Domain
df.editor.svc.cloud.microsoft
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Run a live full scan of df.editor.svc.cloud.microsoft
On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.
Hosting IPs
46
A/AAAA targets
Subdomains
—
CT + scan + body
Record Types
2
seen in DNS
Observed Certs
37
in our scans
DNS Records
A
52.110.17.11, 52.110.17.17, 52.110.17.42, 52.110.17.45, 52.110.17.46, 52.110.17.51, 52.110.17.52, 52.110.17.53
AAAA
2603:1063:2001:2201::365:ff1, 2603:1063:2001:220e::365:ff1, 2603:1063:2001:221d::365:ff1, 2603:1063:2001:221e::365:ff1, 2603:1063:2001:2229::365:ff1, 2603:1063:2001:2238::365:ff1, 2603:1063:2001:223a::365:ff1, 2603:1063:2001:2241::365:ff1
MX
—
NS
—
TXT
—
CNAME
—
CAA
—
WHOIS / Registration
Registration data planned
Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.
Subdomains
Subdomain enumeration pending
Every subdomain ever issued a TLS cert under this apex — extracted from Certificate Transparency logs, our own scan observations and body references.
Tech Stack
Tech detection pending
Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.
TLS Certificates
Subject: nleditor.osi.officeppe.net
Issuer: Microsoft TLS G2 RSA CA OCSP 04
SANs: df.editor.svc.cloud.microsoft, editor-edog-frontdoor-ipv6.cyewbrebeweucth4.northcentralus.sysgen.cloudapp.azure.com, editor-edog-frontdoor-ipv6.northcentralus.cloudapp.azure.com, editor-edog-frontdoor.ejb9bge3gnezambf.northcentralus.sysgen.cloudapp.azure.com, editor-edog-frontdoor.northcentralus.cloudapp.azure.com, nleditor.osi.officeppe.net
Subject: nleditor.osi.officeppe.net
Issuer: Microsoft TLS G2 RSA CA OCSP 02
SANs: df.editor.svc.cloud.microsoft, editor-edog-frontdoor-ipv6.cyewbrebeweucth4.westcentralus.sysgen.cloudapp.azure.com, editor-edog-frontdoor-ipv6.westcentralus.cloudapp.azure.com, editor-edog-frontdoor.ejb9bge3gnezambf.westcentralus.sysgen.cloudapp.azure.com, editor-edog-frontdoor.westcentralus.cloudapp.azure.com, nleditor.osi.officeppe.net
IPs Citing This Domain
No citing IPs found yet
As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.
Origin / IP-Leak
USP
When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.
No origin-IP leaks detected (yet)
Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.
CT-Log Evidence
Certificates from public Certificate Transparency logs whose subject or SAN names this domain — including historic certs we never observed live.
cc5217b5a79d4965…
google · xenon2026h2
Subject: nleditor.osi.officeppe.net
Issuer: Microsoft TLS G2 RSA CA OCSP 16
SANs: editor-edog-frontdoor.northeurope.cloudapp.azure.com, editor-edog-frontdoor-ipv6.northeurope.cloudapp.azure.com, df.editor.svc.cloud.microsoft, nleditor.osi.officeppe.net
Valid: 2026-04-01 04:34:27 → 2026-09-28 04:34:27
d089e3ae6e85bd13…
google · xenon2026h2
Subject: nleditor.osi.officeppe.net
Issuer: Microsoft TLS G2 RSA CA OCSP 04
