Check-Host.cc

Try 1.1.1.1 AS13335 check-host.cc /country/de /tld/cc
Domain

m365.cloud.microsoft

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

DNS Check HTTP Check Run Full Scan .microsoft TLD

Run a live full scan of m365.cloud.microsoft

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now
Hosting IPs
100
A/AAAA targets
Subdomains
—
CT + scan + body
Record Types
2
seen in DNS
Observed Certs
264
in our scans

DNS Records

A
13.107.6.156, 13.107.9.156, 23.103.224.1, 23.103.224.105, 23.103.224.116, 23.103.224.117, 23.103.224.13, 23.103.224.130
AAAA
2603:1061:1600:13::365:c0, 2603:1061:1600:21::365:c0, 2603:1061:1600:2212::365:c0, 2603:1061:1600:2213::365:c0, 2603:1061:1600:2222::365:c0, 2603:1061:1600:222b::365:c0, 2603:1061:1600:222f::365:c0, 2603:1061:1600:2231::365:c0
MX
—
NS
—
TXT
—
CNAME
—
CAA
—

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Subdomain enumeration pending

Every subdomain ever issued a TLS cert under this apex — extracted from Certificate Transparency logs, our own scan observations and body references.

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

52.109.112.57:443 e9b9e638970e…
Subject: www.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 02
SANs: *.prodprv.office.com, *.www.microsoft365.com, *.www.office.com, apps.office.com, excel.office.com, fluid.office.com, home.office.com, login.office.com, m365.cloud.microsoft, m365.go.microsoft, microsoft365.com, office.com, officehome.australiaeast.cloudapp.azure.com, powerpoint.office.com, signin.office.com, stream.office.com, visio.office.com, word.office.com, www.microsoft365.com, www.office.com
20.243.232.68:443 eb537db354ce…
Subject: www.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 04
SANs: *.prodprv.office.com, *.www.microsoft365.com, *.www.office.com, apps.office.com, excel.office.com, fluid.office.com, home.office.com, login.office.com, m365.cloud.microsoft, m365.go.microsoft, microsoft365.com, office.com, officehomeprodprv.japaneast.cloudapp.azure.com, powerpoint.office.com, scuprodprv.m365.cloud.microsoft, signin.office.com, stream.office.com, visio.office.com, word.office.com, www.microsoft365.com, www.office.com
20.85.175.210:443 a4e4e4147439…
Subject: *.prod.www.microsoft365.com
Issuer: Microsoft TLS G2 RSA CA OCSP 10
SANs: *.prod.www.microsoft365.com, m365.cloud.microsoft, www.microsoft365.com, www.office.com
20.167.113.250:443 a4e4e4147439…
Subject: *.prod.www.microsoft365.com
Issuer: Microsoft TLS G2 RSA CA OCSP 10
SANs: *.prod.www.microsoft365.com, m365.cloud.microsoft, www.microsoft365.com, www.office.com
52.109.108.0:443 052821dc8c4f…
Subject: www.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 02
SANs: *.prodprv.office.com, *.www.microsoft365.com, *.www.office.com, apps.office.com, excel.office.com, fluid.office.com, home.office.com, login.office.com, m365.cloud.microsoft, m365.go.microsoft, microsoft365.com, office.com, officehome.brazilsouth.cloudapp.azure.com, powerpoint.office.com, signin.office.com, stream.office.com, visio.office.com, word.office.com, www.microsoft365.com, www.office.com
52.109.28.5:443 38c8d30d3ea9…
Subject: www.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 10
SANs: *.prodprv.office.com, *.www.microsoft365.com, *.www.office.com, apps.office.com, excel.office.com, fluid.office.com, home.office.com, login.office.com, m365.cloud.microsoft, m365.go.microsoft, microsoft365.com, office.com, officehome.uksouth.cloudapp.azure.com, powerpoint.office.com, signin.office.com, stream.office.com, visio.office.com, word.office.com, www.microsoft365.com, www.office.com
