Domain

recent.svc.cloud.microsoft

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

DNS Check HTTP Check Run Full Scan .microsoft TLD

Run a live full scan of recent.svc.cloud.microsoft

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now

Hosting IPs

100

A/AAAA targets

Subdomains

—

CT + scan + body

Record Types

seen in DNS

Observed Certs

164

in our scans

DNS Records

52.110.0.118, 52.110.0.131, 52.110.0.155, 52.110.0.39, 52.110.0.45, 52.110.0.85, 52.110.17.11, 52.110.17.17

AAAA

2603:1063:2001:12::365:ff1, 2603:1063:2001:1b::365:ff1, 2603:1063:2001:2201::365:ff1, 2603:1063:2001:2203::365:ff1, 2603:1063:2001:2206::365:ff1, 2603:1063:2001:2213::365:ff1, 2603:1063:2001:221a::365:ff1, 2603:1063:2001:2220::365:ff1

—

TXT

—

CNAME

—

CAA

—

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Subdomain enumeration pending

Every subdomain ever issued a TLS cert under this apex — extracted from Certificate Transparency logs, our own scan observations and body references.

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

52.109.68.2:443 bebc511ae556…

Subject: ocws.officeapps.live.com

Issuer: Microsoft TLS G2 RSA CA OCSP 16

SANs: *.ocws-df.officeapps.live.com, *.ocws.officeapps.live.com, *.officeapps.live.com, *.recent.svc.cloud.microsoft, ocws-df.officeapps.live.com, ocws-eu.officeapps.live.com, ocws-usdc.officeapps.live.com, ocws.officeapps.live.com, recent.api.office.net, recent.svc.cloud.microsoft

52.109.28.50:443 f2ffb67ae2db…

Subject: ocws.officeapps.live.com

Issuer: Microsoft TLS G2 RSA CA OCSP 16

52.109.2.146:443 a90783d95197…

Subject: ocws.edog.officeapps.live.com

Issuer: Microsoft TLS G2 RSA CA OCSP 10

SANs: *.edog.officeapps.live.com, *.ocws.edog.officeapps.live.com, *.recent.svc.cloud.microsoft, ocws.edog.officeapps.live.com, recent.api.officeppe.net, recent.svc.cloud.microsoft

52.109.4.22:443 b58c1254fb93…

Subject: ocws.officeapps.live.com

Issuer: Microsoft TLS G2 RSA CA OCSP 02

52.109.156.1:443 06499cf32f52…

Subject: ocws.officeapps.live.com

Issuer: Microsoft TLS G2 RSA CA OCSP 04

52.109.88.188:443 3e212bd28bf6…

Subject: ocws.officeapps.live.com

Issuer: Microsoft TLS G2 RSA CA OCSP 10

IPs Citing This Domain

No citing IPs found yet

As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

No origin-IP leaks detected (yet)

Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.

CT-Log Evidence

Certificates from public Certificate Transparency logs whose subject or SAN names this domain — including historic certs we never observed live.

e64004b1eabc6538… google · xenon2026h2

Subject: ocws.edog.officeapps.live.com

Issuer: Microsoft TLS G2 RSA CA OCSP 10

SANs: ocws.edog.officeapps.live.com, *.edog.officeapps.live.com, *.ocws.edog.officeapps.live.com, recent.api.officeppe.net, *.recent.svc.cloud.microsoft, recent.svc.cloud.microsoft

Valid: 2026-04-08 07:11:27 → 2026-10-05 07:11:27

c80a7c2a87015780… google · xenon2026h2

Subject: ocws.edog.officeapps.live.com

Issuer: Microsoft TLS G2 RSA CA OCSP 16

SANs: ocws.edog.officeapps.live.com, *.edog.officeapps.live.com, *.ocws.edog.officeapps.live.com, recent.api.officeppe.net, *.recent.svc.cloud.microsoft, recent.svc.cloud.microsoft

Valid: 2026-04-08 06:31:45 → 2026-10-05 06:31:45

ab16446c6b4732b7… google · xenon2026h2

Subject: ocws.officeapps.live.com

Issuer: Microsoft TLS G2 RSA CA OCSP 04

SANs: ocws.officeapps.live.com, *.officeapps.live.com, ocws-usdc.officeapps.live.com, *.ocws.officeapps.live.com, recent.api.office.net, ocws-df.officeapps.live.com, *.ocws-df.officeapps.live.com, ocws-eu.officeapps.live.com, *.recent.svc.cloud.microsoft, recent.svc.cloud.microsoft