SANs: editor-edog-frontdoor.centralindia.cloudapp.azure.com, editor-edog-frontdoor-ipv6.centralindia.cloudapp.azure.com, df.editor.svc.cloud.microsoft, nleditor.osi.officeppe.net
Valid: 2026-03-28 02:00:38 → 2026-09-24 02:00:38
814fd418c53c0f04…
google · xenon2026h2
Subject: nleditor.osi.officeppe.net
Issuer: Microsoft TLS G2 RSA CA OCSP 16
SANs: editor-edog-frontdoor.westeurope.cloudapp.azure.com, editor-edog-frontdoor-ipv6.westeurope.cloudapp.azure.com, df.editor.svc.cloud.microsoft, nleditor.osi.officeppe.net
Valid: 2026-03-25 05:48:36 → 2026-09-21 05:48:36
c761706d147449ef…
google · xenon2026h2
Subject: nleditor.osi.officeppe.net
Issuer: Microsoft TLS G2 RSA CA OCSP 04
SANs: editor-edog-frontdoor.westcentralus.cloudapp.azure.com, editor-edog-frontdoor-ipv6.westcentralus.cloudapp.azure.com, df.editor.svc.cloud.microsoft, nleditor.osi.officeppe.net
Valid: 2026-03-17 10:41:47 → 2026-09-13 10:41:47
3c3473239b9bb3de…
google · xenon2026h2
Subject: nleditor.osi.officeppe.net
Issuer: Microsoft TLS G2 RSA CA OCSP 02
SANs: editor-edog-frontdoor.northcentralus.cloudapp.azure.com, editor-edog-frontdoor-ipv6.northcentralus.cloudapp.azure.com, df.editor.svc.cloud.microsoft, nleditor.osi.officeppe.net
Valid: 2026-03-14 05:49:44 → 2026-09-10 05:49:44
dac89149984c8542…
google · xenon2026h2
Subject: nleditor.osi.officeppe.net
Issuer: Microsoft TLS G2 RSA CA OCSP 02
SANs: editor-edog-frontdoor.northcentralus.cloudapp.azure.com, editor-edog-frontdoor-ipv6.northcentralus.cloudapp.azure.com, df.editor.svc.cloud.microsoft, nleditor.osi.officeppe.net
Valid: 2026-03-14 05:49:12 → 2026-09-10 05:49:12
4778011fd9b29516…
google · xenon2026h2
Subject: nleditor.osi.officeppe.net
Issuer: Microsoft TLS G2 RSA CA OCSP 02
SANs: editor-edog-frontdoor.northeurope.cloudapp.azure.com, editor-edog-frontdoor-ipv6.northeurope.cloudapp.azure.com, df.editor.svc.cloud.microsoft, nleditor.osi.officeppe.net
Valid: 2026-02-21 22:03:22 → 2026-08-20 22:03:22
56d66f9550886608…
google · xenon2026h2
Subject: nleditor.osi.officeppe.net
Issuer: Microsoft TLS G2 RSA CA OCSP 10
SANs: editor-edog-frontdoor.centralindia.cloudapp.azure.com, editor-edog-frontdoor-ipv6.centralindia.cloudapp.azure.com, df.editor.svc.cloud.microsoft, nleditor.osi.officeppe.net
Valid: 2026-02-19 17:07:24 → 2026-08-18 17:07:24
ba564628b3d39f5d…
google · xenon2026h2
Subject: nleditor.osi.officeppe.net
Issuer: Microsoft TLS G2 RSA CA OCSP 10
SANs: editor-edog-frontdoor.westeurope.cloudapp.azure.com, editor-edog-frontdoor-ipv6.westeurope.cloudapp.azure.com, df.editor.svc.cloud.microsoft, nleditor.osi.officeppe.net
Valid: 2026-02-18 10:01:31 → 2026-08-17 10:01:31
1dfe80dd5d54e668…
google · xenon2026h2
Subject: nleditor.osi.officeppe.net
Issuer: Microsoft TLS G2 RSA CA OCSP 10
SANs: editor-edog-frontdoor.westcentralus.cloudapp.azure.com, editor-edog-frontdoor-ipv6.westcentralus.cloudapp.azure.com, df.editor.svc.cloud.microsoft, nleditor.osi.officeppe.net