100.27.71.98:443 cb166a2dda40…
Subject: NrocServerProxy
Issuer: NrocProxy
SANs: *.1min.ai, *.chatbotapp.ai, *.oaiusercontent.com, *.sharepoint.com, 1min.ai, account.topazlabs.com, account.voicemod.net, af.articleforge.com, ai-writer.com, ai.egain.cloud, ai.invideo.io, aichatapp.ai, aihumanize.io, ailessonplan.com, aipoemgenerator.org, aiwritingpal.com, allenai.org, api.anthropic.com, api.business.githubcopilot.com, api2.cursor.sh, app-eu1.hubspot.com, app-na1.hubspotdocuments.com, app.attio.com, app.beehiiv.com, app.boords.com, app.botpress.cloud, app.chat360.io, app.chatbot.com, app.chatling.ai, app.copilotly.com, app.copy.ai, app.fastbots.ai, app.fireflies.ai, app.fyxer.com, app.glean.com, app.gokite.ai, app.grammarly.com, app.heygen.com, app.hubspot.com, app.instantly.ai, app.iokoo.co, app.jasper.ai, app.jinnify.ai, app.klingai.com, app.koah.ai, app.leonardo.ai, app.manychat.com, app.napkin.ai, app.neuroflash.com, app.otterly.ai, app.quickchat.ai, app.raffle.ai, app.read.ai, app.snoooz.ai, app.speechify.com, app.synthesia.io, app.taplio.com, app.transpond.io, app.uizard.io, app.wonderchat.io, app.wordplay.ai, app.wordtune.com, app.writecream.com, app.writeme.ai, app.writer.com, app.writerx.co, app.writesonic.com, app.zomani.ai, archie-app.8base.com, archie.8base.com, arena.ai, articlefiesta.com, artlist.io, askaichat.app, async.com, attio.com, bearly.ai, beyondwords.io, bolt.new, boords.com, botpress.com, bottalk.io, brainly.com, bubble.io, build.fillout.com, character.ai, chat.aichatapp.ai, chat.chatbot.app, chat.chaton.ai, chat.deepseek.com, chat.mistral.ai, chat.qwen.ai, chat.webllm.ai, chatbot.app, chatbotapp.ai, chatgpt.com, chatjimmy.ai, chatling.ai, chaton.ai, chatty.net, chatx.ai, claude.ai, clawbot.ai, clip.opus.pro, cloud.yellow.ai, coda.grammarly.com, codepal.ai, console.groq.com, copilot.cloud.microsoft, copilot.microsoft.com, copymonkey.ai, creator.voiceflow.com, dashboard.browse.ai, dashboard.gptforwork.com, dashboard.mintlify.com, dashboard.scale.com, dashboard.searchatlas.com, decisioninsights.ai, deevid.ai, deliciousai.com, designer.microsoft.com, docs.gokite.ai, docsbot.ai, dream-machine.lumalabs.ai, duck.ai, durable.com, edgeservices.bing.com, eightfold.ai, elevenlabs.io, eu.smith.langchain.com, eu1-app.outplayhq.com, fastbots.ai, fellow.ai, files.oaiusercontent.com, filmora.wondershare.com, fireflies.ai, firefly.adobe.com, forethought.ai, framer.com, gamma.app, gemini.google.com, gencraft.com, genny.lovo.ai, gliacloud.com, go.anyword.com, go.socrates.im, gokite.ai, gptexcel.uk, gptforwork.com, graph.microsoft.com, grok.com, grokipedia.com, groq.com, heygpt.chat, hpanel.hostinger.com, hub.yarnit.app, huggingface.co, imglarger.com, imgupscaler.com, instantly.ai, invideo.io, ivy.ai, jules.google.com, julius.ai, justdone.com, kaiber.ai, labs.google, leonardo.ai, lovable.dev, lovo.ai, lumalabs.ai, lumo.proton.me, m365.cloud.microsoft, manychat.com, meetami.ai, meetbetty.ai, mermaid.ai, metadata.io, mindtrip.ai, monica.im, my.writefull.com, nexverse.ai, notebooklm.google, notebooklm.google.com, notegpt.io, numerous.ai, ollama.com, openart.ai, openclaw.ai, openrouter.ai, otter.ai, otterly.ai, outlook.office.com, outplay.ai, panel.ai-writer.com, panel.tiledesk.com, picsart.com, platform.claude.com, platform.metadata.io, platform.thrads.ai, play.aidungeon.com, playground.allenai.org, push.clients6.google.com, quickchat.ai, quillbot.com, quiq.com, quizlet.com, raffle.ai, readalong.ai, replit.com, sales.meetami.ai, scale.com, scite.ai, searchatlas.com, sharepoint.com, shopcircle.co, sider.ai, slidebazaar.com, smilee.io, smith.langchain.com, smodin.io, snoooz.ai, socrates.im, solvely.ai, sourcegraph.com, sparkbase.ai, speechify.com, stablediffusionweb.com, studio.ai21.com, studio.wellsaidlabs.com, substrate.office.com, suno.ai, suno.com, sync.beatoven.ai, tactiq.io, taplio.com, tiledesk.com, toolkit.artlist.io, transpond.io, uizard.io, undetectable.ai, use.ai, vsco.co, warmer.ai, web.descript.com, webllm.mlc.ai, windsurf.com, wonderchat.io, wordplay.ai, workflos.ai, woxo.tech, writeme.ai, writer.com, writersbrew.app, writerx.co, writesonic.com, writier.io, ws.chatgpt.com, ws.readspeaker.com, www.3daistudio.com, www.acrolinx.com, www.admaster.cc, www.adventuregen.ai, www.ai21.com, www.aiisajoke.com, www.ailessonplan.com, www.aipoemgenerator.org, www.aiwritingpal.com, www.anyword.com, www.articleforge.com, www.ashbyhq.com, www.baidu.com, www.bearly.ai, www.beatoven.ai, www.beautiful.ai, www.beehiiv.com, www.beforesunset.ai, www.bettersynonyms.com, www.bingapis.com, www.bridged.media, www.browse.ai, www.cadent.com, www.canva.com, www.capcut.com, www.chat360.io, www.chatai.com, www.chatbot.com, www.chegg.com, www.cm.com, www.coframe.com, www.coloringbook.ai, www.commoninja.com, www.copilotly.com, www.copy.ai, www.coursehero.com, www.deepl.com, www.descript.com, www.digitalgenius.com, www.dola.com, www.doubao.com, www.egain.com, www.fillout.com, www.fotor.com, www.framer.com, www.freeconvert.com, www.freepik.com, www.fyxer.com, www.genspark.ai, www.getmerlin.in, www.getvera.ai, www.gokite.ai, www.grammarly.com, www.granola.ai, www.hostinger.com, www.humanizeai.pro, www.imglarger.com, www.jasper.ai, www.kaiber.ai, www.kimi.com, www.klaviyo.com, www.koahlabs.com, www.krikey.ai, www.labs.google, www.langchain.com, www.learnwise.ai, www.maxai.co, www.mermaidchart.com, www.midjourney.com, www.mintlify.com, www.monica.im, www.moonshot.ai, www.moonshot.cn, www.nexverse.ai, www.notion.so, www.octaneai.com, www.octocom.ai, www.ollama.com, www.opus.pro, www.otterly.ai, www.outrank.so, www.paradox.ai, www.pisano.com, www.pixa.com, www.quinta.im, www.rabbitholes.ai, www.read.ai, www.readspeaker.com, www.roomgpt.io, www.semrush.com, www.sharpennotes.com, www.shopbox.ai, www.smartling.com, www.suno.ai, www.synthesia.io, www.thrad.ai, www.tidio.com, www.topazlabs.com, www.veed.io, www.voiceflow.com, www.voicemod.net, www.vsco.co, www.wellsaid.io, www.wordtune.com, www.workmagic.io, www.writecream.com, www.writefull.com, www.yarnit.app, www.yeschat.ai, www.zeg.ai, www.zerogpt.com, www.zoovu.com, x.writefull.com, yellow.ai, zevbot.com, zomani.ai, zoovu.com
20.228.106.232:443 475dcb4d7fe7…
Subject: *.msit.www.microsoft365.com
Issuer: Microsoft TLS G2 RSA CA OCSP 02
SANs: *.msit.www.microsoft365.com, m365.cloud.microsoft, www.microsoft365.com, www.office.com
20.228.106.232:443 475dcb4d7fe7…
Subject: *.msit.www.microsoft365.com
Issuer: Microsoft TLS G2 RSA CA OCSP 02
SANs: *.msit.www.microsoft365.com, m365.cloud.microsoft, www.microsoft365.com, www.office.com

