Domain

office.com

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

DNS Check HTTP Check Run Full Scan .com TLD

Run a live full scan of office.com

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now

Hosting IPs

2,377

A/AAAA targets

Subdomains

2,752

CT + scan + body

Record Types

seen in DNS

Observed Certs

251

in our scans

DNS Records

—

AAAA

—

TXT

—

CNAME

—

CAA

—

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Subdomain enumeration pending

Every subdomain ever issued a TLS cert under this apex — extracted from Certificate Transparency logs, our own scan observations and body references.

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

34.95.132.60:443 f78fc2c84704…

Subject: *.lawoffice.com.br

Issuer: GoDaddy TLS Intermediate CA DV - R1v1

SANs: *.lawoffice.com.br, lawoffice.com.br

23.8.9.133:443 bd5e4d39d480…

Subject: lpcres.delve.office.com

Issuer: Microsoft Azure TLS Issuing CA 01

SANs: lpcres.delve.office.com, res.delve.office.com

20.63.55.52:443 b7a4bb0e0ac1…

Subject: *.flexbackoffice.com

Issuer: GeoTrust TLS RSA CA G1

SANs: *.flexbackoffice.com, flexbackoffice.com

23.198.73.31:443 bd5e4d39d480…

Subject: lpcres.delve.office.com

Issuer: Microsoft Azure TLS Issuing CA 01

SANs: lpcres.delve.office.com, res.delve.office.com

208.109.37.242:443 4d2e823151c0…

Subject: www.restonoffice.com

Issuer: YR2

SANs: restonoffice.com, www.restonoffice.com

83.222.129.237:443 e8d378d2a533…

Subject: *.careoffice.com

Issuer: Sectigo Public Server Authentication CA DV R36

SANs: *.careoffice.com, careoffice.com

66.228.41.126:443 5c10271ce767…

Subject: alifoffice.com

Issuer: YR1

SANs: alifoffice.com, www.alifoffice.com

176.100.163.47:443 a7fe7683d6f5…

Subject: *.welcomeoffice.com

Issuer: GandiCert

SANs: *.welcomeoffice.com, welcomeoffice.com

40.88.146.23:443 1c1a3707685b…

Subject: *.smartoffice.comcast.com

Issuer: Sectigo Public Server Authentication CA OV R36

SANs: *.smartoffice.comcast.com, smartoffice.comcast.com

104.64.221.159:443 919e2776e5e8…

Subject: itraveloffice.com

Issuer: YE2

SANs: itraveloffice.com, www.itraveloffice.com

4.230.51.146:443 b6c3477b7768…

Subject: ssl-cdpdiscovery.manage.office.com

Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1

SANs: *.cdpdiscovery.manage.office.com, *.cdpdiscovery.trafficmanager.net, cdpdiscovery.manage.office.com, cdpdiscovery.trafficmanager.net, ssl-cdpdiscovery.manage.office.com

104.123.101.229:443 96b68baa893f…

Subject: aka.office.com

Issuer: Microsoft TLS G2 ECC CA OCSP 02

SANs: aka.office.com

23.219.165.212:443 bd5e4d39d480…

Subject: lpcres.delve.office.com

Issuer: Microsoft Azure TLS Issuing CA 01

SANs: lpcres.delve.office.com, res.delve.office.com

23.206.13.136:443 11ff349d8945…

Subject: www.otto-office.com

Issuer: GeoTrust TLS RSA CA G1

SANs: api.otto-office.com, app.otto-office.be, app.otto-office.com, app.otto-office.de, assets.otto-office.com, blog.buerobedarf24.de, blog.otto-office.com, blog.otto-office.de, buerobedarf24.de, cdn-images.otto-office.com, documents.otto-office.com, documents.otto-office.net, img.otto-office.com, jobs.otto-office.com, karriere.otto-office.com, m.otto-office.be, m.otto-office.com, m.otto-office.de, mobile.otto-office.be, mobile.otto-office.com, mobile.otto-office.de, newsletter.otto-office.com, newsletter.otto-office.de, otto-office.at, otto-office.be, otto-office.com, otto-office.de, otto-office.net, page.otto-office.com, www.buerobedarf24.de, www.otto-office.at, www.otto-office.be, www.otto-office.com, www.otto-office.de, www.otto-office.net

