Domain

core.microsoft

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

DNS Check HTTP Check Run Full Scan .microsoft TLD

Run a live full scan of core.microsoft

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now

Hosting IPs

488

A/AAAA targets

Subdomains

1,149

CT + scan + body

Record Types

seen in DNS

Observed Certs

—

in our scans

DNS Records

—

AAAA

—

ns1-33.azure-dns.com, ns2-33.azure-dns.net, ns3-33.azure-dns.org, ns4-33.azure-dns.info

TXT

MS=ms76478040, v=spf1 -all

CNAME

—

CAA

0 contactemail "caarecordaware@microsoft.com", 0 iodef "mailto:caarecordaware@microsoft.com", 0 issue "digicert.com", 0 issue "microsoft.com"

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.

Subdomain	Resolves to	Last seen
prod.ued.core.microsoft	57.153.73.159 57.153.134.60 4.208.67.22 4.207.192.233 +51	2026-07-28 10:59:00.670
authorization.identity.core.microsoft	40.126.32.129 2603:1027:1:148::b 2603:1026:3000:150::2 2603:1027:1:158::7 +50	2026-07-28 11:08:40.176
intune.prod.ued.core.microsoft	20.105.61.42 98.66.224.151 98.66.220.54 4.175.181.130 +48	2026-07-28 10:59:00.670
prod.registrar.communications.core.microsoft	98.66.204.49 50.85.190.235 57.153.134.199 132.220.97.155 +31	2026-07-28 20:39:29.599
substrate.svc.core.microsoft	2603:10a6:158:400::17c 2603:10b6:8:452::5 2603:10a6:20b:5e3::5 2603:10a6:20b:218::5 +16	2026-07-23 07:18:54.603
api-workerrole.tdf.crosstenantmms.teams.core.microsoft	150.171.109.34 2603:1061:14:c5::1 2603:1061:14:20::1 2603:1061:14:c3::1 +6	2026-06-20 11:40:15.510
slideanalysis.core.microsoft	52.109.88.184 52.111.209.24 2603:1026:2402::4 2603:1026:2405::17 +6	2026-07-25 06:15:36.530
api-webrole.tdf.crosstenantmms.teams.core.microsoft	150.171.109.35 2603:1061:14:63::1 2603:1061:14:21::1 2603:1061:14:64::1 +5	2026-06-20 11:40:15.510
dev02.partnerportal.teams.core.microsoft	150.171.109.35 2603:1061:14:135::1 150.171.109.34 150.171.109.198 +4	2026-07-28 12:35:28.535
index.textanalysis.core.microsoft	52.109.68.40 52.109.76.7 2603:1026:2404::e 2603:1026:2400::6 +4	2026-07-28 13:22:58.632
marketwatch.core.microsoft	150.171.109.51 2603:1061:14:63::1 2603:1061:14:64::1 2603:1061:14:34::1 +4	2026-07-21 09:30:34.743
dev01.partnerportal.teams.core.microsoft	150.171.109.51 2603:1061:14:32::1 150.171.109.100 150.171.110.54 +3	2026-07-28 12:35:28.535
dev03.partnerportal.teams.core.microsoft	150.171.109.51 2603:1061:14:34::1 150.171.109.198 150.171.109.100 +3	2026-07-28 12:35:28.535
intune.canary.ued.core.microsoft	52.155.93.159 172.205.88.33 20.13.176.217 98.66.192.168 +3	2026-07-28 15:23:59.929
canary.ued.core.microsoft	172.205.88.33 52.155.93.159 57.152.100.169 98.66.192.168 +2	2026-07-28 15:23:59.929
ans.messaging.core.microsoft	20.76.68.174 20.240.14.62 20.8.255.21 20.166.182.141 +1	2026-07-28 07:00:33.211
df.ans.messaging.core.microsoft	40.74.18.129 20.19.216.116 20.103.3.93 20.166.130.114 +1	2026-07-28 07:00:33.211
sacs.core.microsoft	52.109.13.35 52.109.8.38 52.109.4.41 52.109.20.91 +1	2026-07-26 17:56:24.590
afd.northeurope.sdf.syntexrp.core.microsoft	13.107.253.38 13.107.226.38 2620:1ec:48:1::38 2620:1ec:29:1::38	2026-06-18 15:00:39.694
