Domain

live.com

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

DNS Check HTTP Check Run Full Scan .com TLD

Run a live full scan of live.com

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now

Hosting IPs

2,012

A/AAAA targets

Subdomains

1,775

CT + scan + body

Record Types

seen in DNS

Observed Certs

in our scans

DNS Records

—

AAAA

—

TXT

—

CNAME

—

CAA

—

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.

Subdomain	Resolves to	Last seen
mail.services.live.com	40.98.16.3 2603:1026:900:29::f 2603:1026:c11:918::2 2603:1026:900:29::3 +634	2026-07-28 20:39:29.599
outlook.live.com	52.97.250.194 2603:1026:c03:707a::2 2603:1026:c0d:c2b::2 2603:1026:c0d:1800::2 +590	2026-07-28 19:11:54.346
login.live.com	40.126.32.140 40.126.32.74 40.126.32.133 20.190.160.131 +164	2026-07-28 17:05:15.597
ocws.officeapps.live.com	52.110.17.9 2603:1063:2001:2d0b::365:ff1 2603:1063:2001:2d00::365:ff1 2603:1063:2001:2d0e::365:ff1 +113	2026-07-28 02:31:53.233
ocws-df.officeapps.live.com	52.110.17.20 2603:1063:2001:91::365:ff1 2603:1063:2001:3f::365:ff1 2603:1063:2001:2d08::365:ff1 +102	2026-07-28 02:31:53.233
signup.live.com	20.190.147.1 20.190.159.0 20.190.159.128 20.190.159.71 +93	2026-07-28 11:08:40.176
ocws-eu.officeapps.live.com	52.110.18.136 2603:1063:2001:2d02::365:ff1 2603:1063:2001:2d03::365:ff1 2603:1063:2001:94::365:ff1 +91	2026-07-28 02:31:53.233
ocws-usdc.officeapps.live.com	52.110.17.3 2603:1063:2001:2d0e::365:ff1 2603:1063:2001:2d0d::365:ff1 2603:1063:2001:2d0c::365:ff1 +79	2026-07-28 02:31:53.233
roaming-eu.officeapps.live.com	52.110.18.139 2603:1063:2001:2226::365:ff1 2603:1063:2001:222f::365:ff1 2603:1063:2001:2207::365:ff1 +75	2026-07-26 15:01:01.531
account.live.com	20.190.159.2 20.190.159.0 20.190.159.128 20.190.159.71 +74	2026-07-28 11:08:40.176
roaming-df.officeapps.live.com	52.110.18.142 2603:1063:2001:3001::365:ff1 2603:1063:2001:3002::365:ff1 2603:1063:2001:2d03::365:ff1 +68	2026-07-26 15:01:01.531
officeapps.live.com	52.108.8.12 2603:1063:2000::12 2603:1063:2000:1::12 2603:1063:2001:2c03::365:ff1 +66	2026-07-28 23:25:36.694
odc-eu.officeapps.live.com	52.110.18.140 2603:1063:2001:2219::365:ff1 2603:1063:2001:2228::365:ff1 2603:1063:2001:2211::365:ff1 +64	2026-07-28 21:47:28.942
odc.officeapps.live.com	52.110.17.53 2603:1063:2001:2d0b::365:ff1 2603:1063:2001:2d04::365:ff1 2603:1063:2001:2d0a::365:ff1 +63	2026-07-28 21:47:28.942
roaming.officeapps.live.com	52.110.18.131 2603:1063:2001:3003::365:ff1 2603:1063:2001:3000::365:ff1 2603:1063:2001:2d0e::365:ff1 +63	2026-07-26 15:01:01.531
odcsm.officeapps.live.com	52.110.17.25 2603:1063:2001:222a::365:ff1 2603:1063:2001:2203::365:ff1 2603:1063:2001:2211::365:ff1 +60	2026-07-28 21:47:28.942
config-df.officeapps.live.com	52.110.0.19 2603:1063:2001:2d01::365:ff1 2603:1063:2001:2d0e::365:ff1 2603:1063:2001:2213::365:ff1 +59	2026-07-28 23:25:36.694
odc-df.officeapps.live.com	52.110.4.158 2603:1063:2001:2d0b::365:ff1 2603:1063:2001:2d0c::365:ff1 2603:1063:2001:2d01::365:ff1 +54	2026-07-28 21:47:28.942
view.officeapps.live.com	52.108.8.12 2603:1063:2000:2::12 2603:1063:2000:1::12 2603:1063:2000::12 +51	2026-07-28 15:14:01.364
config.officeapps.live.com	52.110.17.63 2603:1063:2001:2d0a::365:ff1 2603:1063:2001:2d04::365:ff1 2603:1063:2001:2212::365:ff1 +48	2026-07-28 23:25:36.694
mrodevicemgr.edog.officeapps.live.com	52.110.17.32 2603:1063:2001:2d0d::365:ff1 2603:1063:2001:2243::365:ff1 2603:1063:2001:223e::365:ff1 +34	2026-07-22 19:34:12.721
roaming.edog.officeapps.live.com	52.110.18.129 2603:1063:2001:2d0e::365:ff1 2603:1063:2001:2d0c::365:ff1 2603:1063:2001:2d00::365:ff1 +31	2026-07-27 00:29:28.424
