Domain
protection.office.com
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of protection.office.com
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
Hosting IPs
2
A/AAAA targets
Subdomains
—
CT + scan + body
Record Types
2
seen in DNS
Observed Certs
204
in our scans
DNS Records
A
13.107.6.192
AAAA
2620:1ec:a92::192
MX
—
NS
—
TXT
—
CNAME
—
CAA
—
WHOIS / Registration
Registration data planned
Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.
Subdomains
Subdomain enumeration pending
Every subdomain ever issued a TLS cert under this apex — extracted from Certificate Transparency logs, our own scan observations and body references.
Tech Stack
Tech detection pending
Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.
TLS Certificates
Certificate observations pending
TLS certs naming this domain in subject or SANs will appear here as our scan-layer catches them.
IPs Citing This Domain
Hosts whose HTML body references this domain. Strong signal for origin/mirror/embed discovery.
5.183.174.6:443
href · ×1
Origin / IP-Leak
USP
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
No origin-IP leaks detected (yet)
Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.
CT-Log Evidence
Certificates from public Certificate Transparency logs whose subject or SAN names this domain — including historic certs we never observed live.
df64116104b5a70a…
google · xenon2026h2
Subject: protection.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 16
SANs: protection.office.com, *.protection.office.com, compliance.microsoft.com, *.compliance.microsoft.com, security.microsoft.com, *.security.microsoft.com, *.partner-access.security.microsoft.com, *.mto.security.microsoft.com, defender.microsoft.com, purview.microsoft.com, *.purview.microsoft.com
Valid: 2026-04-06 11:31:58 → 2026-10-03 11:31:58
54cf5e46772f03d9…
google · xenon2026h2
Subject: protection.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 04
SANs: protection.office.com, *.protection.office.com, compliance.microsoft.com, df.compliance.microsoft.com, sip.compliance.microsoft.com, security.microsoft.com, df.security.microsoft.com, sip.security.microsoft.com
Valid: 2026-04-05 00:32:38 → 2026-10-02 00:32:38
a934ab37bf9fdb75…
google · xenon2026h2
Subject: protection.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 16
SANs: protection.office.com, *.protection.office.com, compliance.microsoft.com, *.compliance.microsoft.com, security.microsoft.com, *.security.microsoft.com, *.partner-access.security.microsoft.com, *.mto.security.microsoft.com, defender.microsoft.com, purview.microsoft.com, *.purview.microsoft.com, *.df.security.microsoft.com, *.sip.security.microsoft.com, *.dev.security.microsoft.com
Valid: 2026-04-04 05:29:36 → 2026-10-01 05:29:36
6ac7ac1c576cf995…
google · xenon2026h2
Subject: protection.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 10
SANs: protection.office.com, *.protection.office.com, compliance.microsoft.com, *.compliance.microsoft.com, security.microsoft.com, *.security.microsoft.com, *.partner-access.security.microsoft.com, *.mto.security.microsoft.com, defender.microsoft.com, purview.microsoft.com, *.purview.microsoft.com, *.df.security.microsoft.com, *.sip.security.microsoft.com, *.dev.security.microsoft.com
Valid: 2026-04-02 06:57:36 → 2026-09-29 06:57:36
92b942a0c4471692…
google · xenon2026h2
Subject: protection.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 16
SANs: protection.office.com, *.protection.office.com, compliance.microsoft.com, *.compliance.microsoft.com, security.microsoft.com, *.security.microsoft.com, *.partner-access.security.microsoft.com, *.mto.security.microsoft.com, defender.microsoft.com, purview.microsoft.com, *.purview.microsoft.com
Valid: 2026-04-02 01:39:22 → 2026-09-29 01:39:22
8cc8392fbeb47dbb…
google · xenon2026h2
Subject: protection.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 04