Valid: 2026-04-03 13:50:48 → 2026-09-30 13:50:48

b66105f1cda51065… google · xenon2026h2

Subject: ocws.officeapps.live.com

Issuer: Microsoft TLS G2 RSA CA OCSP 04

Valid: 2026-04-03 13:44:07 → 2026-09-30 13:44:07

4b74ca290c59f949… google · xenon2026h2

Subject: ocws.officeapps.live.com

Issuer: Microsoft TLS G2 RSA CA OCSP 10

Valid: 2026-04-03 13:37:59 → 2026-09-30 13:37:59

70c785fd856345cb… google · xenon2026h2

Subject: ocws.officeapps.live.com

Issuer: Microsoft TLS G2 RSA CA OCSP 16

SANs: ocws.officeapps.live.com, *.officeapps.live.com, *.recent.svc.cloud.microsoft, recent.svc.cloud.microsoft, ocws-usdc.officeapps.live.com, *.ocws.officeapps.live.com, recent.api.office.net, ocws-df.officeapps.live.com, *.ocws-df.officeapps.live.com, ocws-eu.officeapps.live.com

Valid: 2026-04-03 13:37:43 → 2026-09-30 13:37:43

9ae76109b9957ceb… google · xenon2026h2

Subject: ocws.officeapps.live.com

Issuer: Microsoft TLS G2 RSA CA OCSP 10

Valid: 2026-04-03 12:50:23 → 2026-09-30 12:50:23

03895d83fab0b34d… google · xenon2026h2

Subject: ocws.officeapps.live.com

Issuer: Microsoft TLS G2 RSA CA OCSP 16

Valid: 2026-04-03 09:03:04 → 2026-09-30 09:03:04

add6c33246340280… google · xenon2026h2

Subject: ocws.officeapps.live.com

Issuer: Microsoft TLS G2 RSA CA OCSP 16

Valid: 2026-04-03 08:43:23 → 2026-09-30 08:43:23

a94aa9a7d2933678… google · xenon2026h2

Subject: ocws.officeapps.live.com

Issuer: Microsoft TLS G2 RSA CA OCSP 04

Valid: 2026-04-03 08:24:19 → 2026-09-30 08:24:19

c3d4afc3cf6835a6… google · xenon2026h2

Subject: ocws.officeapps.live.com

Issuer: Microsoft TLS G2 RSA CA OCSP 16

Valid: 2026-04-03 08:20:01 → 2026-09-30 08:20:01

155c82270d734303… google · xenon2026h2

Subject: ocws.officeapps.live.com

Issuer: Microsoft TLS G2 RSA CA OCSP 10

Valid: 2026-04-03 07:26:28 → 2026-09-30 07:26:28

8d791fdece106d7e… google · xenon2026h2

Subject: ocws.officeapps.live.com

Issuer: Microsoft TLS G2 RSA CA OCSP 02

Valid: 2026-04-03 02:08:59 → 2026-09-30 02:08:59

2b5afd2aab870c3e… google · xenon2026h2

Subject: ocws.officeapps.live.com

Issuer: Microsoft TLS G2 RSA CA OCSP 16

Valid: 2026-04-03 02:04:07 → 2026-09-30 02:04:07

8686f53693a75a2b… google · xenon2026h2

Subject: ocws.officeapps.live.com

Issuer: Microsoft TLS G2 RSA CA OCSP 10

Valid: 2026-03-30 21:23:35 → 2026-09-26 21:23:35

07112dd581396947… google · xenon2026h2

Subject: ocws.officeapps.live.com

Issuer: Microsoft TLS G2 RSA CA OCSP 10

Valid: 2026-03-30 10:35:08 → 2026-09-26 10:35:08

a873301033ab9a33… google · xenon2026h2

Subject: ocws.officeapps.live.com

Issuer: Microsoft TLS G2 RSA CA OCSP 02

Valid: 2026-03-30 07:04:51 → 2026-09-26 07:04:51

11c1961285fa121d… google · xenon2026h2

Subject: ocws.officeapps.live.com

Issuer: Microsoft TLS G2 RSA CA OCSP 16

Valid: 2026-03-30 04:46:30 → 2026-09-26 04:46:30

26efb6eb0c30539f… google · xenon2026h2

Subject: ocws.officeapps.live.com

Issuer: Microsoft TLS G2 RSA CA OCSP 16

Valid: 2026-03-29 23:33:52 → 2026-09-25 23:33:52

64d9cbff61824da3… google · xenon2026h2

Subject: ocws.officeapps.live.com

Issuer: Microsoft TLS G2 RSA CA OCSP 10

Valid: 2026-03-29 23:01:55 → 2026-09-25 23:01:55

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.

