Check-Host.cc

Domain

docs.live.net

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

Run a live full scan of docs.live.net

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now
Hosting IPs
2
A/AAAA targets
Subdomains
CT + scan + body
Record Types
2
seen in DNS
Observed Certs
30
in our scans

DNS Records

A
150.171.22.11
AAAA
2620:1ec:50::11
MX
NS
TXT
CNAME
CAA

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Subdomain enumeration pending

Every subdomain ever issued a TLS cert under this apex — extracted from Certificate Transparency logs, our own scan observations and body references.

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

Subject: storage.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 02
SANs: *.1drv.com, *.ADMINSVC.I001.1drv.com, *.ADMINSVC.P001.1drv.com, *.API.P001.1drv.com, *.CAMP.I001.1drv.com, *.CONFIG.I001.1drv.com, *.DEPLOYMGR.P001.1drv.com, *.JOB.P001.1drv.com, *.LPS.I001.1drv.com, *.WSTCRS.I001.1drv.com, *.am.files.1drv.com, *.api.onedrive.com, *.apis.live.net, *.bay.livefilestore.com, *.bl.files.1drv.com, *.bl3301.livefilestore.com, *.bl3302.livefilestore.com, *.blu.livefilestore.com, *.bn.files.1drv.com, *.bn1.livefilestore.com, *.bn1301.livefilestore.com, *.bn1302.livefilestore.com, *.bn1303.df.livefilestore.com, *.bn1303.livefilestore.com, *.bn1304.livefilestore.com, *.bn1391soak2.livefilestore.com, *.bn1391soak3.livefilestore.com, *.by.files.1drv.com, *.by3301.livefilestore.com, *.by3302.livefilestore.com, *.ch.files.1drv.com, *.cobalt.df.storage.live.com, *.cobalt.df.storage.msn.com, *.cobalt.storage.live.com, *.cobalt.storage.msn.com, *.config.live.net, *.cy.files.1drv.com, *.db.files.1drv.com, *.df-config.live.net, *.df.api.onedrive.com, *.df.livefilestore.com, *.df.policies.live.net, *.df.s2s-api.onedrive.com, *.df.s2s-policies.live.net, *.df.s2s-settings.live.net, *.df.s2s-storage.live.com, *.df.settings.live.net, *.df.storage.live.com, *.df.storage.msn.com, *.dm.files.1drv.com, *.dm1.livefilestore.com, *.dm2301.livefilestore.com, *.dm2302.livefilestore.com, *.dm2303.df.livefilestore.com, *.dm2303.livefilestore.com, *.dm2304.livefilestore.com, *.dm2391soak2.livefilestore.com, *.dm2391soak3.livefilestore.com, *.docs-df.live.net, *.docs.live.net, *.files-df.1drv.com, *.files.1drv.com, *.gls.i001.1drv.com, *.keymaster.i001.1drv.com, *.keymaster.p001.1drv.com, *.livefilestore.com, *.onedrive.com, *.ph.files.1drv.com, *.policies.live.net, *.ra.live.com, *.s2s-api.onedrive.com, *.s2s-files-df.1drv.com, *.s2s-files.1drv.com, *.s2s-policies.live.net, *.s2s-settings.live.net, *.s2s-storage.live.com, *.s2s.df.livefilestore.com, *.s2s.livefilestore.com, *.settings.live.net, *.slps.live.net, *.sn.files.1drv.com, *.sn2.df.livefilestore.com, *.sn2.livefilestore.com, *.snt002.df.livefilestore.com, *.storage.live.com, *.storage.msn.com, *.tuk.livefilestore.com, *.users.df.storage.live.com, *.users.df.storage.msn.com, *.users.storage.live.com, *.users.storage.msn.com, *.wstlm.1drv.com, 1drv.ms, api-df.live.com, api-df.live.net, api.live.com, api.live.net, apis.live.net, config.live.net, d.bl3301.docs.live.net, d.bl3302.docs.live.net, dev.live.com, device.ra.live.com, df-config.live.net, df.api.onedrive.com, df.people.onedrive.com, df.policies.live.net, df.s2s-api.onedrive.com, df.s2s-policies.live.net, df.s2s-settings.live.net, df.s2s-storage.live.com, df.settings.live.net, df.storage.live.com, docs-df.live.net, docs.live.net, l-df.live.net, l.live.net, oauth.live.com, policies.live.net, register.mesh.com, s2s-api.onedrive.com, s2s-policies.live.net, s2s-settings.live.net, s2s-skyapi-df.live.net, s2s-skyapi.live.net, s2s-storage.live.com, sdrv.ms, settings.live.net, skyapi-df.live.net, skyapi.live.net, skyapi.newdrive.live.com, skyapi.onedrive.live.com, skyapi.skydrive.live.com, ssw.live-int.com, ssw.live.com, storage.live.com, storage.msn.com
Subject: storage.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 02
SANs: *.1drv.com, *.ADMINSVC.I001.1drv.com, *.ADMINSVC.P001.1drv.com, *.API.P001.1drv.com, *.CAMP.I001.1drv.com, *.CONFIG.I001.1drv.com, *.DEPLOYMGR.P001.1drv.com, *.JOB.P001.1drv.com, *.LPS.I001.1drv.com, *.WSTCRS.I001.1drv.com, *.am.files.1drv.com, *.api.onedrive.com, *.apis.live.net, *.bay.livefilestore.com, *.bl.files.1drv.com, *.bl3301.livefilestore.com, *.bl3302.livefilestore.com, *.blu.livefilestore.com, *.bn.files.1drv.com, *.bn1.livefilestore.com, *.bn1301.livefilestore.com, *.bn1302.livefilestore.com, *.bn1303.df.livefilestore.com, *.bn1303.livefilestore.com, *.bn1304.livefilestore.com, *.bn1391soak2.livefilestore.com, *.bn1391soak3.livefilestore.com, *.by.files.1drv.com, *.by3301.livefilestore.com, *.by3302.livefilestore.com, *.ch.files.1drv.com, *.cobalt.df.storage.live.com, *.cobalt.df.storage.msn.com, *.cobalt.storage.live.com, *.cobalt.storage.msn.com, *.config.live.net, *.cy.files.1drv.com, *.db.files.1drv.com, *.df-config.live.net, *.df.api.onedrive.com, *.df.livefilestore.com, *.df.policies.live.net, *.df.s2s-api.onedrive.com, *.df.s2s-policies.live.net, *.df.s2s-settings.live.net, *.df.s2s-storage.live.com, *.df.settings.live.net, *.df.storage.live.com, *.df.storage.msn.com, *.dm.files.1drv.com, *.dm1.livefilestore.com, *.dm2301.livefilestore.com, *.dm2302.livefilestore.com, *.dm2303.df.livefilestore.com, *.dm2303.livefilestore.com, *.dm2304.livefilestore.com, *.dm2391soak2.livefilestore.com, *.dm2391soak3.livefilestore.com, *.docs-df.live.net, *.docs.live.net, *.files-df.1drv.com, *.files.1drv.com, *.gls.i001.1drv.com, *.keymaster.i001.1drv.com, *.keymaster.p001.1drv.com, *.livefilestore.com, *.onedrive.com, *.ph.files.1drv.com, *.policies.live.net, *.ra.live.com, *.s2s-api.onedrive.com, *.s2s-files-df.1drv.com, *.s2s-files.1drv.com, *.s2s-policies.live.net, *.s2s-settings.live.net, *.s2s-storage.live.com, *.s2s.df.livefilestore.com, *.s2s.livefilestore.com, *.settings.live.net, *.slps.live.net, *.sn.files.1drv.com, *.sn2.df.livefilestore.com, *.sn2.livefilestore.com, *.snt002.df.livefilestore.com, *.storage.live.com, *.storage.msn.com, *.tuk.livefilestore.com, *.users.df.storage.live.com, *.users.df.storage.msn.com, *.users.storage.live.com, *.users.storage.msn.com, *.wstlm.1drv.com, 1drv.ms, api-df.live.com, api-df.live.net, api.live.com, api.live.net, apis.live.net, config.live.net, d.bl3301.docs.live.net, d.bl3302.docs.live.net, dev.live.com, device.ra.live.com, df-config.live.net, df.api.onedrive.com, df.people.onedrive.com, df.policies.live.net, df.s2s-api.onedrive.com, df.s2s-policies.live.net, df.s2s-settings.live.net, df.s2s-storage.live.com, df.settings.live.net, df.storage.live.com, docs-df.live.net, docs.live.net, l-df.live.net, l.live.net, oauth.live.com, policies.live.net, register.mesh.com, s2s-api.onedrive.com, s2s-policies.live.net, s2s-settings.live.net, s2s-skyapi-df.live.net, s2s-skyapi.live.net, s2s-storage.live.com, sdrv.ms, settings.live.net, skyapi-df.live.net, skyapi.live.net, skyapi.newdrive.live.com, skyapi.onedrive.live.com, skyapi.skydrive.live.com, ssw.live-int.com, ssw.live.com, storage.live.com, storage.msn.com
Subject: storage.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 02
SANs: *.1drv.com, *.ADMINSVC.I001.1drv.com, *.ADMINSVC.P001.1drv.com, *.API.P001.1drv.com, *.CAMP.I001.1drv.com, *.CONFIG.I001.1drv.com, *.DEPLOYMGR.P001.1drv.com, *.JOB.P001.1drv.com, *.LPS.I001.1drv.com, *.WSTCRS.I001.1drv.com, *.am.files.1drv.com, *.api.onedrive.com, *.apis.live.net, *.bay.livefilestore.com, *.bl.files.1drv.com, *.bl3301.livefilestore.com, *.bl3302.livefilestore.com, *.blu.livefilestore.com, *.bn.files.1drv.com, *.bn1.livefilestore.com, *.bn1301.livefilestore.com, *.bn1302.livefilestore.com, *.bn1303.df.livefilestore.com, *.bn1303.livefilestore.com, *.bn1304.livefilestore.com, *.bn1391soak2.livefilestore.com, *.bn1391soak3.livefilestore.com, *.by.files.1drv.com, *.by3301.livefilestore.com, *.by3302.livefilestore.com, *.ch.files.1drv.com, *.cobalt.df.storage.live.com, *.cobalt.df.storage.msn.com, *.cobalt.storage.live.com, *.cobalt.storage.msn.com, *.config.live.net, *.cy.files.1drv.com, *.db.files.1drv.com, *.df-config.live.net, *.df.api.onedrive.com, *.df.livefilestore.com, *.df.policies.live.net, *.df.s2s-api.onedrive.com, *.df.s2s-policies.live.net, *.df.s2s-settings.live.net, *.df.s2s-storage.live.com, *.df.settings.live.net, *.df.storage.live.com, *.df.storage.msn.com, *.dm.files.1drv.com, *.dm1.livefilestore.com, *.dm2301.livefilestore.com, *.dm2302.livefilestore.com, *.dm2303.df.livefilestore.com, *.dm2303.livefilestore.com, *.dm2304.livefilestore.com, *.dm2391soak2.livefilestore.com, *.dm2391soak3.livefilestore.com, *.docs-df.live.net, *.docs.live.net, *.files-df.1drv.com, *.files.1drv.com, *.gls.i001.1drv.com, *.keymaster.i001.1drv.com, *.keymaster.p001.1drv.com, *.livefilestore.com, *.onedrive.com, *.ph.files.1drv.com, *.policies.live.net, *.ra.live.com, *.s2s-api.onedrive.com, *.s2s-files-df.1drv.com, *.s2s-files.1drv.com, *.s2s-policies.live.net, *.s2s-settings.live.net, *.s2s-storage.live.com, *.s2s.df.livefilestore.com, *.s2s.livefilestore.com, *.settings.live.net, *.slps.live.net, *.sn.files.1drv.com, *.sn2.df.livefilestore.com, *.sn2.livefilestore.com, *.snt002.df.livefilestore.com, *.storage.live.com, *.storage.msn.com, *.tuk.livefilestore.com, *.users.df.storage.live.com, *.users.df.storage.msn.com, *.users.storage.live.com, *.users.storage.msn.com, *.wstlm.1drv.com, 1drv.ms, api-df.live.com, api-df.live.net, api.live.com, api.live.net, apis.live.net, config.live.net, d.bl3301.docs.live.net, d.bl3302.docs.live.net, dev.live.com, device.ra.live.com, df-config.live.net, df.api.onedrive.com, df.people.onedrive.com, df.policies.live.net, df.s2s-api.onedrive.com, df.s2s-policies.live.net, df.s2s-settings.live.net, df.s2s-storage.live.com, df.settings.live.net, df.storage.live.com, docs-df.live.net, docs.live.net, l-df.live.net, l.live.net, oauth.live.com, policies.live.net, register.mesh.com, s2s-api.onedrive.com, s2s-policies.live.net, s2s-settings.live.net, s2s-skyapi-df.live.net, s2s-skyapi.live.net, s2s-storage.live.com, sdrv.ms, settings.live.net, skyapi-df.live.net, skyapi.live.net, skyapi.newdrive.live.com, skyapi.onedrive.live.com, skyapi.skydrive.live.com, ssw.live-int.com, ssw.live.com, storage.live.com, storage.msn.com