167.105.88.58:443 7462265bb330…

Subject: o365auditrealtimeingestion.manage.office.com

Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1

SANs: *.jitrdp.prod.auditing.office.net, *.o365auditrealtimeingestion.manage.office.com, o365auditrealtimeingestion.manage.office.com

23.12.116.15:443 10cd13ac5a4d…

Subject: secure.unifyoffice.com

Issuer: Entrust Certification Authority - L1K

SANs: secure.unifyoffice.com, status.unifyoffice.com

135.149.140.245:443 9345e7495fce…

Subject: mailhook.teams.internal.office.com

Issuer: CCME G1 TLS RSA 2048 SHA256 2049 WUS2 CA 01

SANs: amer.mailhook.teams.internal.office.com, apac.mailhook.teams.internal.office.com, emea.mailhook.teams.internal.office.com, mailhook.teams.internal.office.com

48.222.169.104:443 fa6954ec80eb…

Subject: *.prod.dataclassification.office.com

Issuer: CCME G1 TLS RSA 2048 SHA256 2049 WUS2 CA 01

SANs: *.prod.dataclassification.office.com

23.9.112.164:443 11ff349d8945…

Subject: www.otto-office.com

Issuer: GeoTrust TLS RSA CA G1

87.128.86.103:443 7cc73840931c…

Subject: office.kk-office.com

Issuer: office.kk-office.com

SANs: office.kk-office.com

20.91.33.115:443 426bb77d9b3d…

Subject: cdpingestion.manage.office.com

Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1

SANs: *.ags.cdpingestion.manage.office.com, *.cdpingestion.manage.office.com, *.jitrdp.cdp.auditing.office.net, ags.cdpingestion.manage.office.com, cdpingestion.manage.office.com, jitrdp.cdp.auditing.office.net

154.201.65.253:443 fac7a50f41fe…

Subject: ht123.la-gjoffice.com

Issuer: YR1

SANs: ht123.la-gjoffice.com

163.61.156.155:443 5feb977e5cea…

Subject: back-office.commandobd.xyz

Issuer: YE2

SANs: back-office.commandobd.xyz

14.103.126.62:443 f698efd5c1db…

Subject: *.shiyak-office.com

Issuer: GeoTrust G2 TLS CN RSA4096 SHA256 2022 CA1

SANs: *.shiyak-office.com, shiyak-office.com

23.63.131.222:443 10cd13ac5a4d…

Subject: secure.unifyoffice.com

Issuer: Entrust Certification Authority - L1K

SANs: secure.unifyoffice.com, status.unifyoffice.com

104.103.218.86:443 96b68baa893f…

Subject: aka.office.com

Issuer: Microsoft TLS G2 ECC CA OCSP 02

SANs: aka.office.com

20.245.221.143:443 211acd9b2106…

Subject: mailhook.teams.internal.office.com

Issuer: CCME G1 TLS RSA 2048 SHA256 2049 CUS CA 01

SANs: amer.mailhook.teams.internal.office.com, apac.mailhook.teams.internal.office.com, emea.mailhook.teams.internal.office.com, mailhook.teams.internal.office.com

88.99.96.170:443 514967afef2f…

Subject: midcoreoffice.com

Issuer: YR1

SANs: admin.midcoreoffice.com, autoconfig.midcoreoffice.com, autodiscover.midcoreoffice.com, mail.midcoreoffice.com, midcoreoffice.com, webmail.midcoreoffice.com, www.midcoreoffice.com

