Check-Host.cc

Domain

hive.forms.cloud.microsoft

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

Run a live full scan of hive.forms.cloud.microsoft

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now
Hosting IPs
22
A/AAAA targets
Subdomains
CT + scan + body
Record Types
2
seen in DNS
Observed Certs
116
in our scans

DNS Records

A
13.107.6.202, 52.109.16.136, 52.109.16.40, 52.109.68.84, 52.109.76.65, 52.109.88.172, 52.111.231.74, 52.111.231.75
AAAA
2603:1026:2400:1::45, 2603:1026:2400:1::46, 2603:1026:2400::32, 2603:1026:2404:1::61, 2603:1026:2404::30, 2603:1026:2405:1::66, 2603:1026:2405:1::67, 2603:1026:2405::15
MX
NS
TXT
CNAME
CAA

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Subdomain enumeration pending

Every subdomain ever issued a TLS cert under this apex — extracted from Certificate Transparency logs, our own scan observations and body references.

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

Subject: lists.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 02
SANs: *.hive.forms.cloud.microsoft, *.lists.office.com, *.lists.osi.office.net, hive.forms.cloud.microsoft, hive.forms.usercontent.microsoft, lists.office.com
Subject: lists.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 02
SANs: *.hive.forms.cloud.microsoft, *.lists.office.com, *.lists.osi.office.net, hive.forms.cloud.microsoft, hive.forms.usercontent.microsoft, lists.office.com
Subject: lists.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 02
SANs: *.hive.forms.cloud.microsoft, *.lists.office.com, *.lists.osi.office.net, hive.forms.cloud.microsoft, hive.forms.usercontent.microsoft, lists.office.com
Subject: lists.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 10
SANs: *.hive.forms.cloud.microsoft, *.lists.office.com, *.lists.osi.office.net, hive.forms.cloud.microsoft, hive.forms.usercontent.microsoft, lists.office.com
Subject: lists.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 02
SANs: *.hive.forms.cloud.microsoft, *.lists.office.com, *.lists.osi.office.net, hive.forms.cloud.microsoft, hive.forms.usercontent.microsoft, lists.office.com
Subject: lists.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 02
SANs: *.hive.forms.cloud.microsoft, *.lists.office.com, *.lists.osi.office.net, hive.forms.cloud.microsoft, hive.forms.usercontent.microsoft, lists.office.com
Subject: lists.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 04
SANs: *.hive.forms.cloud.microsoft, *.lists.office.com, *.lists.osi.office.net, hive.forms.cloud.microsoft, hive.forms.usercontent.microsoft, lists.office.com
Subject: lists.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 10
SANs: *.hive.forms.cloud.microsoft, *.lists.office.com, *.lists.osi.office.net, hive.forms.cloud.microsoft, hive.forms.usercontent.microsoft, lists.office.com
Subject: lists.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 02
SANs: *.hive.forms.cloud.microsoft, *.lists.office.com, *.lists.osi.office.net, hive.forms.cloud.microsoft, hive.forms.usercontent.microsoft, lists.office.com
Subject: lists.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 10
SANs: *.hive.forms.cloud.microsoft, *.lists.office.com, *.lists.osi.office.net, hive.forms.cloud.microsoft, hive.forms.usercontent.microsoft, lists.office.com
Subject: lists.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 02
SANs: *.hive.forms.cloud.microsoft, *.lists.office.com, *.lists.osi.office.net, hive.forms.cloud.microsoft, hive.forms.usercontent.microsoft, lists.office.com
Subject: lists.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 02
SANs: *.hive.forms.cloud.microsoft, *.lists.office.com, *.lists.osi.office.net, hive.forms.cloud.microsoft, hive.forms.usercontent.microsoft, lists.office.com
Subject: lists.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 16
SANs: *.hive.forms.cloud.microsoft, *.lists.office.com, *.lists.osi.office.net, hive.forms.cloud.microsoft, hive.forms.usercontent.microsoft, lists.office.com