IPs Citing This Domain

No citing IPs found yet

As the world-sweep progresses, hosts referencing this domain in their HTML will surface here.

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

No origin-IP leaks detected (yet)

Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.

CT-Log Evidence

Certificates from public Certificate Transparency logs whose subject or SAN names this domain — including historic certs we never observed live.

107c8c16ca81285a… google · xenon2026h2
Subject: storage.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 04
SANs: storage.live.com, l-df.live.net, l.live.net, api.live.com, api.live.net, docs.live.net, skyapi.live.net, api-df.live.com, api-df.live.net, docs-df.live.net, skyapi-df.live.net, *.ra.live.com, *.cobalt.df.storage.msn.com, *.cobalt.df.storage.live.com, *.cobalt.storage.msn.com, *.df.storage.live.com, *.df.storage.msn.com, *.docs-df.live.net, *.storage.live.com, *.storage.msn.com, *.users.df.storage.live.com, *.users.df.storage.msn.com, *.users.storage.live.com, *.users.storage.msn.com, *.df.policies.live.net, df.policies.live.net, *.df.settings.live.net, df.settings.live.net, *.df.livefilestore.com, apis.live.net, *.apis.live.net, *.bay.livefilestore.com, *.livefilestore.com, ssw.live-int.com, ssw.live.com, df.storage.live.com, *.sn2.df.livefilestore.com, *.blu.livefilestore.com, *.bn1.livefilestore.com, *.cobalt.storage.live.com, *.dm1.livefilestore.com, *.docs.live.net, *.policies.live.net, *.settings.live.net, *.sn2.livefilestore.com, *.tuk.livefilestore.com, policies.live.net, storage.msn.com, dev.live.com, oauth.live.com, *.bn1301.livefilestore.com, *.bn1302.livefilestore.com, *.dm2301.livefilestore.com, *.dm2302.livefilestore.com, skyapi.skydrive.live.com, settings.live.net, *.bn1303.livefilestore.com, *.bn1304.livefilestore.com, *.dm2303.livefilestore.com, *.dm2304.livefilestore.com, *.by3301.livefilestore.com, *.by3302.livefilestore.com, *.snt002.df.livefilestore.com, *.bn1303.df.livefilestore.com, *.dm2303.df.livefilestore.com, skyapi.newdrive.live.com, skyapi.onedrive.live.com, *.files.1drv.com, *.bl3301.livefilestore.com, *.bl3302.livefilestore.com, *.bn1391soak2.livefilestore.com, *.dm2391soak2.livefilestore.com, *.bn1391soak3.livefilestore.com, *.dm2391soak3.livefilestore.com, *.files-df.1drv.com, *.api.onedrive.com, df.api.onedrive.com, *.df.api.onedrive.com, *.s2s-storage.live.com, *.s2s-policies.live.net, s2s-policies.live.net, s2s-settings.live.net, *.s2s-settings.live.net, *.config.live.net, config.live.net, register.mesh.com, *.df.s2s-storage.live.com, *.df.s2s-settings.live.net, df.s2s-settings.live.net, s2s-storage.live.com, df.s2s-storage.live.com, *.s2s.livefilestore.com, *.s2s.df.livefilestore.com, *.s2s-files-df.1drv.com, *.df.s2s-policies.live.net, df.s2s-policies.live.net, *.df-config.live.net, df-config.live.net, *.s2s-files.1drv.com, device.ra.live.com, *.keymaster.p001.1drv.com, *.keymaster.i001.1drv.com, s2s-skyapi.live.net, s2s-api.onedrive.com, *.s2s-api.onedrive.com, s2s-skyapi-df.live.net, df.s2s-api.onedrive.com, *.df.s2s-api.onedrive.com, df.people.onedrive.com, *.slps.live.net, *.ADMINSVC.P001.1drv.com, *.ADMINSVC.I001.1drv.com, *.CONFIG.I001.1drv.com, *.DEPLOYMGR.P001.1drv.com, *.JOB.P001.1drv.com, *.CAMP.I001.1drv.com, *.1drv.com, 1drv.ms, *.LPS.I001.1drv.com, *.WSTCRS.I001.1drv.com, *.wstlm.1drv.com, sdrv.ms, *.am.files.1drv.com, *.db.files.1drv.com, *.bl.files.1drv.com, *.bn.files.1drv.com, *.by.files.1drv.com, *.ch.files.1drv.com, *.cy.files.1drv.com, *.dm.files.1drv.com, *.sn.files.1drv.com, d.bl3301.docs.live.net, d.bl3302.docs.live.net, *.API.P001.1drv.com, *.gls.i001.1drv.com, *.ph.files.1drv.com, *.onedrive.com
Valid: 2026-03-28 14:49:07 → 2026-09-24 14:49:07
ddee585b89fd4c4c… google · xenon2026h2
Subject: storage.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 10
SANs: storage.live.com, l.live.net, api.live.com, api.live.net, docs.live.net, skyapi.live.net, *.cobalt.storage.msn.com, *.storage.live.com, *.storage.msn.com, *.users.storage.live.com, *.users.storage.msn.com, apis.live.net, *.apis.live.net, *.bay.livefilestore.com, *.livefilestore.com, *.blu.livefilestore.com, *.bn1.livefilestore.com, *.cobalt.storage.live.com, *.dm1.livefilestore.com, *.docs.live.net, *.policies.live.net, *.settings.live.net, *.sn2.livefilestore.com, *.tuk.livefilestore.com, policies.live.net, storage.msn.com, dev.live.com, oauth.live.com, *.bn1301.livefilestore.com, *.bn1302.livefilestore.com, *.dm2301.livefilestore.com, *.dm2302.livefilestore.com, skyapi.skydrive.live.com, settings.live.net, *.bn1303.livefilestore.com, *.bn1304.livefilestore.com, *.dm2303.livefilestore.com, *.dm2304.livefilestore.com, *.by3301.livefilestore.com, *.by3302.livefilestore.com, skyapi.newdrive.live.com, skyapi.onedrive.live.com, *.files.1drv.com, *.bl3301.livefilestore.com, *.bl3302.livefilestore.com, *.bn1391soak2.livefilestore.com, *.dm2391soak2.livefilestore.com, *.bn1391soak3.livefilestore.com, *.dm2391soak3.livefilestore.com, *.api.onedrive.com, *.s2s-storage.live.com, *.s2s-policies.live.net, s2s-policies.live.net, s2s-settings.live.net, *.s2s-settings.live.net, *.config.live.net, config.live.net, register.mesh.com, s2s-storage.live.com, *.s2s.livefilestore.com, *.s2s-files.1drv.com, *.keymaster.p000.1drv.com, *.keymaster.i000.1drv.com, s2s-skyapi.live.net, s2s-api.onedrive.com, *.s2s-api.onedrive.com, *.slps.live.net, *.test.api.onedrive.com, *.test.apis.live.net, *.test.config.live.net, *.test.docs.live.net, *.test.files.1drv.com, *.test.people.onedrive.com, *.test.policies.live.net, *.test.pvt-policies.live.net, *.test.pvt-settings.live.net, *.test.pvt-skyapi.live.net, *.test.pvt-storage.live.com, *.test.s2s-api.onedrive.com, *.test.s2s-config.live.net, *.test.s2s-files.1drv.com, *.test.s2s-policies.live.net, *.test.s2s-settings.live.net, *.test.s2s-storage.live.com, *.test.settings.live.net, *.test.skyapi.live.net, *.test.skyapi.onedrive.live.com, *.test.storage.live.com, *.test.storage.msn.com, *.test.users.storage.live.com, *.test.users.storage.msn.com, *.test.wopi.onedrive.com, *.test.slps.live.net, *.test.sudo.onedrive.com, *.test.sudo.1drv.com, *.ADMINSVC.P000.1drv.com, *.ADMINSVC.I000.1drv.com, *.CONFIG.I000.1drv.com, *.DEPLOYMGR.P000.1drv.com, *.JOB.P000.1drv.com, *.LPS.I000.1drv.com, *.WSTCRS.I000.1drv.com, *.test.wstlm.1drv.com, *.test.s2s-skyapi.live.net, *.bn.soak1.test.files.1drv.com, *.dm.soak1.test.files.1drv.com, *.bn.soak2.test.files.1drv.com, *.dm.soak2.test.files.1drv.com, *.bn.soak3.test.files.1drv.com, *.dm.soak3.test.files.1drv.com, *.API.P000.1drv.com, *.GLS.I000.1drv.com, *.1drv.com, *.onedrive.com
