Domain
office.live.com
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of office.live.com
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
Hosting IPs
8
A/AAAA targets
Subdomains
—
CT + scan + body
Record Types
2
seen in DNS
Observed Certs
182
in our scans
DNS Records
A
52.108.10.12, 52.108.11.12, 52.108.8.12, 52.108.9.12
AAAA
2603:1063:2000:1::12, 2603:1063:2000:2::12, 2603:1063:2000:3::12, 2603:1063:2000::12
MX
—
NS
—
TXT
—
CNAME
—
CAA
—
WHOIS / Registration
Registration data planned
Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.
Subdomains
Subdomain enumeration pending
Every subdomain ever issued a TLS cert under this apex — extracted from Certificate Transparency logs, our own scan observations and body references.
Tech Stack
Tech detection pending
Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.
TLS Certificates
Subject: officeapps.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 10
SANs: *.excel.cloud.microsoft, *.office.core.microsoft, *.office.guest.usercontent.microsoft, *.office.live.com, *.office.svc.cloud.microsoft, *.officeapps-df.live.com, *.officeapps.live.com, *.online.office.com, *.online.office365.com, *.optin.online.office.com, *.powerpoint.cloud.microsoft, *.th.officeapps.live.com, *.vhs.officeapps.live.com, *.view.officeapps.live.com, *.wopi.office.core.microsoft, *.wopi.online.office.net, *.word.cloud.microsoft, *.wshi.office.core.microsoft, *.wshi.online.office.net, df.excel.cloud.microsoft, df.onenote.cloud.microsoft, df.powerpoint.cloud.microsoft, df.visio.cloud.microsoft, df.word.cloud.microsoft, excel.cloud-dev.microsoft, excel.cloud.dev.microsoft, excel.cloud.microsoft, office.live.com, officeapps-df.live.com, officeapps.live.com, officeppe.live.com, onenote.cloud.dev.microsoft, onenote.cloud.microsoft, online.office.com, online.office365.com, powerpoint.cloud-dev.microsoft, powerpoint.cloud.dev.microsoft, powerpoint.cloud.microsoft, tr-ofc-atm.office.com, visio.cloud.dev.microsoft, visio.cloud.microsoft, word.cloud-dev.microsoft, word.cloud.dev.microsoft, word.cloud.microsoft
Subject: officeapps.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 10
SANs: *.excel.cloud.microsoft, *.office.core.microsoft, *.office.guest.usercontent.microsoft, *.office.live.com, *.office.svc.cloud.microsoft, *.officeapps-df.live.com, *.officeapps.live.com, *.online.office.com, *.online.office365.com, *.optin.online.office.com, *.powerpoint.cloud.microsoft, *.th.officeapps.live.com, *.vhs.officeapps.live.com, *.view.officeapps.live.com, *.wopi.office.core.microsoft, *.wopi.online.office.net, *.word.cloud.microsoft, *.wshi.office.core.microsoft, *.wshi.online.office.net, df.excel.cloud.microsoft, df.onenote.cloud.microsoft, df.powerpoint.cloud.microsoft, df.visio.cloud.microsoft, df.word.cloud.microsoft, excel.cloud-dev.microsoft, excel.cloud.dev.microsoft, excel.cloud.microsoft, office.live.com, officeapps-df.live.com, officeapps.live.com, officeppe.live.com, onenote.cloud.dev.microsoft, onenote.cloud.microsoft, online.office.com, online.office365.com, powerpoint.cloud-dev.microsoft, powerpoint.cloud.dev.microsoft, powerpoint.cloud.microsoft, tr-ofc-atm.office.com, visio.cloud.dev.microsoft, visio.cloud.microsoft, word.cloud-dev.microsoft, word.cloud.dev.microsoft, word.cloud.microsoft
Subject: officeapps.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 10
SANs: *.excel.cloud.microsoft, *.office.core.microsoft, *.office.guest.usercontent.microsoft, *.office.live.com, *.office.svc.cloud.microsoft, *.officeapps-df.live.com, *.officeapps.live.com, *.online.office.com, *.online.office365.com, *.optin.online.office.com, *.powerpoint.cloud.microsoft, *.th.officeapps.live.com, *.vhs.officeapps.live.com, *.view.officeapps.live.com, *.wopi.office.core.microsoft, *.wopi.online.office.net, *.word.cloud.microsoft, *.wshi.office.core.microsoft, *.wshi.online.office.net, df.excel.cloud.microsoft, df.onenote.cloud.microsoft, df.powerpoint.cloud.microsoft, df.visio.cloud.microsoft, df.word.cloud.microsoft, excel.cloud-dev.microsoft, excel.cloud.dev.microsoft, excel.cloud.microsoft, office.live.com, officeapps-df.live.com, officeapps.live.com, officeppe.live.com, onenote.cloud.dev.microsoft, onenote.cloud.microsoft, online.office.com, online.office365.com, powerpoint.cloud-dev.microsoft, powerpoint.cloud.dev.microsoft, powerpoint.cloud.microsoft, tr-ofc-atm.office.com, visio.cloud.dev.microsoft, visio.cloud.microsoft, word.cloud-dev.microsoft, word.cloud.dev.microsoft, word.cloud.microsoft
Subject: officeapps.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 10
SANs: *.excel.cloud.microsoft, *.office.core.microsoft, *.office.guest.usercontent.microsoft, *.office.live.com, *.office.svc.cloud.microsoft, *.officeapps-df.live.com, *.officeapps.live.com, *.online.office.com, *.online.office365.com, *.optin.online.office.com, *.powerpoint.cloud.microsoft, *.th.officeapps.live.com, *.vhs.officeapps.live.com, *.view.officeapps.live.com, *.wopi.office.core.microsoft, *.wopi.online.office.net, *.word.cloud.microsoft, *.wshi.office.core.microsoft, *.wshi.online.office.net, df.excel.cloud.microsoft, df.onenote.cloud.microsoft, df.powerpoint.cloud.microsoft, df.visio.cloud.microsoft, df.word.cloud.microsoft, excel.cloud-dev.microsoft, excel.cloud.dev.microsoft, excel.cloud.microsoft, office.live.com, officeapps-df.live.com, officeapps.live.com, officeppe.live.com, onenote.cloud.dev.microsoft, onenote.cloud.microsoft, online.office.com, online.office365.com, powerpoint.cloud-dev.microsoft, powerpoint.cloud.dev.microsoft, powerpoint.cloud.microsoft, tr-ofc-atm.office.com, visio.cloud.dev.microsoft, visio.cloud.microsoft, word.cloud-dev.microsoft, word.cloud.dev.microsoft, word.cloud.microsoft
Subject: officeapps.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 10
SANs: *.excel.cloud.microsoft, *.office.core.microsoft, *.office.guest.usercontent.microsoft, *.office.live.com, *.office.svc.cloud.microsoft, *.officeapps-df.live.com, *.officeapps.live.com, *.online.office.com, *.online.office365.com, *.optin.online.office.com, *.powerpoint.cloud.microsoft, *.th.officeapps.live.com, *.vhs.officeapps.live.com, *.view.officeapps.live.com, *.wopi.office.core.microsoft, *.wopi.online.office.net, *.word.cloud.microsoft, *.wshi.office.core.microsoft, *.wshi.online.office.net, df.excel.cloud.microsoft, df.onenote.cloud.microsoft, df.powerpoint.cloud.microsoft, df.visio.cloud.microsoft, df.word.cloud.microsoft, excel.cloud-dev.microsoft, excel.cloud.dev.microsoft, excel.cloud.microsoft, office.live.com, officeapps-df.live.com, officeapps.live.com, officeppe.live.com, onenote.cloud.dev.microsoft, onenote.cloud.microsoft, online.office.com, online.office365.com, powerpoint.cloud-dev.microsoft, powerpoint.cloud.dev.microsoft, powerpoint.cloud.microsoft, tr-ofc-atm.office.com, visio.cloud.dev.microsoft, visio.cloud.microsoft, word.cloud-dev.microsoft, word.cloud.dev.microsoft, word.cloud.microsoft
Subject: officeapps.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 10
