Domain

redirection.svc.static.microsoft

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

DNS Check HTTP Check Run Full Scan .microsoft TLD

Run a live full scan of redirection.svc.static.microsoft

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now

Hosting IPs

—

A/AAAA targets

Subdomains

—

CT + scan + body

Record Types

—

seen in DNS

Observed Certs

—

in our scans

DNS Records

52.109.20.46, 52.109.89.118

AAAA

2603:1026:2405::7, 2603:1036:2407::6

—

TXT

—

CNAME

—

CAA

—

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Subdomain enumeration pending

Every subdomain ever issued a TLS cert under this apex — extracted from Certificate Transparency logs, our own scan observations and body references.

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

13.69.78.79:443 206eb3fc49b3…

Subject: ocsredir.edog.officeapps.live.com

Issuer: Microsoft TLS G2 RSA CA OCSP 04

SANs: *.edog.officeapps.live.com, *.ocsredir.edog.officeapps.live.com, *.redirection.svc.static.microsoft, ocsredir.edog.officeapps.live.com, redirection.svc.static.microsoft

IPs Citing This Domain

No citing IPs found yet

As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

No origin-IP leaks detected (yet)

Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.

CT-Log Evidence

Certificates from public Certificate Transparency logs whose subject or SAN names this domain — including historic certs we never observed live.

d529e8df0b133f1f… google · xenon2026h2

Subject: ocsredir.edog.officeapps.live.com

Issuer: Microsoft TLS G2 RSA CA OCSP 16

SANs: ocsredir.edog.officeapps.live.com, *.edog.officeapps.live.com, *.ocsredir.edog.officeapps.live.com, redirection.svc.static.microsoft, *.redirection.svc.static.microsoft

Valid: 2026-04-02 19:18:34 → 2026-09-29 19:18:34

3351f421d8b6279d… google · xenon2026h2

Subject: ocsredir.edog.officeapps.live.com

Issuer: Microsoft TLS G2 RSA CA OCSP 04

SANs: ocsredir.edog.officeapps.live.com, *.edog.officeapps.live.com, *.ocsredir.edog.officeapps.live.com, redirection.svc.static.microsoft, *.redirection.svc.static.microsoft

Valid: 2026-04-02 16:47:35 → 2026-09-29 16:47:35

f1076b8c79cf91ba… google · xenon2026h2

Subject: ocsredir.officeapps.live.com

Issuer: Microsoft TLS G2 RSA CA OCSP 16

SANs: ocsredir.officeapps.live.com, *.officeredir.microsoft.com, officeredir.microsoft.com, *.officeapps.live.com, officepreviewredir.microsoft.com, r.office.microsoft.com, *.ocsredir.officeapps.live.com, *.redirection.svc.static.microsoft, redirection.svc.static.microsoft

Valid: 2026-04-02 14:43:27 → 2026-09-29 14:43:27

4ed7eb48275d24d5… google · xenon2026h2

Subject: ocsredir.officeapps.live.com

Issuer: Microsoft TLS G2 RSA CA OCSP 16

Valid: 2026-04-02 11:30:33 → 2026-09-29 11:30:33

5aed97ae0c28c534… google · xenon2026h2

Subject: ocsredir.officeapps.live.com

Issuer: Microsoft TLS G2 RSA CA OCSP 02

Valid: 2026-04-02 09:47:57 → 2026-09-29 09:47:57

7efb31867ef30111… google · xenon2026h2

Subject: ocsredir.edog.officeapps.live.com

Issuer: Microsoft TLS G2 RSA CA OCSP 10

SANs: ocsredir.edog.officeapps.live.com, *.edog.officeapps.live.com, *.ocsredir.edog.officeapps.live.com, redirection.svc.static.microsoft, *.redirection.svc.static.microsoft

Valid: 2026-04-02 09:36:01 → 2026-09-29 09:36:01

99fe37bab674216c… google · xenon2026h2

Subject: ocsredir.edog.officeapps.live.com

Issuer: Microsoft TLS G2 RSA CA OCSP 10

SANs: ocsredir.edog.officeapps.live.com, *.edog.officeapps.live.com, *.ocsredir.edog.officeapps.live.com, redirection.svc.static.microsoft, *.redirection.svc.static.microsoft