nexusrules.officeapps.live.com	150.171.110.193 2603:1061:14:b7::1 2603:1061:14:72::1 150.171.110.179 +24	2026-07-18 15:36:47.008
msagfx.live.com	23.222.59.30 2a02:26f0:b200:38b::34ef 2a02:26f0:b200:3a8::34ef 2600:1408:c400:183::34ef +21	2026-07-28 17:23:57.234
odc.edog.officeapps.live.com	52.110.18.136 2603:1063:2001:2d04::365:ff1 2603:1063:2001:2d0b::365:ff1 2603:1063:2001:2d0a::365:ff1 +21	2026-07-22 18:09:12.423
api.login.live.com	20.190.159.0 20.190.160.14 20.190.160.2 20.231.128.67 +20	2026-07-27 07:02:22.555
autodiscover.live.com	52.98.232.50 2603:1026:c0d:1001::2 2603:1026:c0d:1029::2 52.98.252.98 +20	2026-07-18 18:22:20.483
excelcs.officeapps.live.com	52.111.231.20 2603:1026:2400:1::17 52.109.89.40 52.111.236.46 +20	2026-07-28 04:09:46.054
odcsm.edog.officeapps.live.com	52.110.18.142 2603:1063:2001:223d::365:ff1 2603:1063:2001:2240::365:ff1 52.110.17.27 +20	2026-07-22 18:09:12.423
pop3.live.com	40.99.204.34 2603:1026:c0d:100b::2 2603:1026:c0d:100c::2 52.98.252.226 +20	2026-07-18 18:22:20.483
mrodevicemgr.officeapps.live.com	52.110.17.62 2603:1063:2001:2d04::365:ff1 2603:1063:2001:2d08::365:ff1 52.110.18.142 +19	2026-07-28 06:23:49.431
ocws.edog.officeapps.live.com	52.110.17.54 2603:1063:2001:2d03::365:ff1 2603:1063:2001:2d0a::365:ff1 2603:1063:2001:2d05::365:ff1 +19	2026-07-25 16:14:56.777
excelca.officeapps.live.com	52.111.231.20 2603:1026:2400:1::17 52.109.89.17 52.109.88.189 +17	2026-07-28 04:09:46.054
excelps.officeapps.live.com	52.111.231.20 2603:1026:2400:1::17 52.111.231.33 52.111.236.46 +17	2026-07-28 04:09:46.054
presence.teams.live.com	52.123.140.18 52.112.101.33 52.112.103.71 52.123.144.143 +14	2026-07-27 07:19:40.268
wordca.officeapps.live.com	52.109.88.147 52.111.236.20 2603:1026:2405::22 2603:1026:2400:1::4 +14	2026-07-28 04:09:46.054
offline.officeapps.live.com	23.222.60.48 2a02:26f0:b200:2b5::363e 2a02:26f0:b200:2b9::363e 2a02:26f0:b200:1a3::363e +13	2026-07-28 03:15:39.983
choice.live.com	104.99.233.177 104.85.1.84 184.30.157.138 23.220.113.77 +12	2026-07-28 08:57:56.840
pptca.officeapps.live.com	52.111.243.83 2603:1063:2417::2 2603:1026:2404:1::40 2603:1026:2405::4f +12	2026-07-26 17:56:24.590
pptsgs.edog.officeapps.live.com	52.111.194.23 2603:1046:1402:1::2f 2603:1046:1404:1::17 2603:1046:1406:1::30 +12	2026-07-28 10:09:41.387
config.edog.officeapps.live.com	52.110.17.71 2603:1063:2001:2d03::365:ff1 52.110.18.32 52.110.18.34 +11	2026-07-28 19:22:00.900
designerapp.officeapps.live.com	52.111.243.65 2603:1026:2405:1::3a 2603:1026:2400:1::27 2603:1026:2404:1::31 +11	2026-07-28 08:49:24.096
pptps.officeapps.live.com	52.111.243.83 2603:1063:2417::2 2603:1026:2400:1::2f 52.111.229.126 +11	2026-07-26 17:56:24.590
pptsgs.officeapps.live.com	52.111.231.49 2603:1026:2404:1::39 2603:1026:2405:1::42 52.111.231.50 +11	2026-07-28 10:09:41.387
profile.live.com	23.219.139.163 23.220.113.77 23.48.10.133 184.30.157.138 +11	2026-07-28 08:57:56.840
wordps.officeapps.live.com	52.109.88.147 52.111.231.4 52.111.236.20 2603:1026:2405::22 +11	2026-07-28 04:09:46.054
pptcs.officeapps.live.com	52.111.243.83 2603:1063:2417::2 2603:1026:2400:1::2f 2603:1026:2400:1::2b +10	2026-07-26 17:56:24.590
pptmobius.officeapps.live.com	52.111.236.55 2603:1026:2404:1::2e 52.111.243.57 2603:1026:2405:1::32 +10	2026-07-28 10:49:00.176
textanalysis.officeapps.live.com	52.111.243.64 2603:1026:2404:1::33 52.111.243.62 52.111.236.58 +10	2026-07-28 13:22:58.632
to-do.live.com	52.98.179.50 2603:1026:c0d:1801::2 2603:1026:c0d:c29::2 2603:1026:c0d:c1f::2 +10	2026-07-25 09:45:42.465
wordcs.officeapps.live.com	52.109.88.147 52.111.231.4 52.111.236.20 2603:1026:2405::22 +10	2026-07-28 04:09:46.054
gcc.office.live.com	23.45.109.23 2a02:26f0:1180:481::1c24 2a02:26f0:3500:f87::1c24 2a02:26f0:3500:f8f::1c24 +9	2026-07-26 01:56:04.715
