Microsoft
Registered lookalikes
Spellings of Microsoft's official domains (microsoft.com, office365.com, hotmail.com, …) registered to other owners (identified by nameservers, registrar and redirects), checked daily; the ones with no address or mail server yet say so. Many are parked, for sale or run by other businesses and sites with a similar name; the ones a phishing source or address list has flagged carry a label.
Some of these come from registry zone files (ICANN CZDS). Our zone data terms apply to them: no marketing use of any kind, no harassing their registrants, no high-volume registry or registrar queries.
121 of the 1,671 are listed by a source or resolve to a listed address, checked hourly.
- microssoft.ru NL · AS57043 · HOSTKEY-AS HOSTKEY B.V.Lookalike of microsoft.com · a doubled letterMX present
DetailsHide details for microssoft.ru
- Domain
- microssoft.ru
- Spelling
- Spelled like microsoft.com with a doubled letter
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Addresses
- 5.39.218.122 · Netherlands · AS57043 HOSTKEY-AS HOSTKEY B.V.
- MX
- mail.microssoft.ru
- Daily check
- Ended 2026-11-04 22:41 UTC
- microzoft.de DE · AS8560 · IONOS-AS IONOS SE2 addressesLookalike of microsoft.com · a letter from a neighbouring keyIONOSMX present
DetailsHide details for microzoft.de
- Domain
- microzoft.de
- Spelling
- Spelled like microsoft.com with a letter from a neighbouring key
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- The registry publishes no registration date for .de
- Addresses
- 217.160.0.137 · Germany · AS8560 IONOS-AS IONOS SE · IONOS (shared hosting)2001:8d8:100f:f000::2cc
- IONOS
- IONOS (217.160.0.137): shared web hosting and domain registration. One address typically serves many customer sites.
- MX
- mx00.ionos.demx01.ionos.de
- Daily check
- Ended 2026-11-04 22:41 UTC
- microzoft.euLookalike of microsoft.com · a letter from a neighbouring keyNo address or mail server yet
DetailsHide details for microzoft.eu
- Domain
- microzoft.eu
- Spelling
- Spelled like microsoft.com with a letter from a neighbouring key
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microzoft.ru RU · AS197695 · AS-REGRU "Domain names regi…2 addressesLookalike of microsoft.com · a letter from a neighbouring keyMX present
DetailsHide details for microzoft.ru
- Domain
- microzoft.ru
- Spelling
- Spelled like microsoft.com with a letter from a neighbouring key
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Addresses
- 31.31.197.64 · Russia · AS197695 AS-REGRU "Domain names registrar REG.RU", Ltd2a00:f940:2:2:1:3:0:292
- MX
- mx1.hosting.reg.rumx2.hosting.reg.ru
- Daily check
- Ended 2026-11-04 22:41 UTC
- micrrosoft.ch CH · AS214867 · ADVACT advact AGLookalike of microsoft.com · a doubled letterMX present
DetailsHide details for micrrosoft.ch
- Domain
- micrrosoft.ch
- Spelling
- Spelled like microsoft.com with a doubled letter
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Addresses
- 194.56.152.134 · Switzerland · AS214867 ADVACT advact AG
- MX
- mta.asbas.ch
- Daily check
- Ended 2026-11-04 22:41 UTC
- micrsoft.com.au AU · AS45638 · SYNERGY WHOLESALE PTY LTDLookalike of microsoft.com · a dropped letterRegistry lookup queued
DetailsHide details for micrsoft.com.au
- Domain
- micrsoft.com.au
- Spelling
- Spelled like microsoft.com with a dropped letter
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- The registry publishes no registration date for .au · Synergy Wholesale Accreditations Pty Ltd
- Addresses
- 103.42.108.46 · Australia · AS45638 SYNERGYWHOLESALE-AP - SYNERGY WHOLESALE PTY LTD
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- mircosoft.be DE · AS24940 · HETZNER-AS Hetzner Online G…Lookalike of microsoft.com · two letters swappedHetznerMX present
DetailsHide details for mircosoft.be
- Domain
- mircosoft.be
- Spelling
- Spelled like microsoft.com with two letters swapped
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Addresses
- 116.203.228.96 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (116.203.228.96): a cloud provider. It rents servers and addresses to its customers.
