Domain

core.microsoft

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

DNS Check HTTP Check Run Full Scan .microsoft TLD

Run a live full scan of core.microsoft

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now

Hosting IPs

—

A/AAAA targets

Subdomains

—

CT + scan + body

Record Types

—

seen in DNS

Observed Certs

—

in our scans

DNS Records

—

AAAA

—

TXT

—

CNAME

—

CAA

—

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.

Subdomain	Resolves to	Last seen
prod.ued.core.microsoft	57.153.252.246 98.66.220.54 4.245.25.158 20.40.156.200 +51	2026-07-28 10:59:00.670
authorization.identity.core.microsoft	40.126.53.5 2603:1026:3000:150::2 2603:1027:1:158::7 2603:1027:1:148::b +50	2026-07-28 11:08:40.176
intune.prod.ued.core.microsoft	4.175.26.44 4.207.12.0 20.8.146.138 98.64.205.80 +48	2026-07-28 10:59:00.670
prod.registrar.communications.core.microsoft	132.220.97.155 50.85.48.195 132.164.43.137 57.153.134.199 +31	2026-07-28 20:39:29.599
substrate.svc.core.microsoft	2603:10a6:20b:5e3::5 2603:10b6:5:3b3::5 2603:10b6:8:55::5 2603:10b6:8:191::5 +16	2026-07-23 07:18:54.603
api-workerrole.tdf.crosstenantmms.teams.core.microsoft	150.171.109.34 2603:1061:14:c5::1 2603:1061:14:20::1 2603:1061:14:c3::1 +6	2026-06-20 11:40:15.510
slideanalysis.core.microsoft	52.109.88.184 2603:1026:2405::17 2603:1026:2402::4 2603:1036:2400::e0 +6	2026-07-25 06:15:36.530
api-webrole.tdf.crosstenantmms.teams.core.microsoft	150.171.109.35 2603:1061:14:63::1 2603:1061:14:21::1 2603:1061:14:64::1 +5	2026-06-20 11:40:15.510
dev02.partnerportal.teams.core.microsoft	150.171.109.35 2603:1061:14:135::1 150.171.109.34 150.171.109.198 +4	2026-07-28 12:35:28.535
index.textanalysis.core.microsoft	52.109.76.7 52.109.89.4 2603:1026:2400::6 2603:1026:2405::44 +4	2026-07-28 13:22:58.632
marketwatch.core.microsoft	150.171.110.53 2603:1061:14:64::1 2603:1061:14:20::1 150.171.109.101 +4	2026-07-21 09:30:34.743
dev01.partnerportal.teams.core.microsoft	150.171.109.51 2603:1061:14:32::1 150.171.109.100 150.171.110.54 +3	2026-07-28 12:35:28.535
dev03.partnerportal.teams.core.microsoft	150.171.109.51 2603:1061:14:34::1 150.171.109.198 150.171.109.100 +3	2026-07-28 12:35:28.535
intune.canary.ued.core.microsoft	52.155.93.159 172.205.88.33 98.66.217.47 98.66.192.168 +3	2026-07-28 15:23:59.929
canary.ued.core.microsoft	52.155.93.159 98.66.192.168 172.205.88.33 20.13.176.217 +2	2026-07-28 15:23:59.929
ans.messaging.core.microsoft	20.76.68.174 20.240.14.62 20.8.255.21 20.223.74.51 +1	2026-07-28 07:00:33.211
df.ans.messaging.core.microsoft	20.103.3.93 20.166.130.114 40.74.18.129 20.19.216.116 +1	2026-07-28 07:00:33.211
sacs.core.microsoft	52.109.8.38 52.109.4.41 52.109.24.91 52.109.20.91 +1	2026-07-26 17:56:24.590
afd.northeurope.sdf.syntexrp.core.microsoft	13.107.253.38 13.107.226.38 2620:1ec:48:1::38 2620:1ec:29:1::38	2026-06-18 15:00:39.694
afd.southafricanorth.prod.syntexrp.core.microsoft	150.171.109.34 150.171.109.198 2603:1061:14:22::1 2603:1061:14:c3::1	2026-06-19 20:47:45.632
afd.uaenorth.prod.syntexrp.core.microsoft	150.171.109.36 150.171.109.100 2603:1061:14:23::1 2603:1061:14:21::1	2026-06-20 05:13:24.451