SANs: *.excel.cloud.microsoft, *.office.core.microsoft, *.office.guest.usercontent.microsoft, *.office.live.com, *.office.svc.cloud.microsoft, *.officeapps-df.live.com, *.officeapps.live.com, *.online.office.com, *.online.office365.com, *.optin.online.office.com, *.powerpoint.cloud.microsoft, *.th.officeapps.live.com, *.vhs.officeapps.live.com, *.view.officeapps.live.com, *.wopi.office.core.microsoft, *.wopi.online.office.net, *.word.cloud.microsoft, *.wshi.office.core.microsoft, *.wshi.online.office.net, df.excel.cloud.microsoft, df.onenote.cloud.microsoft, df.powerpoint.cloud.microsoft, df.visio.cloud.microsoft, df.word.cloud.microsoft, excel.cloud-dev.microsoft, excel.cloud.dev.microsoft, excel.cloud.microsoft, office.live.com, officeapps-df.live.com, officeapps.live.com, officeppe.live.com, onenote.cloud.dev.microsoft, onenote.cloud.microsoft, online.office.com, online.office365.com, powerpoint.cloud-dev.microsoft, powerpoint.cloud.dev.microsoft, powerpoint.cloud.microsoft, tr-ofc-atm.office.com, visio.cloud.dev.microsoft, visio.cloud.microsoft, word.cloud-dev.microsoft, word.cloud.dev.microsoft, word.cloud.microsoft
Subject: officeapps.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 10
SANs: *.excel.cloud.microsoft, *.office.core.microsoft, *.office.guest.usercontent.microsoft, *.office.live.com, *.office.svc.cloud.microsoft, *.officeapps-df.live.com, *.officeapps.live.com, *.online.office.com, *.online.office365.com, *.optin.online.office.com, *.powerpoint.cloud.microsoft, *.th.officeapps.live.com, *.vhs.officeapps.live.com, *.view.officeapps.live.com, *.wopi.office.core.microsoft, *.wopi.online.office.net, *.word.cloud.microsoft, *.wshi.office.core.microsoft, *.wshi.online.office.net, df.excel.cloud.microsoft, df.onenote.cloud.microsoft, df.powerpoint.cloud.microsoft, df.visio.cloud.microsoft, df.word.cloud.microsoft, excel.cloud-dev.microsoft, excel.cloud.dev.microsoft, excel.cloud.microsoft, office.live.com, officeapps-df.live.com, officeapps.live.com, officeppe.live.com, onenote.cloud.dev.microsoft, onenote.cloud.microsoft, online.office.com, online.office365.com, powerpoint.cloud-dev.microsoft, powerpoint.cloud.dev.microsoft, powerpoint.cloud.microsoft, tr-ofc-atm.office.com, visio.cloud.dev.microsoft, visio.cloud.microsoft, word.cloud-dev.microsoft, word.cloud.dev.microsoft, word.cloud.microsoft
Subject: officeapps.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 10
SANs: *.excel.cloud.microsoft, *.office.core.microsoft, *.office.guest.usercontent.microsoft, *.office.live.com, *.office.svc.cloud.microsoft, *.officeapps-df.live.com, *.officeapps.live.com, *.online.office.com, *.online.office365.com, *.optin.online.office.com, *.powerpoint.cloud.microsoft, *.th.officeapps.live.com, *.vhs.officeapps.live.com, *.view.officeapps.live.com, *.wopi.office.core.microsoft, *.wopi.online.office.net, *.word.cloud.microsoft, *.wshi.office.core.microsoft, *.wshi.online.office.net, df.excel.cloud.microsoft, df.onenote.cloud.microsoft, df.powerpoint.cloud.microsoft, df.visio.cloud.microsoft, df.word.cloud.microsoft, excel.cloud-dev.microsoft, excel.cloud.dev.microsoft, excel.cloud.microsoft, office.live.com, officeapps-df.live.com, officeapps.live.com, officeppe.live.com, onenote.cloud.dev.microsoft, onenote.cloud.microsoft, online.office.com, online.office365.com, powerpoint.cloud-dev.microsoft, powerpoint.cloud.dev.microsoft, powerpoint.cloud.microsoft, tr-ofc-atm.office.com, visio.cloud.dev.microsoft, visio.cloud.microsoft, word.cloud-dev.microsoft, word.cloud.dev.microsoft, word.cloud.microsoft
Subject: officeapps.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 10
SANs: *.excel.cloud.microsoft, *.office.core.microsoft, *.office.guest.usercontent.microsoft, *.office.live.com, *.office.svc.cloud.microsoft, *.officeapps-df.live.com, *.officeapps.live.com, *.online.office.com, *.online.office365.com, *.optin.online.office.com, *.powerpoint.cloud.microsoft, *.th.officeapps.live.com, *.vhs.officeapps.live.com, *.view.officeapps.live.com, *.wopi.office.core.microsoft, *.wopi.online.office.net, *.word.cloud.microsoft, *.wshi.office.core.microsoft, *.wshi.online.office.net, df.excel.cloud.microsoft, df.onenote.cloud.microsoft, df.powerpoint.cloud.microsoft, df.visio.cloud.microsoft, df.word.cloud.microsoft, excel.cloud-dev.microsoft, excel.cloud.dev.microsoft, excel.cloud.microsoft, office.live.com, officeapps-df.live.com, officeapps.live.com, officeppe.live.com, onenote.cloud.dev.microsoft, onenote.cloud.microsoft, online.office.com, online.office365.com, powerpoint.cloud-dev.microsoft, powerpoint.cloud.dev.microsoft, powerpoint.cloud.microsoft, tr-ofc-atm.office.com, visio.cloud.dev.microsoft, visio.cloud.microsoft, word.cloud-dev.microsoft, word.cloud.dev.microsoft, word.cloud.microsoft
Subject: officeapps.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 10
SANs: *.excel.cloud.microsoft, *.office.core.microsoft, *.office.guest.usercontent.microsoft, *.office.live.com, *.office.svc.cloud.microsoft, *.officeapps-df.live.com, *.officeapps.live.com, *.online.office.com, *.online.office365.com, *.optin.online.office.com, *.powerpoint.cloud.microsoft, *.th.officeapps.live.com, *.vhs.officeapps.live.com, *.view.officeapps.live.com, *.wopi.office.core.microsoft, *.wopi.online.office.net, *.word.cloud.microsoft, *.wshi.office.core.microsoft, *.wshi.online.office.net, df.excel.cloud.microsoft, df.onenote.cloud.microsoft, df.powerpoint.cloud.microsoft, df.visio.cloud.microsoft, df.word.cloud.microsoft, excel.cloud-dev.microsoft, excel.cloud.dev.microsoft, excel.cloud.microsoft, office.live.com, officeapps-df.live.com, officeapps.live.com, officeppe.live.com, onenote.cloud.dev.microsoft, onenote.cloud.microsoft, online.office.com, online.office365.com, powerpoint.cloud-dev.microsoft, powerpoint.cloud.dev.microsoft, powerpoint.cloud.microsoft, tr-ofc-atm.office.com, visio.cloud.dev.microsoft, visio.cloud.microsoft, word.cloud-dev.microsoft, word.cloud.dev.microsoft, word.cloud.microsoft
Subject: officeapps.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 04
SANs: *.excel.cloud.microsoft, *.fp.measure.office.com, *.ocs.svc.cloud.microsoft, *.office.core.microsoft, *.office.guest.usercontent.microsoft, *.office.live.com, *.office.svc.cloud.microsoft, *.officeapps-df.live.com, *.officeapps.live.com, *.online.office.com, *.online.office365.com, *.optin.online.office.com, *.powerpoint.cloud.microsoft, *.th.officeapps.live.com, *.vhs.officeapps.live.com, *.view.officeapps.live.com, *.word.cloud.microsoft, office.live.com, officeapps-df.live.com, officeapps.live.com, officeppe.live.com, online.office.com, online.office365.com
Subject: officeapps.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 10
SANs: *.excel.cloud.microsoft, *.office.core.microsoft, *.office.guest.usercontent.microsoft, *.office.live.com, *.office.svc.cloud.microsoft, *.officeapps-df.live.com, *.officeapps.live.com, *.online.office.com, *.online.office365.com, *.optin.online.office.com, *.powerpoint.cloud.microsoft, *.th.officeapps.live.com, *.vhs.officeapps.live.com, *.view.officeapps.live.com, *.wopi.office.core.microsoft, *.wopi.online.office.net, *.word.cloud.microsoft, *.wshi.office.core.microsoft, *.wshi.online.office.net, df.excel.cloud.microsoft, df.onenote.cloud.microsoft, df.powerpoint.cloud.microsoft, df.visio.cloud.microsoft, df.word.cloud.microsoft, excel.cloud-dev.microsoft, excel.cloud.dev.microsoft, excel.cloud.microsoft, office.live.com, officeapps-df.live.com, officeapps.live.com, officeppe.live.com, onenote.cloud.dev.microsoft, onenote.cloud.microsoft, online.office.com, online.office365.com, powerpoint.cloud-dev.microsoft, powerpoint.cloud.dev.microsoft, powerpoint.cloud.microsoft, tr-ofc-atm.office.com, visio.cloud.dev.microsoft, visio.cloud.microsoft, word.cloud-dev.microsoft, word.cloud.dev.microsoft, word.cloud.microsoft
