Domain
forms.guest.usercontent.dev.microsoft
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of forms.guest.usercontent.dev.microsoft
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
Hosting IPs
41
A/AAAA targets
Subdomains
—
CT + scan + body
Record Types
2
seen in DNS
Observed Certs
87
in our scans
DNS Records
A
23.103.224.147, 23.103.224.159, 23.103.224.20, 23.103.224.24, 23.103.224.26, 23.103.224.60, 23.103.224.72, 23.103.224.81
AAAA
2603:1061:1600:24::365:c0, 2603:1061:1600:2d00::365:c0, 2603:1061:1600:2d01::365:c0, 2603:1061:1600:2d02::365:c0, 2603:1061:1600:2d04::365:c0, 2603:1061:1600:2d08::365:c0, 2603:1061:1600:2d09::365:c0, 2603:1061:1600:2d0a::365:c0
MX
—
NS
—
TXT
—
CNAME
—
CAA
—
WHOIS / Registration
Registration data planned
Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.
Subdomains
Subdomain enumeration pending
Every subdomain ever issued a TLS cert under this apex — extracted from Certificate Transparency logs, our own scan observations and body references.
Tech Stack
Tech detection pending
Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.
TLS Certificates
Subject: forms.office-int.com
Issuer: Microsoft TLS G2 RSA CA OCSP 04
SANs: *.customervoice.microsoft-int.com, *.forms.office-int.com, *.forms.osi.office-int.net, customervoice.microsoft-int.com, forms.cloud.dev.microsoft, forms.guest.usercontent.dev.microsoft, forms.microsoft-int.com, forms.office-int.com, forms.static.dev.microsoft
Subject: forms.office-int.com
Issuer: Microsoft TLS G2 RSA CA OCSP 04
SANs: *.customervoice.microsoft-int.com, *.forms.office-int.com, *.forms.osi.office-int.net, customervoice.microsoft-int.com, forms.cloud.dev.microsoft, forms.guest.usercontent.dev.microsoft, forms.microsoft-int.com, forms.office-int.com, forms.static.dev.microsoft
IPs Citing This Domain
No citing IPs found yet
As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.
Origin / IP-Leak
USP
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
No origin-IP leaks detected (yet)
Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.
CT-Log Evidence
Certificates from public Certificate Transparency logs whose subject or SAN names this domain — including historic certs we never observed live.
ca86c12ffbc51f8d…
google · xenon2026h2
Subject: forms.office-int.com
Issuer: Microsoft TLS G2 RSA CA OCSP 02
SANs: forms.cloud.dev.microsoft, forms.microsoft-int.com, eu.forms.office-int.com, forms.guest.usercontent.dev.microsoft, forms-int.office.net, forms.static.dev.microsoft, forms.office-int.com
Valid: 2026-04-02 07:34:09 → 2026-10-17 07:34:09
ab5fb37a7ae71ed5…
google · xenon2026h2
Subject: forms.office-int.com
Issuer: Microsoft TLS G2 RSA CA OCSP 04
SANs: forms.cloud.dev.microsoft, forms.microsoft-int.com, eu.forms.office-int.com, forms.guest.usercontent.dev.microsoft, forms-int.office.net, forms.static.dev.microsoft, forms.office-int.com
Valid: 2026-04-02 06:42:53 → 2026-10-17 06:42:53
239e2f784c2ac633…
google · xenon2026h2
Subject: forms.office-int.com
Issuer: Microsoft TLS G2 RSA CA OCSP 02
SANs: forms.cloud.dev.microsoft, forms.microsoft-int.com, eu.forms.office-int.com, forms.guest.usercontent.dev.microsoft, forms-int.office.net, forms.static.dev.microsoft, forms.office-int.com
Valid: 2026-03-25 06:59:42 → 2026-10-09 06:59:42
76da05a35b4bb493…
google · xenon2026h2
Subject: forms.office-int.com
Issuer: Microsoft TLS G2 RSA CA OCSP 02
