Domain
live.com
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of live.com
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
Hosting IPs
—
A/AAAA targets
Subdomains
—
CT + scan + body
Record Types
—
seen in DNS
Observed Certs
—
in our scans
DNS Records
A
204.79.197.212
AAAA
—
MX
2 live-com.olc.protection.outlook.com
NS
ns1-37.azure-dns.com, ns2-37.azure-dns.net, ns3-37.azure-dns.org, ns4-37.azure-dns.info
TXT
facebook-domain-verification=atvthxwtzc3u4ubnsozavn76cusuaj, google-site-verification=0mLTLcpaFxdFNO4m1TfqB2WQ4rGtz7xpPmFwDJ9O_9Q, google-site-verification=DVGpQUbbQCBRPGlmWiTVUMyQGfLPlEVw6Z4pm39AAj4, google-site-verification=N9kowue62gCm511Op0_N2LO1JZTcjA2GYzOE22SBaiI, google-site-verification=aqgIxrIS1nghF9FDjR5tN7t6xgIVr3Dg254rmyDNwRU, google-site-verification=er-XGn5evjhwRiwIPwWyQjyHB1pigvhw-mp8saZxLCA, v=spf1 include:spf-a.hotmail.com include:spf-b.hotmail.com include:spf-c.hotmail.com include:spf-d.hotmail.com include:spf.protection.outlook.com ~all
CNAME
—
CAA
0 contactemail "caarecordaware@microsoft.com", 0 iodef "mailto:domains@microsoft.com", 0 issue "digicert.com", 0 issue "dtrust.de", 0 issue "entrust.net", 0 issue "globalsign.com", 0 issue "microsoft.com"
WHOIS / Registration
Registration data planned
Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.
Subdomains
Subdomain enumeration pending
Every subdomain ever issued a TLS cert under this apex — extracted from Certificate Transparency logs, our own scan observations and body references.
Tech Stack
Tech detection pending
Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.
TLS Certificates
Subject: 9ball-live.com
Issuer: YR1
SANs: 9ball-live.com, m.9ball-live.com, www.9ball-live.com
Subject: www.00097live.com
Issuer: YR1
SANs: 00097live.com, www.00097live.com
Subject: *.xboxlive.com
Issuer: Microsoft TLS G2 ECC CA OCSP 02
SANs: *.xboxlive.com
Subject: config.edog.officeapps.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 16
SANs: *.config.svc.cloud.microsoft, *.edog.officeapps.live.com, config.edog.office.microsoft.com, config.edog.officeapps.live.com, config.officebeta.microsoft.com, config.svc.cloud.microsoft
Subject: onedrive.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 02
SANs: *.dev.live.com, *.groups.live.com, *.onedrive.com, *.onedrive.live.com, *.photos.live.com, *.skydrive.live.com, apps.live.com, devices.live.com, onedrive.com, onedrive.live.com, onedrive.microsoft.com
Subject: about-kqblive.com
Issuer: YR2
SANs: about-kqblive.com, www.about-kqblive.com
Subject: *.xboxlive.com
Issuer: Microsoft TLS G2 ECC CA OCSP 02
SANs: *.xboxlive.com
Subject: thor.webserverlive.com
Issuer: thor.webserverlive.com
SANs: thor.webserverlive.com
Subject: presenceevents.xboxlive.com
Issuer: Microsoft TLS G2 RSA CA OCSP 04
SANs: presenceevents-origin.xboxlive.com, presenceevents-ppe-origin.xboxlive.com, presenceevents-ppe.xboxlive.com, presenceevents.xboxlive.com
Subject: 225alive.com
Issuer: YR1
SANs: 225alive.com, www.225alive.com
Subject: *.zan-live.com
Issuer: JPRS Domain Validation Authority - G4
SANs: *.zan-live.com, zan-live.com
Subject: config.officeapps.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 04