SANs: *.dev.security.microsoft.com, protection.office.com, *.protection.office.com, compliance.microsoft.com, *.compliance.microsoft.com, security.microsoft.com, *.security.microsoft.com, *.partner-access.security.microsoft.com, *.mto.security.microsoft.com, defender.microsoft.com, purview.microsoft.com, *.purview.microsoft.com, *.df.security.microsoft.com, *.sip.security.microsoft.com
Valid: 2026-03-31 19:18:47 → 2026-09-27 19:18:47
a295a3310647915b…
google · xenon2026h2
Subject: protection.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 04
SANs: protection.office.com, *.protection.office.com, compliance.microsoft.com, *.compliance.microsoft.com, security.microsoft.com, *.security.microsoft.com, *.partner-access.security.microsoft.com, *.mto.security.microsoft.com, defender.microsoft.com, purview.microsoft.com, *.purview.microsoft.com, *.df.security.microsoft.com, *.sip.security.microsoft.com, *.dev.security.microsoft.com
Valid: 2026-03-29 16:13:13 → 2026-09-25 16:13:13
721d3e32f33ee897…
google · xenon2026h2
Subject: protection.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 16
SANs: protection.office.com, *.protection.office.com, compliance.microsoft.com, *.compliance.microsoft.com, security.microsoft.com, *.security.microsoft.com, *.partner-access.security.microsoft.com, *.mto.security.microsoft.com, defender.microsoft.com, purview.microsoft.com, *.purview.microsoft.com
Valid: 2026-03-28 22:33:19 → 2026-09-24 22:33:19
90dcc6dfb4cb8b97…
google · xenon2026h2
Subject: protection.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 16
SANs: protection.office.com, *.protection.office.com, compliance.microsoft.com, *.compliance.microsoft.com, security.microsoft.com, *.security.microsoft.com, *.partner-access.security.microsoft.com, *.mto.security.microsoft.com, defender.microsoft.com, purview.microsoft.com, *.purview.microsoft.com, *.df.security.microsoft.com, *.sip.security.microsoft.com, *.dev.security.microsoft.com
Valid: 2026-03-28 17:03:36 → 2026-09-24 17:03:36
808f25a985a6b999…
google · xenon2026h2
Subject: protection.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 02
SANs: protection.office.com, *.protection.office.com, compliance.microsoft.com, *.compliance.microsoft.com, security.microsoft.com, *.security.microsoft.com, *.partner-access.security.microsoft.com, *.mto.security.microsoft.com, defender.microsoft.com, purview.microsoft.com, *.purview.microsoft.com, *.df.security.microsoft.com, *.sip.security.microsoft.com, *.dev.security.microsoft.com
Valid: 2026-03-28 15:34:00 → 2026-09-24 15:34:00
866a65ab06460f46…
google · xenon2026h2
Subject: protection.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 02
SANs: protection.office.com, *.protection.office.com, compliance.microsoft.com, *.compliance.microsoft.com, security.microsoft.com, *.security.microsoft.com, *.partner-access.security.microsoft.com, *.mto.security.microsoft.com, defender.microsoft.com, purview.microsoft.com, *.purview.microsoft.com, *.df.security.microsoft.com, *.sip.security.microsoft.com, *.dev.security.microsoft.com
Valid: 2026-03-28 15:34:00 → 2026-09-24 15:34:00
93fb0dfc46044f48…
google · xenon2026h2
Subject: protection.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 16
SANs: protection.office.com, *.protection.office.com, compliance.microsoft.com, df.compliance.microsoft.com, sip.compliance.microsoft.com, security.microsoft.com, df.security.microsoft.com, sip.security.microsoft.com
Valid: 2026-03-26 13:42:35 → 2026-09-22 13:42:35
c7e6de92e388d86a…
google · xenon2026h2
Subject: protection.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 04
SANs: protection.office.com, *.protection.office.com, compliance.microsoft.com, *.compliance.microsoft.com, security.microsoft.com, *.security.microsoft.com, *.partner-access.security.microsoft.com, *.mto.security.microsoft.com, defender.microsoft.com, purview.microsoft.com, *.purview.microsoft.com, *.df.security.microsoft.com, *.sip.security.microsoft.com
Valid: 2026-03-18 05:54:10 → 2026-09-14 05:54:10
3b667599d25c4add…
google · xenon2026h2