- MX
- mx.mailprotect.bemx.backup.mailprotect.be
- Daily check
- Ended 2026-11-04 22:41 UTC
- mircosoft.cnLookalike of microsoft.com · two letters swappedNo address or mail server yet
DetailsHide details for mircosoft.cn
- Domain
- mircosoft.cn
- Spelling
- Spelled like microsoft.com with two letters swapped
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- mircosoft.com.au AU · AS10143 · Exetel Pty Ltd2 addressesLookalike of microsoft.com · two letters swappedRegistry lookup queuedMX present
DetailsHide details for mircosoft.com.au
- Domain
- mircosoft.com.au
- Spelling
- Spelled like microsoft.com with two letters swapped
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- The registry publishes no registration date for .au · Melbourne IT
- Addresses
- 58.96.76.74 · Australia · AS10143 EXETEL-AS-AP - Exetel Pty Ltd2406:3400:31f:3c00::10
- MX
- mail.mircosoft.com.aumail.cs.id.au
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- mircosoft.dk DK · AS51468 · ONECOM One.com A/SLookalike of microsoft.com · two letters swapped
DetailsHide details for mircosoft.dk
- Domain
- mircosoft.dk
- Spelling
- Spelled like microsoft.com with two letters swapped
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Addresses
- 46.30.211.38 · Denmark · AS51468 ONECOM One.com A/S
- Daily check
- Ended 2026-11-04 22:41 UTC
- mircosoft.eeLookalike of microsoft.com · two letters swappedMX present
DetailsHide details for mircosoft.ee
- Domain
- mircosoft.ee
- Spelling
- Spelled like microsoft.com with two letters swapped
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- MX
- mh8.elkdata.eemh10.elkdata.ee
- Daily check
- Ended 2026-11-04 22:41 UTC
- mircosoft.shop DE · AS8560 · IONOS-AS IONOS SELookalike of microsoft.com · two letters swappedRegistry lookup queuedIONOSMX present
DetailsHide details for mircosoft.shop
- Domain
- mircosoft.shop
- Spelling
- Spelled like microsoft.com with two letters swapped
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Addresses
- 82.165.54.120 · Germany · AS8560 IONOS-AS IONOS SE · IONOS (shared hosting)
- IONOS
- IONOS (82.165.54.120): shared web hosting and domain registration. One address typically serves many customer sites.
- MX
- mx00.ionos.demx01.ionos.de
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- mjcrosoft.chLookalike of microsoft.com · a letter from a neighbouring keyMX present
DetailsHide details for mjcrosoft.ch
- Domain
- mjcrosoft.ch
- Spelling
- Spelled like microsoft.com with a letter from a neighbouring key
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- MX
- ip-plesk01.infopro.ch
- Daily check
- Ended 2026-11-04 22:41 UTC
- mjcrosoft.com.auLookalike of microsoft.com · a letter from a neighbouring keyNo address or mail server yetRegistry lookup queued
DetailsHide details for mjcrosoft.com.au
- Domain
- mjcrosoft.com.au
- Spelling
- Spelled like microsoft.com with a letter from a neighbouring key
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- The registry publishes no registration date for .au
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- mjcrosoft.ruLookalike of microsoft.com · a letter from a neighbouring keyNo address or mail server yet
DetailsHide details for mjcrosoft.ru
- Domain
- mjcrosoft.ru
- Spelling
- Spelled like microsoft.com with a letter from a neighbouring key
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- mlcrosoft.ch CH · AS6730 · SUNRISE Sunrise GmbHLookalike of microsoft.com · similar-looking charactersMX present
DetailsHide details for mlcrosoft.ch
- Domain
- mlcrosoft.ch
- Spelling
- Spelled like microsoft.com with similar-looking characters
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Addresses
- 62.2.214.195 · Switzerland · AS6730 SUNRISE Sunrise GmbH
- MX
- awareness.d-fa.ctos.ch
- Daily check
- Ended 2026-11-04 22:41 UTC
- mlcrosoft.cnLookalike of microsoft.com · similar-looking charactersNo address or mail server yet
DetailsHide details for mlcrosoft.cn
- Domain
- mlcrosoft.cn
- Spelling
- Spelled like microsoft.com with similar-looking characters