Valid: 2026-03-19 23:34:22 → 2026-09-15 23:34:22
db127acd82feab2b… google · xenon2026h2
Subject: storage.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 10
SANs: storage.live.com, l-df.live.net, l.live.net, api.live.com, api.live.net, docs.live.net, skyapi.live.net, api-df.live.com, api-df.live.net, docs-df.live.net, skyapi-df.live.net, *.ra.live.com, *.cobalt.df.storage.msn.com, *.cobalt.df.storage.live.com, *.cobalt.storage.msn.com, *.df.storage.live.com, *.df.storage.msn.com, *.docs-df.live.net, *.storage.live.com, *.storage.msn.com, *.users.df.storage.live.com, *.users.df.storage.msn.com, *.users.storage.live.com, *.users.storage.msn.com, *.df.policies.live.net, df.policies.live.net, *.df.settings.live.net, df.settings.live.net, *.df.livefilestore.com, apis.live.net, *.apis.live.net, *.bay.livefilestore.com, *.livefilestore.com, ssw.live-int.com, ssw.live.com, df.storage.live.com, *.sn2.df.livefilestore.com, *.blu.livefilestore.com, *.bn1.livefilestore.com, *.cobalt.storage.live.com, *.dm1.livefilestore.com, *.docs.live.net, *.policies.live.net, *.settings.live.net, *.sn2.livefilestore.com, *.tuk.livefilestore.com, policies.live.net, storage.msn.com, dev.live.com, oauth.live.com, *.bn1301.livefilestore.com, *.bn1302.livefilestore.com, *.dm2301.livefilestore.com, *.dm2302.livefilestore.com, skyapi.skydrive.live.com, settings.live.net, *.bn1303.livefilestore.com, *.bn1304.livefilestore.com, *.dm2303.livefilestore.com, *.dm2304.livefilestore.com, *.by3301.livefilestore.com, *.by3302.livefilestore.com, *.snt002.df.livefilestore.com, *.bn1303.df.livefilestore.com, *.dm2303.df.livefilestore.com, skyapi.newdrive.live.com, skyapi.onedrive.live.com, *.files.1drv.com, *.bl3301.livefilestore.com, *.bl3302.livefilestore.com, *.bn1391soak2.livefilestore.com, *.dm2391soak2.livefilestore.com, *.bn1391soak3.livefilestore.com, *.dm2391soak3.livefilestore.com, *.files-df.1drv.com, *.api.onedrive.com, df.api.onedrive.com, *.df.api.onedrive.com, *.s2s-storage.live.com, *.s2s-policies.live.net, s2s-policies.live.net, s2s-settings.live.net, *.s2s-settings.live.net, *.config.live.net, config.live.net, register.mesh.com, *.df.s2s-storage.live.com, *.df.s2s-settings.live.net, df.s2s-settings.live.net, s2s-storage.live.com, df.s2s-storage.live.com, *.s2s.livefilestore.com, *.s2s.df.livefilestore.com, *.s2s-files-df.1drv.com, *.df.s2s-policies.live.net, df.s2s-policies.live.net, *.df-config.live.net, df-config.live.net, *.s2s-files.1drv.com, device.ra.live.com, *.keymaster.p001.1drv.com, *.keymaster.i001.1drv.com, s2s-skyapi.live.net, s2s-api.onedrive.com, *.s2s-api.onedrive.com, s2s-skyapi-df.live.net, df.s2s-api.onedrive.com, *.df.s2s-api.onedrive.com, df.people.onedrive.com, *.slps.live.net, *.ADMINSVC.P001.1drv.com, *.ADMINSVC.I001.1drv.com, *.CONFIG.I001.1drv.com, *.DEPLOYMGR.P001.1drv.com, *.JOB.P001.1drv.com, *.CAMP.I001.1drv.com, *.1drv.com, 1drv.ms, *.LPS.I001.1drv.com, *.WSTCRS.I001.1drv.com, *.wstlm.1drv.com, sdrv.ms, *.am.files.1drv.com, *.db.files.1drv.com, *.bl.files.1drv.com, *.bn.files.1drv.com, *.by.files.1drv.com, *.ch.files.1drv.com, *.cy.files.1drv.com, *.dm.files.1drv.com, *.sn.files.1drv.com, d.bl3301.docs.live.net, d.bl3302.docs.live.net, *.API.P001.1drv.com, *.gls.i001.1drv.com, *.ph.files.1drv.com, *.onedrive.com
Valid: 2026-02-27 00:42:00 → 2026-08-26 00:42:00
122af9e147e5058e… google · xenon2026h2
Subject: storage.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 10
SANs: storage.live.com, l-df.live.net, l.live.net, api.live.com, api.live.net, docs.live.net, skyapi.live.net, api-df.live.com, api-df.live.net, docs-df.live.net, skyapi-df.live.net, *.ra.live.com, *.cobalt.df.storage.msn.com, *.cobalt.df.storage.live.com, *.cobalt.storage.msn.com, *.df.storage.live.com, *.df.storage.msn.com, *.docs-df.live.net, *.storage.live.com, *.storage.msn.com, *.users.df.storage.live.com, *.users.df.storage.msn.com, *.users.storage.live.com, *.users.storage.msn.com, *.df.policies.live.net, df.policies.live.net, *.df.settings.live.net, df.settings.live.net, *.df.livefilestore.com, apis.live.net, *.apis.live.net, *.bay.livefilestore.com, *.livefilestore.com, ssw.live-int.com, ssw.live.com, df.storage.live.com, *.sn2.df.livefilestore.com, *.blu.livefilestore.com, *.bn1.livefilestore.com, *.cobalt.storage.live.com, *.dm1.livefilestore.com, *.docs.live.net, *.policies.live.net, *.settings.live.net, *.sn2.livefilestore.com, *.tuk.livefilestore.com, policies.live.net, storage.msn.com, dev.live.com, oauth.live.com, *.bn1301.livefilestore.com, *.bn1302.livefilestore.com, *.dm2301.livefilestore.com, *.dm2302.livefilestore.com, skyapi.skydrive.live.com, settings.live.net, *.bn1303.livefilestore.com, *.bn1304.livefilestore.com, *.dm2303.livefilestore.com, *.dm2304.livefilestore.com, *.by3301.livefilestore.com, *.by3302.livefilestore.com, *.snt002.df.livefilestore.com, *.bn1303.df.livefilestore.com, *.dm2303.df.livefilestore.com, skyapi.newdrive.live.com, skyapi.onedrive.live.com, *.files.1drv.com, *.bl3301.livefilestore.com, *.bl3302.livefilestore.com, *.bn1391soak2.livefilestore.com, *.dm2391soak2.livefilestore.com, *.bn1391soak3.livefilestore.com, *.dm2391soak3.livefilestore.com, *.files-df.1drv.com, *.api.onedrive.com, df.api.onedrive.com, *.df.api.onedrive.com, *.s2s-storage.live.com, *.s2s-policies.live.net, s2s-policies.live.net, s2s-settings.live.net, *.s2s-settings.live.net, *.config.live.net, config.live.net, register.mesh.com, *.df.s2s-storage.live.com, *.df.s2s-settings.live.net, df.s2s-settings.live.net, s2s-storage.live.com, df.s2s-storage.live.com, *.s2s.livefilestore.com, *.s2s.df.livefilestore.com, *.s2s-files-df.1drv.com, *.df.s2s-policies.live.net, df.s2s-policies.live.net, *.df-config.live.net, df-config.live.net, *.s2s-files.1drv.com, device.ra.live.com, *.keymaster.p001.1drv.com, *.keymaster.i001.1drv.com, s2s-skyapi.live.net, s2s-api.onedrive.com, *.s2s-api.onedrive.com, s2s-skyapi-df.live.net, df.s2s-api.onedrive.com, *.df.s2s-api.onedrive.com, df.people.onedrive.com, *.slps.live.net, *.ADMINSVC.P001.1drv.com, *.ADMINSVC.I001.1drv.com, *.CONFIG.I001.1drv.com, *.DEPLOYMGR.P001.1drv.com, *.JOB.P001.1drv.com, *.CAMP.I001.1drv.com, *.1drv.com, 1drv.ms, *.LPS.I001.1drv.com, *.WSTCRS.I001.1drv.com, *.wstlm.1drv.com, sdrv.ms, *.am.files.1drv.com, *.db.files.1drv.com, *.bl.files.1drv.com, *.bn.files.1drv.com, *.by.files.1drv.com, *.ch.files.1drv.com, *.cy.files.1drv.com, *.dm.files.1drv.com, *.sn.files.1drv.com, d.bl3301.docs.live.net, d.bl3302.docs.live.net, *.API.P001.1drv.com, *.gls.i001.1drv.com, *.ph.files.1drv.com, *.onedrive.com
