Domain
officeapps.live.com
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of officeapps.live.com
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
Hosting IPs
70
A/AAAA targets
Subdomains
—
CT + scan + body
Record Types
2
seen in DNS
Observed Certs
189
in our scans
DNS Records
A
52.108.10.12, 52.108.11.12, 52.108.8.12, 52.108.9.12, 52.110.0.1, 52.110.0.11, 52.110.0.139, 52.110.0.144
AAAA
2603:1063:2000:1::12, 2603:1063:2000:2::12, 2603:1063:2000:3::12, 2603:1063:2000::12, 2603:1063:2001:2203::365:ff1, 2603:1063:2001:220f::365:ff1, 2603:1063:2001:2211::365:ff1, 2603:1063:2001:2212::365:ff1
MX
—
NS
—
TXT
—
CNAME
—
CAA
—
WHOIS / Registration
Registration data planned
Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.
Subdomains
Subdomain enumeration pending
Every subdomain ever issued a TLS cert under this apex — extracted from Certificate Transparency logs, our own scan observations and body references.
Tech Stack
Tech detection pending
Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.
TLS Certificates
Subject: config.edog.officeapps.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 16
SANs: *.config.svc.cloud.microsoft, *.edog.officeapps.live.com, config.edog.office.microsoft.com, config.edog.officeapps.live.com, config.officebeta.microsoft.com, config.svc.cloud.microsoft
Subject: config.officeapps.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 04
SANs: *.config-df.officeapps.live.com, *.config.svc.cloud.microsoft, *.office.microsoft.com, *.officeapps.live.com, *.officebeta.microsoft.com, config-df.officeapps.live.com, config.office.microsoft.com, config.officeapps.live.com, config.svc.cloud.microsoft, office14client.microsoft.com, office15client.microsoft.com, officeclient.microsoft.com
Subject: officeapps.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 10
SANs: *.excel.cloud.microsoft, *.office.core.microsoft, *.office.guest.usercontent.microsoft, *.office.live.com, *.office.svc.cloud.microsoft, *.officeapps-df.live.com, *.officeapps.live.com, *.online.office.com, *.online.office365.com, *.optin.online.office.com, *.powerpoint.cloud.microsoft, *.th.officeapps.live.com, *.vhs.officeapps.live.com, *.view.officeapps.live.com, *.wopi.office.core.microsoft, *.wopi.online.office.net, *.word.cloud.microsoft, *.wshi.office.core.microsoft, *.wshi.online.office.net, df.excel.cloud.microsoft, df.onenote.cloud.microsoft, df.powerpoint.cloud.microsoft, df.visio.cloud.microsoft, df.word.cloud.microsoft, excel.cloud-dev.microsoft, excel.cloud.dev.microsoft, excel.cloud.microsoft, office.live.com, officeapps-df.live.com, officeapps.live.com, officeppe.live.com, onenote.cloud.dev.microsoft, onenote.cloud.microsoft, online.office.com, online.office365.com, powerpoint.cloud-dev.microsoft, powerpoint.cloud.dev.microsoft, powerpoint.cloud.microsoft, tr-ofc-atm.office.com, visio.cloud.dev.microsoft, visio.cloud.microsoft, word.cloud-dev.microsoft, word.cloud.dev.microsoft, word.cloud.microsoft
Subject: textanalysis.officeapps.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 10
SANs: *.index.textanalysis.core.microsoft, *.textanalysis.core.microsoft, *.textanalysis.edog.officeapps.live.com, *.textanalysis.officeapps.live.com, textanalysis.edog.officeapps.live.com, textanalysis.officeapps.live.com
Subject: officeapps.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 10
SANs: *.excel.cloud.microsoft, *.office.core.microsoft, *.office.guest.usercontent.microsoft, *.office.live.com, *.office.svc.cloud.microsoft, *.officeapps-df.live.com, *.officeapps.live.com, *.online.office.com, *.online.office365.com, *.optin.online.office.com, *.powerpoint.cloud.microsoft, *.th.officeapps.live.com, *.vhs.officeapps.live.com, *.view.officeapps.live.com, *.wopi.office.core.microsoft, *.wopi.online.office.net, *.word.cloud.microsoft, *.wshi.office.core.microsoft, *.wshi.online.office.net, df.excel.cloud.microsoft, df.onenote.cloud.microsoft, df.powerpoint.cloud.microsoft, df.visio.cloud.microsoft, df.word.cloud.microsoft, excel.cloud-dev.microsoft, excel.cloud.dev.microsoft, excel.cloud.microsoft, office.live.com, officeapps-df.live.com, officeapps.live.com, officeppe.live.com, onenote.cloud.dev.microsoft, onenote.cloud.microsoft, online.office.com, online.office365.com, powerpoint.cloud-dev.microsoft, powerpoint.cloud.dev.microsoft, powerpoint.cloud.microsoft, tr-ofc-atm.office.com, visio.cloud.dev.microsoft, visio.cloud.microsoft, word.cloud-dev.microsoft, word.cloud.dev.microsoft, word.cloud.microsoft
Subject: odc.officeapps.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 16
SANs: *.discovery.svc.cloud.microsoft, *.hrd.office.com, *.hrd.svc.cloud.microsoft, *.odc-df.officeapps.live.com, *.odc.officeapps.live.com, *.odcsm.officeapps.live.com, *.officeapps.live.com, discovery.svc.cloud.microsoft, hrd.office.com, hrd.svc.cloud.microsoft, odc-df.officeapps.live.com, odc-eu.officeapps.live.com, odc.officeapps.live.com, odcsm.officeapps.live.com
Subject: pptsgs.officeapps.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 04
SANs: *.office-designer-sgs-lw.powerpointsuggest.svc.cloud.microsoft, *.office-designer-sgs-lw.sdf.powerpointsuggest.svc.cloud.microsoft, *.office-designer-sgs.powerpointsuggest.svc.cloud.microsoft, *.office-designer-sgs.sdf.powerpointsuggest.svc.cloud.microsoft, *.powerpointsuggest.svc.cloud.microsoft, *.pptsgs.edog.officeapps.live.com, *.pptsgs.officeapps.live.com, *.sdf.powerpointsuggest.svc.cloud.microsoft, powerpointsuggest.svc.cloud.microsoft, pptsgs.edog.officeapps.live.com, pptsgs.officeapps.live.com, sdf.powerpointsuggest.svc.cloud.microsoft
Subject: officeapps.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 10
SANs: *.excel.cloud.microsoft, *.office.core.microsoft, *.office.guest.usercontent.microsoft, *.office.live.com, *.office.svc.cloud.microsoft, *.officeapps-df.live.com, *.officeapps.live.com, *.online.office.com, *.online.office365.com, *.optin.online.office.com, *.powerpoint.cloud.microsoft, *.th.officeapps.live.com, *.vhs.officeapps.live.com, *.view.officeapps.live.com, *.wopi.office.core.microsoft, *.wopi.online.office.net, *.word.cloud.microsoft, *.wshi.office.core.microsoft, *.wshi.online.office.net, df.excel.cloud.microsoft, df.onenote.cloud.microsoft, df.powerpoint.cloud.microsoft, df.visio.cloud.microsoft, df.word.cloud.microsoft, excel.cloud-dev.microsoft, excel.cloud.dev.microsoft, excel.cloud.microsoft, office.live.com, officeapps-df.live.com, officeapps.live.com, officeppe.live.com, onenote.cloud.dev.microsoft, onenote.cloud.microsoft, online.office.com, online.office365.com, powerpoint.cloud-dev.microsoft, powerpoint.cloud.dev.microsoft, powerpoint.cloud.microsoft, tr-ofc-atm.office.com, visio.cloud.dev.microsoft, visio.cloud.microsoft, word.cloud-dev.microsoft, word.cloud.dev.microsoft, word.cloud.microsoft