SANs: *.forms.osi.office-int.net, *.forms.office-int.com, forms.microsoft-int.com, customervoice.microsoft-int.com, *.customervoice.microsoft-int.com, forms.office-int.com, forms.cloud.dev.microsoft, forms.static.dev.microsoft, forms.guest.usercontent.dev.microsoft
Valid: 2026-03-25 05:52:28 → 2026-09-21 05:52:28
5482fc1dd9b000c5…
google · xenon2026h2
Subject: forms.office-int.com
Issuer: Microsoft TLS G2 RSA CA OCSP 02
SANs: *.forms.osi.office-int.net, *.forms.office-int.com, forms.microsoft-int.com, customervoice.microsoft-int.com, *.customervoice.microsoft-int.com, forms.office-int.com, forms.cloud.dev.microsoft, forms.static.dev.microsoft, forms.guest.usercontent.dev.microsoft
Valid: 2026-03-25 05:51:48 → 2026-09-21 05:51:48
365991dd7f9fd05b…
google · xenon2026h2
Subject: forms.office-int.com
Issuer: Microsoft TLS G2 RSA CA OCSP 02
SANs: *.forms.osi.office-int.net, *.forms.office-int.com, forms.microsoft-int.com, customervoice.microsoft-int.com, *.customervoice.microsoft-int.com, forms.office-int.com, forms.cloud.dev.microsoft, forms.static.dev.microsoft, forms.guest.usercontent.dev.microsoft
Valid: 2026-03-25 05:51:45 → 2026-09-21 05:51:45
9177ef626b20b6d1…
google · xenon2026h2
Subject: forms.office-int.com
Issuer: Microsoft TLS G2 RSA CA OCSP 04
SANs: forms.cloud.dev.microsoft, forms.microsoft-int.com, eu.forms.office-int.com, forms.guest.usercontent.dev.microsoft, forms-int.office.net, forms.static.dev.microsoft, forms.office-int.com
Valid: 2026-03-18 07:53:54 → 2026-10-02 07:53:54
461050b94168cf88…
google · xenon2026h2
Subject: forms.office-int.com
Issuer: Microsoft TLS G2 RSA CA OCSP 16
SANs: *.forms.osi.office-int.net, *.forms.office-int.com, forms.microsoft-int.com, customervoice.microsoft-int.com, *.customervoice.microsoft-int.com, forms.office-int.com, forms.cloud.dev.microsoft, forms.static.dev.microsoft, forms.guest.usercontent.dev.microsoft
Valid: 2026-03-16 06:29:53 → 2026-09-12 06:29:53
2b3a99b031c87988…
google · xenon2026h2
Subject: forms.office-int.com
Issuer: Microsoft TLS G2 RSA CA OCSP 16
SANs: *.forms.osi.office-int.net, *.forms.office-int.com, forms.microsoft-int.com, customervoice.microsoft-int.com, *.customervoice.microsoft-int.com, forms.office-int.com, forms.cloud.dev.microsoft, forms.static.dev.microsoft, forms.guest.usercontent.dev.microsoft
Valid: 2026-03-16 06:29:03 → 2026-09-12 06:29:03
5ca4ac52c615a359…
google · xenon2026h2
Subject: forms.office-int.com
Issuer: Microsoft TLS G2 RSA CA OCSP 02
SANs: *.forms.osi.office-int.net, *.forms.office-int.com, forms.microsoft-int.com, customervoice.microsoft-int.com, *.customervoice.microsoft-int.com, forms.office-int.com, forms.cloud.dev.microsoft, forms.static.dev.microsoft, forms.guest.usercontent.dev.microsoft
Valid: 2026-03-16 06:29:01 → 2026-09-12 06:29:01
a2549f4d5b23820b…
google · xenon2026h2
Subject: forms.office-int.com
Issuer: Microsoft TLS G2 RSA CA OCSP 02
SANs: *.forms.osi.office-int.net, *.forms.office-int.com, forms.microsoft-int.com, customervoice.microsoft-int.com, *.customervoice.microsoft-int.com, forms.office-int.com, forms.cloud.dev.microsoft, forms.static.dev.microsoft, forms.guest.usercontent.dev.microsoft
Valid: 2026-03-16 06:29:01 → 2026-09-12 06:29:01
a01cd841de935b1d…
google · xenon2026h2
Subject: forms.office-int.com
Issuer: Microsoft TLS G2 RSA CA OCSP 16
SANs: *.forms.osi.office-int.net, *.forms.office-int.com, forms.microsoft-int.com, customervoice.microsoft-int.com, *.customervoice.microsoft-int.com, forms.office-int.com, forms.cloud.dev.microsoft, forms.static.dev.microsoft, forms.guest.usercontent.dev.microsoft
Valid: 2026-03-12 01:37:47 → 2026-09-08 01:37:47