Type	Value	First seen	Last seen
AAAA	2603:1063:2001:23::365:ff1	2026-06-15 21:36:21.002	2026-06-15 21:36:21.002
AAAA	2603:1063:2001:9d::365:ff1	2026-06-15 21:36:21.002	2026-06-15 21:36:21.002
AAAA	2603:1063:2001:1b::365:ff1	2026-06-15 21:36:21.002	2026-06-15 21:36:21.002
A	52.110.0.85	2026-06-15 21:36:21.002	2026-07-18 03:13:21.486
A	52.110.0.131	2026-06-15 21:36:21.002	2026-06-15 21:36:21.002
A	52.110.0.45	2026-06-15 21:36:21.002	2026-06-15 21:36:21.002
AAAA	2603:1063:2001:12::365:ff1	2026-06-15 21:36:21.002	2026-06-15 21:36:21.002
A	52.110.0.155	2026-06-15 21:36:21.002	2026-07-18 03:13:21.486
A	52.110.18.130	2026-06-17 07:56:51.226	2026-07-25 16:14:56.777
AAAA	2603:1063:2001:2d0d::365:ff1	2026-06-17 07:56:51.226	2026-07-23 17:59:57.833
AAAA	2603:1063:2001:2d02::365:ff1	2026-06-17 07:56:51.226	2026-07-26 12:32:01.270
A	52.110.18.131	2026-06-17 07:56:51.226	2026-07-28 02:31:53.233
AAAA	2603:1063:2001:2d01::365:ff1	2026-06-17 07:56:51.226	2026-07-19 11:34:36.676
AAAA	2603:1063:2001:2d03::365:ff1	2026-06-17 07:56:51.226	2026-07-23 17:59:57.833
A	52.110.18.141	2026-06-17 07:56:51.226	2026-07-28 02:31:53.233
A	52.110.18.128	2026-06-17 07:56:51.226	2026-07-26 12:32:01.270
A	52.110.17.62	2026-06-17 16:06:25.312	2026-06-17 16:06:25.312
AAAA	2603:1063:2001:2d08::365:ff1	2026-06-17 16:06:25.312	2026-07-26 12:32:01.270
AAAA	2603:1063:2001:2d0a::365:ff1	2026-06-17 16:06:25.312	2026-07-26 12:32:01.270
A	52.110.17.25	2026-06-17 16:06:25.312	2026-06-17 16:06:25.312
A	52.110.17.63	2026-06-17 16:06:25.312	2026-06-19 13:45:25.415
A	52.110.17.60	2026-06-17 16:06:25.312	2026-06-21 09:24:07.493
AAAA	2603:1063:2001:222e::365:ff1	2026-06-18 20:57:43.713	2026-06-18 20:57:43.713
A	52.110.17.3	2026-06-18 20:57:43.713	2026-06-18 20:57:43.713
AAAA	2603:1063:2001:223f::365:ff1	2026-06-18 20:57:43.713	2026-06-22 00:08:23.163
A	52.110.17.42	2026-06-18 20:57:43.713	2026-06-18 20:57:43.713
AAAA	2603:1063:2001:2222::365:ff1	2026-06-18 20:57:43.713	2026-06-18 20:57:43.713
AAAA	2603:1063:2001:222a::365:ff1	2026-06-18 20:57:43.713	2026-06-19 13:45:25.415
A	52.110.17.67	2026-06-18 20:57:43.713	2026-07-16 11:16:06.698
A	52.110.17.46	2026-06-18 20:57:43.713	2026-06-18 20:57:43.713
A	52.110.18.132	2026-06-18 21:01:28.577	2026-07-28 02:31:53.233
A	52.110.18.142	2026-06-18 21:01:28.577	2026-07-28 02:31:53.233
A	52.110.18.139	2026-06-18 21:01:28.577	2026-07-26 12:32:01.270
AAAA	2603:1063:2001:2d0b::365:ff1	2026-06-18 21:01:28.577	2026-07-25 19:32:21.837