Valid: 2026-02-27 00:42:00 → 2026-08-26 00:42:00
ab49d6fca3863efc… google · xenon2026h2
Subject: storage.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 02
SANs: storage.live.com, l.live.net, api.live.com, api.live.net, docs.live.net, skyapi.live.net, *.cobalt.storage.msn.com, *.storage.live.com, *.storage.msn.com, *.users.storage.live.com, *.users.storage.msn.com, apis.live.net, *.apis.live.net, *.bay.livefilestore.com, *.livefilestore.com, *.blu.livefilestore.com, *.bn1.livefilestore.com, *.cobalt.storage.live.com, *.dm1.livefilestore.com, *.docs.live.net, *.policies.live.net, *.settings.live.net, *.sn2.livefilestore.com, *.tuk.livefilestore.com, policies.live.net, storage.msn.com, dev.live.com, oauth.live.com, *.bn1301.livefilestore.com, *.bn1302.livefilestore.com, *.dm2301.livefilestore.com, *.dm2302.livefilestore.com, skyapi.skydrive.live.com, settings.live.net, *.bn1303.livefilestore.com, *.bn1304.livefilestore.com, *.dm2303.livefilestore.com, *.dm2304.livefilestore.com, *.by3301.livefilestore.com, *.by3302.livefilestore.com, skyapi.newdrive.live.com, skyapi.onedrive.live.com, *.files.1drv.com, *.bl3301.livefilestore.com, *.bl3302.livefilestore.com, *.bn1391soak2.livefilestore.com, *.dm2391soak2.livefilestore.com, *.bn1391soak3.livefilestore.com, *.dm2391soak3.livefilestore.com, *.api.onedrive.com, *.s2s-storage.live.com, *.s2s-policies.live.net, s2s-policies.live.net, s2s-settings.live.net, *.s2s-settings.live.net, *.config.live.net, config.live.net, register.mesh.com, s2s-storage.live.com, *.s2s.livefilestore.com, *.s2s-files.1drv.com, *.keymaster.p000.1drv.com, *.keymaster.i000.1drv.com, s2s-skyapi.live.net, s2s-api.onedrive.com, *.s2s-api.onedrive.com, *.slps.live.net, *.test.api.onedrive.com, *.test.apis.live.net, *.test.config.live.net, *.test.docs.live.net, *.test.files.1drv.com, *.test.people.onedrive.com, *.test.policies.live.net, *.test.pvt-policies.live.net, *.test.pvt-settings.live.net, *.test.pvt-skyapi.live.net, *.test.pvt-storage.live.com, *.test.s2s-api.onedrive.com, *.test.s2s-config.live.net, *.test.s2s-files.1drv.com, *.test.s2s-policies.live.net, *.test.s2s-settings.live.net, *.test.s2s-storage.live.com, *.test.settings.live.net, *.test.skyapi.live.net, *.test.skyapi.onedrive.live.com, *.test.storage.live.com, *.test.storage.msn.com, *.test.users.storage.live.com, *.test.users.storage.msn.com, *.test.wopi.onedrive.com, *.test.slps.live.net, *.test.sudo.onedrive.com, *.test.sudo.1drv.com, *.ADMINSVC.P000.1drv.com, *.ADMINSVC.I000.1drv.com, *.CONFIG.I000.1drv.com, *.DEPLOYMGR.P000.1drv.com, *.JOB.P000.1drv.com, *.LPS.I000.1drv.com, *.WSTCRS.I000.1drv.com, *.test.wstlm.1drv.com, *.test.s2s-skyapi.live.net, *.bn.soak1.test.files.1drv.com, *.dm.soak1.test.files.1drv.com, *.bn.soak2.test.files.1drv.com, *.dm.soak2.test.files.1drv.com, *.bn.soak3.test.files.1drv.com, *.dm.soak3.test.files.1drv.com, *.API.P000.1drv.com, *.GLS.I000.1drv.com, *.1drv.com, *.onedrive.com
Valid: 2026-02-18 19:25:14 → 2026-08-17 19:25:14
4c25dd2ca3bb53c5… google · xenon2026h2
Subject: storage.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 04
SANs: storage.live.com, l-df.live.net, l.live.net, api.live.com, api.live.net, docs.live.net, skyapi.live.net, api-df.live.com, api-df.live.net, docs-df.live.net, skyapi-df.live.net, *.ra.live.com, *.cobalt.df.storage.msn.com, *.cobalt.df.storage.live.com, *.cobalt.storage.msn.com, *.df.storage.live.com, *.df.storage.msn.com, *.docs-df.live.net, *.storage.live.com, *.storage.msn.com, *.users.df.storage.live.com, *.users.df.storage.msn.com, *.users.storage.live.com, *.users.storage.msn.com, *.df.policies.live.net, df.policies.live.net, *.df.settings.live.net, df.settings.live.net, *.df.livefilestore.com, apis.live.net, *.apis.live.net, *.bay.livefilestore.com, *.livefilestore.com, ssw.live-int.com, ssw.live.com, df.storage.live.com, *.sn2.df.livefilestore.com, *.blu.livefilestore.com, *.bn1.livefilestore.com, *.cobalt.storage.live.com, *.dm1.livefilestore.com, *.docs.live.net, *.policies.live.net, *.settings.live.net, *.sn2.livefilestore.com, *.tuk.livefilestore.com, policies.live.net, storage.msn.com, dev.live.com, oauth.live.com, *.bn1301.livefilestore.com, *.bn1302.livefilestore.com, *.dm2301.livefilestore.com, *.dm2302.livefilestore.com, skyapi.skydrive.live.com, settings.live.net, *.bn1303.livefilestore.com, *.bn1304.livefilestore.com, *.dm2303.livefilestore.com, *.dm2304.livefilestore.com, *.by3301.livefilestore.com, *.by3302.livefilestore.com, *.snt002.df.livefilestore.com, *.bn1303.df.livefilestore.com, *.dm2303.df.livefilestore.com, skyapi.newdrive.live.com, skyapi.onedrive.live.com, *.files.1drv.com, *.bl3301.livefilestore.com, *.bl3302.livefilestore.com, *.bn1391soak2.livefilestore.com, *.dm2391soak2.livefilestore.com, *.bn1391soak3.livefilestore.com, *.dm2391soak3.livefilestore.com, *.files-df.1drv.com, *.api.onedrive.com, df.api.onedrive.com, *.df.api.onedrive.com, *.s2s-storage.live.com, *.s2s-policies.live.net, s2s-policies.live.net, s2s-settings.live.net, *.s2s-settings.live.net, *.config.live.net, config.live.net, register.mesh.com, *.df.s2s-storage.live.com, *.df.s2s-settings.live.net, df.s2s-settings.live.net, s2s-storage.live.com, df.s2s-storage.live.com, *.s2s.livefilestore.com, *.s2s.df.livefilestore.com, *.s2s-files-df.1drv.com, *.df.s2s-policies.live.net, df.s2s-policies.live.net, *.df-config.live.net, df-config.live.net, *.s2s-files.1drv.com, device.ra.live.com, *.keymaster.p001.1drv.com, *.keymaster.i001.1drv.com, s2s-skyapi.live.net, s2s-api.onedrive.com, *.s2s-api.onedrive.com, s2s-skyapi-df.live.net, df.s2s-api.onedrive.com, *.df.s2s-api.onedrive.com, df.people.onedrive.com, *.slps.live.net, *.ADMINSVC.P001.1drv.com, *.ADMINSVC.I001.1drv.com, *.CONFIG.I001.1drv.com, *.DEPLOYMGR.P001.1drv.com, *.JOB.P001.1drv.com, *.CAMP.I001.1drv.com, *.1drv.com, 1drv.ms, *.LPS.I001.1drv.com, *.WSTCRS.I001.1drv.com, *.wstlm.1drv.com, sdrv.ms, *.am.files.1drv.com, *.db.files.1drv.com, *.bl.files.1drv.com, *.bn.files.1drv.com, *.by.files.1drv.com, *.ch.files.1drv.com, *.cy.files.1drv.com, *.dm.files.1drv.com, *.sn.files.1drv.com, d.bl3301.docs.live.net, d.bl3302.docs.live.net, *.API.P001.1drv.com, *.gls.i001.1drv.com, *.ph.files.1drv.com, *.onedrive.com