466dc11780ca3f35…
google · xenon2026h2
Subject: forms.office-int.com
Issuer: Microsoft TLS G2 RSA CA OCSP 10
SANs: *.forms.osi.office-int.net, *.forms.office-int.com, forms.microsoft-int.com, customervoice.microsoft-int.com, *.customervoice.microsoft-int.com, forms.office-int.com, forms.cloud.dev.microsoft, forms.static.dev.microsoft, forms.guest.usercontent.dev.microsoft
Valid: 2026-03-12 01:15:45 → 2026-09-08 01:15:45
0ae6dc56befa78d6…
google · xenon2026h2
Subject: forms.office-int.com
Issuer: Microsoft TLS G2 RSA CA OCSP 02
SANs: *.forms.osi.office-int.net, *.forms.office-int.com, forms.microsoft-int.com, customervoice.microsoft-int.com, *.customervoice.microsoft-int.com, forms.office-int.com, forms.cloud.dev.microsoft, forms.static.dev.microsoft, forms.guest.usercontent.dev.microsoft
Valid: 2026-03-11 11:40:38 → 2026-09-07 11:40:38
e7206ae695018c1a…
google · xenon2026h2
Subject: forms.office-int.com
Issuer: Microsoft TLS G2 RSA CA OCSP 02
SANs: *.forms.osi.office-int.net, *.forms.office-int.com, forms.microsoft-int.com, customervoice.microsoft-int.com, *.customervoice.microsoft-int.com, forms.office-int.com, forms.cloud.dev.microsoft, forms.static.dev.microsoft, forms.guest.usercontent.dev.microsoft
Valid: 2026-03-11 11:40:38 → 2026-09-07 11:40:38
2c1a51433a079260…
google · xenon2026h2
Subject: forms.cloud.dev.microsoft
Issuer: Microsoft TLS G2 RSA CA OCSP 10
SANs: forms.cloud.dev.microsoft, forms.office-int.com, forms.microsoft-int.com, eu.forms.office-int.com, forms.guest.usercontent.dev.microsoft, afd.forms-int.office.net, forms-int.office.net, forms.static.dev.microsoft
Valid: 2026-03-06 14:57:48 → 2026-09-02 14:57:48
55bcf48a3b1b5917…
google · xenon2026h2
Subject: forms.cloud.dev.microsoft
Issuer: Microsoft TLS G2 RSA CA OCSP 10
SANs: forms.cloud.dev.microsoft, forms.office-int.com, forms.microsoft-int.com, eu.forms.office-int.com, forms.guest.usercontent.dev.microsoft, afd.forms-int.office.net, forms-int.office.net, forms.static.dev.microsoft
Valid: 2026-03-06 14:57:48 → 2026-09-02 14:57:48
31558223f61ac087…
google · xenon2026h2
Subject: forms.office-int.com
Issuer: Microsoft TLS G2 RSA CA OCSP 02
SANs: *.forms.osi.office-int.net, *.forms.office-int.com, forms.microsoft-int.com, customervoice.microsoft-int.com, *.customervoice.microsoft-int.com, forms.office-int.com, forms.cloud.dev.microsoft, forms.static.dev.microsoft, forms.guest.usercontent.dev.microsoft
Valid: 2026-01-27 06:29:39 → 2026-07-26 06:29:39
70c067483b1e07e9…
google · xenon2026h2
Subject: forms.office-int.com
Issuer: Microsoft TLS G2 RSA CA OCSP 04
SANs: *.forms.osi.office-int.net, *.forms.office-int.com, forms.microsoft-int.com, customervoice.microsoft-int.com, *.customervoice.microsoft-int.com, forms.office-int.com, forms.cloud.dev.microsoft, forms.static.dev.microsoft, forms.guest.usercontent.dev.microsoft
Valid: 2026-01-27 06:29:34 → 2026-07-26 06:29:34
2c4cf4bd6ecd5b71…
google · xenon2026h2
Subject: forms.office-int.com
Issuer: Microsoft TLS G2 RSA CA OCSP 02
SANs: *.forms.osi.office-int.net, *.forms.office-int.com, forms.microsoft-int.com, customervoice.microsoft-int.com, *.customervoice.microsoft-int.com, forms.office-int.com, forms.cloud.dev.microsoft, forms.static.dev.microsoft, forms.guest.usercontent.dev.microsoft
Valid: 2026-01-27 06:29:31 → 2026-07-26 06:29:31
Threat Intelligence
Domain threat-intel pending
Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.
History
Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.
