82.16.101 20.103.88.153
2026-07-28 19:11:54.346
snap.officeapps.live.com
52.109.68.21 2603:1026:2400::19 52.109.6.6 2603:1036:2405::25
2026-07-26 21:06:46.258
textanalysis.edog.officeapps.live.com
13.91.93.221 2a01:111:f100:3002::8987:37db 2a01:111:f100:3002::8987:37d0 13.91.92.137
2026-07-28 13:22:58.632
admin.live.com
40.97.47.240 40.96.61.2 20.69.107.175
2026-07-18 18:22:20.483
admincenter.live.com
40.97.47.240 20.69.107.175 40.96.61.2
2026-07-16 17:25:18.977
c2rsetup.officeapps.live.com
52.111.243.71 2603:1026:2405:1::40 2603:1036:2401::a
2026-07-28 06:32:03.443
df.onedrive.live.com
13.107.137.11 150.171.41.11 13.107.139.11
2026-07-23 02:50:41.985
df.s2s-storage.live.com
20.135.4.162 20.135.6.10 20.135.6.8
2026-07-25 13:59:40.236
df.storage.live.com
20.135.4.163 168.62.7.82 20.135.6.11
2026-07-25 13:59:40.236
domains.live.com
40.97.47.240 20.69.107.175 40.96.61.2
2026-07-16 17:25:18.977
emea.presence.teams.live.com
52.112.103.48 52.112.102.34 52.112.101.33
2026-07-27 07:19:40.268
groups.live.com
134.170.104.26 134.170.104.157 134.170.107.26
2026-07-28 19:11:54.346
hk2.dev.ditu.live.com
150.171.109.100 150.171.109.101 2603:1061:14:c5::1
2026-06-21 14:39:37.942

