Domain

static.microsoft

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

DNS Check HTTP Check Run Full Scan .microsoft TLD

Run a live full scan of static.microsoft

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now

Hosting IPs

127

A/AAAA targets

Subdomains

181

CT + scan + body

Record Types

seen in DNS

Observed Certs

—

in our scans

DNS Records

—

AAAA

—

ns1-34.azure-dns.com, ns2-34.azure-dns.net, ns3-34.azure-dns.org, ns4-34.azure-dns.info

TXT

v=spf1 -all

CNAME

—

CAA

0 contactemail "caarecordaware@microsoft.com", 0 iodef "mailto:caarecordaware@microsoft.com", 0 issue "digicert.com", 0 issue "microsoft.com"

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.

Subdomain	Resolves to	Last seen
res.public.onecdn.static.microsoft	104.18.18.203 2a02:26f0:b200::58dd:19a0 2a02:26f0:480:f::213:7ede 2a02:26f0:480:f::213:7ec6 +42	2026-06-21 06:07:16.669
privacybanner.static.microsoft	150.171.109.51 150.171.109.34 2603:1061:14:21::1 2603:1061:14:c3::1 +13	2026-07-28 03:34:46.928
2.connectivity-test.static.microsoft	18.239.50.80 2600:9000:20ab:ec00:9:df2:7100:93a1 2600:9000:20ab:2000:9:df2:7100:93a1 2600:9000:20ab:9000:9:df2:7100:93a1 +8	2026-06-16 20:44:34.340
fg.tscdn.m365.static.microsoft	84.53.175.75 84.53.175.90 84.53.175.138 84.53.175.114 +8	2026-07-28 09:41:22.792
forms.static.microsoft	150.171.74.13 2603:1061:10::13 2603:1061:10:1::13 150.171.73.13 +4	2026-07-28 07:09:20.615
bg.tscdn.m365.static.microsoft	199.232.210.172 199.232.214.172 2a04:4e42:8e::684 2a04:4e42:4e::684 +1	2026-07-28 09:41:22.792
aiinfrastructure.static.microsoft	150.171.109.51 2603:1061:14:32::1 150.171.109.198 2603:1061:14:63::1	2026-07-27 13:31:15.179
connectivity-test.static.microsoft	204.79.197.238 2620:1ec:c11::238 2620:1ec:12::238 13.107.21.238	2026-06-20 02:43:14.726
messageencryption-purview.df.onecdn.static.microsoft	150.171.109.101 150.171.110.117 2603:1061:14:21::1 2603:1061:14:c4::1	2026-06-04 01:52:27.675
oauth.df.onecdn.static.microsoft	95.101.170.70 95.101.170.72 2a02:26f0:280:3::213:78a1 2a02:26f0:280:3::213:789a	2026-07-25 17:51:45.640
packages-bak.int.agent.deviceplatform.service.windows.static.microsoft	150.171.109.35 2603:1061:14:32::1 150.171.109.197 2603:1061:14:20::1	2026-07-15 04:01:02.193
packages.int.agent.deviceplatform.service.windows.static.microsoft	150.171.109.51 2603:1061:14:133::1 150.171.109.33 2603:1061:14:c3::1	2026-07-15 04:01:02.193
ppe.devicemgmt-cdn.teams.static.microsoft	150.171.109.51 2603:1061:14:34::1 150.171.109.197 2603:1061:14:c4::1	2026-07-28 07:46:22.233
redirection.svc.static.microsoft	52.109.20.46 2603:1026:2405::7 2603:1036:2407::6 52.109.89.118	2026-07-20 22:56:57.614
res-8.df.onecdn-staging.static.microsoft	104.18.5.128 104.18.4.128 2606:4700::6812:580 2606:4700::6812:480	2026-06-15 12:53:52.495
sb.teams.static.microsoft	199.232.210.172 199.232.214.172 2a04:4e42:4f::684 2a04:4e42:4e::684	2026-06-20 13:31:23.854
sf.teams.static.microsoft	199.232.210.172 199.232.214.172 2a04:4e42:4e::684 2a04:4e42:4f::684	2026-06-20 13:31:23.854
a.preview.ml.communications.svc.static.microsoft	23.11.40.9 2600:14e1:20:7::	2026-07-26 11:21:26.669
a.public-teams.ml.communications.svc.static.microsoft	23.11.40.9 2600:14e1:20:7::	2026-07-27 20:33:50.982
addin.insights.static.microsoft	150.171.109.196 2603:1061:14:c5::1	2026-06-20 16:28:20.090
cdn.mathprogress.edu.svc.static.microsoft	150.171.109.53 2603:1061:14:32::1	2026-07-16 14:44:37.524
df.addin.insights.static.microsoft	150.171.109.100 2603:1061:14:21::1	2026-06-21 13:57:47.229
df.insights.static.microsoft	150.171.109.183 2603:1061:14:63::1	2026-06-19 00:04:13.952
df.praise.insights.static.microsoft	150.171.109.33 2603:1061:14:64::1	2026-06-20 04:49:02.238
messageencryption.purview.static.microsoft	150.171.109.35 2603:1061:14:64::1	2026-06-23 20:56:30.887
packages-bak.ppe.agent.deviceplatform.service.windows.static.microsoft	150.171.109.33 2603:1061:14:63::1	2026-06-18 21:19:15.701
packages.ppe.agent.deviceplatform.service.windows.static.microsoft	150.171.109.198 2603:1061:14:63::1	2026-06-18 21:19:15.701
praise.insights.static.microsoft	150.171.110.56 2603:1061:14:133::1	2026-06-18 20:02:16.135
res-3.public.onecdn.static.microsoft	150.171.109.198 2603:1061:14:64::1	2026-06-19 12:33:54.114
res-4-bucket4.df.onecdn.static.microsoft	150.171.109.197 2603:1061:14:22::1	2026-06-18 15:40:48.904