Subject: officeapps.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 10
SANs: *.excel.cloud.microsoft, *.office.core.microsoft, *.office.guest.usercontent.microsoft, *.office.live.com, *.office.svc.cloud.microsoft, *.officeapps-df.live.com, *.officeapps.live.com, *.online.office.com, *.online.office365.com, *.optin.online.office.com, *.powerpoint.cloud.microsoft, *.th.officeapps.live.com, *.vhs.officeapps.live.com, *.view.officeapps.live.com, *.wopi.office.core.microsoft, *.wopi.online.office.net, *.word.cloud.microsoft, *.wshi.office.core.microsoft, *.wshi.online.office.net, df.excel.cloud.microsoft, df.onenote.cloud.microsoft, df.powerpoint.cloud.microsoft, df.visio.cloud.microsoft, df.word.cloud.microsoft, excel.cloud-dev.microsoft, excel.cloud.dev.microsoft, excel.cloud.microsoft, office.live.com, officeapps-df.live.com, officeapps.live.com, officeppe.live.com, onenote.cloud.dev.microsoft, onenote.cloud.microsoft, online.office.com, online.office365.com, powerpoint.cloud-dev.microsoft, powerpoint.cloud.dev.microsoft, powerpoint.cloud.microsoft, tr-ofc-atm.office.com, visio.cloud.dev.microsoft, visio.cloud.microsoft, word.cloud-dev.microsoft, word.cloud.dev.microsoft, word.cloud.microsoft
Subject: officeapps.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 10
SANs: *.excel.cloud.microsoft, *.office.core.microsoft, *.office.guest.usercontent.microsoft, *.office.live.com, *.office.svc.cloud.microsoft, *.officeapps-df.live.com, *.officeapps.live.com, *.online.office.com, *.online.office365.com, *.optin.online.office.com, *.powerpoint.cloud.microsoft, *.th.officeapps.live.com, *.vhs.officeapps.live.com, *.view.officeapps.live.com, *.wopi.office.core.microsoft, *.wopi.online.office.net, *.word.cloud.microsoft, *.wshi.office.core.microsoft, *.wshi.online.office.net, df.excel.cloud.microsoft, df.onenote.cloud.microsoft, df.powerpoint.cloud.microsoft, df.visio.cloud.microsoft, df.word.cloud.microsoft, excel.cloud-dev.microsoft, excel.cloud.dev.microsoft, excel.cloud.microsoft, office.live.com, officeapps-df.live.com, officeapps.live.com, officeppe.live.com, onenote.cloud.dev.microsoft, onenote.cloud.microsoft, online.office.com, online.office365.com, powerpoint.cloud-dev.microsoft, powerpoint.cloud.dev.microsoft, powerpoint.cloud.microsoft, tr-ofc-atm.office.com, visio.cloud.dev.microsoft, visio.cloud.microsoft, word.cloud-dev.microsoft, word.cloud.dev.microsoft, word.cloud.microsoft
Subject: officeapps.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 10
SANs: *.excel.cloud.microsoft, *.office.core.microsoft, *.office.guest.usercontent.microsoft, *.office.live.com, *.office.svc.cloud.microsoft, *.officeapps-df.live.com, *.officeapps.live.com, *.online.office.com, *.online.office365.com, *.optin.online.office.com, *.powerpoint.cloud.microsoft, *.th.officeapps.live.com, *.vhs.officeapps.live.com, *.view.officeapps.live.com, *.wopi.office.core.microsoft, *.wopi.online.office.net, *.word.cloud.microsoft, *.wshi.office.core.microsoft, *.wshi.online.office.net, df.excel.cloud.microsoft, df.onenote.cloud.microsoft, df.powerpoint.cloud.microsoft, df.visio.cloud.microsoft, df.word.cloud.microsoft, excel.cloud-dev.microsoft, excel.cloud.dev.microsoft, excel.cloud.microsoft, office.live.com, officeapps-df.live.com, officeapps.live.com, officeppe.live.com, onenote.cloud.dev.microsoft, onenote.cloud.microsoft, online.office.com, online.office365.com, powerpoint.cloud-dev.microsoft, powerpoint.cloud.dev.microsoft, powerpoint.cloud.microsoft, tr-ofc-atm.office.com, visio.cloud.dev.microsoft, visio.cloud.microsoft, word.cloud-dev.microsoft, word.cloud.dev.microsoft, word.cloud.microsoft
Subject: officeapps.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 10
SANs: *.excel.cloud.microsoft, *.office.core.microsoft, *.office.guest.usercontent.microsoft, *.office.live.com, *.office.svc.cloud.microsoft, *.officeapps-df.live.com, *.officeapps.live.com, *.online.office.com, *.online.office365.com, *.optin.online.office.com, *.powerpoint.cloud.microsoft, *.th.officeapps.live.com, *.vhs.officeapps.live.com, *.view.officeapps.live.com, *.wopi.office.core.microsoft, *.wopi.online.office.net, *.word.cloud.microsoft, *.wshi.office.core.microsoft, *.wshi.online.office.net, df.excel.cloud.microsoft, df.onenote.cloud.microsoft, df.powerpoint.cloud.microsoft, df.visio.cloud.microsoft, df.word.cloud.microsoft, excel.cloud-dev.microsoft, excel.cloud.dev.microsoft, excel.cloud.microsoft, office.live.com, officeapps-df.live.com, officeapps.live.com, officeppe.live.com, onenote.cloud.dev.microsoft, onenote.cloud.microsoft, online.office.com, online.office365.com, powerpoint.cloud-dev.microsoft, powerpoint.cloud.dev.microsoft, powerpoint.cloud.microsoft, tr-ofc-atm.office.com, visio.cloud.dev.microsoft, visio.cloud.microsoft, word.cloud-dev.microsoft, word.cloud.dev.microsoft, word.cloud.microsoft
Subject: officeapps.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 10
SANs: *.excel.cloud.microsoft, *.office.core.microsoft, *.office.guest.usercontent.microsoft, *.office.live.com, *.office.svc.cloud.microsoft, *.officeapps-df.live.com, *.officeapps.live.com, *.online.office.com, *.online.office365.com, *.optin.online.office.com, *.powerpoint.cloud.microsoft, *.th.officeapps.live.com, *.vhs.officeapps.live.com, *.view.officeapps.live.com, *.wopi.office.core.microsoft, *.wopi.online.office.net, *.word.cloud.microsoft, *.wshi.office.core.microsoft, *.wshi.online.office.net, df.excel.cloud.microsoft, df.onenote.cloud.microsoft, df.powerpoint.cloud.microsoft, df.visio.cloud.microsoft, df.word.cloud.microsoft, excel.cloud-dev.microsoft, excel.cloud.dev.microsoft, excel.cloud.microsoft, office.live.com, officeapps-df.live.com, officeapps.live.com, officeppe.live.com, onenote.cloud.dev.microsoft, onenote.cloud.microsoft, online.office.com, online.office365.com, powerpoint.cloud-dev.microsoft, powerpoint.cloud.dev.microsoft, powerpoint.cloud.microsoft, tr-ofc-atm.office.com, visio.cloud.dev.microsoft, visio.cloud.microsoft, word.cloud-dev.microsoft, word.cloud.dev.microsoft, word.cloud.microsoft
Subject: officeapps.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 10
SANs: *.fp.measure.office.com, *.gcc.office.live.com, *.gcc.officeapps.live.com, *.gcc.online.office.com, *.office.live.com, *.officeapps-df.live.com, *.officeapps.live.com, *.online.office.com, *.online.office365.com, *.optin.online.office.com, *.th.officeapps.live.com, *.vhs.gcc.officeapps.live.com, *.vhs.officeapps.live.com, *.view.officeapps.live.com, gb1-view-wopi.wopi.online.office.net, gb1-wacth-wshi.wshi.online.office.net, gb4-view-wopi.wopi.online.office.net, gb4-wacth-wshi.wshi.online.office.net, gb5-view-wopi.wopi.online.office.net, gb5-wacth-wshi.wshi.online.office.net, office.live.com, officeapps-df.live.com, officeapps.live.com, officeppe.live.com, online.office.com, online.office365.com
