Domain
devtunnels.ms
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of devtunnels.ms
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
Hosting IPs
7
A/AAAA targets
Subdomains
83
CT + scan + body
Record Types
2
seen in DNS
Observed Certs
74
in our scans
DNS Records
A
—
AAAA
—
MX
—
NS
ns1-08.azure-dns.com, ns2-08.azure-dns.net, ns3-08.azure-dns.org, ns4-08.azure-dns.info
TXT
—
CNAME
—
CAA
0 contactemail "caarecordaware@microsoft.com", 0 iodef "mailto:caarecordaware@microsoft.com", 0 issue "microsoft.com"
WHOIS / Registration
Registration data planned
Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.
Subdomains
Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.
| Subdomain | Resolves to | Last seen |
|---|---|---|
| 9dkphbqh-12000.euw.devtunnels.ms | 2026-05-27 16:09:47.413 | |
| a.dev.devtunnels.ms | 1970-01-01 00:00:00.000 | |
| a.devtunnels.ms | 1970-01-01 00:00:00.000 | |
| a.ppe.devtunnels.ms | 1970-01-01 00:00:00.000 | |
| asse.a.devtunnels.ms | 1970-01-01 00:00:00.000 | |
| asse.a.ppe.devtunnels.ms | 1970-01-01 00:00:00.000 | |
| asse.b.ppe.devtunnels.ms | 1970-01-01 00:00:00.000 | |
| asse.ppe.devtunnels.ms | 1970-01-01 00:00:00.000 | |
| auc1.a.devtunnels.ms | 1970-01-01 00:00:00.000 | |
| aue.a.devtunnels.ms | 1970-01-01 00:00:00.000 | |
| b.dev.devtunnels.ms | 1970-01-01 00:00:00.000 | |
| b.ppe.devtunnels.ms | 1970-01-01 00:00:00.000 | |
| brs.a.devtunnels.ms | 1970-01-01 00:00:00.000 | |
| brs.devtunnels.ms | 2026-07-28 06:07:16.226 | |
| brse1.a.devtunnels.ms | 1970-01-01 00:00:00.000 | |
| c.dev.devtunnels.ms | 2026-06-17 13:21:56.706 | |
| dev.devtunnels.ms | 1970-01-01 00:00:00.000 | |
| devtunnels.ms | 1970-01-01 00:00:00.000 | |
| eun1.a.devtunnels.ms | 1970-01-01 00:00:00.000 | |
| eun1.devtunnels.ms | 1970-01-01 00:00:00.000 | |
| euw.a.dev.devtunnels.ms | 1970-01-01 00:00:00.000 | |
| euw.a.devtunnels.ms | 1970-01-01 00:00:00.000 | |
| euw.b.dev.devtunnels.ms | 1970-01-01 00:00:00.000 | |
| euw.c.dev.devtunnels.ms | 2026-06-17 13:21:56.706 | |
| euw.dev.devtunnels.ms | 1970-01-01 00:00:00.000 | |
| euw.devtunnels.ms | 1970-01-01 00:00:00.000 | |
| inc1.a.devtunnels.ms | 1970-01-01 00:00:00.000 | |
| inc1.devtunnels.ms | 2026-06-19 15:00:29.894 | |
| jpe1.a.devtunnels.ms | 1970-01-01 00:00:00.000 | |
| js67qd0c-5001.inc1.devtunnels.ms | 2026-05-26 09:33:54.041 | |
| js67qd0c-8000.inc1.devtunnels.ms | 2026-05-26 09:33:54.041 | |
| mcgl6cjm-5001.asse.devtunnels.ms | 2026-05-26 09:33:54.041 | |
| mcgl6cjm-8000.asse.devtunnels.ms | 2026-05-26 09:33:54.041 | |
| ppe.devtunnels.ms | 1970-01-01 00:00:00.000 | |
| uks1.a.devtunnels.ms | 1970-01-01 00:00:00.000 | |
| uks1.devtunnels.ms | 1970-01-01 00:00:00.000 | |
| use.a.devtunnels.ms | 1970-01-01 00:00:00.000 | |
| use2.a.devtunnels.ms | 1970-01-01 00:00:00.000 | |
| use2.devtunnels.ms | 2026-06-22 09:45:34.011 | |
| usw2.a.dev.devtunnels.ms | 1970-01-01 00:00:00.000 | |
| usw2.a.devtunnels.ms | 1970-01-01 00:00:00.000 | |
| usw2.a.ppe.devtunnels.ms | 1970-01-01 00:00:00.000 | |
| usw2.b.dev.devtunnels.ms | 1970-01-01 00:00:00.000 | |
| usw2.b.ppe.devtunnels.ms | 1970-01-01 00:00:00.000 | |
| usw2.c.dev.devtunnels.ms | 2026-06-17 13:21:56.706 | |
| usw2.dev.devtunnels.ms | 1970-01-01 00:00:00.000 | |
| usw2.ppe.devtunnels.ms | 1970-01-01 00:00:00.000 | |
| usw3.a.devtunnels.ms | 1970-01-01 00:00:00.000 | |
| usw3.devtunnels.ms | 2026-06-19 08:50:55.704 |
Tech Stack
Tech detection pending
Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.