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- mlcrosoft.com.au AU · AS45638 · SYNERGY WHOLESALE PTY LTDLookalike of microsoft.com · similar-looking charactersRegistry lookup queued
DetailsHide details for mlcrosoft.com.au
- Domain
- mlcrosoft.com.au
- Spelling
- Spelled like microsoft.com with similar-looking characters
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- The registry publishes no registration date for .au · Synergy Wholesale Accreditations Pty Ltd
- Addresses
- 103.42.108.46 · Australia · AS45638 SYNERGYWHOLESALE-AP - SYNERGY WHOLESALE PTY LTD
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- mlcrosoft.de DE · AS8560 · IONOS-AS IONOS SE2 addressesLookalike of microsoft.com · similar-looking charactersIONOSMX present
DetailsHide details for mlcrosoft.de
- Domain
- mlcrosoft.de
- Spelling
- Spelled like microsoft.com with similar-looking characters
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- The registry publishes no registration date for .de
- Addresses
- 217.160.0.45 · Germany · AS8560 IONOS-AS IONOS SE · IONOS (shared hosting)2001:8d8:100f:f000::24c
- IONOS
- IONOS (217.160.0.45): shared web hosting and domain registration. One address typically serves many customer sites.
- MX
- mx00.ionos.demx01.ionos.de
- Daily check
- Ended 2026-11-04 22:41 UTC
- mlcrosoft.ruLookalike of microsoft.com · similar-looking charactersNo address or mail server yet
DetailsHide details for mlcrosoft.ru
- Domain
- mlcrosoft.ru
- Spelling
- Spelled like microsoft.com with similar-looking characters
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- mocrosoft.be BE · AS34762 · COMBELL-AS Combell NV2 addressesLookalike of microsoft.com · a letter from a neighbouring keyMX present
DetailsHide details for mocrosoft.be
- Domain
- mocrosoft.be
- Spelling
- Spelled like microsoft.com with a letter from a neighbouring key
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Addresses
- 188.208.37.108 · Belgium · AS34762 COMBELL-AS Combell NV2a00:1c98:1000:12d1:0:3:f6f0:1e0c
- MX
- mx.mailprotect.bemx.backup.mailprotect.be
- Daily check
- Ended 2026-11-04 22:41 UTC
- mocrosoft.es DE · AS6724 · STRATO Strato GmbH2 addressesLookalike of microsoft.com · a letter from a neighbouring keyMX present
DetailsHide details for mocrosoft.es
- Domain
- mocrosoft.es
- Spelling
- Spelled like microsoft.com with a letter from a neighbouring key
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Addresses
- 81.169.145.85 · Germany · AS6724 STRATO Strato GmbH2a01:238:20a:202:1085::
- MX
- smtp.rzone.de
- Daily check
- Ended 2026-11-04 22:41 UTC
- nicrosoft.cn CA · AS25820 · IT7 Networks IncLookalike of microsoft.com · a letter from a neighbouring key
DetailsHide details for nicrosoft.cn
- Domain
- nicrosoft.cn
- Spelling
- Spelled like microsoft.com with a letter from a neighbouring key
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Addresses
- 67.230.189.164 · Canada · AS25820 IT7NET - IT7 Networks Inc
- Daily check
- Ended 2026-11-04 22:41 UTC
- nicrosoft.it SG · AS63949 · Akamai Connected Cloud8 addressesLookalike of microsoft.com · a letter from a neighbouring keyParking page · Shared parking pageMX present
DetailsHide details for nicrosoft.it
- Domain
- nicrosoft.it
- Spelling
- Spelled like microsoft.com with a letter from a neighbouring key
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Addresses
- 45.33.83.100 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Shared parking page (parking page)45.79.167.180 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Shared parking page (parking page)66.175.209.179 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Shared parking page (parking page)96.126.111.165 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Shared parking page (parking page)2600:3c03::f03c:95ff:fe00:29ca2600:3c03::f03c:95ff:fe91:5d522600:3c03::f03c:95ff:feed:4d4f2600:3c03::f03c:95ff:feed:cf2a
- Parking page · Shared parking page
- Shared parking page (45.33.83.100, 45.79.167.180, 66.175.209.179, 96.126.111.165): a parking service. It answers for names that are typically for sale or unused.