SANs: *.config-df.officeapps.live.com, *.config.svc.cloud.microsoft, *.office.microsoft.com, *.officeapps.live.com, *.officebeta.microsoft.com, config-df.officeapps.live.com, config.office.microsoft.com, config.officeapps.live.com, config.svc.cloud.microsoft, office14client.microsoft.com, office15client.microsoft.com, officeclient.microsoft.com
Subject: prd1.cdn.pengine.revtech.glulive.com
Issuer: Amazon RSA 2048 M04
SANs: prd1.cdn.pengine.revtech.glulive.com
Subject: app-lanjinglive.com.cn
Issuer: YR2
SANs: app-lanjinglive.com.cn, app.app-lanjinglive.com.cn, m.app-lanjinglive.com.cn, www.app-lanjinglive.com.cn
Subject: msagfx.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 10
SANs: auth.gfx.ms, clientconfig.passport.net, gfx.login.live.com, msagfx.live.com
Subject: *.aws.marketlive.com
Issuer: Go Daddy Secure Certificate Authority - G2
SANs: *.aws.marketlive.com, aws.marketlive.com
Subject: xhamsterlive.com
Issuer: WE1
SANs: *.trk.sender.xhamsterlive.com, trk.sender.xhamsterlive.com, xhamsterlive.com
Subject: www.prosalive.com
Issuer: DigiCert Global G3 TLS ECC SHA384 2020 CA1
SANs: academia.prosa.com.mx, acc.academiaprosa.com, adfs.prosaanalytics.com, apis-data.prosa.com.mx, apis-estadisticos.prosa.com.mx, apis-sandbox.prosa.com.mx, apis.prosa.com.mx, aplicaciones.prosa.com.mx, carnet.mx, cms-academiaprosa.prosa.com.mx, cms-carnet.prosa.com.mx, cms-promocionesmsi.prosa.com.mx, cms-prosamexico.prosa.com.mx, cvs.prosa.lat, devportal-live.prosa.com.mx, devportal.prosa.com.mx, front-institucional.prosa.com.mx, ftc.carnet.mx, mdt.prosa.com.mx, pmo-prod.prosa.com.mx, proalerta.prosa.com.mx, promerchant360.com, prosaanalytics.com, prosaweb.prosa.com.mx, pruebasc.prosa.lat, sender.prosa.com.mx, servicios.web.prosa.lat, sga.prosa.com.mx, www.academiaprosa.com, www.aclaraciones.prosa.com.mx, www.carnet.mx, www.copaprosa.com, www.promocionesmsi.com.mx, www.prosa.com.mx, www.prosaanalytics.com, www.prosalive.com, www.prosamexico.mx
Subject: tastylive.com
Issuer: Amazon RSA 2048 M01
SANs: *.tastylive.com, tastylive.com
Subject: notificationinbox.xboxlive.com
Issuer: Microsoft TLS G2 RSA CA OCSP 04
SANs: notificationinbox-ppe.xboxlive.com, notificationinbox.xboxlive.com
Subject: *.sooplive.com
Issuer: Thawte TLS RSA CA G1
SANs: *.apro.sooplive.com, *.ext-sooplive.com, *.file.sooplive.com, *.img.sooplive.com, *.m.sooplive.com, *.sooplive.com, *.stream.sooplive.com, apro.sooplive.com, ext-sooplive.com, file.sooplive.com, img.sooplive.com, m.sooplive.com, sooplive.com, stream.sooplive.com
Subject: tastylive.com
Issuer: Amazon RSA 2048 M01
SANs: *.tastylive.com, tastylive.com
Subject: device.mgt.xboxlive.com
Issuer: Microsoft TLS G2 RSA CA OCSP 16
SANs: beta-device.mgt.xboxlive.com, device.mgt.xboxlive.com
Subject: officeapps.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 10
