Check-Host.cc

Try 1.1.1.1 AS13335 check-host.cc /country/de /tld/cc
Domain

forms.office.com

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

DNS Check HTTP Check Run Full Scan .com TLD

Run a live full scan of forms.office.com

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now
Hosting IPs
51
A/AAAA targets
Subdomains
—
CT + scan + body
Record Types
2
seen in DNS
Observed Certs
283
in our scans

DNS Records

A
13.107.6.194, 13.107.9.194, 23.103.224.1, 23.103.224.114, 23.103.224.139, 23.103.224.33, 23.103.241.11, 23.103.241.15
AAAA
2603:1061:1600:15::365:c0, 2603:1061:1600:2212::365:c0, 2603:1061:1600:2213::365:c0, 2603:1061:1600:221c::365:c0, 2603:1061:1600:2234::365:c0, 2603:1061:1600:223d::365:c0, 2603:1061:1600:223e::365:c0, 2603:1061:1600:2242::365:c0
MX
—
NS
—
TXT
—
CNAME
—
CAA
—

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Subdomain enumeration pending

Every subdomain ever issued a TLS cert under this apex — extracted from Certificate Transparency logs, our own scan observations and body references.

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

Certificate observations pending

TLS certs naming this domain in subject or SANs will appear here as our scan-layer catches them.

IPs Citing This Domain

Hosts whose HTML body references this domain. Strong signal for origin/mirror/embed discovery.

18.180.21.227:443 href · ×21
157.7.135.201:443 href · ×16
38.7.15.219:443 href · ×16
102.50.244.210:443 href · ×10
204.130.200.7:443 href · ×10
100.24.59.53:443 href · ×9
93.115.96.226:80 href · ×9
216.92.148.148:443 href · ×9
54.89.88.193:443 href · ×8
153.126.213.68:80 href · ×8
147.126.2.25:443 href · ×8
48.217.187.116:80 href · ×7
35.73.190.159:443 href · ×6
202.209.187.225:80 href · ×6
34.204.242.98:80 href · ×6
202.213.218.146:443 href · ×6
43.207.236.231:80 href · ×5
103.14.12.79:80 href · ×5
181.212.98.99:80 href · ×4
44.199.85.44:443 href · ×4
51.15.25.218:443 href · ×4
140.210.89.229:80 href · ×4
54.205.167.63:443 href · ×4
13.235.221.32:80 href · ×4
54.209.129.116:443 href · ×4
218.188.149.116:80 href · ×4
82.64.64.153:443 href · ×4
142.93.41.12:80 href · ×4
38.188.185.18:443 href · ×4
54.205.167.63:80 href · ×4
23.123.168.233:8000 href · ×4
35.73.169.30:443 href · ×4
122.147.67.9:443 href · ×4
72.167.48.15:443 href · ×4
13.36.11.88:443 href · ×4
153.126.213.68:443 href · ×4
54.65.68.197:80 href · ×4
52.195.59.40:80 href · ×4
192.12.137.17:443 href · ×4
213.216.16.232:443 href · ×4
100.28.144.221:443 href · ×4
159.223.41.48:443 href · ×4
54.87.163.52:80 href · ×4
133.167.33.42:8080 href · ×4
139.180.154.74:443 href · ×4
187.33.253.18:443 href · ×4
162.0.234.155:443 href · ×4
103.27.76.185:443 href · ×4
3.133.63.42:80 href · ×4
19.12.112.96:443 href · ×3

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

No origin-IP leaks detected (yet)

Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.

