Microsoft

Software & cloud United Statesmicrosoft.comRank 1 of the most impersonated
Cert findings · 24 h
11
Cert findings · 7 days
118
64 reported or listed · 50 on phishing hosts · 4 on Spamhaus DROP
Registered lookalikes
1,671
121 listed by a source or an address list
Official domains
576
verified from Microsoft's own sites and records

Registered lookalikes

Checked daily · 2026-11-04 22:41 UTC

Spellings of Microsoft's official domains (microsoft.com, office365.com, hotmail.com, …) registered to other owners (identified by nameservers, registrar and redirects), checked daily; the ones with no address or mail server yet say so. Many are parked, for sale or run by other businesses and sites with a similar name; the ones a phishing source or address list has flagged carry a label.

Some of these come from registry zone files (ICANN CZDS). Our zone data terms apply to them: no marketing use of any kind, no harassing their registrants, no high-volume registry or registrar queries.

121 of the 1,671 are listed by a source or resolve to a listed address, checked hourly.

  1. microsoft.observer US · AS16509 · Amazon.com, Inc.3 addressesLookalike of microsoft.com · the ending .observer
    Amazon Web Services
    DetailsHide details for microsoft.observer
    Domain
    microsoft.observer
    Spelling
    The name of microsoft.com with the ending .observer
    First found
    2026-11-01 · the day the daily DNS check first found it registered
    Registered
    2017-11-02 · Porkbun LLC
    Addresses
    207.207.210.23 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    207.207.210.36 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    207.207.210.50 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (207.207.210.23, 207.207.210.36, 207.207.210.50): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  2. hotmail.london BE · AS34762 · COMBELL-AS Combell NVLookalike of hotmail.com · the ending .london
    MX present
    DetailsHide details for hotmail.london
    Domain
    hotmail.london
    Spelling
    The name of hotmail.com with the ending .london
    First found
    2026-11-01 · the day the daily DNS check first found it registered
    Registered
    2017-10-21 · Tucows Domains Inc.
    Addresses
    178.18.126.162 · Belgium · AS34762 COMBELL-AS Combell NV
    MX
    mx0.lcn.com
    mx1.lcn.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  3. office365.mn US · AS8075 · Microsoft CorporationLookalike of office365.com · the ending .mn
    Microsoft AzureMX present
    DetailsHide details for office365.mn
    Domain
    office365.mn
    Spelling
    The name of office365.com with the ending .mn
    First found
    2026-11-01 · the day the daily DNS check first found it registered
    Registered
    2017-10-16 · Datacom Co., Ltd.
    Addresses
    52.183.69.113 · United States · AS8075 MICROSOFT-CORP-MSN-AS-BLOCK - Microsoft Corporation · Microsoft Azure (cloud provider)
    Microsoft Azure
    Microsoft Azure (52.183.69.113): a cloud provider. It rents servers and addresses to its customers.
    MX
    office365-mn.mail.protection.outlook.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  4. microsoftonljne.comLookalike of microsoftonline.com · a letter from a neighbouring key
    No address or mail server yet
    DetailsHide details for microsoftonljne.com
    Domain
    microsoftonljne.com
    Spelling
    Spelled like microsoftonline.com with a letter from a neighbouring key
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2017-10-16 · DreamHost, LLC
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  5. microsoft365.academy US · AS15169 · Google LLCLookalike of microsoft365.com · the ending .academy
    GoogleMX present
    DetailsHide details for microsoft365.academy
    Domain
    microsoft365.academy
    Spelling
    The name of microsoft365.com with the ending .academy
    First found
    2026-10-31 · the day the daily DNS check first found it registered
    Registered
    2017-10-04 · IONOS SE
    Addresses
    35.214.70.162 · United States · AS15169 GOOGLE - Google LLC · Google (cloud provider)
    Google
    Google (35.214.70.162): a cloud provider. It rents servers and addresses to its customers.
    MX
    microsoft365-academy.mail.protection.outlook.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  6. microsoft365.business US · AS15169 · Google LLCLookalike of microsoft365.com · the ending .business
    GoogleMX present
    DetailsHide details for microsoft365.business
    Domain
    microsoft365.business
    Spelling
    The name of microsoft365.com with the ending .business
    First found
    2026-10-31 · the day the daily DNS check first found it registered
    Registered
    2017-10-04 · IONOS SE
    Addresses
    35.214.70.162 · United States · AS15169 GOOGLE - Google LLC · Google (cloud provider)
    Google
    Google (35.214.70.162): a cloud provider. It rents servers and addresses to its customers.
    MX
    mx10.mailspamprotection.com
    mx20.mailspamprotection.com
    mx30.mailspamprotection.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  7. microsoft365.guru US · AS15169 · Google LLCLookalike of microsoft365.com · the ending .guru
    GoogleMX present
    DetailsHide details for microsoft365.guru
    Domain
    microsoft365.guru
    Spelling
    The name of microsoft365.com with the ending .guru
    First found
    2026-10-31 · the day the daily DNS check first found it registered
    Registered
    2017-10-04 · IONOS SE
    Addresses
    35.214.70.162 · United States · AS15169 GOOGLE - Google LLC · Google (cloud provider)
    Google
    Google (35.214.70.162): a cloud provider. It rents servers and addresses to its customers.
    MX
    mx10.mailspamprotection.com
    mx20.mailspamprotection.com
    mx30.mailspamprotection.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  8. microsoft365.org.uk US · AS15169 · Google LLCLookalike of microsoft365.com · the ending .org.uk
    GoogleMX present
    DetailsHide details for microsoft365.org.uk
    Domain
    microsoft365.org.uk
    Spelling
    The name of microsoft365.com with the ending .org.uk
    First found
    2026-10-31 · the day the daily DNS check first found it registered
    Registered
    2017-10-04 · Fasthosts Internet Ltd
    Addresses
    35.214.70.162 · United States · AS15169 GOOGLE - Google LLC · Google (cloud provider)
    Google
    Google (35.214.70.162): a cloud provider. It rents servers and addresses to its customers.
    MX
    mx10.mailspamprotection.com
    mx20.mailspamprotection.com
    mx30.mailspamprotection.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  9. mirosoft365.com AU · AS133618 · Trellian Pty. LimitedLookalike of microsoft365.com · a dropped letter
    Parking page · Above.comMX present
    DetailsHide details for mirosoft365.com
    Domain
    mirosoft365.com
    Spelling
    Spelled like microsoft365.com with a dropped letter
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2017-07-27 · Above.com Pty Ltd.
    Addresses
    103.224.182.246 · Australia · AS133618 TRELLIAN-AS-AP - Trellian Pty. Limited · Trellian / Above.com (parking page)
    Parking page · Above.com
    The registry delegates mirosoft365.com to Above.com’s nameservers, which answer for it. Above.com: a parking service. It answers for names that are typically for sale or unused. Trellian / Above.com (103.224.182.246): a parking service. It answers for names that are typically for sale or unused.
    MX
    park-mx.above.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  10. microsoft365.si SI · AS15664 · SI-Business Business Soluti…Lookalike of microsoft365.com · the ending .si
    DetailsHide details for microsoft365.si
    Domain
    microsoft365.si
    Spelling
    The name of microsoft365.com with the ending .si
    First found
    2026-10-31 · the day the daily DNS check first found it registered
    Registered
    2017-07-12 · Webtasy, d.o.o.
    Addresses
    91.213.89.112 · Slovenia · AS15664 SI-Business Business Solutions d.o.o.
    Daily check
    Ended 2026-11-04 22:41 UTC
  11. microsoft365.services DE · AS8560 · IONOS-AS IONOS SE2 addressesLookalike of microsoft365.com · the ending .services
    IONOSMX present
    DetailsHide details for microsoft365.services
    Domain
    microsoft365.services
    Spelling
    The name of microsoft365.com with the ending .services
    First found
    2026-10-31 · the day the daily DNS check first found it registered
    Registered
    2017-07-11 · IONOS SE
    Addresses
    217.160.0.202 · Germany · AS8560 IONOS-AS IONOS SE · IONOS (shared hosting)
    2001:8d8:100f:f000::200
    IONOS
    IONOS (217.160.0.202): shared web hosting and domain registration. One address typically serves many customer sites.
    MX
    mx00.ionos.co.uk
    mx01.ionos.co.uk
    Daily check
    Ended 2026-11-04 22:41 UTC
  12. microsoft365security.org US · AS16509 · Amazon.com, Inc.2 addressesLookalike of microsoft.com · the name with an added word
    Registry lookup queuedAmazon Web Services
    DetailsHide details for microsoft365security.org
    Domain
    microsoft365security.org
    Spelling
    The name of microsoft.com with an added word
    First found
    2026-11-01 · the day we first found it in the .org zone file, already registered
    Registered
    2017-07-10 · GoDaddy.com, LLC
    Addresses
    3.33.152.147 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    15.197.142.173 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (3.33.152.147, 15.197.142.173): a cloud provider. It rents servers and addresses to its customers.
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  13. rnicrosoft.us US · AS29873 · Newfold Digital, Inc.Lookalike of microsoft.com · similar-looking characters
    MX present
    DetailsHide details for rnicrosoft.us
    Domain
    rnicrosoft.us
    Spelling
    Spelled like microsoft.com with similar-looking characters
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2017-06-04 · Domain.com, LLC
    Addresses
    66.96.161.153 · United States · AS29873 BIZLAND-SD - Newfold Digital, Inc.
    MX
    mx.rnicrosoft.us
    Daily check
    Ended 2026-11-04 22:41 UTC
  14. micr0soft.art FR · AS16276 · OVH OVH SASLookalike of microsoft.com · similar-looking characters
    OVHMX present
    DetailsHide details for micr0soft.art
    Domain
    micr0soft.art
    Spelling
    Spelled like microsoft.com with similar-looking characters
    First found
    2026-11-01 · the day we first found it in the .art zone file, already registered
    Registered
    2017-05-10 · OVH sas
    Addresses
    213.186.33.5 · France · AS16276 OVH OVH SAS · OVH (cloud provider)
    OVH
    OVH (213.186.33.5): a cloud provider. It rents servers and addresses to its customers.
    MX
    mx4.mail.ovh.net
    mx3.mail.ovh.net
    Daily check
    Ended 2026-11-04 22:41 UTC
  15. microosftonline.com AU · AS133618 · Trellian Pty. LimitedLookalike of microsoftonline.com · two letters swapped
    Parking page · Above.comMX present
    DetailsHide details for microosftonline.com
    Domain
    microosftonline.com
    Spelling
    Spelled like microsoftonline.com with two letters swapped
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2017-05-05 · Dynadot Inc
    Addresses
    103.224.182.246 · Australia · AS133618 TRELLIAN-AS-AP - Trellian Pty. Limited · Trellian / Above.com (parking page)
    Parking page · Above.com
    The registry delegates microosftonline.com to Above.com’s nameservers, which answer for it. Above.com: a parking service. It answers for names that are typically for sale or unused. Trellian / Above.com (103.224.182.246): a parking service. It answers for names that are typically for sale or unused.
    MX
    park-mx.above.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  16. sharepoints.info US · AS396982 · Google LLC2 addressesLookalike of microsoft.com · an added character
    Google CloudMX present
    DetailsHide details for sharepoints.info
    Domain
    sharepoints.info
    Spelling
    Spelled like microsoft.com with an added character
    First found
    2026-11-01 · the day we first found it in the .info zone file, already registered
    Registered
    2017-04-10 · CSC Corporate Domains, Inc.
    Addresses
    34.110.155.89 · United States · AS396982 GOOGLE-CLOUD-PLATFORM - Google LLC · Google Cloud (cloud provider)
    2600:1901:0:84f4::80
    Google Cloud
    Google Cloud (34.110.155.89): a cloud provider. It rents servers and addresses to its customers.
    MX
    custmx.cscdns.net
    Daily check
    Ended 2026-11-04 22:41 UTC
  17. microsoftonline.live US · AS16509 · Amazon.com, Inc.2 addressesLookalike of microsoftonline.com · the ending .live
    Registry lookup queuedAmazon Web Services
    DetailsHide details for microsoftonline.live
    Domain
    microsoftonline.live
    Spelling
    The name of microsoftonline.com with the ending .live
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2017-04-09 · GoDaddy.com, LLC
    Addresses
    3.33.130.190 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    15.197.148.33 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (3.33.130.190, 15.197.148.33): a cloud provider. It rents servers and addresses to its customers.
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  18. microsoft.soyLookalike of microsoft.com · the ending .soy
    No address or mail server yet
    DetailsHide details for microsoft.soy
    Domain
    microsoft.soy
    Spelling
    The name of microsoft.com with the ending .soy
    First found
    2026-11-01 · the day the daily DNS check first found it registered
    Registered
    2017-03-27 · Squarespace Domains II LLC.