afd.southafricanorth.prod.syntexrp.core.microsoft	150.171.109.34 150.171.109.198 2603:1061:14:22::1 2603:1061:14:c3::1	2026-06-19 20:47:45.632
afd.uaenorth.prod.syntexrp.core.microsoft	150.171.109.36 150.171.109.100 2603:1061:14:23::1 2603:1061:14:21::1	2026-06-20 05:13:24.451
cdn.config.centro.core.microsoft	2.16.241.212 2.16.241.222 2a02:26f0:b200::58dd:198b 2a02:26f0:b200::58dd:1989	2026-06-23 02:26:43.735
config.centro.core.microsoft	150.171.73.13 2603:1061:10:1::13 2603:1061:10::13 150.171.74.13	2026-07-28 09:41:22.792
copilot-connectors.core.microsoft	13.107.246.65 13.107.213.65 2620:1ec:46::65 2620:1ec:bdf::65	2026-06-20 10:49:08.801
df.copilot-connectors.core.microsoft	13.107.246.65 13.107.213.65 2620:1ec:bdf::65 2620:1ec:46::65	2026-06-20 10:49:08.801
dogfood.ued.core.microsoft	20.13.176.217 98.66.192.168 98.66.217.47 4.208.220.119	2026-07-28 10:59:00.670
icms.contentloc.core.microsoft	13.107.226.67 13.107.253.67 2620:1ec:48:1::67 2620:1ec:29:1::67	2026-06-17 15:31:41.167
int.marketwatch.core.microsoft	150.171.109.53 2603:1061:14:34::1 150.171.109.51 2603:1061:14:32::1	2026-07-28 11:36:15.163
revocation.core.microsoft	98.64.19.231 20.61.93.169 98.64.171.252 20.61.35.100	2026-07-26 17:13:03.300
slideinfoworker.slideanalysis.core.microsoft	52.109.88.59 52.111.209.23 2603:1026:2402::b 2603:1026:2405::5d	2026-07-25 06:15:36.530
textanalysis.core.microsoft	52.109.88.2 2603:1026:2405::13 2603:1036:2400::89 52.109.2.58	2026-07-28 13:22:58.632
authorization.foundational.identity.core.microsoft	20.135.195.88 20.152.0.172 20.135.197.112	2026-07-17 16:17:23.228
gcc.ued.core.microsoft	104.212.61.21 104.212.60.233 20.158.120.63	2026-07-20 08:17:01.502
llmmeteringapi.core.microsoft	132.220.55.104 20.162.121.91 4.226.1.171	2026-07-25 02:44:41.834
pptwrs.core.microsoft	52.109.68.77 52.109.68.76 20.61.151.214	2026-07-22 23:47:15.185
sdf.substrate.svc.core.microsoft	2603:10b6:5:331::5 2603:10b6:806:2d1::5 2603:1036:903:17::7	2026-07-23 07:18:54.603
tca.teams.core.microsoft	57.153.6.152 172.205.37.119 98.66.201.30	2026-07-28 04:00:32.430
afd.australiasoutheast.prod.syntexrp.core.microsoft	150.171.109.33 2603:1061:14:23::1	2026-06-18 09:39:15.838
afd.canadacentral.prod.syntexrp.core.microsoft	150.171.109.198 2603:1061:14:34::1	2026-06-19 20:47:45.632
afd.common.test.syntexrp.core.microsoft	150.171.109.36 2603:1061:14:134::1	2026-06-18 15:00:39.694
afd.eastasia.prod.syntexrp.core.microsoft	150.171.109.197 2603:1061:14:c5::1	2026-06-19 20:25:09.479
afd.eastus.test.syntexrp.core.microsoft	150.171.109.197 2603:1061:14:22::1	2026-06-20 04:28:12.719
afd.northcentralus.prod.syntexrp.core.microsoft	150.171.109.51 2603:1061:14:21::1	2026-06-19 20:29:28.347
afd.uksouth.prod.syntexrp.core.microsoft	150.171.109.101 2603:1061:14:64::1	2026-06-18 09:39:15.838
afd.westeurope.test.syntexrp.core.microsoft	150.171.109.100 2603:1061:14:64::1	2026-06-19 21:15:39.560
afd.westus.prod.syntexrp.core.microsoft	150.171.109.101 2603:1061:14:22::1	2026-06-19 20:51:40.444
afd.westus.test.syntexrp.core.microsoft	150.171.109.198 2603:1061:14:c4::1	2026-06-18 15:00:39.694