Valid: 2026-02-13 21:54:26 → 2026-08-12 21:54:26
de58bf6a1c188c77… google · xenon2026h2
Subject: storage.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 04
SANs: storage.live.com, l-df.live.net, l.live.net, api.live.com, api.live.net, docs.live.net, skyapi.live.net, api-df.live.com, api-df.live.net, docs-df.live.net, skyapi-df.live.net, *.ra.live.com, *.cobalt.df.storage.msn.com, *.cobalt.df.storage.live.com, *.cobalt.storage.msn.com, *.df.storage.live.com, *.df.storage.msn.com, *.docs-df.live.net, *.storage.live.com, *.storage.msn.com, *.users.df.storage.live.com, *.users.df.storage.msn.com, *.users.storage.live.com, *.users.storage.msn.com, *.df.policies.live.net, df.policies.live.net, *.df.settings.live.net, df.settings.live.net, *.df.livefilestore.com, apis.live.net, *.apis.live.net, *.bay.livefilestore.com, *.livefilestore.com, ssw.live-int.com, ssw.live.com, df.storage.live.com, *.sn2.df.livefilestore.com, *.blu.livefilestore.com, *.bn1.livefilestore.com, *.cobalt.storage.live.com, *.dm1.livefilestore.com, *.docs.live.net, *.policies.live.net, *.settings.live.net, *.sn2.livefilestore.com, *.tuk.livefilestore.com, policies.live.net, storage.msn.com, dev.live.com, oauth.live.com, *.bn1301.livefilestore.com, *.bn1302.livefilestore.com, *.dm2301.livefilestore.com, *.dm2302.livefilestore.com, skyapi.skydrive.live.com, settings.live.net, *.bn1303.livefilestore.com, *.bn1304.livefilestore.com, *.dm2303.livefilestore.com, *.dm2304.livefilestore.com, *.by3301.livefilestore.com, *.by3302.livefilestore.com, *.snt002.df.livefilestore.com, *.bn1303.df.livefilestore.com, *.dm2303.df.livefilestore.com, skyapi.newdrive.live.com, skyapi.onedrive.live.com, *.files.1drv.com, *.bl3301.livefilestore.com, *.bl3302.livefilestore.com, *.bn1391soak2.livefilestore.com, *.dm2391soak2.livefilestore.com, *.bn1391soak3.livefilestore.com, *.dm2391soak3.livefilestore.com, *.files-df.1drv.com, *.api.onedrive.com, df.api.onedrive.com, *.df.api.onedrive.com, *.s2s-storage.live.com, *.s2s-policies.live.net, s2s-policies.live.net, s2s-settings.live.net, *.s2s-settings.live.net, *.config.live.net, config.live.net, register.mesh.com, *.df.s2s-storage.live.com, *.df.s2s-settings.live.net, df.s2s-settings.live.net, s2s-storage.live.com, df.s2s-storage.live.com, *.s2s.livefilestore.com, *.s2s.df.livefilestore.com, *.s2s-files-df.1drv.com, *.df.s2s-policies.live.net, df.s2s-policies.live.net, *.df-config.live.net, df-config.live.net, *.s2s-files.1drv.com, device.ra.live.com, *.keymaster.p001.1drv.com, *.keymaster.i001.1drv.com, s2s-skyapi.live.net, s2s-api.onedrive.com, *.s2s-api.onedrive.com, s2s-skyapi-df.live.net, df.s2s-api.onedrive.com, *.df.s2s-api.onedrive.com, df.people.onedrive.com, *.slps.live.net, *.ADMINSVC.P001.1drv.com, *.ADMINSVC.I001.1drv.com, *.CONFIG.I001.1drv.com, *.DEPLOYMGR.P001.1drv.com, *.JOB.P001.1drv.com, *.CAMP.I001.1drv.com, *.1drv.com, 1drv.ms, *.LPS.I001.1drv.com, *.WSTCRS.I001.1drv.com, *.wstlm.1drv.com, sdrv.ms, *.am.files.1drv.com, *.db.files.1drv.com, *.bl.files.1drv.com, *.bn.files.1drv.com, *.by.files.1drv.com, *.ch.files.1drv.com, *.cy.files.1drv.com, *.dm.files.1drv.com, *.sn.files.1drv.com, d.bl3301.docs.live.net, d.bl3302.docs.live.net, *.API.P001.1drv.com, *.gls.i001.1drv.com, *.ph.files.1drv.com, *.onedrive.com
Valid: 2026-02-13 21:54:26 → 2026-08-12 21:54:26
0516522f66c707a8… google · xenon2026h2
Subject: storage.live.com
Issuer: Microsoft TLS G2 RSA CA OCSP 02
SANs: storage.live.com, l.live.net, api.live.com, api.live.net, docs.live.net, skyapi.live.net, *.cobalt.storage.msn.com, *.storage.live.com, *.storage.msn.com, *.users.storage.live.com, *.users.storage.msn.com, apis.live.net, *.apis.live.net, *.bay.livefilestore.com, *.livefilestore.com, *.blu.livefilestore.com, *.bn1.livefilestore.com, *.cobalt.storage.live.com, *.dm1.livefilestore.com, *.docs.live.net, *.policies.live.net, *.settings.live.net, *.sn2.livefilestore.com, *.tuk.livefilestore.com, policies.live.net, storage.msn.com, dev.live.com, oauth.live.com, *.bn1301.livefilestore.com, *.bn1302.livefilestore.com, *.dm2301.livefilestore.com, *.dm2302.livefilestore.com, skyapi.skydrive.live.com, settings.live.net, *.bn1303.livefilestore.com, *.bn1304.livefilestore.com, *.dm2303.livefilestore.com, *.dm2304.livefilestore.com, *.by3301.livefilestore.com, *.by3302.livefilestore.com, skyapi.newdrive.live.com, skyapi.onedrive.live.com, *.files.1drv.com, *.bl3301.livefilestore.com, *.bl3302.livefilestore.com, *.bn1391soak2.livefilestore.com, *.dm2391soak2.livefilestore.com, *.bn1391soak3.livefilestore.com, *.dm2391soak3.livefilestore.com, *.api.onedrive.com, *.s2s-storage.live.com, *.s2s-policies.live.net, s2s-policies.live.net, s2s-settings.live.net, *.s2s-settings.live.net, *.config.live.net, config.live.net, register.mesh.com, s2s-storage.live.com, *.s2s.livefilestore.com, *.s2s-files.1drv.com, *.keymaster.p000.1drv.com, *.keymaster.i000.1drv.com, s2s-skyapi.live.net, s2s-api.onedrive.com, *.s2s-api.onedrive.com, *.slps.live.net, *.test.api.onedrive.com, *.test.apis.live.net, *.test.config.live.net, *.test.docs.live.net, *.test.files.1drv.com, *.test.people.onedrive.com, *.test.policies.live.net, *.test.pvt-policies.live.net, *.test.pvt-settings.live.net, *.test.pvt-skyapi.live.net, *.test.pvt-storage.live.com, *.test.s2s-api.onedrive.com, *.test.s2s-config.live.net, *.test.s2s-files.1drv.com, *.test.s2s-policies.live.net, *.test.s2s-settings.live.net, *.test.s2s-storage.live.com, *.test.settings.live.net, *.test.skyapi.live.net, *.test.skyapi.onedrive.live.com, *.test.storage.live.com, *.test.storage.msn.com, *.test.users.storage.live.com, *.test.users.storage.msn.com, *.test.wopi.onedrive.com, *.test.slps.live.net, *.test.sudo.onedrive.com, *.test.sudo.1drv.com, *.ADMINSVC.P000.1drv.com, *.ADMINSVC.I000.1drv.com, *.CONFIG.I000.1drv.com, *.DEPLOYMGR.P000.1drv.com, *.JOB.P000.1drv.com, *.LPS.I000.1drv.com, *.WSTCRS.I000.1drv.com, *.test.wstlm.1drv.com, *.test.s2s-skyapi.live.net, *.bn.soak1.test.files.1drv.com, *.dm.soak1.test.files.1drv.com, *.bn.soak2.test.files.1drv.com, *.dm.soak2.test.files.1drv.com, *.bn.soak3.test.files.1drv.com, *.dm.soak3.test.files.1drv.com, *.API.P000.1drv.com, *.GLS.I000.1drv.com, *.1drv.com, *.onedrive.com
Valid: 2026-02-13 21:36:12 → 2026-08-12 21:36:12
0492d37d8c731b2e… google · argon2026h2