TLS Certificates
Certificate observations pending
TLS certs naming this domain in subject or SANs will appear here as our scan-layer catches them.
IPs Citing This Domain
No citing IPs found yet
As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.
Origin / IP-Leak
USP
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
No origin-IP leaks detected (yet)
Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.
CT-Log Evidence
Certificates from public Certificate Transparency logs whose subject or SAN names this domain — including historic certs we never observed live.
40fd2df46a4c3cba…
google · xenon2026h2
Subject: devtunnels.ms
Issuer: Microsoft Azure RSA TLS Issuing CA 08
SANs: devtunnels.ms, *.devtunnels.ms, *.uks1.devtunnels.ms
Valid: 2026-04-08 10:10:04 → 2026-08-25 23:59:59
e583d02d9efd4a52…
google · xenon2026h2
Subject: devtunnels.ms
Issuer: Microsoft Azure RSA TLS Issuing CA 04
SANs: devtunnels.ms, *.devtunnels.ms, *.use2.devtunnels.ms
Valid: 2026-04-03 05:00:22 → 2026-08-25 23:59:59
1b00f7ad39cccafe…
google · xenon2026h2
Subject: devtunnels.ms
Issuer: Microsoft Azure RSA TLS Issuing CA 07
SANs: devtunnels.ms, *.devtunnels.ms, *.usw2.devtunnels.ms
Valid: 2026-04-02 10:40:39 → 2026-08-25 23:59:59
1aee043498ba363b…
google · xenon2026h2
Subject: devtunnels.ms
Issuer: Microsoft Azure RSA TLS Issuing CA 03
SANs: devtunnels.ms, *.devtunnels.ms, *.brs.devtunnels.ms
Valid: 2026-04-01 21:02:13 → 2026-08-25 23:59:59
4a7c943365bd26ff…
google · xenon2026h2
Subject: devtunnels.ms
Issuer: Microsoft Azure RSA TLS Issuing CA 04
SANs: devtunnels.ms, *.devtunnels.ms, *.uks1.devtunnels.ms
Valid: 2026-04-01 05:57:07 → 2026-08-25 23:59:59
3cebfe05aa48fb9c…
google · xenon2026h2
Subject: devtunnels.ms
Issuer: Microsoft Azure RSA TLS Issuing CA 07
SANs: devtunnels.ms, *.devtunnels.ms, *.eun1.devtunnels.ms
Valid: 2026-04-01 04:42:44 → 2026-08-25 23:59:59
726607925dfc47ab…
google · xenon2026h2
Subject: devtunnels.ms
Issuer: Microsoft Azure RSA TLS Issuing CA 04
SANs: devtunnels.ms, *.devtunnels.ms, *.inc1.devtunnels.ms
Valid: 2026-03-31 19:55:01 → 2026-08-25 23:59:59
8ba3464d9bd83e97…
google · xenon2026h2
Subject: devtunnels.ms
Issuer: Microsoft Azure RSA TLS Issuing CA 04
SANs: devtunnels.ms, *.devtunnels.ms, *.aue.devtunnels.ms
Valid: 2026-03-27 19:41:00 → 2026-08-25 23:59:59
4a361d6559078f16…
google · xenon2026h2
Subject: devtunnels.ms
Issuer: Microsoft Azure RSA TLS Issuing CA 07
SANs: devtunnels.ms, *.devtunnels.ms, *.asse.devtunnels.ms
Valid: 2026-03-27 15:27:24 → 2026-08-25 23:59:59
20f9b8fdb8048a44…
google · xenon2026h2
Subject: devtunnels.ms
Issuer: Microsoft Azure RSA TLS Issuing CA 04
SANs: devtunnels.ms, *.devtunnels.ms, *.auc1.devtunnels.ms
Valid: 2026-03-27 02:45:12 → 2026-08-25 23:59:59
6ef382a16894690a…
google · xenon2026h2
Subject: devtunnels.ms
Issuer: Microsoft Azure RSA TLS Issuing CA 03
SANs: devtunnels.ms, *.devtunnels.ms, *.usw3.devtunnels.ms