- MX
- smtp.google.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- rnicrosoft.cnLookalike of microsoft.com · similar-looking charactersNo address or mail server yet
DetailsHide details for rnicrosoft.cn
- Domain
- rnicrosoft.cn
- Spelling
- Spelled like microsoft.com with similar-looking characters
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- rnicrosoft.com.au US · AS16509 · Amazon.com, Inc.2 addressesLookalike of microsoft.com · similar-looking charactersRegistry lookup queuedAmazon Web Services
DetailsHide details for rnicrosoft.com.au
- Domain
- rnicrosoft.com.au
- Spelling
- Spelled like microsoft.com with similar-looking characters
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- The registry publishes no registration date for .au · GoDaddy.com LLC trading as GoDaddy.com
- Addresses
- 3.33.130.190 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)15.197.148.33 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (3.33.130.190, 15.197.148.33): a cloud provider. It rents servers and addresses to its customers.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- rnicrosoft.de US · AS16509 · Amazon.com, Inc.2 addressesLookalike of microsoft.com · similar-looking charactersAmazon Web ServicesMX present
DetailsHide details for rnicrosoft.de
- Domain
- rnicrosoft.de
- Spelling
- Spelled like microsoft.com with similar-looking characters
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- The registry publishes no registration date for .de
- Addresses
- 3.33.130.190 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)15.197.148.33 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (3.33.130.190, 15.197.148.33): a cloud provider. It rents servers and addresses to its customers.
- MX
- rnicrosoft-de.mail.protection.outlook.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- rnicrosoft.dkLookalike of microsoft.com · similar-looking charactersNo address or mail server yet
DetailsHide details for rnicrosoft.dk
- Domain
- rnicrosoft.dk
- Spelling
- Spelled like microsoft.com with similar-looking characters
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- rnicrosoft.eeLookalike of microsoft.com · similar-looking charactersMX present
DetailsHide details for rnicrosoft.ee
- Domain
- rnicrosoft.ee
- Spelling
- Spelled like microsoft.com with similar-looking characters
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- MX
- alien.astrodata.eerobin.astrodata.ee
- Daily check
- Ended 2026-11-04 22:41 UTC
- rnicrosoft.es DE · AS47846 · SEDO-AS SEDO GmbHLookalike of microsoft.com · similar-looking charactersParking page · Sedo
DetailsHide details for rnicrosoft.es
- Domain
- rnicrosoft.es
- Spelling
- Spelled like microsoft.com with similar-looking characters
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Addresses
- 64.190.63.111 · Germany · AS47846 SEDO-AS SEDO GmbH · Sedo (parking page)
- Parking page · Sedo
- The registry delegates rnicrosoft.es to Sedo’s nameservers, which answer for it. Sedo (64.190.63.111): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- rnicrosoft.eu SG · AS63949 · Akamai Connected CloudLookalike of microsoft.com · similar-looking charactersAkamai LinodeMX present
DetailsHide details for rnicrosoft.eu
- Domain
- rnicrosoft.eu
- Spelling
- Spelled like microsoft.com with similar-looking characters
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Addresses
- 139.162.155.86 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
- Akamai Linode
- Akamai Linode (139.162.155.86): a cloud provider. It rents servers and addresses to its customers.
- MX
- mx00.udag.demx01.udag.de
- Daily check
- Ended 2026-11-04 22:41 UTC
- rnicrosoft.hu HU · AS210579 · RACKHOST-AS Rackhost Zrt.Lookalike of microsoft.com · similar-looking characters
DetailsHide details for rnicrosoft.hu
- Domain
- rnicrosoft.hu
- Spelling
- Spelled like microsoft.com with similar-looking characters
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Addresses
- 91.227.139.37 · Hungary · AS210579 RACKHOST-AS Rackhost Zrt.