cnweb.search.live.com	88.221.25.145 23.216.77.8 88.221.25.155 23.205.106.149 +8	2026-07-28 13:03:27.210
voice.officeapps.live.com	52.111.243.122 2603:1036:2404:1::67 2603:1026:2405:1::74 2603:1026:2405:1::77 +8	2026-07-28 03:44:05.366
pptservicescast.officeapps.live.com	52.111.243.80 2603:1026:2405:1::4b 2603:1026:2405:1::48 2603:1026:2405:1::19 +7	2026-07-28 03:44:05.366
appsforoffice.edog.officeapps.live.com	104.109.143.158 2620:1ec:29:1::38 2620:1ec:48:1::38 104.109.143.150 +6	2026-07-21 15:07:11.688
images.live.com	84.53.175.8 96.16.53.151 84.53.175.11 96.16.53.137 +5	2026-07-28 13:03:27.210
msgapi.teams.live.com	20.23.50.66 4.209.222.231 135.236.68.20 135.236.224.137 +5	2026-07-28 15:34:02.265
test.live.com	9.9.9.11 6.6.6.6 6.6.6.7 6.6.6.8 +5	2026-07-18 18:22:20.483
cdn.uci.officeapps.live.com	23.216.77.184 23.216.77.165 23.216.77.158 23.216.77.147 +4	2026-05-31 08:05:40.858
concierge.live.com	150.171.109.51 2603:1061:14:23::1 13.107.226.67 13.107.253.67 +4	2026-07-26 22:47:09.700
mediasnap.edog.officeapps.live.com	52.111.230.20 2603:1036:2400::a0 2603:1036:2409::3b 2603:1036:2403::1b +4	2026-07-26 08:37:17.900
nexus.officeapps.live.com	150.171.110.52 150.171.109.100 2603:1061:14:c5::1 2603:1061:14:34::1 +4	2026-07-28 19:31:00.676
office.live.com	52.108.8.12 2603:1063:2000:1::12 2603:1063:2000::12 52.108.9.12 +4	2026-07-28 18:27:17.459
oloobe.officeapps.live.com	150.171.109.53 2603:1061:14:64::1 2603:1061:14:c4::1 2603:1061:14:34::1 +4	2026-07-28 05:49:37.765
outlook-sdf.live.com	40.97.22.19 2603:1036:903:4::25 40.97.4.122 40.97.4.98 +4	2026-07-23 20:30:23.856
storage.live.com	20.135.4.173 20.135.6.15 168.62.7.82 20.135.6.7 +4	2026-07-27 18:25:56.107
teams.live.com	52.123.129.14 2603:1063:27:3::14 2603:1063:27:4::14 2603:1063:27:2::14 +4	2026-07-27 06:01:55.389
wap.live.com	150.171.30.10 150.171.27.10 2620:1ec:33:1::10 2620:1ec:33::10 +4	2026-07-28 13:03:27.210
nexus.edog.officeapps.live.com	150.171.109.51 150.171.109.36 2603:1061:14:22::1 2603:1061:14:23::1 +3	2026-07-28 19:31:00.676
present.edog.officeapps.live.com	52.111.230.23 2603:1036:2409:1::20 2603:1046:1407::9 2603:1036:2404:1::52 +3	2026-07-28 10:49:00.176
api.live.com	4.208.64.238 20.191.57.76 20.241.67.65 20.72.98.42 +2	2026-07-25 13:59:40.236
excelcs.edog.officeapps.live.com	104.42.79.173 2603:1030:a02::14a 2a01:111:f100:1002::4134:c7ce 20.88.40.114 +2	2026-07-28 04:09:46.054
getitemsworker.edog.officeapps.live.com	52.111.230.19 2603:1046:1407::8 2603:1036:2404:1::51 2603:1036:2405:1::a +2	2026-07-28 11:08:40.176
imganalysissvc.officeapps.live.com	52.109.88.144 2603:1026:2400::1e 2603:1026:2405::36 52.109.68.62 +2	2026-07-28 01:47:12.379
ols.edog.officeapps.live.com	52.109.0.34 52.109.16.77 2603:1030:a04:14::11a 2603:1030:805:b::45 +2	2026-07-27 00:54:54.678
ols.officeapps.live.com	52.109.20.20 2a01:111:f100:1002::4134:d428 2a01:111:f100:3000::a83e:176b 52.109.0.35 +2	2026-07-25 08:28:24.067
pods.officeapps.live.com	52.109.68.57 2603:1026:2400::1b 52.109.76.136 2603:1026:2404::19 +2	2026-07-28 19:48:54.308
present.officeapps.live.com	52.109.68.42 2603:1026:2400::1a 2603:1026:2405::c 52.109.88.69 +2	2026-07-28 08:49:24.096
snap.edog.officeapps.live.com	52.111.230.15 2603:1036:2405:1::12 52.109.60.0 52.111.229.130 +2	2026-07-26 21:06:46.258
beta.live.com	20.76.201.171 20.236.44.162 20.70.246.20 20.112.250.133 +1	2026-07-18 18:22:20.483
buy.live.com	150.171.109.53 2603:1061:14:34::1 2603:1061:14:21::1 150.171.109.101 +1	2026-07-28 19:22:00.900
download.live.com	20.70.246.20 20.76.201.171 20.112.250.133 20.231.239.246 +1	2026-05-27 14:44:10.079
explore.live.com	20.70.246.20 20.236.44.162 20.231.239.246 20.112.250.133 +1	2026-07-28 10:29:13.532