Subject: officeapps.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 10
SANs: *.excel.cloud.microsoft, *.office.core.microsoft, *.office.guest.usercontent.microsoft, *.office.live.com, *.office.svc.cloud.microsoft, *.officeapps-df.live.com, *.officeapps.live.com, *.online.office.com, *.online.office365.com, *.optin.online.office.com, *.powerpoint.cloud.microsoft, *.th.officeapps.live.com, *.vhs.officeapps.live.com, *.view.officeapps.live.com, *.wopi.office.core.microsoft, *.wopi.online.office.net, *.word.cloud.microsoft, *.wshi.office.core.microsoft, *.wshi.online.office.net, df.excel.cloud.microsoft, df.onenote.cloud.microsoft, df.powerpoint.cloud.microsoft, df.visio.cloud.microsoft, df.word.cloud.microsoft, excel.cloud-dev.microsoft, excel.cloud.dev.microsoft, excel.cloud.microsoft, office.live.com, officeapps-df.live.com, officeapps.live.com, officeppe.live.com, onenote.cloud.dev.microsoft, onenote.cloud.microsoft, online.office.com, online.office365.com, powerpoint.cloud-dev.microsoft, powerpoint.cloud.dev.microsoft, powerpoint.cloud.microsoft, tr-ofc-atm.office.com, visio.cloud.dev.microsoft, visio.cloud.microsoft, word.cloud-dev.microsoft, word.cloud.dev.microsoft, word.cloud.microsoft
Subject: officeapps.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 10
SANs: *.excel.cloud.microsoft, *.office.core.microsoft, *.office.guest.usercontent.microsoft, *.office.live.com, *.office.svc.cloud.microsoft, *.officeapps-df.live.com, *.officeapps.live.com, *.online.office.com, *.online.office365.com, *.optin.online.office.com, *.powerpoint.cloud.microsoft, *.th.officeapps.live.com, *.vhs.officeapps.live.com, *.view.officeapps.live.com, *.wopi.office.core.microsoft, *.wopi.online.office.net, *.word.cloud.microsoft, *.wshi.office.core.microsoft, *.wshi.online.office.net, df.excel.cloud.microsoft, df.onenote.cloud.microsoft, df.powerpoint.cloud.microsoft, df.visio.cloud.microsoft, df.word.cloud.microsoft, excel.cloud-dev.microsoft, excel.cloud.dev.microsoft, excel.cloud.microsoft, office.live.com, officeapps-df.live.com, officeapps.live.com, officeppe.live.com, onenote.cloud.dev.microsoft, onenote.cloud.microsoft, online.office.com, online.office365.com, powerpoint.cloud-dev.microsoft, powerpoint.cloud.dev.microsoft, powerpoint.cloud.microsoft, tr-ofc-atm.office.com, visio.cloud.dev.microsoft, visio.cloud.microsoft, word.cloud-dev.microsoft, word.cloud.dev.microsoft, word.cloud.microsoft
Subject: excelcs.officeapps.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 02
SANs: *.df.excelcs.svc.usercontent.microsoft, *.excelca.officeapps.live.com, *.excelcs.edog.officeapps.live.com, *.excelcs.officeapps.live.com, *.excelcs.svc.usercontent.microsoft, *.excelps.officeapps.live.com, df.excelcs.svc.usercontent.microsoft, excelca.officeapps.live.com, excelcs.edog.officeapps.live.com, excelcs.officeapps.live.com, excelcs.svc.usercontent.microsoft, excelps.officeapps.live.com
Subject: wordcs.officeapps.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 04
SANs: *.df.wordcs.svc.usercontent.microsoft, *.wordca.officeapps.live.com, *.wordcs.edog.officeapps.live.com, *.wordcs.officeapps.live.com, *.wordcs.svc.usercontent.microsoft, *.wordps.officeapps.live.com, df.wordcs.svc.usercontent.microsoft, wordca.officeapps.live.com, wordcs.edog.officeapps.live.com, wordcs.officeapps.live.com, wordcs.svc.usercontent.microsoft, wordps.officeapps.live.com
Subject: pptservicescast.officeapps.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 10
SANs: *.pptservicescast.edog.officeapps.live.com, *.pptservicescast.officeapps.live.com, *.voice.officeapps.live.com, pptservicescast.edog.officeapps.live.com, pptservicescast.officeapps.live.com, voice.officeapps.live.com
Subject: offline.officeapps.live.com
Issuer: Microsoft IT TLS CA 1
SANs: *.officeapps-df.live.com, *.officeapps.live.com, offline.officeapps.live.com
Subject: ocws.officeapps.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 16
SANs: *.ocws-df.officeapps.live.com, *.ocws.officeapps.live.com, *.officeapps.live.com, *.recent.svc.cloud.microsoft, ocws-df.officeapps.live.com, ocws-eu.officeapps.live.com, ocws-usdc.officeapps.live.com, ocws.officeapps.live.com, recent.api.office.net, recent.svc.cloud.microsoft
Subject: officeapps.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 10
SANs: *.excel.cloud.microsoft, *.office.core.microsoft, *.office.guest.usercontent.microsoft, *.office.live.com, *.office.svc.cloud.microsoft, *.officeapps-df.live.com, *.officeapps.live.com, *.online.office.com, *.online.office365.com, *.optin.online.office.com, *.powerpoint.cloud.microsoft, *.th.officeapps.live.com, *.vhs.officeapps.live.com, *.view.officeapps.live.com, *.wopi.office.core.microsoft, *.wopi.online.office.net, *.word.cloud.microsoft, *.wshi.office.core.microsoft, *.wshi.online.office.net, df.excel.cloud.microsoft, df.onenote.cloud.microsoft, df.powerpoint.cloud.microsoft, df.visio.cloud.microsoft, df.word.cloud.microsoft, excel.cloud-dev.microsoft, excel.cloud.dev.microsoft, excel.cloud.microsoft, office.live.com, officeapps-df.live.com, officeapps.live.com, officeppe.live.com, onenote.cloud.dev.microsoft, onenote.cloud.microsoft, online.office.com, online.office365.com, powerpoint.cloud-dev.microsoft, powerpoint.cloud.dev.microsoft, powerpoint.cloud.microsoft, tr-ofc-atm.office.com, visio.cloud.dev.microsoft, visio.cloud.microsoft, word.cloud-dev.microsoft, word.cloud.dev.microsoft, word.cloud.microsoft
Subject: textanalysis.officeapps.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 04
SANs: *.index.textanalysis.core.microsoft, *.textanalysis.core.microsoft, *.textanalysis.edog.officeapps.live.com, *.textanalysis.officeapps.live.com, textanalysis.edog.officeapps.live.com, textanalysis.officeapps.live.com
Subject: wordcs.officeapps.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 04