Subject: officeapps.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 10
SANs: *.excel.cloud.microsoft, *.office.core.microsoft, *.office.guest.usercontent.microsoft, *.office.live.com, *.office.svc.cloud.microsoft, *.officeapps-df.live.com, *.officeapps.live.com, *.online.office.com, *.online.office365.com, *.optin.online.office.com, *.powerpoint.cloud.microsoft, *.th.officeapps.live.com, *.vhs.officeapps.live.com, *.view.officeapps.live.com, *.wopi.office.core.microsoft, *.wopi.online.office.net, *.word.cloud.microsoft, *.wshi.office.core.microsoft, *.wshi.online.office.net, df.excel.cloud.microsoft, df.onenote.cloud.microsoft, df.powerpoint.cloud.microsoft, df.visio.cloud.microsoft, df.word.cloud.microsoft, excel.cloud-dev.microsoft, excel.cloud.dev.microsoft, excel.cloud.microsoft, office.live.com, officeapps-df.live.com, officeapps.live.com, officeppe.live.com, onenote.cloud.dev.microsoft, onenote.cloud.microsoft, online.office.com, online.office365.com, powerpoint.cloud-dev.microsoft, powerpoint.cloud.dev.microsoft, powerpoint.cloud.microsoft, tr-ofc-atm.office.com, visio.cloud.dev.microsoft, visio.cloud.microsoft, word.cloud-dev.microsoft, word.cloud.dev.microsoft, word.cloud.microsoft
Subject: officeapps.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 10
SANs: *.excel.cloud.microsoft, *.office.core.microsoft, *.office.guest.usercontent.microsoft, *.office.live.com, *.office.svc.cloud.microsoft, *.officeapps-df.live.com, *.officeapps.live.com, *.online.office.com, *.online.office365.com, *.optin.online.office.com, *.powerpoint.cloud.microsoft, *.th.officeapps.live.com, *.vhs.officeapps.live.com, *.view.officeapps.live.com, *.wopi.office.core.microsoft, *.wopi.online.office.net, *.word.cloud.microsoft, *.wshi.office.core.microsoft, *.wshi.online.office.net, df.excel.cloud.microsoft, df.onenote.cloud.microsoft, df.powerpoint.cloud.microsoft, df.visio.cloud.microsoft, df.word.cloud.microsoft, excel.cloud-dev.microsoft, excel.cloud.dev.microsoft, excel.cloud.microsoft, office.live.com, officeapps-df.live.com, officeapps.live.com, officeppe.live.com, onenote.cloud.dev.microsoft, onenote.cloud.microsoft, online.office.com, online.office365.com, powerpoint.cloud-dev.microsoft, powerpoint.cloud.dev.microsoft, powerpoint.cloud.microsoft, tr-ofc-atm.office.com, visio.cloud.dev.microsoft, visio.cloud.microsoft, word.cloud-dev.microsoft, word.cloud.dev.microsoft, word.cloud.microsoft
Subject: officeapps.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 10
SANs: *.excel.cloud.microsoft, *.office.core.microsoft, *.office.guest.usercontent.microsoft, *.office.live.com, *.office.svc.cloud.microsoft, *.officeapps-df.live.com, *.officeapps.live.com, *.online.office.com, *.online.office365.com, *.optin.online.office.com, *.powerpoint.cloud.microsoft, *.th.officeapps.live.com, *.vhs.officeapps.live.com, *.view.officeapps.live.com, *.wopi.office.core.microsoft, *.wopi.online.office.net, *.word.cloud.microsoft, *.wshi.office.core.microsoft, *.wshi.online.office.net, df.excel.cloud.microsoft, df.onenote.cloud.microsoft, df.powerpoint.cloud.microsoft, df.visio.cloud.microsoft, df.word.cloud.microsoft, excel.cloud-dev.microsoft, excel.cloud.dev.microsoft, excel.cloud.microsoft, office.live.com, officeapps-df.live.com, officeapps.live.com, officeppe.live.com, onenote.cloud.dev.microsoft, onenote.cloud.microsoft, online.office.com, online.office365.com, powerpoint.cloud-dev.microsoft, powerpoint.cloud.dev.microsoft, powerpoint.cloud.microsoft, tr-ofc-atm.office.com, visio.cloud.dev.microsoft, visio.cloud.microsoft, word.cloud-dev.microsoft, word.cloud.dev.microsoft, word.cloud.microsoft
Subject: officeapps.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 10
SANs: *.excel.cloud.microsoft, *.office.core.microsoft, *.office.guest.usercontent.microsoft, *.office.live.com, *.office.svc.cloud.microsoft, *.officeapps-df.live.com, *.officeapps.live.com, *.online.office.com, *.online.office365.com, *.optin.online.office.com, *.powerpoint.cloud.microsoft, *.th.officeapps.live.com, *.vhs.officeapps.live.com, *.view.officeapps.live.com, *.wopi.office.core.microsoft, *.wopi.online.office.net, *.word.cloud.microsoft, *.wshi.office.core.microsoft, *.wshi.online.office.net, df.excel.cloud.microsoft, df.onenote.cloud.microsoft, df.powerpoint.cloud.microsoft, df.visio.cloud.microsoft, df.word.cloud.microsoft, excel.cloud-dev.microsoft, excel.cloud.dev.microsoft, excel.cloud.microsoft, office.live.com, officeapps-df.live.com, officeapps.live.com, officeppe.live.com, onenote.cloud.dev.microsoft, onenote.cloud.microsoft, online.office.com, online.office365.com, powerpoint.cloud-dev.microsoft, powerpoint.cloud.dev.microsoft, powerpoint.cloud.microsoft, tr-ofc-atm.office.com, visio.cloud.dev.microsoft, visio.cloud.microsoft, word.cloud-dev.microsoft, word.cloud.dev.microsoft, word.cloud.microsoft
Subject: officeapps.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 10
SANs: *.excel.cloud.microsoft, *.office.core.microsoft, *.office.guest.usercontent.microsoft, *.office.live.com, *.office.svc.cloud.microsoft, *.officeapps-df.live.com, *.officeapps.live.com, *.online.office.com, *.online.office365.com, *.optin.online.office.com, *.powerpoint.cloud.microsoft, *.th.officeapps.live.com, *.vhs.officeapps.live.com, *.view.officeapps.live.com, *.wopi.office.core.microsoft, *.wopi.online.office.net, *.word.cloud.microsoft, *.wshi.office.core.microsoft, *.wshi.online.office.net, df.excel.cloud.microsoft, df.onenote.cloud.microsoft, df.powerpoint.cloud.microsoft, df.visio.cloud.microsoft, df.word.cloud.microsoft, excel.cloud-dev.microsoft, excel.cloud.dev.microsoft, excel.cloud.microsoft, office.live.com, officeapps-df.live.com, officeapps.live.com, officeppe.live.com, onenote.cloud.dev.microsoft, onenote.cloud.microsoft, online.office.com, online.office365.com, powerpoint.cloud-dev.microsoft, powerpoint.cloud.dev.microsoft, powerpoint.cloud.microsoft, tr-ofc-atm.office.com, visio.cloud.dev.microsoft, visio.cloud.microsoft, word.cloud-dev.microsoft, word.cloud.dev.microsoft, word.cloud.microsoft
Subject: officeapps.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 10
SANs: *.excel.cloud.microsoft, *.office.core.microsoft, *.office.guest.usercontent.microsoft, *.office.live.com, *.office.svc.cloud.microsoft, *.officeapps-df.live.com, *.officeapps.live.com, *.online.office.com, *.online.office365.com, *.optin.online.office.com, *.powerpoint.cloud.microsoft, *.th.officeapps.live.com, *.vhs.officeapps.live.com, *.view.officeapps.live.com, *.wopi.office.core.microsoft, *.wopi.online.office.net, *.word.cloud.microsoft, *.wshi.office.core.microsoft, *.wshi.online.office.net, df.excel.cloud.microsoft, df.onenote.cloud.microsoft, df.powerpoint.cloud.microsoft, df.visio.cloud.microsoft, df.word.cloud.microsoft, excel.cloud-dev.microsoft, excel.cloud.dev.microsoft, excel.cloud.microsoft, office.live.com, officeapps-df.live.com, officeapps.live.com, officeppe.live.com, onenote.cloud.dev.microsoft, onenote.cloud.microsoft, online.office.com, online.office365.com, powerpoint.cloud-dev.microsoft, powerpoint.cloud.dev.microsoft, powerpoint.cloud.microsoft, tr-ofc-atm.office.com, visio.cloud.dev.microsoft, visio.cloud.microsoft, word.cloud-dev.microsoft, word.cloud.dev.microsoft, word.cloud.microsoft
