Domain

setup.office.com

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

DNS Check HTTP Check Run Full Scan .com TLD

Run a live full scan of setup.office.com

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now

Hosting IPs

A/AAAA targets

Subdomains

—

CT + scan + body

Record Types

seen in DNS

Observed Certs

in our scans

DNS Records

104.73.231.171, 2.23.65.180, 23.222.45.118, 23.47.29.251, 23.56.203.41, 88.221.9.251

AAAA

2600:1408:c400:1684::2af1, 2600:1408:c400:1693::2af1, 2a02:26f0:1180:196::2af1, 2a02:26f0:1180:19d::2af1, 2a02:26f0:1180:19f::2af1, 2a02:26f0:1180:8a3::2af1, 2a02:26f0:1180:8a5::2af1, 2a02:26f0:480:588::2af1

—

TXT

—

CNAME

—

CAA

—

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Subdomain enumeration pending

Every subdomain ever issued a TLS cert under this apex — extracted from Certificate Transparency logs, our own scan observations and body references.

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

23.40.93.104:443 e31970e208a7…

Subject: localization.checkout.office.net

Issuer: Microsoft TLS G2 ECC CA OCSP 06

SANs: *.localization.checkout.office.net, *.setup.microsoft365ppe.com, *.setup.officeppe.com, *.setupoffice.omex.officeppe.net, Stores.office.com, Stores.officeppe.com, checkout.microsoft365.com, checkout.microsoft365ppe.com, checkout.office.com, checkout.officeppe.com, checkoutcompliance.microsoft.com, discover.microsoft365.com, discover.microsoft365ppe.com, localization.checkout.office.net, mysmallbusiness.microsoft365.com, mysmallbusiness.officeppe.com, setup.microsoft365.com, setup.microsoft365ppe.com, setup.office.com, setup.officeppe.com, setupoffice.omex.officeppe.net

23.15.26.246:443 e31970e208a7…

Subject: localization.checkout.office.net

Issuer: Microsoft TLS G2 ECC CA OCSP 06

23.60.115.136:443 e31970e208a7…

Subject: localization.checkout.office.net

Issuer: Microsoft TLS G2 ECC CA OCSP 06

23.192.244.160:443 e31970e208a7…

Subject: localization.checkout.office.net

Issuer: Microsoft TLS G2 ECC CA OCSP 06

23.37.183.197:443 e31970e208a7…

Subject: localization.checkout.office.net

Issuer: Microsoft TLS G2 ECC CA OCSP 06

88.221.9.251:443 e31970e208a7…

Subject: localization.checkout.office.net

Issuer: Microsoft TLS G2 ECC CA OCSP 06

23.223.102.57:443 e31970e208a7…

Subject: localization.checkout.office.net

Issuer: Microsoft TLS G2 ECC CA OCSP 06

23.200.97.164:443 e31970e208a7…

Subject: localization.checkout.office.net

Issuer: Microsoft TLS G2 ECC CA OCSP 06

104.96.141.161:443 e31970e208a7…

Subject: localization.checkout.office.net

Issuer: Microsoft TLS G2 ECC CA OCSP 06

23.34.223.221:443 e31970e208a7…

Subject: localization.checkout.office.net

Issuer: Microsoft TLS G2 ECC CA OCSP 06

23.9.167.172:443 e31970e208a7…

Subject: localization.checkout.office.net

Issuer: Microsoft TLS G2 ECC CA OCSP 06

96.16.192.34:443 e31970e208a7…

Subject: localization.checkout.office.net

Issuer: Microsoft TLS G2 ECC CA OCSP 06

23.7.51.175:443 e31970e208a7…

Subject: localization.checkout.office.net

Issuer: Microsoft TLS G2 ECC CA OCSP 06

23.223.128.45:443 e31970e208a7…

Subject: localization.checkout.office.net

Issuer: Microsoft TLS G2 ECC CA OCSP 06

23.10.111.35:443 e31970e208a7…

Subject: localization.checkout.office.net

Issuer: Microsoft TLS G2 ECC CA OCSP 06

23.195.167.147:443 e31970e208a7…

Subject: localization.checkout.office.net

Issuer: Microsoft TLS G2 ECC CA OCSP 06

23.51.71.170:443 e31970e208a7…

Subject: localization.checkout.office.net

Issuer: Microsoft TLS G2 ECC CA OCSP 06

23.51.102.249:443 e31970e208a7…

Subject: localization.checkout.office.net

Issuer: Microsoft TLS G2 ECC CA OCSP 06

23.216.30.250:443 e31970e208a7…

Subject: localization.checkout.office.net

Issuer: Microsoft TLS G2 ECC CA OCSP 06

23.220.39.39:443 e31970e208a7…

Subject: localization.checkout.office.net

Issuer: Microsoft TLS G2 ECC CA OCSP 06

23.61.59.221:443 e31970e208a7…

Subject: localization.checkout.office.net

Issuer: Microsoft TLS G2 ECC CA OCSP 06

IPs Citing This Domain

No citing IPs found yet

As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

No origin-IP leaks detected (yet)

Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.