SANs: *.df.wordcs.svc.usercontent.microsoft, *.wordca.officeapps.live.com, *.wordcs.edog.officeapps.live.com, *.wordcs.officeapps.live.com, *.wordcs.svc.usercontent.microsoft, *.wordps.officeapps.live.com, df.wordcs.svc.usercontent.microsoft, wordca.officeapps.live.com, wordcs.edog.officeapps.live.com, wordcs.officeapps.live.com, wordcs.svc.usercontent.microsoft, wordps.officeapps.live.com
Subject: officeapps.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 10
SANs: *.excel.cloud.microsoft, *.office.core.microsoft, *.office.guest.usercontent.microsoft, *.office.live.com, *.office.svc.cloud.microsoft, *.officeapps-df.live.com, *.officeapps.live.com, *.online.office.com, *.online.office365.com, *.optin.online.office.com, *.powerpoint.cloud.microsoft, *.th.officeapps.live.com, *.vhs.officeapps.live.com, *.view.officeapps.live.com, *.wopi.office.core.microsoft, *.wopi.online.office.net, *.word.cloud.microsoft, *.wshi.office.core.microsoft, *.wshi.online.office.net, df.excel.cloud.microsoft, df.onenote.cloud.microsoft, df.powerpoint.cloud.microsoft, df.visio.cloud.microsoft, df.word.cloud.microsoft, excel.cloud-dev.microsoft, excel.cloud.dev.microsoft, excel.cloud.microsoft, office.live.com, officeapps-df.live.com, officeapps.live.com, officeppe.live.com, onenote.cloud.dev.microsoft, onenote.cloud.microsoft, online.office.com, online.office365.com, powerpoint.cloud-dev.microsoft, powerpoint.cloud.dev.microsoft, powerpoint.cloud.microsoft, tr-ofc-atm.office.com, visio.cloud.dev.microsoft, visio.cloud.microsoft, word.cloud-dev.microsoft, word.cloud.dev.microsoft, word.cloud.microsoft
Subject: officeapps.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 10
SANs: *.excel.cloud.microsoft, *.office.core.microsoft, *.office.guest.usercontent.microsoft, *.office.live.com, *.office.svc.cloud.microsoft, *.officeapps-df.live.com, *.officeapps.live.com, *.online.office.com, *.online.office365.com, *.optin.online.office.com, *.powerpoint.cloud.microsoft, *.th.officeapps.live.com, *.vhs.officeapps.live.com, *.view.officeapps.live.com, *.wopi.office.core.microsoft, *.wopi.online.office.net, *.word.cloud.microsoft, *.wshi.office.core.microsoft, *.wshi.online.office.net, df.excel.cloud.microsoft, df.onenote.cloud.microsoft, df.powerpoint.cloud.microsoft, df.visio.cloud.microsoft, df.word.cloud.microsoft, excel.cloud-dev.microsoft, excel.cloud.dev.microsoft, excel.cloud.microsoft, office.live.com, officeapps-df.live.com, officeapps.live.com, officeppe.live.com, onenote.cloud.dev.microsoft, onenote.cloud.microsoft, online.office.com, online.office365.com, powerpoint.cloud-dev.microsoft, powerpoint.cloud.dev.microsoft, powerpoint.cloud.microsoft, tr-ofc-atm.office.com, visio.cloud.dev.microsoft, visio.cloud.microsoft, word.cloud-dev.microsoft, word.cloud.dev.microsoft, word.cloud.microsoft
Subject: officeapps.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 10
SANs: *.excel.cloud.microsoft, *.office.core.microsoft, *.office.guest.usercontent.microsoft, *.office.live.com, *.office.svc.cloud.microsoft, *.officeapps-df.live.com, *.officeapps.live.com, *.online.office.com, *.online.office365.com, *.optin.online.office.com, *.powerpoint.cloud.microsoft, *.th.officeapps.live.com, *.vhs.officeapps.live.com, *.view.officeapps.live.com, *.wopi.office.core.microsoft, *.wopi.online.office.net, *.word.cloud.microsoft, *.wshi.office.core.microsoft, *.wshi.online.office.net, df.excel.cloud.microsoft, df.onenote.cloud.microsoft, df.powerpoint.cloud.microsoft, df.visio.cloud.microsoft, df.word.cloud.microsoft, excel.cloud-dev.microsoft, excel.cloud.dev.microsoft, excel.cloud.microsoft, office.live.com, officeapps-df.live.com, officeapps.live.com, officeppe.live.com, onenote.cloud.dev.microsoft, onenote.cloud.microsoft, online.office.com, online.office365.com, powerpoint.cloud-dev.microsoft, powerpoint.cloud.dev.microsoft, powerpoint.cloud.microsoft, tr-ofc-atm.office.com, visio.cloud.dev.microsoft, visio.cloud.microsoft, word.cloud-dev.microsoft, word.cloud.dev.microsoft, word.cloud.microsoft
Subject: officeapps.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 10
SANs: *.excel.cloud.microsoft, *.office.core.microsoft, *.office.guest.usercontent.microsoft, *.office.live.com, *.office.svc.cloud.microsoft, *.officeapps-df.live.com, *.officeapps.live.com, *.online.office.com, *.online.office365.com, *.optin.online.office.com, *.powerpoint.cloud.microsoft, *.th.officeapps.live.com, *.vhs.officeapps.live.com, *.view.officeapps.live.com, *.wopi.office.core.microsoft, *.wopi.online.office.net, *.word.cloud.microsoft, *.wshi.office.core.microsoft, *.wshi.online.office.net, df.excel.cloud.microsoft, df.onenote.cloud.microsoft, df.powerpoint.cloud.microsoft, df.visio.cloud.microsoft, df.word.cloud.microsoft, excel.cloud-dev.microsoft, excel.cloud.dev.microsoft, excel.cloud.microsoft, office.live.com, officeapps-df.live.com, officeapps.live.com, officeppe.live.com, onenote.cloud.dev.microsoft, onenote.cloud.microsoft, online.office.com, online.office365.com, powerpoint.cloud-dev.microsoft, powerpoint.cloud.dev.microsoft, powerpoint.cloud.microsoft, tr-ofc-atm.office.com, visio.cloud.dev.microsoft, visio.cloud.microsoft, word.cloud-dev.microsoft, word.cloud.dev.microsoft, word.cloud.microsoft
Subject: officeapps.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 04
SANs: *.excel.cloud.microsoft, *.fp.measure.office.com, *.ocs.svc.cloud.microsoft, *.office.core.microsoft, *.office.guest.usercontent.microsoft, *.office.live.com, *.office.svc.cloud.microsoft, *.officeapps-df.live.com, *.officeapps.live.com, *.online.office.com, *.online.office365.com, *.optin.online.office.com, *.powerpoint.cloud.microsoft, *.th.officeapps.live.com, *.vhs.officeapps.live.com, *.view.officeapps.live.com, *.word.cloud.microsoft, office.live.com, officeapps-df.live.com, officeapps.live.com, officeppe.live.com, online.office.com, online.office365.com
Subject: excelcs.officeapps.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 02
SANs: *.df.excelcs.svc.usercontent.microsoft, *.excelca.officeapps.live.com, *.excelcs.edog.officeapps.live.com, *.excelcs.officeapps.live.com, *.excelcs.svc.usercontent.microsoft, *.excelps.officeapps.live.com, df.excelcs.svc.usercontent.microsoft, excelca.officeapps.live.com, excelcs.edog.officeapps.live.com, excelcs.officeapps.live.com, excelcs.svc.usercontent.microsoft, excelps.officeapps.live.com
Subject: offline.officeapps.live.com
Issuer: Microsoft IT TLS CA 1
SANs: *.officeapps-df.live.com, *.officeapps.live.com, offline.officeapps.live.com
Subject: excelcs.edog.officeapps.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 04
