Check-Host.cc

Try 1.1.1.1 AS13335 check-host.cc /country/de /tld/cc
Domain

microsoftonline-p.com

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

DNS Check HTTP Check Run Full Scan .com TLD

Run a live full scan of microsoftonline-p.com

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now
Hosting IPs
—
A/AAAA targets
Subdomains
—
CT + scan + body
Record Types
—
seen in DNS
Observed Certs
—
in our scans

DNS Records

A
—
AAAA
—
MX
—
NS
ns1-36.azure-dns.com, ns2-36.azure-dns.net, ns3-36.azure-dns.org, ns4-36.azure-dns.info
TXT
google-site-verification=9GBPC47bHI2p3bMKZebdPGjdJ1-T5BsXLqXH9aRbqpw
CNAME
—
CAA
0 contactemail "caarecordaware@microsoft.com", 0 iodef "mailto:caarecordaware@microsoft.com"

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.

Subdomain Resolves to Last seen
login.microsoftonline-p.com
20.190.160.14 2603:1027:1:150::2 2603:1027:1:158::8 2603:1027:1:d0::3 +331
2026-07-28 23:56:20.652
nexus.microsoftonline-p.com
40.126.53.19 2603:1027:1:d8::5 2603:1026:3000:d8::1 2603:1027:1:c8:: +330
2026-07-28 17:05:15.597
secure.aadcdn.microsoftonline-p.com
13.107.246.60 2620:1ec:bdf::44 2620:1ec:bdf::45 2620:1ec:46::67 +7
2026-07-28 12:35:28.535
microsoftonline-p.com
1970-01-01 00:00:00.000
secure.aadcdn.gov.microsoftonline-p.com
1970-01-01 00:00:00.000

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

Certificate observations pending

TLS certs naming this domain in subject or SANs will appear here as our scan-layer catches them.