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

156.247.70.200:443 6878c61da5c4…
Subject: 9ball-live.com
Issuer: YR1
SANs: 9ball-live.com, m.9ball-live.com, www.9ball-live.com
38.174.226.249:443 af21d72f0910…
Subject: www.00097live.com
Issuer: YR1
SANs: 00097live.com, www.00097live.com
23.45.174.52:443 a91cdb708398…
Subject: *.xboxlive.com
Issuer: Microsoft TLS G2 ECC CA OCSP 02
SANs: *.xboxlive.com
52.109.0.139:443 7bad4b43251a…
Subject: config.edog.officeapps.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 16
SANs: *.config.svc.cloud.microsoft, *.edog.officeapps.live.com, config.edog.office.microsoft.com, config.edog.officeapps.live.com, config.officebeta.microsoft.com, config.svc.cloud.microsoft
104.103.204.174:443 cdb8d5b6da12…
Subject: onedrive.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 02
SANs: *.dev.live.com, *.groups.live.com, *.onedrive.com, *.onedrive.live.com, *.photos.live.com, *.skydrive.live.com, apps.live.com, devices.live.com, onedrive.com, onedrive.live.com, onedrive.microsoft.com
154.218.171.140:443 af67eb42bf7f…
Subject: about-kqblive.com
Issuer: YR2
SANs: about-kqblive.com, www.about-kqblive.com
23.42.158.52:443 a91cdb708398…
Subject: *.xboxlive.com
Issuer: Microsoft TLS G2 ECC CA OCSP 02
SANs: *.xboxlive.com
208.68.161.79:443 93a1bd0d4ac0…
Subject: thor.webserverlive.com
Issuer: thor.webserverlive.com
SANs: thor.webserverlive.com
40.90.8.15:443 fd8b687f5329…
Subject: presenceevents.xboxlive.com
Issuer: Microsoft TLS G2 RSA CA OCSP 04
SANs: presenceevents-origin.xboxlive.com, presenceevents-ppe-origin.xboxlive.com, presenceevents-ppe.xboxlive.com, presenceevents.xboxlive.com
38.33.212.168:443 20a57e883ea6…
Subject: 225alive.com
Issuer: YR1
SANs: 225alive.com, www.225alive.com
47.74.32.9:443 e04d2d9e86de…
Subject: *.zan-live.com
Issuer: JPRS Domain Validation Authority - G4
SANs: *.zan-live.com, zan-live.com
52.187.31.219:443 694b3051e68e…
Subject: config.officeapps.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 04
SANs: *.config-df.officeapps.live.com, *.config.svc.cloud.microsoft, *.office.microsoft.com, *.officeapps.live.com, *.officebeta.microsoft.com, config-df.officeapps.live.com, config.office.microsoft.com, config.officeapps.live.com, config.svc.cloud.microsoft, office14client.microsoft.com, office15client.microsoft.com, officeclient.microsoft.com
18.245.142.35:443 2093f51e2063…
Subject: prd1.cdn.pengine.revtech.glulive.com
Issuer: Amazon RSA 2048 M04
SANs: prd1.cdn.pengine.revtech.glulive.com
154.218.154.86:443 6440fd282b26…
Subject: app-lanjinglive.com.cn
Issuer: YR2
SANs: app-lanjinglive.com.cn, app.app-lanjinglive.com.cn, m.app-lanjinglive.com.cn, www.app-lanjinglive.com.cn
23.202.68.132:443 3f7f212a7085…
Subject: msagfx.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 10
SANs: auth.gfx.ms, clientconfig.passport.net, gfx.login.live.com, msagfx.live.com
45.60.231.4:636 f9ad8980fb0a…
Subject: *.aws.marketlive.com
Issuer: Go Daddy Secure Certificate Authority - G2
SANs: *.aws.marketlive.com, aws.marketlive.com
104.17.112.106:8443 a77e2d014aba…
Subject: xhamsterlive.com
Issuer: WE1
SANs: *.trk.sender.xhamsterlive.com, trk.sender.xhamsterlive.com, xhamsterlive.com
104.65.66.150:443 592681cf1a0b…
Subject: www.prosalive.com
Issuer: DigiCert Global G3 TLS ECC SHA384 2020 CA1
SANs: academia.prosa.com.mx, acc.academiaprosa.com, adfs.prosaanalytics.com, apis-data.prosa.com.mx, apis-estadisticos.prosa.com.mx, apis-sandbox.prosa.com.mx, apis.prosa.com.mx, aplicaciones.prosa.com.mx, carnet.mx, cms-academiaprosa.prosa.com.mx, cms-carnet.prosa.com.mx, cms-promocionesmsi.prosa.com.mx, cms-prosamexico.prosa.com.mx, cvs.prosa.lat, devportal-live.prosa.com.mx, devportal.prosa.com.mx, front-institucional.prosa.com.mx, ftc.carnet.mx, mdt.prosa.com.mx, pmo-prod.prosa.com.mx, proalerta.prosa.com.mx, promerchant360.com, prosaanalytics.com, prosaweb.prosa.com.mx, pruebasc.prosa.lat, sender.prosa.com.mx, servicios.web.prosa.lat, sga.prosa.com.mx, www.academiaprosa.com, www.aclaraciones.prosa.com.mx, www.carnet.mx, www.copaprosa.com, www.promocionesmsi.com.mx, www.prosa.com.mx, www.prosaanalytics.com, www.prosalive.com, www.prosamexico.mx