Valid: 2026-02-14 15:30:20 → 2026-08-13 15:30:20
29bb91d0dd0be921…
google · xenon2026h2
Subject: nleditor.osi.officeppe.net
Issuer: Microsoft TLS G2 RSA CA OCSP 04
SANs: editor-edog-frontdoor.northcentralus.cloudapp.azure.com, editor-edog-frontdoor-ipv6.northcentralus.cloudapp.azure.com, df.editor.svc.cloud.microsoft, nleditor.osi.officeppe.net
Valid: 2026-02-12 22:54:50 → 2026-08-11 22:54:50
c0237bb495025eea…
google · xenon2026h2
Subject: df.editor.svc.cloud.microsoft
Issuer: DigiCert Cloud Services CA-1
SANs: df.editor.svc.cloud.microsoft
Valid: 2026-02-02 00:00:00 → 2026-12-01 23:59:59
351613610e280e39…
google · xenon2026h2
Subject: df.editor.svc.cloud.microsoft
Issuer: Microsoft Azure RSA TLS Issuing CA 08
SANs: df.editor.svc.cloud.microsoft
Valid: 2026-01-28 10:08:09 → 2026-08-25 23:59:59
3cf6b4bfca346952…
google · argon2026h2
Subject: df.editor.svc.cloud.microsoft
Issuer: DigiCert Cloud Services CA-1
SANs: df.editor.svc.cloud.microsoft
Valid: 2025-12-30 00:00:00 → 2026-10-29 23:59:59
3cf6b4bfca346952…
google · xenon2026h2
Subject: df.editor.svc.cloud.microsoft
Issuer: DigiCert Cloud Services CA-1
SANs: df.editor.svc.cloud.microsoft
Valid: 2025-12-30 00:00:00 → 2026-10-29 23:59:59
43625ca71e36d342…
google · argon2026h2
Subject: df.editor.svc.cloud.microsoft
Issuer: DigiCert Cloud Services CA-1
SANs: df.editor.svc.cloud.microsoft
Valid: 2025-11-26 00:00:00 → 2026-09-25 23:59:59
43625ca71e36d342…
google · xenon2026h2
Subject: df.editor.svc.cloud.microsoft
Issuer: DigiCert Cloud Services CA-1
SANs: df.editor.svc.cloud.microsoft
Valid: 2025-11-26 00:00:00 → 2026-09-25 23:59:59
Threat Intelligence
Domain threat-intel pending
Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.
History
Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.
| Type | Value | First seen | Last seen |
|---|---|---|---|
| A | 52.110.17.42 | 2026-06-19 16:46:18.996 | 2026-06-19 16:46:18.996 |
| AAAA | 2603:1063:2001:3000::365:ff1 | 2026-06-19 16:46:18.996 | 2026-06-19 16:46:18.996 |
| A | 52.110.17.11 | 2026-06-19 16:46:18.996 | 2026-06-19 16:46:18.996 |
| A | 52.110.17.60 | 2026-06-19 16:46:18.996 | 2026-06-19 16:46:18.996 |
| A | 52.110.17.46 | 2026-06-19 16:46:18.996 | 2026-06-19 16:46:18.996 |
| AAAA | 2603:1063:2001:3001::365:ff1 | 2026-06-19 16:46:18.996 | 2026-06-19 16:46:18.996 |
| AAAA | 2603:1063:2001:3003::365:ff1 | 2026-06-19 16:46:18.996 | 2026-06-19 16:46:18.996 |
| AAAA | 2603:1063:2001:3002::365:ff1 | 2026-06-19 16:46:18.996 | 2026-06-19 16:46:18.996 |
| AAAA | 2603:1063:2001:2d01::365:ff1 | 2026-06-20 07:28:22.097 | 2026-07-28 18:54:14.710 |
| A | 52.110.17.45 | 2026-06-20 07:28:22.097 | 2026-06-20 07:28:22.097 |
| A | 52.110.17.51 | 2026-06-20 07:28:22.097 | 2026-06-20 07:28:22.097 |
| AAAA | 2603:1063:2001:2d0e::365:ff1 | 2026-06-20 07:28:22.097 | 2026-07-20 16:17:29.926 |