Subject: officeapps.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 10
SANs: *.excel.cloud.microsoft, *.office.core.microsoft, *.office.guest.usercontent.microsoft, *.office.live.com, *.office.svc.cloud.microsoft, *.officeapps-df.live.com, *.officeapps.live.com, *.online.office.com, *.online.office365.com, *.optin.online.office.com, *.powerpoint.cloud.microsoft, *.th.officeapps.live.com, *.vhs.officeapps.live.com, *.view.officeapps.live.com, *.wopi.office.core.microsoft, *.wopi.online.office.net, *.word.cloud.microsoft, *.wshi.office.core.microsoft, *.wshi.online.office.net, df.excel.cloud.microsoft, df.onenote.cloud.microsoft, df.powerpoint.cloud.microsoft, df.visio.cloud.microsoft, df.word.cloud.microsoft, excel.cloud-dev.microsoft, excel.cloud.dev.microsoft, excel.cloud.microsoft, office.live.com, officeapps-df.live.com, officeapps.live.com, officeppe.live.com, onenote.cloud.dev.microsoft, onenote.cloud.microsoft, online.office.com, online.office365.com, powerpoint.cloud-dev.microsoft, powerpoint.cloud.dev.microsoft, powerpoint.cloud.microsoft, tr-ofc-atm.office.com, visio.cloud.dev.microsoft, visio.cloud.microsoft, word.cloud-dev.microsoft, word.cloud.dev.microsoft, word.cloud.microsoft
Subject: officeapps.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 10
SANs: *.excel.cloud.microsoft, *.office.core.microsoft, *.office.guest.usercontent.microsoft, *.office.live.com, *.office.svc.cloud.microsoft, *.officeapps-df.live.com, *.officeapps.live.com, *.online.office.com, *.online.office365.com, *.optin.online.office.com, *.powerpoint.cloud.microsoft, *.th.officeapps.live.com, *.vhs.officeapps.live.com, *.view.officeapps.live.com, *.wopi.office.core.microsoft, *.wopi.online.office.net, *.word.cloud.microsoft, *.wshi.office.core.microsoft, *.wshi.online.office.net, df.excel.cloud.microsoft, df.onenote.cloud.microsoft, df.powerpoint.cloud.microsoft, df.visio.cloud.microsoft, df.word.cloud.microsoft, excel.cloud-dev.microsoft, excel.cloud.dev.microsoft, excel.cloud.microsoft, office.live.com, officeapps-df.live.com, officeapps.live.com, officeppe.live.com, onenote.cloud.dev.microsoft, onenote.cloud.microsoft, online.office.com, online.office365.com, powerpoint.cloud-dev.microsoft, powerpoint.cloud.dev.microsoft, powerpoint.cloud.microsoft, tr-ofc-atm.office.com, visio.cloud.dev.microsoft, visio.cloud.microsoft, word.cloud-dev.microsoft, word.cloud.dev.microsoft, word.cloud.microsoft
Subject: officeapps.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 10
SANs: *.excel.cloud.microsoft, *.office.core.microsoft, *.office.guest.usercontent.microsoft, *.office.live.com, *.office.svc.cloud.microsoft, *.officeapps-df.live.com, *.officeapps.live.com, *.online.office.com, *.online.office365.com, *.optin.online.office.com, *.powerpoint.cloud.microsoft, *.th.officeapps.live.com, *.vhs.officeapps.live.com, *.view.officeapps.live.com, *.wopi.office.core.microsoft, *.wopi.online.office.net, *.word.cloud.microsoft, *.wshi.office.core.microsoft, *.wshi.online.office.net, df.excel.cloud.microsoft, df.onenote.cloud.microsoft, df.powerpoint.cloud.microsoft, df.visio.cloud.microsoft, df.word.cloud.microsoft, excel.cloud-dev.microsoft, excel.cloud.dev.microsoft, excel.cloud.microsoft, office.live.com, officeapps-df.live.com, officeapps.live.com, officeppe.live.com, onenote.cloud.dev.microsoft, onenote.cloud.microsoft, online.office.com, online.office365.com, powerpoint.cloud-dev.microsoft, powerpoint.cloud.dev.microsoft, powerpoint.cloud.microsoft, tr-ofc-atm.office.com, visio.cloud.dev.microsoft, visio.cloud.microsoft, word.cloud-dev.microsoft, word.cloud.dev.microsoft, word.cloud.microsoft
Subject: officeapps.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 04
SANs: *.excel.cloud.microsoft, *.fp.measure.office.com, *.ocs.svc.cloud.microsoft, *.office.core.microsoft, *.office.guest.usercontent.microsoft, *.office.live.com, *.office.svc.cloud.microsoft, *.officeapps-df.live.com, *.officeapps.live.com, *.online.office.com, *.online.office365.com, *.optin.online.office.com, *.powerpoint.cloud.microsoft, *.th.officeapps.live.com, *.vhs.officeapps.live.com, *.view.officeapps.live.com, *.word.cloud.microsoft, office.live.com, officeapps-df.live.com, officeapps.live.com, officeppe.live.com, online.office.com, online.office365.com
Subject: officeapps.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 10
SANs: *.excel.cloud.microsoft, *.office.core.microsoft, *.office.guest.usercontent.microsoft, *.office.live.com, *.office.svc.cloud.microsoft, *.officeapps-df.live.com, *.officeapps.live.com, *.online.office.com, *.online.office365.com, *.optin.online.office.com, *.powerpoint.cloud.microsoft, *.th.officeapps.live.com, *.vhs.officeapps.live.com, *.view.officeapps.live.com, *.wopi.office.core.microsoft, *.wopi.online.office.net, *.word.cloud.microsoft, *.wshi.office.core.microsoft, *.wshi.online.office.net, df.excel.cloud.microsoft, df.onenote.cloud.microsoft, df.powerpoint.cloud.microsoft, df.visio.cloud.microsoft, df.word.cloud.microsoft, excel.cloud-dev.microsoft, excel.cloud.dev.microsoft, excel.cloud.microsoft, office.live.com, officeapps-df.live.com, officeapps.live.com, officeppe.live.com, onenote.cloud.dev.microsoft, onenote.cloud.microsoft, online.office.com, online.office365.com, powerpoint.cloud-dev.microsoft, powerpoint.cloud.dev.microsoft, powerpoint.cloud.microsoft, tr-ofc-atm.office.com, visio.cloud.dev.microsoft, visio.cloud.microsoft, word.cloud-dev.microsoft, word.cloud.dev.microsoft, word.cloud.microsoft
Subject: officeapps.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 10
SANs: *.excel.cloud.microsoft, *.office.core.microsoft, *.office.guest.usercontent.microsoft, *.office.live.com, *.office.svc.cloud.microsoft, *.officeapps-df.live.com, *.officeapps.live.com, *.online.office.com, *.online.office365.com, *.optin.online.office.com, *.powerpoint.cloud.microsoft, *.th.officeapps.live.com, *.vhs.officeapps.live.com, *.view.officeapps.live.com, *.wopi.office.core.microsoft, *.wopi.online.office.net, *.word.cloud.microsoft, *.wshi.office.core.microsoft, *.wshi.online.office.net, df.excel.cloud.microsoft, df.onenote.cloud.microsoft, df.powerpoint.cloud.microsoft, df.visio.cloud.microsoft, df.word.cloud.microsoft, excel.cloud-dev.microsoft, excel.cloud.dev.microsoft, excel.cloud.microsoft, office.live.com, officeapps-df.live.com, officeapps.live.com, officeppe.live.com, onenote.cloud.dev.microsoft, onenote.cloud.microsoft, online.office.com, online.office365.com, powerpoint.cloud-dev.microsoft, powerpoint.cloud.dev.microsoft, powerpoint.cloud.microsoft, tr-ofc-atm.office.com, visio.cloud.dev.microsoft, visio.cloud.microsoft, word.cloud-dev.microsoft, word.cloud.dev.microsoft, word.cloud.microsoft
IPs Citing This Domain
No citing IPs found yet
As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.
Origin / IP-Leak
USP
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
No origin-IP leaks detected (yet)
Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.
CT-Log Evidence
Certificates from public Certificate Transparency logs whose subject or SAN names this domain — including historic certs we never observed live.