- Daily check
- Ended 2026-11-04 22:41 UTC
- rnicrosoft.it DE · AS24940 · HETZNER-AS Hetzner Online G…Lookalike of microsoft.com · similar-looking charactersHetzner
DetailsHide details for rnicrosoft.it
- Domain
- rnicrosoft.it
- Spelling
- Spelled like microsoft.com with similar-looking characters
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Addresses
- 116.203.114.235 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (116.203.114.235): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- rnicrosoft.luLookalike of microsoft.com · similar-looking charactersMX present
DetailsHide details for rnicrosoft.lu
- Domain
- rnicrosoft.lu
- Spelling
- Spelled like microsoft.com with similar-looking characters
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- MX
- mta-gw.infomaniak.ch
- Daily check
- Ended 2026-11-04 22:41 UTC
- rnicrosoft.lvLookalike of microsoft.com · similar-looking charactersNo address or mail server yet
DetailsHide details for rnicrosoft.lv
- Domain
- rnicrosoft.lv
- Spelling
- Spelled like microsoft.com with similar-looking characters
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- rnicrosoft.ru RU · AS197695 · AS-REGRU "Domain names regi…2 addressesLookalike of microsoft.com · similar-looking charactersMX present
DetailsHide details for rnicrosoft.ru
- Domain
- rnicrosoft.ru
- Spelling
- Spelled like microsoft.com with similar-looking characters
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Addresses
- 31.31.196.215 · Russia · AS197695 AS-REGRU "Domain names registrar REG.RU", Ltd2a00:f940:2:2:1:1:0:173
- MX
- mx1.hosting.reg.rumx2.hosting.reg.ru
- Daily check
- Ended 2026-11-04 22:41 UTC
- xn--mcrosoft-21a.ch IL · AS58182 · wix_com Wix.com Ltd.Lookalike of microsoft.com · international characters, shown as mìcrosoft.chWix
DetailsHide details for xn--mcrosoft-21a.ch
- Domain
- xn--mcrosoft-21a.ch
- Spelling
- Spelled like microsoft.com with international characters, shown as mìcrosoft.ch
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Addresses
- 185.230.63.107 · Israel · AS58182 wix_com Wix.com Ltd. · Wix (site builder)
- Wix
- Wix (185.230.63.107): a site builder. It hosts pages for anyone who signs up.
- Daily check
- Ended 2026-11-04 22:41 UTC
- xn--mcrosoft-21a.eu DK · AS47292 · SENTIA Sentia Denmark A/SLookalike of microsoft.com · international characters, shown as mìcrosoft.euMX present
DetailsHide details for xn--mcrosoft-21a.eu
- Domain
- xn--mcrosoft-21a.eu
- Spelling
- Spelled like microsoft.com with international characters, shown as mìcrosoft.eu
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Addresses
- 217.116.232.208 · Denmark · AS47292 SENTIA Sentia Denmark A/S
- MX
- mx1.gigahost.dkmx2.gigahost.dkmx3.gigahost.dk
- Daily check
- Ended 2026-11-04 22:41 UTC
- xn--mcrosoft-c2a.beLookalike of microsoft.com · international characters, shown as mícrosoft.beMX present
DetailsHide details for xn--mcrosoft-c2a.be
- Domain
- xn--mcrosoft-c2a.be
- Spelling
- Spelled like microsoft.com with international characters, shown as mícrosoft.be
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- MX
- tboexpress.thebinaryone.eu
- Daily check
- Ended 2026-11-04 22:41 UTC
- xn--mcrosoft-c2a.clLookalike of microsoft.com · international characters, shown as mícrosoft.clNo address or mail server yet
DetailsHide details for xn--mcrosoft-c2a.cl
- Domain
- xn--mcrosoft-c2a.cl
- Spelling
- Spelled like microsoft.com with international characters, shown as mícrosoft.cl
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- xn--mcrosoft-c2a.de DE · AS42730 · EVANZOAS EVANZO e-commerce …Lookalike of microsoft.com · international characters, shown as mícrosoft.deMX present
DetailsHide details for xn--mcrosoft-c2a.de
- Domain
- xn--mcrosoft-c2a.de
- Spelling
- Spelled like microsoft.com with international characters, shown as mícrosoft.de
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- The registry publishes no registration date for .de
- Addresses
- 178.254.10.73 · Germany · AS42730 EVANZOAS EVANZO e-commerce GmbH
- MX
- mx1.improvmx.commx2.improvmx.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- xn--mcrosoft-c2a.es DE · AS8560 · IONOS-AS IONOS SE2 addressesLookalike of microsoft.com · international characters, shown as mícrosoft.esIONOSMX present
DetailsHide details for xn--mcrosoft-c2a.es
- Domain
- xn--mcrosoft-c2a.es
- Spelling
- Spelled like microsoft.com with international characters, shown as mícrosoft.es
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Addresses
- 212.227.247.181 · Germany · AS8560 IONOS-AS IONOS SE · IONOS (shared hosting)2001:8d8:1000:80d6:eb67:1f05:7345:283f
- IONOS
- IONOS (212.227.247.181): shared web hosting and domain registration. One address typically serves many customer sites.