Subject: lists.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 02
SANs: *.hive.forms.cloud.microsoft, *.lists.office.com, *.lists.osi.office.net, hive.forms.cloud.microsoft, hive.forms.usercontent.microsoft, lists.office.com
Subject: lists.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 10
SANs: *.hive.forms.cloud.microsoft, *.lists.office.com, *.lists.osi.office.net, hive.forms.cloud.microsoft, hive.forms.usercontent.microsoft, lists.office.com
Subject: lists.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 16
SANs: *.hive.forms.cloud.microsoft, *.lists.office.com, *.lists.osi.office.net, hive.forms.cloud.microsoft, hive.forms.usercontent.microsoft, lists.office.com
Subject: lists.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 02
SANs: *.hive.forms.cloud.microsoft, *.lists.office.com, *.lists.osi.office.net, hive.forms.cloud.microsoft, hive.forms.usercontent.microsoft, lists.office.com
Subject: lists.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 10
SANs: *.hive.forms.cloud.microsoft, *.lists.office.com, *.lists.osi.office.net, hive.forms.cloud.microsoft, hive.forms.usercontent.microsoft, lists.office.com
Subject: lists.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 04
SANs: *.hive.forms.cloud.microsoft, *.lists.office.com, *.lists.osi.office.net, hive.forms.cloud.microsoft, hive.forms.usercontent.microsoft, lists.office.com
Subject: lists.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 02
SANs: *.hive.forms.cloud.microsoft, *.lists.office.com, *.lists.osi.office.net, hive.forms.cloud.microsoft, hive.forms.usercontent.microsoft, lists.office.com
Subject: lists.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 04
SANs: *.hive.forms.cloud.microsoft, *.lists.office.com, *.lists.osi.office.net, hive.forms.cloud.microsoft, hive.forms.usercontent.microsoft, lists.office.com
Subject: lists.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 04
SANs: *.hive.forms.cloud.microsoft, *.lists.office.com, *.lists.osi.office.net, hive.forms.cloud.microsoft, hive.forms.usercontent.microsoft, lists.office.com
Subject: lists.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 04
SANs: *.hive.forms.cloud.microsoft, *.lists.office.com, *.lists.osi.office.net, hive.forms.cloud.microsoft, hive.forms.usercontent.microsoft, lists.office.com
Subject: lists.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 02
SANs: *.hive.forms.cloud.microsoft, *.lists.office.com, *.lists.osi.office.net, hive.forms.cloud.microsoft, hive.forms.usercontent.microsoft, lists.office.com
Subject: lists.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 02
SANs: *.hive.forms.cloud.microsoft, *.lists.office.com, *.lists.osi.office.net, hive.forms.cloud.microsoft, hive.forms.usercontent.microsoft, lists.office.com
Subject: lists.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 04
SANs: *.hive.forms.cloud.microsoft, *.lists.office.com, *.lists.osi.office.net, hive.forms.cloud.microsoft, hive.forms.usercontent.microsoft, lists.office.com
Subject: lists.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 04
SANs: *.hive.forms.cloud.microsoft, *.lists.office.com, *.lists.osi.office.net, hive.forms.cloud.microsoft, hive.forms.usercontent.microsoft, lists.office.com
Subject: lists.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 02
SANs: *.hive.forms.cloud.microsoft, *.lists.office.com, *.lists.osi.office.net, hive.forms.cloud.microsoft, hive.forms.usercontent.microsoft, lists.office.com
Subject: lists.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 02
SANs: *.hive.forms.cloud.microsoft, *.lists.office.com, *.lists.osi.office.net, hive.forms.cloud.microsoft, hive.forms.usercontent.microsoft, lists.office.com
Subject: lists.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 04
SANs: *.hive.forms.cloud.microsoft, *.lists.office.com, *.lists.osi.office.net, hive.forms.cloud.microsoft, hive.forms.usercontent.microsoft, lists.office.com