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  19. micros0ft.win US · AS13335 · Cloudflare, Inc.4 addressesLookalike of microsoft.com · similar-looking characters
    CloudflareMX present
    DetailsHide details for micros0ft.win
    Domain
    micros0ft.win
    Spelling
    Spelled like microsoft.com with similar-looking characters
    First found
    2026-11-01 · the day we first found it in the .win zone file, already registered
    Registered
    2017-03-16 · Porkbun
    Addresses
    104.21.54.67 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.136.58 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3032::ac43:883a
    2606:4700:3036::6815:3643
    Cloudflare
    Cloudflare (104.21.54.67, 172.67.136.58): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    MX
    _dc-mx.202d19d4f921.micros0ft.win
    _dc-mx.ef68f4f72fc3.micros0ft.win
    Daily check
    Ended 2026-11-04 22:41 UTC
  20. micosoft365.com AU · AS133618 · Trellian Pty. LimitedLookalike of microsoft365.com · a dropped letter
    Parking page · Above.comMX present
    DetailsHide details for micosoft365.com
    Domain
    micosoft365.com
    Spelling
    Spelled like microsoft365.com with a dropped letter
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2017-03-10 · Dynadot Inc
    Addresses
    103.224.212.113 · Australia · AS133618 TRELLIAN-AS-AP - Trellian Pty. Limited · Trellian / Above.com (parking page)
    Parking page · Above.com
    The registry delegates micosoft365.com to Above.com’s nameservers, which answer for it. Above.com: a parking service. It answers for names that are typically for sale or unused. Trellian / Above.com (103.224.212.113): a parking service. It answers for names that are typically for sale or unused.
    MX
    park-mx.above.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  21. microsoftoonline.com AU · AS133618 · Trellian Pty. LimitedLookalike of microsoftonline.com · a doubled letter
    Parking page · Above.comMX present
    DetailsHide details for microsoftoonline.com
    Domain
    microsoftoonline.com
    Spelling
    Spelled like microsoftonline.com with a doubled letter
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2017-01-22 · Dynadot Inc
    Addresses
    103.224.182.244 · Australia · AS133618 TRELLIAN-AS-AP - Trellian Pty. Limited · Trellian / Above.com (parking page)
    Parking page · Above.com
    The registry delegates microsoftoonline.com to Above.com’s nameservers, which answer for it. Above.com: a parking service. It answers for names that are typically for sale or unused. Trellian / Above.com (103.224.182.244): a parking service. It answers for names that are typically for sale or unused.
    MX
    park-mx.above.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  22. microsoft.topLookalike of microsoft.com · the ending .top
    No address or mail server yet
    DetailsHide details for microsoft.top
    Domain
    microsoft.top
    Spelling
    The name of microsoft.com with the ending .top
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2017-01-22 · 阿里云计算有限公司
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  23. micfosoft.com AU · AS133618 · Trellian Pty. LimitedLookalike of microsoft.com · a letter from a neighbouring key
    Parking page · Above.comMX present
    DetailsHide details for micfosoft.com
    Domain
    micfosoft.com
    Spelling
    Spelled like microsoft.com with a letter from a neighbouring key
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2017-01-20 · Dynadot Inc
    Addresses
    103.224.182.246 · Australia · AS133618 TRELLIAN-AS-AP - Trellian Pty. Limited · Trellian / Above.com (parking page)
    Parking page · Above.com
    The registry delegates micfosoft.com to Above.com’s nameservers, which answer for it. Above.com: a parking service. It answers for names that are typically for sale or unused. Trellian / Above.com (103.224.182.246): a parking service. It answers for names that are typically for sale or unused.
    MX
    park-mx.above.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  24. microsotfonline.com AU · AS133618 · Trellian Pty. LimitedLookalike of microsoftonline.com · two letters swapped
    Parking page · Above.comMX present
    DetailsHide details for microsotfonline.com
    Domain
    microsotfonline.com
    Spelling
    Spelled like microsoftonline.com with two letters swapped
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2017-01-15 · Dynadot Inc
    Addresses
    103.224.182.246 · Australia · AS133618 TRELLIAN-AS-AP - Trellian Pty. Limited · Trellian / Above.com (parking page)
    Parking page · Above.com
    The registry delegates microsotfonline.com to Above.com’s nameservers, which answer for it. Above.com: a parking service. It answers for names that are typically for sale or unused. Trellian / Above.com (103.224.182.246): a parking service. It answers for names that are typically for sale or unused.
    MX
    park-mx.above.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  25. mircosoft365.com SG · AS63949 · Akamai Connected Cloud8 addressesLookalike of microsoft365.com · two letters swapped
    Parking page · Shared parking pageMX present
    DetailsHide details for mircosoft365.com
    Domain
    mircosoft365.com
    Spelling
    Spelled like microsoft365.com with two letters swapped
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2016-11-30 · Above.com Pty Ltd.
    Addresses
    45.33.83.100 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Shared parking page (parking page)
    45.79.167.180 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Shared parking page (parking page)
    66.175.209.179 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Shared parking page (parking page)
    96.126.111.165 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Shared parking page (parking page)
    2600:3c03::f03c:95ff:fe00:29ca
    2600:3c03::f03c:95ff:fe91:5d52
    2600:3c03::f03c:95ff:feed:4d4f
    2600:3c03::f03c:95ff:feed:cf2a
    Parking page · Shared parking page
    Shared parking page (45.33.83.100, 45.79.167.180, 66.175.209.179, 96.126.111.165): a parking service. It answers for names that are typically for sale or unused.
    MX
    mail.mailerhost.net
    Daily check
    Ended 2026-11-04 22:41 UTC
  26. microsofto365.infoLookalike of microsoft.com · an added character
    MX present
    DetailsHide details for microsofto365.info
    Domain
    microsofto365.info
    Spelling
    Spelled like microsoft.com with an added character
    First found
    2026-11-01 · the day we first found it in the .info zone file, already registered
    Registered
    2016-11-15 · NameCheap, Inc.
    MX
    microsofto365-info.mail.protection.outlook.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  27. microsof365.com US · AS16509 · Amazon.com, Inc.2 addressesLookalike of microsoft365.com · a dropped letter
    Registry lookup queuedAmazon Web ServicesMX present
    DetailsHide details for microsof365.com
    Domain
    microsof365.com
    Spelling
    Spelled like microsoft365.com with a dropped letter
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2016-10-31 · GoDaddy.com, LLC
    Addresses
    3.33.130.190 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    15.197.148.33 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (3.33.130.190, 15.197.148.33): a cloud provider. It rents servers and addresses to its customers.
    MX
    smtp.secureserver.net
    mailstore1.secureserver.net
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  28. microsoft-365.com DE · AS8560 · IONOS-AS IONOS SE2 addressesLookalike of microsoft365.com · an added hyphen
    IONOSMX present
    DetailsHide details for microsoft-365.com
    Domain
    microsoft-365.com
    Spelling
    Spelled like microsoft365.com with an added hyphen
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2016-10-25 · IONOS SE
    Addresses
    217.160.0.77 · Germany · AS8560 IONOS-AS IONOS SE · IONOS (shared hosting)
    2001:8d8:100f:f000::200
    IONOS
    IONOS (217.160.0.77): shared web hosting and domain registration. One address typically serves many customer sites.
    MX
    microsoft365-com02c.mail.protection.outlook.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  29. 1microsoft.org US · AS16509 · Amazon.com, Inc.2 addressesLookalike of microsoft.com · an added character
    Registry lookup queuedAmazon Web ServicesMX present
    DetailsHide details for 1microsoft.org
    Domain
    1microsoft.org
    Spelling
    Spelled like microsoft.com with an added character
    First found
    2026-11-01 · the day we first found it in the .org zone file, already registered
    Registered
    2016-10-15 · Wild West Domains, LLC
    Addresses
    3.33.152.147 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    15.197.142.173 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (3.33.152.147, 15.197.142.173): a cloud provider. It rents servers and addresses to its customers.
    MX
    smtp.secureserver.net
    mailstore1.secureserver.net
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  30. 0utlook.org US · AS26347 · New Dream Network, LLCLookalike of outlook.com · similar-looking characters
    MX present
    DetailsHide details for 0utlook.org
    Domain
    0utlook.org
    Spelling
    Spelled like outlook.com with similar-looking characters
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2016-10-05 · DreamHost, LLC
    Addresses
    208.113.158.68 · United States · AS26347 DREAMHOST-AS - New Dream Network, LLC
    MX
    0utlook-org.mail.protection.outlook.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  31. onefrive.com VG · AS40034 · Confluence Networks IncLookalike of onedrive.com · a letter from a neighbouring key
    Parking page · Confluence Networks
    DetailsHide details for onefrive.com
    Domain
    onefrive.com
    Spelling
    Spelled like onedrive.com with a letter from a neighbouring key
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2016-08-10 · PDR Ltd. d/b/a PublicDomainRegistry.com
    Addresses
    199.191.50.184 · British Virgin Islands · AS40034 CONFLUENCE-NETWORK-INC - Confluence Networks Inc · Confluence Networks (parking page)
    Parking page · Confluence Networks
    Confluence Networks (199.191.50.184): a parking service. It answers for names that are typically for sale or unused.
    Daily check
    Ended 2026-11-04 22:41 UTC
  32. miciosoft.cloud IT · AS31034 · ARUBA-ASN Aruba S.p.A.6 addressesLookalike of microsoft.com · a changed character
    MX present
    DetailsHide details for miciosoft.cloud
    Domain
    miciosoft.cloud
    Spelling
    Spelled like microsoft.com with a changed character
    First found
    2026-11-01 · the day we first found it in the .cloud zone file, already registered
    Registered
    2016-05-24 · Tucows Domains Inc.
    Addresses
    62.149.128.151 · Italy · AS31034 ARUBA-ASN Aruba S.p.A.
    62.149.128.154 · Italy · AS31034 ARUBA-ASN Aruba S.p.A.
    62.149.128.157 · Italy · AS31034 ARUBA-ASN Aruba S.p.A.
    62.149.128.160 · Italy · AS31034 ARUBA-ASN Aruba S.p.A.
    62.149.128.163 · Italy · AS31034 ARUBA-ASN Aruba S.p.A.
    62.149.128.166 · Italy · AS31034 ARUBA-ASN Aruba S.p.A.
    MX
    mx.miciosoft.cloud
    Daily check
    Ended 2026-11-04 22:41 UTC
  33. outlook.vipLookalike of outlook.com · the ending .vip
    MX present
    DetailsHide details for outlook.vip
    Domain
    outlook.vip
    Spelling
    The name of outlook.com with the ending .vip
    First found
    2026-11-01 · the day the daily DNS check first found it registered
    Registered
    2016-05-17 · Cloudflare, Inc.
    MX
    mail.protonmail.ch
    mailsec.protonmail.ch
    Daily check
    Ended 2026-11-04 22:41 UTC
  34. hotmail.vip NL · AS20857 · TRANSIP-AS Signet B.V.Lookalike of hotmail.com · the ending .vip
    Parking page · Efty
    DetailsHide details for hotmail.vip
    Domain
    hotmail.vip
    Spelling
    The name of hotmail.com with the ending .vip
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2016-05-17 · West263 International Limited
    Addresses
    86.105.245.69 · Netherlands · AS20857 TRANSIP-AS Signet B.V. · Efty (parking page)
    Parking page · Efty
    Efty (86.105.245.69): a parking service. It answers for names that are typically for sale or unused.
    Daily check
    Ended 2026-11-04 22:41 UTC
  35. ms-office.cloud DE · AS3209 · VODANET Vodafone GmbHLookalike of microsoft.com · an added hyphen
    DetailsHide details for ms-office.cloud
    Domain
    ms-office.cloud
    Spelling
    Spelled like microsoft.com with an added hyphen
    First found
    2026-11-01 · the day we first found it in the .cloud zone file, already registered
    Registered
    2016-05-12 · InterNetX GmbH
    Addresses
    78.94.53.158 · Germany · AS3209 VODANET Vodafone GmbH
    Daily check
    Ended 2026-11-04 22:41 UTC
  36. hotmsil.frLookalike of hotmail.com · a letter from a neighbouring key
    MX present
    DetailsHide details for hotmsil.fr
    Domain
    hotmsil.fr
    Spelling
    Spelled like hotmail.com with a letter from a neighbouring key
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2016-04-26 · OVH
    MX
    reception01.mail-vert.fr
    Daily check
    Ended 2026-11-04 22:41 UTC
  37. office365.net.tw TW · AS18182 · Sony Network Taiwan LimitedLookalike of office365.com · the ending .net.tw
    DetailsHide details for office365.net.tw
    Domain
    office365.net.tw
    Spelling
    The name of office365.com with the ending .net.tw
    First found
    2026-11-01 · the day the daily DNS check first found it registered
    Registered
    2016-03-03 · Cloudmax Inc.
    Addresses
    219.85.73.66 · Taiwan · AS18182 SONET-TW - Sony Network Taiwan Limited
    Daily check
    Ended 2026-11-04 22:41 UTC
  38. microsoft-update.topLookalike of microsoft.com · the name with the word “update”
    No address or mail server yet
    DetailsHide details for microsoft-update.top
    Domain
    microsoft-update.top
    Spelling
    The name of microsoft.com with the word “update”
    First found
    2026-11-03 · the day we first found it in the .top zone file, already registered
    Registered
    2016-02-13 · 阿里云计算有限公司
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  39. outlook.cloudLookalike of outlook.com · the ending .cloud
    No address or mail server yet
    DetailsHide details for outlook.cloud
    Domain
    outlook.cloud
    Spelling
    The name of outlook.com with the ending .cloud
    First found
    2026-11-01 · the day the daily DNS check first found it registered
    Registered
    2016-02-11 · Cloudflare
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  40. microsoft.tattoo US · AS14618 · Amazon.com, Inc.Lookalike of microsoft.com · the ending .tattoo
    Amazon Web ServicesMX present
    DetailsHide details for microsoft.tattoo
    Domain
    microsoft.tattoo
    Spelling
    The name of microsoft.com with the ending .tattoo
    First found
    2026-11-01 · the day the daily DNS check first found it registered
    Registered
    2016-01-21 · Super Registry Ltd
    Addresses
    54.208.24.193 · United States · AS14618 AMAZON-AES - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (54.208.24.193): a cloud provider. It rents servers and addresses to its customers.
