Domain

aroapp.io

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

DNS Check HTTP Check Run Full Scan .io TLD

Run a live full scan of aroapp.io

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now

Hosting IPs

389

A/AAAA targets

Subdomains

15,613

CT + scan + body

Record Types

seen in DNS

Observed Certs

—

in our scans

DNS Records

—

AAAA

—

ns1-02.azure-dns.com, ns2-02.azure-dns.net, ns3-02.azure-dns.org, ns4-02.azure-dns.info

TXT

d3pnx3s0x5qdh2d1vf2s7h05blkqhm7v, d6b7w0zb8tmw0dcs0tt3m39ty64s46j0

CNAME

—

CAA

0 contactemail "caarecordaware@microsoft.com"

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.

Subdomain	Resolves to	Last seen
api.taurus.canadaeast.aroapp.io	20.104.152.200 20.104.177.57	2026-06-18 21:44:30.785
antt.apps.this.uksouth.aroapp.io		1970-01-01 00:00:00.000
api.0093jd17.northeurope.aroapp.io		1970-01-01 00:00:00.000
api.01zins1a.eastus.aroapp.io		1970-01-01 00:00:00.000
api.02cdkcnz.eastus.aroapp.io		1970-01-01 00:00:00.000
api.0335m85z.uksouth.aroapp.io		1970-01-01 00:00:00.000
api.03ms02bi.eastus.aroapp.io		1970-01-01 00:00:00.000
api.04clqxmg.westeurope.aroapp.io		1970-01-01 00:00:00.000
api.04wjg2c6.eastus.aroapp.io		1970-01-01 00:00:00.000
api.05f7d3yc.eastus.int.aroapp.io		1970-01-01 00:00:00.000
api.068rjyr8.eastus.aroapp.io		1970-01-01 00:00:00.000
api.06fy13g6.eastus.aroapp.io		1970-01-01 00:00:00.000
api.06m2k5ss.southeastasia.aroapp.io		1970-01-01 00:00:00.000
api.073z6hfj.northeurope.aroapp.io		1970-01-01 00:00:00.000
api.08741q93.eastus.aroapp.io		1970-01-01 00:00:00.000
api.08p4ive8.eastus.aroapp.io		1970-01-01 00:00:00.000
api.09qj5x5w.eastus.aroapp.io		1970-01-01 00:00:00.000
api.09t62f1f.westus2.aroapp.io		1970-01-01 00:00:00.000
api.0b2z0myq.eastus.int.aroapp.io		1970-01-01 00:00:00.000
api.0bdykgv2.eastus.aroapp.io		1970-01-01 00:00:00.000
api.0dbhjfw8.australiaeast.aroapp.io		1970-01-01 00:00:00.000
api.0f5b45gl.eastus2.aroapp.io		1970-01-01 00:00:00.000
api.0f6745b65f38.eastus.aroapp.io		1970-01-01 00:00:00.000
api.0fq3p8lv.northeurope.aroapp.io		1970-01-01 00:00:00.000
api.0fy9fuql.eastus.aroapp.io		1970-01-01 00:00:00.000
api.0gn40h3q.westeurope.aroapp.io		1970-01-01 00:00:00.000
api.0h51c78d.northeurope.aroapp.io		1970-01-01 00:00:00.000
api.0jmq36wg.eastus2.aroapp.io		1970-01-01 00:00:00.000
api.0jppg542.eastus2.aroapp.io		1970-01-01 00:00:00.000
api.0kgj2176.australiaeast.aroapp.io		1970-01-01 00:00:00.000
api.0l5d3q2t.eastus.aroapp.io		1970-01-01 00:00:00.000
api.0l602qpt.westeurope.aroapp.io		1970-01-01 00:00:00.000