SANs: *.df.excelcs.svc.usercontent.microsoft, *.excelcs.edog.officeapps.live.com, *.excelps.edog.officeapps.live.com, df.excelcs.svc.usercontent.microsoft, excelca.edog.officeapps.live.com, excelcs.edog.officeapps.live.com, excelps.edog.officeapps.live.com
Subject: ols.edog.officeapps.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 02
SANs: *.df.licensing.m365.svc.cloud.microsoft, *.edog.officeapps.live.com, *.ols.edog.officeapps.live.com, df.licensing.m365.svc.cloud.microsoft, ols.edog.officeapps.live.com, osub.microsoft-ppe.com
Subject: officeapps.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 10
SANs: *.excel.cloud.microsoft, *.office.core.microsoft, *.office.guest.usercontent.microsoft, *.office.live.com, *.office.svc.cloud.microsoft, *.officeapps-df.live.com, *.officeapps.live.com, *.online.office.com, *.online.office365.com, *.optin.online.office.com, *.powerpoint.cloud.microsoft, *.th.officeapps.live.com, *.vhs.officeapps.live.com, *.view.officeapps.live.com, *.wopi.office.core.microsoft, *.wopi.online.office.net, *.word.cloud.microsoft, *.wshi.office.core.microsoft, *.wshi.online.office.net, df.excel.cloud.microsoft, df.onenote.cloud.microsoft, df.powerpoint.cloud.microsoft, df.visio.cloud.microsoft, df.word.cloud.microsoft, excel.cloud-dev.microsoft, excel.cloud.dev.microsoft, excel.cloud.microsoft, office.live.com, officeapps-df.live.com, officeapps.live.com, officeppe.live.com, onenote.cloud.dev.microsoft, onenote.cloud.microsoft, online.office.com, online.office365.com, powerpoint.cloud-dev.microsoft, powerpoint.cloud.dev.microsoft, powerpoint.cloud.microsoft, tr-ofc-atm.office.com, visio.cloud.dev.microsoft, visio.cloud.microsoft, word.cloud-dev.microsoft, word.cloud.dev.microsoft, word.cloud.microsoft
Subject: offline.officeapps.live.com
Issuer: Microsoft IT TLS CA 1
SANs: *.officeapps-df.live.com, *.officeapps.live.com, offline.officeapps.live.com
Subject: officeapps.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 10
SANs: *.excel.cloud.microsoft, *.office.core.microsoft, *.office.guest.usercontent.microsoft, *.office.live.com, *.office.svc.cloud.microsoft, *.officeapps-df.live.com, *.officeapps.live.com, *.online.office.com, *.online.office365.com, *.optin.online.office.com, *.powerpoint.cloud.microsoft, *.th.officeapps.live.com, *.vhs.officeapps.live.com, *.view.officeapps.live.com, *.wopi.office.core.microsoft, *.wopi.online.office.net, *.word.cloud.microsoft, *.wshi.office.core.microsoft, *.wshi.online.office.net, df.excel.cloud.microsoft, df.onenote.cloud.microsoft, df.powerpoint.cloud.microsoft, df.visio.cloud.microsoft, df.word.cloud.microsoft, excel.cloud-dev.microsoft, excel.cloud.dev.microsoft, excel.cloud.microsoft, office.live.com, officeapps-df.live.com, officeapps.live.com, officeppe.live.com, onenote.cloud.dev.microsoft, onenote.cloud.microsoft, online.office.com, online.office365.com, powerpoint.cloud-dev.microsoft, powerpoint.cloud.dev.microsoft, powerpoint.cloud.microsoft, tr-ofc-atm.office.com, visio.cloud.dev.microsoft, visio.cloud.microsoft, word.cloud-dev.microsoft, word.cloud.dev.microsoft, word.cloud.microsoft
IPs Citing This Domain
No citing IPs found yet
As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.
Origin / IP-Leak
USP
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
No origin-IP leaks detected (yet)
Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.
CT-Log Evidence
Certificates from public Certificate Transparency logs whose subject or SAN names this domain — including historic certs we never observed live.
84c698c64a01e361…
google · xenon2026h2
Subject: officeapps.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 16
SANs: officeapps.live.com, officeppe.live.com, *.office.live.com, office.live.com, *.officeapps.live.com, officeapps-df.live.com, *.officeapps-df.live.com, *.online.office.com, *.online.office365.com, online.office.com, online.office365.com, *.fp.measure.office.com, *.th.officeapps.live.com, *.vhs.officeapps.live.com, *.view.officeapps.live.com, *.optin.online.office.com, tr-ofc-atm.office.com, excel.cloud.microsoft, word.cloud-dev.microsoft, powerpoint.cloud-dev.microsoft, word.cloud.microsoft, powerpoint.cloud.microsoft, excel.cloud-dev.microsoft, df.excel.cloud.microsoft, df.word.cloud.microsoft, df.powerpoint.cloud.microsoft, *.wopi.online.office.net, *.wshi.online.office.net, df.onenote.cloud.microsoft, word.cloud.dev.microsoft, powerpoint.cloud.dev.microsoft, excel.cloud.dev.microsoft, onenote.cloud.microsoft, onenote.cloud.dev.microsoft, df.visio.cloud.microsoft, visio.cloud.dev.microsoft, visio.cloud.microsoft
Valid: 2026-03-26 17:16:00 → 2026-09-22 17:16:00
bb386b13bec95bff…
google · xenon2026h2
Subject: officeapps.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 04
SANs: officeapps.live.com, officeppe.live.com, *.office.live.com, office.live.com, *.officeapps.live.com, officeapps-df.live.com, *.officeapps-df.live.com, *.online.office.com, *.online.office365.com, online.office.com, online.office365.com, *.fp.measure.office.com, *.th.officeapps.live.com, *.vhs.officeapps.live.com, *.view.officeapps.live.com, *.optin.online.office.com, tr-ofc-atm.office.com, excel.cloud.microsoft, word.cloud-dev.microsoft, powerpoint.cloud-dev.microsoft, word.cloud.microsoft, powerpoint.cloud.microsoft, excel.cloud-dev.microsoft, df.excel.cloud.microsoft, df.word.cloud.microsoft, df.powerpoint.cloud.microsoft, *.wopi.online.office.net, *.wshi.online.office.net, df.onenote.cloud.microsoft, word.cloud.dev.microsoft, powerpoint.cloud.dev.microsoft, excel.cloud.dev.microsoft, onenote.cloud.microsoft, onenote.cloud.dev.microsoft, df.visio.cloud.microsoft, visio.cloud.dev.microsoft, visio.cloud.microsoft
Valid: 2026-03-26 11:26:51 → 2026-09-22 11:26:51
4c72d0887acd4c0e…
google · xenon2026h2
Subject: officeapps.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 04
SANs: officeapps.live.com, officeppe.live.com, *.office.live.com, office.live.com, *.officeapps.live.com, officeapps-df.live.com, *.officeapps-df.live.com, *.online.office.com, *.online.office365.com, online.office.com, online.office365.com, *.fp.measure.office.com, *.th.officeapps.live.com, *.vhs.officeapps.live.com, *.view.officeapps.live.com, *.optin.online.office.com, tr-ofc-atm.office.com, excel.cloud.microsoft, word.cloud-dev.microsoft, powerpoint.cloud-dev.microsoft, word.cloud.microsoft, powerpoint.cloud.microsoft, excel.cloud-dev.microsoft, df.excel.cloud.microsoft, df.word.cloud.microsoft, df.powerpoint.cloud.microsoft, *.wopi.online.office.net, *.wshi.online.office.net, df.onenote.cloud.microsoft, word.cloud.dev.microsoft, powerpoint.cloud.dev.microsoft, excel.cloud.dev.microsoft, onenote.cloud.microsoft, onenote.cloud.dev.microsoft, df.visio.cloud.microsoft, visio.cloud.dev.microsoft, visio.cloud.microsoft