18.172.254.71:443 79fb15f4db07…
Subject: tastylive.com
Issuer: Amazon RSA 2048 M01
SANs: *.tastylive.com, tastylive.com
20.201.192.41:443 76b8e54b66b2…
Subject: notificationinbox.xboxlive.com
Issuer: Microsoft TLS G2 RSA CA OCSP 04
SANs: notificationinbox-ppe.xboxlive.com, notificationinbox.xboxlive.com
1.234.55.218:443 f1d1918fac43…
Subject: *.sooplive.com
Issuer: Thawte TLS RSA CA G1
SANs: *.apro.sooplive.com, *.ext-sooplive.com, *.file.sooplive.com, *.img.sooplive.com, *.m.sooplive.com, *.sooplive.com, *.stream.sooplive.com, apro.sooplive.com, ext-sooplive.com, file.sooplive.com, img.sooplive.com, m.sooplive.com, sooplive.com, stream.sooplive.com
13.35.239.13:443 79fb15f4db07…
Subject: tastylive.com
Issuer: Amazon RSA 2048 M01
SANs: *.tastylive.com, tastylive.com
20.201.200.57:443 12faf8d8fcae…
Subject: device.mgt.xboxlive.com
Issuer: Microsoft TLS G2 RSA CA OCSP 16
SANs: beta-device.mgt.xboxlive.com, device.mgt.xboxlive.com
52.108.121.3:443 8fab3d701bad…
Subject: officeapps.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 10
SANs: *.excel.cloud.microsoft, *.office.core.microsoft, *.office.guest.usercontent.microsoft, *.office.live.com, *.office.svc.cloud.microsoft, *.officeapps-df.live.com, *.officeapps.live.com, *.online.office.com, *.online.office365.com, *.optin.online.office.com, *.powerpoint.cloud.microsoft, *.th.officeapps.live.com, *.vhs.officeapps.live.com, *.view.officeapps.live.com, *.wopi.office.core.microsoft, *.wopi.online.office.net, *.word.cloud.microsoft, *.wshi.office.core.microsoft, *.wshi.online.office.net, df.excel.cloud.microsoft, df.onenote.cloud.microsoft, df.powerpoint.cloud.microsoft, df.visio.cloud.microsoft, df.word.cloud.microsoft, excel.cloud-dev.microsoft, excel.cloud.dev.microsoft, excel.cloud.microsoft, office.live.com, officeapps-df.live.com, officeapps.live.com, officeppe.live.com, onenote.cloud.dev.microsoft, onenote.cloud.microsoft, online.office.com, online.office365.com, powerpoint.cloud-dev.microsoft, powerpoint.cloud.dev.microsoft, powerpoint.cloud.microsoft, tr-ofc-atm.office.com, visio.cloud.dev.microsoft, visio.cloud.microsoft, word.cloud-dev.microsoft, word.cloud.dev.microsoft, word.cloud.microsoft
80.249.174.227:443 b42f74c7da31…
Subject: nats.alettaoceanlive.com
Issuer: YR2
SANs: nats.alettaoceanlive.com, partners.alettaoceanlive.com
45.60.231.4:587 f9ad8980fb0a…
Subject: *.aws.marketlive.com
Issuer: Go Daddy Secure Certificate Authority - G2
SANs: *.aws.marketlive.com, aws.marketlive.com
154.218.156.92:443 6440fd282b26…
Subject: app-lanjinglive.com.cn
Issuer: YR2
SANs: app-lanjinglive.com.cn, app.app-lanjinglive.com.cn, m.app-lanjinglive.com.cn, www.app-lanjinglive.com.cn
104.255.174.153:443 8ef649c3f23c…
Subject: apollo.webserverlive.com
Issuer: apollo.webserverlive.com
SANs: apollo.webserverlive.com
114.207.114.246:443 f1d1918fac43…
Subject: *.sooplive.com
Issuer: Thawte TLS RSA CA G1
SANs: *.apro.sooplive.com, *.ext-sooplive.com, *.file.sooplive.com, *.img.sooplive.com, *.m.sooplive.com, *.sooplive.com, *.stream.sooplive.com, apro.sooplive.com, ext-sooplive.com, file.sooplive.com, img.sooplive.com, m.sooplive.com, sooplive.com, stream.sooplive.com
45.60.175.4:8883 f9ad8980fb0a…
Subject: *.aws.marketlive.com
Issuer: Go Daddy Secure Certificate Authority - G2
SANs: *.aws.marketlive.com, aws.marketlive.com