IPs Citing This Domain

No citing IPs found yet

As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

No origin-IP leaks detected (yet)

Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.

CT-Log Evidence

Certificates from public Certificate Transparency logs whose subject or SAN names this domain — including historic certs we never observed live.

d04fb1bfe58a0bd7… google · xenon2026h2
Subject: lists.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 16
SANs: lists.office.com, *.lists.office.com, *.lists.osi.office.net, hive.forms.cloud.microsoft, *.hive.forms.cloud.microsoft, hive.forms.usercontent.microsoft
Valid: 2026-03-13 18:32:56 → 2026-09-09 18:32:56
5201a6ce61d81d6b… google · xenon2026h2
Subject: lists.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 04
SANs: lists.office.com, *.lists.office.com, *.lists.osi.office.net, hive.forms.cloud.microsoft, *.hive.forms.cloud.microsoft, hive.forms.usercontent.microsoft
Valid: 2026-03-13 13:20:04 → 2026-09-09 13:20:04
d779111ace82b755… google · xenon2026h2
Subject: lists.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 02
SANs: lists.office.com, *.lists.office.com, lists.osi.office.net, *.lists.osi.office.net, hive.forms.cloud.microsoft, *.hive.forms.cloud.microsoft
Valid: 2026-03-06 06:48:24 → 2026-09-02 06:48:24
fb54f486a5099d95… google · xenon2026h2
Subject: lists.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 16
SANs: lists.office.com, *.lists.office.com, *.lists.osi.office.net, hive.forms.cloud.microsoft, *.hive.forms.cloud.microsoft
Valid: 2026-03-05 15:31:14 → 2026-09-01 15:31:14
96ce21074d0147a4… google · xenon2026h2
Subject: lists.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 10
SANs: lists.office.com, *.lists.office.com, *.lists.osi.office.net, hive.forms.cloud.microsoft, *.hive.forms.cloud.microsoft, hive.forms.usercontent.microsoft
Valid: 2026-03-05 14:42:17 → 2026-09-01 14:42:17
a9fc45b7a13a01f0… google · xenon2026h2
Subject: lists.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 02
SANs: lists.office.com, *.lists.office.com, *.lists.osi.office.net, hive.forms.cloud.microsoft, *.hive.forms.cloud.microsoft, hive.forms.usercontent.microsoft
Valid: 2026-03-04 03:50:49 → 2026-08-31 03:50:49
aba9614e2b23e8e7… google · xenon2026h2
Subject: lists.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 16
SANs: lists.office.com, *.lists.office.com, *.lists.osi.office.net, hive.forms.cloud.microsoft, *.hive.forms.cloud.microsoft, hive.forms.usercontent.microsoft
Valid: 2026-03-04 03:47:05 → 2026-08-31 03:47:05
89a5887c8e1e9e6e… google · xenon2026h2
Subject: lists.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 16
SANs: lists.office.com, *.lists.office.com, *.lists.osi.office.net, hive.forms.cloud.microsoft, *.hive.forms.cloud.microsoft, hive.forms.usercontent.microsoft
Valid: 2026-03-04 03:46:35 → 2026-08-31 03:46:35
c76eb597356c496f… google · xenon2026h2
Subject: lists.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 16
SANs: lists.office.com, *.lists.office.com, *.lists.osi.office.net, hive.forms.cloud.microsoft, *.hive.forms.cloud.microsoft, hive.forms.usercontent.microsoft
Valid: 2026-03-04 03:46:35 → 2026-08-31 03:46:35
0588b19557046501… google · xenon2026h2
Subject: lists.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 16
SANs: lists.office.com, *.lists.office.com, *.lists.osi.office.net, hive.forms.cloud.microsoft, *.hive.forms.cloud.microsoft, hive.forms.usercontent.microsoft
Valid: 2026-03-04 03:46:23 → 2026-08-31 03:46:23
0bb4acd36c1575f6… google · xenon2026h2
Subject: lists.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 16
SANs: lists.office.com, *.lists.office.com, *.lists.osi.office.net, hive.forms.cloud.microsoft, *.hive.forms.cloud.microsoft, hive.forms.usercontent.microsoft
Valid: 2026-03-04 03:46:02 → 2026-08-31 03:46:02
0f21ca80e5c27d18… google · xenon2026h2
Subject: lists.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 02
SANs: lists.office.com, *.lists.office.com, *.lists.osi.office.net, hive.forms.cloud.microsoft, *.hive.forms.cloud.microsoft, hive.forms.usercontent.microsoft
Valid: 2026-03-04 03:45:56 → 2026-08-31 03:45:56
f37480bf50cbbd25… google · xenon2026h2
Subject: lists.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 10
SANs: lists.office.com, *.lists.office.com, *.lists.osi.office.net, hive.forms.cloud.microsoft, *.hive.forms.cloud.microsoft, hive.forms.usercontent.microsoft
Valid: 2026-03-03 05:06:32 → 2026-08-30 05:06:32
0c466436faab6dba… google · xenon2026h2
Subject: lists.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 04
SANs: lists.office.com, *.lists.office.com, *.lists.osi.office.net, hive.forms.cloud.microsoft, *.hive.forms.cloud.microsoft, hive.forms.usercontent.microsoft
Valid: 2026-03-03 05:05:26 → 2026-08-30 05:05:26
d4f2a47b25d1053b… google · xenon2026h2
Subject: lists.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 16
SANs: lists.office.com, *.lists.office.com, *.lists.osi.office.net, hive.forms.cloud.microsoft, *.hive.forms.cloud.microsoft, hive.forms.usercontent.microsoft
Valid: 2026-03-03 05:05:25 → 2026-08-30 05:05:25
c5f8b423d9606dd0… google · xenon2026h2
Subject: lists.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 16
SANs: lists.office.com, *.lists.office.com, *.lists.osi.office.net, hive.forms.cloud.microsoft, *.hive.forms.cloud.microsoft, hive.forms.usercontent.microsoft
Valid: 2026-03-03 05:05:25 → 2026-08-30 05:05:25
a3bceee1fbf93090… google · xenon2026h2
Subject: lists.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 10
SANs: lists.office.com, *.lists.office.com, *.lists.osi.office.net, hive.forms.cloud.microsoft, *.hive.forms.cloud.microsoft, hive.forms.usercontent.microsoft
Valid: 2026-03-03 05:05:13 → 2026-08-30 05:05:13
3f36cba2a9665391… google · xenon2026h2
Subject: lists.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 16
SANs: lists.office.com, *.lists.office.com, *.lists.osi.office.net, hive.forms.cloud.microsoft, *.hive.forms.cloud.microsoft, hive.forms.usercontent.microsoft
Valid: 2026-03-03 05:05:08 → 2026-08-30 05:05:08
a4f9d9b27117a677… google · xenon2026h2
Subject: lists.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 04
SANs: lists.office.com, *.lists.office.com, *.lists.osi.office.net, hive.forms.cloud.microsoft, *.hive.forms.cloud.microsoft, hive.forms.usercontent.microsoft
Valid: 2026-01-29 00:44:46 → 2026-07-28 00:44:46
d84c73e39b37b374… google · xenon2026h2
Subject: lists.office.com
Issuer: Microsoft TLS G2 RSA CA OCSP 10
SANs: lists.office.com, *.lists.office.com, *.lists.osi.office.net, hive.forms.cloud.microsoft, *.hive.forms.cloud.microsoft, hive.forms.usercontent.microsoft
Valid: 2026-01-29 00:43:01 → 2026-07-28 00:43:01

