Domain
hive.forms.usercontent.dev.microsoft
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of hive.forms.usercontent.dev.microsoft
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
Hosting IPs
2
A/AAAA targets
Subdomains
—
CT + scan + body
Record Types
2
seen in DNS
Observed Certs
99
in our scans
DNS Records
A
13.107.6.202
AAAA
2620:1ec:a92::202
MX
—
NS
—
TXT
—
CNAME
—
CAA
—
WHOIS / Registration
Registration data planned
Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.
Subdomains
Subdomain enumeration pending
Every subdomain ever issued a TLS cert under this apex — extracted from Certificate Transparency logs, our own scan observations and body references.
Tech Stack
Tech detection pending
Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.
TLS Certificates
Certificate observations pending
TLS certs naming this domain in subject or SANs will appear here as our scan-layer catches them.
IPs Citing This Domain
No citing IPs found yet
As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.
Origin / IP-Leak
USP
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
No origin-IP leaks detected (yet)
Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.
CT-Log Evidence
Certificates from public Certificate Transparency logs whose subject or SAN names this domain — including historic certs we never observed live.
05a0d3b9ab7babbd…
google · xenon2026h2
Subject: *.lists.office-int.com
Issuer: Microsoft TLS G2 RSA CA OCSP 16
SANs: lists.office-int.com, hive.office-int.com, hive.forms.cloud.dev.microsoft, hive.forms.usercontent.dev.microsoft, *.lists.office-int.com, *.hive.office-int.com, *.hive.forms.cloud.dev.microsoft
Valid: 2026-04-04 01:15:29 → 2026-10-01 01:15:29
3b7651a174b8ba93…
google · xenon2026h2
Subject: lists.office-int.com
Issuer: Microsoft TLS G2 RSA CA OCSP 10
SANs: *.lists.office-int.com, lists.office-int.com, hive.office-int.com, *.hive.office-int.com, hive.forms.cloud.dev.microsoft, *.hive.forms.cloud.dev.microsoft, hive.forms.usercontent.dev.microsoft
Valid: 2026-03-30 13:18:12 → 2026-09-26 13:18:12
b3db2261eedec33a…
google · xenon2026h2
Subject: lists.office-int.com
Issuer: Microsoft TLS G2 RSA CA OCSP 16
SANs: *.lists.office-int.com, lists.office-int.com, hive.office-int.com, *.hive.office-int.com, hive.forms.cloud.dev.microsoft, *.hive.forms.cloud.dev.microsoft, hive.forms.usercontent.dev.microsoft
Valid: 2026-03-30 13:18:09 → 2026-09-26 13:18:09
a06ecac6e367e0f8…
google · xenon2026h2
Subject: lists.office-int.com
Issuer: Microsoft TLS G2 RSA CA OCSP 10
SANs: *.lists.office-int.com, lists.office-int.com, hive.office-int.com, *.hive.office-int.com, hive.forms.cloud.dev.microsoft, *.hive.forms.cloud.dev.microsoft, hive.forms.usercontent.dev.microsoft
Valid: 2026-03-30 13:18:02 → 2026-09-26 13:18:02
a96ea93536164eb1…
google · xenon2026h2
Subject: lists.office-int.com
Issuer: Microsoft TLS G2 RSA CA OCSP 10
SANs: *.lists.office-int.com, lists.office-int.com, hive.office-int.com, *.hive.office-int.com, hive.forms.cloud.dev.microsoft, *.hive.forms.cloud.dev.microsoft, hive.forms.usercontent.dev.microsoft
Valid: 2026-03-30 13:18:02 → 2026-09-26 13:18:02
b876dcedbc83aab5…
google · xenon2026h2
Subject: lists.office-int.com
Issuer: Microsoft TLS G2 RSA CA OCSP 04
SANs: *.lists.office-int.com, lists.office-int.com, hive.office-int.com, *.hive.office-int.com, hive.forms.cloud.dev.microsoft, *.hive.forms.cloud.dev.microsoft, hive.forms.usercontent.dev.microsoft
Valid: 2026-03-25 05:31:56 → 2026-09-21 05:31:56
0f1d46111dfde081…
google · xenon2026h2
Subject: lists.office-int.com
Issuer: Microsoft TLS G2 RSA CA OCSP 04
SANs: *.lists.office-int.com, lists.office-int.com, hive.office-int.com, *.hive.office-int.com, hive.forms.cloud.dev.microsoft, *.hive.forms.cloud.dev.microsoft, hive.forms.usercontent.dev.microsoft
Valid: 2026-03-25 05:31:38 → 2026-09-21 05:31:38
6a612f31cb91badd…
google · xenon2026h2
Subject: lists.office-int.com
Issuer: Microsoft TLS G2 RSA CA OCSP 04
SANs: *.lists.office-int.com, lists.office-int.com, hive.office-int.com, *.hive.office-int.com, hive.forms.cloud.dev.microsoft, *.hive.forms.cloud.dev.microsoft, hive.forms.usercontent.dev.microsoft
Valid: 2026-03-25 05:31:38 → 2026-09-21 05:31:38
cc074504d4fcbf2a…
google · xenon2026h2
Subject: lists.office-int.com
Issuer: Microsoft TLS G2 RSA CA OCSP 04