satest.cloudpc.service.windows.static.microsoft	150.171.109.51 2603:1061:14:32::1	2026-07-28 14:46:42.850
stirshaken.svc.static.microsoft	150.171.109.51 2603:1061:14:34::1	2026-07-27 11:41:18.457
1.connectivity-test.static.microsoft		1970-01-01 00:00:00.000
afr.public-teams.ml.communications.svc.static.microsoft		1970-01-01 00:00:00.000
akamai.public.onecdn.static.microsoft		1970-01-01 00:00:00.000
ams.dogfood.ml.communications.svc.static.microsoft		1970-01-01 00:00:00.000
ams.preview.ml.communications.svc.static.microsoft		1970-01-01 00:00:00.000
ams.public-teams.ml.communications.svc.static.microsoft		1970-01-01 00:00:00.000
apac.public-teams.ml.communications.svc.static.microsoft		1970-01-01 00:00:00.000
appsforoffice.public.onecdn.static.microsoft		1970-01-01 00:00:00.000
automations.public.onecdn.static.microsoft		1970-01-01 00:00:00.000
b.preview.ml.communications.svc.static.microsoft		1970-01-01 00:00:00.000
b.public-teams.ml.communications.svc.static.microsoft		1970-01-01 00:00:00.000
cdn.ppe.mathprogress.edu.svc.static.microsoft		1970-01-01 00:00:00.000
cdn.windows.static.microsoft		1970-01-01 00:00:00.000
clipchamp.df.onecdn-staging.static.microsoft		1970-01-01 00:00:00.000
clipchamp.public.onecdn.static.microsoft		1970-01-01 00:00:00.000
cpcsaamssa1testdr1s.cloudpc.service.windows.static.microsoft		1970-01-01 00:00:00.000
df.onecdn-staging.static.microsoft		1970-01-01 00:00:00.000
df.onecdn.static.microsoft		1970-01-01 00:00:00.000
east.dogfood.ml.communications.svc.static.microsoft		1970-01-01 00:00:00.000
eur.preview.ml.communications.svc.static.microsoft		1970-01-01 00:00:00.000
eur.public-teams.ml.communications.svc.static.microsoft		1970-01-01 00:00:00.000
int.agent.deviceplatform.service.windows.static.microsoft		1970-01-01 00:00:00.000
int.agent.deviceplatform.windows.static.microsoft		1970-01-01 00:00:00.000
mro1cdnstorage.public.onecdn.static.microsoft		1970-01-01 00:00:00.000
nam.preview.ml.communications.svc.static.microsoft		1970-01-01 00:00:00.000
nam.public-teams.ml.communications.svc.static.microsoft		1970-01-01 00:00:00.000
oauth-backup.df.onecdn.static.microsoft		1970-01-01 00:00:00.000
oauth-backup.public.onecdn.static.microsoft		1970-01-01 00:00:00.000
oauth-m-backup.df.onecdn.static.microsoft		1970-01-01 00:00:00.000
oauth-m-backup.public.onecdn.static.microsoft		1970-01-01 00:00:00.000
oauth-m.df.onecdn.static.microsoft		1970-01-01 00:00:00.000
oauth-m.public.onecdn.static.microsoft		1970-01-01 00:00:00.000
oauth.public.onecdn.static.microsoft		1970-01-01 00:00:00.000
packages-bak.int.agent.deviceplatform.windows.static.microsoft		1970-01-01 00:00:00.000
packages-bak.pe.agent.deviceplatform.service.windows.static.microsoft		1970-01-01 00:00:00.000
packages-bak.pe.agent.deviceplatform.windows.static.microsoft		1970-01-01 00:00:00.000
packages-bak.ppe.agent.deviceplatform.windows.static.microsoft		1970-01-01 00:00:00.000
packages.int.agent.deviceplatform.windows.static.microsoft		1970-01-01 00:00:00.000
packages.pe.agent.deviceplatform.service.windows.static.microsoft		1970-01-01 00:00:00.000
packages.pe.agent.deviceplatform.windows.static.microsoft		1970-01-01 00:00:00.000
packages.ppe.agent.deviceplatform.windows.static.microsoft		1970-01-01 00:00:00.000
pe.agent.deviceplatform.service.windows.static.microsoft		1970-01-01 00:00:00.000
pe.agent.deviceplatform.windows.static.microsoft		1970-01-01 00:00:00.000
ppe.agent.deviceplatform.service.windows.static.microsoft		1970-01-01 00:00:00.000
ppe.agent.deviceplatform.windows.static.microsoft		1970-01-01 00:00:00.000
prod.bootstrap.kevlarforlinux.svc.static.microsoft		1970-01-01 00:00:00.000
public.onecdn.static.microsoft		1970-01-01 00:00:00.000
pythoneditor.excel.static.microsoft		1970-01-01 00:00:00.000
res.df.onecdn-staging.static.microsoft		1970-01-01 00:00:00.000
sam.public-teams.ml.communications.svc.static.microsoft		1970-01-01 00:00:00.000
samafr.public-teams.ml.communications.svc.static.microsoft		1970-01-01 00:00:00.000
static.microsoft		1970-01-01 00:00:00.000
stirshakendev.svc.static.microsoft		1970-01-01 00:00:00.000
sway.static.microsoft		1970-01-01 00:00:00.000
tscdn.m365.static.microsoft		1970-01-01 00:00:00.000
west.dogfood.ml.communications.svc.static.microsoft		1970-01-01 00:00:00.000