Subject: protection.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 02
SANs: protection.office.com, *.protection.office.com, compliance.microsoft.com, *.compliance.microsoft.com, security.microsoft.com, *.security.microsoft.com, *.partner-access.security.microsoft.com, *.mto.security.microsoft.com, defender.microsoft.com, purview.microsoft.com, *.purview.microsoft.com, *.df.security.microsoft.com, *.sip.security.microsoft.com
Valid: 2026-03-18 02:50:49 → 2026-09-14 02:50:49
dd9f07bded0ec4bb…
google · xenon2026h2
Subject: protection.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 04
SANs: protection.office.com, *.protection.office.com, compliance.microsoft.com, *.compliance.microsoft.com, security.microsoft.com, *.security.microsoft.com, *.partner-access.security.microsoft.com, *.mto.security.microsoft.com, defender.microsoft.com, purview.microsoft.com, *.purview.microsoft.com, *.df.security.microsoft.com, *.sip.security.microsoft.com
Valid: 2026-03-18 00:03:22 → 2026-09-14 00:03:22
0d5002a1f3d12dcd…
google · xenon2026h2
Subject: protection.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 02
SANs: protection.office.com, *.protection.office.com, compliance.microsoft.com, *.compliance.microsoft.com, security.microsoft.com, *.security.microsoft.com, *.partner-access.security.microsoft.com, *.mto.security.microsoft.com, defender.microsoft.com, purview.microsoft.com, *.purview.microsoft.com, *.df.security.microsoft.com, *.sip.security.microsoft.com
Valid: 2026-03-17 22:09:48 → 2026-09-13 22:09:48
8910ff58529980d3…
google · xenon2026h2
Subject: protection.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 10
SANs: protection.office.com, *.protection.office.com, compliance.microsoft.com, *.compliance.microsoft.com, security.microsoft.com, *.security.microsoft.com, *.partner-access.security.microsoft.com, *.mto.security.microsoft.com, defender.microsoft.com, purview.microsoft.com, *.purview.microsoft.com, *.df.security.microsoft.com, *.sip.security.microsoft.com
Valid: 2026-03-17 20:07:08 → 2026-09-13 20:07:08
bbd8f21ba379bc0f…
google · xenon2026h2
Subject: protection.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 04
SANs: protection.office.com, *.protection.office.com, compliance.microsoft.com, *.compliance.microsoft.com, security.microsoft.com, *.security.microsoft.com, *.partner-access.security.microsoft.com, *.mto.security.microsoft.com, defender.microsoft.com, purview.microsoft.com, *.purview.microsoft.com, *.df.security.microsoft.com, *.sip.security.microsoft.com
Valid: 2026-03-17 18:11:03 → 2026-09-13 18:11:03
9e0faae4fb55c1e5…
google · xenon2026h2
Subject: protection.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 02
SANs: protection.office.com, *.protection.office.com, compliance.microsoft.com, *.compliance.microsoft.com, security.microsoft.com, *.security.microsoft.com, *.partner-access.security.microsoft.com, *.mto.security.microsoft.com, defender.microsoft.com, purview.microsoft.com, *.purview.microsoft.com, *.df.security.microsoft.com, *.sip.security.microsoft.com
Valid: 2026-03-17 18:05:31 → 2026-09-13 18:05:31
82bb118032a224c7…
google · xenon2026h2
Subject: protection.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 02
SANs: protection.office.com, *.protection.office.com, compliance.microsoft.com, *.compliance.microsoft.com, security.microsoft.com, *.security.microsoft.com, *.partner-access.security.microsoft.com, *.mto.security.microsoft.com, defender.microsoft.com, purview.microsoft.com, *.purview.microsoft.com, *.df.security.microsoft.com, *.sip.security.microsoft.com
Valid: 2026-03-17 16:40:18 → 2026-09-13 16:40:18
Threat Intelligence
Domain threat-intel pending
Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.
History
Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.
| Type | Value | First seen | Last seen |
|---|---|---|---|
| AAAA | 2620:1ec:a92::192 | 2026-06-17 16:03:10.095 | 2026-07-28 23:56:20.652 |
| A | 13.107.6.192 | 2026-06-17 16:03:10.095 | 2026-07-28 23:56:20.652 |