Domain
live.net
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of live.net
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
Hosting IPs
558
A/AAAA targets
Subdomains
147
CT + scan + body
Record Types
3
seen in DNS
Observed Certs
—
in our scans
DNS Records
A
—
AAAA
—
MX
—
NS
ns1-205.azure-dns.com, ns2-205.azure-dns.net, ns3-205.azure-dns.org, ns4-205.azure-dns.info
TXT
v=spf1 include:spf-a.hotmail.com include:spf-b.hotmail.com include:spf-c.hotmail.com include:spf-d.hotmail.com include:spf.protection.outlook.com ~all
CNAME
—
CAA
0 contactemail "caarecordaware@microsoft.com", 0 issue "digicert.com", 0 issue "globalsign.com", 0 issue "microsoft.com"
WHOIS / Registration
Registration data planned
Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.
Subdomains
Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.
| Subdomain | Resolves to | Last seen |
|---|---|---|
| attachment.outlook.live.net | 2026-07-28 20:39:29.599 | |
| s2s-policies.live.net | 2026-07-25 13:59:40.236 | |
| s2s-skyapi.live.net | 2026-07-25 13:59:40.236 | |
| api.live.net | 2026-07-25 13:59:40.236 | |
| s2s-settings.live.net | 2026-07-25 13:59:40.236 | |
| skyapi.live.net | 2026-07-25 13:59:40.236 | |
| statics.teams.cdn.live.net | 2026-07-18 06:01:33.340 | |
| api-df.live.net | 2026-07-25 13:59:40.236 | |
| df-config.live.net | 2026-07-25 13:59:40.236 | |
| df.s2s-settings.live.net | 2026-07-25 13:59:40.236 | |
| df.settings.live.net | 2026-07-25 13:59:40.236 | |
| docs-df.live.net | 2026-07-25 13:59:40.236 | |
| s2s-skyapi-df.live.net | 2026-07-25 13:59:40.236 | |
| skyapi-df.live.net | 2026-07-25 13:59:40.236 | |
| api.search.live.net | 2026-07-28 12:54:15.595 | |
| apis.live.net | 2026-07-25 13:59:40.236 | |
| config.live.net | 2026-07-25 13:59:40.236 | |
| d.bl3301.docs.live.net | 2026-07-25 13:59:40.236 | |
| d.bl3302.docs.live.net | 2026-07-25 13:59:40.236 | |
| docs.live.net | 2026-07-25 13:59:40.236 | |
| js.live.net | 2026-07-27 09:51:46.319 | |
| settings.live.net | 2026-07-25 13:59:40.236 | |
| df.policies.live.net | 1970-01-01 00:00:00.000 | |
| df.s2s-policies.live.net | 1970-01-01 00:00:00.000 | |
| inference.location.live.net | 1970-01-01 00:00:00.000 | |
| l-df.live.net | 2026-07-25 13:59:40.236 | |
| l.live.net | 1970-01-01 00:00:00.000 | |
| live.net | 1970-01-01 00:00:00.000 | |
| location.live.net | 1970-01-01 00:00:00.000 | |
| oauth.live.net | 1970-01-01 00:00:00.000 | |
| orion-int.azureencryption.location.live.net | 1970-01-01 00:00:00.000 | |
| policies.live.net | 1970-01-01 00:00:00.000 | |
| slps.live.net | 1970-01-01 00:00:00.000 | |
| statics-dev.teams.cdn.live.net | 1970-01-01 00:00:00.000 | |
| teams.cdn.live.net | 1970-01-01 00:00:00.000 | |
| test.apis.live.net | 1970-01-01 00:00:00.000 | |
| test.config.live.net | 1970-01-01 00:00:00.000 | |
| test.docs.live.net | 1970-01-01 00:00:00.000 | |
| test.policies.live.net | 1970-01-01 00:00:00.000 | |
| test.pvt-policies.live.net | 1970-01-01 00:00:00.000 | |
| test.pvt-settings.live.net | 1970-01-01 00:00:00.000 | |
| test.pvt-skyapi.live.net | 1970-01-01 00:00:00.000 | |
| test.s2s-config.live.net | 1970-01-01 00:00:00.000 | |
| test.s2s-policies.live.net | 1970-01-01 00:00:00.000 | |
| test.s2s-settings.live.net | 1970-01-01 00:00:00.000 | |
| test.s2s-skyapi.live.net | 1970-01-01 00:00:00.000 | |
| test.settings.live.net | 1970-01-01 00:00:00.000 | |
| test.skyapi.live.net | 1970-01-01 00:00:00.000 | |
| test.slps.live.net | 1970-01-01 00:00:00.000 | |
| tile.location.live.net | 1970-01-01 00:00:00.000 |
Tech Stack
Tech detection pending
Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.
