windows.net
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of windows.net
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
DNS Records
WHOIS / Registration
Registration data planned
Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.
Subdomains
Subdomain enumeration pending
Every subdomain ever issued a TLS cert under this apex — extracted from Certificate Transparency logs, our own scan observations and body references.
Tech Stack
Tech detection pending
Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.
TLS Certificates
IPs Citing This Domain
No citing IPs found yet
As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.
Origin / IP-Leak
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
| Origin IP | Origin ASN | CDN ASN | Confidence | Reasoning |
|---|---|---|---|---|
| 81.85.77.103 | AS62904 | AS8075 | 95% | cert fd3b639f… served by 81.85.77.103 (AS62904) carries SAN aadg.windows.net which currently resolves through Microsoft (AS8075) at 2603:1026:3000:d8::, 40.126.32.74, 40.126.32.140, 2603:1026:3000:d8::2 |
| 31.59.93.105 | AS56594 | AS8075 | 95% | cert 42346111… served by 31.59.93.105 (AS56594) carries SAN aadg.windows.net which currently resolves through Microsoft (AS8075) at 20.190.177.21, 20.190.177.148, 20.190.177.85, 2603:1026:3000:148::6 |
| 77.238.229.179 | AS216071 | AS8075 | 95% | cert b87a9c44… served by 77.238.229.179 (AS216071) carries SAN aadg.windows.net which currently resolves through Microsoft (AS8075) at 40.126.53.14, 2603:1026:3000:d8::, 2603:1027:1:c8::, 2603:1026:3000:d0::d |
| 185.242.85.11 | AS209847 | AS8075 | 95% | cert 0cb6ffff… served by 185.242.85.11 (AS209847) carries SAN aadg.windows.net which currently resolves through Microsoft (AS8075) at 40.126.31.128, 2603:1027:1:d8::9, 20.190.159.128, 2603:1026:3000:d8:: |
| 78.17.3.134 | AS213459 | AS8075 | 95% | cert f1b9b159… served by 78.17.3.134 (AS213459) carries SAN aadg.windows.net which currently resolves through Microsoft (AS8075) at 20.190.160.128, 2603:1026:3000:c8::7, 40.126.32.76, 2603:1027:1:d0::5 |
| 196.37.239.166 | AS3741 | AS8075 | 95% | cert 3aa516a4… served by 196.37.239.166 (AS3741) carries SAN jnb22prdstrz04a.store.core.windows.net which currently resolves through Microsoft (AS8075) at 102.133.157.12, 102.133.125.15, 102.133.252.21 |
| 185.255.178.31 | AS41745 | AS8075 | 95% | cert feade44e… served by 185.255.178.31 (AS41745) carries SAN aadg.windows.net which currently resolves through Microsoft (AS8075) at 20.190.159.2, 20.190.159.0, 20.190.159.131, 20.190.159.128 |
| 46.224.209.200 | AS24940 | AS8075 | 95% | cert 2d4c2aa2… served by 46.224.209.200 (AS24940) carries SAN windows.net which currently resolves through Microsoft (AS8075) at 20.112.250.133, 20.236.44.162, 20.231.239.246, 20.76.201.171 |
| 65.108.94.233 | AS24940 | AS8075 | 95% | cert 2d4c2aa2… served by 65.108.94.233 (AS24940) carries SAN windows.net which currently resolves through Microsoft (AS8075) at 20.112.250.133, 20.236.44.162, 20.231.239.246, 20.76.201.171 |
| 31.77.73.160 | AS200173 | AS8075 | 95% | cert f1b9b159… served by 31.77.73.160 (AS200173) carries SAN aadg.windows.net which currently resolves through Microsoft (AS8075) at 2603:1027:1:d8::7, 20.190.160.17, 20.190.160.64, 2603:1027:1:c8:: |
| 2.27.39.225 | AS215590 | AS8075 | 95% | cert 16b8ecae… served by 2.27.39.225 (AS215590) carries SAN aadg.windows.net which currently resolves through Microsoft (AS8075) at 2603:1027:1:d8::7, 20.190.160.17, 20.190.160.64, 2603:1027:1:c8:: |
| 2.27.39.225 | AS215590 | AS8075 | 95% | cert feade44e… served by 2.27.39.225 (AS215590) carries SAN aadg.windows.net which currently resolves through Microsoft (AS8075) at 2603:1027:1:d8::7, 20.190.160.17, 20.190.160.64, 2603:1027:1:c8:: |
| 45.8.93.209 | AS215439 | AS8075 | 95% | cert 286e71d0… served by 45.8.93.209 (AS215439) carries SAN aadg.windows.net which currently resolves through Microsoft (AS8075) at 2603:1027:1:d8::7, 20.190.160.17, 20.190.160.64, 2603:1027:1:c8:: |