CT-Log Evidence

Certificates from public Certificate Transparency logs whose subject or SAN names this domain — including historic certs we never observed live.

ca37fd9fc1581631… google · xenon2026h2
Subject: forms.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 04
SANs: *.forms.office.com, forms.microsoft.com, *.forms.microsoft.com, *.forms.osi.office.net, customervoice.microsoft.com, *.customervoice.microsoft.com, forms.cloud.microsoft, forms.static.microsoft, forms.guest.usercontent.microsoft, eu.forms.office.com, forms.office.com
Valid: 2026-04-02 07:26:54 → 2026-10-17 07:26:54
fdad05e874c68d26… google · xenon2026h2
Subject: forms.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 02
SANs: *.forms.office.com, forms.microsoft.com, *.forms.microsoft.com, *.forms.osi.office.net, customervoice.microsoft.com, *.customervoice.microsoft.com, forms.cloud.microsoft, forms.static.microsoft, forms.guest.usercontent.microsoft, eu.forms.office.com, forms.office.com
Valid: 2026-04-02 07:26:41 → 2026-10-17 07:26:41
3aea739729a3e201… google · xenon2026h2
Subject: forms.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 16
SANs: *.forms.office.com, *.forms.microsoft.com, forms.microsoft.com, *.forms.osi.office.net, customervoice.microsoft.com, *.customervoice.microsoft.com, forms.cloud.microsoft, forms.static.microsoft, forms.guest.usercontent.microsoft, eu.forms.office.com, forms.office.com
Valid: 2026-03-25 06:57:24 → 2026-10-09 06:57:24
e388e9c75aac2f71… google · xenon2026h2
Subject: forms.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 10
SANs: forms.office.com, Forms.microsoft.com, *.forms.osi.office.net, *.forms.office.com, *.forms.microsoft.com, sea-000.forms.osi.office.net, customervoice.microsoft.com, *.customervoice.microsoft.com, afd.forms.office.com, akamai.forms.office.com, forms.cloud.microsoft, forms.static.microsoft, forms.guest.usercontent.microsoft
Valid: 2026-03-19 13:45:00 → 2026-09-15 13:45:00
8fd574fbbd760217… google · xenon2026h2
Subject: forms.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 04
SANs: forms.office.com, Forms.microsoft.com, *.forms.osi.office.net, *.forms.office.com, *.forms.microsoft.com, sea-000.forms.osi.office.net, customervoice.microsoft.com, *.customervoice.microsoft.com, afd.forms.office.com, akamai.forms.office.com, forms.cloud.microsoft, forms.static.microsoft, forms.guest.usercontent.microsoft
Valid: 2026-03-19 13:44:34 → 2026-09-15 13:44:34
11014d5407c490ef… google · xenon2026h2
Subject: forms.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 04
SANs: forms.office.com, Forms.microsoft.com, *.forms.osi.office.net, *.forms.office.com, *.forms.microsoft.com, sea-000.forms.osi.office.net, customervoice.microsoft.com, *.customervoice.microsoft.com, afd.forms.office.com, akamai.forms.office.com, forms.cloud.microsoft, forms.static.microsoft, forms.guest.usercontent.microsoft
Valid: 2026-03-18 13:45:21 → 2026-09-14 13:45:21
7a7f227586bb823c… google · xenon2026h2
Subject: forms.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 04
SANs: forms.office.com, Forms.microsoft.com, *.forms.osi.office.net, *.forms.office.com, *.forms.microsoft.com, sea-000.forms.osi.office.net, customervoice.microsoft.com, *.customervoice.microsoft.com, afd.forms.office.com, akamai.forms.office.com, forms.cloud.microsoft, forms.static.microsoft, forms.guest.usercontent.microsoft