| Type | Value | First seen | Last seen |
|---|---|---|---|
| A | 23.103.224.20 | 2026-06-14 22:23:29.853 | 2026-06-14 22:23:29.853 |
| AAAA | 2603:1061:1600:a3::365:c0 | 2026-06-14 22:23:29.853 | 2026-06-14 22:23:29.853 |
| A | 23.103.224.24 | 2026-06-14 22:23:29.853 | 2026-06-14 22:23:29.853 |
| AAAA | 2603:1061:1600:24::365:c0 | 2026-06-14 22:23:29.853 | 2026-06-14 22:23:29.853 |
| A | 23.103.224.159 | 2026-06-14 22:23:29.853 | 2026-06-14 22:23:29.853 |
| AAAA | 2603:1061:1600:93::365:c0 | 2026-06-14 22:23:29.853 | 2026-06-14 22:23:29.853 |
| A | 23.103.224.147 | 2026-06-14 22:23:29.853 | 2026-06-14 22:23:29.853 |
| AAAA | 2603:1061:1600:7d::365:c0 | 2026-06-14 22:23:29.853 | 2026-06-14 22:23:29.853 |
| A | 23.103.224.26 | 2026-06-15 16:40:26.825 | 2026-06-15 16:40:26.825 |
| A | 23.103.224.60 | 2026-06-15 16:40:26.825 | 2026-06-15 16:40:26.825 |
| AAAA | 2603:1061:1600:69::365:c0 | 2026-06-15 16:40:26.825 | 2026-06-15 16:40:26.825 |
| AAAA | 2603:1061:1600:87::365:c0 | 2026-06-15 16:40:26.825 | 2026-06-15 16:40:26.825 |
| AAAA | 2603:1061:1600:71::365:c0 | 2026-06-15 16:40:26.825 | 2026-06-15 16:40:26.825 |
| AAAA | 2603:1061:1600:8e::365:c0 | 2026-06-15 16:40:26.825 | 2026-06-15 16:40:26.825 |
| A | 23.103.224.81 | 2026-06-15 16:40:26.825 | 2026-06-15 16:40:26.825 |
| A | 23.103.224.72 | 2026-06-15 16:40:26.825 | 2026-06-15 16:40:26.825 |
| AAAA | 2603:1061:1600:2d0c::365:c0 | 2026-06-19 17:55:58.048 | 2026-07-28 04:18:08.089 |
| AAAA | 2603:1061:1600:2d00::365:c0 | 2026-06-19 17:55:58.048 | 2026-06-19 17:55:58.048 |
| A | 23.103.241.18 | 2026-06-19 17:55:58.048 | 2026-06-19 17:55:58.048 |
| A | 23.103.241.64 | 2026-06-19 17:55:58.048 | 2026-06-19 17:55:58.048 |
| A | 23.103.241.15 | 2026-06-19 17:55:58.048 | 2026-06-19 17:55:58.048 |
| AAAA | 2603:1061:1600:2d08::365:c0 | 2026-06-19 17:55:58.048 | 2026-07-28 09:22:53.757 |
| AAAA | 2603:1061:1600:2d09::365:c0 | 2026-06-19 17:55:58.048 | 2026-07-28 09:22:53.757 |
| A | 23.103.241.25 | 2026-06-19 17:55:58.048 | 2026-06-19 17:55:58.048 |
| AAAA | 2603:1061:1600:2d02::365:c0 | 2026-06-20 11:43:22.120 | 2026-07-28 04:18:08.089 |
| A | 23.103.241.54 | 2026-06-20 11:43:22.120 | 2026-06-20 11:43:22.120 |
| A | 23.103.241.51 | 2026-06-20 11:43:22.120 | 2026-06-20 11:43:22.120 |
| A | 23.103.241.53 | 2026-06-20 11:43:22.120 | 2026-06-20 11:43:22.120 |
| A | 23.103.241.39 | 2026-06-20 11:43:22.120 | 2026-06-20 11:43:22.120 |
| AAAA | 2603:1061:1600:2d0a::365:c0 | 2026-06-20 11:43:22.120 | 2026-07-28 04:18:08.089 |
| AAAA | 2603:1061:1600:2d0d::365:c0 | 2026-06-20 11:43:22.120 | 2026-07-28 09:22:53.757 |
| AAAA | 2603:1061:1600:2d04::365:c0 | 2026-06-20 11:43:22.120 | 2026-06-20 11:43:22.120 |
| AAAA | 2603:1061:1600:2d01::365:c0 | 2026-07-28 04:18:08.089 | 2026-07-28 09:22:53.757 |
| A | 23.103.242.132 | 2026-07-28 04:18:08.089 | 2026-07-28 04:18:08.089 |
| A | 23.103.242.140 | 2026-07-28 04:18:08.089 | 2026-07-28 04:18:08.089 |
| A | 23.103.242.138 | 2026-07-28 04:18:08.089 | 2026-07-28 04:18:08.089 |
| A | 23.103.242.131 | 2026-07-28 04:18:08.089 | 2026-07-28 04:18:08.089 |
| A | 23.103.241.48 | 2026-07-28 09:22:53.757 | 2026-07-28 09:22:53.757 |
| A | 23.103.241.71 | 2026-07-28 09:22:53.757 | 2026-07-28 09:22:53.757 |
| A | 23.103.241.11 | 2026-07-28 09:22:53.757 | 2026-07-28 09:22:53.757 |
| A | 23.103.241.75 | 2026-07-28 09:22:53.757 | 2026-07-28 09:22:53.757 |