api.0lxmj4yz.eastus.int.aroapp.io		1970-01-01 00:00:00.000
api.0n01xf41.eastus.aroapp.io		1970-01-01 00:00:00.000
api.0nj4vjr2.eastus.aroapp.io		1970-01-01 00:00:00.000
api.0njj1cz8.southcentralus.aroapp.io		1970-01-01 00:00:00.000
api.0o8iyeip.southeastasia.aroapp.io		1970-01-01 00:00:00.000
api.0pcb1w4q.eastus2.aroapp.io		1970-01-01 00:00:00.000
api.0q9zcq9l.eastus.int.aroapp.io		1970-01-01 00:00:00.000
api.0qcmdp4q.eastus.aroapp.io		1970-01-01 00:00:00.000
api.0qf73m0q.eastus.int.aroapp.io		1970-01-01 00:00:00.000
api.0rhxrgtb.westeurope.aroapp.io		1970-01-01 00:00:00.000
api.0uf8iyua.eastus.aroapp.io		1970-01-01 00:00:00.000
api.0vw2t4gc.aro-int.dev.aroapp.io		1970-01-01 00:00:00.000
api.0wmwphky.australiaeast.aroapp.io		1970-01-01 00:00:00.000
api.0wo0chik.eastus.aroapp.io		1970-01-01 00:00:00.000
api.0wx72689.westus2.aroapp.io		1970-01-01 00:00:00.000
api.0xlhw0se.eastus2.aroapp.io		1970-01-01 00:00:00.000
api.0yc0hcg8.uksouth.aroapp.io		1970-01-01 00:00:00.000
api.0zn3sgx9.australiaeast.aroapp.io		1970-01-01 00:00:00.000
api.10j0w60m.southeastasia.aroapp.io		1970-01-01 00:00:00.000
api.10n9g415.eastus.aroapp.io		1970-01-01 00:00:00.000
api.112ymldl.westus2.aroapp.io		1970-01-01 00:00:00.000
api.12y7vvqf.australiaeast.aroapp.io		1970-01-01 00:00:00.000
api.130yn27x.northeurope.aroapp.io		1970-01-01 00:00:00.000
api.13cq2cfm.northeurope.aroapp.io		1970-01-01 00:00:00.000
api.14v5hjz0.eastus.int.aroapp.io		1970-01-01 00:00:00.000
api.15owzrxf.eastus.aroapp.io		1970-01-01 00:00:00.000
api.16vbfsqz.southeastasia.aroapp.io		1970-01-01 00:00:00.000
api.187xtb4x.eastus.aroapp.io		1970-01-01 00:00:00.000
api.18rb9y65.eastus.aroapp.io		1970-01-01 00:00:00.000
api.196q9831.eastus.aroapp.io		1970-01-01 00:00:00.000
api.19pfqdzk.eastus.aroapp.io		1970-01-01 00:00:00.000
api.1b0oaz85.southeastasia.aroapp.io		1970-01-01 00:00:00.000
api.1bnzmh7b.uksouth.aroapp.io		1970-01-01 00:00:00.000
api.1cqwh5gq.australiaeast.aroapp.io		1970-01-01 00:00:00.000
api.1g2kc0fr.aro-int.dev.aroapp.io		1970-01-01 00:00:00.000
api.1gyb6z1h.eastus.aroapp.io		1970-01-01 00:00:00.000
api.1j16hwsu.eastus.aroapp.io		1970-01-01 00:00:00.000
api.1jjl39df.eastus.aroapp.io		1970-01-01 00:00:00.000
api.1l7vyaaa.eastus.aroapp.io		1970-01-01 00:00:00.000
api.1lbh2hf9.westeurope.aroapp.io		1970-01-01 00:00:00.000
api.1m3rpdjs.southeastasia.aroapp.io		1970-01-01 00:00:00.000
api.1q69dici.eastus.int.aroapp.io		1970-01-01 00:00:00.000
api.1qrc40yy.uksouth.aroapp.io		1970-01-01 00:00:00.000
api.1qyg95jr.westeurope.aroapp.io		1970-01-01 00:00:00.000