IPs Citing This Domain

Hosts whose HTML body references this domain. Strong signal for origin/mirror/embed discovery.

160.16.145.36:80 href · ×4
3.209.77.132:443 href · ×3
138.197.160.151:8080 href · ×2
144.37.5.105:443 href · ×2
65.108.253.67:443 href · ×2
199.115.230.164:80 href · ×2
178.253.32.155:443 href · ×2
129.154.57.92:443 href · ×2
94.139.90.61:443 href · ×2
144.37.5.122:443 href · ×2
198.12.120.225:443 href · ×2
104.128.85.66:443 href · ×2
77.93.157.143:443 href · ×2
23.88.96.149:80 href · ×2
154.17.229.71:443 href · ×2
162.214.92.95:443 href · ×2
192.129.200.200:80 href · ×2
75.127.3.133:443 href · ×2
46.38.253.172:80 href · ×2
170.9.27.4:80 href · ×2
108.61.144.253:443 href · ×2
77.73.8.34:443 href · ×2
79.76.120.45:80 href · ×2
153.120.1.184:443 href · ×2
192.3.251.52:443 href · ×2
139.28.232.107:443 href · ×2
178.104.182.138:443 href · ×2
168.138.191.244:8080 href · ×2
107.175.230.152:80 href · ×2
8.210.40.15:80 href · ×2
67.230.176.36:443 href · ×2
64.118.130.24:443 href · ×2
146.56.147.111:443 href · ×2
79.152.206.232:443 href · ×1
133.68.7.11:443 href · ×1
158.217.3.15:443 href · ×1
98.83.122.204:443 href · ×1
144.77.128.50:80 href · ×1
195.113.72.77:443 href · ×1
202.45.32.35:443 href · ×1
68.71.93.55:80 href · ×1

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

No origin-IP leaks detected (yet)

Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.