TLS Certificates
Subject: rtxlive.net
Issuer: R3
SANs: rtxlive.net, www.rtxlive.net
Subject: pdlive.net
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: pdlive.net, www.pdlive.net
Subject: *.algolive.net
Issuer: Sectigo RSA Domain Validation Secure Server CA
SANs: *.algolive.net, algolive.net
Subject: dtc2.zcastlive.net
Issuer: SSL2BUY EMEA RSA Domain Validation Secure Server CA
SANs: dtc2.zcastlive.net, www.dtc2.zcastlive.net
Subject: freetraininglive.net
Issuer: YR2
SANs: *.freetraininglive.net, freetraininglive.net
Subject: spexlive.net
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: admin.spexlive.net, aws.spexlive.net, catalog.spexlive.net, eu.ws.spexlive.net, hp-tool.spexlive.net, na.ws.spexlive.net, reports.spexlive.net, spexlive.net, test-admin.spexlive.net, ws-apac.spexlive.net, ws-azure.spexlive.net, ws-eu1.spexlive.net, ws-fn.spexlive.net, ws-mea.spexlive.net, ws-na1.spexlive.net, ws-na2.spexlive.net, ws-nvxc.spexlive.net, ws-sa.spexlive.net, ws-spr1.spexlive.net, ws-vertiv.spexlive.net, ws.spexlive.net, ws2.spexlive.net, www.spexlive.net
Subject: webmail.web2live.net
Issuer: YR2
SANs: autoconfig.web2live.net, autodiscover.web2live.net, cpanel.web2live.net, cpcalendars.web2live.net, cpcontacts.web2live.net, mail.web2live.biz, mail.web2live.cloud, mail.web2live.eu, mail.web2live.net, web2live.biz, web2live.cloud, web2live.eu, web2live.net, webdisk.web2live.net, webmail.web2live.net, www.web2live.biz, www.web2live.cloud, www.web2live.eu, www.web2live.net
Subject: *.joshlive.net
Issuer: Go Daddy Secure Certificate Authority - G2
SANs: *.joshlive.net, joshlive.net
Subject: prod.volive.net
Issuer: WR3
SANs: prod.volive.net
Subject: agent.violive.net
Issuer: LiteSSL RSA CA 2025
SANs: agent.violive.net
Subject: *.pragmaticplaylive.net
Issuer: RapidSSL TLS DV RSA Mixed SHA256 2020 CA-1
SANs: *.pragmaticplaylive.net, pragmaticplaylive.net
Subject: *.location.live.net
Issuer: Microsoft TLS G2 RSA CA OCSP 16
SANs: *.location.live.net
Subject: dstom2.tberlive.net
Issuer: YE1
SANs: dstom2.tberlive.net
Subject: *.generolive.net
Issuer: Go Daddy Secure Certificate Authority - G2
SANs: *.generolive.net, generolive.net
Subject: *.boplive.net
Issuer: Amazon RSA 2048 M01
SANs: *.boplive.net
Subject: *.hearlive.net
Issuer: Xcc Trust DV SSL CA
SANs: *.hearlive.net, hearlive.net
Subject: bookitlive.net
Issuer: YE2
SANs: *.bookitlive.net, bookitlive.net
Subject: *.location.live.net
Issuer: Microsoft TLS G2 RSA CA OCSP 04
SANs: *.location.live.net
Subject: hansolo.live.net.mk
Issuer: R13
SANs: hansolo.live.net.mk
Subject: hanlive.net
Issuer: YR2
SANs: hanlive.net
Subject: mail.live.net.mk
Issuer: YR1
SANs: mail.live.net.mk
Subject: h.vr-live.net
Issuer: YR2
SANs: h.vr-live.net, h1.vr-live.net, h2.vr-live.net, h4.vr-live.net, h6.vr-live.net
Subject: auth.isilive.net
Issuer: YE2
SANs: auth.isilive.ca, auth.isilive.net
Subject: aiueo-slot.txtlive.net
Issuer: YE2
SANs: aiueo-slot.txtlive.net
Subject: *.assetlive.net
Issuer: Sectigo Public Server Authentication CA DV R36
SANs: *.assetlive.net, assetlive.net
Subject: spexlive.net
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