api.1r3xh564.eastus.aroapp.io		1970-01-01 00:00:00.000
api.1thlhtfk.westeurope.aroapp.io		1970-01-01 00:00:00.000
api.1tnn5vnq.australiaeast.aroapp.io		1970-01-01 00:00:00.000
api.1v1w35x5.eastus.aroapp.io		1970-01-01 00:00:00.000
api.1vga5rda.eastus.aroapp.io		1970-01-01 00:00:00.000
api.1vq9sv84.eastus.aroapp.io		1970-01-01 00:00:00.000
api.1w9e7bjo.eastus.dev.aroapp.io		1970-01-01 00:00:00.000
api.1wv9c3tw.northeurope.aroapp.io		1970-01-01 00:00:00.000
api.1xbdqp2b.eastus.aroapp.io		1970-01-01 00:00:00.000
api.1ygbf1wy.westus2.aroapp.io		1970-01-01 00:00:00.000
api.1ymd65bv.southeastasia.aroapp.io		1970-01-01 00:00:00.000
api.1zfp4hmc.eastus.aroapp.io		1970-01-01 00:00:00.000
api.1zshlc0q.eastus.aroapp.io		1970-01-01 00:00:00.000
api.20p528w7.westeurope.aroapp.io		1970-01-01 00:00:00.000
api.225mm7b2.eastus2.aroapp.io		1970-01-01 00:00:00.000
api.22s6xqy6.westeurope.aroapp.io		1970-01-01 00:00:00.000
api.22wl625z.eastus.aroapp.io		1970-01-01 00:00:00.000
api.22z3108n.eastus.aroapp.io		1970-01-01 00:00:00.000
api.25hls1qg.eastus2.aroapp.io		1970-01-01 00:00:00.000
api.267r7p3m.westeurope.aroapp.io		1970-01-01 00:00:00.000
api.26cj18zb.eastus.aroapp.io		1970-01-01 00:00:00.000
api.26rnpk6r.westeurope.aroapp.io		1970-01-01 00:00:00.000
api.2746lk76.eastus.aroapp.io		1970-01-01 00:00:00.000
api.284b3zjc.eastus.aroapp.io		1970-01-01 00:00:00.000
api.28gm2x0r.eastus2.aroapp.io		1970-01-01 00:00:00.000
api.28l8547z.eastus.aroapp.io		1970-01-01 00:00:00.000
api.2990v31r.eastus.aroapp.io		1970-01-01 00:00:00.000
api.29pynqf3.australiaeast.aroapp.io		1970-01-01 00:00:00.000
api.29z9mrt0.westeurope.aroapp.io		1970-01-01 00:00:00.000
api.2b5c6b0a.eastus.aroapp.io		1970-01-01 00:00:00.000
api.2cmffmr0.eastus.aroapp.io		1970-01-01 00:00:00.000
api.2cq58jcj.eastus2.aroapp.io		1970-01-01 00:00:00.000
api.2cykhrp5.eastus.aroapp.io		1970-01-01 00:00:00.000
api.2d127165.eastus2.aroapp.io		1970-01-01 00:00:00.000
api.2f3sbt42.eastus.int.aroapp.io		1970-01-01 00:00:00.000
api.2gbqrr8c.eastus.aroapp.io		1970-01-01 00:00:00.000
api.2hfq0rw2.westeurope.aroapp.io		1970-01-01 00:00:00.000
api.2hj0vrz7.southeastasia.aroapp.io		1970-01-01 00:00:00.000
api.2hvyg9cl.southeastasia.aroapp.io		1970-01-01 00:00:00.000
api.2hw4sv8p.eastus2.aroapp.io		1970-01-01 00:00:00.000
api.2i27cqdc.eastus.aroapp.io		1970-01-01 00:00:00.000
api.2ju1g454.eastus.aroapp.io		1970-01-01 00:00:00.000
api.2lr8hn7f.northeurope.aroapp.io		1970-01-01 00:00:00.000
api.2m8wbh47.uksouth.aroapp.io		1970-01-01 00:00:00.000