A	52.110.18.129	2026-06-18 21:01:28.577	2026-07-25 19:32:21.837
AAAA	2603:1063:2001:2d05::365:ff1	2026-06-18 21:01:28.577	2026-07-25 19:32:21.837
AAAA	2603:1063:2001:2d04::365:ff1	2026-06-19 08:07:40.715	2026-07-20 19:33:09.452
A	52.110.18.136	2026-06-19 08:07:40.715	2026-07-26 12:32:01.270
AAAA	2603:1063:2001:2d0e::365:ff1	2026-06-19 08:07:40.715	2026-07-20 19:33:09.452
AAAA	2603:1063:2001:2d00::365:ff1	2026-06-19 08:07:40.715	2026-07-23 17:59:57.833
A	52.110.17.23	2026-06-19 08:10:41.038	2026-06-19 08:10:41.038
A	52.110.17.4	2026-06-19 08:10:41.038	2026-06-19 08:10:41.038
AAAA	2603:1063:2001:221a::365:ff1	2026-06-19 08:10:41.038	2026-06-19 08:10:41.038
AAAA	2603:1063:2001:2231::365:ff1	2026-06-19 08:10:41.038	2026-06-19 08:10:41.038
A	52.110.17.29	2026-06-19 08:10:41.038	2026-06-19 08:10:41.038
A	52.110.17.35	2026-06-19 08:10:41.038	2026-06-19 08:10:41.038
AAAA	2603:1063:2001:2249::365:ff1	2026-06-19 08:10:41.038	2026-06-21 23:53:35.864
AAAA	2603:1063:2001:223b::365:ff1	2026-06-19 13:45:25.415	2026-06-19 13:45:25.415
A	52.110.17.73	2026-06-19 13:45:25.415	2026-07-25 16:53:50.294
A	52.110.17.19	2026-06-19 13:45:25.415	2026-07-18 03:21:34.075
A	52.110.17.39	2026-06-19 13:45:25.415	2026-06-19 13:45:25.415
AAAA	2603:1063:2001:2203::365:ff1	2026-06-19 13:45:25.415	2026-06-19 13:45:25.415
AAAA	2603:1063:2001:2233::365:ff1	2026-06-19 13:45:25.415	2026-06-19 13:45:25.415
AAAA	2603:1063:2001:2206::365:ff1	2026-06-21 09:24:07.493	2026-06-21 09:24:07.493
AAAA	2603:1063:2001:2238::365:ff1	2026-06-21 09:24:07.493	2026-06-21 09:24:07.493
AAAA	2603:1063:2001:2232::365:ff1	2026-06-21 09:24:07.493	2026-06-21 09:24:07.493
A	52.110.17.40	2026-06-21 09:24:07.493	2026-07-25 16:53:50.294
A	52.110.17.32	2026-06-21 09:24:07.493	2026-06-21 09:24:07.493
AAAA	2603:1063:2001:2201::365:ff1	2026-06-21 09:24:07.493	2026-06-21 09:24:07.493
A	52.110.17.58	2026-06-21 23:53:35.864	2026-06-21 23:53:35.864
AAAA	2603:1063:2001:2213::365:ff1	2026-06-21 23:53:35.864	2026-06-21 23:53:35.864
A	52.110.17.8	2026-06-21 23:53:35.864	2026-06-21 23:53:35.864
A	52.110.17.5	2026-06-21 23:53:35.864	2026-06-21 23:53:35.864
AAAA	2603:1063:2001:2240::365:ff1	2026-06-21 23:53:35.864	2026-06-21 23:53:35.864
A	52.110.17.9	2026-06-21 23:53:35.864	2026-06-21 23:53:35.864
AAAA	2603:1063:2001:2234::365:ff1	2026-06-21 23:53:35.864	2026-06-21 23:53:35.864
AAAA	2603:1063:2001:224b::365:ff1	2026-06-22 00:08:23.163	2026-06-22 00:08:23.163