| AAAA | 2603:1063:2001:2d08::365:ff1 | 2026-06-20 07:28:22.097 | 2026-07-23 04:38:53.059 |
| A | 52.110.17.17 | 2026-06-20 07:28:22.097 | 2026-06-20 07:28:22.097 |
| AAAA | 2603:1063:2001:2d05::365:ff1 | 2026-06-20 07:28:22.097 | 2026-07-23 04:38:53.059 |
| A | 52.110.17.53 | 2026-06-20 07:28:22.097 | 2026-06-20 07:28:22.097 |
| AAAA | 2603:1063:2001:2201::365:ff1 | 2026-06-20 07:30:48.266 | 2026-06-20 07:30:48.266 |
| AAAA | 2603:1063:2001:2238::365:ff1 | 2026-06-20 07:30:48.266 | 2026-06-20 07:30:48.266 |
| AAAA | 2603:1063:2001:2229::365:ff1 | 2026-06-20 07:30:48.266 | 2026-06-20 07:30:48.266 |
| A | 52.110.17.68 | 2026-06-20 07:30:48.266 | 2026-06-20 07:30:48.266 |
| A | 52.110.17.63 | 2026-06-20 07:30:48.266 | 2026-06-20 07:30:48.266 |
| A | 52.110.17.52 | 2026-06-20 07:30:48.266 | 2026-06-20 07:30:48.266 |
| A | 52.110.17.69 | 2026-06-20 07:30:48.266 | 2026-06-20 07:30:48.266 |
| AAAA | 2603:1063:2001:221e::365:ff1 | 2026-06-20 07:30:48.266 | 2026-06-20 07:30:48.266 |
| AAAA | 2603:1063:2001:220e::365:ff1 | 2026-06-22 20:08:35.357 | 2026-06-22 20:08:35.357 |
| AAAA | 2603:1063:2001:221d::365:ff1 | 2026-06-22 20:08:35.357 | 2026-06-22 20:08:35.357 |
| A | 52.110.18.131 | 2026-06-22 20:08:35.357 | 2026-07-23 04:38:53.059 |
| AAAA | 2603:1063:2001:2241::365:ff1 | 2026-06-22 20:08:35.357 | 2026-06-22 20:08:35.357 |
| AAAA | 2603:1063:2001:223a::365:ff1 | 2026-06-22 20:08:35.357 | 2026-06-22 20:08:35.357 |
| A | 52.110.18.141 | 2026-06-22 20:08:35.357 | 2026-07-17 11:10:00.322 |
| A | 52.110.18.142 | 2026-06-22 20:08:35.357 | 2026-07-28 18:54:14.710 |
| A | 52.110.18.136 | 2026-06-22 20:08:35.357 | 2026-06-22 20:08:35.357 |
| AAAA | 2603:1063:2001:2d0c::365:ff1 | 2026-07-17 11:10:00.322 | 2026-07-28 18:54:14.710 |
| A | 52.110.18.139 | 2026-07-17 11:10:00.322 | 2026-07-23 04:38:53.059 |
| AAAA | 2603:1063:2001:2d00::365:ff1 | 2026-07-17 11:10:00.322 | 2026-07-28 18:54:14.710 |
| A | 52.110.18.130 | 2026-07-17 11:10:00.322 | 2026-07-28 18:54:14.710 |
| A | 52.110.18.132 | 2026-07-20 16:08:38.454 | 2026-07-20 16:08:38.454 |
| A | 52.110.18.133 | 2026-07-20 16:08:38.454 | 2026-07-20 16:17:29.926 |
| AAAA | 2603:1063:2001:2d0a::365:ff1 | 2026-07-20 16:08:38.454 | 2026-07-20 16:08:38.454 |
| AAAA | 2603:1063:2001:2d0b::365:ff1 | 2026-07-20 16:08:38.454 | 2026-07-20 16:08:38.454 |
| AAAA | 2603:1063:2001:2d0d::365:ff1 | 2026-07-20 16:08:38.454 | 2026-07-23 04:38:53.059 |
| A | 52.110.18.129 | 2026-07-20 16:17:29.926 | 2026-07-20 16:17:29.926 |
| A | 52.110.18.128 | 2026-07-20 16:17:29.926 | 2026-07-28 18:54:14.710 |
| A | 52.110.18.138 | 2026-07-23 04:38:53.059 | 2026-07-28 18:54:14.710 |
| AAAA | 2603:1063:2001:2d04::365:ff1 | 2026-07-23 04:38:53.059 | 2026-07-23 04:38:53.059 |
| AAAA | 2603:1063:2001:2d02::365:ff1 | 2026-07-28 18:54:14.710 | 2026-07-28 18:54:14.710 |