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

23.214.195.48:443 3d2550449bf1…

Subject: *.df.onecdn.static.microsoft

Issuer: Microsoft TLS G2 ECC CA OCSP 02

SANs: *.df.onecdn.static.microsoft

104.81.74.56:443 ff102c65a35d…

Subject: *.public.onecdn.static.microsoft

Issuer: Microsoft TLS G2 ECC CA OCSP 06

SANs: *.public.onecdn.static.microsoft

23.198.46.195:443 3d2550449bf1…

Subject: *.df.onecdn.static.microsoft

Issuer: Microsoft TLS G2 ECC CA OCSP 02

SANs: *.df.onecdn.static.microsoft

23.214.102.20:443 ff102c65a35d…

Subject: *.public.onecdn.static.microsoft

Issuer: Microsoft TLS G2 ECC CA OCSP 06

SANs: *.public.onecdn.static.microsoft

104.126.127.119:443 3d2550449bf1…

Subject: *.df.onecdn.static.microsoft

Issuer: Microsoft TLS G2 ECC CA OCSP 02

SANs: *.df.onecdn.static.microsoft

23.198.128.58:443 3d2550449bf1…

Subject: *.df.onecdn.static.microsoft

Issuer: Microsoft TLS G2 ECC CA OCSP 02

SANs: *.df.onecdn.static.microsoft

23.221.7.130:443 ff102c65a35d…

Subject: *.public.onecdn.static.microsoft

Issuer: Microsoft TLS G2 ECC CA OCSP 06

SANs: *.public.onecdn.static.microsoft

23.42.200.47:443 ff102c65a35d…

Subject: *.public.onecdn.static.microsoft

Issuer: Microsoft TLS G2 ECC CA OCSP 06

SANs: *.public.onecdn.static.microsoft

104.87.192.226:443 3d2550449bf1…

Subject: *.df.onecdn.static.microsoft

Issuer: Microsoft TLS G2 ECC CA OCSP 02

SANs: *.df.onecdn.static.microsoft

104.85.232.44:443 ff102c65a35d…

Subject: *.public.onecdn.static.microsoft

Issuer: Microsoft TLS G2 ECC CA OCSP 06

SANs: *.public.onecdn.static.microsoft

23.77.248.46:443 ff102c65a35d…

Subject: *.public.onecdn.static.microsoft

Issuer: Microsoft TLS G2 ECC CA OCSP 06

SANs: *.public.onecdn.static.microsoft

184.24.7.26:443 ff102c65a35d…

Subject: *.public.onecdn.static.microsoft

Issuer: Microsoft TLS G2 ECC CA OCSP 06

SANs: *.public.onecdn.static.microsoft

23.32.195.173:443 3d2550449bf1…

Subject: *.df.onecdn.static.microsoft

Issuer: Microsoft TLS G2 ECC CA OCSP 02

SANs: *.df.onecdn.static.microsoft

23.50.195.8:443 ff102c65a35d…

Subject: *.public.onecdn.static.microsoft

Issuer: Microsoft TLS G2 ECC CA OCSP 06

SANs: *.public.onecdn.static.microsoft

23.35.181.175:443 3d2550449bf1…

Subject: *.df.onecdn.static.microsoft

Issuer: Microsoft TLS G2 ECC CA OCSP 02

SANs: *.df.onecdn.static.microsoft

23.66.35.11:443 3d2550449bf1…

Subject: *.df.onecdn.static.microsoft

Issuer: Microsoft TLS G2 ECC CA OCSP 02

SANs: *.df.onecdn.static.microsoft

184.26.63.131:443 ff102c65a35d…

Subject: *.public.onecdn.static.microsoft

Issuer: Microsoft TLS G2 ECC CA OCSP 06

SANs: *.public.onecdn.static.microsoft

23.9.135.119:443 3d2550449bf1…

Subject: *.df.onecdn.static.microsoft

Issuer: Microsoft TLS G2 ECC CA OCSP 02