84c698c64a01e361…
google · xenon2026h2
Subject: officeapps.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 16
SANs: officeapps.live.com, officeppe.live.com, *.office.live.com, office.live.com, *.officeapps.live.com, officeapps-df.live.com, *.officeapps-df.live.com, *.online.office.com, *.online.office365.com, online.office.com, online.office365.com, *.fp.measure.office.com, *.th.officeapps.live.com, *.vhs.officeapps.live.com, *.view.officeapps.live.com, *.optin.online.office.com, tr-ofc-atm.office.com, excel.cloud.microsoft, word.cloud-dev.microsoft, powerpoint.cloud-dev.microsoft, word.cloud.microsoft, powerpoint.cloud.microsoft, excel.cloud-dev.microsoft, df.excel.cloud.microsoft, df.word.cloud.microsoft, df.powerpoint.cloud.microsoft, *.wopi.online.office.net, *.wshi.online.office.net, df.onenote.cloud.microsoft, word.cloud.dev.microsoft, powerpoint.cloud.dev.microsoft, excel.cloud.dev.microsoft, onenote.cloud.microsoft, onenote.cloud.dev.microsoft, df.visio.cloud.microsoft, visio.cloud.dev.microsoft, visio.cloud.microsoft
Valid: 2026-03-26 17:16:00 → 2026-09-22 17:16:00
bb386b13bec95bff…
google · xenon2026h2
Subject: officeapps.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 04
SANs: officeapps.live.com, officeppe.live.com, *.office.live.com, office.live.com, *.officeapps.live.com, officeapps-df.live.com, *.officeapps-df.live.com, *.online.office.com, *.online.office365.com, online.office.com, online.office365.com, *.fp.measure.office.com, *.th.officeapps.live.com, *.vhs.officeapps.live.com, *.view.officeapps.live.com, *.optin.online.office.com, tr-ofc-atm.office.com, excel.cloud.microsoft, word.cloud-dev.microsoft, powerpoint.cloud-dev.microsoft, word.cloud.microsoft, powerpoint.cloud.microsoft, excel.cloud-dev.microsoft, df.excel.cloud.microsoft, df.word.cloud.microsoft, df.powerpoint.cloud.microsoft, *.wopi.online.office.net, *.wshi.online.office.net, df.onenote.cloud.microsoft, word.cloud.dev.microsoft, powerpoint.cloud.dev.microsoft, excel.cloud.dev.microsoft, onenote.cloud.microsoft, onenote.cloud.dev.microsoft, df.visio.cloud.microsoft, visio.cloud.dev.microsoft, visio.cloud.microsoft
Valid: 2026-03-26 11:26:51 → 2026-09-22 11:26:51
4c72d0887acd4c0e…
google · xenon2026h2
Subject: officeapps.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 04
SANs: officeapps.live.com, officeppe.live.com, *.office.live.com, office.live.com, *.officeapps.live.com, officeapps-df.live.com, *.officeapps-df.live.com, *.online.office.com, *.online.office365.com, online.office.com, online.office365.com, *.fp.measure.office.com, *.th.officeapps.live.com, *.vhs.officeapps.live.com, *.view.officeapps.live.com, *.optin.online.office.com, tr-ofc-atm.office.com, excel.cloud.microsoft, word.cloud-dev.microsoft, powerpoint.cloud-dev.microsoft, word.cloud.microsoft, powerpoint.cloud.microsoft, excel.cloud-dev.microsoft, df.excel.cloud.microsoft, df.word.cloud.microsoft, df.powerpoint.cloud.microsoft, *.wopi.online.office.net, *.wshi.online.office.net, df.onenote.cloud.microsoft, word.cloud.dev.microsoft, powerpoint.cloud.dev.microsoft, excel.cloud.dev.microsoft, onenote.cloud.microsoft, onenote.cloud.dev.microsoft, df.visio.cloud.microsoft, visio.cloud.dev.microsoft, visio.cloud.microsoft
Valid: 2026-03-26 10:39:28 → 2026-09-22 10:39:28
459bbed1c1d1ad6e…
google · xenon2026h2
Subject: officeapps.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 16
SANs: officeapps.live.com, officeppe.live.com, *.office.live.com, office.live.com, *.officeapps.live.com, officeapps-df.live.com, *.officeapps-df.live.com, *.online.office.com, *.online.office365.com, online.office.com, online.office365.com, *.fp.measure.office.com, *.th.officeapps.live.com, *.vhs.officeapps.live.com, *.view.officeapps.live.com, *.optin.online.office.com, tr-ofc-atm.office.com, excel.cloud.microsoft, word.cloud-dev.microsoft, powerpoint.cloud-dev.microsoft, word.cloud.microsoft, powerpoint.cloud.microsoft, excel.cloud-dev.microsoft, df.excel.cloud.microsoft, df.word.cloud.microsoft, df.powerpoint.cloud.microsoft, *.wopi.online.office.net, *.wshi.online.office.net, df.onenote.cloud.microsoft, word.cloud.dev.microsoft, powerpoint.cloud.dev.microsoft, excel.cloud.dev.microsoft, onenote.cloud.microsoft, onenote.cloud.dev.microsoft, df.visio.cloud.microsoft, visio.cloud.dev.microsoft, visio.cloud.microsoft
Valid: 2026-03-22 20:16:23 → 2026-09-18 20:16:23
efb4566ae65266e4…
google · xenon2026h2
Subject: officeapps.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 02
SANs: officeapps.live.com, officeppe.live.com, *.office.live.com, office.live.com, *.officeapps.live.com, officeapps-df.live.com, *.officeapps-df.live.com, *.online.office.com, *.online.office365.com, online.office.com, online.office365.com, *.fp.measure.office.com, *.th.officeapps.live.com, *.vhs.officeapps.live.com, *.view.officeapps.live.com, *.optin.online.office.com, tr-ofc-atm.office.com, excel.cloud.microsoft, word.cloud-dev.microsoft, powerpoint.cloud-dev.microsoft, word.cloud.microsoft, powerpoint.cloud.microsoft, excel.cloud-dev.microsoft, df.excel.cloud.microsoft, df.word.cloud.microsoft, df.powerpoint.cloud.microsoft, *.wopi.online.office.net, *.wshi.online.office.net, df.onenote.cloud.microsoft, word.cloud.dev.microsoft, powerpoint.cloud.dev.microsoft, excel.cloud.dev.microsoft, onenote.cloud.microsoft, onenote.cloud.dev.microsoft, df.visio.cloud.microsoft, visio.cloud.dev.microsoft, visio.cloud.microsoft
Valid: 2026-03-22 19:23:42 → 2026-09-18 19:23:42
53c9daec541f4cfa…
google · xenon2026h2
Subject: officeapps.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 16
SANs: officeapps.live.com, officeppe.live.com, *.office.live.com, office.live.com, *.officeapps.live.com, officeapps-df.live.com, *.officeapps-df.live.com, *.online.office.com, *.online.office365.com, online.office.com, online.office365.com, *.fp.measure.office.com, *.th.officeapps.live.com, *.vhs.officeapps.live.com, *.view.officeapps.live.com, *.optin.online.office.com, tr-ofc-atm.office.com, excel.cloud.microsoft, word.cloud-dev.microsoft, powerpoint.cloud-dev.microsoft, word.cloud.microsoft, powerpoint.cloud.microsoft, excel.cloud-dev.microsoft, df.excel.cloud.microsoft, df.word.cloud.microsoft, df.powerpoint.cloud.microsoft, *.wopi.online.office.net, *.wshi.online.office.net, df.onenote.cloud.microsoft, word.cloud.dev.microsoft, powerpoint.cloud.dev.microsoft, excel.cloud.dev.microsoft, onenote.cloud.microsoft, onenote.cloud.dev.microsoft, df.visio.cloud.microsoft, visio.cloud.dev.microsoft, visio.cloud.microsoft
Valid: 2026-03-22 18:24:06 → 2026-09-18 18:24:06
e0e249c24bcf6214…
google · xenon2026h2
Subject: officeapps.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 04
SANs: officeapps.live.com, officeppe.live.com, *.office.live.com, office.live.com, *.officeapps.live.com, officeapps-df.live.com, *.officeapps-df.live.com, *.online.office.com, *.online.office365.com, online.office.com, online.office365.com, *.fp.measure.office.com, *.th.officeapps.live.com, *.vhs.officeapps.live.com, *.view.officeapps.live.com, *.optin.online.office.com, tr-ofc-atm.office.com, excel.cloud.microsoft, word.cloud-dev.microsoft, powerpoint.cloud-dev.microsoft, word.cloud.microsoft, powerpoint.cloud.microsoft, excel.cloud-dev.microsoft, df.excel.cloud.microsoft, df.word.cloud.microsoft, df.powerpoint.cloud.microsoft, *.wopi.online.office.net, *.wshi.online.office.net, df.onenote.cloud.microsoft, word.cloud.dev.microsoft, powerpoint.cloud.dev.microsoft, excel.cloud.dev.microsoft, onenote.cloud.microsoft, onenote.cloud.dev.microsoft, df.visio.cloud.microsoft, visio.cloud.dev.microsoft, visio.cloud.microsoft