    MX
    cloud.mx.internic.ca
    Daily check
    Ended 2026-11-04 22:41 UTC
  41. mictosoftonline.com VG · AS40034 · Confluence Networks IncLookalike of microsoftonline.com · a letter from a neighbouring key
    Parking page · Confluence Networks
    DetailsHide details for mictosoftonline.com
    Domain
    mictosoftonline.com
    Spelling
    Spelled like microsoftonline.com with a letter from a neighbouring key
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2016-01-13 · PDR Ltd. d/b/a PublicDomainRegistry.com
    Addresses
    199.191.50.184 · British Virgin Islands · AS40034 CONFLUENCE-NETWORK-INC - Confluence Networks Inc · Confluence Networks (parking page)
    Parking page · Confluence Networks
    Confluence Networks (199.191.50.184): a parking service. It answers for names that are typically for sale or unused.
    Daily check
    Ended 2026-11-04 22:41 UTC
  42. cuentahotmail.org US · AS13335 · Cloudflare, Inc.4 addressesLookalike of microsoft.com · the name with an added word
    Cloudflare
    DetailsHide details for cuentahotmail.org
    Domain
    cuentahotmail.org
    Spelling
    The name of microsoft.com with an added word
    First found
    2026-11-01 · the day we first found it in the .org zone file, already registered
    Registered
    2015-12-01 · NameCheap, Inc.
    Addresses
    104.21.25.121 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.134.55 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3030::ac43:8637
    2606:4700:3034::6815:1979
    Cloudflare
    Cloudflare (104.21.25.121, 172.67.134.55): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  43. office365.xin CN · AS141679 · China Telecom Beijing Tianj…Lookalike of office365.com · the ending .xin
    DetailsHide details for office365.xin
    Domain
    office365.xin
    Spelling
    The name of office365.com with the ending .xin
    First found
    2026-11-01 · the day the daily DNS check first found it registered
    Registered
    2015-11-09 · Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)
    Addresses
    117.72.12.13 · China · AS141679 CHINATELECOM-IDC-BTHBD-AP - China Telecom Beijing Tianjin Hebei Big Data Industry Park Branch
    Daily check
    Ended 2026-11-04 22:41 UTC
  44. microsoftonlone.com AU · AS133618 · Trellian Pty. LimitedLookalike of microsoftonline.com · a letter from a neighbouring key
    Parking page · Above.comMX present
    DetailsHide details for microsoftonlone.com
    Domain
    microsoftonlone.com
    Spelling
    Spelled like microsoftonline.com with a letter from a neighbouring key
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2015-11-04 · Dynadot Inc
    Addresses
    103.224.182.246 · Australia · AS133618 TRELLIAN-AS-AP - Trellian Pty. Limited · Trellian / Above.com (parking page)
    Parking page · Above.com
    The registry delegates microsoftonlone.com to Above.com’s nameservers, which answer for it. Above.com: a parking service. It answers for names that are typically for sale or unused. Trellian / Above.com (103.224.182.246): a parking service. It answers for names that are typically for sale or unused.
    MX
    park-mx.above.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  45. outlook.live SG · AS63949 · Akamai Connected Cloud8 addressesLookalike of outlook.com · the ending .live
    Registry lookup queuedParking page · Shared parking page
    DetailsHide details for outlook.live
    Domain
    outlook.live
    Spelling
    The name of outlook.com with the ending .live
    First found
    2026-11-01 · the day the daily DNS check first found it registered
    Registered
    2015-10-28 · GoDaddy.com, LLC
    Addresses
    45.33.83.100 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Shared parking page (parking page)
    45.79.167.180 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Shared parking page (parking page)
    66.175.209.179 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Shared parking page (parking page)
    96.126.111.165 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Shared parking page (parking page)
    2600:3c03::f03c:95ff:fe00:29ca
    2600:3c03::f03c:95ff:fe91:5d52
    2600:3c03::f03c:95ff:feed:4d4f
    2600:3c03::f03c:95ff:feed:cf2a
    Parking page · Shared parking page
    Shared parking page (45.33.83.100, 45.79.167.180, 66.175.209.179, 96.126.111.165): a parking service. It answers for names that are typically for sale or unused.
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  46. microsoftupdate.onlineLookalike of microsoft.com · the name with an added word
    MX present
    DetailsHide details for microsoftupdate.online
    Domain
    microsoftupdate.online
    Spelling
    The name of microsoft.com with an added word
    First found
    2026-11-01 · the day we first found it in the .online zone file, already registered
    Registered
    2015-10-20 · 1API GmbH
    MX
    microsoftupdate-online.mail.protection.outlook.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  47. microsoftupdate.softwareLookalike of microsoft.com · the name with an added word
    No address or mail server yet
    DetailsHide details for microsoftupdate.software
    Domain
    microsoftupdate.software
    Spelling
    The name of microsoft.com with an added word
    First found
    2026-11-01 · the day we first found it in the .software zone file, already registered
    Registered
    2015-10-20 · 1API GmbH
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  48. hotmall.frLookalike of hotmail.com · similar-looking characters
    MX present
    DetailsHide details for hotmall.fr
    Domain
    hotmall.fr
    Spelling
    Spelled like hotmail.com with similar-looking characters
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2015-10-07 · OVH
    MX
    reception01.mail-vert.fr
    Daily check
    Ended 2026-11-04 22:41 UTC
  49. office365.ovh FR · AS16276 · OVH OVH SASLookalike of office365.com · the ending .ovh
    OVHMX present
    DetailsHide details for office365.ovh
    Domain
    office365.ovh
    Spelling
    The name of office365.com with the ending .ovh
    First found
    2026-11-01 · the day the daily DNS check first found it registered
    Registered
    2015-10-06 · OVH
    Addresses
    213.186.33.5 · France · AS16276 OVH OVH SAS · OVH (cloud provider)
    OVH
    OVH (213.186.33.5): a cloud provider. It rents servers and addresses to its customers.
    MX
    mx4.mail.ovh.net
    mx3.mail.ovh.net
    Daily check
    Ended 2026-11-04 22:41 UTC
  50. office365.amsterdamLookalike of office365.com · the ending .amsterdam
    No address or mail server yet
    DetailsHide details for office365.amsterdam
    Domain
    office365.amsterdam
    Spelling
    The name of office365.com with the ending .amsterdam
    First found
    2026-11-01 · the day the daily DNS check first found it registered
    Registered
    2015-09-04 · Registrar.eu
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  51. hotmail.ovh FR · AS16276 · OVH OVH SASLookalike of hotmail.com · the ending .ovh
    OVHMX present
    DetailsHide details for hotmail.ovh
    Domain
    hotmail.ovh
    Spelling
    The name of hotmail.com with the ending .ovh
    First found
    2026-11-01 · the day the daily DNS check first found it registered
    Registered
    2015-09-03 · OVH
    Addresses
    213.186.33.5 · France · AS16276 OVH OVH SAS · OVH (cloud provider)
    OVH
    OVH (213.186.33.5): a cloud provider. It rents servers and addresses to its customers.
    MX
    mx4.mail.ovh.net
    mx3.mail.ovh.net
    Daily check
    Ended 2026-11-04 22:41 UTC
  52. hotmail.online US · AS16509 · Amazon.com, Inc.2 addressesLookalike of hotmail.com · the ending .online
    Parking page · Afternic
    DetailsHide details for hotmail.online
    Domain
    hotmail.online
    Spelling
    The name of hotmail.com with the ending .online
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2015-08-26 · West263 International Limited
    Addresses
    13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    Parking page · Afternic
    The registry delegates hotmail.online to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
    Daily check
    Ended 2026-11-04 22:41 UTC
  53. microsoftonlin.com AU · AS133618 · Trellian Pty. LimitedLookalike of microsoftonline.com · a dropped letter
    Parking page · Above.comMX present
    DetailsHide details for microsoftonlin.com
    Domain
    microsoftonlin.com
    Spelling
    Spelled like microsoftonline.com with a dropped letter
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2015-07-09 · Alibaba Cloud Computing (Beijing) Co., Ltd.
    Addresses
    103.224.182.245 · Australia · AS133618 TRELLIAN-AS-AP - Trellian Pty. Limited · Trellian / Above.com (parking page)
    Parking page · Above.com
    The registry delegates microsoftonlin.com to Above.com’s nameservers, which answer for it. Above.com: a parking service. It answers for names that are typically for sale or unused. Trellian / Above.com (103.224.182.245): a parking service. It answers for names that are typically for sale or unused.
    MX
    park-mx.above.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  54. microsotonline.com AU · AS133618 · Trellian Pty. LimitedLookalike of microsoftonline.com · a dropped letter
    Parking page · Above.comMX present
    DetailsHide details for microsotonline.com
    Domain
    microsotonline.com
    Spelling
    Spelled like microsoftonline.com with a dropped letter
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2015-07-07 · Dynadot Inc
    Addresses
    103.224.212.115 · Australia · AS133618 TRELLIAN-AS-AP - Trellian Pty. Limited · Trellian / Above.com (parking page)
    Parking page · Above.com
    The registry delegates microsotonline.com to Above.com’s nameservers, which answer for it. Above.com: a parking service. It answers for names that are typically for sale or unused. Trellian / Above.com (103.224.212.115): a parking service. It answers for names that are typically for sale or unused.
    MX
    park-mx.above.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  55. xn--mcrosoft-c2a.com US · AS13335 · Cloudflare, Inc.4 addressesLookalike of microsoft.com · international characters, shown as mícrosoft.com
    Registry lookup queuedCloudflareMX present
    DetailsHide details for xn--mcrosoft-c2a.com
    Domain
    xn--mcrosoft-c2a.com
    Spelling
    Spelled like microsoft.com with international characters, shown as mícrosoft.com
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2015-06-15 · GoDaddy.com, LLC
    Addresses
    104.21.25.28 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.222.14 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3035::6815:191c
    2606:4700:3035::ac43:de0e
    Cloudflare
    Cloudflare (104.21.25.28, 172.67.222.14): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    MX
    smtp.secureserver.net
    mailstore1.secureserver.net
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  56. onesrive.com AU · AS133618 · Trellian Pty. LimitedLookalike of onedrive.com · a letter from a neighbouring key
    Registry lookup queuedParking page · Above.comMX present
    DetailsHide details for onesrive.com
    Domain
    onesrive.com
    Spelling
    Spelled like onedrive.com with a letter from a neighbouring key
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2015-06-09 · GoDaddy.com, LLC
    Addresses
    103.224.182.241 · Australia · AS133618 TRELLIAN-AS-AP - Trellian Pty. Limited · Trellian / Above.com (parking page)
    Parking page · Above.com
    The registry delegates onesrive.com to Above.com’s nameservers, which answer for it. Above.com: a parking service. It answers for names that are typically for sale or unused. Trellian / Above.com (103.224.182.241): a parking service. It answers for names that are typically for sale or unused.
    MX
    park-mx.above.com
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  57. office365support.org US · AS16509 · Amazon.com, Inc.2 addressesLookalike of microsoft.com · the name with an added word
    Registry lookup queuedAmazon Web ServicesMX present
    DetailsHide details for office365support.org
    Domain
    office365support.org
    Spelling
    The name of microsoft.com with an added word
    First found
    2026-11-01 · the day we first found it in the .org zone file, already registered
    Registered
    2015-04-27 · GoDaddy.com, LLC
    Addresses
    3.33.152.147 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    15.197.142.173 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (3.33.152.147, 15.197.142.173): a cloud provider. It rents servers and addresses to its customers.
    MX
    smtp.secureserver.net
    mailstore1.secureserver.net
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  58. onedribe.com AU · AS133618 · Trellian Pty. LimitedLookalike of onedrive.com · a letter from a neighbouring key
    Parking page · Above.comMX present
    DetailsHide details for onedribe.com
    Domain
    onedribe.com
    Spelling
    Spelled like onedrive.com with a letter from a neighbouring key
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2015-04-24 · Above.com Pty Ltd.
    Addresses
    103.224.182.253 · Australia · AS133618 TRELLIAN-AS-AP - Trellian Pty. Limited · Trellian / Above.com (parking page)
    Parking page · Above.com
    The registry delegates onedribe.com to Above.com’s nameservers, which answer for it. Above.com: a parking service. It answers for names that are typically for sale or unused. Trellian / Above.com (103.224.182.253): a parking service. It answers for names that are typically for sale or unused.
    MX
    park-mx.above.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  59. micrsoft365.com NL · AS60781 · LEASEWEB-NL-AMS-01 LeaseWeb…Lookalike of microsoft365.com · a dropped letter
    DetailsHide details for micrsoft365.com
    Domain
    micrsoft365.com
    Spelling
    Spelled like microsoft365.com with a dropped letter
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2015-04-03 · Gransy, s.r.o.
    Addresses
    212.32.254.35 · Netherlands · AS60781 LEASEWEB-NL-AMS-01 LeaseWeb Netherlands B.V.
