Domain
research.microsoft.com
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of research.microsoft.com
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
Hosting IPs
5
A/AAAA targets
Subdomains
—
CT + scan + body
Record Types
3
seen in DNS
Observed Certs
15
in our scans
DNS Records
A
20.112.250.133, 20.231.239.246, 20.236.44.162, 20.70.246.20, 20.76.201.171
AAAA
—
MX
—
NS
ns1-02.azure-dns.com, ns2-02.azure-dns.net, ns3-02.azure-dns.org, ns4-02.azure-dns.info
TXT
MSRINET responsible group
CNAME
—
CAA
—
WHOIS / Registration
Registration data planned
Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.
Subdomains
Subdomain enumeration pending
Every subdomain ever issued a TLS cert under this apex — extracted from Certificate Transparency logs, our own scan observations and body references.
Tech Stack
Tech detection pending
Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.
TLS Certificates
Certificate observations pending
TLS certs naming this domain in subject or SANs will appear here as our scan-layer catches them.
IPs Citing This Domain
Hosts whose HTML body references this domain. Strong signal for origin/mirror/embed discovery.
129.97.91.252:80
href · ×12
131.246.117.32:80
href · ×4
139.19.206.108:443
href · ×2
45.113.233.40:80
href · ×2
147.26.231.163:443
href · ×2
27.102.128.211:443
href · ×2
74.50.62.235:443
href · ×2
150.145.110.65:80
href · ×1
74.50.62.235:80
href · ×1
69.163.177.46:443
href · ×1
139.19.206.112:443
href · ×1
50.116.50.235:80
href · ×1
143.198.158.28:443
href · ×1
95.129.137.186:443
href · ×1
65.49.206.11:443
href · ×1
137.110.222.10:443
href · ×1
132.230.105.187:80
href · ×1
216.181.107.44:443
href · ×1
95.129.137.186:80
href · ×1
45.33.94.68:80
href · ×1
50.116.50.235:443
href · ×1
Origin / IP-Leak
USP
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
No origin-IP leaks detected (yet)
Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.
CT-Log Evidence
Certificates from public Certificate Transparency logs whose subject or SAN names this domain — including historic certs we never observed live.
3ff4a24caf5970a2…
google · xenon2026h2
Subject: gamedev.microsoft.com
Issuer: Microsoft TLS G2 RSA CA OCSP 04
SANs: gamedev.microsoft.com, mi.microsoft.com, cce.microsoft.com, formspro.microsoft.com, msp.msdn.microsoft.com, myignite.microsoft.com, www.msdn.microsoft.com, hxsdk.corp.microsoft.com, events.msdn.microsoft.com, getrewarded.microsoft.com, www.gamedev.microsoft.com, cacademystage.microsoft.com, gamedeveloper.microsoft.com, gamedevelopment.microsoft.com, portal.startups.microsoft.com, devicemanagement.microsoft.com, powerautomateweb.microsoft.com, services.premier.microsoft.com, www.gamedeveloper.microsoft.com, www.gamedevelopment.microsoft.com, solutions.diagnostics.support.microsoft.com, screening.microsoft.com, govscreening.microsoft.com, researchsummit.microsoft.com, research.microsoft.com, phylod.research.microsoft.com, biomedsearch.microsoft.com, todo.microsoft.com, endpoint.microsoft.com, endpoint.microsoft.us, businessapplications.transform.microsoft.com, securityhub.transform.microsoft.com, to-do.microsoft.com, shopping.microsoft.com, datamigration.microsoft.com, preview.mesh.microsoft.com, selfhost.mesh.microsoft.com, mesh.cloud-dev.microsoft.com, portal-selfhost.mesh.microsoft.com, virtualchat.support.microsoft.com, priva.microsoft.com, minecrafteducation.com, www.minecrafteducation.com, snowleopards.microsoft.com, microsoftviva.microsoft.com, employeeexperience.microsoft.com, innovation.microsoft.com, viva.microsoft.com, ex.microsoft.com, adatum.com, www.adatum.com, fourthcoffee.com, www.fourthcoffee.com, munsonspicklesandpreservesfarm.com, www.munsonspicklesandpreservesfarm.com, consolidatedmessenger.com, www.consolidatedmessenger.com, humongousinsurance.com, www.humongousinsurance.com, nodpublishers.com, www.nodpublishers.com, thephone-company.com, www.thephone-company.com, alpineskihouse.com, www.alpineskihouse.com, graphicdesigninstitute.com, www.graphicdesigninstitute.com, wideworldimporters.com, www.wideworldimporters.com, contososuites.com, www.contososuites.com, lamnahealthcare.com, www.lamnahealthcare.com, northwindtraders.com, www.northwindtraders.com, bellowscollege.com, www.bellowscollege.com, wingtiptoys.com, www.wingtiptoys.com, fabrikamresidences.com, www.fabrikamresidences.com, libertysdelightfulsinfulbakeryandcafe.com, www.libertysdelightfulsinfulbakeryandcafe.com, proseware.com, www.proseware.com, bestforyouorganics.com, www.bestforyouorganics.com, woodgrovebank.com, www.woodgrovebank.com, fabrikam.com, www.fabrikam.com, lucernepublishing.com, www.lucernepublishing.com, fineartschool.net, www.fineartschool.net, firstupconsultants.com, www.firstupconsultants.com, margiestravel.com, www.margiestravel.com, southridgevideo.com, www.southridgevideo.com, tailspintoys.com, www.tailspintoys.com, treyresearch.net, www.treyresearch.net, copilot.microsoft365.com, partnerclub.microsoft.fr, forums.hololens.com, partners.surface.com, acom.azure.net, acomdocs-staging.azure.net, community.copilotstudio.com, microsoftadvertising.ai, www.microsoftadvertising.ai, windowsazure.com, www.windowsazure.com, azure.com, www.azure.com, www.azure.microsoft.com, outlookalki.com, copilot.si, www.copilot.si, smartscreentestratings.com, smartscreentestratings.net, smartscreentestratings1.com, smartscreentestratings1.net, smartscreentestratings2.com, smartscreentestratings2.net, www.smartscreentestratings2.net, www.smartscreentestratings2.com, www.smartscreentestratings1.net, www.smartscreentestratings1.com, www.smartscreentestratings.net, www.smartscreentestratings.com, secure.microsoft.com, workshops.microsoft.com, ccf.microsoft.com, noslidesattached.com, noslidesattachedpodcast.com, www.noslidesattachedpodcast.com, www.noslidesattached.com
Valid: 2026-03-10 18:30:38 → 2026-09-06 18:30:38
2ec2c4f5a03bef45…
google · xenon2026h2
Subject: gamedev.microsoft.com
Issuer: Microsoft Azure RSA TLS Issuing CA 07
SANs: gamedev.microsoft.com, mi.microsoft.com, cce.microsoft.com, formspro.microsoft.com, msp.msdn.microsoft.com, myignite.microsoft.com, www.msdn.microsoft.com, hxsdk.corp.microsoft.com, events.msdn.microsoft.com, getrewarded.microsoft.com, www.gamedev.microsoft.com, cacademystage.microsoft.com, gamedeveloper.microsoft.com, gamedevelopment.microsoft.com, portal.startups.microsoft.com, devicemanagement.microsoft.com, powerautomateweb.microsoft.com, services.premier.microsoft.com, www.gamedeveloper.microsoft.com, www.gamedevelopment.microsoft.com, solutions.diagnostics.support.microsoft.com, screening.microsoft.com, govscreening.microsoft.com, researchsummit.microsoft.com, research.microsoft.com, phylod.research.microsoft.com, biomedsearch.microsoft.com, todo.microsoft.com, endpoint.microsoft.com, endpoint.microsoft.us, businessapplications.transform.microsoft.com, securityhub.transform.microsoft.com, to-do.microsoft.com, shopping.microsoft.com, datamigration.microsoft.com, preview.mesh.microsoft.com, selfhost.mesh.microsoft.com, mesh.cloud-dev.microsoft.com, portal-selfhost.mesh.microsoft.com, virtualchat.support