Valid: 2026-03-22 18:07:08 → 2026-09-18 18:07:08
3b093b84e5e4a441…
google · xenon2026h2
Subject: officeapps.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 02
SANs: officeapps.live.com, officeppe.live.com, *.office.live.com, office.live.com, *.officeapps.live.com, officeapps-df.live.com, *.officeapps-df.live.com, *.online.office.com, *.online.office365.com, online.office.com, online.office365.com, *.fp.measure.office.com, *.th.officeapps.live.com, *.vhs.officeapps.live.com, *.view.officeapps.live.com, *.optin.online.office.com, tr-ofc-atm.office.com, excel.cloud.microsoft, word.cloud-dev.microsoft, powerpoint.cloud-dev.microsoft, word.cloud.microsoft, powerpoint.cloud.microsoft, excel.cloud-dev.microsoft, df.excel.cloud.microsoft, df.word.cloud.microsoft, df.powerpoint.cloud.microsoft, *.wopi.online.office.net, *.wshi.online.office.net, df.onenote.cloud.microsoft, word.cloud.dev.microsoft, powerpoint.cloud.dev.microsoft, excel.cloud.dev.microsoft, onenote.cloud.microsoft, onenote.cloud.dev.microsoft, df.visio.cloud.microsoft, visio.cloud.dev.microsoft, visio.cloud.microsoft
Valid: 2026-03-22 17:43:53 → 2026-09-18 17:43:53
28812a03d4047226…
google · xenon2026h2
Subject: officeapps.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 16
SANs: officeapps.live.com, officeppe.live.com, *.office.live.com, office.live.com, *.officeapps.live.com, officeapps-df.live.com, *.officeapps-df.live.com, *.online.office.com, *.online.office365.com, online.office.com, online.office365.com, *.fp.measure.office.com, *.th.officeapps.live.com, *.vhs.officeapps.live.com, *.view.officeapps.live.com, *.optin.online.office.com, tr-ofc-atm.office.com, excel.cloud.microsoft, word.cloud-dev.microsoft, powerpoint.cloud-dev.microsoft, word.cloud.microsoft, powerpoint.cloud.microsoft, excel.cloud-dev.microsoft, df.excel.cloud.microsoft, df.word.cloud.microsoft, df.powerpoint.cloud.microsoft, *.wopi.online.office.net, *.wshi.online.office.net, df.onenote.cloud.microsoft, word.cloud.dev.microsoft, powerpoint.cloud.dev.microsoft, excel.cloud.dev.microsoft, onenote.cloud.microsoft, onenote.cloud.dev.microsoft, df.visio.cloud.microsoft, visio.cloud.dev.microsoft, visio.cloud.microsoft
Valid: 2026-03-22 11:25:48 → 2026-09-18 11:25:48
849c401b6d89a17f…
google · xenon2026h2
Subject: officeapps.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 04
SANs: officeapps.live.com, officeppe.live.com, *.office.live.com, office.live.com, *.officeapps.live.com, officeapps-df.live.com, *.officeapps-df.live.com, *.online.office.com, *.online.office365.com, online.office.com, online.office365.com, *.fp.measure.office.com, *.th.officeapps.live.com, *.vhs.officeapps.live.com, *.view.officeapps.live.com, *.optin.online.office.com, tr-ofc-atm.office.com, excel.cloud.microsoft, word.cloud-dev.microsoft, powerpoint.cloud-dev.microsoft, word.cloud.microsoft, powerpoint.cloud.microsoft, excel.cloud-dev.microsoft, df.excel.cloud.microsoft, df.word.cloud.microsoft, df.powerpoint.cloud.microsoft, *.wopi.online.office.net, *.wshi.online.office.net, df.onenote.cloud.microsoft, word.cloud.dev.microsoft, powerpoint.cloud.dev.microsoft, excel.cloud.dev.microsoft, onenote.cloud.microsoft, onenote.cloud.dev.microsoft, df.visio.cloud.microsoft, visio.cloud.dev.microsoft, visio.cloud.microsoft
Valid: 2026-03-22 10:38:19 → 2026-09-18 10:38:19
50d85d8a434426a6…
google · xenon2026h2
Subject: officeapps.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 16
SANs: officeapps.live.com, officeppe.live.com, *.office.live.com, office.live.com, *.officeapps.live.com, officeapps-df.live.com, *.officeapps-df.live.com, *.online.office.com, *.online.office365.com, online.office.com, online.office365.com, *.fp.measure.office.com, *.th.officeapps.live.com, *.vhs.officeapps.live.com, *.view.officeapps.live.com, *.optin.online.office.com, tr-ofc-atm.office.com, excel.cloud.microsoft, word.cloud-dev.microsoft, powerpoint.cloud-dev.microsoft, word.cloud.microsoft, powerpoint.cloud.microsoft, excel.cloud-dev.microsoft, df.excel.cloud.microsoft, df.word.cloud.microsoft, df.powerpoint.cloud.microsoft, *.wopi.online.office.net, *.wshi.online.office.net, df.onenote.cloud.microsoft, word.cloud.dev.microsoft, powerpoint.cloud.dev.microsoft, excel.cloud.dev.microsoft, onenote.cloud.microsoft, onenote.cloud.dev.microsoft, df.visio.cloud.microsoft, visio.cloud.dev.microsoft, visio.cloud.microsoft
Valid: 2026-03-21 21:29:40 → 2026-09-17 21:29:40
a4187e98c545da50…
google · xenon2026h2
Subject: officeapps.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 16
SANs: officeapps.live.com, officeppe.live.com, *.office.live.com, office.live.com, *.officeapps.live.com, officeapps-df.live.com, *.officeapps-df.live.com, *.online.office.com, *.online.office365.com, online.office.com, online.office365.com, *.fp.measure.office.com, *.th.officeapps.live.com, *.vhs.officeapps.live.com, *.view.officeapps.live.com, *.optin.online.office.com, tr-ofc-atm.office.com, excel.cloud.microsoft, word.cloud-dev.microsoft, powerpoint.cloud-dev.microsoft, word.cloud.microsoft, powerpoint.cloud.microsoft, excel.cloud-dev.microsoft, df.excel.cloud.microsoft, df.word.cloud.microsoft, df.powerpoint.cloud.microsoft, *.wopi.online.office.net, *.wshi.online.office.net, df.onenote.cloud.microsoft, word.cloud.dev.microsoft, powerpoint.cloud.dev.microsoft, excel.cloud.dev.microsoft, onenote.cloud.microsoft, onenote.cloud.dev.microsoft, df.visio.cloud.microsoft, visio.cloud.dev.microsoft, visio.cloud.microsoft
Valid: 2026-03-21 21:14:31 → 2026-09-17 21:14:31
eec5a4aff20c78e3…
google · xenon2026h2
Subject: officeapps.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 04
SANs: officeapps.live.com, officeppe.live.com, *.office.live.com, office.live.com, *.officeapps.live.com, officeapps-df.live.com, *.officeapps-df.live.com, *.online.office.com, *.online.office365.com, online.office.com, online.office365.com, *.fp.measure.office.com, *.th.officeapps.live.com, *.vhs.officeapps.live.com, *.view.officeapps.live.com, *.optin.online.office.com, tr-ofc-atm.office.com, excel.cloud.microsoft, word.cloud-dev.microsoft, powerpoint.cloud-dev.microsoft, word.cloud.microsoft, powerpoint.cloud.microsoft, excel.cloud-dev.microsoft, df.excel.cloud.microsoft, df.word.cloud.microsoft, df.powerpoint.cloud.microsoft, *.wopi.online.office.net, *.wshi.online.office.net, df.onenote.cloud.microsoft, word.cloud.dev.microsoft, powerpoint.cloud.dev.microsoft, excel.cloud.dev.microsoft, onenote.cloud.microsoft, onenote.cloud.dev.microsoft, df.visio.cloud.microsoft, visio.cloud.dev.microsoft, visio.cloud.microsoft
Valid: 2026-03-21 20:55:06 → 2026-09-17 20:55:06
3eae193643446672…
google · xenon2026h2
Subject: officeapps.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 16
SANs: officeapps.live.com, officeppe.live.com, *.office.live.com, office.live.com, *.officeapps.live.com, officeapps-df.live.com, *.officeapps-df.live.com, *.online.office.com, *.online.office365.com, online.office.com, online.office365.com, *.fp.measure.office.com, *.th.officeapps.live.com, *.vhs.officeapps.live.com, *.view.officeapps.live.com, *.optin.online.office.com, tr-ofc-atm.office.com, excel.cloud.microsoft, word.cloud-dev.microsoft, powerpoint.cloud-dev.microsoft, word.cloud.microsoft, powerpoint.cloud.microsoft, excel.cloud-dev.microsoft, df.excel.cloud.microsoft, df.word.cloud.microsoft, df.powerpoint.cloud.microsoft, *.wopi.online.office.net, *.wshi.online.office.net, df.onenote.cloud.microsoft, word.cloud.dev.microsoft, powerpoint.cloud.dev.microsoft, excel.cloud.dev.microsoft, onenote.cloud.microsoft, onenote.cloud.dev.microsoft, df.visio.cloud.microsoft, visio.cloud.dev.microsoft, visio.cloud.microsoft