IPs Citing This Domain

Hosts whose HTML body references this domain. Strong signal for origin/mirror/embed discovery.

123.57.144.128:443 href · ×2

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

Origin IP Origin ASN CDN ASN Confidence Reasoning
81.85.77.103 AS62904 AS8075 95% cert fd3b639f… served by 81.85.77.103 (AS62904) carries SAN login.live.com which currently resolves through Microsoft (AS8075) at 40.126.53.8, 40.126.53.17, 40.126.53.10, 20.190.181.4
31.59.93.105 AS56594 AS8075 95% cert 42346111… served by 31.59.93.105 (AS56594) carries SAN login.live.com which currently resolves through Microsoft (AS8075) at 40.126.53.10, 20.190.181.23, 40.126.53.11, 40.126.53.21
171.236.61.75 AS7552 AS8068 95% cert 9840c776… served by 171.236.61.75 (AS7552) carries SAN accounts.live.com which currently resolves through Microsoft (AS8068) at 204.79.197.212, 2620:1ec:c11::212
171.236.61.75 AS7552 AS16625 95% cert 9840c776… served by 171.236.61.75 (AS7552) carries SAN choice.live.com which currently resolves through Akamai (AS16625) at 104.99.233.177, 104.85.1.84, 23.220.113.77, 23.35.29.147
172.86.70.159 AS14956 AS8068 95% cert f3477d87… served by 172.86.70.159 (AS14956) carries SAN 3d.live.com which currently resolves through Microsoft (AS8068) at 204.79.197.212, 2620:1ec:c11::212
172.86.70.159 AS14956 AS20940 95% cert f3477d87… served by 172.86.70.159 (AS14956) carries SAN cnweb.search.live.com which currently resolves through Akamai (AS20940) at 23.200.0.202, 23.200.0.207, 88.221.25.155, 88.221.25.145
172.86.70.159 AS14956 AS8075 95% cert f3477d87… served by 172.86.70.159 (AS14956) carries SAN api.search.live.com which currently resolves through Microsoft (AS8075) at 13.107.5.80
31.130.202.184 AS56740 AS8075 95% cert f3477d87… served by 31.130.202.184 (AS56740) carries SAN api.search.live.com which currently resolves through Microsoft (AS8075) at 13.107.5.80
31.130.202.184 AS56740 AS8068 95% cert f3477d87… served by 31.130.202.184 (AS56740) carries SAN 3d.live.com which currently resolves through Microsoft (AS8068) at 204.79.197.212, 2620:1ec:c11::212
31.130.202.184 AS56740 AS20940 95% cert f3477d87… served by 31.130.202.184 (AS56740) carries SAN cnweb.search.live.com which currently resolves through Akamai (AS20940) at 88.221.25.155, 88.221.25.145, 23.216.77.8, 23.216.77.31
77.238.229.179 AS216071 AS8075 95% cert b87a9c44… served by 77.238.229.179 (AS216071) carries SAN login.live.com which currently resolves through Microsoft (AS8075) at 20.190.159.73, 40.126.31.0, 20.190.159.68, 40.126.31.3
104.194.144.218 AS198983 AS8075 95% cert 851652b4… served by 104.194.144.218 (AS198983) carries SAN outlook.live.com which currently resolves through Microsoft (AS8075) at 2603:1026:c03:6024::2, 2603:1026:c03:7065::2, 52.97.183.194, 2603:1026:c03:7067::2
104.194.144.218 AS198983 AS8068 95% cert 851652b4… served by 104.194.144.218 (AS198983) carries SAN live.com which currently resolves through Microsoft (AS8068) at 204.79.197.212
185.242.85.11 AS209847 AS8075 95% cert 0cb6ffff… served by 185.242.85.11 (AS209847) carries SAN login.live.com which currently resolves through Microsoft (AS8075) at 20.190.160.66, 40.126.32.133, 20.190.160.128, 20.190.160.64
78.17.3.134 AS213459 AS8075 95% cert f1b9b159… served by 78.17.3.134 (AS213459) carries SAN login.live.com which currently resolves through Microsoft (AS8075) at 20.190.159.73, 40.126.31.67, 20.190.159.128, 20.190.159.129
185.255.178.31 AS41745 AS8075 95% cert feade44e… served by 185.255.178.31 (AS41745) carries SAN login.live.com which currently resolves through Microsoft (AS8075) at 40.126.31.3, 20.190.159.75, 40.126.31.1, 40.126.31.71
31.77.73.160 AS200173 AS8075 95% cert f1b9b159… served by 31.77.73.160 (AS200173) carries SAN login.live.com which currently resolves through Microsoft (AS8075) at 20.190.190.132, 20.190.190.130, 20.190.190.129, 20.190.190.195
2.27.39.225 AS215590 AS8075 95% cert 16b8ecae… served by 2.27.39.225 (AS215590) carries SAN login.live.com which currently resolves through Microsoft (AS8075) at 20.190.190.132, 20.190.190.130, 20.190.190.129, 20.190.190.195
2.27.39.225 AS215590 AS8075 95% cert feade44e… served by 2.27.39.225 (AS215590) carries SAN login.live.com which currently resolves through Microsoft (AS8075) at 20.190.190.132, 20.190.190.130, 20.190.190.129, 20.190.190.195
45.8.93.209 AS215439 AS8075 95% cert 286e71d0… served by 45.8.93.209 (AS215439) carries SAN login.live.com which currently resolves through Microsoft (AS8075) at 20.190.190.132, 20.190.190.130, 20.190.190.129, 20.190.190.195
80.69.173.74 AS202053 AS8075 95% cert 394e114f… served by 80.69.173.74 (AS202053) carries SAN mail.services.live.com which currently resolves through Microsoft (AS8075) at 2603:1026:c0d:c2b::2, 52.97.201.66, 2603:1026:c0d:1803::2, 2603:1026:c0d:1801::2
80.69.173.74 AS202053 AS8068 95% cert 394e114f… served by 80.69.173.74 (AS202053) carries SAN live.com which currently resolves through Microsoft (AS8068) at 204.79.197.212
178.255.222.58 AS56971 AS8075 95% cert 42346111… served by 178.255.222.58 (AS56971) carries SAN login.live.com which currently resolves through Microsoft (AS8075) at 20.190.160.132, 20.190.160.5, 20.190.160.3, 40.126.32.76
155.212.164.59 AS29182 AS8075 95% cert 286e71d0… served by 155.212.164.59 (AS29182) carries SAN login.live.com which currently resolves through Microsoft (AS8075) at 20.190.160.132, 20.190.160.5, 20.190.160.3, 40.126.32.76
192.55.236.27 AS4972 AS8075 95% cert 56f3d78e… served by 192.55.236.27 (AS4972) carries SAN login.live.com which currently resolves through Microsoft (AS8075) at 40.126.31.131, 40.126.31.0, 20.190.159.68, 20.190.159.129

CT-Log Evidence

Certificates from public Certificate Transparency logs whose subject or SAN names this domain — including historic certs we never observed live.