Valid: 2026-03-18 13:45:15 → 2026-09-14 13:45:15
b0ffb545d60fb539… google · xenon2026h2
Subject: forms.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 10
SANs: forms.office.com, Forms.microsoft.com, *.forms.osi.office.net, *.forms.office.com, *.forms.microsoft.com, sea-000.forms.osi.office.net, customervoice.microsoft.com, *.customervoice.microsoft.com, afd.forms.office.com, akamai.forms.office.com, forms.cloud.microsoft, forms.static.microsoft, forms.guest.usercontent.microsoft
Valid: 2026-03-18 13:45:12 → 2026-09-14 13:45:12
25c3a57f2ef8470a… google · xenon2026h2
Subject: forms.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 04
SANs: forms.office.com, Forms.microsoft.com, *.forms.osi.office.net, *.forms.office.com, *.forms.microsoft.com, sea-000.forms.osi.office.net, customervoice.microsoft.com, *.customervoice.microsoft.com, afd.forms.office.com, akamai.forms.office.com, forms.cloud.microsoft, forms.static.microsoft, forms.guest.usercontent.microsoft
Valid: 2026-03-18 13:44:38 → 2026-09-14 13:44:38
8bad6555698161b7… google · xenon2026h2
Subject: forms.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 04
SANs: forms.office.com, Forms.microsoft.com, *.forms.osi.office.net, *.forms.office.com, *.forms.microsoft.com, sea-000.forms.osi.office.net, customervoice.microsoft.com, *.customervoice.microsoft.com, afd.forms.office.com, akamai.forms.office.com, forms.cloud.microsoft, forms.static.microsoft, forms.guest.usercontent.microsoft
Valid: 2026-03-18 13:44:25 → 2026-09-14 13:44:25
bd3aa0ac7fe1d2f7… google · xenon2026h2
Subject: forms.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 04
SANs: forms.office.com, Forms.microsoft.com, *.forms.osi.office.net, *.forms.office.com, *.forms.microsoft.com, sea-000.forms.osi.office.net, customervoice.microsoft.com, *.customervoice.microsoft.com, afd.forms.office.com, akamai.forms.office.com, forms.cloud.microsoft, forms.static.microsoft, forms.guest.usercontent.microsoft
Valid: 2026-03-18 13:44:18 → 2026-09-14 13:44:18
e4b826cb0039ac81… google · xenon2026h2
Subject: forms.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 04
SANs: forms.office.com, Forms.microsoft.com, *.forms.osi.office.net, *.forms.office.com, *.forms.microsoft.com, sea-000.forms.osi.office.net, customervoice.microsoft.com, *.customervoice.microsoft.com, afd.forms.office.com, akamai.forms.office.com, forms.cloud.microsoft, forms.static.microsoft, forms.guest.usercontent.microsoft
Valid: 2026-03-18 13:40:41 → 2026-09-14 13:40:41
cb212038c36648e3… google · xenon2026h2
Subject: forms.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 04
SANs: forms.office.com, Forms.microsoft.com, *.forms.osi.office.net, *.forms.office.com, *.forms.microsoft.com, sea-000.forms.osi.office.net, customervoice.microsoft.com, *.customervoice.microsoft.com, afd.forms.office.com, akamai.forms.office.com, forms.cloud.microsoft, forms.static.microsoft, forms.guest.usercontent.microsoft
Valid: 2026-03-18 13:40:41 → 2026-09-14 13:40:41
c53416813f8e9c6e… google · xenon2026h2
Subject: forms.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 04