CT-Log Evidence

Certificates from public Certificate Transparency logs whose subject or SAN names this domain — including historic certs we never observed live.

742c7b9b53723035… google · xenon2026h2
Subject: m365.cloud.microsoft
Issuer: Microsoft TLS G2 RSA CA OCSP 16
SANs: *.www.office.com, apps.office.com, excel.office.com, home.office.com, login.office.com, m365.cloud.microsoft, microsoft365.com, ntp.www.office.com, office.com, powerpoint.office.com, signin.office.com, stream.office.com, visio.office.com, word.office.com, www.microsoft365.com, www.office.com, fluid.office.com, *.www.microsoft365.com, m365.go.microsoft, chat.cloud.microsoft, m365copilotapp.svc.cloud.microsoft
Valid: 2026-03-19 18:16:31 → 2026-10-03 18:16:31
ad7233c56f2e4a74… google · xenon2026h2
Subject: www.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 10
SANs: home.office.com, login.office.com, office.com, signin.office.com, www.office.com, *.prodprv.office.com, *.www.office.com, word.office.com, excel.office.com, powerpoint.office.com, visio.office.com, apps.office.com, stream.office.com, fluid.office.com, www.microsoft365.com, microsoft365.com, *.www.microsoft365.com, m365.go.microsoft, m365.cloud.microsoft, officehome.westus.cloudapp.azure.com
Valid: 2026-03-05 03:01:23 → 2026-09-01 03:01:23
f18f533721e11eff… google · xenon2026h2
Subject: www.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 02
SANs: home.office.com, login.office.com, office.com, signin.office.com, www.office.com, *.prodprv.office.com, *.www.office.com, word.office.com, excel.office.com, powerpoint.office.com, visio.office.com, apps.office.com, stream.office.com, fluid.office.com, www.microsoft365.com, microsoft365.com, *.www.microsoft365.com, m365.go.microsoft, m365.cloud.microsoft, officehome.norwayeast.cloudapp.azure.com
Valid: 2026-03-05 02:59:40 → 2026-09-01 02:59:40
46f9a2859c3c6da9… google · xenon2026h2
Subject: www.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 16
SANs: home.office.com, login.office.com, office.com, signin.office.com, www.office.com, *.prodprv.office.com, *.www.office.com, word.office.com, excel.office.com, powerpoint.office.com, visio.office.com, apps.office.com, stream.office.com, fluid.office.com, www.microsoft365.com, microsoft365.com, *.www.microsoft365.com, m365.go.microsoft, m365.cloud.microsoft, officehome.swedencentral.cloudapp.azure.com
Valid: 2026-03-05 02:59:18 → 2026-09-01 02:59:18
548e9eb9c95e624e… google · xenon2026h2
Subject: www.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 16
SANs: home.office.com, login.office.com, office.com, signin.office.com, www.office.com, *.prodprv.office.com, *.www.office.com, word.office.com, excel.office.com, powerpoint.office.com, visio.office.com, apps.office.com, stream.office.com, fluid.office.com, www.microsoft365.com, microsoft365.com, *.www.microsoft365.com, m365.go.microsoft, m365.cloud.microsoft, officehome.westus.cloudapp.azure.com
Valid: 2026-03-05 02:58:49 → 2026-09-01 02:58:49
2a57c20076440dd1… google · xenon2026h2
Subject: www.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 16
SANs: home.office.com, login.office.com, office.com, signin.office.com, www.office.com, *.prodprv.office.com, *.www.office.com, word.office.com, excel.office.com, powerpoint.office.com, visio.office.com, apps.office.com, stream.office.com, fluid.office.com, www.microsoft365.com, microsoft365.com, *.www.microsoft365.com, m365.go.microsoft, m365.cloud.microsoft, officehome.eastus.cloudapp.azure.com
Valid: 2026-03-05 02:58:24 → 2026-09-01 02:58:24
7bf1b3127d34cae4… google · xenon2026h2
Subject: www.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 10
SANs: home.office.com, login.office.com, office.com, signin.office.com, www.office.com, *.prodprv.office.com, *.www.office.com, word.office.com, excel.office.com, powerpoint.office.com, visio.office.com, apps.office.com, stream.office.com, fluid.office.com, www.microsoft365.com, microsoft365.com, *.www.microsoft365.com, m365.go.microsoft, m365.cloud.microsoft, officehome.westeurope.cloudapp.azure.com
Valid: 2026-03-05 02:58:02 → 2026-09-01 02:58:02
e87ad85699e35f19… google · xenon2026h2
Subject: www.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 04
SANs: home.office.com, login.office.com, office.com, signin.office.com, www.office.com, *.prodprv.office.com, *.www.office.com, word.office.com, excel.office.com, powerpoint.office.com, visio.office.com, apps.office.com, stream.office.com, fluid.office.com, www.microsoft365.com, microsoft365.com, *.www.microsoft365.com, m365.go.microsoft, m365.cloud.microsoft, officehome.northeurope.cloudapp.azure.com
Valid: 2026-03-05 02:57:28 → 2026-09-01 02:57:28
1dd031ac6c689203… google · xenon2026h2
Subject: www.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 04
SANs: home.office.com, login.office.com, office.com, signin.office.com, www.office.com, *.prodprv.office.com, *.www.office.com, word.office.com, excel.office.com, powerpoint.office.com, visio.office.com, apps.office.com, stream.office.com, fluid.office.com, www.microsoft365.com, microsoft365.com, *.www.microsoft365.com, m365.go.microsoft, m365.cloud.microsoft, officehome.northcentralus.cloudapp.azure.com
Valid: 2026-03-05 02:57:05 → 2026-09-01 02:57:05
0098e550dafed26b… google · xenon2026h2
Subject: m365.cloud.microsoft
Issuer: Microsoft TLS G2 RSA CA OCSP 16
SANs: *.www.office.com, apps.office.com, excel.office.com, home.office.com, login.office.com, m365.cloud.microsoft, microsoft365.com, ntp.www.office.com, office.com, powerpoint.office.com, signin.office.com, stream.office.com, visio.office.com, word.office.com, www.microsoft365.com, www.office.com, fluid.office.com, *.www.microsoft365.com, m365.go.microsoft, copilot.cloud.microsoft