gallery.live.com	20.236.44.162 20.76.201.171 20.231.239.246 20.70.246.20 +1	2026-07-24 14:51:30.611
mobile.spaces.live.com	184.30.215.6 23.222.39.90 104.102.37.145 23.207.129.161 +1	2026-07-28 05:49:37.765
sacs.officeapps.live.com	52.109.4.41 52.109.13.35 52.109.8.38 52.109.24.91 +1	2026-07-26 17:56:24.590
support.office.live.com	150.171.109.51 2603:1061:14:21::1 150.171.110.52 150.171.109.196 +1	2026-07-26 03:22:47.889
webmasters.live.com	88.221.25.155 88.221.25.145 88.221.25.169 23.216.77.8 +1	2026-07-28 13:03:27.210
api-df.live.com	4.208.64.238 20.241.67.65 20.105.125.100 20.191.57.76	2026-07-25 13:59:40.236
api.dynamic.tiles.ditu.live.com	150.171.109.34 150.171.109.101 2603:1061:14:c3::1 2603:1061:14:20::1	2026-06-22 20:01:25.494
busbuy.live.com	13.107.226.43 13.107.253.43 2620:1ec:48:1::43 2620:1ec:29:1::43	2026-06-17 12:53:43.581
c.live.com	150.171.109.53 2603:1061:14:32::1 150.171.109.196 2603:1061:14:c4::1	2026-07-24 18:11:24.835
cobalt.df.storage.live.com	168.62.7.82 20.135.4.169 20.135.6.15 20.135.6.7	2026-07-25 13:59:40.236
docs.live.com	2.18.64.211 2.18.64.197 23.72.252.57 23.72.252.89	2026-07-18 18:22:20.483
excelca.edog.officeapps.live.com	104.42.79.173 20.88.40.114 2603:1030:a02::14a 2603:1030:803:c::8	2026-07-27 01:56:40.851
excelps.edog.officeapps.live.com	20.165.4.162 104.42.79.173 2603:1030:a02::14a 2a01:111:f100:1002::4134:c7ce	2026-07-27 01:56:40.851
imganalysissvc.edog.officeapps.live.com	52.109.0.147 2a01:111:f100:3000::a83e:1a5b 2603:1036:2400::71 20.237.190.255	2026-07-28 01:47:12.379
mediasnap.officeapps.live.com	52.111.242.23 52.111.236.84 52.109.32.35 52.111.231.58	2026-07-26 08:37:17.900
oauth.live.com	20.23.132.210 20.4.194.241 20.82.16.101 20.103.88.153	2026-07-25 13:59:40.236
onedrive.live.com	13.107.139.11 13.107.137.11 150.171.41.11 150.171.43.11	2026-07-28 19:11:54.346
origin.cnweb.search.live.com	204.79.197.200 13.107.21.200 131.253.33.200 13.107.22.200	2026-07-28 13:03:27.210
photos.live.com	20.23.132.210 20.103.88.153 20.82.16.101 20.4.194.241	2026-07-28 19:11:54.346
pods.edog.officeapps.live.com	52.109.4.8 2603:1036:2405::24 52.109.60.9 2603:1046:1407::5	2026-07-28 19:48:54.308
pptwrs.officeapps.live.com	52.109.76.6 52.109.68.77 52.109.68.100 20.61.151.214	2026-07-22 23:47:15.185
privacy.teams.live.com	52.123.129.14 52.123.128.14 2603:1063:27:2::14 2603:1063:27:1::14	2026-06-20 12:08:14.336
s2s-storage.live.com	20.135.6.14 20.135.6.8 40.90.130.192 13.105.74.62	2026-07-25 13:59:40.236
skydrive.live.com	20.23.132.210 20.4.194.241 20.103.88.153 20.82.16.101	2026-07-28 19:11:54.346
snap.officeapps.live.com	52.109.68.21 2603:1026:2400::19 52.109.6.6 2603:1036:2405::25	2026-07-26 21:06:46.258
textanalysis.edog.officeapps.live.com	13.91.92.137 2a01:111:f100:3002::8987:37db 2a01:111:f100:3002::8987:37d0 13.91.93.221	2026-07-28 13:22:58.632
admin.live.com	40.97.47.240 40.96.61.2 20.69.107.175	2026-07-18 18:22:20.483
admincenter.live.com	40.97.47.240 20.69.107.175 40.96.61.2	2026-07-16 17:25:18.977
c2rsetup.officeapps.live.com	52.111.243.71 2603:1026:2405:1::40 2603:1036:2401::a	2026-07-28 06:32:03.443
df.onedrive.live.com	13.107.137.11 13.107.139.11 150.171.41.11	2026-07-23 02:50:41.985
df.s2s-storage.live.com	20.135.4.162 20.135.6.10 20.135.6.8	2026-07-25 13:59:40.236
df.storage.live.com	168.62.7.82 20.135.6.11 20.135.4.163	2026-07-25 13:59:40.236
domains.live.com	40.97.47.240 20.69.107.175 40.96.61.2	2026-07-16 17:25:18.977
emea.presence.teams.live.com	52.112.103.48 52.112.102.34 52.112.101.33	2026-07-27 07:19:40.268
groups.live.com	134.170.104.26 134.170.104.157 134.170.107.26	2026-07-28 19:11:54.346
hk2.dev.ditu.live.com	150.171.109.100 150.171.109.101 2603:1061:14:c5::1	2026-06-21 14:39:37.942