.microsoft.com, priva.microsoft.com, minecrafteducation.com, www.minecrafteducation.com, snowleopards.microsoft.com, microsoftviva.microsoft.com, employeeexperience.microsoft.com, innovation.microsoft.com, viva.microsoft.com, ex.microsoft.com, adatum.com, www.adatum.com, fourthcoffee.com, www.fourthcoffee.com, munsonspicklesandpreservesfarm.com, www.munsonspicklesandpreservesfarm.com, consolidatedmessenger.com, www.consolidatedmessenger.com, humongousinsurance.com, www.humongousinsurance.com, nodpublishers.com, www.nodpublishers.com, thephone-company.com, www.thephone-company.com, alpineskihouse.com, www.alpineskihouse.com, graphicdesigninstitute.com, www.graphicdesigninstitute.com, wideworldimporters.com, www.wideworldimporters.com, contososuites.com, www.contososuites.com, lamnahealthcare.com, www.lamnahealthcare.com, northwindtraders.com, www.northwindtraders.com, bellowscollege.com, www.bellowscollege.com, wingtiptoys.com, www.wingtiptoys.com, fabrikamresidences.com, www.fabrikamresidences.com, libertysdelightfulsinfulbakeryandcafe.com, www.libertysdelightfulsinfulbakeryandcafe.com, proseware.com, www.proseware.com, bestforyouorganics.com, www.bestforyouorganics.com, woodgrovebank.com, www.woodgrovebank.com, fabrikam.com, www.fabrikam.com, lucernepublishing.com, www.lucernepublishing.com, fineartschool.net, www.fineartschool.net, firstupconsultants.com, www.firstupconsultants.com, margiestravel.com, www.margiestravel.com, southridgevideo.com, www.southridgevideo.com, tailspintoys.com, www.tailspintoys.com, treyresearch.net, www.treyresearch.net, copilot.microsoft365.com, partnerclub.microsoft.fr, forums.hololens.com, partners.surface.com, acom.azure.net, acomdocs-staging.azure.net, community.copilotstudio.com, microsoftadvertising.ai, www.microsoftadvertising.ai, windowsazure.com, www.windowsazure.com, azure.com, www.azure.com, www.azure.microsoft.com, outlookalki.com, copilot.si, www.copilot.si, smartscreentestratings.com, smartscreentestratings.net, smartscreentestratings1.com, smartscreentestratings1.net, smartscreentestratings2.com, smartscreentestratings2.net, www.smartscreentestratings2.net, www.smartscreentestratings2.com, www.smartscreentestratings1.net, www.smartscreentestratings1.com, www.smartscreentestratings.net, www.smartscreentestratings.com, secure.microsoft.com, workshops.microsoft.com, ccf.microsoft.com, noslidesattached.com, noslidesattachedpodcast.com, www.noslidesattachedpodcast.com, www.noslidesattached.com
Valid: 2026-02-11 03:53:29 → 2026-08-10 03:53:29
Threat Intelligence
Domain threat-intel pending
Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.
History
Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.
| Type | Value | First seen | Last seen |
|---|---|---|---|
| TXT | MSRINET responsible group | 2026-05-26 05:30:55.049 | 2026-07-28 02:05:12.153 |
| A | 20.231.239.246 | 2026-05-26 05:30:55.049 | 2026-07-28 02:05:12.153 |
| NS | ns4-02.azure-dns.info | 2026-05-26 05:30:55.049 | 2026-07-28 02:05:12.153 |
| NS | ns1-02.azure-dns.com | 2026-05-26 05:30:55.049 | 2026-07-28 02:05:12.153 |
| A | 20.112.250.133 | 2026-05-26 05:30:55.049 | 2026-07-28 02:05:12.153 |
| NS | ns3-02.azure-dns.org | 2026-05-26 05:30:55.049 | 2026-07-28 02:05:12.153 |
| A | 20.76.201.171 | 2026-05-26 05:30:55.049 | 2026-07-28 02:05:12.153 |
| A | 20.236.44.162 | 2026-05-26 05:30:55.049 | 2026-07-28 02:05:12.153 |
| NS | ns2-02.azure-dns.net | 2026-05-26 05:30:55.049 | 2026-07-28 02:05:12.153 |
| A | 20.70.246.20 | 2026-05-26 05:30:55.049 | 2026-07-28 02:05:12.153 |