api-int.marketwatch.core.microsoft	150.171.109.53 2603:1061:14:32::1	2026-07-28 15:04:37.256
api-prod-noam.biometricsvc.teams.core.microsoft	20.175.75.162 70.152.112.0	2026-07-19 05:49:02.105
api.marketwatch.core.microsoft	150.171.109.101 2603:1061:14:c4::1	2026-06-20 05:04:00.119
api.rating.core.microsoft	4.207.235.85 4.207.181.215	2026-07-26 10:46:00.019
api.risedt.m365.core.microsoft	150.171.109.197 2603:1061:14:c3::1	2026-06-17 18:07:01.993
api.siufauthoring.core.microsoft	172.212.22.53 4.153.73.152	2026-07-27 08:31:52.430
apm-accounts-api.core.microsoft	150.171.109.196 2603:1061:14:c3::1	2026-06-18 19:56:42.909
asse.msit.appsuggestions.teams.core.microsoft	4.144.204.154 57.155.183.13	2026-07-21 17:35:39.428
css.cprod.officeshell.core.microsoft	4.250.22.224 2603:1020:705:e::350	2026-07-19 14:51:58.173
ctms.core.microsoft	150.171.109.100 2603:1061:14:c5::1	2026-06-22 04:10:10.067
devc.presence.communications.core.microsoft	52.123.184.2 2603:1063:f::2	2026-07-25 04:34:47.921
devcrem.presence.communications.core.microsoft	52.123.184.8 2603:1063:f::3	2026-07-25 04:34:47.921
deve.presence.communications.core.microsoft	52.123.183.112 2603:1063:d::62	2026-07-26 09:10:48.160
deverem.presence.communications.core.microsoft	52.123.183.21 2603:1063:d::63	2026-07-26 09:10:48.160
df.pptwrs.core.microsoft	52.160.47.166 2a01:111:f100:3001::a83d:1113	2026-07-22 23:47:15.185
entitlement.teams.core.microsoft	4.175.129.146 20.56.242.143	2026-07-26 04:05:32.050
inte.presence.communications.core.microsoft	52.123.183.174 2603:1063:d::72	2026-07-26 09:10:48.160
intelligence-gw-prodnoam.dmmars.teams.core.microsoft	52.250.39.213 20.66.51.217	2026-07-24 12:43:12.521
interem.presence.communications.core.microsoft	52.123.183.12 2603:1063:d::7a	2026-07-26 09:10:48.160
lcs.core.microsoft	20.111.1.16 2603:1020:805:2::61b	2026-06-20 05:58:02.841
localizationfileservice.core.microsoft	150.171.109.36 2603:1061:14:34::1	2026-07-26 18:22:19.896
mcsaiagents.security.core.microsoft	150.171.109.198 2603:1061:14:c4::1	2026-06-16 15:39:27.902
prod.inventory.substrate.svc.core.microsoft	104.45.129.178 23.99.65.65	2026-06-23 11:47:32.155
prod.packages.kevlarforlinux.core.microsoft	150.171.109.53 2603:1061:14:32::1	2026-07-26 08:45:52.550
prod.skysafe.teams.core.microsoft	4.254.61.136 40.90.218.176	2026-06-20 03:28:22.106
qe.ued.core.microsoft	4.157.120.177 57.152.49.132	2026-06-21 23:40:15.617
sea.config.centro.core.microsoft	4.144.162.77 20.195.2.91	2026-07-27 18:25:56.107
tdf.dssync.teams.core.microsoft	23.96.239.180 52.252.193.58	2026-07-20 09:38:12.033
telarix.entitlement.teams.core.microsoft	20.9.102.47 20.84.197.83	2026-06-22 07:06:58.416
test1c.presence.communications.core.microsoft	52.123.184.9 2603:1063:f::9	2026-07-25 04:34:47.921
test1e.presence.communications.core.microsoft	52.123.183.3 2603:1063:d::5	2026-07-26 09:10:48.160
test1erem.presence.communications.core.microsoft	52.123.183.120 2603:1063:d::78	2026-07-26 09:10:48.160
test2c.presence.communications.core.microsoft	52.123.184.7 2603:1063:f::5	2026-07-25 04:34:47.921