SANs: forms.office.com, Forms.microsoft.com, *.forms.osi.office.net, *.forms.office.com, *.forms.microsoft.com, sea-000.forms.osi.office.net, customervoice.microsoft.com, *.customervoice.microsoft.com, afd.forms.office.com, akamai.forms.office.com, forms.cloud.microsoft, forms.static.microsoft, forms.guest.usercontent.microsoft
Valid: 2026-03-18 13:40:33 → 2026-09-14 13:40:33
443b364a06c48a15… google · xenon2026h2
Subject: forms.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 04
SANs: forms.office.com, Forms.microsoft.com, *.forms.osi.office.net, *.forms.office.com, *.forms.microsoft.com, sea-000.forms.osi.office.net, customervoice.microsoft.com, *.customervoice.microsoft.com, afd.forms.office.com, akamai.forms.office.com, forms.cloud.microsoft, forms.static.microsoft, forms.guest.usercontent.microsoft
Valid: 2026-03-18 13:40:31 → 2026-09-14 13:40:31
0ad6a229cca35954… google · xenon2026h2
Subject: forms.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 04
SANs: forms.office.com, Forms.microsoft.com, *.forms.osi.office.net, *.forms.office.com, *.forms.microsoft.com, sea-000.forms.osi.office.net, customervoice.microsoft.com, *.customervoice.microsoft.com, afd.forms.office.com, akamai.forms.office.com, forms.cloud.microsoft, forms.static.microsoft, forms.guest.usercontent.microsoft
Valid: 2026-03-18 13:40:30 → 2026-09-14 13:40:30
78e34055251dd955… google · xenon2026h2
Subject: forms.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 04
SANs: forms.office.com, Forms.microsoft.com, *.forms.osi.office.net, *.forms.office.com, *.forms.microsoft.com, sea-000.forms.osi.office.net, customervoice.microsoft.com, *.customervoice.microsoft.com, afd.forms.office.com, akamai.forms.office.com, forms.cloud.microsoft, forms.static.microsoft, forms.guest.usercontent.microsoft
Valid: 2026-03-18 13:40:00 → 2026-09-14 13:40:00
0d4759649374ff3b… google · xenon2026h2
Subject: forms.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 04
SANs: forms.office.com, Forms.microsoft.com, *.forms.osi.office.net, *.forms.office.com, *.forms.microsoft.com, sea-000.forms.osi.office.net, customervoice.microsoft.com, *.customervoice.microsoft.com, afd.forms.office.com, akamai.forms.office.com, forms.cloud.microsoft, forms.static.microsoft, forms.guest.usercontent.microsoft
Valid: 2026-03-18 13:39:34 → 2026-09-14 13:39:34
f05eb5c51cc57915… google · xenon2026h2
Subject: forms.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 16
SANs: forms.office.com, Forms.microsoft.com, *.forms.osi.office.net, *.forms.office.com, *.forms.microsoft.com, sea-000.forms.osi.office.net, customervoice.microsoft.com, *.customervoice.microsoft.com, afd.forms.office.com, akamai.forms.office.com, forms.cloud.microsoft, forms.static.microsoft, forms.guest.usercontent.microsoft
Valid: 2026-03-18 13:39:32 → 2026-09-14 13:39:32
5bac6806514b1783… google · xenon2026h2
Subject: forms.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 04
SANs: forms.office.com, Forms.microsoft.com, *.forms.osi.office.net, *.forms.office.com, *.forms.microsoft.com, sea-000.forms.osi.office.net, customervoice.microsoft.com, *.customervoice.microsoft.com, afd.forms.office.com, akamai.forms.office.com, forms.cloud.microsoft, forms.static.microsoft, forms.guest.usercontent.microsoft
Valid: 2026-03-18 13:39:24 → 2026-09-14 13:39:24