A	52.110.17.47	2026-06-22 00:08:23.163	2026-06-22 00:08:23.163
A	52.110.17.69	2026-06-22 00:08:23.163	2026-07-25 16:53:50.294
AAAA	2603:1063:2001:2245::365:ff1	2026-06-22 00:08:23.163	2026-06-22 00:08:23.163
A	52.110.17.71	2026-06-22 00:08:23.163	2026-06-22 00:08:23.163
AAAA	2603:1063:2001:223c::365:ff1	2026-06-22 00:08:23.163	2026-06-22 00:08:23.163
A	52.110.17.11	2026-06-22 00:08:23.163	2026-06-22 00:08:23.163
A	52.110.18.138	2026-07-16 06:23:59.431	2026-07-25 19:32:21.837
A	52.110.18.133	2026-07-16 06:23:59.431	2026-07-26 12:32:01.270
AAAA	2603:1063:2001:222f::365:ff1	2026-07-16 06:31:18.553	2026-07-16 06:31:18.553
AAAA	2603:1063:2001:2227::365:ff1	2026-07-16 06:31:18.553	2026-07-16 06:31:18.553
AAAA	2603:1063:2001:2220::365:ff1	2026-07-16 06:31:18.553	2026-07-16 06:31:18.553
AAAA	2603:1063:2001:2242::365:ff1	2026-07-16 06:31:18.553	2026-07-16 06:31:18.553
A	52.110.17.64	2026-07-16 11:16:06.698	2026-07-16 11:16:06.698
A	52.110.17.70	2026-07-16 11:16:06.698	2026-07-16 11:16:06.698
A	52.110.17.27	2026-07-16 11:16:06.698	2026-07-16 11:16:06.698
AAAA	2603:1063:2001:2d0c::365:ff1	2026-07-16 13:06:25.944	2026-07-26 12:32:01.270
A	52.110.0.118	2026-07-18 03:13:21.486	2026-07-18 03:13:21.486
A	52.110.0.39	2026-07-18 03:13:21.486	2026-07-18 03:13:21.486
A	52.110.17.59	2026-07-18 03:21:34.075	2026-07-18 03:21:34.075
A	52.110.17.51	2026-07-18 03:21:34.075	2026-07-18 03:21:34.075
AAAA	2603:1063:2001:71f::365:ff1	2026-07-25 16:14:56.777	2026-07-25 16:14:56.777
AAAA	2603:1063:2001:70d::365:ff1	2026-07-25 16:14:56.777	2026-07-25 16:14:56.777
AAAA	2603:1063:2001:700::365:ff1	2026-07-25 16:14:56.777	2026-07-25 16:14:56.777
AAAA	2603:1063:2001:738::365:ff1	2026-07-25 16:14:56.777	2026-07-25 16:14:56.777
AAAA	2603:1063:2001:77::365:ff1	2026-07-25 16:53:50.294	2026-07-25 16:53:50.294
A	52.110.17.17	2026-07-25 16:53:50.294	2026-07-25 16:53:50.294
AAAA	2603:1063:2001:46::365:ff1	2026-07-25 16:53:50.294	2026-07-25 16:53:50.294
AAAA	2603:1063:2001:7a::365:ff1	2026-07-25 16:53:50.294	2026-07-25 16:53:50.294
AAAA	2603:1063:2001:b::365:ff1	2026-07-25 16:53:50.294	2026-07-25 16:53:50.294
AAAA	2603:1063:2001:70b::365:ff1	2026-07-28 02:31:53.233	2026-07-28 02:31:53.233
AAAA	2603:1063:2001:707::365:ff1	2026-07-28 02:31:53.233	2026-07-28 02:31:53.233
AAAA	2603:1063:2001:71a::365:ff1	2026-07-28 02:31:53.233	2026-07-28 02:31:53.233
AAAA	2603:1063:2001:72b::365:ff1	2026-07-28 02:31:53.233	2026-07-28 02:31:53.233