    Daily check
    Ended 2026-11-04 22:41 UTC
  60. outlook.nrw DE · AS206996 · zap-hosting ZAP-Hosting GmbHLookalike of outlook.com · the ending .nrw
    MX present
    DetailsHide details for outlook.nrw
    Domain
    outlook.nrw
    Spelling
    The name of outlook.com with the ending .nrw
    First found
    2026-11-01 · the day the daily DNS check first found it registered
    Registered
    2015-03-29 · Vautron Rechenzentrum
    Addresses
    185.249.199.26 · Germany · AS206996 zap-hosting ZAP-Hosting GmbH
    MX
    toby-tec.de
    Daily check
    Ended 2026-11-04 22:41 UTC
  61. office365.scot CY · AS47583 · AS-HOSTINGER Hostinger Inte…4 addressesLookalike of office365.com · the ending .scot
    Hostinger CDNMX present
    DetailsHide details for office365.scot
    Domain
    office365.scot
    Spelling
    The name of office365.com with the ending .scot
    First found
    2026-11-01 · the day the daily DNS check first found it registered
    Registered
    2015-03-01 · Netim SARL
    Addresses
    88.223.87.177 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger CDN (cdn)
    147.79.72.186 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger CDN (cdn)
    2a02:4780:4b:1a90:a1a8:25e8:7917:4013
    2a02:4780:4c:ac23:e272:5f7f:7bb7:9857
    Hostinger CDN
    Hostinger CDN (88.223.87.177, 147.79.72.186): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    MX
    mx1.hostinger.com
    mx2.hostinger.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  62. microsoft365.cz CZ · AS206548 · TLAP-ZCOM ZCOM.cz s.r.oLookalike of microsoft365.com · the ending .cz
    MX present
    DetailsHide details for microsoft365.cz
    Domain
    microsoft365.cz
    Spelling
    The name of microsoft365.com with the ending .cz
    First found
    2026-10-31 · the day the daily DNS check first found it registered
    Registered
    2015-02-09 · INTERNET CZ, a.s.
    Addresses
    185.178.175.48 · Czechia · AS206548 TLAP-ZCOM ZCOM.cz s.r.o
    MX
    microsoft365-cz.mail.protection.outlook.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  63. officce365.com US · AS16509 · Amazon.com, Inc.2 addressesLookalike of office365.com · a doubled letter
    Amazon Web Services
    DetailsHide details for officce365.com
    Domain
    officce365.com
    Spelling
    Spelled like office365.com with a doubled letter
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2015-01-27 · Spaceship, Inc.
    Addresses
    44.232.173.249 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    52.40.42.113 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (44.232.173.249, 52.40.42.113): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  64. hotmal.frLookalike of hotmail.com · a dropped letter
    MX present
    DetailsHide details for hotmal.fr
    Domain
    hotmal.fr
    Spelling
    Spelled like hotmail.com with a dropped letter
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2015-01-05 · OVH
    MX
    reception01.mail-vert.fr
    Daily check
    Ended 2026-11-04 22:41 UTC
  65. office365.durban ZA · AS327979 · DIAMATRIX C.CLookalike of office365.com · the ending .durban
    DetailsHide details for office365.durban
    Domain
    office365.durban
    Spelling
    The name of office365.com with the ending .durban
    First found
    2026-11-01 · the day the daily DNS check first found it registered
    Registered
    2014-11-10 · DiaMatrix
    Addresses
    169.239.219.58 · South Africa · AS327979 DIAMATRIX C.C - DIAMATRIX C.C
    Daily check
    Ended 2026-11-04 22:41 UTC
  66. office365.joburg ZA · AS327979 · DIAMATRIX C.CLookalike of office365.com · the ending .joburg
    DetailsHide details for office365.joburg
    Domain
    office365.joburg
    Spelling
    The name of office365.com with the ending .joburg
    First found
    2026-11-01 · the day the daily DNS check first found it registered
    Registered
    2014-11-10 · DiaMatrix
    Addresses
    169.239.219.58 · South Africa · AS327979 DIAMATRIX C.C - DIAMATRIX C.C
    Daily check
    Ended 2026-11-04 22:41 UTC
  67. office365.cm SG · AS63949 · Akamai Connected Cloud8 addressesLookalike of office365.com · the ending .cm
    Parking page · Shared parking page
    DetailsHide details for office365.cm
    Domain
    office365.cm
    Spelling
    The name of office365.com with the ending .cm
    First found
    2026-11-01 · the day the daily DNS check first found it registered
    Registered
    2014-11-04 · Netcom.cm Sarl
    Addresses
    45.33.83.100 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Shared parking page (parking page)
    45.79.167.180 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Shared parking page (parking page)
    66.175.209.179 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Shared parking page (parking page)
    96.126.111.165 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Shared parking page (parking page)
    2600:3c03::f03c:95ff:fe00:29ca
    2600:3c03::f03c:95ff:fe91:5d52
    2600:3c03::f03c:95ff:feed:4d4f
    2600:3c03::f03c:95ff:feed:cf2a
    Parking page · Shared parking page
    Shared parking page (45.33.83.100, 45.79.167.180, 66.175.209.179, 96.126.111.165): a parking service. It answers for names that are typically for sale or unused.
    Daily check
    Ended 2026-11-04 22:41 UTC
  68. outlook.io US · AS16509 · Amazon.com, Inc.2 addressesLookalike of outlook.com · the ending .io
    Parking page · Afternic
    DetailsHide details for outlook.io
    Domain
    outlook.io
    Spelling
    The name of outlook.com with the ending .io
    First found
    2026-11-01 · the day the daily DNS check first found it registered
    Registered
    2014-10-28 · NameCheap, Inc.
    Addresses
    13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    Parking page · Afternic
    The registry delegates outlook.io to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
    Daily check
    Ended 2026-11-04 22:41 UTC
  69. outlook.uk US · AS16509 · Amazon.com, Inc.2 addressesLookalike of outlook.com · the ending .uk
    Amazon Web ServicesMX present
    DetailsHide details for outlook.uk
    Domain
    outlook.uk
    Spelling
    The name of outlook.com with the ending .uk
    First found
    2026-11-01 · the day the daily DNS check first found it registered
    Registered
    2014-09-24 · 123-Reg Limited t/a 123-reg
    Addresses
    3.33.251.168 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    15.197.225.128 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (3.33.251.168, 15.197.225.128): a cloud provider. It rents servers and addresses to its customers.
    MX
    uk.mx1.mailanyone.net
    uk.mx2.mx25.net
    uk.mx3.mailanyone.net
    uk.mx4.mx25.net
    Daily check
    Ended 2026-11-04 22:41 UTC
  70. hotmaio.frLookalike of hotmail.com · a letter from a neighbouring key
    MX present
    DetailsHide details for hotmaio.fr
    Domain
    hotmaio.fr
    Spelling
    Spelled like hotmail.com with a letter from a neighbouring key
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2014-09-19 · OVH
    MX
    reception01.mail-vert.fr
    Daily check
    Ended 2026-11-04 22:41 UTC
  71. onedrive.idLookalike of onedrive.com · the ending .id
    No address or mail server yet
    DetailsHide details for onedrive.id
    Domain
    onedrive.id
    Spelling
    The name of onedrive.com with the ending .id
    First found
    2026-11-01 · the day the daily DNS check first found it registered
    Registered
    2014-08-17 · PT Jagat Informasi Solusi (int)
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  72. micrrosoftonline.com US · AS16509 · Amazon.com, Inc.2 addressesLookalike of microsoftonline.com · a doubled letter
    Registry lookup queuedAmazon Web Services
    DetailsHide details for micrrosoftonline.com
    Domain
    micrrosoftonline.com
    Spelling
    Spelled like microsoftonline.com with a doubled letter
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2014-07-14 · GoDaddy.com, LLC
    Addresses
    3.33.130.190 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    15.197.148.33 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (3.33.130.190, 15.197.148.33): a cloud provider. It rents servers and addresses to its customers.
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  73. hotmail.pm FR · AS16276 · OVH OVH SASLookalike of hotmail.com · the ending .pm
    OVHMX present
    DetailsHide details for hotmail.pm
    Domain
    hotmail.pm
    Spelling
    The name of hotmail.com with the ending .pm
    First found
    2026-11-01 · the day the daily DNS check first found it registered
    Registered
    2014-06-23 · OVH
    Addresses
    213.186.33.5 · France · AS16276 OVH OVH SAS · OVH (cloud provider)
    OVH
    OVH (213.186.33.5): a cloud provider. It rents servers and addresses to its customers.
    MX
    mx.zoho.com
    mx2.zoho.com
    mx3.zoho.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  74. hotmqil.frLookalike of hotmail.com · a letter from a neighbouring key
    MX present
    DetailsHide details for hotmqil.fr
    Domain
    hotmqil.fr
    Spelling
    Spelled like hotmail.com with a letter from a neighbouring key
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2014-06-06 · OVH
    MX
    reception01.mail-vert.fr
    Daily check
    Ended 2026-11-04 22:41 UTC
  75. outlook.link US · AS16509 · Amazon.com, Inc.2 addressesLookalike of outlook.com · the ending .link
    Amazon Web Services
    DetailsHide details for outlook.link
    Domain
    outlook.link
    Spelling
    The name of outlook.com with the ending .link
    First found
    2026-11-01 · the day the daily DNS check first found it registered
    Registered
    2014-05-16 · 1API GmbH
    Addresses
    3.33.130.190 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    15.197.148.33 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (3.33.130.190, 15.197.148.33): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  76. office365.proLookalike of office365.com · the ending .pro
    MX present
    DetailsHide details for office365.pro
    Domain
    office365.pro
    Spelling
    The name of office365.com with the ending .pro
    First found
    2026-11-01 · the day the daily DNS check first found it registered
    Registered
    2014-05-15 · Dynadot Inc
    MX
    office365-pro.mail.protection.outlook.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  77. outlook.idLookalike of outlook.com · the ending .id
    No address or mail server yet
    DetailsHide details for outlook.id
    Domain
    outlook.id
    Spelling
    The name of outlook.com with the ending .id
    First found
    2026-11-01 · the day the daily DNS check first found it registered
    Registered
    2014-04-17 · PT Jagat Informasi Solusi (int)
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  78. microsoft.idLookalike of microsoft.com · the ending .id
    No address or mail server yet
    DetailsHide details for microsoft.id
    Domain
    microsoft.id
    Spelling
    The name of microsoft.com with the ending .id
    First found
    2026-11-01 · the day the daily DNS check first found it registered
    Registered
    2014-04-17 · PT Jagat Informasi Solusi (int)
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  79. hotmail.idLookalike of hotmail.com · the ending .id
    No address or mail server yet
    DetailsHide details for hotmail.id
    Domain
    hotmail.id
    Spelling
    The name of hotmail.com with the ending .id
    First found
    2026-11-01 · the day the daily DNS check first found it registered
    Registered
    2014-04-17 · PT Jagat Informasi Solusi (int)
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  80. hotmaail.co.uk SG · AS63949 · Akamai Connected Cloud8 addressesLookalike of hotmail.com · a doubled letter
    Parking page · Shared parking page
    DetailsHide details for hotmaail.co.uk
    Domain
    hotmaail.co.uk
    Spelling
    Spelled like hotmail.com with a doubled letter
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2014-03-20 · Key-Systems GmbH
    Addresses
    45.33.83.100 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Shared parking page (parking page)
    45.79.167.180 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Shared parking page (parking page)
    66.175.209.179 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Shared parking page (parking page)
    96.126.111.165 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Shared parking page (parking page)
    2600:3c03::f03c:95ff:fe00:29ca
    2600:3c03::f03c:95ff:fe91:5d52
    2600:3c03::f03c:95ff:feed:4d4f
    2600:3c03::f03c:95ff:feed:cf2a
    Parking page · Shared parking page
    Shared parking page (45.33.83.100, 45.79.167.180, 66.175.209.179, 96.126.111.165): a parking service. It answers for names that are typically for sale or unused.
    Daily check
    Ended 2026-11-04 22:41 UTC
  81. oneddrive.com DE · AS206834 · TEAMINTERNET-CA-AS Team Int…Lookalike of onedrive.com · a doubled letter
    Parking page · ParkingCrew (Team Internet)
    DetailsHide details for oneddrive.com
    Domain
    oneddrive.com
    Spelling
    Spelled like onedrive.com with a doubled letter
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2014-02-16 · Dynadot Inc
    Addresses
    185.53.179.128 · Germany · AS206834 TEAMINTERNET-CA-AS Team Internet AG · ParkingCrew (Team Internet) (parking page)
    Parking page · ParkingCrew (Team Internet)
    ParkingCrew (Team Internet) (185.53.179.128): a parking service. It answers for names that are typically for sale or unused.
    Daily check
    Ended 2026-11-04 22:41 UTC
  82. onedrivve.comLookalike of onedrive.com · a doubled letter
    No address or mail server yet
    DetailsHide details for onedrivve.com
    Domain
    onedrivve.com
    Spelling
    Spelled like onedrive.com with a doubled letter
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2014-02-16 · Porkbun LLC
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  83. onedrrive.com DE · AS206834 · TEAMINTERNET-CA-AS Team Int…Lookalike of onedrive.com · a doubled letter
    PhishDestroy CommunitySuspicious · mediumParking page · ParkingCrew (Team Internet)
    DetailsHide details for onedrrive.com
    Domain
    onedrrive.com
    Spelling
    Spelled like onedrive.com with a doubled letter
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2014-02-16 · Dynadot Inc
    Suspicious
    PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated medium: no address yet, or a parking or holding signal.