cdn.config.centro.core.microsoft	2.16.241.212 2.16.241.222 2a02:26f0:b200::58dd:198b 2a02:26f0:b200::58dd:1989	2026-06-23 02:26:43.735
config.centro.core.microsoft	150.171.74.13 2603:1061:10::13 2603:1061:10:1::13 150.171.73.13	2026-07-28 09:41:22.792
copilot-connectors.core.microsoft	13.107.246.65 13.107.213.65 2620:1ec:46::65 2620:1ec:bdf::65	2026-06-20 10:49:08.801
df.copilot-connectors.core.microsoft	13.107.246.65 13.107.213.65 2620:1ec:bdf::65 2620:1ec:46::65	2026-06-20 10:49:08.801
dogfood.ued.core.microsoft	20.13.176.217 4.208.220.119 98.66.192.168 98.66.217.47	2026-07-28 10:59:00.670
icms.contentloc.core.microsoft	13.107.226.67 13.107.253.67 2620:1ec:48:1::67 2620:1ec:29:1::67	2026-06-17 15:31:41.167
int.marketwatch.core.microsoft	150.171.109.51 2603:1061:14:32::1 150.171.109.53 2603:1061:14:34::1	2026-07-28 11:36:15.163
revocation.core.microsoft	98.64.171.252 20.61.35.100 98.64.19.231 20.61.93.169	2026-07-26 17:13:03.300
slideinfoworker.slideanalysis.core.microsoft	52.111.209.23 52.109.88.59 2603:1026:2402::b 2603:1026:2405::5d	2026-07-25 06:15:36.530
textanalysis.core.microsoft	52.109.2.58 2603:1026:2405::13 52.109.88.2 2603:1036:2400::89	2026-07-28 13:22:58.632
authorization.foundational.identity.core.microsoft	20.152.0.172 20.135.197.112 20.135.195.88	2026-07-17 16:17:23.228
gcc.ued.core.microsoft	104.212.61.21 104.212.60.233 20.158.120.63	2026-07-20 08:17:01.502
llmmeteringapi.core.microsoft	20.162.121.91 132.220.55.104 4.226.1.171	2026-07-25 02:44:41.834
pptwrs.core.microsoft	52.109.68.77 52.109.68.76 20.61.151.214	2026-07-22 23:47:15.185
sdf.substrate.svc.core.microsoft	2603:10b6:5:331::5 2603:10b6:806:2d1::5 2603:1036:903:17::7	2026-07-23 07:18:54.603
tca.teams.core.microsoft	98.66.201.30 172.205.37.119 57.153.6.152	2026-07-28 04:00:32.430
afd.australiasoutheast.prod.syntexrp.core.microsoft	150.171.109.33 2603:1061:14:23::1	2026-06-18 09:39:15.838
afd.canadacentral.prod.syntexrp.core.microsoft	150.171.109.198 2603:1061:14:34::1	2026-06-19 20:47:45.632
afd.common.test.syntexrp.core.microsoft	150.171.109.36 2603:1061:14:134::1	2026-06-18 15:00:39.694
afd.eastasia.prod.syntexrp.core.microsoft	150.171.109.197 2603:1061:14:c5::1	2026-06-19 20:25:09.479
afd.eastus.test.syntexrp.core.microsoft	150.171.109.197 2603:1061:14:22::1	2026-06-20 04:28:12.719
afd.northcentralus.prod.syntexrp.core.microsoft	150.171.109.51 2603:1061:14:21::1	2026-06-19 20:29:28.347
afd.uksouth.prod.syntexrp.core.microsoft	150.171.109.101 2603:1061:14:64::1	2026-06-18 09:39:15.838
afd.westeurope.test.syntexrp.core.microsoft	150.171.109.100 2603:1061:14:64::1	2026-06-19 21:15:39.560
afd.westus.prod.syntexrp.core.microsoft	150.171.109.101 2603:1061:14:22::1	2026-06-19 20:51:40.444
afd.westus.test.syntexrp.core.microsoft	150.171.109.198 2603:1061:14:c4::1	2026-06-18 15:00:39.694
api-int.marketwatch.core.microsoft	150.171.109.53 2603:1061:14:32::1	2026-07-28 15:04:37.256
api-prod-noam.biometricsvc.teams.core.microsoft	20.175.75.162 70.152.112.0	2026-07-19 05:49:02.105
api.marketwatch.core.microsoft	150.171.109.101 2603:1061:14:c4::1	2026-06-20 05:04:00.119
api.rating.core.microsoft	4.207.235.85 4.207.181.215	2026-07-26 10:46:00.019