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

156.247.70.200:443 6878c61da5c4…

Subject: 9ball-live.com

Issuer: YR1

SANs: 9ball-live.com, m.9ball-live.com, www.9ball-live.com

38.174.226.249:443 af21d72f0910…

Subject: www.00097live.com

Issuer: YR1

SANs: 00097live.com, www.00097live.com

23.45.174.52:443 a91cdb708398…

Subject: *.xboxlive.com

Issuer: Microsoft TLS G2 ECC CA OCSP 02

SANs: *.xboxlive.com

52.109.0.139:443 7bad4b43251a…

Subject: config.edog.officeapps.live.com

Issuer: Microsoft TLS G2 RSA CA OCSP 16

SANs: *.config.svc.cloud.microsoft, *.edog.officeapps.live.com, config.edog.office.microsoft.com, config.edog.officeapps.live.com, config.officebeta.microsoft.com, config.svc.cloud.microsoft

104.103.204.174:443 cdb8d5b6da12…

Subject: onedrive.live.com

Issuer: Microsoft TLS G2 RSA CA OCSP 02

SANs: *.dev.live.com, *.groups.live.com, *.onedrive.com, *.onedrive.live.com, *.photos.live.com, *.skydrive.live.com, apps.live.com, devices.live.com, onedrive.com, onedrive.live.com, onedrive.microsoft.com

154.218.171.140:443 af67eb42bf7f…

Subject: about-kqblive.com

Issuer: YR2

SANs: about-kqblive.com, www.about-kqblive.com

23.42.158.52:443 a91cdb708398…

Subject: *.xboxlive.com

Issuer: Microsoft TLS G2 ECC CA OCSP 02

SANs: *.xboxlive.com

208.68.161.79:443 93a1bd0d4ac0…

Subject: thor.webserverlive.com

Issuer: thor.webserverlive.com

SANs: thor.webserverlive.com

40.90.8.15:443 fd8b687f5329…

Subject: presenceevents.xboxlive.com

Issuer: Microsoft TLS G2 RSA CA OCSP 04

SANs: presenceevents-origin.xboxlive.com, presenceevents-ppe-origin.xboxlive.com, presenceevents-ppe.xboxlive.com, presenceevents.xboxlive.com

38.33.212.168:443 20a57e883ea6…

Subject: 225alive.com

Issuer: YR1

SANs: 225alive.com, www.225alive.com

47.74.32.9:443 e04d2d9e86de…

Subject: *.zan-live.com

Issuer: JPRS Domain Validation Authority - G4

SANs: *.zan-live.com, zan-live.com

52.187.31.219:443 694b3051e68e…

Subject: config.officeapps.live.com

Issuer: Microsoft TLS G2 RSA CA OCSP 04

SANs: *.config-df.officeapps.live.com, *.config.svc.cloud.microsoft, *.office.microsoft.com, *.officeapps.live.com, *.officebeta.microsoft.com, config-df.officeapps.live.com, config.office.microsoft.com, config.officeapps.live.com, config.svc.cloud.microsoft, office14client.microsoft.com, office15client.microsoft.com, officeclient.microsoft.com