Valid: 2026-03-26 10:39:28 → 2026-09-22 10:39:28
459bbed1c1d1ad6e…
google · xenon2026h2
Subject: officeapps.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 16
SANs: officeapps.live.com, officeppe.live.com, *.office.live.com, office.live.com, *.officeapps.live.com, officeapps-df.live.com, *.officeapps-df.live.com, *.online.office.com, *.online.office365.com, online.office.com, online.office365.com, *.fp.measure.office.com, *.th.officeapps.live.com, *.vhs.officeapps.live.com, *.view.officeapps.live.com, *.optin.online.office.com, tr-ofc-atm.office.com, excel.cloud.microsoft, word.cloud-dev.microsoft, powerpoint.cloud-dev.microsoft, word.cloud.microsoft, powerpoint.cloud.microsoft, excel.cloud-dev.microsoft, df.excel.cloud.microsoft, df.word.cloud.microsoft, df.powerpoint.cloud.microsoft, *.wopi.online.office.net, *.wshi.online.office.net, df.onenote.cloud.microsoft, word.cloud.dev.microsoft, powerpoint.cloud.dev.microsoft, excel.cloud.dev.microsoft, onenote.cloud.microsoft, onenote.cloud.dev.microsoft, df.visio.cloud.microsoft, visio.cloud.dev.microsoft, visio.cloud.microsoft
Valid: 2026-03-22 20:16:23 → 2026-09-18 20:16:23
efb4566ae65266e4…
google · xenon2026h2
Subject: officeapps.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 02
SANs: officeapps.live.com, officeppe.live.com, *.office.live.com, office.live.com, *.officeapps.live.com, officeapps-df.live.com, *.officeapps-df.live.com, *.online.office.com, *.online.office365.com, online.office.com, online.office365.com, *.fp.measure.office.com, *.th.officeapps.live.com, *.vhs.officeapps.live.com, *.view.officeapps.live.com, *.optin.online.office.com, tr-ofc-atm.office.com, excel.cloud.microsoft, word.cloud-dev.microsoft, powerpoint.cloud-dev.microsoft, word.cloud.microsoft, powerpoint.cloud.microsoft, excel.cloud-dev.microsoft, df.excel.cloud.microsoft, df.word.cloud.microsoft, df.powerpoint.cloud.microsoft, *.wopi.online.office.net, *.wshi.online.office.net, df.onenote.cloud.microsoft, word.cloud.dev.microsoft, powerpoint.cloud.dev.microsoft, excel.cloud.dev.microsoft, onenote.cloud.microsoft, onenote.cloud.dev.microsoft, df.visio.cloud.microsoft, visio.cloud.dev.microsoft, visio.cloud.microsoft
Valid: 2026-03-22 19:23:42 → 2026-09-18 19:23:42
53c9daec541f4cfa…
google · xenon2026h2
Subject: officeapps.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 16
SANs: officeapps.live.com, officeppe.live.com, *.office.live.com, office.live.com, *.officeapps.live.com, officeapps-df.live.com, *.officeapps-df.live.com, *.online.office.com, *.online.office365.com, online.office.com, online.office365.com, *.fp.measure.office.com, *.th.officeapps.live.com, *.vhs.officeapps.live.com, *.view.officeapps.live.com, *.optin.online.office.com, tr-ofc-atm.office.com, excel.cloud.microsoft, word.cloud-dev.microsoft, powerpoint.cloud-dev.microsoft, word.cloud.microsoft, powerpoint.cloud.microsoft, excel.cloud-dev.microsoft, df.excel.cloud.microsoft, df.word.cloud.microsoft, df.powerpoint.cloud.microsoft, *.wopi.online.office.net, *.wshi.online.office.net, df.onenote.cloud.microsoft, word.cloud.dev.microsoft, powerpoint.cloud.dev.microsoft, excel.cloud.dev.microsoft, onenote.cloud.microsoft, onenote.cloud.dev.microsoft, df.visio.cloud.microsoft, visio.cloud.dev.microsoft, visio.cloud.microsoft
Valid: 2026-03-22 18:24:06 → 2026-09-18 18:24:06
e0e249c24bcf6214…
google · xenon2026h2
Subject: officeapps.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 04
SANs: officeapps.live.com, officeppe.live.com, *.office.live.com, office.live.com, *.officeapps.live.com, officeapps-df.live.com, *.officeapps-df.live.com, *.online.office.com, *.online.office365.com, online.office.com, online.office365.com, *.fp.measure.office.com, *.th.officeapps.live.com, *.vhs.officeapps.live.com, *.view.officeapps.live.com, *.optin.online.office.com, tr-ofc-atm.office.com, excel.cloud.microsoft, word.cloud-dev.microsoft, powerpoint.cloud-dev.microsoft, word.cloud.microsoft, powerpoint.cloud.microsoft, excel.cloud-dev.microsoft, df.excel.cloud.microsoft, df.word.cloud.microsoft, df.powerpoint.cloud.microsoft, *.wopi.online.office.net, *.wshi.online.office.net, df.onenote.cloud.microsoft, word.cloud.dev.microsoft, powerpoint.cloud.dev.microsoft, excel.cloud.dev.microsoft, onenote.cloud.microsoft, onenote.cloud.dev.microsoft, df.visio.cloud.microsoft, visio.cloud.dev.microsoft, visio.cloud.microsoft
Valid: 2026-03-22 18:07:08 → 2026-09-18 18:07:08
3b093b84e5e4a441…
google · xenon2026h2
Subject: officeapps.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 02
SANs: officeapps.live.com, officeppe.live.com, *.office.live.com, office.live.com, *.officeapps.live.com, officeapps-df.live.com, *.officeapps-df.live.com, *.online.office.com, *.online.office365.com, online.office.com, online.office365.com, *.fp.measure.office.com, *.th.officeapps.live.com, *.vhs.officeapps.live.com, *.view.officeapps.live.com, *.optin.online.office.com, tr-ofc-atm.office.com, excel.cloud.microsoft, word.cloud-dev.microsoft, powerpoint.cloud-dev.microsoft, word.cloud.microsoft, powerpoint.cloud.microsoft, excel.cloud-dev.microsoft, df.excel.cloud.microsoft, df.word.cloud.microsoft, df.powerpoint.cloud.microsoft, *.wopi.online.office.net, *.wshi.online.office.net, df.onenote.cloud.microsoft, word.cloud.dev.microsoft, powerpoint.cloud.dev.microsoft, excel.cloud.dev.microsoft, onenote.cloud.microsoft, onenote.cloud.dev.microsoft, df.visio.cloud.microsoft, visio.cloud.dev.microsoft, visio.cloud.microsoft
Valid: 2026-03-22 17:43:53 → 2026-09-18 17:43:53
28812a03d4047226…
google · xenon2026h2
Subject: officeapps.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 16