test2crem.presence.communications.core.microsoft	52.123.184.6 2603:1063:f::8	2026-07-25 04:34:47.921
test2e.presence.communications.core.microsoft	52.123.183.13 2603:1063:d::87	2026-07-26 09:10:48.160
test2erem.presence.communications.core.microsoft	52.123.183.121 2603:1063:d::79	2026-07-26 09:10:48.160
test3c.presence.communications.core.microsoft	52.123.184.4 2603:1063:f::4	2026-07-25 04:34:47.921
test3crem.presence.communications.core.microsoft	52.123.184.3 2603:1063:f::6	2026-07-25 04:34:47.921
test3e.presence.communications.core.microsoft	52.123.183.173 2603:1063:d::4	2026-07-26 09:10:48.160
test3erem.presence.communications.core.microsoft	52.123.183.20 2603:1063:d::6	2026-07-26 09:10:48.160
tgcb.teams.core.microsoft	57.153.6.139 48.217.197.119	2026-07-28 08:31:23.092
weu.config.centro.core.microsoft	4.175.104.8 20.67.74.177	2026-07-27 18:25:56.107
acms.communications.core.microsoft		1970-01-01 00:00:00.000
active-protection.gcc.teams.core.microsoft	104.212.61.47	2026-07-27 16:12:13.521
adap.tfl.core.microsoft		1970-01-01 00:00:00.000
afd.northeurope.test.syntexrp.core.microsoft		1970-01-01 00:00:00.000
aiinfrastructure.core.microsoft	20.237.228.44	2026-07-27 13:31:15.179
aiinterpreterin.mcr.teams.core.microsoft		1970-01-01 00:00:00.000
ams.dev1.cdn.tdf.ml.communications.core.microsoft		1970-01-01 00:00:00.000
analytics-dev.neuron.teams.core.microsoft		1970-01-01 00:00:00.000
analytics.corp.neuron.teams.core.microsoft	20.44.82.101	2026-07-16 18:39:34.473
analytics.neuron.teams.core.microsoft	20.71.74.104	2026-06-23 05:20:15.188
antiphish-dogfood.teams.core.microsoft		1970-01-01 00:00:00.000
apac.msit.pasta.communications.core.microsoft	20.210.27.248	2026-06-19 15:13:22.094
apac.prod.active-protection.teams.core.microsoft	70.152.52.1	2026-07-28 03:24:34.002
apac.prod.appdiscovery.teams.core.microsoft	20.18.232.83	2026-07-20 21:18:03.635
api-int-noam.biometricsvc.teams.core.microsoft		1970-01-01 00:00:00.000
api-msit-noam.biometricsvc.teams.core.microsoft	20.237.144.160	2026-07-25 13:15:23.497
api-prod-apac.biometricsvc.teams.core.microsoft	85.211.152.12	2026-07-26 11:45:07.176
api.int.appsense.core.microsoft		1970-01-01 00:00:00.000
api.int.ic3aiot.teams.core.microsoft	20.190.24.121	2026-06-18 12:58:29.213
api.noam.tdf.mec.infra.teams.core.microsoft		1970-01-01 00:00:00.000
api.ppe.appsense.core.microsoft		1970-01-01 00:00:00.000
apm-tenant-mgmt-api.core.microsoft	52.184.193.103	2026-07-27 01:11:34.779
appdiscovery.teams.core.microsoft		1970-01-01 00:00:00.000
asse.prod.appsuggestions.teams.core.microsoft	57.158.131.3	2026-07-22 05:46:32.513
aus01.prod.centraladmin.substrate.svc.core.microsoft	13.77.50.110	2026-06-22 17:15:58.646
australiaeast.prod.skysafe.teams.core.microsoft	4.254.61.136	2026-06-20 03:28:22.106
australiaeast.sdf.skysafe.teams.core.microsoft	4.237.183.157	2026-07-26 10:46:00.019
australiasoutheast.prod.syntexrp.core.microsoft	20.45.155.105	2026-06-20 08:13:02.315
authservice.core.microsoft		1970-01-01 00:00:00.000
b.dev.dev1.cdn.tdf.ml.communications.core.microsoft		1970-01-01 00:00:00.000
bmc.teams.core.microsoft		1970-01-01 00:00:00.000

