Domain

pptca.officeapps.live.com

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

DNS Check HTTP Check Run Full Scan .com TLD

Run a live full scan of pptca.officeapps.live.com

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now

Hosting IPs

A/AAAA targets

Subdomains

—

CT + scan + body

Record Types

seen in DNS

Observed Certs

in our scans

DNS Records

52.109.88.30, 52.109.89.45, 52.111.229.126, 52.111.231.52, 52.111.231.83, 52.111.236.82, 52.111.243.78, 52.111.243.83

AAAA

2603:1026:2400:1::2b, 2603:1026:2400:1::2f, 2603:1026:2404:1::40, 2603:1026:2405:1::47, 2603:1026:2405::4f, 2603:1036:2404:1::48, 2603:1063:2412::1, 2603:1063:2417::2

—

TXT

—

CNAME

—

CAA

—

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Subdomain enumeration pending

Every subdomain ever issued a TLS cert under this apex — extracted from Certificate Transparency logs, our own scan observations and body references.

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

52.109.116.98:443 a357480d9d33…

Subject: pptcs.officeapps.live.com

Issuer: Microsoft TLS G2 RSA CA OCSP 02

SANs: *.df.pptcs.svc.usercontent.microsoft, *.pptca.officeapps.live.com, *.pptcs.edog.officeapps.live.com, *.pptcs.officeapps.live.com, *.pptcs.svc.usercontent.microsoft, *.pptps.officeapps.live.com, *.sacs.core.microsoft, *.sacs.officeapps.live.com, *.thfd.officeapps.live.com, *.thmw.officeapps.live.com, df.pptcs.svc.usercontent.microsoft, pptca.officeapps.live.com, pptcs.edog.officeapps.live.com, pptcs.officeapps.live.com, pptcs.svc.usercontent.microsoft, pptps.officeapps.live.com, sacs.core.microsoft, sacs.officeapps.live.com, thfd.officeapps.live.com, thmw.officeapps.live.com

52.109.0.70:443 a357480d9d33…

Subject: pptcs.officeapps.live.com

Issuer: Microsoft TLS G2 RSA CA OCSP 02

52.111.231.51:443 a357480d9d33…

Subject: pptcs.officeapps.live.com

Issuer: Microsoft TLS G2 RSA CA OCSP 02

20.89.100.226:443 a357480d9d33…

Subject: pptcs.officeapps.live.com

Issuer: Microsoft TLS G2 RSA CA OCSP 02

20.238.124.248:443 a357480d9d33…

Subject: pptcs.officeapps.live.com

Issuer: Microsoft TLS G2 RSA CA OCSP 02

4.155.73.15:443 a357480d9d33…

Subject: pptcs.officeapps.live.com

Issuer: Microsoft TLS G2 RSA CA OCSP 02

20.210.131.217:443 a357480d9d33…

Subject: pptcs.officeapps.live.com

Issuer: Microsoft TLS G2 RSA CA OCSP 02

40.116.69.191:443 a357480d9d33…

Subject: pptcs.officeapps.live.com

Issuer: Microsoft TLS G2 RSA CA OCSP 02

52.109.112.150:443 3e9c18dda2cb…

Subject: pptcs.officeapps.live.com

Issuer: Microsoft TLS G2 RSA CA OCSP 04

SANs: *.pptca.officeapps.live.com, *.pptcs.edog.officeapps.live.com, *.pptcs.officeapps.live.com, *.pptps.officeapps.live.com, *.sacs.officeapps.live.com, *.thfd.officeapps.live.com, *.thmw.officeapps.live.com, pptca.officeapps.live.com, pptcs.edog.officeapps.live.com, pptcs.officeapps.live.com, pptps.officeapps.live.com, sacs.officeapps.live.com, thfd.officeapps.live.com, thmw.officeapps.live.com

52.109.76.61:443 3e9c18dda2cb…

Subject: pptcs.officeapps.live.com

Issuer: Microsoft TLS G2 RSA CA OCSP 04

52.109.112.2:443 7c9a777fcc82…

Subject: pptcs.officeapps.live.com

Issuer: Microsoft TLS G2 RSA CA OCSP 16

52.109.44.24:443 3e9c18dda2cb…

Subject: pptcs.officeapps.live.com

Issuer: Microsoft TLS G2 RSA CA OCSP 04

IPs Citing This Domain

No citing IPs found yet

As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

No origin-IP leaks detected (yet)

Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.