4aa4a51f110d277c… google · argon2026h2
Subject: outlook.live.com
Issuer: DigiCert Cloud Services CA-1
SANs: outlook.live.com, outlook-sdf.live.com, attachment.outlook.office.net, attachment.outlook.officeppe.net, hotmail.com, *.calendar.live.com, *.hotmail.com, *.live.com, *.mail.live.com, afd-l.office.com, live.com, *.nrb.footprintdns.com, *.fp.measure.office.com, premium.outlook.com
Valid: 2025-09-13 00:00:00 → 2026-09-12 23:59:59
c7acfa60c6bad7f7… google · argon2026h2
Subject: outlook.live.com
Issuer: DigiCert Cloud Services CA-1
SANs: outlook.live.com, outlook-sdf.live.com, attachment.outlook.office.net, attachment.outlook.officeppe.net, hotmail.com, *.calendar.live.com, *.hotmail.com, *.live.com, *.mail.live.com, afd-l.office.com, live.com, *.nrb.footprintdns.com, *.fp.measure.office.com, premium.outlook.com
Valid: 2025-09-13 00:00:00 → 2026-09-12 23:59:59

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.

Type Value First seen Last seen
CAA 0 issue "microsoft.com" 2026-05-26 02:43:02.200 2026-07-28 20:39:29.599
TXT google-site-verification=er-XGn5evjhwRiwIPwWyQjyHB1pigvhw-mp8saZxLCA 2026-05-26 02:43:02.200 2026-07-28 20:39:29.599
TXT google-site-verification=aqgIxrIS1nghF9FDjR5tN7t6xgIVr3Dg254rmyDNwRU 2026-05-26 02:43:02.200 2026-07-28 20:39:29.599
SRV _sipfederationtls._tcp 10 2 5061 federation.messenger.msn.com 2026-05-26 02:43:02.200 2026-07-28 20:39:29.599
NS ns2-37.azure-dns.net 2026-05-26 02:43:02.200 2026-07-28 20:39:29.599
MX 2 live-com.olc.protection.outlook.com 2026-05-26 02:43:02.200 2026-07-28 20:39:29.599
TXT facebook-domain-verification=atvthxwtzc3u4ubnsozavn76cusuaj 2026-05-26 02:43:02.200 2026-07-28 20:39:29.599
CAA 0 contactemail "caarecordaware@microsoft.com" 2026-05-26 02:43:02.200 2026-07-28 20:39:29.599
TXT google-site-verification=0mLTLcpaFxdFNO4m1TfqB2WQ4rGtz7xpPmFwDJ9O_9Q 2026-05-26 02:43:02.200 2026-07-28 20:39:29.599
CAA 0 issue "entrust.net" 2026-05-26 02:43:02.200 2026-07-28 20:39:29.599
TXT google-site-verification=DVGpQUbbQCBRPGlmWiTVUMyQGfLPlEVw6Z4pm39AAj4 2026-05-26 02:43:02.200 2026-07-28 20:39:29.599
CAA 0 iodef "mailto:domains@microsoft.com" 2026-05-26 02:43:02.200 2026-07-28 20:39:29.599
NS ns3-37.azure-dns.org 2026-05-26 02:43:02.200 2026-07-28 20:39:29.599
TXT google-site-verification=N9kowue62gCm511Op0_N2LO1JZTcjA2GYzOE22SBaiI 2026-05-26 02:43:02.200 2026-07-28 20:39:29.599
CAA 0 issue "digicert.com" 2026-05-26 02:43:02.200 2026-07-28 20:39:29.599
NS ns1-37.azure-dns.com 2026-05-26 02:43:02.200 2026-07-28 20:39:29.599
A 204.79.197.212 2026-05-26 02:43:02.200 2026-07-28 20:39:29.599
NS ns4-37.azure-dns.info 2026-05-26 02:43:02.200 2026-07-28 20:39:29.599
TXT v=spf1 include:spf-a.hotmail.com include:spf-b.hotmail.com include:spf-c.hotmail.com include:spf-d.hotmail.com include:spf.protection.outlook.com ~all 2026-05-26 02:43:02.200 2026-07-28 20:39:29.599
CAA 0 issue "globalsign.com" 2026-05-26 02:43:02.200 2026-07-28 20:39:29.599
CAA 0 issue "dtrust.de" 2026-05-26 02:43:02.200 2026-07-28 20:39:29.599