IPs Citing This Domain

No citing IPs found yet

As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

Origin IP Origin ASN CDN ASN Confidence Reasoning
81.85.77.103 AS62904 AS8075 95% cert fd3b639f… served by 81.85.77.103 (AS62904) carries SAN login.microsoftonline-p.com which currently resolves through Microsoft (AS8075) at 2603:1027:1:d0::3, 20.190.159.73, 20.190.159.128, 20.190.159.64
31.59.93.105 AS56594 AS8075 95% cert 42346111… served by 31.59.93.105 (AS56594) carries SAN login.microsoftonline-p.com which currently resolves through Microsoft (AS8075) at 2603:1027:1:c8::1, 2603:1026:3000:d0::, 40.126.31.3, 20.190.159.0
77.238.229.179 AS216071 AS8075 95% cert b87a9c44… served by 77.238.229.179 (AS216071) carries SAN login.microsoftonline-p.com which currently resolves through Microsoft (AS8075) at 2603:1026:3000:110::3, 20.190.181.23, 40.126.53.10, 40.126.53.7
185.242.85.11 AS209847 AS8075 95% cert 0cb6ffff… served by 185.242.85.11 (AS209847) carries SAN login.microsoftonline-p.com which currently resolves through Microsoft (AS8075) at 20.190.159.128, 2603:1027:1:d8::7, 20.190.159.130, 40.126.31.3
78.17.3.134 AS213459 AS8075 95% cert f1b9b159… served by 78.17.3.134 (AS213459) carries SAN login.microsoftonline-p.com which currently resolves through Microsoft (AS8075) at 40.126.32.136, 2603:1026:3000:148::6, 2603:1027:1:158::2, 40.126.32.72
185.255.178.31 AS41745 AS8075 95% cert feade44e… served by 185.255.178.31 (AS41745) carries SAN login.microsoftonline-p.com which currently resolves through Microsoft (AS8075) at 2603:1027:1:150::5, 20.190.160.3, 20.190.160.17, 20.190.160.131
31.77.73.160 AS200173 AS8075 95% cert f1b9b159… served by 31.77.73.160 (AS200173) carries SAN login.microsoftonline-p.com which currently resolves through Microsoft (AS8075) at 2603:1026:3000:c8::9, 2603:1026:3000:d0::9, 20.190.147.10, 2603:1027:1:d0::3
2.27.39.225 AS215590 AS8075 95% cert 16b8ecae… served by 2.27.39.225 (AS215590) carries SAN login.microsoftonline-p.com which currently resolves through Microsoft (AS8075) at 2603:1026:3000:c8::9, 2603:1026:3000:d0::9, 20.190.147.10, 2603:1027:1:d0::3
2.27.39.225 AS215590 AS8075 95% cert feade44e… served by 2.27.39.225 (AS215590) carries SAN login.microsoftonline-p.com which currently resolves through Microsoft (AS8075) at 2603:1026:3000:c8::9, 2603:1026:3000:d0::9, 20.190.147.10, 2603:1027:1:d0::3
45.8.93.209 AS215439 AS8075 95% cert 286e71d0… served by 45.8.93.209 (AS215439) carries SAN login.microsoftonline-p.com which currently resolves through Microsoft (AS8075) at 2603:1026:3000:c8::9, 2603:1026:3000:d0::9, 20.190.147.10, 2603:1027:1:d0::3
178.255.222.58 AS56971 AS8075 95% cert 42346111… served by 178.255.222.58 (AS56971) carries SAN login.microsoftonline-p.com which currently resolves through Microsoft (AS8075) at 20.190.160.4, 2603:1027:1:150::5, 40.126.32.136, 40.126.32.138
155.212.164.59 AS29182 AS8075 95% cert 286e71d0… served by 155.212.164.59 (AS29182) carries SAN login.microsoftonline-p.com which currently resolves through Microsoft (AS8075) at 20.190.160.4, 2603:1027:1:150::5, 40.126.32.136, 40.126.32.138
192.55.236.27 AS4972 AS8075 95% cert 56f3d78e… served by 192.55.236.27 (AS4972) carries SAN login.microsoftonline-p.com which currently resolves through Microsoft (AS8075) at 2603:1027:1:148::f, 20.190.160.14, 20.190.160.65, 20.190.160.5
185.242.85.11 AS209847 AS8075 95% cert e9cbb3fa… served by 185.242.85.11 (AS209847) carries SAN login.microsoftonline-p.com which currently resolves through Microsoft (AS8075) at 2603:1027:1:d0::4, 20.190.160.2, 40.126.32.74, 40.126.32.133
151.236.20.130 AS9009 AS8075 95% cert 0cb6ffff… served by 151.236.20.130 (AS9009) carries SAN login.microsoftonline-p.com which currently resolves through Microsoft (AS8075) at 20.190.160.130, 2603:1026:3000:d8::2, 2603:1026:3000:d0::, 2603:1027:1:d8::7
31.56.27.12 AS56971 AS8075 95% cert f1b9b159… served by 31.56.27.12 (AS56971) carries SAN login.microsoftonline-p.com which currently resolves through Microsoft (AS8075) at 40.126.31.67, 2603:1027:1:d0::6, 2603:1026:3000:d8::, 2603:1027:1:d0::4
157.22.199.92 AS29182 AS8075 95% cert feade44e… served by 157.22.199.92 (AS29182) carries SAN login.microsoftonline-p.com which currently resolves through Microsoft (AS8075) at 2603:1026:3000:148::7, 2603:1027:1:150::3, 2603:1027:1:148::f, 2603:1026:3000:150::5

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.

Type Value First seen Last seen
TXT google-site-verification=9GBPC47bHI2p3bMKZebdPGjdJ1-T5BsXLqXH9aRbqpw 2026-07-15 20:04:13.980 2026-07-15 20:04:13.980
NS ns1-36.azure-dns.com 2026-07-15 20:04:13.980 2026-07-15 20:04:13.980
NS ns4-36.azure-dns.info 2026-07-15 20:04:13.980 2026-07-15 20:04:13.980
CAA 0 iodef "mailto:caarecordaware@microsoft.com" 2026-07-15 20:04:13.980 2026-07-15 20:04:13.980
NS ns3-36.azure-dns.org 2026-07-15 20:04:13.980 2026-07-15 20:04:13.980
CAA 0 contactemail "caarecordaware@microsoft.com" 2026-07-15 20:04:13.980 2026-07-15 20:04:13.980
NS ns2-36.azure-dns.net 2026-07-15 20:04:13.980 2026-07-15 20:04:13.980