SANs: admin.spexlive.net, aws.spexlive.net, catalog.spexlive.net, eu.ws.spexlive.net, hp-tool.spexlive.net, na.ws.spexlive.net, reports.spexlive.net, spexlive.net, test-admin.spexlive.net, ws-apac.spexlive.net, ws-azure.spexlive.net, ws-eu1.spexlive.net, ws-fn.spexlive.net, ws-mea.spexlive.net, ws-na1.spexlive.net, ws-na2.spexlive.net, ws-nvxc.spexlive.net, ws-sa.spexlive.net, ws-spr1.spexlive.net, ws-vertiv.spexlive.net, ws.spexlive.net, ws2.spexlive.net, www.spexlive.net
Subject: sslvpn.taslive.net
Issuer: Go Daddy Secure Certificate Authority - G2
SANs: sslvpn.taslive.net, www.sslvpn.taslive.net
Subject: *.location.live.net
Issuer: Microsoft TLS G2 RSA CA OCSP 04
SANs: *.location.live.net
Subject: ts.itvlive.net
Issuer: R12
SANs: ts.itvhotel.org, ts.itvlive.net, ts2.itvhotel.org, ts2.itvlive.net, tsht.itvhotel.org, tsht.itvlive.net, us.itvhotel.org, us.itvlive.net
Subject: s1.itvlive.net
Issuer: R13
SANs: rc.itvhotel.org, rc.itvlive.net, s1.itvhotel.org, s1.itvlive.net, s2.itvhotel.org, s2.itvlive.net, s3.itvhotel.org, s3.itvlive.net, s4.itvhotel.org, s4.itvlive.net, s5.itvhotel.org, s5.itvlive.net, s6.itvhotel.org, s6.itvlive.net, s7.itvhotel.org, s7.itvlive.net
IPs Citing This Domain
No citing IPs found yet
As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.
Origin / IP-Leak
USP
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
| Origin IP | Origin ASN | CDN ASN | Confidence | Reasoning |
|---|---|---|---|---|
| 80.69.173.74 | AS202053 | AS8075 | 95% | cert 394e114f… served by 80.69.173.74 (AS202053) carries SAN attachment.outlook.live.net which currently resolves through Microsoft (AS8075) at 52.98.232.34, 2603:1026:c0d:803::2, 2603:1026:c0d:82f::2, 2603:1026:c0d:c28::2 |
| 2.26.114.9 | AS213877 | AS8075 | 95% | cert 394e114f… served by 2.26.114.9 (AS213877) carries SAN attachment.outlook.live.net which currently resolves through Microsoft (AS8075) at 52.98.232.34, 2603:1026:c0d:803::2, 2603:1026:c0d:82f::2, 2603:1026:c0d:c28::2 |
Threat Intelligence
Domain threat-intel pending
Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.
History
Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.
| Type | Value | First seen | Last seen |
|---|---|---|---|
| CAA | 0 issue "microsoft.com" | 2026-06-17 12:29:06.356 | 2026-07-28 05:49:37.765 |
| NS | ns2-205.azure-dns.net | 2026-06-17 12:29:06.356 | 2026-07-28 05:49:37.765 |
| CAA | 0 contactemail "caarecordaware@microsoft.com" | 2026-06-17 12:29:06.356 | 2026-07-28 05:49:37.765 |
| NS | ns3-205.azure-dns.org | 2026-06-17 12:29:06.356 | 2026-07-28 05:49:37.765 |
| NS | ns4-205.azure-dns.info | 2026-06-17 12:29:06.356 | 2026-07-28 05:49:37.765 |
| CAA | 0 issue "digicert.com" | 2026-06-17 12:29:06.356 | 2026-07-28 05:49:37.765 |
| NS | ns1-205.azure-dns.com | 2026-06-17 12:29:06.356 | 2026-07-28 05:49:37.765 |
| TXT | v=spf1 include:spf-a.hotmail.com include:spf-b.hotmail.com include:spf-c.hotmail.com include:spf-d.hotmail.com include:spf.protection.outlook.com ~all | 2026-06-17 12:29:06.356 | 2026-07-28 05:49:37.765 |
| CAA | 0 issue "globalsign.com" | 2026-06-17 12:29:06.356 | 2026-07-28 05:49:37.765 |