Valid: 2026-03-04 20:05:26 → 2026-08-31 20:05:26
8f3ac83490b30f63… google · xenon2026h2
Subject: m365.cloud.microsoft
Issuer: Microsoft TLS G2 RSA CA OCSP 02
SANs: home.office.com, login.office.com, office.com, signin.office.com, www.office.com, *.www.office.com, word.office.com, excel.office.com, powerpoint.office.com, visio.office.com, apps.office.com, stream.office.com, fluid.office.com, www.microsoft365.com, m365.go.microsoft, m365.cloud.microsoft, ntp.www.office.com, microsoft365.com, *.www.microsoft365.com, copilot.cloud.microsoft
Valid: 2026-03-04 19:54:44 → 2026-08-31 19:54:44
8f02585e8b79ced1… google · xenon2026h2
Subject: m365.cloud.microsoft
Issuer: Microsoft TLS G2 RSA CA OCSP 02
SANs: home.office.com, login.office.com, office.com, signin.office.com, www.office.com, *.www.office.com, word.office.com, excel.office.com, powerpoint.office.com, visio.office.com, apps.office.com, stream.office.com, fluid.office.com, www.microsoft365.com, m365.go.microsoft, m365.cloud.microsoft, ntp.www.office.com, microsoft365.com, *.www.microsoft365.com, copilot.cloud.microsoft
Valid: 2026-03-04 19:54:44 → 2026-08-31 19:54:44
fa295e7762123a01… google · xenon2026h2
Subject: www.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 16
SANs: home.office.com, login.office.com, office.com, signin.office.com, www.office.com, *.prodprv.office.com, *.www.office.com, word.office.com, excel.office.com, powerpoint.office.com, visio.office.com, apps.office.com, stream.office.com, fluid.office.com, www.microsoft365.com, microsoft365.com, *.www.microsoft365.com, m365.go.microsoft, m365.cloud.microsoft, officehome.swedencentral.cloudapp.azure.com
Valid: 2026-03-04 07:10:34 → 2026-08-31 07:10:34
c955afe8e9fc068a… google · xenon2026h2
Subject: www.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 16
SANs: home.office.com, login.office.com, office.com, signin.office.com, www.office.com, *.prodprv.office.com, *.www.office.com, word.office.com, excel.office.com, powerpoint.office.com, visio.office.com, apps.office.com, stream.office.com, fluid.office.com, www.microsoft365.com, microsoft365.com, *.www.microsoft365.com, m365.go.microsoft, m365.cloud.microsoft, officehome.ukwest.cloudapp.azure.com
Valid: 2026-03-03 22:56:51 → 2026-08-30 22:56:51
0a4c457b449de4b9… google · xenon2026h2
Subject: www.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 02
SANs: home.office.com, login.office.com, office.com, signin.office.com, www.office.com, *.prodprv.office.com, *.www.office.com, word.office.com, excel.office.com, powerpoint.office.com, visio.office.com, apps.office.com, stream.office.com, fluid.office.com, www.microsoft365.com, microsoft365.com, *.www.microsoft365.com, m365.go.microsoft, m365.cloud.microsoft, officehome.uksouth.cloudapp.azure.com
Valid: 2026-03-03 22:56:26 → 2026-08-30 22:56:26
b3a045df484d16d1… google · xenon2026h2
Subject: www.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 16
SANs: home.office.com, login.office.com, office.com, signin.office.com, www.office.com, *.prodprv.office.com, *.www.office.com, word.office.com, excel.office.com, powerpoint.office.com, visio.office.com, apps.office.com, stream.office.com, fluid.office.com, www.microsoft365.com, microsoft365.com, *.www.microsoft365.com, m365.go.microsoft, m365.cloud.microsoft, officehome.southcentralus.cloudapp.azure.com
Valid: 2026-03-03 22:55:58 → 2026-08-30 22:55:58
0770cfa65c19f7cf… google · xenon2026h2
Subject: www.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 16
SANs: home.office.com, login.office.com, office.com, signin.office.com, www.office.com, *.prodprv.office.com, *.www.office.com, word.office.com, excel.office.com, powerpoint.office.com, visio.office.com, apps.office.com, stream.office.com, fluid.office.com, www.microsoft365.com, microsoft365.com, *.www.microsoft365.com, m365.go.microsoft, m365.cloud.microsoft, officehome.southeastasia.cloudapp.azure.com
Valid: 2026-03-03 22:55:37 → 2026-08-30 22:55:37
af66e683f8580905… google · xenon2026h2
Subject: www.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 16
SANs: home.office.com, login.office.com, office.com, signin.office.com, www.office.com, *.prodprv.office.com, *.www.office.com, word.office.com, excel.office.com, powerpoint.office.com, visio.office.com, apps.office.com, stream.office.com, fluid.office.com, www.microsoft365.com, microsoft365.com, *.www.microsoft365.com, m365.go.microsoft, m365.cloud.microsoft, officehome.japaneast.cloudapp.azure.com
Valid: 2026-03-03 01:34:04 → 2026-08-30 01:34:04
66b92cf64b5d0b87… google · xenon2026h2
Subject: www.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 10
SANs: home.office.com, login.office.com, office.com, signin.office.com, www.office.com, *.prodprv.office.com, *.www.office.com, word.office.com, excel.office.com, powerpoint.office.com, visio.office.com, apps.office.com, stream.office.com, fluid.office.com, www.microsoft365.com, microsoft365.com, *.www.microsoft365.com, m365.go.microsoft, m365.cloud.microsoft, officehome.japanwest.cloudapp.azure.com
Valid: 2026-03-03 01:33:41 → 2026-08-30 01:33:41
9736594bb6442f49… google · xenon2026h2
Subject: www.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 04
SANs: home.office.com, login.office.com, office.com, signin.office.com, www.office.com, *.prodprv.office.com, *.www.office.com, word.office.com, excel.office.com, powerpoint.office.com, visio.office.com, apps.office.com, stream.office.com, fluid.office.com, www.microsoft365.com, microsoft365.com, *.www.microsoft365.com, m365.go.microsoft, m365.cloud.microsoft, officehome.centralindia.cloudapp.azure.com
Valid: 2026-03-03 01:32:28 → 2026-08-30 01:32:28