    PhishDestroy Community
    PhishDestroy’s community list includes sitemap.onedrrive.com, a name under this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
    Addresses
    185.53.179.128 · Germany · AS206834 TEAMINTERNET-CA-AS Team Internet AG · ParkingCrew (Team Internet) (parking page)
    Parking page · ParkingCrew (Team Internet)
    ParkingCrew (Team Internet) (185.53.179.128): a parking service. It answers for names that are typically for sale or unused.
    Daily check
    Ended 2026-11-04 22:41 UTC
  84. microsott.com US · AS16509 · Amazon.com, Inc.2 addressesLookalike of microsoft.com · a letter from a neighbouring key
    Parking page · Afternic
    DetailsHide details for microsott.com
    Domain
    microsott.com
    Spelling
    Spelled like microsoft.com with a letter from a neighbouring key
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2014-02-15 · Spaceship, Inc.
    Addresses
    13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    Parking page · Afternic
    The registry delegates microsott.com to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
    Daily check
    Ended 2026-11-04 22:41 UTC
  85. onedrivr.com SG · AS63949 · Akamai Connected Cloud8 addressesLookalike of onedrive.com · a letter from a neighbouring key
    Parking page · Shared parking page
    DetailsHide details for onedrivr.com
    Domain
    onedrivr.com
    Spelling
    Spelled like onedrive.com with a letter from a neighbouring key
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2014-01-27 · Sav.com, LLC
    Addresses
    45.33.83.100 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Shared parking page (parking page)
    45.79.167.180 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Shared parking page (parking page)
    66.175.209.179 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Shared parking page (parking page)
    96.126.111.165 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Shared parking page (parking page)
    2600:3c03::f03c:95ff:fe00:29ca
    2600:3c03::f03c:95ff:fe91:5d52
    2600:3c03::f03c:95ff:feed:4d4f
    2600:3c03::f03c:95ff:feed:cf2a
    Parking page · Shared parking page
    Shared parking page (45.33.83.100, 45.79.167.180, 66.175.209.179, 96.126.111.165): a parking service. It answers for names that are typically for sale or unused.
    Daily check
    Ended 2026-11-04 22:41 UTC
  86. onedrvie.com AU · AS133618 · Trellian Pty. LimitedLookalike of onedrive.com · two letters swapped
    Parking page · Above.comMX present
    DetailsHide details for onedrvie.com
    Domain
    onedrvie.com
    Spelling
    Spelled like onedrive.com with two letters swapped
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2014-01-27 · Spaceship, Inc.
    Addresses
    103.224.182.242 · Australia · AS133618 TRELLIAN-AS-AP - Trellian Pty. Limited · Trellian / Above.com (parking page)
    Parking page · Above.com
    The registry delegates onedrvie.com to Above.com’s nameservers, which answer for it. Above.com: a parking service. It answers for names that are typically for sale or unused. Trellian / Above.com (103.224.182.242): a parking service. It answers for names that are typically for sale or unused.
    MX
    park-mx.above.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  87. out1ook.comLookalike of outlook.com · similar-looking characters
    MX present
    DetailsHide details for out1ook.com
    Domain
    out1ook.com
    Spelling
    Spelled like outlook.com with similar-looking characters
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2014-01-24 · Name.com, Inc.
    MX
    mx.yandex.net
    Daily check
    Ended 2026-11-04 22:41 UTC
  88. officee365.com AU · AS154653 · ParkLogic Pty LtdLookalike of office365.com · a doubled letter
    Parking page · ParkLogicMX present
    DetailsHide details for officee365.com
    Domain
    officee365.com
    Spelling
    Spelled like office365.com with a doubled letter
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2013-12-15 · Dynadot Inc
    Addresses
    162.4.84.241 · Australia · AS154653 PARKLOGICPTYLTD-AS-AP - ParkLogic Pty Ltd · ParkLogic (parking page)
    Parking page · ParkLogic
    The registry delegates officee365.com to ParkLogic’s nameservers, which answer for it. ParkLogic (162.4.84.241): a parking service. It answers for names that are typically for sale or unused.
    MX
    mx156.hostedmxserver.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  89. tmsoffice.pro US · AS398101 · GoDaddy.com, LLCLookalike of microsoft.com · an added character
    Registry lookup queuedGoDaddyMX present
    DetailsHide details for tmsoffice.pro
    Domain
    tmsoffice.pro
    Spelling
    Spelled like microsoft.com with an added character
    First found
    2026-11-01 · the day we first found it in the .pro zone file, already registered
    Registered
    2013-11-18 · GoDaddy.com, LLC
    Addresses
    208.109.72.57 · United States · AS398101 GO-DADDY-COM-LLC - GoDaddy.com, LLC · GoDaddy (shared hosting)
    GoDaddy
    GoDaddy (208.109.72.57): shared web hosting and domain registration. One address typically serves many customer sites.
    MX
    mx1-us1.ppe-hosted.com
    mx2-us1.ppe-hosted.com
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  90. conedrive.info VG · AS40034 · Confluence Networks IncLookalike of microsoft.com · an added character
    Parking page · Confluence Networks
    DetailsHide details for conedrive.info
    Domain
    conedrive.info
    Spelling
    Spelled like microsoft.com with an added character
    First found
    2026-11-01 · the day we first found it in the .info zone file, already registered
    Registered
    2013-11-05 · Network Solutions, LLC
    Addresses
    208.91.197.27 · British Virgin Islands · AS40034 CONFLUENCE-NETWORK-INC - Confluence Networks Inc · Confluence Networks (parking page)
    Parking page · Confluence Networks
    Confluence Networks (208.91.197.27): a parking service. It answers for names that are typically for sale or unused.
    Daily check
    Ended 2026-11-04 22:41 UTC
  91. offie365.com SG · AS63949 · Akamai Connected Cloud8 addressesLookalike of office365.com · a dropped letter
    Parking page · Shared parking page
    DetailsHide details for offie365.com
    Domain
    offie365.com
    Spelling
    Spelled like office365.com with a dropped letter
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2013-07-07 · Dynadot Inc
    Addresses
    45.33.83.100 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Shared parking page (parking page)
    45.79.167.180 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Shared parking page (parking page)
    66.175.209.179 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Shared parking page (parking page)
    96.126.111.165 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Shared parking page (parking page)
    2600:3c03::f03c:95ff:fe00:29ca
    2600:3c03::f03c:95ff:fe91:5d52
    2600:3c03::f03c:95ff:feed:4d4f
    2600:3c03::f03c:95ff:feed:cf2a
    Parking page · Shared parking page
    Shared parking page (45.33.83.100, 45.79.167.180, 66.175.209.179, 96.126.111.165): a parking service. It answers for names that are typically for sale or unused.
    Daily check
    Ended 2026-11-04 22:41 UTC
  92. microsofronline.com AU · AS133618 · Trellian Pty. LimitedLookalike of microsoftonline.com · a letter from a neighbouring key
    Parking page · Above.comMX present
    DetailsHide details for microsofronline.com
    Domain
    microsofronline.com
    Spelling
    Spelled like microsoftonline.com with a letter from a neighbouring key
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2013-07-01 · Dynadot Inc
    Addresses
    103.224.212.107 · Australia · AS133618 TRELLIAN-AS-AP - Trellian Pty. Limited · Trellian / Above.com (parking page)
    Parking page · Above.com
    The registry delegates microsofronline.com to Above.com’s nameservers, which answer for it. Above.com: a parking service. It answers for names that are typically for sale or unused. Trellian / Above.com (103.224.212.107): a parking service. It answers for names that are typically for sale or unused.
    MX
    park-mx.above.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  93. microsoftonlien.com AU · AS133618 · Trellian Pty. LimitedLookalike of microsoftonline.com · two letters swapped
    Parking page · Above.comMX present
    DetailsHide details for microsoftonlien.com
    Domain
    microsoftonlien.com
    Spelling
    Spelled like microsoftonline.com with two letters swapped
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2013-07-01 · Dynadot Inc
    Addresses
    103.224.212.108 · Australia · AS133618 TRELLIAN-AS-AP - Trellian Pty. Limited · Trellian / Above.com (parking page)
    Parking page · Above.com
    The registry delegates microsoftonlien.com to Above.com’s nameservers, which answer for it. Above.com: a parking service. It answers for names that are typically for sale or unused. Trellian / Above.com (103.224.212.108): a parking service. It answers for names that are typically for sale or unused.
    MX
    park-mx.above.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  94. microsoftonnline.com AU · AS133618 · Trellian Pty. LimitedLookalike of microsoftonline.com · a doubled letter
    Parking page · Above.comMX present
    DetailsHide details for microsoftonnline.com
    Domain
    microsoftonnline.com
    Spelling
    Spelled like microsoftonline.com with a doubled letter
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2013-07-01 · Dynadot Inc
    Addresses
    103.224.212.112 · Australia · AS133618 TRELLIAN-AS-AP - Trellian Pty. Limited · Trellian / Above.com (parking page)
    Parking page · Above.com
    The registry delegates microsoftonnline.com to Above.com’s nameservers, which answer for it. Above.com: a parking service. It answers for names that are typically for sale or unused. Trellian / Above.com (103.224.212.112): a parking service. It answers for names that are typically for sale or unused.
    MX
    park-mx.above.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  95. offiice365.com SG · AS63949 · Akamai Connected Cloud8 addressesLookalike of office365.com · a doubled letter
    Parking page · Shared parking page
    DetailsHide details for offiice365.com
    Domain
    offiice365.com
    Spelling
    Spelled like office365.com with a doubled letter
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2013-03-16 · Name.com, Inc.
    Addresses
    45.33.83.100 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Shared parking page (parking page)
    45.79.167.180 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Shared parking page (parking page)
    66.175.209.179 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Shared parking page (parking page)
    96.126.111.165 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Shared parking page (parking page)
    2600:3c03::f03c:95ff:fe00:29ca
    2600:3c03::f03c:95ff:fe91:5d52
    2600:3c03::f03c:95ff:feed:4d4f
    2600:3c03::f03c:95ff:feed:cf2a
    Parking page · Shared parking page
    Shared parking page (45.33.83.100, 45.79.167.180, 66.175.209.179, 96.126.111.165): a parking service. It answers for names that are typically for sale or unused.
    Daily check
    Ended 2026-11-04 22:41 UTC
  96. pffice365.com AU · AS154653 · ParkLogic Pty LtdLookalike of office365.com · a letter from a neighbouring key
    Registry lookup queuedParking page · ParkLogicMX present
    DetailsHide details for pffice365.com
    Domain
    pffice365.com
    Spelling
    Spelled like office365.com with a letter from a neighbouring key
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2013-03-16 · GoDaddy.com, LLC
    Addresses
    162.4.84.215 · Australia · AS154653 PARKLOGICPTYLTD-AS-AP - ParkLogic Pty Ltd · ParkLogic (parking page)
    Parking page · ParkLogic
    The registry delegates pffice365.com to ParkLogic’s nameservers, which answer for it. ParkLogic (162.4.84.215): a parking service. It answers for names that are typically for sale or unused.
    MX
    mx156.hostedmxserver.com
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  97. offfice365.com SG · AS63949 · Akamai Connected Cloud8 addressesLookalike of office365.com · a doubled letter
    Parking page · Shared parking page
    DetailsHide details for offfice365.com
    Domain
    offfice365.com
    Spelling
    Spelled like office365.com with a doubled letter
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2013-03-05 · Spaceship, Inc.
    Addresses
    45.33.83.100 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Shared parking page (parking page)
    45.79.167.180 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Shared parking page (parking page)
    66.175.209.179 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Shared parking page (parking page)
    96.126.111.165 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Shared parking page (parking page)
    2600:3c03::f03c:95ff:fe00:29ca
    2600:3c03::f03c:95ff:fe91:5d52
    2600:3c03::f03c:95ff:feed:4d4f
    2600:3c03::f03c:95ff:feed:cf2a
    Parking page · Shared parking page
    Shared parking page (45.33.83.100, 45.79.167.180, 66.175.209.179, 96.126.111.165): a parking service. It answers for names that are typically for sale or unused.
    Daily check
    Ended 2026-11-04 22:41 UTC
  98. hotmaip.comLookalike of hotmail.com · a letter from a neighbouring key
    MX present
    DetailsHide details for hotmaip.com
    Domain
    hotmaip.com
    Spelling
    Spelled like hotmail.com with a letter from a neighbouring key
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2013-02-21 · OVH sas
    MX
    reception01.mail-vert.fr
    Daily check
    Ended 2026-11-04 22:41 UTC
  99. offcie365.com VG · AS40034 · Confluence Networks IncLookalike of office365.com · two letters swapped
    Parking page · Confluence Networks
    DetailsHide details for offcie365.com
    Domain
    offcie365.com
    Spelling
    Spelled like office365.com with two letters swapped
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2013-01-17 · PDR Ltd. d/b/a PublicDomainRegistry.com
    Addresses
    208.91.196.105 · British Virgin Islands · AS40034 CONFLUENCE-NETWORK-INC - Confluence Networks Inc · Confluence Networks (parking page)
    Parking page · Confluence Networks
    Confluence Networks (208.91.196.105): a parking service. It answers for names that are typically for sale or unused.