SANs: officeapps.live.com, officeppe.live.com, *.office.live.com, office.live.com, *.officeapps.live.com, officeapps-df.live.com, *.officeapps-df.live.com, *.online.office.com, *.online.office365.com, online.office.com, online.office365.com, *.fp.measure.office.com, *.th.officeapps.live.com, *.vhs.officeapps.live.com, *.view.officeapps.live.com, *.optin.online.office.com, tr-ofc-atm.office.com, excel.cloud.microsoft, word.cloud-dev.microsoft, powerpoint.cloud-dev.microsoft, word.cloud.microsoft, powerpoint.cloud.microsoft, excel.cloud-dev.microsoft, df.excel.cloud.microsoft, df.word.cloud.microsoft, df.powerpoint.cloud.microsoft, *.wopi.online.office.net, *.wshi.online.office.net, df.onenote.cloud.microsoft, word.cloud.dev.microsoft, powerpoint.cloud.dev.microsoft, excel.cloud.dev.microsoft, onenote.cloud.microsoft, onenote.cloud.dev.microsoft, df.visio.cloud.microsoft, visio.cloud.dev.microsoft, visio.cloud.microsoft
Valid: 2026-03-22 11:25:48 → 2026-09-18 11:25:48
849c401b6d89a17f…
google · xenon2026h2
Subject: officeapps.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 04
SANs: officeapps.live.com, officeppe.live.com, *.office.live.com, office.live.com, *.officeapps.live.com, officeapps-df.live.com, *.officeapps-df.live.com, *.online.office.com, *.online.office365.com, online.office.com, online.office365.com, *.fp.measure.office.com, *.th.officeapps.live.com, *.vhs.officeapps.live.com, *.view.officeapps.live.com, *.optin.online.office.com, tr-ofc-atm.office.com, excel.cloud.microsoft, word.cloud-dev.microsoft, powerpoint.cloud-dev.microsoft, word.cloud.microsoft, powerpoint.cloud.microsoft, excel.cloud-dev.microsoft, df.excel.cloud.microsoft, df.word.cloud.microsoft, df.powerpoint.cloud.microsoft, *.wopi.online.office.net, *.wshi.online.office.net, df.onenote.cloud.microsoft, word.cloud.dev.microsoft, powerpoint.cloud.dev.microsoft, excel.cloud.dev.microsoft, onenote.cloud.microsoft, onenote.cloud.dev.microsoft, df.visio.cloud.microsoft, visio.cloud.dev.microsoft, visio.cloud.microsoft
Valid: 2026-03-22 10:38:19 → 2026-09-18 10:38:19
50d85d8a434426a6…
google · xenon2026h2
Subject: officeapps.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 16
SANs: officeapps.live.com, officeppe.live.com, *.office.live.com, office.live.com, *.officeapps.live.com, officeapps-df.live.com, *.officeapps-df.live.com, *.online.office.com, *.online.office365.com, online.office.com, online.office365.com, *.fp.measure.office.com, *.th.officeapps.live.com, *.vhs.officeapps.live.com, *.view.officeapps.live.com, *.optin.online.office.com, tr-ofc-atm.office.com, excel.cloud.microsoft, word.cloud-dev.microsoft, powerpoint.cloud-dev.microsoft, word.cloud.microsoft, powerpoint.cloud.microsoft, excel.cloud-dev.microsoft, df.excel.cloud.microsoft, df.word.cloud.microsoft, df.powerpoint.cloud.microsoft, *.wopi.online.office.net, *.wshi.online.office.net, df.onenote.cloud.microsoft, word.cloud.dev.microsoft, powerpoint.cloud.dev.microsoft, excel.cloud.dev.microsoft, onenote.cloud.microsoft, onenote.cloud.dev.microsoft, df.visio.cloud.microsoft, visio.cloud.dev.microsoft, visio.cloud.microsoft
Valid: 2026-03-21 21:29:40 → 2026-09-17 21:29:40
a4187e98c545da50…
google · xenon2026h2
Subject: officeapps.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 16
SANs: officeapps.live.com, officeppe.live.com, *.office.live.com, office.live.com, *.officeapps.live.com, officeapps-df.live.com, *.officeapps-df.live.com, *.online.office.com, *.online.office365.com, online.office.com, online.office365.com, *.fp.measure.office.com, *.th.officeapps.live.com, *.vhs.officeapps.live.com, *.view.officeapps.live.com, *.optin.online.office.com, tr-ofc-atm.office.com, excel.cloud.microsoft, word.cloud-dev.microsoft, powerpoint.cloud-dev.microsoft, word.cloud.microsoft, powerpoint.cloud.microsoft, excel.cloud-dev.microsoft, df.excel.cloud.microsoft, df.word.cloud.microsoft, df.powerpoint.cloud.microsoft, *.wopi.online.office.net, *.wshi.online.office.net, df.onenote.cloud.microsoft, word.cloud.dev.microsoft, powerpoint.cloud.dev.microsoft, excel.cloud.dev.microsoft, onenote.cloud.microsoft, onenote.cloud.dev.microsoft, df.visio.cloud.microsoft, visio.cloud.dev.microsoft, visio.cloud.microsoft
Valid: 2026-03-21 21:14:31 → 2026-09-17 21:14:31
eec5a4aff20c78e3…
google · xenon2026h2
Subject: officeapps.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 04
SANs: officeapps.live.com, officeppe.live.com, *.office.live.com, office.live.com, *.officeapps.live.com, officeapps-df.live.com, *.officeapps-df.live.com, *.online.office.com, *.online.office365.com, online.office.com, online.office365.com, *.fp.measure.office.com, *.th.officeapps.live.com, *.vhs.officeapps.live.com, *.view.officeapps.live.com, *.optin.online.office.com, tr-ofc-atm.office.com, excel.cloud.microsoft, word.cloud-dev.microsoft, powerpoint.cloud-dev.microsoft, word.cloud.microsoft, powerpoint.cloud.microsoft, excel.cloud-dev.microsoft, df.excel.cloud.microsoft, df.word.cloud.microsoft, df.powerpoint.cloud.microsoft, *.wopi.online.office.net, *.wshi.online.office.net, df.onenote.cloud.microsoft, word.cloud.dev.microsoft, powerpoint.cloud.dev.microsoft, excel.cloud.dev.microsoft, onenote.cloud.microsoft, onenote.cloud.dev.microsoft, df.visio.cloud.microsoft, visio.cloud.dev.microsoft, visio.cloud.microsoft
Valid: 2026-03-21 20:55:06 → 2026-09-17 20:55:06
3eae193643446672…
google · xenon2026h2
Subject: officeapps.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 16
SANs: officeapps.live.com, officeppe.live.com, *.office.live.com, office.live.com, *.officeapps.live.com, officeapps-df.live.com, *.officeapps-df.live.com, *.online.office.com, *.online.office365.com, online.office.com, online.office365.com, *.fp.measure.office.com, *.th.officeapps.live.com, *.vhs.officeapps.live.com, *.view.officeapps.live.com, *.optin.online.office.com, tr-ofc-atm.office.com, excel.cloud.microsoft, word.cloud-dev.microsoft, powerpoint.cloud-dev.microsoft, word.cloud.microsoft, powerpoint.cloud.microsoft, excel.cloud-dev.microsoft, df.excel.cloud.microsoft, df.word.cloud.microsoft, df.powerpoint.cloud.microsoft, *.wopi.online.office.net, *.wshi.online.office.net, df.onenote.cloud.microsoft, word.cloud.dev.microsoft, powerpoint.cloud.dev.microsoft, excel.cloud.dev.microsoft, onenote.cloud.microsoft, onenote.cloud.dev.microsoft, df.visio.cloud.microsoft, visio.cloud.dev.microsoft, visio.cloud.microsoft
Valid: 2026-03-21 19:55:36 → 2026-09-17 19:55:36
831663b53bfd76c0…
google · xenon2026h2
Subject: officeapps.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 02