Valid: 2026-03-26 19:40:42 → 2026-08-25 23:59:59
747f2322e99c4378…
google · xenon2026h2
Subject: devtunnels.ms
Issuer: Microsoft Azure RSA TLS Issuing CA 03
SANs: devtunnels.ms, *.devtunnels.ms, *.euw.devtunnels.ms
Valid: 2026-03-26 00:52:32 → 2026-08-25 23:59:59
eef87485125741f8…
google · xenon2026h2
Subject: devtunnels.ms
Issuer: Microsoft Azure RSA TLS Issuing CA 07
SANs: devtunnels.ms, *.devtunnels.ms, *.use.devtunnels.ms
Valid: 2026-03-25 21:13:35 → 2026-08-25 23:59:59
7f9e11130e6372ad…
google · xenon2026h2
Subject: devtunnels.ms
Issuer: Microsoft Azure RSA TLS Issuing CA 07
SANs: devtunnels.ms, *.devtunnels.ms, *.euw.devtunnels.ms
Valid: 2026-03-24 00:35:59 → 2026-08-25 23:59:59
bc396e0dfde1fa4a…
google · xenon2026h2
Subject: devtunnels.ms
Issuer: Microsoft Azure RSA TLS Issuing CA 03
SANs: devtunnels.ms, *.devtunnels.ms, *.jpe1.devtunnels.ms
Valid: 2026-03-05 21:26:49 → 2026-08-25 23:59:59
457bca24cbd4b6b8…
google · xenon2026h2
Subject: devtunnels.ms
Issuer: Microsoft Azure RSA TLS Issuing CA 07
SANs: devtunnels.ms, *.devtunnels.ms, *.use2.devtunnels.ms
Valid: 2026-02-18 17:09:18 → 2026-08-17 17:09:18
b0d8a8ebd8fa4c9a…
google · xenon2026h2
Subject: devtunnels.ms
Issuer: Microsoft Azure RSA TLS Issuing CA 07
SANs: devtunnels.ms, *.devtunnels.ms, *.usw2.devtunnels.ms
Valid: 2026-02-17 15:22:34 → 2026-08-16 15:22:34
cab2d1bd196cdb12…
google · xenon2026h2
Subject: devtunnels.ms
Issuer: Microsoft Azure RSA TLS Issuing CA 03
SANs: devtunnels.ms, *.devtunnels.ms, *.brs.devtunnels.ms
Valid: 2026-02-17 11:45:07 → 2026-08-16 11:45:07
be84a825bf604c88…
google · xenon2026h2
Subject: devtunnels.ms
Issuer: Microsoft Azure RSA TLS Issuing CA 03
SANs: devtunnels.ms, *.devtunnels.ms, *.uks1.devtunnels.ms
Valid: 2026-02-16 18:07:03 → 2026-08-15 18:07:03
fdc63a72684dea38…
google · xenon2026h2
Subject: devtunnels.ms
Issuer: Microsoft Azure RSA TLS Issuing CA 04
SANs: devtunnels.ms, *.devtunnels.ms, *.inc1.devtunnels.ms
Valid: 2026-02-16 12:35:48 → 2026-08-15 12:35:48
Threat Intelligence
Domain threat-intel pending
Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.
History
Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.
| Type | Value | First seen | Last seen |
|---|---|---|---|
| CAA | 0 issue "microsoft.com" | 2026-06-04 21:15:58.011 | 2026-07-28 06:07:16.226 |
| NS | ns1-08.azure-dns.com | 2026-06-04 21:15:58.011 | 2026-07-28 06:07:16.226 |
| NS | ns3-08.azure-dns.org | 2026-06-04 21:15:58.011 | 2026-07-28 06:07:16.226 |
| CAA | 0 iodef "mailto:caarecordaware@microsoft.com" | 2026-06-04 21:15:58.011 | 2026-07-28 06:07:16.226 |
| CAA | 0 contactemail "caarecordaware@microsoft.com" | 2026-06-04 21:15:58.011 | 2026-07-28 06:07:16.226 |
| NS | ns4-08.azure-dns.info | 2026-06-04 21:15:58.011 | 2026-07-28 06:07:16.226 |
| NS | ns2-08.azure-dns.net | 2026-06-04 21:15:58.011 | 2026-07-28 06:07:16.226 |