18.245.142.35:443 2093f51e2063…

Subject: prd1.cdn.pengine.revtech.glulive.com

Issuer: Amazon RSA 2048 M04

SANs: prd1.cdn.pengine.revtech.glulive.com

154.218.154.86:443 6440fd282b26…

Subject: app-lanjinglive.com.cn

Issuer: YR2

SANs: app-lanjinglive.com.cn, app.app-lanjinglive.com.cn, m.app-lanjinglive.com.cn, www.app-lanjinglive.com.cn

23.202.68.132:443 3f7f212a7085…

Subject: msagfx.live.com

Issuer: Microsoft TLS G2 RSA CA OCSP 10

SANs: auth.gfx.ms, clientconfig.passport.net, gfx.login.live.com, msagfx.live.com

45.60.231.4:636 f9ad8980fb0a…

Subject: *.aws.marketlive.com

Issuer: Go Daddy Secure Certificate Authority - G2

SANs: *.aws.marketlive.com, aws.marketlive.com

104.17.112.106:8443 a77e2d014aba…

Subject: xhamsterlive.com

Issuer: WE1

SANs: *.trk.sender.xhamsterlive.com, trk.sender.xhamsterlive.com, xhamsterlive.com

104.65.66.150:443 592681cf1a0b…

Subject: www.prosalive.com

Issuer: DigiCert Global G3 TLS ECC SHA384 2020 CA1

SANs: academia.prosa.com.mx, acc.academiaprosa.com, adfs.prosaanalytics.com, apis-data.prosa.com.mx, apis-estadisticos.prosa.com.mx, apis-sandbox.prosa.com.mx, apis.prosa.com.mx, aplicaciones.prosa.com.mx, carnet.mx, cms-academiaprosa.prosa.com.mx, cms-carnet.prosa.com.mx, cms-promocionesmsi.prosa.com.mx, cms-prosamexico.prosa.com.mx, cvs.prosa.lat, devportal-live.prosa.com.mx, devportal.prosa.com.mx, front-institucional.prosa.com.mx, ftc.carnet.mx, mdt.prosa.com.mx, pmo-prod.prosa.com.mx, proalerta.prosa.com.mx, promerchant360.com, prosaanalytics.com, prosaweb.prosa.com.mx, pruebasc.prosa.lat, sender.prosa.com.mx, servicios.web.prosa.lat, sga.prosa.com.mx, www.academiaprosa.com, www.aclaraciones.prosa.com.mx, www.carnet.mx, www.copaprosa.com, www.promocionesmsi.com.mx, www.prosa.com.mx, www.prosaanalytics.com, www.prosalive.com, www.prosamexico.mx

18.172.254.71:443 79fb15f4db07…

Subject: tastylive.com

Issuer: Amazon RSA 2048 M01

SANs: *.tastylive.com, tastylive.com

20.201.192.41:443 76b8e54b66b2…

Subject: notificationinbox.xboxlive.com

Issuer: Microsoft TLS G2 RSA CA OCSP 04

SANs: notificationinbox-ppe.xboxlive.com, notificationinbox.xboxlive.com

1.234.55.218:443 f1d1918fac43…

Subject: *.sooplive.com

Issuer: Thawte TLS RSA CA G1

SANs: *.apro.sooplive.com, *.ext-sooplive.com, *.file.sooplive.com, *.img.sooplive.com, *.m.sooplive.com, *.sooplive.com, *.stream.sooplive.com, apro.sooplive.com, ext-sooplive.com, file.sooplive.com, img.sooplive.com, m.sooplive.com, sooplive.com, stream.sooplive.com

13.35.239.13:443 79fb15f4db07…

Subject: tastylive.com

Issuer: Amazon RSA 2048 M01

SANs: *.tastylive.com, tastylive.com

20.201.200.57:443 12faf8d8fcae…

Subject: device.mgt.xboxlive.com

Issuer: Microsoft TLS G2 RSA CA OCSP 16

SANs: beta-device.mgt.xboxlive.com, device.mgt.xboxlive.com

52.108.121.3:443 8fab3d701bad…

Subject: officeapps.live.com

Issuer: Microsoft TLS G2 RSA CA OCSP 10

SANs: *.excel.cloud.microsoft, *.office.core.microsoft, *.office.guest.usercontent.microsoft, *.office.live.com, *.office.svc.cloud.microsoft, *.officeapps-df.live.com, *.officeapps.live.com, *.online.office.com, *.online.office365.com, *.optin.online.office.com, *.powerpoint.cloud.microsoft, *.th.officeapps.live.com, *.vhs.officeapps.live.com, *.view.officeapps.live.com, *.wopi.office.core.microsoft, *.wopi.online.office.net, *.word.cloud.microsoft, *.wshi.office.core.microsoft, *.wshi.online.office.net, df.excel.cloud.microsoft, df.onenote.cloud.microsoft, df.powerpoint.cloud.microsoft, df.visio.cloud.microsoft, df.word.cloud.microsoft, excel.cloud-dev.microsoft, excel.cloud.dev.microsoft, excel.cloud.microsoft, office.live.com, officeapps-df.live.com, officeapps.live.com, officeppe.live.com, onenote.cloud.dev.microsoft, onenote.cloud.microsoft, online.office.com, online.office365.com, powerpoint.cloud-dev.microsoft, powerpoint.cloud.dev.microsoft, powerpoint.cloud.microsoft, tr-ofc-atm.office.com, visio.cloud.dev.microsoft, visio.cloud.microsoft, word.cloud-dev.microsoft, word.cloud.dev.microsoft, word.cloud.microsoft