165.154.235.168:443 47e72842a28a…

Subject: blueridgefamilyoffice.com

Issuer: YE2

SANs: blueridgefamilyoffice.com, lncs.blueridgefamilyoffice.com, tgbot.blueridgefamilyoffice.com, www.blueridgefamilyoffice.com

223.130.149.90:443 c7c64a389908…

Subject: *.synapoffice.com

Issuer: YR2

SANs: *.synapoffice.com, synapoffice.com

IPs Citing This Domain

No citing IPs found yet

As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

Origin IP	Origin ASN	CDN ASN	Confidence	Reasoning
23.216.245.133	AS7713	AS16625	95%	cert bd5e4d39… served by 23.216.245.133 (AS7713) carries SAN res.delve.office.com which currently resolves through Akamai (AS16625) at 184.24.165.5, 2a02:26f0:b200:382::d42, 2a02:26f0:b200:397::d42, 2a02:26f0:b200:1a1::d42
23.216.30.250	AS12252	AS16625	95%	cert e31970e2… served by 23.216.30.250 (AS12252) carries SAN stores.office.com which currently resolves through Akamai (AS16625) at 23.222.45.118, 2a02:26f0:1180:19d::2af1, 2a02:26f0:1180:196::2af1, 88.221.9.251
23.36.130.9	AS7713	AS16625	95%	cert bd5e4d39… served by 23.36.130.9 (AS7713) carries SAN res.delve.office.com which currently resolves through Akamai (AS16625) at 184.24.165.5, 2a02:26f0:b200:1a1::d42, 2a02:26f0:b200:193::d42, 2a02:26f0:b200:382::d42
80.69.173.74	AS202053	AS8075	95%	cert 394e114f… served by 80.69.173.74 (AS202053) carries SAN office.com which currently resolves through Microsoft (AS8075) at 13.107.6.156, 2620:1ec:a92::156
2.26.114.9	AS213877	AS8075	95%	cert 394e114f… served by 2.26.114.9 (AS213877) carries SAN office.com which currently resolves through Microsoft (AS8075) at 13.107.6.156, 2620:1ec:a92::156

CT-Log Evidence

Certificates from public Certificate Transparency logs whose subject or SAN names this domain — including historic certs we never observed live.

742c7b9b53723035… google · xenon2026h2

Subject: m365.cloud.microsoft

Issuer: Microsoft TLS G2 RSA CA OCSP 16

SANs: *.www.office.com, apps.office.com, excel.office.com, home.office.com, login.office.com, m365.cloud.microsoft, microsoft365.com, ntp.www.office.com, office.com, powerpoint.office.com, signin.office.com, stream.office.com, visio.office.com, word.office.com, www.microsoft365.com, www.office.com, fluid.office.com, *.www.microsoft365.com, m365.go.microsoft, chat.cloud.microsoft, m365copilotapp.svc.cloud.microsoft

Valid: 2026-03-19 18:16:31 → 2026-10-03 18:16:31

ad7233c56f2e4a74… google · xenon2026h2

Subject: www.office.com

Issuer: Microsoft TLS G2 RSA CA OCSP 10

SANs: home.office.com, login.office.com, office.com, signin.office.com, www.office.com, *.prodprv.office.com, *.www.office.com, word.office.com, excel.office.com, powerpoint.office.com, visio.office.com, apps.office.com, stream.office.com, fluid.office.com, www.microsoft365.com, microsoft365.com, *.www.microsoft365.com, m365.go.microsoft, m365.cloud.microsoft, officehome.westus.cloudapp.azure.com

