Domain

onedrive.com

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

DNS Check HTTP Check Run Full Scan .com TLD

Run a live full scan of onedrive.com

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now

Hosting IPs

A/AAAA targets

Subdomains

CT + scan + body

Record Types

seen in DNS

Observed Certs

in our scans

DNS Records

20.101.246.164, 51.105.104.217, 52.153.252.167

AAAA

—

ns1-36.azure-dns.com, ns2-36.azure-dns.net, ns3-36.azure-dns.org, ns4-36.azure-dns.info

TXT

AFDVALIDATION=OneDrive, MS=ms41178630, google-site-verification=2j6gO3uQkKpLHKD1MiHFAa2jD9nei0rTS7CspzBgcJ8, google-site-verification=JnNzUDhCBdRyKL8mynu1we_I6oTFWUTVUCIXGXSrzOw, google-site-verification=e9hC11R1KxFLLoqSG_WH3PEoDD2O58MsPw5VnJDyqTo, google-site-verification=mSj0qkC4ApNQ5AMqJG9aj1bOMbq9mEeoBp5t9S2Yk_s, v=spf1 include:spf.protection.outlook.com -all

CNAME

—

CAA

0 contactemail "caarecordaware@microsoft.com", 0 iodef "mailto:domains@microsoft.com", 0 issue "digicert.com", 0 issue "globalsign.com", 0 issue "microsoft.com"

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Subdomain enumeration pending

Every subdomain ever issued a TLS cert under this apex — extracted from Certificate Transparency logs, our own scan observations and body references.

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

104.103.204.174:443 cdb8d5b6da12…

Subject: onedrive.live.com

Issuer: Microsoft TLS G2 RSA CA OCSP 02

SANs: *.dev.live.com, *.groups.live.com, *.onedrive.com, *.onedrive.live.com, *.photos.live.com, *.skydrive.live.com, apps.live.com, devices.live.com, onedrive.com, onedrive.live.com, onedrive.microsoft.com

184.25.66.72:443 cdb8d5b6da12…

Subject: onedrive.live.com

Issuer: Microsoft TLS G2 RSA CA OCSP 02

23.215.64.185:443 cdb8d5b6da12…

Subject: onedrive.live.com

Issuer: Microsoft TLS G2 RSA CA OCSP 02

104.87.217.172:443 cdb8d5b6da12…

Subject: onedrive.live.com

Issuer: Microsoft TLS G2 RSA CA OCSP 02

20.165.18.208:443 f1786baad80d…

Subject: onedrive.com

Issuer: Microsoft TLS G2 RSA CA OCSP 16

SANs: *.live.com, *.live.net, *.odwebb.svc.ms, *.odwebdf.svc.ms, *.odwebp.svc.ms, *.odwebpl.svc.ms, *.onedrive.com, *.onedrive.live.com, *.skydrive.live.com, d.sfx-df.ms, onedrive.com, p.sfx.ms

23.10.160.182:443 cdb8d5b6da12…

Subject: onedrive.live.com

Issuer: Microsoft TLS G2 RSA CA OCSP 02

23.57.253.174:443 cdb8d5b6da12…

Subject: onedrive.live.com

Issuer: Microsoft TLS G2 RSA CA OCSP 02

23.61.53.115:443 cdb8d5b6da12…

Subject: onedrive.live.com

Issuer: Microsoft TLS G2 RSA CA OCSP 02

20.241.67.65:443 f1786baad80d…

Subject: onedrive.com

Issuer: Microsoft TLS G2 RSA CA OCSP 16

SANs: *.live.com, *.live.net, *.odwebb.svc.ms, *.odwebdf.svc.ms, *.odwebp.svc.ms, *.odwebpl.svc.ms, *.onedrive.com, *.onedrive.live.com, *.skydrive.live.com, d.sfx-df.ms, onedrive.com, p.sfx.ms

184.27.1.215:443 cdb8d5b6da12…

Subject: onedrive.live.com

Issuer: Microsoft TLS G2 RSA CA OCSP 02

104.65.68.103:443 cdb8d5b6da12…

Subject: onedrive.live.com

Issuer: Microsoft TLS G2 RSA CA OCSP 02

88.221.96.68:443 cdb8d5b6da12…

Subject: onedrive.live.com

Issuer: Microsoft TLS G2 RSA CA OCSP 02

51.105.104.217:443 f1786baad80d…

Subject: onedrive.com

Issuer: Microsoft TLS G2 RSA CA OCSP 16

SANs: *.live.com, *.live.net, *.odwebb.svc.ms, *.odwebdf.svc.ms, *.odwebp.svc.ms, *.odwebpl.svc.ms, *.onedrive.com, *.onedrive.live.com, *.skydrive.live.com, d.sfx-df.ms, onedrive.com, p.sfx.ms