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.

Type Value First seen Last seen
A 13.107.6.194 2026-05-25 21:32:03.363 2026-07-28 19:31:00.676
AAAA 2620:1ec:a92::194 2026-05-25 21:32:03.363 2026-07-28 19:31:00.676
AAAA 2620:1ec:4::194 2026-05-26 05:56:33.758 2026-07-28 13:03:27.210
A 13.107.9.194 2026-05-26 06:36:35.881 2026-07-28 13:03:27.210
AAAA 2603:1061:1600:2d01::365:c0 2026-07-16 02:28:41.244 2026-07-26 17:13:03.300
AAAA 2603:1061:1600:2d09::365:c0 2026-07-16 02:28:41.244 2026-07-26 17:13:03.300
A 23.103.242.128 2026-07-16 02:28:41.244 2026-07-26 17:13:03.300
AAAA 2603:1061:1600:2d02::365:c0 2026-07-16 02:28:41.244 2026-07-26 15:01:01.531
A 23.103.242.141 2026-07-16 02:28:41.244 2026-07-22 00:01:40.910
AAAA 2603:1061:1600:2d0a::365:c0 2026-07-16 02:28:41.244 2026-07-27 13:20:08.528
A 23.103.242.133 2026-07-16 02:28:41.244 2026-07-27 13:20:08.528
A 23.103.242.132 2026-07-16 02:28:41.244 2026-07-16 02:28:41.244
A 23.103.242.131 2026-07-20 16:55:15.251 2026-07-27 13:20:08.528
AAAA 2603:1061:1600:2d0b::365:c0 2026-07-20 16:55:15.251 2026-07-20 16:55:15.251
A 23.103.242.138 2026-07-20 16:55:15.251 2026-07-27 13:20:08.528
A 23.103.242.129 2026-07-20 16:55:15.251 2026-07-20 16:55:15.251
AAAA 2603:1061:1600:2d03::365:c0 2026-07-20 16:55:15.251 2026-07-20 16:55:15.251
AAAA 2603:1061:1600:2d00::365:c0 2026-07-20 16:55:15.251 2026-07-27 13:20:08.528
AAAA 2603:1061:1600:2d05::365:c0 2026-07-20 16:55:15.251 2026-07-26 17:13:03.300
A 23.103.242.140 2026-07-22 00:01:40.910 2026-07-27 13:20:08.528
AAAA 2603:1061:1600:2d0d::365:c0 2026-07-22 00:01:40.910 2026-07-26 15:01:01.531
AAAA 2603:1061:1600:2d0c::365:c0 2026-07-22 00:01:40.910 2026-07-26 17:13:03.300
A 23.103.242.136 2026-07-22 00:01:40.910 2026-07-25 10:04:37.983
A 23.103.241.39 2026-07-22 02:22:51.743 2026-07-25 09:55:27.162
AAAA 2603:1061:1600:2213::365:c0 2026-07-22 02:22:51.743 2026-07-22 02:22:51.743
AAAA 2603:1061:1600:223d::365:c0 2026-07-22 02:22:51.743 2026-07-22 02:22:51.743
A 23.103.241.71 2026-07-22 02:22:51.743 2026-07-22 02:22:51.743
AAAA 2603:1061:1600:2242::365:c0 2026-07-22 02:22:51.743 2026-07-25 09:55:27.162
AAAA 2603:1061:1600:223e::365:c0 2026-07-22 02:22:51.743 2026-07-22 02:22:51.743
A 23.103.241.59 2026-07-22 02:22:51.743 2026-07-22 02:22:51.743
A 23.103.241.21 2026-07-22 02:22:51.743 2026-07-24 02:35:42.567
AAAA 2603:1061:1600:15::365:c0 2026-07-24 02:35:42.567 2026-07-24 02:35:42.567
AAAA 2603:1061:1600:95::365:c0 2026-07-24 02:35:42.567 2026-07-24 02:35:42.567
AAAA 2603:1061:1600:45::365:c0 2026-07-24 02:35:42.567 2026-07-24 02:35:42.567
A 23.103.241.45 2026-07-24 02:35:42.567 2026-07-24 02:35:42.567
A 23.103.241.74 2026-07-24 02:35:42.567 2026-07-24 02:35:42.567
AAAA 2603:1061:1600:9b::365:c0 2026-07-24 02:35:42.567 2026-07-24 02:35:42.567
A 23.103.241.34 2026-07-24 02:35:42.567 2026-07-24 02:35:42.567
A 23.103.241.15 2026-07-25 09:55:27.162 2026-07-25 09:55:27.162
AAAA 2603:1061:1600:221c::365:c0 2026-07-25 09:55:27.162 2026-07-25 09:55:27.162
AAAA 2603:1061:1600:2234::365:c0 2026-07-25 09:55:27.162 2026-07-25 09:55:27.162
A 23.103.241.11 2026-07-25 09:55:27.162 2026-07-25 09:55:27.162
A 23.103.241.19 2026-07-25 09:55:27.162 2026-07-25 09:55:27.162
AAAA 2603:1061:1600:2212::365:c0 2026-07-25 09:55:27.162 2026-07-25 09:55:27.162
A 23.103.224.114 2026-07-26 15:01:01.531 2026-07-26 15:01:01.531
A 23.103.224.139 2026-07-26 15:01:01.531 2026-07-26 15:01:01.531
A 23.103.224.1 2026-07-26 15:01:01.531 2026-07-26 15:01:01.531
A 23.103.224.33 2026-07-26 15:01:01.531 2026-07-26 15:01:01.531
A 23.103.242.137 2026-07-26 17:13:03.300 2026-07-26 17:13:03.300
AAAA 2603:1061:1600:2d04::365:c0 2026-07-27 13:20:08.528 2026-07-27 13:20:08.528
AAAA 2603:1061:1600:2d08::365:c0 2026-07-27 13:20:08.528 2026-07-27 13:20:08.528