Subject: storage.live.com
Issuer: Microsoft Azure RSA TLS Issuing CA 04
SANs: storage.live.com, l.live.net, api.live.com, api.live.net, docs.live.net, skyapi.live.net, *.cobalt.storage.msn.com, *.storage.live.com, *.storage.msn.com, *.users.storage.live.com, *.users.storage.msn.com, apis.live.net, *.apis.live.net, *.bay.livefilestore.com, *.livefilestore.com, *.blu.livefilestore.com, *.bn1.livefilestore.com, *.cobalt.storage.live.com, *.dm1.livefilestore.com, *.docs.live.net, *.policies.live.net, *.settings.live.net, *.sn2.livefilestore.com, *.tuk.livefilestore.com, policies.live.net, storage.msn.com, dev.live.com, oauth.live.com, *.bn1301.livefilestore.com, *.bn1302.livefilestore.com, *.dm2301.livefilestore.com, *.dm2302.livefilestore.com, skyapi.skydrive.live.com, settings.live.net, *.bn1303.livefilestore.com, *.bn1304.livefilestore.com, *.dm2303.livefilestore.com, *.dm2304.livefilestore.com, *.by3301.livefilestore.com, *.by3302.livefilestore.com, skyapi.newdrive.live.com, skyapi.onedrive.live.com, *.files.1drv.com, *.bl3301.livefilestore.com, *.bl3302.livefilestore.com, *.bn1391soak2.livefilestore.com, *.dm2391soak2.livefilestore.com, *.bn1391soak3.livefilestore.com, *.dm2391soak3.livefilestore.com, *.api.onedrive.com, *.s2s-storage.live.com, *.s2s-policies.live.net, s2s-policies.live.net, s2s-settings.live.net, *.s2s-settings.live.net, *.config.live.net, config.live.net, register.mesh.com, s2s-storage.live.com, *.s2s.livefilestore.com, *.s2s-files.1drv.com, *.keymaster.p000.1drv.com, *.keymaster.i000.1drv.com, s2s-skyapi.live.net, s2s-api.onedrive.com, *.s2s-api.onedrive.com, *.slps.live.net, *.test.api.onedrive.com, *.test.apis.live.net, *.test.config.live.net, *.test.docs.live.net, *.test.files.1drv.com, *.test.people.onedrive.com, *.test.policies.live.net, *.test.pvt-policies.live.net, *.test.pvt-settings.live.net, *.test.pvt-skyapi.live.net, *.test.pvt-storage.live.com, *.test.s2s-api.onedrive.com, *.test.s2s-config.live.net, *.test.s2s-files.1drv.com, *.test.s2s-policies.live.net, *.test.s2s-settings.live.net, *.test.s2s-storage.live.com, *.test.settings.live.net, *.test.skyapi.live.net, *.test.skyapi.onedrive.live.com, *.test.storage.live.com, *.test.storage.msn.com, *.test.users.storage.live.com, *.test.users.storage.msn.com, *.test.wopi.onedrive.com, *.test.slps.live.net, *.test.sudo.onedrive.com, *.test.sudo.1drv.com, *.ADMINSVC.P000.1drv.com, *.ADMINSVC.I000.1drv.com, *.CONFIG.I000.1drv.com, *.DEPLOYMGR.P000.1drv.com, *.JOB.P000.1drv.com, *.LPS.I000.1drv.com, *.WSTCRS.I000.1drv.com, *.test.wstlm.1drv.com, *.test.s2s-skyapi.live.net, *.bn.soak1.test.files.1drv.com, *.dm.soak1.test.files.1drv.com, *.bn.soak2.test.files.1drv.com, *.dm.soak2.test.files.1drv.com, *.bn.soak3.test.files.1drv.com, *.dm.soak3.test.files.1drv.com, *.API.P000.1drv.com, *.GLS.I000.1drv.com, *.bl.soak2.test.files.1drv.com, *.bl.soak3.test.files.1drv.com, *.onedrive.com
Valid: 2026-01-24 09:43:55 → 2026-08-25 23:59:59
0492d37d8c731b2e… google · xenon2026h2
Subject: storage.live.com
Issuer: Microsoft Azure RSA TLS Issuing CA 04
SANs: storage.live.com, l.live.net, api.live.com, api.live.net, docs.live.net, skyapi.live.net, *.cobalt.storage.msn.com, *.storage.live.com, *.storage.msn.com, *.users.storage.live.com, *.users.storage.msn.com, apis.live.net, *.apis.live.net, *.bay.livefilestore.com, *.livefilestore.com, *.blu.livefilestore.com, *.bn1.livefilestore.com, *.cobalt.storage.live.com, *.dm1.livefilestore.com, *.docs.live.net, *.policies.live.net, *.settings.live.net, *.sn2.livefilestore.com, *.tuk.livefilestore.com, policies.live.net, storage.msn.com, dev.live.com, oauth.live.com, *.bn1301.livefilestore.com, *.bn1302.livefilestore.com, *.dm2301.livefilestore.com, *.dm2302.livefilestore.com, skyapi.skydrive.live.com, settings.live.net, *.bn1303.livefilestore.com, *.bn1304.livefilestore.com, *.dm2303.livefilestore.com, *.dm2304.livefilestore.com, *.by3301.livefilestore.com, *.by3302.livefilestore.com, skyapi.newdrive.live.com, skyapi.onedrive.live.com, *.files.1drv.com, *.bl3301.livefilestore.com, *.bl3302.livefilestore.com, *.bn1391soak2.livefilestore.com, *.dm2391soak2.livefilestore.com, *.bn1391soak3.livefilestore.com, *.dm2391soak3.livefilestore.com, *.api.onedrive.com, *.s2s-storage.live.com, *.s2s-policies.live.net, s2s-policies.live.net, s2s-settings.live.net, *.s2s-settings.live.net, *.config.live.net, config.live.net, register.mesh.com, s2s-storage.live.com, *.s2s.livefilestore.com, *.s2s-files.1drv.com, *.keymaster.p000.1drv.com, *.keymaster.i000.1drv.com, s2s-skyapi.live.net, s2s-api.onedrive.com, *.s2s-api.onedrive.com, *.slps.live.net, *.test.api.onedrive.com, *.test.apis.live.net, *.test.config.live.net, *.test.docs.live.net, *.test.files.1drv.com, *.test.people.onedrive.com, *.test.policies.live.net, *.test.pvt-policies.live.net, *.test.pvt-settings.live.net, *.test.pvt-skyapi.live.net, *.test.pvt-storage.live.com, *.test.s2s-api.onedrive.com, *.test.s2s-config.live.net, *.test.s2s-files.1drv.com, *.test.s2s-policies.live.net, *.test.s2s-settings.live.net, *.test.s2s-storage.live.com, *.test.settings.live.net, *.test.skyapi.live.net, *.test.skyapi.onedrive.live.com, *.test.storage.live.com, *.test.storage.msn.com, *.test.users.storage.live.com, *.test.users.storage.msn.com, *.test.wopi.onedrive.com, *.test.slps.live.net, *.test.sudo.onedrive.com, *.test.sudo.1drv.com, *.ADMINSVC.P000.1drv.com, *.ADMINSVC.I000.1drv.com, *.CONFIG.I000.1drv.com, *.DEPLOYMGR.P000.1drv.com, *.JOB.P000.1drv.com, *.LPS.I000.1drv.com, *.WSTCRS.I000.1drv.com, *.test.wstlm.1drv.com, *.test.s2s-skyapi.live.net, *.bn.soak1.test.files.1drv.com, *.dm.soak1.test.files.1drv.com, *.bn.soak2.test.files.1drv.com, *.dm.soak2.test.files.1drv.com, *.bn.soak3.test.files.1drv.com, *.dm.soak3.test.files.1drv.com, *.API.P000.1drv.com, *.GLS.I000.1drv.com, *.bl.soak2.test.files.1drv.com, *.bl.soak3.test.files.1drv.com, *.onedrive.com
Valid: 2026-01-24 09:43:55 → 2026-08-25 23:59:59
a6cd564112cdad76… google · argon2026h2
Subject: storage.live.com
Issuer: Microsoft Azure RSA TLS Issuing CA 08