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.

Type Value First seen Last seen
AAAA 2620:1ec:a92::156 2026-05-26 04:11:07.627 2026-07-28 11:44:59.719
A 13.107.6.156 2026-05-26 04:11:07.627 2026-07-28 11:44:59.719
AAAA 2620:1ec:4::156 2026-05-26 09:37:52.197 2026-05-27 09:55:28.497
A 13.107.9.156 2026-05-26 09:37:52.197 2026-05-27 09:55:28.497
A 23.103.242.132 2026-07-18 15:08:57.777 2026-07-28 22:03:56.050
AAAA 2603:1061:1600:95::365:c0 2026-07-18 15:08:57.777 2026-07-18 15:08:57.777
AAAA 2603:1061:1600:a1::365:c0 2026-07-18 15:08:57.777 2026-07-18 15:08:57.777
AAAA 2603:1061:1600:99::365:c0 2026-07-18 15:08:57.777 2026-07-18 15:08:57.777
A 23.103.242.129 2026-07-18 15:08:57.777 2026-07-26 17:04:52.099
AAAA 2603:1061:1600:c::365:c0 2026-07-18 15:08:57.777 2026-07-18 15:08:57.777
A 23.103.242.140 2026-07-18 15:08:57.777 2026-07-26 17:04:52.099
A 23.103.242.128 2026-07-18 15:08:57.777 2026-07-26 19:23:07.563
AAAA 2603:1061:1600:2d02::365:c0 2026-07-20 04:02:26.036 2026-07-26 17:13:03.300
AAAA 2603:1061:1600:2d00::365:c0 2026-07-20 04:02:26.036 2026-07-27 18:25:56.107
AAAA 2603:1061:1600:2d0d::365:c0 2026-07-20 04:02:26.036 2026-07-27 18:25:56.107
AAAA 2603:1061:1600:2d09::365:c0 2026-07-20 04:02:26.036 2026-07-28 22:10:34.812
A 23.103.242.131 2026-07-20 04:02:26.036 2026-07-28 22:03:56.050
A 23.103.242.138 2026-07-20 04:02:26.036 2026-07-26 19:23:07.563
AAAA 2603:1061:1600:8e::365:c0 2026-07-21 09:56:43.096 2026-07-21 09:56:43.096
AAAA 2603:1061:1600:9c::365:c0 2026-07-21 09:56:43.096 2026-07-21 09:56:43.096
A 23.103.224.81 2026-07-21 09:56:43.096 2026-07-21 09:56:43.096
A 23.103.224.28 2026-07-21 09:56:43.096 2026-07-21 09:56:43.096
AAAA 2603:1061:1600:87::365:c0 2026-07-21 09:56:43.096 2026-07-21 09:56:43.096
A 23.103.224.117 2026-07-21 09:56:43.096 2026-07-21 09:56:43.096
AAAA 2603:1061:1600:76::365:c0 2026-07-21 09:56:43.096 2026-07-21 09:56:43.096
A 23.103.224.38 2026-07-21 09:56:43.096 2026-07-24 15:24:54.596
AAAA 2603:1061:1600:2d0c::365:c0 2026-07-22 01:05:53.848 2026-07-22 01:05:53.848
AAAA 2603:1061:1600:2d04::365:c0 2026-07-22 01:05:53.848 2026-07-27 03:17:34.977
A 23.103.242.130 2026-07-22 01:05:53.848 2026-07-28 22:03:56.050
A 23.103.242.139 2026-07-22 01:05:53.848 2026-07-26 17:13:03.300
AAAA 2603:1061:1600:6::365:c0 2026-07-22 21:46:37.190 2026-07-22 21:46:37.190
AAAA 2603:1061:1600:9a::365:c0 2026-07-22 21:46:37.190 2026-07-22 21:46:37.190
A 23.103.224.130 2026-07-22 21:46:37.190 2026-07-22 21:46:37.190
A 23.103.224.135 2026-07-22 21:46:37.190 2026-07-22 21:46:37.190
AAAA 2603:1061:1600:40::365:c0 2026-07-22 21:46:37.190 2026-07-22 21:46:37.190
A 23.103.224.105 2026-07-22 21:46:37.190 2026-07-22 21:46:37.190
A 23.103.224.13 2026-07-22 21:46:37.190 2026-07-22 21:46:37.190
AAAA 2603:1061:1600:13::365:c0 2026-07-22 21:46:37.190 2026-07-22 21:46:37.190
AAAA 2603:1061:1600:2d05::365:c0 2026-07-22 23:37:16.502 2026-07-26 19:23:07.563
AAAA 2603:1061:1600:2d0b::365:c0 2026-07-22 23:37:16.502 2026-07-27 18:25:56.107
A 23.103.242.141 2026-07-22 23:37:16.502 2026-07-26 17:13:03.300
A 23.103.242.137 2026-07-23 00:42:34.531 2026-07-26 17:13:03.300
AAAA 2603:1061:1600:2d08::365:c0 2026-07-23 00:42:34.531 2026-07-28 22:10:34.812
A 23.103.242.136 2026-07-23 00:42:34.531 2026-07-26 17:04:52.099
AAAA 2603:1061:1600:2d03::365:c0 2026-07-23 00:54:41.997 2026-07-26 17:13:03.300
AAAA 2603:1061:1600:2231::365:c0 2026-07-23 03:57:18.268 2026-07-23 03:57:18.268
A 23.103.241.21 2026-07-23 03:57:18.268 2026-07-23 03:57:18.268
AAAA 2603:1061:1600:2246::365:c0 2026-07-23 03:57:18.268 2026-07-23 14:09:10.266
A 23.103.241.59 2026-07-23 03:57:18.268 2026-07-23 14:09:10.266