CT-Log Evidence

Certificates from public Certificate Transparency logs whose subject or SAN names this domain — including historic certs we never observed live.

f92db9c05b3d34ee… google · xenon2026h2

Subject: pptcs.officeapps.live.com

Issuer: Microsoft TLS G2 RSA CA OCSP 10

SANs: pptcs.officeapps.live.com, pptcs.edog.officeapps.live.com, pptps.officeapps.live.com, pptca.officeapps.live.com, *.pptca.officeapps.live.com, *.pptps.officeapps.live.com, *.pptcs.edog.officeapps.live.com, *.pptcs.officeapps.live.com, sacs.officeapps.live.com, *.sacs.officeapps.live.com, thmw.officeapps.live.com, *.thmw.officeapps.live.com, thfd.officeapps.live.com, *.thfd.officeapps.live.com

Valid: 2026-03-28 19:25:04 → 2026-09-24 19:25:04

7c9a777fcc82c3c4… google · xenon2026h2

Subject: pptcs.officeapps.live.com

Issuer: Microsoft TLS G2 RSA CA OCSP 16

Valid: 2026-02-13 00:52:54 → 2026-08-12 00:52:54

b53ac0879bf9026e… google · xenon2026h2

Subject: pptcs.officeapps.live.com

Issuer: Microsoft TLS G2 RSA CA OCSP 16

Valid: 2026-02-13 00:52:54 → 2026-08-12 00:52:54

9dbe610ee5f76c74… google · xenon2026h2

Subject: pptcs.officeapps.live.com

Issuer: Microsoft Azure RSA TLS Issuing CA 04

Valid: 2026-02-03 05:33:53 → 2026-08-02 05:33:53

ad97bd675debd81d… google · xenon2026h2

Subject: pptcs.officeapps.live.com

Issuer: Microsoft Azure RSA TLS Issuing CA 04

Valid: 2026-02-03 05:33:53 → 2026-08-02 05:33:53

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.

Type	Value	First seen	Last seen
AAAA	2603:1063:2412::1	2026-05-26 21:05:36.962	2026-07-26 17:56:24.590
A	52.111.231.52	2026-05-26 21:05:36.962	2026-07-21 18:01:40.440
A	52.111.243.83	2026-05-27 08:51:33.359	2026-07-26 17:48:14.998
A	52.111.231.83	2026-05-27 13:34:07.300	2026-07-25 18:19:10.881
AAAA	2603:1026:2405:1::47	2026-05-27 17:25:14.194	2026-07-23 04:08:34.984
A	52.111.243.78	2026-05-27 17:25:14.194	2026-05-27 17:25:14.194
AAAA	2603:1026:2404:1::40	2026-05-27 17:29:58.988	2026-07-21 18:01:40.440
AAAA	2603:1026:2400:1::2b	2026-06-20 23:48:28.039	2026-07-26 12:32:01.270
AAAA	2603:1063:2417::2	2026-07-19 22:05:59.013	2026-07-19 22:05:59.013
A	52.109.89.45	2026-07-19 22:05:59.013	2026-07-26 17:56:24.590
AAAA	2603:1026:2405::4f	2026-07-21 18:12:00.601	2026-07-25 18:19:10.881
AAAA	2603:1036:2404:1::48	2026-07-22 14:35:39.869	2026-07-22 14:35:39.869
A	52.111.229.126	2026-07-22 14:35:39.869	2026-07-22 14:35:39.869
A	52.109.88.30	2026-07-25 20:49:11.722	2026-07-25 20:49:11.722
A	52.111.236.82	2026-07-26 12:32:01.270	2026-07-26 12:32:01.270
AAAA	2603:1026:2400:1::2f	2026-07-26 17:48:14.998	2026-07-26 17:48:14.998