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

20.3.47.68:443 809cdb85e58e…

Subject: tca.teams.core.microsoft

Issuer: Microsoft TLS G2 RSA CA OCSP 02

SANs: *.rtaf.tca.teams.core.microsoft, *.tca.teams.core.microsoft, tca.teams.core.microsoft

57.154.185.14:443 c448e250ac95…

Subject: *.aiinterpreterin.mcr.teams.core.microsoft

Issuer: Microsoft TLS G2 RSA CA OCSP 02

SANs: *.aiinterpreterin.mcr.teams.core.microsoft, *.aiinterpreterin.mcr.teams.microsoft.com

70.152.80.5:443 04dd8b6db5cf…

Subject: apac.prod.active-protection.teams.core.microsoft

Issuer: Microsoft TLS G2 RSA CA OCSP 16

SANs: apac.prod.active-protection.teams.core.microsoft

51.137.158.233:443 3ca9453fd398…

Subject: getitemsworker.powerpoint.core.microsoft

Issuer: Microsoft TLS G2 RSA CA OCSP 04

SANs: *.getitemsworker.edog.officeapps.live.com, *.getitemsworker.officeapps.live.com, *.getitemsworker.powerpoint.core.dev.microsoft, *.getitemsworker.powerpoint.core.microsoft, getitemsworker.edog.officeapps.live.com, getitemsworker.officeapps.live.com, getitemsworker.powerpoint.core.dev.microsoft, getitemsworker.powerpoint.core.microsoft

13.77.6.232:443 14ef8274e398…

Subject: tca.teams.core.microsoft

Issuer: Microsoft TLS G2 RSA CA OCSP 02

SANs: *.rtaf.tca.teams.core.microsoft, *.tca.teams.core.microsoft, tca.teams.core.microsoft

20.215.145.1:443 558204de3a8b…

Subject: *.fe.communications.core.microsoft

Issuer: Microsoft TLS G2 RSA CA OCSP 10

SANs: *.fe.communications.core.microsoft, *.scheduler.fe.communications.core.microsoft, *.testworker.fe.communications.core.microsoft, *.worker.fe.communications.core.microsoft

4.174.228.174:443 fbad33bb534f…

Subject: *.stampcontrolplane.teams.core.microsoft

Issuer: Microsoft TLS G2 RSA CA OCSP 10

SANs: *.failoverorchestrator.teams.core.microsoft, *.stampcontrolplane.teams.core.microsoft