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

4.227.54.69:443 a07dcf26517d…

Subject: *.apps.ap-wus3-dp-p001.westus3.aroapp.io

Issuer: Microsoft TLS G2 RSA CA OCSP 02

SANs: *.apps.ap-wus3-dp-p001.westus3.aroapp.io

48.217.22.101:443 ed59c82d2d92…

Subject: *.apps.jmbquzwd.eastus.aroapp.io

Issuer: Microsoft TLS G2 RSA CA OCSP 04

SANs: *.apps.jmbquzwd.eastus.aroapp.io

4.147.108.120:443 7b655dbd7b24…

Subject: *.apps.xa34y1sw.australiaeast.aroapp.io

Issuer: Microsoft TLS G2 RSA CA OCSP 16

SANs: *.apps.xa34y1sw.australiaeast.aroapp.io

4.197.233.102:443 11429f3f4e01…

Subject: *.apps.xmar1zd8td5a30d806.australiaeast.aroapp.io

Issuer: Microsoft TLS G2 RSA CA OCSP 16

SANs: *.apps.xmar1zd8td5a30d806.australiaeast.aroapp.io

20.246.118.248:443 9ba198eea476…

Subject: *.apps.sy6q88vb.eastus2.aroapp.io

Issuer: Microsoft TLS G2 RSA CA OCSP 04

SANs: *.apps.sy6q88vb.eastus2.aroapp.io

20.75.246.46:443 69030c7a3725…

Subject: *.apps.ap-vs-mipub.eastus.aroapp.io

Issuer: Microsoft TLS G2 RSA CA OCSP 04

SANs: *.apps.ap-vs-mipub.eastus.aroapp.io

4.149.216.30:443 8c079ed55c8f…

Subject: *.apps.tmg86a0yzdd95fa71a.westus2.aroapp.io

Issuer: Microsoft TLS G2 RSA CA OCSP 10

SANs: *.apps.tmg86a0yzdd95fa71a.westus2.aroapp.io

52.154.62.107:443 8fed6c4cb0b7…

Subject: *.apps.fgf5tk8s.centralus.aroapp.io

Issuer: Microsoft TLS G2 RSA CA OCSP 04

SANs: *.apps.fgf5tk8s.centralus.aroapp.io

52.151.245.126:443 482ecf6f5f43…

Subject: *.apps.gml4jlig1ad98dca92.eastus.aroapp.io

Issuer: Microsoft TLS G2 RSA CA OCSP 04

SANs: *.apps.gml4jlig1ad98dca92.eastus.aroapp.io

52.146.48.133:443 8b2b716e5ff1…

Subject: *.apps.yw8un8hh.eastus.aroapp.io

Issuer: Microsoft TLS G2 RSA CA OCSP 10

SANs: *.apps.yw8un8hh.eastus.aroapp.io

20.151.28.13:443 aa686b8eb5f1…

Subject: *.apps.ie2yqko1.canadacentral.aroapp.io

Issuer: Microsoft TLS G2 RSA CA OCSP 02

SANs: *.apps.ie2yqko1.canadacentral.aroapp.io

9.141.100.210:443 1ac8556dea5d…

Subject: *.apps.arogpotstoposgwcaro01.germanywestcentral.aroapp.io

Issuer: Microsoft TLS G2 RSA CA OCSP 16

SANs: *.apps.arogpotstoposgwcaro01.germanywestcentral.aroapp.io

4.194.186.73:443 d4cdd4077245…

Subject: *.apps.imbohy31edab8f7f33.southeastasia.aroapp.io

Issuer: Microsoft TLS G2 RSA CA OCSP 02

SANs: *.apps.imbohy31edab8f7f33.southeastasia.aroapp.io

20.114.143.125:443 0fad20d31f15…

Subject: *.apps.tgqdluw3.eastus2.aroapp.io

Issuer: Microsoft TLS G2 RSA CA OCSP 16

SANs: *.apps.tgqdluw3.eastus2.aroapp.io

20.61.115.221:443 b07eca91e88f…

Subject: *.apps.testcl01.westeurope.aroapp.io

Issuer: Microsoft TLS G2 RSA CA OCSP 02

SANs: *.apps.testcl01.westeurope.aroapp.io

74.179.184.117:443 26f17e93d778…

Subject: *.apps.vmk76d3424e2571593.eastus.aroapp.io

Issuer: Microsoft TLS G2 RSA CA OCSP 10

SANs: *.apps.vmk76d3424e2571593.eastus.aroapp.io

52.164.127.103:443 7c47639e4c4b…

Subject: *.apps.gm4ghg5lwedb0bd459.northeurope.aroapp.io

Issuer: Microsoft Azure RSA TLS Issuing CA 04

SANs: *.apps.gm4ghg5lwedb0bd459.northeurope.aroapp.io