SANs: officeapps.live.com, officeppe.live.com, *.office.live.com, office.live.com, *.officeapps.live.com, officeapps-df.live.com, *.officeapps-df.live.com, *.online.office.com, *.online.office365.com, online.office.com, online.office365.com, *.fp.measure.office.com, *.th.officeapps.live.com, *.vhs.officeapps.live.com, *.view.officeapps.live.com, *.optin.online.office.com, tr-ofc-atm.office.com, excel.cloud.microsoft, word.cloud-dev.microsoft, powerpoint.cloud-dev.microsoft, word.cloud.microsoft, powerpoint.cloud.microsoft, excel.cloud-dev.microsoft, df.excel.cloud.microsoft, df.word.cloud.microsoft, df.powerpoint.cloud.microsoft, *.wopi.online.office.net, *.wshi.online.office.net, df.onenote.cloud.microsoft, word.cloud.dev.microsoft, powerpoint.cloud.dev.microsoft, excel.cloud.dev.microsoft, onenote.cloud.microsoft, onenote.cloud.dev.microsoft, df.visio.cloud.microsoft, visio.cloud.dev.microsoft, visio.cloud.microsoft
Valid: 2026-03-21 15:51:29 → 2026-09-17 15:51:29
f203774dc84e6da6…
google · xenon2026h2
Subject: officeapps.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 10
SANs: officeapps.live.com, officeppe.live.com, *.office.live.com, office.live.com, *.officeapps.live.com, officeapps-df.live.com, *.officeapps-df.live.com, *.online.office.com, *.online.office365.com, online.office.com, online.office365.com, *.fp.measure.office.com, *.th.officeapps.live.com, *.vhs.officeapps.live.com, *.view.officeapps.live.com, *.optin.online.office.com, tr-ofc-atm.office.com, excel.cloud.microsoft, word.cloud-dev.microsoft, powerpoint.cloud-dev.microsoft, word.cloud.microsoft, powerpoint.cloud.microsoft, excel.cloud-dev.microsoft, df.excel.cloud.microsoft, df.word.cloud.microsoft, df.powerpoint.cloud.microsoft, *.wopi.online.office.net, *.wshi.online.office.net, df.onenote.cloud.microsoft, word.cloud.dev.microsoft, powerpoint.cloud.dev.microsoft, excel.cloud.dev.microsoft, onenote.cloud.microsoft, onenote.cloud.dev.microsoft, df.visio.cloud.microsoft, visio.cloud.dev.microsoft, visio.cloud.microsoft
Valid: 2026-03-21 15:11:02 → 2026-09-17 15:11:02
3bc4944f239284e7…
google · xenon2026h2
Subject: officeapps.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 10
SANs: officeapps.live.com, officeppe.live.com, *.office.live.com, office.live.com, *.officeapps.live.com, officeapps-df.live.com, *.officeapps-df.live.com, *.online.office.com, *.online.office365.com, online.office.com, online.office365.com, *.fp.measure.office.com, *.th.officeapps.live.com, *.vhs.officeapps.live.com, *.view.officeapps.live.com, *.optin.online.office.com, tr-ofc-atm.office.com, excel.cloud.microsoft, word.cloud-dev.microsoft, powerpoint.cloud-dev.microsoft, word.cloud.microsoft, powerpoint.cloud.microsoft, excel.cloud-dev.microsoft, df.excel.cloud.microsoft, df.word.cloud.microsoft, df.powerpoint.cloud.microsoft, *.wopi.online.office.net, *.wshi.online.office.net, df.onenote.cloud.microsoft, word.cloud.dev.microsoft, powerpoint.cloud.dev.microsoft, excel.cloud.dev.microsoft, onenote.cloud.microsoft, onenote.cloud.dev.microsoft, df.visio.cloud.microsoft, visio.cloud.dev.microsoft, visio.cloud.microsoft
Valid: 2026-03-21 14:14:38 → 2026-09-17 14:14:38
de9f755b00a0ff05…
google · xenon2026h2
Subject: officeapps.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 02
SANs: officeapps.live.com, officeppe.live.com, *.office.live.com, office.live.com, *.officeapps.live.com, officeapps-df.live.com, *.officeapps-df.live.com, *.online.office.com, *.online.office365.com, online.office.com, online.office365.com, *.fp.measure.office.com, *.th.officeapps.live.com, *.vhs.officeapps.live.com, *.view.officeapps.live.com, *.optin.online.office.com, tr-ofc-atm.office.com, excel.cloud.microsoft, word.cloud-dev.microsoft, powerpoint.cloud-dev.microsoft, word.cloud.microsoft, powerpoint.cloud.microsoft, excel.cloud-dev.microsoft, df.excel.cloud.microsoft, df.word.cloud.microsoft, df.powerpoint.cloud.microsoft, *.wopi.online.office.net, *.wshi.online.office.net, df.onenote.cloud.microsoft, word.cloud.dev.microsoft, powerpoint.cloud.dev.microsoft, excel.cloud.dev.microsoft, onenote.cloud.microsoft, onenote.cloud.dev.microsoft, df.visio.cloud.microsoft, visio.cloud.dev.microsoft, visio.cloud.microsoft
Valid: 2026-03-21 12:24:24 → 2026-09-17 12:24:24
0f113f1dd0614b21…
google · xenon2026h2
Subject: officeapps.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 10
SANs: officeapps.live.com, officeppe.live.com, *.office.live.com, office.live.com, *.officeapps.live.com, officeapps-df.live.com, *.officeapps-df.live.com, *.online.office.com, *.online.office365.com, online.office.com, online.office365.com, *.fp.measure.office.com, *.th.officeapps.live.com, *.vhs.officeapps.live.com, *.view.officeapps.live.com, *.optin.online.office.com, tr-ofc-atm.office.com, excel.cloud.microsoft, word.cloud-dev.microsoft, powerpoint.cloud-dev.microsoft, word.cloud.microsoft, powerpoint.cloud.microsoft, excel.cloud-dev.microsoft, df.excel.cloud.microsoft, df.word.cloud.microsoft, df.powerpoint.cloud.microsoft, *.wopi.online.office.net, *.wshi.online.office.net, df.onenote.cloud.microsoft, word.cloud.dev.microsoft, powerpoint.cloud.dev.microsoft, excel.cloud.dev.microsoft, onenote.cloud.microsoft, onenote.cloud.dev.microsoft, df.visio.cloud.microsoft, visio.cloud.dev.microsoft, visio.cloud.microsoft
Valid: 2026-03-21 11:32:40 → 2026-09-17 11:32:40
77cbd3e492414f48…
google · xenon2026h2
Subject: officeapps.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 16
SANs: officeapps.live.com, officeppe.live.com, *.office.live.com, office.live.com, *.officeapps.live.com, officeapps-df.live.com, *.officeapps-df.live.com, *.online.office.com, *.online.office365.com, online.office.com, online.office365.com, *.fp.measure.office.com, *.th.officeapps.live.com, *.vhs.officeapps.live.com, *.view.officeapps.live.com, *.optin.online.office.com, tr-ofc-atm.office.com, excel.cloud.microsoft, word.cloud-dev.microsoft, powerpoint.cloud-dev.microsoft, word.cloud.microsoft, powerpoint.cloud.microsoft, excel.cloud-dev.microsoft, df.excel.cloud.microsoft, df.word.cloud.microsoft, df.powerpoint.cloud.microsoft, *.wopi.online.office.net, *.wshi.online.office.net, df.onenote.cloud.microsoft, word.cloud.dev.microsoft, powerpoint.cloud.dev.microsoft, excel.cloud.dev.microsoft, onenote.cloud.microsoft, onenote.cloud.dev.microsoft, df.visio.cloud.microsoft, visio.cloud.dev.microsoft, visio.cloud.microsoft
Valid: 2026-03-21 10:52:44 → 2026-09-17 10:52:44
Threat Intelligence
Domain threat-intel pending
Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.
History
Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.