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.

Type Value First seen Last seen
AAAA 2603:1026:2400:1::45 2026-05-25 21:52:03.357 2026-05-31 09:43:40.759
A 52.111.231.74 2026-05-25 21:52:03.357 2026-05-31 09:43:40.759
AAAA 2603:1026:2405:1::66 2026-05-26 00:12:34.719 2026-06-15 16:27:43.978
A 52.111.236.100 2026-05-26 05:18:44.431 2026-05-26 23:18:43.916
AAAA 2603:1026:2404:1::61 2026-05-26 21:05:36.962 2026-05-26 23:32:52.982
A 52.111.243.106 2026-05-26 23:14:12.044 2026-06-18 01:19:43.110
AAAA 2603:1026:2400:1::46 2026-05-27 01:53:31.573 2026-05-27 16:09:47.413
A 52.111.231.75 2026-05-27 01:53:31.573 2026-06-16 07:28:31.576
A 52.109.16.40 2026-05-27 02:17:37.200 2026-05-27 02:17:37.200
AAAA 2620:1ec:a92::202 2026-05-27 02:17:37.200 2026-07-28 08:41:52.746
A 13.107.6.202 2026-05-27 03:24:40.747 2026-07-28 08:41:52.746
AAAA 2603:1026:2400::32 2026-05-27 05:33:32.175 2026-05-27 05:33:32.175
AAAA 2603:1026:2405:1::67 2026-05-27 06:55:15.147 2026-06-20 01:49:05.336
A 52.111.236.101 2026-05-27 14:23:53.413 2026-06-20 14:10:44.514
A 52.109.16.136 2026-05-27 16:00:51.139 2026-05-27 16:00:51.139
A 52.109.68.84 2026-05-27 16:05:01.622 2026-05-31 09:41:40.800
AAAA 2603:1026:2405::15 2026-06-16 07:23:49.784 2026-06-20 14:10:44.514
A 52.111.243.107 2026-06-16 09:52:53.112 2026-06-20 00:45:44.931
A 52.109.88.172 2026-06-16 19:12:40.552 2026-06-19 17:17:30.691
AAAA 2603:1026:2404::30 2026-06-17 21:45:44.366 2026-06-18 01:19:43.110
AAAA 2603:1026:2405::18 2026-06-17 23:44:37.814 2026-06-17 23:44:37.814
A 52.109.76.65 2026-06-17 23:44:37.814 2026-06-17 23:44:37.814