Domain

substrate-sdf.office.com

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

DNS Check HTTP Check Run Full Scan .com TLD

Run a live full scan of substrate-sdf.office.com

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now

Hosting IPs

—

A/AAAA targets

Subdomains

—

CT + scan + body

Record Types

—

seen in DNS

Observed Certs

—

in our scans

DNS Records

40.96.46.23, 40.96.55.25, 40.97.22.19, 40.97.4.122, 40.97.4.98, 40.99.168.210, 52.96.119.146, 52.96.27.2

AAAA

2603:1036:301:2114::2, 2603:1036:301:4011::2, 2603:1036:305:48c9::2, 2603:1036:903:17::5, 2603:1036:903:1::2, 2603:1036:903:24::1b, 2603:1036:903:2b::2, 2603:1036:903:4::25

—

TXT

—

CNAME

—

CAA

—

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Subdomain enumeration pending

Every subdomain ever issued a TLS cert under this apex — extracted from Certificate Transparency logs, our own scan observations and body references.

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

52.110.9.20:443 7c253690b40a…

Subject: outlook.com

Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1

SANs: *.hotmail.com, *.internal.outlook.com, *.live.com, *.office.com, *.office365.com, *.outlook.com, *.outlook.office365.com, attachment.outlook.live.net, attachment.outlook.office.net, attachment.outlook.officeppe.net, attachments-sdf.office.net, attachments.office.net, ccs.login.microsoftonline.com, hotmail.com, mail.services.live.com, office365.com, outlook.com, outlook.office.com, substrate-sdf.office.com, substrate.office.com

52.110.8.148:443 7c253690b40a…

Subject: outlook.com

Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1

40.99.58.18:443 7c253690b40a…

Subject: outlook.com

Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1

52.102.115.2:443 7c253690b40a…

Subject: outlook.com

Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1

52.98.140.2:443 7c253690b40a…

Subject: outlook.com

Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1

52.107.236.67:443 7c253690b40a…

Subject: outlook.com

Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1

52.110.12.31:443 7c253690b40a…

Subject: outlook.com

Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1

52.97.232.226:443 7c253690b40a…

Subject: outlook.com

Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1

52.123.252.195:443 7c253690b40a…

Subject: outlook.com

Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1

52.97.200.194:443 7c253690b40a…

Subject: outlook.com

Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1

52.102.114.78:443 7c253690b40a…

Subject: outlook.com

Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1

52.102.107.16:443 7c253690b40a…

Subject: outlook.com

Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1

52.123.250.160:443 7c253690b40a…

Subject: outlook.com

Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1

52.110.8.168:443 7c253690b40a…

Subject: outlook.com

Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1

40.104.39.66:443 7c253690b40a…

Subject: outlook.com

Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1

52.107.243.19:443 7c253690b40a…

Subject: outlook.com

Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1

52.107.236.80:443 7c253690b40a…

Subject: outlook.com

Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1

52.123.250.133:443 7c253690b40a…

Subject: outlook.com

Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1

52.107.244.44:443 7c253690b40a…

Subject: outlook.com

Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1

52.96.119.130:443 7c253690b40a…

Subject: outlook.com

Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1

23.103.224.45:443 7c253690b40a…

Subject: outlook.com

Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1

23.103.224.9:443 7c253690b40a…

Subject: outlook.com

Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1

52.107.246.66:443 7c253690b40a…

Subject: outlook.com

Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1

52.110.19.69:443 7c253690b40a…

Subject: outlook.com

Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1

52.102.112.30:443 7c253690b40a…

Subject: outlook.com

Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1

52.102.97.6:443 7c253690b40a…

Subject: outlook.com

Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1

52.102.112.23:443 7c253690b40a…

Subject: outlook.com

Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1

23.103.244.35:443 7c253690b40a…

Subject: outlook.com

Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1

52.110.15.144:443 7c253690b40a…

Subject: outlook.com

Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1

23.103.243.167:443 7c253690b40a…

Subject: outlook.com

Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1

IPs Citing This Domain

No citing IPs found yet

As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

No origin-IP leaks detected (yet)

Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.

CT-Log Evidence

Certificates from public Certificate Transparency logs whose subject or SAN names this domain — including historic certs we never observed live.

394e114f9601996c… google · xenon2026h2

Subject: outlook.com

Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1

SANs: outlook.com, *.hotmail.com, *.internal.outlook.com, *.live.com, *.office.com, *.office365.com, *.outlook.com, *.outlook.office365.com, attachment.outlook.live.net, attachment.outlook.office.net, attachment.outlook.officeppe.net, attachments.office.net, attachments-sdf.office.net, ccs.login.microsoftonline.com, hotmail.com, mail.services.live.com, office365.com, outlook.office.com, substrate.office.com, substrate-sdf.office.com

Valid: 2026-03-18 00:00:00 → 2026-10-02 23:59:59

561075fb08333c2e… google · xenon2026h2

Subject: outlook.com

Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1

Valid: 2026-03-18 00:00:00 → 2026-10-02 23:59:59

6265f1e95b5a724e… google · xenon2026h2

Subject: outlook.com

Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1

Valid: 2026-03-18 00:00:00 → 2026-10-02 23:59:59

9f8dadaa2438e5f2… google · xenon2026h2

Subject: outlook.com

Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1

Valid: 2026-03-18 00:00:00 → 2026-10-02 23:59:59

e2e3d910229040ce… google · xenon2026h2

Subject: outlook.com

Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1

Valid: 2026-03-18 00:00:00 → 2026-10-02 23:59:59

e3fd6b24f415b457… google · xenon2026h2

Subject: outlook.com

Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1

Valid: 2026-03-18 00:00:00 → 2026-10-02 23:59:59

5b108ca196a6f911… google · xenon2026h2

Subject: outlook.com

Issuer: Microsoft TLS G2 RSA CA OCSP 04

SANs: *.hotmail.com, *.internal.outlook.com, *.live.com, *.office.com, *.office365.com, *.outlook.com, *.outlook.office365.com, attachment.outlook.live.net, attachment.outlook.office.net, attachment.outlook.officeppe.net, attachments.office.net, attachments-sdf.office.net, ccs.login.microsoftonline.com, ccs-sdf.login.microsoftonline.com, hotmail.com, mail.services.live.com, office365.com, outlook.com, outlook.office.com, substrate.office.com, substrate-sdf.office.com