api.risedt.m365.core.microsoft	150.171.109.197 2603:1061:14:c3::1	2026-06-17 18:07:01.993
api.siufauthoring.core.microsoft	172.212.22.53 4.153.73.152	2026-07-27 08:31:52.430
apm-accounts-api.core.microsoft	150.171.109.196 2603:1061:14:c3::1	2026-06-18 19:56:42.909
asse.msit.appsuggestions.teams.core.microsoft	4.144.204.154 57.155.183.13	2026-07-21 17:35:39.428
css.cprod.officeshell.core.microsoft	4.250.22.224 2603:1020:705:e::350	2026-07-19 14:51:58.173
ctms.core.microsoft	150.171.109.100 2603:1061:14:c5::1	2026-06-22 04:10:10.067
devc.presence.communications.core.microsoft	52.123.184.2 2603:1063:f::2	2026-07-25 04:34:47.921
devcrem.presence.communications.core.microsoft	52.123.184.8 2603:1063:f::3	2026-07-25 04:34:47.921
deve.presence.communications.core.microsoft	52.123.183.112 2603:1063:d::62	2026-07-26 09:10:48.160
deverem.presence.communications.core.microsoft	52.123.183.21 2603:1063:d::63	2026-07-26 09:10:48.160
df.pptwrs.core.microsoft	52.160.47.166 2a01:111:f100:3001::a83d:1113	2026-07-22 23:47:15.185
entitlement.teams.core.microsoft	20.56.242.143 4.175.129.146	2026-07-26 04:05:32.050
inte.presence.communications.core.microsoft	52.123.183.174 2603:1063:d::72	2026-07-26 09:10:48.160
intelligence-gw-prodnoam.dmmars.teams.core.microsoft	20.66.51.217 52.250.39.213	2026-07-24 12:43:12.521
interem.presence.communications.core.microsoft	52.123.183.12 2603:1063:d::7a	2026-07-26 09:10:48.160
lcs.core.microsoft	20.111.1.16 2603:1020:805:2::61b	2026-06-20 05:58:02.841
localizationfileservice.core.microsoft	150.171.109.36 2603:1061:14:34::1	2026-07-26 18:22:19.896
mcsaiagents.security.core.microsoft	150.171.109.198 2603:1061:14:c4::1	2026-06-16 15:39:27.902
prod.inventory.substrate.svc.core.microsoft	104.45.129.178 23.99.65.65	2026-06-23 11:47:32.155
prod.packages.kevlarforlinux.core.microsoft	150.171.109.53 2603:1061:14:32::1	2026-07-26 08:45:52.550
prod.skysafe.teams.core.microsoft	4.254.61.136 40.90.218.176	2026-06-20 03:28:22.106
qe.ued.core.microsoft	4.157.120.177 57.152.49.132	2026-06-21 23:40:15.617
sea.config.centro.core.microsoft	20.195.2.91 4.144.162.77	2026-07-27 18:25:56.107
tdf.dssync.teams.core.microsoft	23.96.239.180 52.252.193.58	2026-07-20 09:38:12.033
telarix.entitlement.teams.core.microsoft	20.9.102.47 20.84.197.83	2026-06-22 07:06:58.416
test1c.presence.communications.core.microsoft	52.123.184.9 2603:1063:f::9	2026-07-25 04:34:47.921
test1e.presence.communications.core.microsoft	52.123.183.3 2603:1063:d::5	2026-07-26 09:10:48.160
test1erem.presence.communications.core.microsoft	52.123.183.120 2603:1063:d::78	2026-07-26 09:10:48.160
test2c.presence.communications.core.microsoft	52.123.184.7 2603:1063:f::5	2026-07-25 04:34:47.921
test2crem.presence.communications.core.microsoft	52.123.184.6 2603:1063:f::8	2026-07-25 04:34:47.921
test2e.presence.communications.core.microsoft	52.123.183.13 2603:1063:d::87	2026-07-26 09:10:48.160
test2erem.presence.communications.core.microsoft	52.123.183.121 2603:1063:d::79	2026-07-26 09:10:48.160
test3c.presence.communications.core.microsoft	52.123.184.4 2603:1063:f::4	2026-07-25 04:34:47.921
test3crem.presence.communications.core.microsoft	52.123.184.3 2603:1063:f::6	2026-07-25 04:34:47.921