SANs: *.excel.cloud.microsoft, *.office.core.microsoft, *.office.guest.usercontent.microsoft, *.office.live.com, *.office.svc.cloud.microsoft, *.officeapps-df.live.com, *.officeapps.live.com, *.online.office.com, *.online.office365.com, *.optin.online.office.com, *.powerpoint.cloud.microsoft, *.th.officeapps.live.com, *.vhs.officeapps.live.com, *.view.officeapps.live.com, *.wopi.office.core.microsoft, *.wopi.online.office.net, *.word.cloud.microsoft, *.wshi.office.core.microsoft, *.wshi.online.office.net, df.excel.cloud.microsoft, df.onenote.cloud.microsoft, df.powerpoint.cloud.microsoft, df.visio.cloud.microsoft, df.word.cloud.microsoft, excel.cloud-dev.microsoft, excel.cloud.dev.microsoft, excel.cloud.microsoft, office.live.com, officeapps-df.live.com, officeapps.live.com, officeppe.live.com, onenote.cloud.dev.microsoft, onenote.cloud.microsoft, online.office.com, online.office365.com, powerpoint.cloud-dev.microsoft, powerpoint.cloud.dev.microsoft, powerpoint.cloud.microsoft, tr-ofc-atm.office.com, visio.cloud.dev.microsoft, visio.cloud.microsoft, word.cloud-dev.microsoft, word.cloud.dev.microsoft, word.cloud.microsoft
Subject: nats.alettaoceanlive.com
Issuer: YR2
SANs: nats.alettaoceanlive.com, partners.alettaoceanlive.com
Subject: *.aws.marketlive.com
Issuer: Go Daddy Secure Certificate Authority - G2
SANs: *.aws.marketlive.com, aws.marketlive.com
Subject: app-lanjinglive.com.cn
Issuer: YR2
SANs: app-lanjinglive.com.cn, app.app-lanjinglive.com.cn, m.app-lanjinglive.com.cn, www.app-lanjinglive.com.cn
Subject: apollo.webserverlive.com
Issuer: apollo.webserverlive.com
SANs: apollo.webserverlive.com
Subject: *.sooplive.com
Issuer: Thawte TLS RSA CA G1
SANs: *.apro.sooplive.com, *.ext-sooplive.com, *.file.sooplive.com, *.img.sooplive.com, *.m.sooplive.com, *.sooplive.com, *.stream.sooplive.com, apro.sooplive.com, ext-sooplive.com, file.sooplive.com, img.sooplive.com, m.sooplive.com, sooplive.com, stream.sooplive.com
Subject: *.aws.marketlive.com
Issuer: Go Daddy Secure Certificate Authority - G2
SANs: *.aws.marketlive.com, aws.marketlive.com
IPs Citing This Domain
No citing IPs found yet
As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.
Origin / IP-Leak
USP
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
No origin-IP leaks detected (yet)
Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.
CT-Log Evidence
Certificates from public Certificate Transparency logs whose subject or SAN names this domain — including historic certs we never observed live.
4aa4a51f110d277c…
google · argon2026h2
Subject: outlook.live.com
Issuer: DigiCert Cloud Services CA-1
SANs: outlook.live.com, outlook-sdf.live.com, attachment.outlook.office.net, attachment.outlook.officeppe.net, hotmail.com, *.calendar.live.com, *.hotmail.com, *.live.com, *.mail.live.com, afd-l.office.com, live.com, *.nrb.footprintdns.com, *.fp.measure.office.com, premium.outlook.com
Valid: 2025-09-13 00:00:00 → 2026-09-12 23:59:59
c7acfa60c6bad7f7…
google · argon2026h2
Subject: outlook.live.com
Issuer: DigiCert Cloud Services CA-1
SANs: outlook.live.com, outlook-sdf.live.com, attachment.outlook.office.net, attachment.outlook.officeppe.net, hotmail.com, *.calendar.live.com, *.hotmail.com, *.live.com, *.mail.live.com, afd-l.office.com, live.com, *.nrb.footprintdns.com, *.fp.measure.office.com, premium.outlook.com
Valid: 2025-09-13 00:00:00 → 2026-09-12 23:59:59
Threat Intelligence
Domain threat-intel pending
Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.