CT-Log Evidence

Certificates from public Certificate Transparency logs whose subject or SAN names this domain — including historic certs we never observed live.

0bcfaf0e24635bec… google · xenon2026h2

Subject: localization.checkout.office.net

Issuer: Microsoft TLS G2 ECC CA OCSP 06

SANs: *.localization.checkout.office.net, *.setup.microsoft365ppe.com, *.setup.officeppe.com, *.setupoffice.omex.officeppe.net, checkout.microsoft365.com, checkout.microsoft365ppe.com, checkout.office.com, checkout.officeppe.com, checkoutcompliance.microsoft.com, discover.microsoft365.com, discover.microsoft365ppe.com, localization.checkout.office.net, mysmallbusiness.microsoft365.com, mysmallbusiness.officeppe.com, setup.microsoft365.com, setup.microsoft365ppe.com, setup.office.com, setup.officeppe.com, setupoffice.omex.officeppe.net, Stores.office.com, Stores.officeppe.com

Valid: 2026-03-30 15:08:54 → 2026-10-14 15:08:54

e7b60ead2790b54f… google · xenon2026h2

Subject: localization.checkout.office.net

Issuer: Microsoft TLS G2 ECC CA OCSP 02

Valid: 2026-03-25 17:17:44 → 2026-10-09 17:17:44

0bf14e8bff604ef9… google · xenon2026h2

Subject: setup.office.com

Issuer: Microsoft TLS G2 RSA CA OCSP 02

SANs: setup.office.com, *.setup.office.com, setupoffice.omex.office.net, *.setupoffice.omex.office.net, setup.microsoft365.com, *.setup.microsoft365.com

Valid: 2026-03-09 15:53:41 → 2026-09-05 15:53:41

51356fe56376658b… google · xenon2026h2

Subject: setup.office.com

Issuer: Microsoft Azure RSA TLS Issuing CA 07

SANs: setup.office.com, *.setup.office.com, setupoffice.omex.office.net, *.setupoffice.omex.office.net, external.omex.office.net, *.external.omex.office.net, setup.microsoft365.com, *.setup.microsoft365.com

Valid: 2026-02-24 10:54:29 → 2026-08-23 10:54:29

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.

Type	Value	First seen	Last seen
AAAA	2a02:26f0:1180:196::2af1	2026-06-18 04:45:11.643	2026-07-28 00:35:17.430
AAAA	2a02:26f0:1180:19d::2af1	2026-06-18 04:45:11.643	2026-07-28 00:35:17.430
A	104.73.231.171	2026-06-18 04:45:11.643	2026-06-18 04:45:11.643
A	23.222.45.118	2026-07-16 15:42:38.075	2026-07-28 00:35:17.430
AAAA	2a02:26f0:480:588::2af1	2026-07-18 12:48:43.519	2026-07-18 12:48:43.519
AAAA	2a02:26f0:480:5b3::2af1	2026-07-18 12:48:43.519	2026-07-18 12:48:43.519
A	23.47.29.251	2026-07-22 10:30:16.117	2026-07-22 10:30:16.117
A	88.221.9.251	2026-07-23 16:06:24.173	2026-07-23 16:06:24.173
AAAA	2a02:26f0:1180:19f::2af1	2026-07-24 14:51:30.611	2026-07-24 14:51:30.611
A	2.23.65.180	2026-07-26 03:39:53.818	2026-07-26 03:39:53.818
AAAA	2a02:26f0:1180:8a3::2af1	2026-07-26 16:30:33.973	2026-07-26 16:30:33.973
AAAA	2a02:26f0:1180:8a5::2af1	2026-07-26 16:30:33.973	2026-07-26 16:30:33.973
A	23.56.203.41	2026-07-28 14:28:46.692	2026-07-28 14:28:46.692
AAAA	2600:1408:c400:1684::2af1	2026-07-28 14:28:46.692	2026-07-28 14:28:46.692
AAAA	2600:1408:c400:1693::2af1	2026-07-28 14:28:46.692	2026-07-28 14:28:46.692