Valid: 2026-04-02 09:36:01 → 2026-09-29 09:36:01

33d58c11fb1b2ed3… google · xenon2026h2

Subject: ocsredir.officeapps.live.com

Issuer: Microsoft TLS G2 RSA CA OCSP 10

Valid: 2026-02-18 03:16:17 → 2026-08-17 03:16:17

b1283223197df73b… google · xenon2026h2

Subject: ocsredir.officeapps.live.com

Issuer: Microsoft TLS G2 RSA CA OCSP 16

Valid: 2026-02-18 03:15:53 → 2026-08-17 03:15:53

c711853e267fd575… google · xenon2026h2

Subject: ocsredir.officeapps.live.com

Issuer: Microsoft TLS G2 RSA CA OCSP 16

Valid: 2026-02-18 03:15:53 → 2026-08-17 03:15:53

d2c16b462d1fb79a… google · xenon2026h2

Subject: ocsredir.officeapps.live.com

Issuer: Microsoft TLS G2 RSA CA OCSP 16

Valid: 2026-02-18 03:15:24 → 2026-08-17 03:15:24

0da288c20b97e356… google · xenon2026h2

Subject: ocsredir.officeapps.live.com

Issuer: Microsoft TLS G2 RSA CA OCSP 16

Valid: 2026-02-18 03:15:24 → 2026-08-17 03:15:24

9fcafc796c7960a1… google · xenon2026h2

Subject: ocsredir.edog.officeapps.live.com

Issuer: Microsoft TLS G2 RSA CA OCSP 10

SANs: ocsredir.edog.officeapps.live.com, *.edog.officeapps.live.com, *.ocsredir.edog.officeapps.live.com, redirection.svc.static.microsoft, *.redirection.svc.static.microsoft

Valid: 2026-02-18 03:14:55 → 2026-08-17 03:14:55

428bc009b8057289… google · xenon2026h2

Subject: ocsredir.edog.officeapps.live.com

Issuer: Microsoft TLS G2 RSA CA OCSP 10

SANs: ocsredir.edog.officeapps.live.com, *.edog.officeapps.live.com, *.ocsredir.edog.officeapps.live.com, redirection.svc.static.microsoft, *.redirection.svc.static.microsoft

Valid: 2026-02-18 03:14:55 → 2026-08-17 03:14:55

2a1b50c8fcb84885… google · xenon2026h2

Subject: ocsredir.edog.officeapps.live.com

Issuer: Microsoft TLS G2 RSA CA OCSP 16

SANs: ocsredir.edog.officeapps.live.com, *.edog.officeapps.live.com, *.ocsredir.edog.officeapps.live.com, redirection.svc.static.microsoft, *.redirection.svc.static.microsoft

Valid: 2026-02-18 03:13:29 → 2026-08-17 03:13:29

a00084ecdc4cc4ea… google · xenon2026h2

Subject: ocsredir.edog.officeapps.live.com

Issuer: Microsoft TLS G2 RSA CA OCSP 10

SANs: ocsredir.edog.officeapps.live.com, *.edog.officeapps.live.com, *.ocsredir.edog.officeapps.live.com, redirection.svc.static.microsoft, *.redirection.svc.static.microsoft

Valid: 2026-02-18 03:11:29 → 2026-08-17 03:11:29

7b87e41302f8968a… google · xenon2026h2

Subject: ocsredir.edog.officeapps.live.com

Issuer: Microsoft Azure RSA TLS Issuing CA 04

SANs: ocsredir.edog.officeapps.live.com, *.edog.officeapps.live.com, *.ocsredir.edog.officeapps.live.com, redirection.svc.static.microsoft, *.redirection.svc.static.microsoft

Valid: 2026-02-06 16:20:46 → 2026-08-05 16:20:46

233537dd93a44d7f… google · xenon2026h2

Subject: ocsredir.edog.officeapps.live.com

Issuer: Microsoft Azure RSA TLS Issuing CA 04

SANs: ocsredir.edog.officeapps.live.com, *.edog.officeapps.live.com, *.ocsredir.edog.officeapps.live.com, redirection.svc.static.microsoft, *.redirection.svc.static.microsoft

Valid: 2026-02-06 16:20:46 → 2026-08-05 16:20:46

dbfbdebb69f8ccd5… google · xenon2026h2

Subject: ocsredir.officeapps.live.com

Issuer: Microsoft Azure RSA TLS Issuing CA 04

Valid: 2026-02-06 09:24:52 → 2026-08-05 09:24:52

12a8ce85a9421649… google · xenon2026h2

Subject: ocsredir.officeapps.live.com

Issuer: Microsoft Azure RSA TLS Issuing CA 04

Valid: 2026-02-06 09:24:52 → 2026-08-05 09:24:52

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.

Type	Value	First seen	Last seen
AAAA	2603:1026:2405::7	2026-06-17 08:02:55.378	2026-06-22 08:18:54.115
A	52.109.89.118	2026-06-17 08:02:55.378	2026-06-22 08:18:54.115
AAAA	2603:1036:2407::6	2026-06-22 14:18:24.312	2026-07-20 22:56:57.614
A	52.109.20.46	2026-06-22 14:18:24.312	2026-07-20 22:56:57.614