80.249.174.227:443 b42f74c7da31…

Subject: nats.alettaoceanlive.com

Issuer: YR2

SANs: nats.alettaoceanlive.com, partners.alettaoceanlive.com

45.60.231.4:587 f9ad8980fb0a…

Subject: *.aws.marketlive.com

Issuer: Go Daddy Secure Certificate Authority - G2

SANs: *.aws.marketlive.com, aws.marketlive.com

154.218.156.92:443 6440fd282b26…

Subject: app-lanjinglive.com.cn

Issuer: YR2

SANs: app-lanjinglive.com.cn, app.app-lanjinglive.com.cn, m.app-lanjinglive.com.cn, www.app-lanjinglive.com.cn

104.255.174.153:443 8ef649c3f23c…

Subject: apollo.webserverlive.com

Issuer: apollo.webserverlive.com

SANs: apollo.webserverlive.com

114.207.114.246:443 f1d1918fac43…

Subject: *.sooplive.com

Issuer: Thawte TLS RSA CA G1

45.60.175.4:8883 f9ad8980fb0a…

Subject: *.aws.marketlive.com

Issuer: Go Daddy Secure Certificate Authority - G2

SANs: *.aws.marketlive.com, aws.marketlive.com

IPs Citing This Domain

Hosts whose HTML body references this domain. Strong signal for origin/mirror/embed discovery.