108.133.100.198:9443 ff7bcb3d8523…

Subject: *.lift.mcr.teams.core.microsoft

Issuer: Microsoft TLS G2 RSA CA OCSP 16

SANs: *.lift.mcr.teams.core.microsoft

4.248.1.230:443 1629ad244654…

Subject: *.fe.communications.core.microsoft

Issuer: Microsoft TLS G2 RSA CA OCSP 04

SANs: *.fe.communications.core.microsoft, *.scheduler.fe.communications.core.microsoft, *.testworker.fe.communications.core.microsoft, *.worker.fe.communications.core.microsoft

70.152.52.1:443 16c8472f4685…

Subject: apac.prod.active-protection.teams.core.microsoft

Issuer: Microsoft TLS G2 RSA CA OCSP 10

SANs: apac.prod.active-protection.teams.core.microsoft

52.235.137.163:443 13667054d53a…

Subject: coresvc.gcc.dmsvc.teams.usgovcloud-core.microsoft

Issuer: Microsoft TLS G2 RSA CA OCSP 02

SANs: coresvc.gcc.dmsvc.teams.usgovcloud-core.microsoft

68.219.56.58:443 0348210ea15d…

Subject: revocation.core.microsoft

Issuer: Microsoft TLS G2 RSA CA OCSP 16

SANs: *.revocation.core.microsoft, revocation.core.microsoft

20.175.76.254:443 1629ad244654…

Subject: *.fe.communications.core.microsoft

Issuer: Microsoft TLS G2 RSA CA OCSP 04

SANs: *.fe.communications.core.microsoft, *.scheduler.fe.communications.core.microsoft, *.testworker.fe.communications.core.microsoft, *.worker.fe.communications.core.microsoft

4.190.40.220:443 880ee0c666d4…

Subject: updateprocessor-prod-apac.dmsvc.teams.core.microsoft

Issuer: Microsoft TLS G2 RSA CA OCSP 04

SANs: updateprocessor-prod-apac.dmsvc.teams.core.microsoft

4.178.15.15:443 9e5de21c40f8…

Subject: notificationsvc-prod-emea.dmsvc.teams.core.microsoft

Issuer: Microsoft TLS G2 RSA CA OCSP 04

SANs: notificationsvc-prod-emea.dmsvc.teams.core.microsoft

52.109.0.173:443 3ca9453fd398…

Subject: getitemsworker.powerpoint.core.microsoft

Issuer: Microsoft TLS G2 RSA CA OCSP 04

20.164.108.211:8443 173211a230f0…

Subject: prod.appsuggestions.teams.core.microsoft

Issuer: Microsoft TLS G2 RSA CA OCSP 04

SANs: p01.sano.prod.appsuggestions.teams.core.microsoft, p02.sano.prod.appsuggestions.teams.core.microsoft, prod.appsuggestions.teams.core.microsoft, sano.prod.appsuggestions.teams.core.microsoft

20.94.126.37:443 103463d9c82a…

Subject: *.aiinterpreterin.mcr.teams.core.microsoft

Issuer: Microsoft TLS G2 RSA CA OCSP 04

SANs: *.aiinterpreterin.mcr.teams.core.microsoft, *.aiinterpreterin.mcr.teams.microsoft.com

130.33.205.241:8443 5cd458ef0d52…

Subject: prod.appsuggestions.teams.core.microsoft

Issuer: Microsoft TLS G2 RSA CA OCSP 10

SANs: jpea.prod.appsuggestions.teams.core.microsoft, p01.jpea.prod.appsuggestions.teams.core.microsoft, p02.jpea.prod.appsuggestions.teams.core.microsoft, prod.appsuggestions.teams.core.microsoft

172.168.246.147:443 a37735efb88e…

Subject: *.skypegraph.teams.core.microsoft

Issuer: Microsoft TLS G2 RSA CA OCSP 04

SANs: *.skypegraph.teams.core.microsoft, sgraphupdate.skype.net, skypegraph.skype.com

13.88.173.88:443 7b4333c1b901…

Subject: tca.teams.core.microsoft

Issuer: Microsoft TLS G2 RSA CA OCSP 02

SANs: *.rtaf.tca.teams.core.microsoft, *.tca.teams.core.microsoft, tca.teams.core.microsoft