test3e.presence.communications.core.microsoft	52.123.183.173 2603:1063:d::4	2026-07-26 09:10:48.160
test3erem.presence.communications.core.microsoft	52.123.183.20 2603:1063:d::6	2026-07-26 09:10:48.160
tgcb.teams.core.microsoft	57.153.6.139 48.217.197.119	2026-07-28 08:31:23.092
weu.config.centro.core.microsoft	4.175.104.8 20.67.74.177	2026-07-27 18:25:56.107
acms.communications.core.microsoft		1970-01-01 00:00:00.000
active-protection.gcc.teams.core.microsoft	104.212.61.47	2026-07-27 16:12:13.521
adap.tfl.core.microsoft		1970-01-01 00:00:00.000
afd.northeurope.test.syntexrp.core.microsoft		1970-01-01 00:00:00.000
aiinfrastructure.core.microsoft	20.237.228.44	2026-07-27 13:31:15.179
aiinterpreterin.mcr.teams.core.microsoft		1970-01-01 00:00:00.000
ams.dev1.cdn.tdf.ml.communications.core.microsoft		1970-01-01 00:00:00.000
analytics-dev.neuron.teams.core.microsoft		1970-01-01 00:00:00.000
analytics.corp.neuron.teams.core.microsoft	20.44.82.101	2026-07-16 18:39:34.473
analytics.neuron.teams.core.microsoft	20.71.74.104	2026-06-23 05:20:15.188
antiphish-dogfood.teams.core.microsoft		1970-01-01 00:00:00.000
apac.msit.pasta.communications.core.microsoft	20.210.27.248	2026-06-19 15:13:22.094
apac.prod.active-protection.teams.core.microsoft	70.152.52.1	2026-07-28 03:24:34.002
apac.prod.appdiscovery.teams.core.microsoft	20.18.232.83	2026-07-20 21:18:03.635
api-int-noam.biometricsvc.teams.core.microsoft		1970-01-01 00:00:00.000
api-msit-noam.biometricsvc.teams.core.microsoft	20.237.144.160	2026-07-25 13:15:23.497
api-prod-apac.biometricsvc.teams.core.microsoft	85.211.152.12	2026-07-26 11:45:07.176
api.int.appsense.core.microsoft		1970-01-01 00:00:00.000
api.int.ic3aiot.teams.core.microsoft	20.190.24.121	2026-06-18 12:58:29.213
api.noam.tdf.mec.infra.teams.core.microsoft		1970-01-01 00:00:00.000
api.ppe.appsense.core.microsoft		1970-01-01 00:00:00.000
apm-tenant-mgmt-api.core.microsoft	52.184.193.103	2026-07-27 01:11:34.779
appdiscovery.teams.core.microsoft		1970-01-01 00:00:00.000
asse.prod.appsuggestions.teams.core.microsoft	57.158.131.3	2026-07-22 05:46:32.513
aus01.prod.centraladmin.substrate.svc.core.microsoft	13.77.50.110	2026-06-22 17:15:58.646
australiaeast.prod.skysafe.teams.core.microsoft	4.254.61.136	2026-06-20 03:28:22.106
australiaeast.sdf.skysafe.teams.core.microsoft	4.237.183.157	2026-07-26 10:46:00.019
australiasoutheast.prod.syntexrp.core.microsoft	20.45.155.105	2026-06-20 08:13:02.315
authservice.core.microsoft		1970-01-01 00:00:00.000
b.dev.dev1.cdn.tdf.ml.communications.core.microsoft		1970-01-01 00:00:00.000
bmc.teams.core.microsoft		1970-01-01 00:00:00.000

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

Certificate observations pending

TLS certs naming this domain in subject or SANs will appear here as our scan-layer catches them.

IPs Citing This Domain

No citing IPs found yet

As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

No origin-IP leaks detected (yet)

Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Domain timeline pending

Passive-DNS history accumulates as our forward-DNS crawler observes A/AAAA/MX/NS/TXT records over time.