SANs: *.lists.office-int.com, lists.office-int.com, hive.office-int.com, *.hive.office-int.com, hive.forms.cloud.dev.microsoft, *.hive.forms.cloud.dev.microsoft, hive.forms.usercontent.dev.microsoft
Valid: 2026-03-25 05:31:38 → 2026-09-21 05:31:38
49abe71732c15d1e…
google · xenon2026h2
Subject: lists.office-int.com
Issuer: Microsoft TLS G2 RSA CA OCSP 02
SANs: *.lists.office-int.com, lists.office-int.com, hive.office-int.com, *.hive.office-int.com, hive.forms.cloud.dev.microsoft, *.hive.forms.cloud.dev.microsoft, hive.forms.usercontent.dev.microsoft
Valid: 2026-03-24 10:43:15 → 2026-09-20 10:43:15
de3d0ed36d12cd94…
google · xenon2026h2
Subject: lists.office-int.com
Issuer: Microsoft TLS G2 RSA CA OCSP 02
SANs: *.lists.office-int.com, lists.office-int.com, hive.office-int.com, *.hive.office-int.com, hive.forms.cloud.dev.microsoft, *.hive.forms.cloud.dev.microsoft, hive.forms.usercontent.dev.microsoft
Valid: 2026-03-24 10:43:15 → 2026-09-20 10:43:15
12f0849a4279dbff…
google · xenon2026h2
Subject: lists.office-int.com
Issuer: Microsoft TLS G2 RSA CA OCSP 10
SANs: *.lists.office-int.com, lists.office-int.com, hive.office-int.com, *.hive.office-int.com, hive.forms.cloud.dev.microsoft, *.hive.forms.cloud.dev.microsoft, hive.forms.usercontent.dev.microsoft
Valid: 2026-03-24 10:43:13 → 2026-09-20 10:43:13
6b552b5e05f3e96a…
google · xenon2026h2
Subject: lists.office-int.com
Issuer: Microsoft TLS G2 RSA CA OCSP 10
SANs: *.lists.office-int.com, lists.office-int.com, hive.office-int.com, *.hive.office-int.com, hive.forms.cloud.dev.microsoft, *.hive.forms.cloud.dev.microsoft, hive.forms.usercontent.dev.microsoft
Valid: 2026-03-24 10:43:13 → 2026-09-20 10:43:13
18d3d1e73cfa1d9e…
google · xenon2026h2
Subject: lists.office-int.com
Issuer: Microsoft TLS G2 RSA CA OCSP 04
SANs: *.lists.office-int.com, lists.office-int.com, hive.office-int.com, *.hive.office-int.com, hive.forms.cloud.dev.microsoft, *.hive.forms.cloud.dev.microsoft, hive.forms.usercontent.dev.microsoft
Valid: 2026-03-24 10:42:56 → 2026-09-20 10:42:56
e6717d3737e3a262…
google · xenon2026h2
Subject: lists.office-int.com
Issuer: Microsoft TLS G2 RSA CA OCSP 16
SANs: *.lists.office-int.com, lists.office-int.com, hive.office-int.com, *.hive.office-int.com, hive.forms.cloud.dev.microsoft, *.hive.forms.cloud.dev.microsoft, hive.forms.usercontent.dev.microsoft
Valid: 2026-03-24 09:24:16 → 2026-09-20 09:24:16
0da46d3497990a33…
google · xenon2026h2
Subject: lists.office-int.com
Issuer: Microsoft TLS G2 RSA CA OCSP 10
SANs: *.lists.office-int.com, lists.office-int.com, hive.office-int.com, *.hive.office-int.com, hive.forms.cloud.dev.microsoft, *.hive.forms.cloud.dev.microsoft, hive.forms.usercontent.dev.microsoft
Valid: 2026-03-24 09:24:06 → 2026-09-20 09:24:06
6aaee5dcbddbc2e0…
google · xenon2026h2
Subject: lists.office-int.com
Issuer: Microsoft TLS G2 RSA CA OCSP 02
SANs: *.lists.office-int.com, lists.office-int.com, hive.office-int.com, *.hive.office-int.com, hive.forms.cloud.dev.microsoft, *.hive.forms.cloud.dev.microsoft, hive.forms.usercontent.dev.microsoft
Valid: 2026-03-24 09:23:53 → 2026-09-20 09:23:53
36cd2c90985260d6…
google · xenon2026h2
Subject: lists.office-int.com
Issuer: Microsoft TLS G2 RSA CA OCSP 04
SANs: *.lists.office-int.com, lists.office-int.com, hive.office-int.com, *.hive.office-int.com, hive.forms.cloud.dev.microsoft, *.hive.forms.cloud.dev.microsoft, hive.forms.usercontent.dev.microsoft
Valid: 2026-03-18 10:36:58 → 2026-09-14 10:36:58
208b00fe8195a51a…
google · xenon2026h2
Subject: lists.office-int.com
Issuer: Microsoft TLS G2 RSA CA OCSP 16
SANs: *.lists.office-int.com, lists.office-int.com, hive.office-int.com, *.hive.office-int.com, hive.forms.cloud.dev.microsoft, *.hive.forms.cloud.dev.microsoft, hive.forms.usercontent.dev.microsoft
Valid: 2026-03-18 10:36:41 → 2026-09-14 10:36:41
21d5d58e5e459747…
google · xenon2026h2
Subject: lists.office-int.com
Issuer: Microsoft TLS G2 RSA CA OCSP 16
SANs: *.lists.office-int.com, lists.office-int.com, hive.office-int.com, *.hive.office-int.com, hive.forms.cloud.dev.microsoft, *.hive.forms.cloud.dev.microsoft, hive.forms.usercontent.dev.microsoft
Valid: 2026-03-18 10:36:41 → 2026-09-14 10:36:41
Threat Intelligence
Domain threat-intel pending
Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.
History
Domain timeline pending
Passive-DNS history accumulates as our forward-DNS crawler observes A/AAAA/MX/NS/TXT records over time.