- MX
- mx00.ionos.esmx01.ionos.es
- Daily check
- Ended 2026-11-04 22:41 UTC
- xn--mcrosoft-c2a.euLookalike of microsoft.com · international characters, shown as mícrosoft.euNo address or mail server yet
DetailsHide details for xn--mcrosoft-c2a.eu
- Domain
- xn--mcrosoft-c2a.eu
- Spelling
- Spelled like microsoft.com with international characters, shown as mícrosoft.eu
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- xn--mcrosoft-u2a.de DE · AS8648 · ONE-NETWORK dogado GmbHLookalike of microsoft.com · international characters, shown as mïcrosoft.deMX present
DetailsHide details for xn--mcrosoft-u2a.de
- Domain
- xn--mcrosoft-u2a.de
- Spelling
- Spelled like microsoft.com with international characters, shown as mïcrosoft.de
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- The registry publishes no registration date for .de
- Addresses
- 81.88.34.107 · Germany · AS8648 ONE-NETWORK dogado GmbH
- MX
- mx03.secure-mailgate.commx04.secure-mailgate.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- h0tmail.shop US · AS16509 · Amazon.com, Inc.2 addressesLookalike of hotmail.com · similar-looking charactersRegistry lookup queuedAmazon Web Services
DetailsHide details for h0tmail.shop
- Domain
- h0tmail.shop
- Spelling
- Spelled like hotmail.com with similar-looking characters
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Addresses
- 44.233.250.75 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)52.38.196.63 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (44.233.250.75, 52.38.196.63): a cloud provider. It rents servers and addresses to its customers.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hotail.esLookalike of hotmail.com · a dropped letterMX present
DetailsHide details for hotail.es
- Domain
- hotail.es
- Spelling
- Spelled like hotmail.com with a dropped letter
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- MX
- reception01.mail-vert.fr
- Daily check
- Ended 2026-11-04 22:41 UTC
- hotail.itLookalike of hotmail.com · a dropped letterMX present
DetailsHide details for hotail.it
- Domain
- hotail.it
- Spelling
- Spelled like hotmail.com with a dropped letter
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- MX
- route3.mx.cloudflare.netroute2.mx.cloudflare.netroute1.mx.cloudflare.net
- Daily check
- Ended 2026-11-04 22:41 UTC
- hotmaail.itLookalike of hotmail.com · a doubled letterMX present
DetailsHide details for hotmaail.it
- Domain
- hotmaail.it
- Spelling
- Spelled like hotmail.com with a doubled letter
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- MX
- mail0001.hotmaail.it
- Daily check
- Ended 2026-11-04 22:41 UTC
- hotmai.de DE · AS34788 · NMM-AS Neue Medien Muennich…Lookalike of hotmail.com · a dropped letterMX present
DetailsHide details for hotmai.de
- Domain
- hotmai.de
- Spelling
- Spelled like hotmail.com with a dropped letter
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- The registry publishes no registration date for .de
- Addresses
- 85.13.151.175 · Germany · AS34788 NMM-AS Neue Medien Muennich GmbH
- MX
- w015889a.kasserver.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- hotmai.it US · AS13335 · Cloudflare, Inc.4 addressesLookalike of hotmail.com · a dropped letterCloudflareMX present
DetailsHide details for hotmai.it
- Domain
- hotmai.it
- Spelling
- Spelled like hotmail.com with a dropped letter
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Addresses
- 104.21.45.155 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.216.102 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3033::6815:2d9b2606:4700:3033::ac43:d866
- Cloudflare
- Cloudflare (104.21.45.155, 172.67.216.102): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- MX
- mail.hotmai.it
- Daily check