| Type | Value | First seen | Last seen |
|---|---|---|---|
| AAAA | 2603:1063:2000::12 | 2026-05-26 00:17:38.499 | 2026-07-28 23:25:36.694 |
| A | 52.108.8.12 | 2026-05-26 00:17:38.499 | 2026-07-28 23:25:36.694 |
| A | 52.108.9.12 | 2026-05-26 00:17:38.499 | 2026-07-28 23:25:36.694 |
| AAAA | 2603:1063:2000:1::12 | 2026-05-26 00:17:38.499 | 2026-07-28 23:25:36.694 |
| A | 52.110.17.39 | 2026-05-27 02:30:53.991 | 2026-05-27 02:30:53.991 |
| A | 52.110.17.66 | 2026-05-27 02:30:53.991 | 2026-05-27 02:30:53.991 |
| A | 52.110.17.74 | 2026-05-27 02:30:53.991 | 2026-05-27 02:30:53.991 |
| A | 52.110.17.40 | 2026-05-27 02:30:53.991 | 2026-05-27 02:30:53.991 |
| A | 52.110.17.68 | 2026-05-27 02:30:53.991 | 2026-05-27 02:30:53.991 |
| A | 52.110.17.34 | 2026-05-27 02:30:53.991 | 2026-05-27 02:30:53.991 |
| A | 52.110.17.59 | 2026-05-27 02:30:53.991 | 2026-05-27 02:30:53.991 |
| A | 52.110.17.63 | 2026-05-27 02:30:53.991 | 2026-05-27 02:30:53.991 |
| A | 52.108.10.12 | 2026-05-27 08:46:39.912 | 2026-06-18 13:45:37.860 |
| A | 52.108.11.12 | 2026-05-27 08:46:39.912 | 2026-06-18 13:45:37.860 |
| AAAA | 2603:1063:2001:2203::365:ff1 | 2026-05-27 12:03:47.292 | 2026-05-27 12:03:47.292 |
| AAAA | 2603:1063:2001:223f::365:ff1 | 2026-05-27 12:03:47.292 | 2026-05-27 12:03:47.292 |
| AAAA | 2603:1063:2001:2211::365:ff1 | 2026-05-27 12:03:47.292 | 2026-05-27 12:03:47.292 |
| AAAA | 2603:1063:2001:223d::365:ff1 | 2026-05-27 12:03:47.292 | 2026-05-27 12:03:47.292 |
| AAAA | 2603:1063:2001:220f::365:ff1 | 2026-05-27 12:03:47.292 | 2026-05-27 12:03:47.292 |
| AAAA | 2603:1063:2001:222e::365:ff1 | 2026-05-27 12:03:47.292 | 2026-05-27 12:03:47.292 |
| AAAA | 2603:1063:2001:2245::365:ff1 | 2026-05-27 12:03:47.292 | 2026-05-27 12:03:47.292 |
| AAAA | 2603:1063:2001:2226::365:ff1 | 2026-05-27 12:03:47.292 | 2026-05-27 12:03:47.292 |
| AAAA | 2603:1063:2000:3::12 | 2026-06-17 06:37:02.106 | 2026-06-18 13:45:37.860 |
| AAAA | 2603:1063:2000:2::12 | 2026-06-17 06:37:02.106 | 2026-06-18 13:45:37.860 |
| A | 52.110.18.33 | 2026-06-20 23:02:50.973 | 2026-07-19 12:03:58.875 |
| AAAA | 2603:1063:2001:2233::365:ff1 | 2026-06-20 23:02:50.973 | 2026-06-20 23:02:50.973 |
| AAAA | 2603:1063:2001:2246::365:ff1 | 2026-06-20 23:02:50.973 | 2026-07-26 01:45:11.919 |
| A | 52.110.18.34 | 2026-06-20 23:02:50.973 | 2026-07-19 12:03:58.875 |
| A | 52.110.18.35 | 2026-06-20 23:02:50.973 | 2026-07-19 12:03:58.875 |
| AAAA | 2603:1063:2001:2212::365:ff1 | 2026-06-20 23:02:50.973 | 2026-06-20 23:02:50.973 |
| AAAA | 2603:1063:2001:223b::365:ff1 | 2026-06-20 23:02:50.973 | 2026-06-20 23:02:50.973 |
| AAAA | 2603:1063:2001:2220::365:ff1 | 2026-06-20 23:02:50.973 | 2026-07-26 01:45:11.919 |
| AAAA | 2603:1063:2001:223e::365:ff1 | 2026-06-20 23:02:50.973 | 2026-06-20 23:02:50.973 |
| AAAA | 2603:1063:2001:2247::365:ff1 | 2026-06-20 23:02:50.973 | 2026-06-20 23:02:50.973 |
| AAAA | 2603:1063:2001:222c::365:ff1 | 2026-06-20 23:02:50.973 | 2026-06-20 23:02:50.973 |
| A | 52.110.18.32 | 2026-06-20 23:02:50.973 | 2026-07-19 12:03:58.875 |
| AAAA | 2603:1063:2001:2c00::365:ff1 | 2026-07-18 18:25:19.660 | 2026-07-28 17:59:58.209 |
| AAAA | 2603:1063:2001:2c02::365:ff1 | 2026-07-18 18:25:19.660 | 2026-07-28 17:59:58.209 |
| AAAA | 2603:1063:2001:2c03::365:ff1 | 2026-07-18 18:25:19.660 | 2026-07-28 17:59:58.209 |
| AAAA | 2603:1063:2001:2c01::365:ff1 | 2026-07-18 18:25:19.660 | 2026-07-28 17:59:58.209 |
| A | 52.110.0.67 | 2026-07-26 01:45:11.919 | 2026-07-26 01:45:11.919 |
| AAAA | 2603:1063:2001:2213::365:ff1 | 2026-07-26 01:45:11.919 | 2026-07-26 01:45:11.919 |
| A | 52.110.0.139 | 2026-07-26 01:45:11.919 | 2026-07-26 01:45:11.919 |
| A | 52.110.0.144 | 2026-07-26 01:45:11.919 | 2026-07-26 01:45:11.919 |
| AAAA | 2603:1063:2001:2244::365:ff1 | 2026-07-26 01:45:11.919 | 2026-07-26 01:45:11.919 |
| A | 52.110.0.1 | 2026-07-26 01:45:11.919 | 2026-07-26 01:45:11.919 |
| AAAA | 2603:1063:2001:224a::365:ff1 | 2026-07-26 01:45:11.919 | 2026-07-26 01:45:11.919 |
| A | 52.110.0.11 | 2026-07-26 01:45:11.919 | 2026-07-26 01:45:11.919 |
| AAAA | 2603:1063:2001:2234::365:ff1 | 2026-07-26 01:45:11.919 | 2026-07-26 01:45:11.919 |
| AAAA | 2603:1063:2001:2249::365:ff1 | 2026-07-26 01:45:11.919 | 2026-07-26 01:45:11.919 |
| A | 52.110.0.70 | 2026-07-26 01:45:11.919 | 2026-07-26 01:45:11.919 |
| A | 52.110.0.50 | 2026-07-26 01:45:11.919 | 2026-07-26 01:45:11.919 |
| AAAA | 2603:1063:2001:2230::365:ff1 | 2026-07-26 01:45:11.919 | 2026-07-26 01:45:11.919 |
| A | 52.110.0.72 | 2026-07-26 01:45:11.919 | 2026-07-26 01:45:11.919 |
| A | 52.110.4.189 | 2026-07-26 09:37:01.524 | 2026-07-26 09:37:01.524 |
| A | 52.110.4.167 | 2026-07-26 09:37:01.524 | 2026-07-26 09:37:01.524 |
| A | 52.110.4.138 | 2026-07-26 09:37:01.524 | 2026-07-26 09:37:01.524 |
| A | 52.110.4.150 | 2026-07-26 09:37:01.524 | 2026-07-26 09:37:01.524 |
| A | 52.110.4.141 | 2026-07-26 09:37:01.524 | 2026-07-26 09:37:01.524 |
| A | 52.110.4.160 | 2026-07-26 09:37:01.524 | 2026-07-26 09:37:01.524 |
| A | 52.110.4.133 | 2026-07-26 09:37:01.524 | 2026-07-26 09:37:01.524 |
| A | 52.110.4.184 | 2026-07-26 09:37:01.524 | 2026-07-26 09:37:01.524 |
| A | 52.110.4.159 | 2026-07-28 17:59:58.209 | 2026-07-28 17:59:58.209 |
| A | 52.110.4.153 | 2026-07-28 17:59:58.209 | 2026-07-28 17:59:58.209 |
| A | 52.110.4.171 | 2026-07-28 17:59:58.209 | 2026-07-28 17:59:58.209 |
| A | 52.110.4.163 | 2026-07-28 17:59:58.209 | 2026-07-28 17:59:58.209 |
| A | 52.110.4.136 | 2026-07-28 17:59:58.209 | 2026-07-28 17:59:58.209 |
| A | 52.110.4.145 | 2026-07-28 17:59:58.209 | 2026-07-28 17:59:58.209 |
| A | 52.110.4.182 | 2026-07-28 17:59:58.209 | 2026-07-28 17:59:58.209 |
| A | 52.110.4.156 | 2026-07-28 17:59:58.209 | 2026-07-28 17:59:58.209 |