123.57.144.128:443 href · ×2

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

Origin IP	Origin ASN	CDN ASN	Confidence	Reasoning
81.85.77.103	AS62904	AS8075	95%	cert fd3b639f… served by 81.85.77.103 (AS62904) carries SAN login.live.com which currently resolves through Microsoft (AS8075) at 40.126.53.8, 40.126.53.17, 40.126.53.10, 20.190.181.4
31.59.93.105	AS56594	AS8075	95%	cert 42346111… served by 31.59.93.105 (AS56594) carries SAN login.live.com which currently resolves through Microsoft (AS8075) at 40.126.53.10, 20.190.181.23, 40.126.53.11, 40.126.53.21
171.236.61.75	AS7552	AS8068	95%	cert 9840c776… served by 171.236.61.75 (AS7552) carries SAN accounts.live.com which currently resolves through Microsoft (AS8068) at 204.79.197.212, 2620:1ec:c11::212
171.236.61.75	AS7552	AS16625	95%	cert 9840c776… served by 171.236.61.75 (AS7552) carries SAN choice.live.com which currently resolves through Akamai (AS16625) at 104.99.233.177, 104.85.1.84, 23.220.113.77, 23.35.29.147
172.86.70.159	AS14956	AS8068	95%	cert f3477d87… served by 172.86.70.159 (AS14956) carries SAN 3d.live.com which currently resolves through Microsoft (AS8068) at 204.79.197.212, 2620:1ec:c11::212
172.86.70.159	AS14956	AS20940	95%	cert f3477d87… served by 172.86.70.159 (AS14956) carries SAN cnweb.search.live.com which currently resolves through Akamai (AS20940) at 23.200.0.202, 23.200.0.207, 88.221.25.155, 88.221.25.145
172.86.70.159	AS14956	AS8075	95%	cert f3477d87… served by 172.86.70.159 (AS14956) carries SAN api.search.live.com which currently resolves through Microsoft (AS8075) at 13.107.5.80
31.130.202.184	AS56740	AS8075	95%	cert f3477d87… served by 31.130.202.184 (AS56740) carries SAN api.search.live.com which currently resolves through Microsoft (AS8075) at 13.107.5.80
31.130.202.184	AS56740	AS8068	95%	cert f3477d87… served by 31.130.202.184 (AS56740) carries SAN 3d.live.com which currently resolves through Microsoft (AS8068) at 204.79.197.212, 2620:1ec:c11::212
31.130.202.184	AS56740	AS20940	95%	cert f3477d87… served by 31.130.202.184 (AS56740) carries SAN cnweb.search.live.com which currently resolves through Akamai (AS20940) at 88.221.25.155, 88.221.25.145, 23.216.77.8, 23.216.77.31
77.238.229.179	AS216071	AS8075	95%	cert b87a9c44… served by 77.238.229.179 (AS216071) carries SAN login.live.com which currently resolves through Microsoft (AS8075) at 20.190.159.73, 40.126.31.0, 20.190.159.68, 40.126.31.3
104.194.144.218	AS198983	AS8075	95%	cert 851652b4… served by 104.194.144.218 (AS198983) carries SAN outlook.live.com which currently resolves through Microsoft (AS8075) at 2603:1026:c03:6024::2, 2603:1026:c03:7065::2, 52.97.183.194, 2603:1026:c03:7067::2
104.194.144.218	AS198983	AS8068	95%	cert 851652b4… served by 104.194.144.218 (AS198983) carries SAN live.com which currently resolves through Microsoft (AS8068) at 204.79.197.212
185.242.85.11	AS209847	AS8075	95%	cert 0cb6ffff… served by 185.242.85.11 (AS209847) carries SAN login.live.com which currently resolves through Microsoft (AS8075) at 20.190.160.66, 40.126.32.133, 20.190.160.128, 20.190.160.64
78.17.3.134	AS213459	AS8075	95%	cert f1b9b159… served by 78.17.3.134 (AS213459) carries SAN login.live.com which currently resolves through Microsoft (AS8075) at 20.190.159.73, 40.126.31.67, 20.190.159.128, 20.190.159.129
185.255.178.31	AS41745	AS8075	95%	cert feade44e… served by 185.255.178.31 (AS41745) carries SAN login.live.com which currently resolves through Microsoft (AS8075) at 40.126.31.3, 20.190.159.75, 40.126.31.1, 40.126.31.71
31.77.73.160	AS200173	AS8075	95%	cert f1b9b159… served by 31.77.73.160 (AS200173) carries SAN login.live.com which currently resolves through Microsoft (AS8075) at 20.190.190.132, 20.190.190.130, 20.190.190.129, 20.190.190.195
2.27.39.225	AS215590	AS8075	95%	cert 16b8ecae… served by 2.27.39.225 (AS215590) carries SAN login.live.com which currently resolves through Microsoft (AS8075) at 20.190.190.132, 20.190.190.130, 20.190.190.129, 20.190.190.195
2.27.39.225	AS215590	AS8075	95%	cert feade44e… served by 2.27.39.225 (AS215590) carries SAN login.live.com which currently resolves through Microsoft (AS8075) at 20.190.190.132, 20.190.190.130, 20.190.190.129, 20.190.190.195
45.8.93.209	AS215439	AS8075	95%	cert 286e71d0… served by 45.8.93.209 (AS215439) carries SAN login.live.com which currently resolves through Microsoft (AS8075) at 20.190.190.132, 20.190.190.130, 20.190.190.129, 20.190.190.195
80.69.173.74	AS202053	AS8075	95%	cert 394e114f… served by 80.69.173.74 (AS202053) carries SAN mail.services.live.com which currently resolves through Microsoft (AS8075) at 2603:1026:c0d:c2b::2, 52.97.201.66, 2603:1026:c0d:1803::2, 2603:1026:c0d:1801::2
80.69.173.74	AS202053	AS8068	95%	cert 394e114f… served by 80.69.173.74 (AS202053) carries SAN live.com which currently resolves through Microsoft (AS8068) at 204.79.197.212
178.255.222.58	AS56971	AS8075	95%	cert 42346111… served by 178.255.222.58 (AS56971) carries SAN login.live.com which currently resolves through Microsoft (AS8075) at 20.190.160.132, 20.190.160.5, 20.190.160.3, 40.126.32.76
155.212.164.59	AS29182	AS8075	95%	cert 286e71d0… served by 155.212.164.59 (AS29182) carries SAN login.live.com which currently resolves through Microsoft (AS8075) at 20.190.160.132, 20.190.160.5, 20.190.160.3, 40.126.32.76
192.55.236.27	AS4972	AS8075	95%	cert 56f3d78e… served by 192.55.236.27 (AS4972) carries SAN login.live.com which currently resolves through Microsoft (AS8075) at 40.126.31.131, 40.126.31.0, 20.190.159.68, 20.190.159.129

CT-Log Evidence

Certificates from public Certificate Transparency logs whose subject or SAN names this domain — including historic certs we never observed live.

4aa4a51f110d277c… google · argon2026h2

Subject: outlook.live.com

Issuer: DigiCert Cloud Services CA-1

SANs: outlook.live.com, outlook-sdf.live.com, attachment.outlook.office.net, attachment.outlook.officeppe.net, hotmail.com, *.calendar.live.com, *.hotmail.com, *.live.com, *.mail.live.com, afd-l.office.com, live.com, *.nrb.footprintdns.com, *.fp.measure.office.com, premium.outlook.com

Valid: 2025-09-13 00:00:00 → 2026-09-12 23:59:59

c7acfa60c6bad7f7… google · argon2026h2

Subject: outlook.live.com

Issuer: DigiCert Cloud Services CA-1

Valid: 2025-09-13 00:00:00 → 2026-09-12 23:59:59

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Domain timeline pending

Passive-DNS history accumulates as our forward-DNS crawler observes A/AAAA/MX/NS/TXT records over time.