    Daily check
    Ended 2026-11-04 22:41 UTC
  100. hotmaii.frLookalike of hotmail.com · similar-looking characters
    MX present
    DetailsHide details for hotmaii.fr
    Domain
    hotmaii.fr
    Spelling
    Spelled like hotmail.com with similar-looking characters
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2012-12-26 · OVH
    MX
    reception01.mail-vert.fr
    Daily check
    Ended 2026-11-04 22:41 UTC

Registered domains using the name

Domains from registry zone files (ICANN CZDS), checked daily like the lookalikes above. Each row says how it matches Microsoft's names. Resellers, fans and other businesses register names like these too. Our zone data terms apply to them.

100 of 808 shown: listed ones first, then the newest registrations.

  1. sharepoint365.support KN · AS402253 · SKN Subnet & Telecom LtdContains “sharepoint”
    Address on Spamhaus DROP
    DetailsHide details for sharepoint365.support
    Domain
    sharepoint365.support
    Match
    A new registration containing “sharepoint”, one of the names we match for Microsoft
    First found
    2026-11-05 · the day the .support zone file first listed it as a new registration
    Registered
    2026-11-04 · Spaceship, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on Spamhaus DROP
    104.251.180.138 is on Spamhaus DROP · sharepoint365.support resolved to it 2026-11-05 05:11 UTC
    Addresses
    104.251.180.138 · St. Kitts & Nevis · AS402253 SKN-NETWORK-1 - SKN Subnet & Telecom Ltd
    Daily check
    Ended 2026-11-04 22:41 UTC
  2. cdn-microsoft.top SG · AS63949 · Akamai Connected Cloud3 addressesContains “microsoft”
    2 addresses on DomainSpoof’s phishing-host listAkamai Linode
    DetailsHide details for cdn-microsoft.top
    Domain
    cdn-microsoft.top
    Match
    A new registration containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-05 · the day the .top zone file first listed it as a new registration
    Registered
    2026-11-04 · NameSilo,LLC
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    2 addresses on DomainSpoof’s phishing-host list
    172.232.24.161 (cdn-microsoft.top resolved to it 2026-11-05 04:17 UTC), 172.232.24.235 (cdn-microsoft.top resolved to it 2026-11-05 04:17 UTC) are on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours
    Addresses
    45.79.154.26 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    172.232.24.161 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    172.232.24.235 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    Akamai Linode
    Akamai Linode (45.79.154.26, 172.232.24.161, 172.232.24.235): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  3. microsoftoffice365.top SG · AS63949 · Akamai Connected Cloud3 addressesContains “microsoft”
    Listed by MetaMask3 addresses on DomainSpoof’s phishing-host listAkamai Linode
    DetailsHide details for microsoftoffice365.top
    Domain
    microsoftoffice365.top
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-03 · the day we first found it in the .top zone file, already registered
    Registered
    2026-10-30 · NameSilo,LLC
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Listed by MetaMask
    Listed by MetaMask · microsoftoffice365.top · in the feed since 2026-11-01 11:44 UTC
    3 addresses on DomainSpoof’s phishing-host list
    172.232.24.161 (microsoftoffice365.top resolved to it 2026-11-05 00:46 UTC), 172.232.24.235 (microsoftoffice365.top resolved to it 2026-11-05 00:46 UTC), 172.234.25.42 (microsoftoffice365.top resolved to it 2026-11-05 00:46 UTC) are on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours
    Addresses
    172.232.24.161 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    172.232.24.235 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    172.234.25.42 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    Akamai Linode
    Akamai Linode (172.232.24.161, 172.232.24.235, 172.234.25.42): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  4. onedrive-sync.top SG · AS63949 · Akamai Connected Cloud3 addressesContains “onedrive”
    3 addresses on DomainSpoof’s phishing-host listAkamai Linode
    DetailsHide details for onedrive-sync.top
    Domain
    onedrive-sync.top
    Match
    A domain containing “onedrive”, one of the names we match for Microsoft
    First found
    2026-11-03 · the day we first found it in the .top zone file, already registered
    Registered
    2026-10-29 · NameSilo,LLC
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    3 addresses on DomainSpoof’s phishing-host list
    172.232.24.161 (onedrive-sync.top resolved to it 2026-11-05 00:46 UTC), 172.232.24.235 (onedrive-sync.top resolved to it 2026-11-05 00:46 UTC), 172.234.25.42 (onedrive-sync.top resolved to it 2026-11-05 00:46 UTC) are on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours
    Addresses
    172.232.24.161 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    172.232.24.235 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    172.234.25.42 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    Akamai Linode
    Akamai Linode (172.232.24.161, 172.232.24.235, 172.234.25.42): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  5. microsoftsupp.info RU · AS209207 · DHOST-AS Digital Hosting Pr…Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide details for microsoftsupp.info
    Domain
    microsoftsupp.info
    Match
    A registered domain containing “microsoft”, one of the names we match for Microsoft
    Zone file copy
    2026-10-31 · the day of the .info zone file copy it was found in
    Registered
    2026-10-22 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    168.113.215.244 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoftsupp.info resolved to it 2026-11-05 00:46 UTC
    Addresses
    168.113.215.244 · Russia · AS209207 DHOST-AS Digital Hosting Provider LLC
    Daily check
    Ended 2026-11-04 22:41 UTC
  6. microsoft-office.topContains “microsoft”
    Listed by MetaMaskNo address or mail server yet
    DetailsHide details for microsoft-office.top
    Domain
    microsoft-office.top
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-03 · the day we first found it in the .top zone file, already registered
    Registered
    2026-10-18 · West263 International Limited
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Listed by MetaMask
    Listed by MetaMask · microsoft-office.top · in the feed since 2026-10-27 05:34 UTC
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  7. microsoftsharefile.topContains “microsoft”
    Listed by MetaMaskNo address or mail server yet
    DetailsHide details for microsoftsharefile.top
    Domain
    microsoftsharefile.top
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-03 · the day we first found it in the .top zone file, already registered
    Registered
    2026-10-18 · NameSilo,LLC
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Listed by MetaMask
    Listed by MetaMask · microsoftsharefile.top · in the feed since 2026-10-27 05:34 UTC
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  8. microsoftsharefile1.topContains “microsoft”
    Listed by MetaMaskNo address or mail server yet
    DetailsHide details for microsoftsharefile1.top
    Domain
    microsoftsharefile1.top
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-03 · the day we first found it in the .top zone file, already registered
    Registered
    2026-10-18 · NameSilo,LLC
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Listed by MetaMask
    Listed by MetaMask · microsoftsharefile1.top · in the feed since 2026-10-27 05:34 UTC
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  9. microsoftes.liveContains “microsoft”
    Listed by MetaMaskNo address or mail server yet
    DetailsHide details for microsoftes.live
    Domain
    microsoftes.live
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .live zone file, already registered
    Registered
    2026-10-06 · Dynadot Inc
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Listed by MetaMask
    Listed by MetaMask · microsoftes.live · in the feed since 2026-10-27 05:34 UTC
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  10. microsoft-teams.sbs US · AS13335 · Cloudflare, Inc.4 addressesContains “microsoft”
    Listed by MetaMaskCloudflare
    DetailsHide details for microsoft-teams.sbs
    Domain
    microsoft-teams.sbs
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .sbs zone file, already registered
    Registered
    2026-10-03 · Dynadot Inc
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Listed by MetaMask
    Listed by MetaMask · microsoft-teams.sbs · in the feed since 2026-10-27 05:34 UTC
    Addresses
    104.21.32.178 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.153.49 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3036::ac43:9931
    2606:4700:3037::6815:20b2
    Cloudflare
    Cloudflare (104.21.32.178, 172.67.153.49): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  11. microsoft-office365.site US · AS13335 · Cloudflare, Inc.4 addressesContains “microsoft”
    Listed by MetaMaskReported by PhishDestroyCloudflareMX present
    DetailsHide details for microsoft-office365.site
    Domain
    microsoft-office365.site
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .site zone file, already registered
    Registered
    2026-09-26 · Cloudflare, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Listed by MetaMask
    Listed by MetaMask · microsoft-office365.site · in the feed since 2026-10-27 05:34 UTC
    Reported by PhishDestroy
    Reported by PhishDestroy · microsoft-office365.site · in the feed since 2026-10-25 23:31 UTC
    Addresses
    104.21.16.197 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.215.149 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3034::ac43:d795
    2606:4700:3035::6815:10c5
    Cloudflare
    Cloudflare (104.21.16.197, 172.67.215.149): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    MX
    mx01.mail.icloud.com
    mx02.mail.icloud.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  12. microsoft-onedrive.org SG · AS63949 · Akamai Connected CloudContains “microsoft”
    Listed by MetaMaskAkamai Linode
    DetailsHide details for microsoft-onedrive.org
    Domain
    microsoft-onedrive.org
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .org zone file, already registered
    Registered
    2026-09-25 · Squarespace Domains LLC
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Listed by MetaMask
    Listed by MetaMask · microsoft-onedrive.org · in the feed since 2026-10-27 05:34 UTC
    Addresses
    74.207.228.73 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    Akamai Linode
    Akamai Linode (74.207.228.73): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  13. microsoft-edge.download IS · AS50613 · ThorDC-AS Advania Island ehfContains “microsoft”
    Address on DomainSpoof’s phishing-host listMX present
    DetailsHide details for microsoft-edge.download
    Domain
    microsoft-edge.download
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .download zone file, already registered
    Registered
    2026-09-23 · TLD Registrar Solutions Ltd.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    82.221.136.24 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-edge.download resolved to it 2026-11-05 00:46 UTC
    Addresses
    82.221.136.24 · Iceland · AS50613 ThorDC-AS Advania Island ehf
    MX
    mx1.sf.ice-networks.com
    mx2.sf.ice-networks.com
    mx3.sf.ice-networks.com
    mx4.sf.ice-networks.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  14. office-365.shop DE · AS8560 · IONOS-AS IONOS SE2 addressesContains “office-365”
    Address on DomainSpoof’s phishing-host listIONOSMX present
    DetailsHide details for office-365.shop
    Domain
    office-365.shop
    Match
    A registered domain containing “office-365”, one of the names we match for Microsoft
    Zone file copy
    2026-10-31 · the day of the .shop zone file copy it was found in
    Registered
    2026-09-22 · IONOS SE
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    217.160.0.115 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · office-365.shop resolved to it 2026-11-05 00:46 UTC
    Addresses
    217.160.0.115 · Germany · AS8560 IONOS-AS IONOS SE · IONOS (shared hosting)
    2001:8d8:100f:f000::200
    IONOS
    IONOS (217.160.0.115): shared web hosting and domain registration. One address typically serves many customer sites.
    MX
    mail.protonmail.ch
    mailsec.protonmail.ch
    Daily check
    Ended 2026-11-04 22:41 UTC
  15. microsoft-teams.sarlContains “microsoft”
    Listed by MetaMaskNo address or mail server yet
    DetailsHide details for microsoft-teams.sarl
    Domain
    microsoft-teams.sarl
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .sarl zone file, already registered
    Registered
    2026-09-19 · Cloudflare, Inc
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Listed by MetaMask
    Listed by MetaMask · microsoft-teams.sarl · in the feed since 2026-10-27 05:34 UTC
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  16. microsoft-meet.live PA · AS64107 · RACK SPHERE HOSTING S.A.Contains “microsoft”
    Listed by MetaMask
    DetailsHide details for microsoft-meet.live
    Domain
    microsoft-meet.live
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .live zone file, already registered
    Registered
    2026-09-15 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Listed by MetaMask
    Listed by MetaMask · microsoft-meet.live · in the feed since 2026-10-27 05:34 UTC
    Addresses
    45.225.135.67 · Panama · AS64107 AS64107 - RACK SPHERE HOSTING S.A.