23.46.33.24:443 cdb8d5b6da12…

Subject: onedrive.live.com

Issuer: Microsoft TLS G2 RSA CA OCSP 02

23.58.224.159:443 cdb8d5b6da12…

Subject: onedrive.live.com

Issuer: Microsoft TLS G2 RSA CA OCSP 02

23.12.96.185:443 cdb8d5b6da12…

Subject: onedrive.live.com

Issuer: Microsoft TLS G2 RSA CA OCSP 02

13.107.43.13:443 cce0187289f7…

Subject: onedrive.com

Issuer: Microsoft TLS G2 RSA CA OCSP 10

SANs: *.live.com, *.live.net, *.odwebb.svc.ms, *.odwebdf.svc.ms, *.odwebp.svc.ms, *.odwebpl.svc.ms, *.onedrive.com, *.onedrive.live.com, *.skydrive.live.com, d.sfx-df.ms, onedrive.com, p.sfx.ms

104.102.96.182:443 cdb8d5b6da12…

Subject: onedrive.live.com

Issuer: Microsoft TLS G2 RSA CA OCSP 02

184.24.48.182:443 cdb8d5b6da12…

Subject: onedrive.live.com

Issuer: Microsoft TLS G2 RSA CA OCSP 02

52.226.235.28:443 f1786baad80d…

Subject: onedrive.com

Issuer: Microsoft TLS G2 RSA CA OCSP 16

SANs: *.live.com, *.live.net, *.odwebb.svc.ms, *.odwebdf.svc.ms, *.odwebp.svc.ms, *.odwebpl.svc.ms, *.onedrive.com, *.onedrive.live.com, *.skydrive.live.com, d.sfx-df.ms, onedrive.com, p.sfx.ms

23.223.66.186:443 cdb8d5b6da12…

Subject: onedrive.live.com

Issuer: Microsoft TLS G2 RSA CA OCSP 02

23.64.146.229:443 cdb8d5b6da12…

Subject: onedrive.live.com

Issuer: Microsoft TLS G2 RSA CA OCSP 02

23.51.132.130:443 cdb8d5b6da12…

Subject: onedrive.live.com

Issuer: Microsoft TLS G2 RSA CA OCSP 02

23.55.151.150:443 cdb8d5b6da12…

Subject: onedrive.live.com

Issuer: Microsoft TLS G2 RSA CA OCSP 02

104.101.246.63:443 cdb8d5b6da12…

Subject: onedrive.live.com

Issuer: Microsoft TLS G2 RSA CA OCSP 02

23.64.254.160:443 cdb8d5b6da12…

Subject: onedrive.live.com

Issuer: Microsoft TLS G2 RSA CA OCSP 02

2.22.130.39:443 cdb8d5b6da12…

Subject: onedrive.live.com

Issuer: Microsoft TLS G2 RSA CA OCSP 02

IPs Citing This Domain

Hosts whose HTML body references this domain. Strong signal for origin/mirror/embed discovery.

44.245.26.14:443 href · ×1

44.229.149.28:443 href · ×1

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

No origin-IP leaks detected (yet)

Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.

CT-Log Evidence

Certificates from public Certificate Transparency logs whose subject or SAN names this domain — including historic certs we never observed live.

b32858614a3e3079… google · xenon2026h2

Subject: onedrive.com

Issuer: Microsoft TLS G2 RSA CA OCSP 10

SANs: onedrive.com, p.sfx.ms, *.live.com, *.live.net, *.skydrive.live.com, *.onedrive.live.com, *.onedrive.com, d.sfx-df.ms, *.odwebb.svc.ms, *.odwebp.svc.ms, *.odwebdf.svc.ms, *.odwebpl.svc.ms

Valid: 2026-04-04 22:46:07 → 2026-10-01 22:46:07

84aab902d9596916… google · xenon2026h2

Subject: onedrive.com

Issuer: Microsoft TLS G2 RSA CA OCSP 04

SANs: onedrive.com, p.sfx.ms, *.live.com, *.live.net, *.skydrive.live.com, *.onedrive.live.com, *.onedrive.com, d.sfx-df.ms, *.odwebb.svc.ms, *.odwebp.svc.ms, *.odwebdf.svc.ms, *.odwebpl.svc.ms

Valid: 2026-02-20 17:35:02 → 2026-08-19 17:35:02

8b0135dbdf696d71… google · xenon2026h2

Subject: onedrive.com

Issuer: Microsoft TLS G2 RSA CA OCSP 04

SANs: onedrive.com, p.sfx.ms, *.live.com, *.live.net, *.skydrive.live.com, *.onedrive.live.com, *.onedrive.com, d.sfx-df.ms, *.odwebb.svc.ms, *.odwebp.svc.ms, *.odwebdf.svc.ms, *.odwebpl.svc.ms

Valid: 2026-02-20 17:35:02 → 2026-08-19 17:35:02

3be9066b6ac237a5… google · argon2026h2

Subject: onedrive.com

Issuer: Microsoft Azure RSA TLS Issuing CA 04

SANs: onedrive.com, p.sfx.ms, *.live.com, *.live.net, *.skydrive.live.com, *.onedrive.live.com, *.onedrive.com, d.sfx-df.ms, *.odwebb.svc.ms, *.odwebp.svc.ms, *.odwebdf.svc.ms, *.odwebpl.svc.ms