Valid: 2026-03-05 03:01:23 → 2026-09-01 03:01:23

f18f533721e11eff… google · xenon2026h2

Subject: www.office.com

Issuer: Microsoft TLS G2 RSA CA OCSP 02

Valid: 2026-03-05 02:59:40 → 2026-09-01 02:59:40

46f9a2859c3c6da9… google · xenon2026h2

Subject: www.office.com

Issuer: Microsoft TLS G2 RSA CA OCSP 16

Valid: 2026-03-05 02:59:18 → 2026-09-01 02:59:18

548e9eb9c95e624e… google · xenon2026h2

Subject: www.office.com

Issuer: Microsoft TLS G2 RSA CA OCSP 16

Valid: 2026-03-05 02:58:49 → 2026-09-01 02:58:49

2a57c20076440dd1… google · xenon2026h2

Subject: www.office.com

Issuer: Microsoft TLS G2 RSA CA OCSP 16

Valid: 2026-03-05 02:58:24 → 2026-09-01 02:58:24

7bf1b3127d34cae4… google · xenon2026h2

Subject: www.office.com

Issuer: Microsoft TLS G2 RSA CA OCSP 10

Valid: 2026-03-05 02:58:02 → 2026-09-01 02:58:02

e87ad85699e35f19… google · xenon2026h2

Subject: www.office.com

Issuer: Microsoft TLS G2 RSA CA OCSP 04

Valid: 2026-03-05 02:57:28 → 2026-09-01 02:57:28

1dd031ac6c689203… google · xenon2026h2

Subject: www.office.com

Issuer: Microsoft TLS G2 RSA CA OCSP 04

Valid: 2026-03-05 02:57:05 → 2026-09-01 02:57:05

0098e550dafed26b… google · xenon2026h2

Subject: m365.cloud.microsoft

Issuer: Microsoft TLS G2 RSA CA OCSP 16

Valid: 2026-03-04 20:05:26 → 2026-08-31 20:05:26

8f3ac83490b30f63… google · xenon2026h2

Subject: m365.cloud.microsoft

Issuer: Microsoft TLS G2 RSA CA OCSP 02

SANs: home.office.com, login.office.com, office.com, signin.office.com, www.office.com, *.www.office.com, word.office.com, excel.office.com, powerpoint.office.com, visio.office.com, apps.office.com, stream.office.com, fluid.office.com, www.microsoft365.com, m365.go.microsoft, m365.cloud.microsoft, ntp.www.office.com, microsoft365.com, *.www.microsoft365.com, copilot.cloud.microsoft

Valid: 2026-03-04 19:54:44 → 2026-08-31 19:54:44

8f02585e8b79ced1… google · xenon2026h2

Subject: m365.cloud.microsoft

Issuer: Microsoft TLS G2 RSA CA OCSP 02

Valid: 2026-03-04 19:54:44 → 2026-08-31 19:54:44

fa295e7762123a01… google · xenon2026h2

Subject: www.office.com

Issuer: Microsoft TLS G2 RSA CA OCSP 16

Valid: 2026-03-04 07:10:34 → 2026-08-31 07:10:34

c955afe8e9fc068a… google · xenon2026h2

Subject: www.office.com

Issuer: Microsoft TLS G2 RSA CA OCSP 16

Valid: 2026-03-03 22:56:51 → 2026-08-30 22:56:51

0a4c457b449de4b9… google · xenon2026h2

Subject: www.office.com

Issuer: Microsoft TLS G2 RSA CA OCSP 02

Valid: 2026-03-03 22:56:26 → 2026-08-30 22:56:26

b3a045df484d16d1… google · xenon2026h2

Subject: www.office.com

Issuer: Microsoft TLS G2 RSA CA OCSP 16

Valid: 2026-03-03 22:55:58 → 2026-08-30 22:55:58

0770cfa65c19f7cf… google · xenon2026h2

Subject: www.office.com

Issuer: Microsoft TLS G2 RSA CA OCSP 16

Valid: 2026-03-03 22:55:37 → 2026-08-30 22:55:37

af66e683f8580905… google · xenon2026h2

Subject: www.office.com

Issuer: Microsoft TLS G2 RSA CA OCSP 16

Valid: 2026-03-03 01:34:04 → 2026-08-30 01:34:04

66b92cf64b5d0b87… google · xenon2026h2

Subject: www.office.com

Issuer: Microsoft TLS G2 RSA CA OCSP 10

Valid: 2026-03-03 01:33:41 → 2026-08-30 01:33:41

9736594bb6442f49… google · xenon2026h2

Subject: www.office.com

Issuer: Microsoft TLS G2 RSA CA OCSP 04

Valid: 2026-03-03 01:32:28 → 2026-08-30 01:32:28

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.