    Daily check
    Ended 2026-11-04 22:41 UTC
  17. microsoft-cedar-technologies.click SG · AS63949 · Akamai Connected Cloud3 addressesContains “microsoft”
    3 addresses on DomainSpoof’s phishing-host listAkamai Linode
    DetailsHide details for microsoft-cedar-technologies.click
    Domain
    microsoft-cedar-technologies.click
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .click zone file, already registered
    Registered
    2026-08-21 · NameSilo, LLC
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    3 addresses on DomainSpoof’s phishing-host list
    172.232.24.161 (microsoft-cedar-technologies.click resolved to it 2026-11-05 00:46 UTC), 172.232.24.235 (microsoft-cedar-technologies.click resolved to it 2026-11-05 00:46 UTC), 172.234.25.42 (microsoft-cedar-technologies.click resolved to it 2026-11-05 00:46 UTC) are on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours
    Addresses
    172.232.24.161 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    172.232.24.235 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    172.234.25.42 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    Akamai Linode
    Akamai Linode (172.232.24.161, 172.232.24.235, 172.234.25.42): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  18. com-onedrive.live US · AS13335 · Cloudflare, Inc.4 addressesContains “onedrive”
    Listed by MetaMaskCloudflare
    DetailsHide details for com-onedrive.live
    Domain
    com-onedrive.live
    Match
    A domain containing “onedrive”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .live zone file, already registered
    Registered
    2026-08-16 · Cloudflare, Inc
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Listed by MetaMask
    Listed by MetaMask · com-onedrive.live · in the feed since 2026-10-27 05:34 UTC
    Addresses
    104.21.33.172 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.165.13 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3034::6815:21ac
    2606:4700:3036::ac43:a50d
    Cloudflare
    Cloudflare (104.21.33.172, 172.67.165.13): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  19. microsoft3.sbsContains “microsoft”
    Listed by MetaMaskNo address or mail server yet
    DetailsHide details for microsoft3.sbs
    Domain
    microsoft3.sbs
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .sbs zone file, already registered
    Registered
    2026-08-07 · NameSilo, LLC
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Listed by MetaMask
    Listed by MetaMask · microsoft3.sbs · in the feed since 2026-10-27 05:34 UTC
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  20. microsoftonline-sharepoint-com.live US · AS13335 · Cloudflare, Inc.4 addressesContains “microsoftonline”
    Listed by MetaMaskCloudflare
    DetailsHide details for microsoftonline-sharepoint-com.live
    Domain
    microsoftonline-sharepoint-com.live
    Match
    A domain containing “microsoftonline”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .live zone file, already registered
    Registered
    2026-08-07 · Cloudflare, Inc
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Listed by MetaMask
    Listed by MetaMask · microsoftonline-sharepoint-com.live · in the feed since 2026-10-27 05:34 UTC
    Addresses
    104.21.51.191 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.184.169 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::6815:33bf
    2606:4700:3032::ac43:b8a9
    Cloudflare
    Cloudflare (104.21.51.191, 172.67.184.169): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  21. microsoftonline-sharepoint.online US · AS14061 · DigitalOcean, LLCContains “microsoftonline”
    Listed by MetaMaskDigitalOcean
    DetailsHide details for microsoftonline-sharepoint.online
    Domain
    microsoftonline-sharepoint.online
    Match
    A domain containing “microsoftonline”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .online zone file, already registered
    Registered
    2026-07-27 · Cloudflare, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Listed by MetaMask
    Listed by MetaMask · microsoftonline-sharepoint.online · in the feed since 2026-10-27 05:34 UTC
    Addresses
    178.62.99.223 · United States · AS14061 DIGITALOCEAN-ASN - DigitalOcean, LLC · DigitalOcean (cloud provider)
    DigitalOcean
    DigitalOcean (178.62.99.223): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  22. office365microsoft.help SG · AS63949 · Akamai Connected Cloud3 addressesContains “microsoft”
    3 addresses on DomainSpoof’s phishing-host listAkamai LinodeMX present
    DetailsHide details for office365microsoft.help
    Domain
    office365microsoft.help
    Match
    A registered domain containing “microsoft”, one of the names we match for Microsoft
    Zone file copy
    2026-10-31 · the day of the .help zone file copy it was found in
    Registered
    2026-07-26 · NameSilo, LLC
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    3 addresses on DomainSpoof’s phishing-host list
    172.232.24.161 (office365microsoft.help resolved to it 2026-11-05 00:46 UTC), 172.232.24.235 (office365microsoft.help resolved to it 2026-11-05 00:46 UTC), 172.234.25.42 (office365microsoft.help resolved to it 2026-11-05 00:46 UTC) are on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours
    Addresses
    172.232.24.161 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    172.232.24.235 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    172.234.25.42 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    Akamai Linode
    Akamai Linode (172.232.24.161, 172.232.24.235, 172.234.25.42): a cloud provider. It rents servers and addresses to its customers.
    MX
    mx1.titan.email
    mx2.titan.email
    Daily check
    Ended 2026-11-04 22:41 UTC
  23. msoffice.email CY · AS47583 · AS-HOSTINGER Hostinger Inte…Contains “msoffice”
    Address on DomainSpoof’s phishing-host listHostinger
    DetailsHide details for msoffice.email
    Domain
    msoffice.email
    Match
    A domain containing “msoffice”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .email zone file, already registered
    Registered
    2026-07-24 · HOSTINGER operations, UAB
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · msoffice.email resolved to it 2026-11-05 00:46 UTC
    Addresses
    2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
    Daily check
    Ended 2026-11-04 22:41 UTC
  24. msoffice.live CY · AS47583 · AS-HOSTINGER Hostinger Inte…Contains “msoffice”
    Address on DomainSpoof’s phishing-host listHostinger
    DetailsHide details for msoffice.live
    Domain
    msoffice.live
    Match
    A registered domain containing “msoffice”, one of the names we match for Microsoft
    Zone file copy
    2026-10-31 · the day of the .live zone file copy it was found in
    Registered
    2026-07-24 · HOSTINGER operations, UAB
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · msoffice.live resolved to it 2026-11-05 00:46 UTC
    Addresses
    2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
    Daily check
    Ended 2026-11-04 22:41 UTC
  25. microsoftonline-outlook.live US · AS13335 · Cloudflare, Inc.4 addressesContains “microsoftonline”
    Listed by MetaMaskCloudflare
    DetailsHide details for microsoftonline-outlook.live
    Domain
    microsoftonline-outlook.live
    Match
    A domain containing “microsoftonline”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .live zone file, already registered
    Registered
    2026-07-17 · Cloudflare, Inc
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Listed by MetaMask
    Listed by MetaMask · microsoftonline-outlook.live · in the feed since 2026-10-27 05:34 UTC
    Addresses
    104.21.24.65 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.217.82 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3030::6815:1841
    2606:4700:3031::ac43:d952
    Cloudflare
    Cloudflare (104.21.24.65, 172.67.217.82): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  26. onmicrosoftfolder.sbs SG · AS63949 · Akamai Connected Cloud3 addressesContains “microsoft”
    3 addresses on DomainSpoof’s phishing-host listAkamai Linode
    DetailsHide details for onmicrosoftfolder.sbs
    Domain
    onmicrosoftfolder.sbs
    Match
    A registered domain containing “microsoft”, one of the names we match for Microsoft
    Zone file copy
    2026-10-31 · the day of the .sbs zone file copy it was found in
    Registered
    2026-07-08 · NameSilo, LLC
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    3 addresses on DomainSpoof’s phishing-host list
    172.232.24.161 (onmicrosoftfolder.sbs resolved to it 2026-11-05 00:46 UTC), 172.232.24.235 (onmicrosoftfolder.sbs resolved to it 2026-11-05 00:46 UTC), 172.234.25.42 (onmicrosoftfolder.sbs resolved to it 2026-11-05 00:46 UTC) are on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours
    Addresses
    172.232.24.161 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    172.232.24.235 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    172.234.25.42 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    Akamai Linode
    Akamai Linode (172.232.24.161, 172.232.24.235, 172.234.25.42): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  27. microsoftprada.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide details for microsoftprada.xyz
    Domain
    microsoftprada.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-07-04 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoftprada.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  28. microsoftcisco.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide details for microsoftcisco.xyz
    Domain
    microsoftcisco.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-07-02 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoftcisco.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  29. microsoftinstagram.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide details for microsoftinstagram.xyz
    Domain
    microsoftinstagram.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-07-02 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoftinstagram.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  30. microsofttencent.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide details for microsofttencent.xyz
    Domain
    microsofttencent.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-07-02 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsofttencent.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  31. hsbc-microsoft.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide details for hsbc-microsoft.xyz
    Domain
    hsbc-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-29 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · hsbc-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  32. ibm-microsoft.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide details for ibm-microsoft.xyz
    Domain
    ibm-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-29 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · ibm-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  33. microsoft-bmw.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide details for microsoft-bmw.xyz
    Domain
    microsoft-bmw.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-29 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-bmw.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  34. microsoft-fedex.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide details for microsoft-fedex.xyz
    Domain
    microsoft-fedex.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-29 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-fedex.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  35. microsoft-nintendo.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide details for microsoft-nintendo.xyz
    Domain
    microsoft-nintendo.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-29 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-nintendo.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  36. microsoft-puma.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide details for microsoft-puma.xyz
    Domain
    microsoft-puma.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-29 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-puma.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  37. microsoft-sap.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide details for microsoft-sap.xyz
    Domain
    microsoft-sap.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-29 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-sap.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  38. microsoft-target.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide details for microsoft-target.xyz
    Domain
    microsoft-target.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-29 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-target.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  39. microsoft-volkswagen.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide details for microsoft-volkswagen.xyz
    Domain
    microsoft-volkswagen.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-29 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-volkswagen.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  40. nintendo-microsoft.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide details for nintendo-microsoft.xyz
    Domain
    nintendo-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-29 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · nintendo-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  41. cisco-microsoft.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide details for cisco-microsoft.xyz
    Domain
    cisco-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-28 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · cisco-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  42. hermes-microsoft.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide details for hermes-microsoft.xyz
    Domain
    hermes-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-28 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · hermes-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  43. kia-microsoft.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide details for kia-microsoft.xyz
    Domain
    kia-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-28 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · kia-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  44. microsoft-amazon.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide details for microsoft-amazon.xyz
    Domain
    microsoft-amazon.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-28 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-amazon.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  45. microsoft-hyundai.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide details for microsoft-hyundai.xyz
    Domain
    microsoft-hyundai.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-28 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-hyundai.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  46. microsoft-nescafe.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide details for microsoft-nescafe.xyz
    Domain
    microsoft-nescafe.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-28 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-nescafe.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  47. microsoft-pepsi.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide details for microsoft-pepsi.xyz
    Domain
    microsoft-pepsi.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-28 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-pepsi.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  48. microsoft-starbucks.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide details for microsoft-starbucks.xyz
    Domain
    microsoft-starbucks.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-28 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-starbucks.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  49. microsoft-zara.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide details for microsoft-zara.xyz
    Domain
    microsoft-zara.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-28 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-zara.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  50. paypal-microsoft.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide details for paypal-microsoft.xyz
    Domain
    paypal-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-28 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · paypal-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  51. prada-microsoft.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide details for prada-microsoft.xyz
    Domain
    prada-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-28 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · prada-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  52. gillette-microsoft.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide details for gillette-microsoft.xyz
    Domain
    gillette-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-27 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · gillette-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  53. microsoft-netflix.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide details for microsoft-netflix.xyz
    Domain
    microsoft-netflix.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-27 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-netflix.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  54. tencent-microsoft.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide details for tencent-microsoft.xyz
    Domain
    tencent-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-27 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · tencent-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  55. totalenergies-microsoft.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide details for totalenergies-microsoft.xyz
    Domain
    totalenergies-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-27 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · totalenergies-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  56. sap-microsoft.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide details for sap-microsoft.xyz
    Domain
    sap-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-26 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · sap-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  57. sharepoint.tips DE · AS212317 · HETZNER-CLOUD3-AS Hetzner O…14 addressesContains “sharepoint”
    5 addresses on DomainSpoof’s phishing-host listHetzner +1
    DetailsHide details for sharepoint.tips
    Domain
    sharepoint.tips
    Match
    A domain containing “sharepoint”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .tips zone file, already registered
    Registered
    2026-06-15 · Domain Science Kutatási Szolgáltató Korlátolt Felelősségű Társaság
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    5 addresses on DomainSpoof’s phishing-host list
    195.201.128.179 (sharepoint.tips resolved to it 2026-11-05 00:46 UTC), 46.62.237.138 (sharepoint.tips resolved to it 2026-11-05 00:46 UTC), 5.161.230.87 (sharepoint.tips resolved to it 2026-11-05 00:46 UTC), 5.161.47.86 (sharepoint.tips resolved to it 2026-11-05 00:46 UTC), 5.78.156.59 (sharepoint.tips resolved to it 2026-11-05 00:46 UTC) are on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours
    Addresses
    5.78.156.59 · Germany · AS212317 HETZNER-CLOUD3-AS Hetzner Online GmbH
    5.161.47.86 · Germany · AS213230 HETZNER-CLOUD2-AS Hetzner Online GmbH
    5.161.230.87 · Germany · AS213230 HETZNER-CLOUD2-AS Hetzner Online GmbH
    46.62.237.138 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    76.223.91.20 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    195.201.128.179 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    2406:da1e:214:c901:49:871:e9e1:eb92
    2600:1f1c:6db:8801:ca20:5f5a:5f45:48d0
    2a05:d014:179b:c400:b5e:feaf:a6dc:b508
    2a05:d014:179b:c400:2dc9:16fd:7cbd:e255
    2a05:d014:179b:c400:5ed8:1db0:4443:ca25
    2a05:d014:179b:c400:a327:40ee:24cc:6180
    2a05:d014:179b:c400:aa99:a226:6c94:e72
    2a05:d014:179b:c400:adda:f567:8e83:5e24
    Hetzner +1
    Hetzner (46.62.237.138, 195.201.128.179): a cloud provider. It rents servers and addresses to its customers. Amazon Web Services (76.223.91.20): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  58. microsoft-ai-claude.top DE · AS47846 · SEDO-AS SEDO GmbHContains “microsoft”
    Listed by MetaMaskParking page · Sedo
    DetailsHide details for microsoft-ai-claude.top
    Domain
    microsoft-ai-claude.top
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-03 · the day we first found it in the .top zone file, already registered
    Registered
    2026-05-29 · NameSilo,LLC
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Listed by MetaMask
    Listed by MetaMask · microsoft-ai-claude.top · in the feed since 2026-10-27 05:34 UTC
    Addresses
    91.195.240.123 · Germany · AS47846 SEDO-AS SEDO GmbH · Sedo (parking page)
    Parking page · Sedo
    Sedo (91.195.240.123): a parking service. It answers for names that are typically for sale or unused.