40.83.189.52:443 0348210ea15d…

Subject: revocation.core.microsoft

Issuer: Microsoft TLS G2 RSA CA OCSP 16

SANs: *.revocation.core.microsoft, revocation.core.microsoft

74.241.197.99:443 8b636c57bcf8…

Subject: *.aiinterpreterin.mcr.teams.core.microsoft

Issuer: Microsoft TLS G2 RSA CA OCSP 04

SANs: *.aiinterpreterin.mcr.teams.core.microsoft, *.aiinterpreterin.mcr.teams.microsoft.com

20.253.215.92:443 f34bc6b0dd1b…

Subject: *.skypegraph.teams.core.microsoft

Issuer: Microsoft TLS G2 RSA CA OCSP 04

SANs: *.skypegraph.teams.core.microsoft, sgraphupdate.skype.net, skypegraph.skype.com

13.85.177.199:443 3ca9453fd398…

Subject: getitemsworker.powerpoint.core.microsoft

Issuer: Microsoft TLS G2 RSA CA OCSP 04

158.23.251.22:443 e4e91ec3ca80…

Subject: llmmeteringapi.core.microsoft

Issuer: Microsoft TLS G2 RSA CA OCSP 16

SANs: llmmeteringapi.core.microsoft, substrate-inference-meteringapi-lb.prod.substrate-inference-meteringapi.japaneast-prod.cosmic.office.net, substrate-inference-meteringapi-lb.prod.substrate-inference-meteringapi.westus-prod.cosmic.office.net

20.125.83.209:443 e4e91ec3ca80…

Subject: llmmeteringapi.core.microsoft

Issuer: Microsoft TLS G2 RSA CA OCSP 16

20.175.41.41:443 e01e61b785c8…

Subject: *.fe.communications.core.microsoft

Issuer: Microsoft TLS G2 RSA CA OCSP 10

SANs: *.fe.communications.core.microsoft, *.worker.fe.communications.core.microsoft

20.66.51.217:443 ff64affc56d6…

Subject: intelligence-gw-prodnoam.dmmars.teams.core.microsoft

Issuer: Microsoft TLS G2 RSA CA OCSP 16

SANs: intelligence-gw-prodnoam.dmmars.teams.core.microsoft

20.104.144.196:443 1629ad244654…

Subject: *.fe.communications.core.microsoft

Issuer: Microsoft TLS G2 RSA CA OCSP 04

SANs: *.fe.communications.core.microsoft, *.scheduler.fe.communications.core.microsoft, *.testworker.fe.communications.core.microsoft, *.worker.fe.communications.core.microsoft

IPs Citing This Domain

No citing IPs found yet

As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

No origin-IP leaks detected (yet)

Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.

Type	Value	First seen	Last seen
CAA	0 issue "microsoft.com"	2026-06-02 03:45:33.953	2026-07-15 20:04:13.980
NS	ns4-33.azure-dns.info	2026-06-02 03:45:33.953	2026-07-15 20:04:13.980
TXT	v=spf1 -all	2026-06-02 03:45:33.953	2026-07-15 20:04:13.980
TXT	MS=ms76478040	2026-06-02 03:45:33.953	2026-07-15 20:04:13.980
NS	ns1-33.azure-dns.com	2026-06-02 03:45:33.953	2026-07-15 20:04:13.980
CAA	0 iodef "mailto:caarecordaware@microsoft.com"	2026-06-02 03:45:33.953	2026-07-15 20:04:13.980
CAA	0 contactemail "caarecordaware@microsoft.com"	2026-06-02 03:45:33.953	2026-07-15 20:04:13.980
NS	ns3-33.azure-dns.org	2026-06-02 03:45:33.953	2026-07-15 20:04:13.980
CAA	0 issue "digicert.com"	2026-06-02 03:45:33.953	2026-07-15 20:04:13.980
NS	ns2-33.azure-dns.net	2026-06-02 03:45:33.953	2026-07-15 20:04:13.980