SANs: *.df.onecdn.static.microsoft

23.196.73.216:443 3d2550449bf1…

Subject: *.df.onecdn.static.microsoft

Issuer: Microsoft TLS G2 ECC CA OCSP 02

SANs: *.df.onecdn.static.microsoft

23.12.71.132:443 ff102c65a35d…

Subject: *.public.onecdn.static.microsoft

Issuer: Microsoft TLS G2 ECC CA OCSP 06

SANs: *.public.onecdn.static.microsoft

96.7.193.41:443 3d2550449bf1…

Subject: *.df.onecdn.static.microsoft

Issuer: Microsoft TLS G2 ECC CA OCSP 02

SANs: *.df.onecdn.static.microsoft

104.70.92.22:443 ff102c65a35d…

Subject: *.public.onecdn.static.microsoft

Issuer: Microsoft TLS G2 ECC CA OCSP 06

SANs: *.public.onecdn.static.microsoft

23.42.209.250:443 ff102c65a35d…

Subject: *.public.onecdn.static.microsoft

Issuer: Microsoft TLS G2 ECC CA OCSP 06

SANs: *.public.onecdn.static.microsoft

23.39.8.44:443 3d2550449bf1…

Subject: *.df.onecdn.static.microsoft

Issuer: Microsoft TLS G2 ECC CA OCSP 02

SANs: *.df.onecdn.static.microsoft

23.33.39.227:443 ff102c65a35d…

Subject: *.public.onecdn.static.microsoft

Issuer: Microsoft TLS G2 ECC CA OCSP 06

SANs: *.public.onecdn.static.microsoft

2.19.39.45:443 3d2550449bf1…

Subject: *.df.onecdn.static.microsoft

Issuer: Microsoft TLS G2 ECC CA OCSP 02

SANs: *.df.onecdn.static.microsoft

23.202.0.17:443 96b585b54942…

Subject: *.public.onecdn.static.microsoft

Issuer: Microsoft TLS G2 ECC CA OCSP 06

SANs: *.public.onecdn.static.microsoft

23.201.14.14:443 96b585b54942…

Subject: *.public.onecdn.static.microsoft

Issuer: Microsoft TLS G2 ECC CA OCSP 06

SANs: *.public.onecdn.static.microsoft

23.12.199.92:443 3d2550449bf1…

Subject: *.df.onecdn.static.microsoft

Issuer: Microsoft TLS G2 ECC CA OCSP 02

SANs: *.df.onecdn.static.microsoft

23.0.95.13:443 3d2550449bf1…

Subject: *.df.onecdn.static.microsoft

Issuer: Microsoft TLS G2 ECC CA OCSP 02

SANs: *.df.onecdn.static.microsoft

IPs Citing This Domain

No citing IPs found yet

As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

No origin-IP leaks detected (yet)

Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.

Type	Value	First seen	Last seen
CAA	0 issue "microsoft.com"	2026-07-15 20:04:13.980	2026-07-15 20:04:13.980
TXT	v=spf1 -all	2026-07-15 20:04:13.980	2026-07-15 20:04:13.980
NS	ns1-34.azure-dns.com	2026-07-15 20:04:13.980	2026-07-15 20:04:13.980
CAA	0 iodef "mailto:caarecordaware@microsoft.com"	2026-07-15 20:04:13.980	2026-07-15 20:04:13.980
CAA	0 contactemail "caarecordaware@microsoft.com"	2026-07-15 20:04:13.980	2026-07-15 20:04:13.980
NS	ns3-34.azure-dns.org	2026-07-15 20:04:13.980	2026-07-15 20:04:13.980
CAA	0 issue "digicert.com"	2026-07-15 20:04:13.980	2026-07-15 20:04:13.980
NS	ns4-34.azure-dns.info	2026-07-15 20:04:13.980	2026-07-15 20:04:13.980
NS	ns2-34.azure-dns.net	2026-07-15 20:04:13.980	2026-07-15 20:04:13.980