Type	Value	First seen	Last seen
TXT	google-site-verification=u1wJrtoeh7Cm1rWUcfA5shOYAXklaqy_IAsIMa8L-qU	2026-05-25 22:11:29.484	2026-07-28 22:10:34.812
TXT	google-site-verification=zqthuNzyDukN37Znr1L5xdDKHo7KZUL2LTyOqzU7cFo	2026-05-25 22:11:29.484	2026-07-28 22:10:34.812
NS	ns1-05.azure-dns.com	2026-05-25 22:11:29.484	2026-07-28 22:10:34.812
TXT	google-site-verification=iJN6qYrMLZmqRE70EPwnmUtT7qW3Rs-X3_wgil1YQjw	2026-05-25 22:11:29.484	2026-07-28 22:10:34.812
AAAA	2620:1ec:a92::156	2026-05-25 22:11:29.484	2026-07-28 22:10:34.812
NS	ns3-05.azure-dns.org	2026-05-25 22:11:29.484	2026-07-28 22:10:34.812
TXT	zoom-domain-verification=ZOOM_verify_c71c4db9abfb4773aaed4c681c8c7b42	2026-05-25 22:11:29.484	2026-07-28 22:10:34.812
TXT	google-site-verification=WiCZ6HhPFmPMk5PTkdpSnevgiRttL2tQ-7QA_Z81JRk	2026-05-25 22:11:29.484	2026-07-28 22:10:34.812
NS	ns4-05.azure-dns.info	2026-05-25 22:11:29.484	2026-07-28 22:10:34.812
A	13.107.6.156	2026-05-25 22:11:29.484	2026-07-28 22:10:34.812
TXT	google-site-verification=9aqt6mNhLx_inDlQjEfPiqq_TYfy72IFpoUh5_gijEg	2026-05-25 22:11:29.484	2026-07-28 22:10:34.812
TXT	google-site-verification=ntjPAtTot4dDzv9Z7WpQYYSlgVajPuBZx0FoZyRE8q8	2026-05-25 22:11:29.484	2026-07-28 22:10:34.812
NS	ns2-05.azure-dns.net	2026-05-25 22:11:29.484	2026-07-28 22:10:34.812
TXT	google-site-verification=VUSidRle8tqArZaEIF_9-uxlBmOku8re9NfdLDyfFE0	2026-05-25 22:11:29.484	2026-07-28 22:10:34.812
TXT	facebook-domain-verification=h6ulkdsze2qhdtbdnivt3lilquemgc	2026-05-25 22:11:29.484	2026-07-28 22:10:34.812
TXT	google-site-verification=V6qxrpALPrk4N8F9wqgUVMwFdKi4sSUY5dLaICCx5rU	2026-05-25 22:11:29.484	2026-07-28 22:10:34.812
CAA	0 issue "microsoft.com"	2026-05-26 02:34:00.508	2026-07-28 22:10:34.812
CAA	0 contactemail "caarecordaware@microsoft.com"	2026-05-26 02:34:00.508	2026-07-28 22:10:34.812
CAA	0 issue "entrust.net"	2026-05-26 02:34:00.508	2026-07-28 22:10:34.812
CAA	0 iodef "mailto:domains@microsoft.com"	2026-05-26 02:34:00.508	2026-07-28 22:10:34.812
CAA	0 issue "digicert.com"	2026-05-26 02:34:00.508	2026-07-28 22:10:34.812
CAA	0 issue "globalsign.com"	2026-05-26 02:34:00.508	2026-07-28 22:10:34.812
CAA	0 issue "dtrust.de"	2026-05-26 02:34:00.508	2026-07-28 22:10:34.812