    Daily check
    Ended 2026-11-04 22:41 UTC
  59. microsoft-google.top DE · AS47846 · SEDO-AS SEDO GmbHContains “microsoft”
    Listed by MetaMaskParking page · Sedo
    DetailsHide details for microsoft-google.top
    Domain
    microsoft-google.top
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-03 · the day we first found it in the .top zone file, already registered
    Registered
    2026-05-29 · NameSilo,LLC
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Listed by MetaMask
    Listed by MetaMask · microsoft-google.top · in the feed since 2026-10-27 05:34 UTC
    Addresses
    91.195.240.123 · Germany · AS47846 SEDO-AS SEDO GmbH · Sedo (parking page)
    Parking page · Sedo
    Sedo (91.195.240.123): a parking service. It answers for names that are typically for sale or unused.
    Daily check
    Ended 2026-11-04 22:41 UTC
  60. microsoftcom.live US · AS16509 · Amazon.com, Inc.2 addressesContains “microsoft”
    Listed by MetaMaskReported by PhishDestroyRegistry lookup queuedAmazon Web Services
    DetailsHide details for microsoftcom.live
    Domain
    microsoftcom.live
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .live zone file, already registered
    Registered
    2026-05-29 · GoDaddy.com, LLC
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Listed by MetaMask
    Listed by MetaMask · microsoftcom.live · in the feed since 2026-10-27 05:34 UTC
    Reported by PhishDestroy
    Reported by PhishDestroy · microsoftcom.live · in the feed since 2026-10-25 23:31 UTC
    Addresses
    13.248.243.5 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    76.223.105.230 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (13.248.243.5, 76.223.105.230): a cloud provider. It rents servers and addresses to its customers.
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  61. evaservi-hotmail.online DE · AS8560 · IONOS-AS IONOS SEContains “hotmail”
    Address on DomainSpoof’s phishing-host listIONOSMX present
    DetailsHide details for evaservi-hotmail.online
    Domain
    evaservi-hotmail.online
    Match
    A domain containing “hotmail”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .online zone file, already registered
    Registered
    2026-05-24 · IONOS SE
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    217.76.128.47 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · evaservi-hotmail.online resolved to it 2026-11-05 00:46 UTC
    Addresses
    217.76.128.47 · Germany · AS8560 IONOS-AS IONOS SE · IONOS (shared hosting)
    IONOS
    IONOS (217.76.128.47): shared web hosting and domain registration. One address typically serves many customer sites.
    MX
    mx.serviciodecorreo.es
    Daily check
    Ended 2026-11-04 22:41 UTC
  62. outlook-mail.site CY · AS47583 · AS-HOSTINGER Hostinger Inte…Contains “outlook”
    Address on DomainSpoof’s phishing-host listHostinger
    DetailsHide details for outlook-mail.site
    Domain
    outlook-mail.site
    Match
    A registered domain containing “outlook”, one of the names we match for Microsoft
    Zone file copy
    2026-10-31 · the day of the .site zone file copy it was found in
    Registered
    2026-04-24 · HOSTINGER operations, UAB
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · outlook-mail.site resolved to it 2026-11-05 00:46 UTC
    Addresses
    2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
    Daily check
    Ended 2026-11-04 22:41 UTC
  63. entra-id-platform.online JP · AS7506 · GMO Internet, Inc.Contains “entra-id”
    Address on DomainSpoof’s phishing-host list
    DetailsHide details for entra-id-platform.online
    Domain
    entra-id-platform.online
    Match
    A domain containing “entra-id”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .online zone file, already registered
    Registered
    2026-04-19 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · entra-id-platform.online resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  64. azure-microsoft.top JP · AS9370 · SAKURA Internet Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide details for azure-microsoft.top
    Domain
    azure-microsoft.top
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-03 · the day we first found it in the .top zone file, already registered
    Registered
    2026-04-09 · GMO Internet, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    160.16.200.77 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · azure-microsoft.top resolved to it 2026-11-05 00:46 UTC
    Addresses
    160.16.200.77 · Japan · AS9370 SAKURA-B - SAKURA Internet Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  65. team-microsoft.top JP · AS9370 · SAKURA Internet Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide details for team-microsoft.top
    Domain
    team-microsoft.top
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-03 · the day we first found it in the .top zone file, already registered
    Registered
    2026-04-09 · GMO Internet, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    160.16.200.77 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · team-microsoft.top resolved to it 2026-11-05 00:46 UTC
    Addresses
    160.16.200.77 · Japan · AS9370 SAKURA-B - SAKURA Internet Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  66. microsoft-office365.cloud DE · AS8560 · IONOS-AS IONOS SE2 addressesContains “microsoft”
    Reported by PhishDestroyAddress on DomainSpoof’s phishing-host listIONOSMX present
    DetailsHide details for microsoft-office365.cloud
    Domain
    microsoft-office365.cloud
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .cloud zone file, already registered
    Registered
    2026-03-18 · IONOS SE
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Reported by PhishDestroy
    Reported by PhishDestroy · microsoft-office365.cloud · in the feed since 2026-10-25 23:31 UTC
    Address on DomainSpoof’s phishing-host list
    217.160.0.235 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-office365.cloud resolved to it 2026-11-05 00:46 UTC
    Addresses
    217.160.0.235 · Germany · AS8560 IONOS-AS IONOS SE · IONOS (shared hosting)
    2001:8d8:100f:f000::200
    IONOS
    IONOS (217.160.0.235): shared web hosting and domain registration. One address typically serves many customer sites.
    MX
    mx00.ionos.de
    mx01.ionos.de
    Daily check
    Ended 2026-11-04 22:41 UTC
  67. office365online.live CY · AS47583 · AS-HOSTINGER Hostinger Inte…Contains “office365”
    Address on DomainSpoof’s phishing-host listHostingerMX present
    DetailsHide details for office365online.live
    Domain
    office365online.live
    Match
    A domain containing “office365”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .live zone file, already registered
    Registered
    2026-03-15 · HOSTINGER operations, UAB
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · office365online.live resolved to it 2026-11-05 00:46 UTC
    Addresses
    2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
    MX
    mx1.hostinger.com
    mx2.hostinger.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  68. hotmails.sbs CY · AS47583 · AS-HOSTINGER Hostinger Inte…Contains “hotmail”
    Address on DomainSpoof’s phishing-host listHostingerMX present
    DetailsHide details for hotmails.sbs
    Domain
    hotmails.sbs
    Match
    A registered domain containing “hotmail”, one of the names we match for Microsoft
    Zone file copy
    2026-10-31 · the day of the .sbs zone file copy it was found in
    Registered
    2026-01-05 · HOSTINGER operations, UAB
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · hotmails.sbs resolved to it 2026-11-05 00:46 UTC
    Addresses
    2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
    MX
    mx1.hostinger.com
    mx2.hostinger.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  69. secret-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide details for secret-microsoft.xyz
    Domain
    secret-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-25 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · secret-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  70. session-microsoft-trello.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide details for session-microsoft-trello.xyz
    Domain
    session-microsoft-trello.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-25 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · session-microsoft-trello.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  71. short-authority-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide details for short-authority-microsoft.xyz
    Domain
    short-authority-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-25 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · short-authority-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  72. shortcut-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide details for shortcut-microsoft.xyz
    Domain
    shortcut-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-25 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · shortcut-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  73. simulink-microsoft-class.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide details for simulink-microsoft-class.xyz
    Domain
    simulink-microsoft-class.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-25 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · simulink-microsoft-class.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  74. simulink-priority-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide details for simulink-priority-microsoft.xyz
    Domain
    simulink-priority-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-25 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · simulink-priority-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  75. smartsheet-microsoft-rest.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide details for smartsheet-microsoft-rest.xyz
    Domain
    smartsheet-microsoft-rest.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-25 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · smartsheet-microsoft-rest.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  76. smartsheet-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide details for smartsheet-microsoft.xyz
    Domain
    smartsheet-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-25 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · smartsheet-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  77. smartsheet-seaborn-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide details for smartsheet-seaborn-microsoft.xyz
    Domain
    smartsheet-seaborn-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-25 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · smartsheet-seaborn-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  78. snapshot-microsoft-circleci.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide details for snapshot-microsoft-circleci.xyz
    Domain
    snapshot-microsoft-circleci.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-25 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · snapshot-microsoft-circleci.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  79. soap-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide details for soap-microsoft.xyz
    Domain
    soap-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-25 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · soap-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  80. solidworks-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide details for solidworks-microsoft.xyz
    Domain
    solidworks-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-25 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · solidworks-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  81. utilization-follower-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide details for utilization-follower-microsoft.xyz
    Domain
    utilization-follower-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · utilization-follower-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  82. variable-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide details for variable-microsoft.xyz
    Domain
    variable-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · variable-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  83. verilog-microsoft-tablet.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide details for verilog-microsoft-tablet.xyz
    Domain
    verilog-microsoft-tablet.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · verilog-microsoft-tablet.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  84. vhdl-microsoft-partition.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide details for vhdl-microsoft-partition.xyz
    Domain
    vhdl-microsoft-partition.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · vhdl-microsoft-partition.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  85. wasm-microsoft-bootstrap.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide details for wasm-microsoft-bootstrap.xyz
    Domain
    wasm-microsoft-bootstrap.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · wasm-microsoft-bootstrap.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  86. wasm-wrike-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide details for wasm-wrike-microsoft.xyz
    Domain
    wasm-wrike-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · wasm-wrike-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  87. wave-confluence-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide details for wave-confluence-microsoft.xyz
    Domain
    wave-confluence-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · wave-confluence-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  88. waypoint-microsoft-store.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide details for waypoint-microsoft-store.xyz
    Domain
    waypoint-microsoft-store.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · waypoint-microsoft-store.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  89. while-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide details for while-microsoft.xyz
    Domain
    while-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · while-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  90. whom-microsoft-connect.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide details for whom-microsoft-connect.xyz
    Domain
    whom-microsoft-connect.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · whom-microsoft-connect.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  91. yaml-microsoft-vector.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide details for yaml-microsoft-vector.xyz
    Domain
    yaml-microsoft-vector.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · yaml-microsoft-vector.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  92. office365-sec.xyz TR · AS51557 · TR-ISIMTESCIL-20201202 Isim…Contains “office365”
    Address on DomainSpoof’s phishing-host list
    DetailsHide details for office365-sec.xyz
    Domain
    office365-sec.xyz
    Match
    A registered domain containing “office365”, one of the names we match for Microsoft
    Zone file copy
    2026-10-31 · the day of the .xyz zone file copy it was found in
    Registered
    2025-12-24 · İsimtescil Bilişim A.Ş.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    93.89.226.17 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · office365-sec.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    93.89.226.17 · Türkiye · AS51557 TR-ISIMTESCIL-20201202 Isimtescil Bilisim A.S.
    Daily check
    Ended 2026-11-04 22:41 UTC
  93. onedrive365.live US · AS214036 · ULTAHOST-AS Ultahost, Inc.Contains “onedrive”
    Address on DomainSpoof’s phishing-host listMX present
    DetailsHide details for onedrive365.live
    Domain
    onedrive365.live
    Match
    A registered domain containing “onedrive”, one of the names we match for Microsoft
    Zone file copy
    2026-10-31 · the day of the .live zone file copy it was found in
    Registered
    2025-12-18 · Ultahost, Inc
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    79.133.41.61 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · onedrive365.live resolved to it 2026-11-05 00:46 UTC
    Addresses
    79.133.41.61 · United States · AS214036 ULTAHOST-AS Ultahost, Inc.
    MX
    onedrive365.live
    Daily check
    Ended 2026-11-04 22:41 UTC
  94. hotmailbr.store CY · AS47583 · AS-HOSTINGER Hostinger Inte…Contains “hotmail”
    Address on DomainSpoof’s phishing-host listHostinger
    DetailsHide details for hotmailbr.store
    Domain
    hotmailbr.store
    Match
    A registered domain containing “hotmail”, one of the names we match for Microsoft
    Zone file copy
    2026-10-31 · the day of the .store zone file copy it was found in
    Registered
    2025-12-15 · HOSTINGER operations, UAB
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · hotmailbr.store resolved to it 2026-11-05 00:46 UTC
    Addresses
    2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
    Daily check
    Ended 2026-11-04 22:41 UTC
  95. instagram-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide details for instagram-microsoft.xyz
    Domain
    instagram-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · instagram-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  96. instagram-when-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide details for instagram-when-microsoft.xyz
    Domain
    instagram-when-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · instagram-when-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  97. instance-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide details for instance-microsoft.xyz
    Domain
    instance-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · instance-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  98. jetty-microsoft-drone.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide details for jetty-microsoft-drone.xyz
    Domain
    jetty-microsoft-drone.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · jetty-microsoft-drone.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  99. jetty-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide details for jetty-microsoft.xyz
    Domain
    jetty-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · jetty-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  100. jetty-opengl-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide details for jetty-opengl-microsoft.xyz
    Domain
    jetty-opengl-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · jetty-opengl-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC

More brands in Software & cloud

All brands →