| 178.255.222.58 | AS56971 | AS8075 | 95% | cert 42346111… served by 178.255.222.58 (AS56971) carries SAN aadg.windows.net which currently resolves through Microsoft (AS8075) at 2603:1027:1:d8::7, 20.190.160.128, 2603:1027:1:d0::5, 2603:1026:3000:c8::7 |
| 155.212.164.59 | AS29182 | AS8075 | 95% | cert 286e71d0… served by 155.212.164.59 (AS29182) carries SAN aadg.windows.net which currently resolves through Microsoft (AS8075) at 2603:1027:1:d8::7, 20.190.160.128, 2603:1027:1:d0::5, 2603:1026:3000:c8::7 |
| 192.55.236.27 | AS4972 | AS8075 | 95% | cert 56f3d78e… served by 192.55.236.27 (AS4972) carries SAN aadg.windows.net which currently resolves through Microsoft (AS8075) at 20.190.159.73, 2603:1026:3000:158::2, 2603:1027:1:150::4, 2603:1027:1:150::5 |
| 185.242.85.11 | AS209847 | AS8075 | 95% | cert e9cbb3fa… served by 185.242.85.11 (AS209847) carries SAN aadg.windows.net which currently resolves through Microsoft (AS8075) at 2603:1026:3000:150::8, 40.126.32.133, 20.190.160.65, 40.126.32.136 |
| 151.236.20.130 | AS9009 | AS8075 | 95% | cert 0cb6ffff… served by 151.236.20.130 (AS9009) carries SAN aadg.windows.net which currently resolves through Microsoft (AS8075) at 20.190.160.67, 2603:1027:1:148::5, 2603:1026:3000:150::c, 2603:1026:3000:158::2 |
| 31.56.27.12 | AS56971 | AS8075 | 95% | cert f1b9b159… served by 31.56.27.12 (AS56971) carries SAN aadg.windows.net which currently resolves through Microsoft (AS8075) at 40.126.32.136, 20.190.160.2, 40.126.32.76, 40.126.32.74 |
| 49.13.11.174 | AS24940 | AS8075 | 95% | cert 2d4c2aa2… served by 49.13.11.174 (AS24940) carries SAN windows.net which currently resolves through Microsoft (AS8075) at 20.112.250.133, 20.236.44.162, 20.231.239.246, 20.76.201.171 |
| 157.22.199.92 | AS29182 | AS8075 | 95% | cert feade44e… served by 157.22.199.92 (AS29182) carries SAN aadg.windows.net which currently resolves through Microsoft (AS8075) at 40.126.32.68, 40.126.32.140, 40.126.32.74, 20.190.160.22 |
| 65.109.163.96 | AS24940 | AS8075 | 95% | cert 2d4c2aa2… served by 65.109.163.96 (AS24940) carries SAN windows.net which currently resolves through Microsoft (AS8075) at 20.112.250.133, 20.236.44.162, 20.231.239.246, 20.76.201.171 |
Threat Intelligence
Domain threat-intel pending
Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.
History
Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.
| Type | Value | First seen | Last seen |
|---|---|---|---|
| A | 20.231.239.246 | 2026-05-25 21:42:03.389 | 2026-07-22 00:54:42.166 |
| A | 20.112.250.133 | 2026-05-25 21:42:03.389 | 2026-07-22 00:54:42.166 |
| A | 20.76.201.171 | 2026-05-25 21:42:03.389 | 2026-07-22 00:54:42.166 |
| A | 20.236.44.162 | 2026-05-25 21:42:03.389 | 2026-07-22 00:54:42.166 |
| A | 20.70.246.20 | 2026-05-25 21:42:03.389 | 2026-07-22 00:54:42.166 |
| TXT | google-site-verification=4M45IJpH1ORIVK_OCV3YRWrZYhlRwsI4fpgG__4oOYY | 2026-05-26 02:50:09.561 | 2026-07-22 00:54:42.166 |
| NS | ns1-39.azure-dns.com | 2026-05-26 02:50:09.561 | 2026-07-22 00:54:42.166 |
| NS | ns3-39.azure-dns.org | 2026-05-26 02:50:09.561 | 2026-07-22 00:54:42.166 |
| CAA | 0 contactemail "caarecordaware@microsoft.com" | 2026-05-26 02:50:09.561 | 2026-07-22 00:54:42.166 |
| TXT | v=spf1 ~all | 2026-05-26 02:50:09.561 | 2026-07-22 00:54:42.166 |
| NS | ns4-39.azure-dns.info | 2026-05-26 02:50:09.561 | 2026-07-22 00:54:42.166 |
| TXT | D-TRUST=TKAAE72D5GPTF5W | 2026-05-26 02:50:09.561 | 2026-07-22 00:54:42.166 |
| TXT | hp5z7j57tvmw14l2l2q75jbbgy0dt58r | 2026-05-26 02:50:09.561 | 2026-07-22 00:54:42.166 |
| TXT | google-site-verification=l6n41xsudWccd_jj1bS5gpdlYm7D92MHDHT3jvwk-_E | 2026-05-26 02:50:09.561 | 2026-07-22 00:54:42.166 |
| NS | ns2-39.azure-dns.net | 2026-05-26 02:50:09.561 | 2026-07-22 00:54:42.166 |