SANs: l-df.live.net, l.live.net, api.live.com, api.live.net, docs.live.net, skyapi.live.net, api-df.live.com, api-df.live.net, docs-df.live.net, skyapi-df.live.net, *.ra.live.com, *.cobalt.df.storage.msn.com, *.cobalt.df.storage.live.com, *.cobalt.storage.msn.com, *.df.storage.live.com, *.df.storage.msn.com, *.docs-df.live.net, *.storage.live.com, *.storage.msn.com, *.users.df.storage.live.com, *.users.df.storage.msn.com, *.users.storage.live.com, *.users.storage.msn.com, *.df.policies.live.net, df.policies.live.net, *.df.settings.live.net, df.settings.live.net, *.df.livefilestore.com, apis.live.net, *.apis.live.net, *.bay.livefilestore.com, *.livefilestore.com, ssw.live-int.com, ssw.live.com, df.storage.live.com, *.sn2.df.livefilestore.com, storage.live.com, *.blu.livefilestore.com, *.bn1.livefilestore.com, *.cobalt.storage.live.com, *.dm1.livefilestore.com, *.docs.live.net, *.policies.live.net, *.settings.live.net, *.sn2.livefilestore.com, *.tuk.livefilestore.com, policies.live.net, storage.msn.com, dev.live.com, oauth.live.com, *.bn1301.livefilestore.com, *.bn1302.livefilestore.com, *.dm2301.livefilestore.com, *.dm2302.livefilestore.com, skyapi.skydrive.live.com, settings.live.net, *.bn1303.livefilestore.com, *.bn1304.livefilestore.com, *.dm2303.livefilestore.com, *.dm2304.livefilestore.com, *.by3301.livefilestore.com, *.by3302.livefilestore.com, *.snt002.df.livefilestore.com, *.bn1303.df.livefilestore.com, *.dm2303.df.livefilestore.com, skyapi.newdrive.live.com, skyapi.onedrive.live.com, *.files.1drv.com, *.bl3301.livefilestore.com, *.bl3302.livefilestore.com, *.bn1391soak2.livefilestore.com, *.dm2391soak2.livefilestore.com, *.bn1391soak3.livefilestore.com, *.dm2391soak3.livefilestore.com, *.files-df.1drv.com, *.api.onedrive.com, df.api.onedrive.com, *.df.api.onedrive.com, *.s2s-storage.live.com, *.s2s-policies.live.net, s2s-policies.live.net, s2s-settings.live.net, *.s2s-settings.live.net, *.config.live.net, config.live.net, register.mesh.com, *.df.s2s-storage.live.com, *.df.s2s-settings.live.net, df.s2s-settings.live.net, s2s-storage.live.com, df.s2s-storage.live.com, *.s2s.livefilestore.com, *.s2s.df.livefilestore.com, *.s2s-files-df.1drv.com, *.df.s2s-policies.live.net, df.s2s-policies.live.net, *.df-config.live.net, df-config.live.net, *.s2s-files.1drv.com, device.ra.live.com, *.keymaster.p001.1drv.com, *.keymaster.i001.1drv.com, s2s-skyapi.live.net, s2s-api.onedrive.com, *.s2s-api.onedrive.com, s2s-skyapi-df.live.net, df.s2s-api.onedrive.com, *.df.s2s-api.onedrive.com, df.people.onedrive.com, *.slps.live.net, *.ADMINSVC.P001.1drv.com, *.ADMINSVC.I001.1drv.com, *.CONFIG.I001.1drv.com, *.DEPLOYMGR.P001.1drv.com, *.JOB.P001.1drv.com, *.CAMP.I001.1drv.com, *.1drv.com, 1drv.ms, *.LPS.I001.1drv.com, *.WSTCRS.I001.1drv.com, *.wstlm.1drv.com, sdrv.ms, *.am.files.1drv.com, *.db.files.1drv.com, *.bl.files.1drv.com, *.bn.files.1drv.com, *.by.files.1drv.com, *.ch.files.1drv.com, *.cy.files.1drv.com, *.dm.files.1drv.com, *.sn.files.1drv.com, d.bl3301.docs.live.net, d.bl3302.docs.live.net, *.API.P001.1drv.com, *.gls.i001.1drv.com, *.ph.files.1drv.com, *.onedrive.com
Valid: 2025-12-31 06:47:37 → 2026-08-25 23:59:59
a6cd564112cdad76… google · xenon2026h2
Subject: storage.live.com
Issuer: Microsoft Azure RSA TLS Issuing CA 08
SANs: l-df.live.net, l.live.net, api.live.com, api.live.net, docs.live.net, skyapi.live.net, api-df.live.com, api-df.live.net, docs-df.live.net, skyapi-df.live.net, *.ra.live.com, *.cobalt.df.storage.msn.com, *.cobalt.df.storage.live.com, *.cobalt.storage.msn.com, *.df.storage.live.com, *.df.storage.msn.com, *.docs-df.live.net, *.storage.live.com, *.storage.msn.com, *.users.df.storage.live.com, *.users.df.storage.msn.com, *.users.storage.live.com, *.users.storage.msn.com, *.df.policies.live.net, df.policies.live.net, *.df.settings.live.net, df.settings.live.net, *.df.livefilestore.com, apis.live.net, *.apis.live.net, *.bay.livefilestore.com, *.livefilestore.com, ssw.live-int.com, ssw.live.com, df.storage.live.com, *.sn2.df.livefilestore.com, storage.live.com, *.blu.livefilestore.com, *.bn1.livefilestore.com, *.cobalt.storage.live.com, *.dm1.livefilestore.com, *.docs.live.net, *.policies.live.net, *.settings.live.net, *.sn2.livefilestore.com, *.tuk.livefilestore.com, policies.live.net, storage.msn.com, dev.live.com, oauth.live.com, *.bn1301.livefilestore.com, *.bn1302.livefilestore.com, *.dm2301.livefilestore.com, *.dm2302.livefilestore.com, skyapi.skydrive.live.com, settings.live.net, *.bn1303.livefilestore.com, *.bn1304.livefilestore.com, *.dm2303.livefilestore.com, *.dm2304.livefilestore.com, *.by3301.livefilestore.com, *.by3302.livefilestore.com, *.snt002.df.livefilestore.com, *.bn1303.df.livefilestore.com, *.dm2303.df.livefilestore.com, skyapi.newdrive.live.com, skyapi.onedrive.live.com, *.files.1drv.com, *.bl3301.livefilestore.com, *.bl3302.livefilestore.com, *.bn1391soak2.livefilestore.com, *.dm2391soak2.livefilestore.com, *.bn1391soak3.livefilestore.com, *.dm2391soak3.livefilestore.com, *.files-df.1drv.com, *.api.onedrive.com, df.api.onedrive.com, *.df.api.onedrive.com, *.s2s-storage.live.com, *.s2s-policies.live.net, s2s-policies.live.net, s2s-settings.live.net, *.s2s-settings.live.net, *.config.live.net, config.live.net, register.mesh.com, *.df.s2s-storage.live.com, *.df.s2s-settings.live.net, df.s2s-settings.live.net, s2s-storage.live.com, df.s2s-storage.live.com, *.s2s.livefilestore.com, *.s2s.df.livefilestore.com, *.s2s-files-df.1drv.com, *.df.s2s-policies.live.net, df.s2s-policies.live.net, *.df-config.live.net, df-config.live.net, *.s2s-files.1drv.com, device.ra.live.com, *.keymaster.p001.1drv.com, *.keymaster.i001.1drv.com, s2s-skyapi.live.net, s2s-api.onedrive.com, *.s2s-api.onedrive.com, s2s-skyapi-df.live.net, df.s2s-api.onedrive.com, *.df.s2s-api.onedrive.com, df.people.onedrive.com, *.slps.live.net, *.ADMINSVC.P001.1drv.com, *.ADMINSVC.I001.1drv.com, *.CONFIG.I001.1drv.com, *.DEPLOYMGR.P001.1drv.com, *.JOB.P001.1drv.com, *.CAMP.I001.1drv.com, *.1drv.com, 1drv.ms, *.LPS.I001.1drv.com, *.WSTCRS.I001.1drv.com, *.wstlm.1drv.com, sdrv.ms, *.am.files.1drv.com, *.db.files.1drv.com, *.bl.files.1drv.com, *.bn.files.1drv.com, *.by.files.1drv.com, *.ch.files.1drv.com, *.cy.files.1drv.com, *.dm.files.1drv.com, *.sn.files.1drv.com, d.bl3301.docs.live.net, d.bl3302.docs.live.net, *.API.P001.1drv.com, *.gls.i001.1drv.com, *.ph.files.1drv.com, *.onedrive.com
Valid: 2025-12-31 06:47:37 → 2026-08-25 23:59:59

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Passive DNS — every value this name ever resolved to and when we first / last observed it. Updates every cycle of our forward-DNS crawler.

Type Value First seen Last seen
AAAA 2620:1ec:50::11 2026-06-18 12:55:28.466 2026-07-25 13:59:40.236
A 150.171.22.11 2026-06-18 12:55:28.466 2026-07-25 13:59:40.236