Valid: 2026-01-24 17:00:48 → 2026-08-25 23:59:59

6e47bdd6643bfda9… google · argon2026h2

Subject: onedrive.com

Issuer: Microsoft Azure RSA TLS Issuing CA 04

SANs: onedrive.com, p.sfx.ms, *.live.com, *.live.net, *.skydrive.live.com, *.onedrive.live.com, *.onedrive.com, d.sfx-df.ms, *.odwebb.svc.ms, *.odwebp.svc.ms, *.odwebdf.svc.ms, *.odwebpl.svc.ms

Valid: 2026-01-24 17:00:48 → 2026-08-25 23:59:59

3be9066b6ac237a5… google · xenon2026h2

Subject: onedrive.com

Issuer: Microsoft Azure RSA TLS Issuing CA 04

SANs: onedrive.com, p.sfx.ms, *.live.com, *.live.net, *.skydrive.live.com, *.onedrive.live.com, *.onedrive.com, d.sfx-df.ms, *.odwebb.svc.ms, *.odwebp.svc.ms, *.odwebdf.svc.ms, *.odwebpl.svc.ms

Valid: 2026-01-24 17:00:48 → 2026-08-25 23:59:59

6e47bdd6643bfda9… google · xenon2026h2

Subject: onedrive.com

Issuer: Microsoft Azure RSA TLS Issuing CA 04

SANs: onedrive.com, p.sfx.ms, *.live.com, *.live.net, *.skydrive.live.com, *.onedrive.live.com, *.onedrive.com, d.sfx-df.ms, *.odwebb.svc.ms, *.odwebp.svc.ms, *.odwebdf.svc.ms, *.odwebpl.svc.ms

Valid: 2026-01-24 17:00:48 → 2026-08-25 23:59:59

1005fbb0ac7fc37f… google · argon2026h2

Subject: svc.ms

Issuer: Microsoft TLS G2 RSA CA OCSP 10

SANs: svc.ms, sharepoint.com, www.sharepoint.com, *.onedrive.com, onedrive.com, 1drv.ms, *.svc.ms, sharept.ms, *.sharept.ms, sharepoint-df.com, *.1drv.ms, *.odwebp.svc.ms

Valid: 2025-12-09 18:57:33 → 2026-12-04 18:57:33

3a169bb5125ff56d… google · argon2026h2

Subject: svc.ms

Issuer: Microsoft TLS G2 RSA CA OCSP 10

SANs: svc.ms, sharepoint.com, www.sharepoint.com, *.onedrive.com, onedrive.com, 1drv.ms, *.svc.ms, sharept.ms, *.sharept.ms, sharepoint-df.com, *.1drv.ms, *.odwebp.svc.ms

Valid: 2025-12-09 18:57:33 → 2026-12-04 18:57:33

1005fbb0ac7fc37f… google · xenon2026h2

Subject: svc.ms

Issuer: Microsoft TLS G2 RSA CA OCSP 10

SANs: svc.ms, sharepoint.com, www.sharepoint.com, *.onedrive.com, onedrive.com, 1drv.ms, *.svc.ms, sharept.ms, *.sharept.ms, sharepoint-df.com, *.1drv.ms, *.odwebp.svc.ms

Valid: 2025-12-09 18:57:33 → 2026-12-04 18:57:33

3a169bb5125ff56d… google · xenon2026h2

Subject: svc.ms

Issuer: Microsoft TLS G2 RSA CA OCSP 10

SANs: svc.ms, sharepoint.com, www.sharepoint.com, *.onedrive.com, onedrive.com, 1drv.ms, *.svc.ms, sharept.ms, *.sharept.ms, sharepoint-df.com, *.1drv.ms, *.odwebp.svc.ms

Valid: 2025-12-09 18:57:33 → 2026-12-04 18:57:33

7eb34707ff62badd… google · argon2026h2

Subject: onedrive.live.com

Issuer: Microsoft Azure RSA TLS Issuing CA 07

Valid: 2025-10-27 23:24:44 → 2026-08-25 23:59:59

a5aa1416e558b28f… google · argon2026h2

Subject: onedrive.live.com

Issuer: Microsoft Azure RSA TLS Issuing CA 07

Valid: 2025-10-27 23:24:44 → 2026-08-25 23:59:59

7eb34707ff62badd… cloudflare · nimbus2026

Subject: onedrive.live.com

Issuer: Microsoft Azure RSA TLS Issuing CA 07

Valid: 2025-10-27 23:24:44 → 2026-08-25 23:59:59

a5aa1416e558b28f… google · xenon2026h2

Subject: onedrive.live.com

Issuer: Microsoft Azure RSA TLS Issuing CA 07

Valid: 2025-10-27 23:24:44 → 2026-08-25 23:59:59

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Domain timeline pending

Passive-DNS history accumulates as our forward-DNS crawler observes A/AAAA/MX/NS/TXT records over time.