Valid: 2026-03-12 22:42:34 → 2026-09-26 22:42:34

b62daf2f63018de1… google · xenon2026h2

Subject: outlook.com

Issuer: Microsoft TLS G2 RSA CA OCSP 04

SANs: *.hotmail.com, *.internal.outlook.com, *.live.com, *.office.com, *.office365.com, *.outlook.com, *.outlook.office365.com, attachment.outlook.live.net, attachment.outlook.office.net, attachment.outlook.officeppe.net, attachments.office.net, attachments-sdf.office.net, ccs.login.microsoftonline.com, ccs-sdf.login.microsoftonline.com, hotmail.com, mail.services.live.com, office365.com, outlook.com, outlook.office.com, substrate.office.com, substrate-sdf.office.com

Valid: 2026-03-12 22:42:34 → 2026-09-26 22:42:34

0030579f4e9dfda9… google · xenon2026h2

Subject: exo-naas.office.com

Issuer: Microsoft TLS G2 RSA CA OCSP 16

SANs: outlook.office.com, outlook.office365.com, substrate.office.com, outlook-sdf.office.com, substrate-sdf.office.com, attachments.office.net, attachments-sdf.office.net, outlook.cloud.microsoft, exo-naas.office.com

Valid: 2026-02-27 18:41:01 → 2026-08-26 18:41:01

6a448094dba56fa6… google · xenon2026h2

Subject: exo-naas.office.com

Issuer: Microsoft Azure RSA TLS Issuing CA 07

Valid: 2026-02-24 08:34:43 → 2026-08-23 08:34:43

2e506f04c644d67f… google · argon2026h2

Subject: outlook.com

Issuer: DigiCert Cloud Services CA-1

SANs: *.clo.footprintdns.com, *.hotmail.com, *.internal.outlook.com, *.live.com, *.nrb.footprintdns.com, *.office.com, *.office365.com, *.outlook.com, *.outlook.office365.com, attachment.outlook.live.net, attachment.outlook.office.net, attachment.outlook.officeppe.net, attachments.office.net, attachments-sdf.office.net, ccs.login.microsoftonline.com, ccs-sdf.login.microsoftonline.com, hotmail.com, mail.services.live.com, office365.com, outlook.com, outlook.office.com, substrate.office.com, substrate-sdf.office.com

Valid: 2025-11-10 00:00:00 → 2026-11-09 23:59:59

3935bfccec8880e3… google · argon2026h2

Subject: outlook.com

Issuer: DigiCert Cloud Services CA-1

Valid: 2025-11-10 00:00:00 → 2026-11-09 23:59:59

2e506f04c644d67f… cloudflare · nimbus2026

Subject: outlook.com

Issuer: DigiCert Cloud Services CA-1

Valid: 2025-11-10 00:00:00 → 2026-11-09 23:59:59

3935bfccec8880e3… google · xenon2026h2

Subject: outlook.com

Issuer: DigiCert Cloud Services CA-1

Valid: 2025-11-10 00:00:00 → 2026-11-09 23:59:59

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.

Type	Value	First seen	Last seen
AAAA	2603:1036:301:4011::2	2026-05-26 02:43:02.200	2026-07-28 20:39:29.599
A	52.96.119.146	2026-05-26 02:43:02.200	2026-07-28 20:39:29.599
AAAA	2603:1036:301:2114::2	2026-05-26 02:43:02.200	2026-05-26 08:56:48.112
A	52.96.27.2	2026-05-26 02:43:02.200	2026-05-27 12:59:06.588
A	40.97.4.122	2026-05-26 08:56:48.112	2026-07-28 20:31:39.973
A	40.97.4.98	2026-05-26 08:56:48.112	2026-07-28 20:31:39.973
AAAA	2603:1036:903:4::25	2026-05-27 12:59:06.588	2026-07-28 20:31:39.973
AAAA	2603:1036:903:24::1b	2026-05-27 12:59:06.588	2026-07-28 20:31:39.973
A	40.99.168.210	2026-07-18 09:31:24.092	2026-07-28 20:23:38.809
AAAA	2603:1036:305:48c9::2	2026-07-18 09:31:24.092	2026-07-28 20:23:38.809
AAAA	2603:1036:903:17::5	2026-07-18 09:31:24.092	2026-07-28 20:39:29.599
A	40.97.22.19	2026-07-18 09:55:14.584	2026-07-28 20:39:29.599
A	40.96.55.25	2026-07-18 15:48:44.378	2026-07-20 14:24:52.808
A	40.96.46.23	2026-07-18 15:48:44.378	2026-07-21 08:42:27.540
AAAA	2603:1036:903:1::2	2026-07-19 01:31:02.184	2026-07-21 08:42:27.540
AAAA	2603:1036:903:2b::2	2026-07-19 01:31:02.184	2026-07-20 13:58:31.232