20.116.211.26:443 c9da7daabf37…

Subject: *.apps.mfguy77a.canadacentral.aroapp.io

Issuer: Microsoft TLS G2 RSA CA OCSP 16

SANs: *.apps.mfguy77a.canadacentral.aroapp.io

57.154.18.110:443 9ffc18dc4495…

Subject: *.apps.sh47gt9u.westus3.aroapp.io

Issuer: Microsoft TLS G2 RSA CA OCSP 02

SANs: *.apps.sh47gt9u.westus3.aroapp.io

20.237.21.64:443 ba01ffbaa863…

Subject: *.apps.qmlxq17h316acd3544.eastus.aroapp.io

Issuer: Microsoft TLS G2 RSA CA OCSP 16

SANs: *.apps.qmlxq17h316acd3544.eastus.aroapp.io

4.227.211.0:443 edaa8b8c44a6…

Subject: *.apps.ziokskye.eastus.aroapp.io

Issuer: Microsoft TLS G2 RSA CA OCSP 16

SANs: *.apps.ziokskye.eastus.aroapp.io

20.232.72.244:443 3a389de1a596…

Subject: *.apps.lmrsz0bum9794eca96.eastus.aroapp.io

Issuer: Microsoft TLS G2 RSA CA OCSP 16

SANs: *.apps.lmrsz0bum9794eca96.eastus.aroapp.io

52.149.187.21:443 ca67f0db0f5a…

Subject: *.apps.pmobxeub891f1a3fd0.eastus.aroapp.io

Issuer: Microsoft TLS G2 RSA CA OCSP 10

SANs: *.apps.pmobxeub891f1a3fd0.eastus.aroapp.io

20.228.152.105:443 95bd40d752a4…

Subject: *.apps.nfj574eq.eastus.aroapp.io

Issuer: Microsoft TLS G2 RSA CA OCSP 02

SANs: *.apps.nfj574eq.eastus.aroapp.io

48.214.227.16:443 64f27f9b5579…

Subject: *.apps.ammkn2cmgc9a1aaec3.centralus.aroapp.io

Issuer: Microsoft TLS G2 RSA CA OCSP 02

SANs: *.apps.ammkn2cmgc9a1aaec3.centralus.aroapp.io

20.240.150.45:443 fd0c35b5f254…

Subject: *.apps.tacticalcloud.swedencentral.aroapp.io

Issuer: Microsoft TLS G2 RSA CA OCSP 02

SANs: *.apps.tacticalcloud.swedencentral.aroapp.io

52.234.7.171:443 5002169128a5…

Subject: *.apps.sandboxdp.westus.aroapp.io

Issuer: Microsoft TLS G2 RSA CA OCSP 02

SANs: *.apps.sandboxdp.westus.aroapp.io

4.155.0.52:443 e8d922ef294b…

Subject: *.apps.am5bcb6nmadd399327.westus2.aroapp.io

Issuer: Microsoft TLS G2 RSA CA OCSP 04

SANs: *.apps.am5bcb6nmadd399327.westus2.aroapp.io

40.65.236.89:443 03d1fee87318…

Subject: *.apps.x966bdcl.eastus2.aroapp.io

Issuer: Microsoft TLS G2 RSA CA OCSP 04

SANs: *.apps.x966bdcl.eastus2.aroapp.io

20.200.96.34:443 db62ea8979d1…

Subject: *.apps.wo-dev-cac.canadacentral.aroapp.io

Issuer: Microsoft TLS G2 RSA CA OCSP 16

SANs: *.apps.wo-dev-cac.canadacentral.aroapp.io

IPs Citing This Domain

No citing IPs found yet

As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

No origin-IP leaks detected (yet)

Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.

Type	Value	First seen	Last seen
NS	ns4-02.azure-dns.info	2026-06-01 21:11:03.263	2026-06-26 00:32:55.503
NS	ns1-02.azure-dns.com	2026-06-01 21:11:03.263	2026-06-26 00:32:55.503
TXT	d6b7w0zb8tmw0dcs0tt3m39ty64s46j0	2026-06-01 21:11:03.263	2026-06-26 00:32:55.503
NS	ns3-02.azure-dns.org	2026-06-01 21:11:03.263	2026-06-26 00:32:55.503
CAA	0 contactemail "caarecordaware@microsoft.com"	2026-06-01 21:11:03.263	2026-06-26 00:32:55.503
NS	ns2-02.azure-dns.net	2026-06-01 21:11:03.263	2026-06-26 00:32:55.503
TXT	d3pnx3s0x5qdh2d1vf2s7h05blkqhm7v	2026-06-01 21:11:03.263	2026-06-26 00:32:55.503