Valid: 2026-03-21 19:55:36 → 2026-09-17 19:55:36
831663b53bfd76c0…
google · xenon2026h2
Subject: officeapps.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 02
SANs: officeapps.live.com, officeppe.live.com, *.office.live.com, office.live.com, *.officeapps.live.com, officeapps-df.live.com, *.officeapps-df.live.com, *.online.office.com, *.online.office365.com, online.office.com, online.office365.com, *.fp.measure.office.com, *.th.officeapps.live.com, *.vhs.officeapps.live.com, *.view.officeapps.live.com, *.optin.online.office.com, tr-ofc-atm.office.com, excel.cloud.microsoft, word.cloud-dev.microsoft, powerpoint.cloud-dev.microsoft, word.cloud.microsoft, powerpoint.cloud.microsoft, excel.cloud-dev.microsoft, df.excel.cloud.microsoft, df.word.cloud.microsoft, df.powerpoint.cloud.microsoft, *.wopi.online.office.net, *.wshi.online.office.net, df.onenote.cloud.microsoft, word.cloud.dev.microsoft, powerpoint.cloud.dev.microsoft, excel.cloud.dev.microsoft, onenote.cloud.microsoft, onenote.cloud.dev.microsoft, df.visio.cloud.microsoft, visio.cloud.dev.microsoft, visio.cloud.microsoft
Valid: 2026-03-21 15:51:29 → 2026-09-17 15:51:29
f203774dc84e6da6…
google · xenon2026h2
Subject: officeapps.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 10
SANs: officeapps.live.com, officeppe.live.com, *.office.live.com, office.live.com, *.officeapps.live.com, officeapps-df.live.com, *.officeapps-df.live.com, *.online.office.com, *.online.office365.com, online.office.com, online.office365.com, *.fp.measure.office.com, *.th.officeapps.live.com, *.vhs.officeapps.live.com, *.view.officeapps.live.com, *.optin.online.office.com, tr-ofc-atm.office.com, excel.cloud.microsoft, word.cloud-dev.microsoft, powerpoint.cloud-dev.microsoft, word.cloud.microsoft, powerpoint.cloud.microsoft, excel.cloud-dev.microsoft, df.excel.cloud.microsoft, df.word.cloud.microsoft, df.powerpoint.cloud.microsoft, *.wopi.online.office.net, *.wshi.online.office.net, df.onenote.cloud.microsoft, word.cloud.dev.microsoft, powerpoint.cloud.dev.microsoft, excel.cloud.dev.microsoft, onenote.cloud.microsoft, onenote.cloud.dev.microsoft, df.visio.cloud.microsoft, visio.cloud.dev.microsoft, visio.cloud.microsoft
Valid: 2026-03-21 15:11:02 → 2026-09-17 15:11:02
3bc4944f239284e7…
google · xenon2026h2
Subject: officeapps.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 10
SANs: officeapps.live.com, officeppe.live.com, *.office.live.com, office.live.com, *.officeapps.live.com, officeapps-df.live.com, *.officeapps-df.live.com, *.online.office.com, *.online.office365.com, online.office.com, online.office365.com, *.fp.measure.office.com, *.th.officeapps.live.com, *.vhs.officeapps.live.com, *.view.officeapps.live.com, *.optin.online.office.com, tr-ofc-atm.office.com, excel.cloud.microsoft, word.cloud-dev.microsoft, powerpoint.cloud-dev.microsoft, word.cloud.microsoft, powerpoint.cloud.microsoft, excel.cloud-dev.microsoft, df.excel.cloud.microsoft, df.word.cloud.microsoft, df.powerpoint.cloud.microsoft, *.wopi.online.office.net, *.wshi.online.office.net, df.onenote.cloud.microsoft, word.cloud.dev.microsoft, powerpoint.cloud.dev.microsoft, excel.cloud.dev.microsoft, onenote.cloud.microsoft, onenote.cloud.dev.microsoft, df.visio.cloud.microsoft, visio.cloud.dev.microsoft, visio.cloud.microsoft
Valid: 2026-03-21 14:14:38 → 2026-09-17 14:14:38
de9f755b00a0ff05…
google · xenon2026h2
Subject: officeapps.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 02
SANs: officeapps.live.com, officeppe.live.com, *.office.live.com, office.live.com, *.officeapps.live.com, officeapps-df.live.com, *.officeapps-df.live.com, *.online.office.com, *.online.office365.com, online.office.com, online.office365.com, *.fp.measure.office.com, *.th.officeapps.live.com, *.vhs.officeapps.live.com, *.view.officeapps.live.com, *.optin.online.office.com, tr-ofc-atm.office.com, excel.cloud.microsoft, word.cloud-dev.microsoft, powerpoint.cloud-dev.microsoft, word.cloud.microsoft, powerpoint.cloud.microsoft, excel.cloud-dev.microsoft, df.excel.cloud.microsoft, df.word.cloud.microsoft, df.powerpoint.cloud.microsoft, *.wopi.online.office.net, *.wshi.online.office.net, df.onenote.cloud.microsoft, word.cloud.dev.microsoft, powerpoint.cloud.dev.microsoft, excel.cloud.dev.microsoft, onenote.cloud.microsoft, onenote.cloud.dev.microsoft, df.visio.cloud.microsoft, visio.cloud.dev.microsoft, visio.cloud.microsoft
Valid: 2026-03-21 12:24:24 → 2026-09-17 12:24:24
0f113f1dd0614b21…
google · xenon2026h2
Subject: officeapps.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 10
SANs: officeapps.live.com, officeppe.live.com, *.office.live.com, office.live.com, *.officeapps.live.com, officeapps-df.live.com, *.officeapps-df.live.com, *.online.office.com, *.online.office365.com, online.office.com, online.office365.com, *.fp.measure.office.com, *.th.officeapps.live.com, *.vhs.officeapps.live.com, *.view.officeapps.live.com, *.optin.online.office.com, tr-ofc-atm.office.com, excel.cloud.microsoft, word.cloud-dev.microsoft, powerpoint.cloud-dev.microsoft, word.cloud.microsoft, powerpoint.cloud.microsoft, excel.cloud-dev.microsoft, df.excel.cloud.microsoft, df.word.cloud.microsoft, df.powerpoint.cloud.microsoft, *.wopi.online.office.net, *.wshi.online.office.net, df.onenote.cloud.microsoft, word.cloud.dev.microsoft, powerpoint.cloud.dev.microsoft, excel.cloud.dev.microsoft, onenote.cloud.microsoft, onenote.cloud.dev.microsoft, df.visio.cloud.microsoft, visio.cloud.dev.microsoft, visio.cloud.microsoft
Valid: 2026-03-21 11:32:40 → 2026-09-17 11:32:40
77cbd3e492414f48…
google · xenon2026h2
Subject: officeapps.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 16
SANs: officeapps.live.com, officeppe.live.com, *.office.live.com, office.live.com, *.officeapps.live.com, officeapps-df.live.com, *.officeapps-df.live.com, *.online.office.com, *.online.office365.com, online.office.com, online.office365.com, *.fp.measure.office.com, *.th.officeapps.live.com, *.vhs.officeapps.live.com, *.view.officeapps.live.com, *.optin.online.office.com, tr-ofc-atm.office.com, excel.cloud.microsoft, word.cloud-dev.microsoft, powerpoint.cloud-dev.microsoft, word.cloud.microsoft, powerpoint.cloud.microsoft, excel.cloud-dev.microsoft, df.excel.cloud.microsoft, df.word.cloud.microsoft, df.powerpoint.cloud.microsoft, *.wopi.online.office.net, *.wshi.online.office.net, df.onenote.cloud.microsoft, word.cloud.dev.microsoft, powerpoint.cloud.dev.microsoft, excel.cloud.dev.microsoft, onenote.cloud.microsoft, onenote.cloud.dev.microsoft, df.visio.cloud.microsoft, visio.cloud.dev.microsoft, visio.cloud.microsoft
Valid: 2026-03-21 10:52:44 → 2026-09-17 10:52:44
Threat Intelligence
Domain threat-intel pending
Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.
History
Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.
| Type | Value | First seen | Last seen |
|---|---|---|---|
| A | 52.108.8.12 | 2026-05-26 02:38:03.884 | 2026-07-28 18:27:17.459 |
| AAAA | 2603:1063:2000::12 | 2026-05-26 02:38:03.884 | 2026-07-28 18:27:17.459 |
| A | 52.108.9.12 | 2026-05-26 02:38:03.884 | 2026-07-28 18:27:17.459 |
| AAAA | 2603:1063:2000:1::12 | 2026-05-26 02:38:03.884 | 2026-07-28 18:27:17.459 |
| AAAA | 2603:1063:2000:2::12 | 2026-05-26 07:34:03.928 | 2026-06-23 10:30:12.944 |
| AAAA | 2603:1063:2000:3::12 | 2026-05-26 07:34:03.928 | 2026-06-23 10:30:12.944 |
| A | 52.108.11.12 | 2026-05-26 08:19:24.378 | 2026-06-23 10:30:12.944 |
| A | 52.108.10.12 | 2026-05-26 08:19:24.378 | 2026-06-23 10:30:12.944 |