History
Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.
| Type | Value | First seen | Last seen |
|---|---|---|---|
| CAA | 0 issue "microsoft.com" | 2026-05-26 02:43:02.200 | 2026-07-28 20:39:29.599 |
| TXT | google-site-verification=er-XGn5evjhwRiwIPwWyQjyHB1pigvhw-mp8saZxLCA | 2026-05-26 02:43:02.200 | 2026-07-28 20:39:29.599 |
| TXT | google-site-verification=aqgIxrIS1nghF9FDjR5tN7t6xgIVr3Dg254rmyDNwRU | 2026-05-26 02:43:02.200 | 2026-07-28 20:39:29.599 |
| SRV | _sipfederationtls._tcp 10 2 5061 federation.messenger.msn.com | 2026-05-26 02:43:02.200 | 2026-07-28 20:39:29.599 |
| NS | ns2-37.azure-dns.net | 2026-05-26 02:43:02.200 | 2026-07-28 20:39:29.599 |
| MX | 2 live-com.olc.protection.outlook.com | 2026-05-26 02:43:02.200 | 2026-07-28 20:39:29.599 |
| TXT | facebook-domain-verification=atvthxwtzc3u4ubnsozavn76cusuaj | 2026-05-26 02:43:02.200 | 2026-07-28 20:39:29.599 |
| CAA | 0 contactemail "caarecordaware@microsoft.com" | 2026-05-26 02:43:02.200 | 2026-07-28 20:39:29.599 |
| TXT | google-site-verification=0mLTLcpaFxdFNO4m1TfqB2WQ4rGtz7xpPmFwDJ9O_9Q | 2026-05-26 02:43:02.200 | 2026-07-28 20:39:29.599 |
| CAA | 0 issue "entrust.net" | 2026-05-26 02:43:02.200 | 2026-07-28 20:39:29.599 |
| TXT | google-site-verification=DVGpQUbbQCBRPGlmWiTVUMyQGfLPlEVw6Z4pm39AAj4 | 2026-05-26 02:43:02.200 | 2026-07-28 20:39:29.599 |
| CAA | 0 iodef "mailto:domains@microsoft.com" | 2026-05-26 02:43:02.200 | 2026-07-28 20:39:29.599 |
| NS | ns3-37.azure-dns.org | 2026-05-26 02:43:02.200 | 2026-07-28 20:39:29.599 |
| TXT | google-site-verification=N9kowue62gCm511Op0_N2LO1JZTcjA2GYzOE22SBaiI | 2026-05-26 02:43:02.200 | 2026-07-28 20:39:29.599 |
| CAA | 0 issue "digicert.com" | 2026-05-26 02:43:02.200 | 2026-07-28 20:39:29.599 |
| NS | ns1-37.azure-dns.com | 2026-05-26 02:43:02.200 | 2026-07-28 20:39:29.599 |
| A | 204.79.197.212 | 2026-05-26 02:43:02.200 | 2026-07-28 20:39:29.599 |
| NS | ns4-37.azure-dns.info | 2026-05-26 02:43:02.200 | 2026-07-28 20:39:29.599 |
| TXT | v=spf1 include:spf-a.hotmail.com include:spf-b.hotmail.com include:spf-c.hotmail.com include:spf-d.hotmail.com include:spf.protection.outlook.com ~all | 2026-05-26 02:43:02.200 | 2026-07-28 20:39:29.599 |
| CAA | 0 issue "globalsign.com" | 2026-05-26 02:43:02.200 | 2026-07-28 20:39:29.599 |
| CAA | 0 issue "dtrust.de" | 2026-05-26 02:43:02.200 | 2026-07-28 20:39:29.599 |