A 23.103.241.67 2026-07-23 03:57:18.268 2026-07-23 03:57:18.268
AAAA 2603:1061:1600:2236::365:c0 2026-07-23 03:57:18.268 2026-07-23 03:57:18.268
A 23.103.241.39 2026-07-23 03:57:18.268 2026-07-25 22:03:17.061
AAAA 2603:1061:1600:222b::365:c0 2026-07-23 03:57:18.268 2026-07-23 03:57:18.268
AAAA 2603:1061:1600:2d0a::365:c0 2026-07-23 04:18:47.799 2026-07-28 22:10:34.812
A 23.103.241.52 2026-07-23 04:49:13.502 2026-07-23 04:49:13.502
A 23.103.241.48 2026-07-23 04:49:13.502 2026-07-28 22:10:34.812
A 23.103.241.28 2026-07-23 04:49:13.502 2026-07-23 04:49:13.502
A 23.103.241.45 2026-07-23 04:49:13.502 2026-07-23 04:49:13.502
AAAA 2603:1061:1600:224a::365:c0 2026-07-23 14:09:10.266 2026-07-23 14:09:10.266
A 23.103.241.34 2026-07-23 14:09:10.266 2026-07-24 00:06:53.164
AAAA 2603:1061:1600:2233::365:c0 2026-07-23 14:09:10.266 2026-07-24 00:06:53.164
A 23.103.241.73 2026-07-23 14:09:10.266 2026-07-23 14:09:10.266
A 23.103.241.60 2026-07-23 14:09:10.266 2026-07-23 14:09:10.266
AAAA 2603:1061:1600:2249::365:c0 2026-07-23 14:09:10.266 2026-07-23 14:09:10.266
AAAA 2603:1061:1600:26::365:c0 2026-07-23 22:06:59.602 2026-07-23 22:06:59.602
AAAA 2603:1061:1600:51::365:c0 2026-07-23 22:06:59.602 2026-07-23 22:06:59.602
AAAA 2603:1061:1600:3e::365:c0 2026-07-23 22:06:59.602 2026-07-23 22:06:59.602
AAAA 2603:1061:1600:56::365:c0 2026-07-23 22:06:59.602 2026-07-23 22:06:59.602
AAAA 2603:1061:1600:2240::365:c0 2026-07-24 00:06:53.164 2026-07-24 00:06:53.164
A 23.103.241.64 2026-07-24 00:06:53.164 2026-07-28 22:10:34.812
A 23.103.241.53 2026-07-24 00:06:53.164 2026-07-24 00:06:53.164
A 23.103.241.62 2026-07-24 00:06:53.164 2026-07-24 00:06:53.164
AAAA 2603:1061:1600:2222::365:c0 2026-07-24 00:06:53.164 2026-07-24 00:06:53.164
AAAA 2603:1061:1600:2212::365:c0 2026-07-24 00:06:53.164 2026-07-24 00:06:53.164
AAAA 2603:1061:1600:78::365:c0 2026-07-24 03:03:17.022 2026-07-24 03:03:17.022
AAAA 2603:1061:1600:7a::365:c0 2026-07-24 03:03:17.022 2026-07-24 03:03:17.022
AAAA 2603:1061:1600:90::365:c0 2026-07-24 03:03:17.022 2026-07-24 03:03:17.022
AAAA 2603:1061:1600:21::365:c0 2026-07-24 03:03:17.022 2026-07-24 03:03:17.022
AAAA 2603:1061:1600:2d01::365:c0 2026-07-24 15:24:54.596 2026-07-28 22:10:34.812
A 23.103.224.67 2026-07-24 15:24:54.596 2026-07-24 15:24:54.596
A 23.103.224.116 2026-07-24 15:24:54.596 2026-07-24 15:24:54.596
A 23.103.224.1 2026-07-24 15:24:54.596 2026-07-24 15:24:54.596
A 23.103.241.38 2026-07-25 22:03:17.061 2026-07-25 22:03:17.061
A 23.103.241.49 2026-07-25 22:03:17.061 2026-07-25 22:03:17.061
A 23.103.241.63 2026-07-25 22:03:17.061 2026-07-25 22:03:17.061
A 23.103.242.133 2026-07-26 17:13:03.300 2026-07-28 22:03:56.050
A 23.103.228.173 2026-07-27 03:17:34.977 2026-07-27 03:17:34.977
A 23.103.228.139 2026-07-27 03:17:34.977 2026-07-27 03:17:34.977
A 23.103.228.148 2026-07-27 03:17:34.977 2026-07-27 03:17:34.977
A 23.103.228.150 2026-07-27 03:17:34.977 2026-07-27 03:17:34.977
A 23.103.241.3 2026-07-27 18:25:56.107 2026-07-27 18:25:56.107
A 23.103.241.40 2026-07-27 18:25:56.107 2026-07-27 18:25:56.107
A 23.103.241.19 2026-07-27 18:25:56.107 2026-07-27 18:25:56.107
A 23.103.241.18 2026-07-27 18:25:56.107 2026-07-27 18:25:56.107
AAAA 2603:1061:1600:223c::365:c0 2026-07-28 22:03:56.050 2026-07-28 22:03:56.050
AAAA 2603:1061:1600:2243::365:c0 2026-07-28 22:03:56.050 2026-07-28 22:03:56.050
AAAA 2603:1061:1600:222f::365:c0 2026-07-28 22:03:56.050 2026-07-28 22:03:56.050
AAAA 2603:1061:1600:2213::365:c0 2026-07-28 22:03:56.050 2026-07-28 22:03:56.050
A 23.103.241.74 2026-07-28 22:10:34.812 2026-07-28 22:10:34.812
A 23.103.241.54 2026-07-28 22:10:34.812 2026-07-28 22:10:34.812