- Ended 2026-11-04 22:41 UTC
- hotmaii.de DE · AS47846 · SEDO-AS SEDO GmbHLookalike of hotmail.com · similar-looking charactersParking page · Sedo
DetailsHide details for hotmaii.de
- Domain
- hotmaii.de
- Spelling
- Spelled like hotmail.com with similar-looking characters
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- The registry publishes no registration date for .de
- Addresses
- 91.195.241.232 · Germany · AS47846 SEDO-AS SEDO GmbH · Sedo (parking page)
- Parking page · Sedo
- The registry delegates hotmaii.de to Sedo’s nameservers, which answer for it. Sedo (91.195.241.232): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hotmaii.es DE · AS8560 · IONOS-AS IONOS SE2 addressesLookalike of hotmail.com · similar-looking charactersIONOSMX present
DetailsHide details for hotmaii.es
- Domain
- hotmaii.es
- Spelling
- Spelled like hotmail.com with similar-looking characters
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Addresses
- 217.160.0.26 · Germany · AS8560 IONOS-AS IONOS SE · IONOS (shared hosting)2001:8d8:100f:f000::200
- IONOS
- IONOS (217.160.0.26): shared web hosting and domain registration. One address typically serves many customer sites.
- MX
- smtp.google.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- hotmaiil.esLookalike of hotmail.com · a doubled letterMX present
DetailsHide details for hotmaiil.es
- Domain
- hotmaiil.es
- Spelling
- Spelled like hotmail.com with a doubled letter
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- MX
- mail.mpowersystems.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- hotmaiil.itLookalike of hotmail.com · a doubled letterMX present
DetailsHide details for hotmaiil.it
- Domain
- hotmaiil.it
- Spelling
- Spelled like hotmail.com with a doubled letter
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- MX
- mail0001.hotmaiil.it
- Daily check
- Ended 2026-11-04 22:41 UTC
- hotmail.shop US · AS16509 · Amazon.com, Inc.2 addressesLookalike of hotmail.com · the ending .shopRegistry lookup queuedParking page · Afternic
DetailsHide details for hotmail.shop
- Domain
- hotmail.shop
- Spelling
- The name of hotmail.com with the ending .shop
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Addresses
- 13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
- Parking page · Afternic
- The registry delegates hotmail.shop to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hotmaill.es DE · AS47846 · SEDO-AS SEDO GmbHLookalike of hotmail.com · a doubled letterParking page · Sedo
DetailsHide details for hotmaill.es
- Domain
- hotmaill.es
- Spelling
- Spelled like hotmail.com with a doubled letter
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Addresses
- 64.190.63.222 · Germany · AS47846 SEDO-AS SEDO GmbH · Sedo (parking page)
- Parking page · Sedo
- The registry delegates hotmaill.es to Sedo’s nameservers, which answer for it. Sedo (64.190.63.222): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hotmaio.de AU · AS154653 · ParkLogic Pty LtdLookalike of hotmail.com · a letter from a neighbouring keyParking page · ParkLogicMX present
DetailsHide details for hotmaio.de
- Domain
- hotmaio.de
- Spelling
- Spelled like hotmail.com with a letter from a neighbouring key
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- The registry publishes no registration date for .de
- Addresses
- 162.4.84.215 · Australia · AS154653 PARKLOGICPTYLTD-AS-AP - ParkLogic Pty Ltd · ParkLogic (parking page)
- Parking page · ParkLogic
- The registry delegates hotmaio.de to ParkLogic’s nameservers, which answer for it. ParkLogic (162.4.84.215): a parking service. It answers for names that are typically for sale or unused.
- MX
- mx156.hostedmxserver.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- hotmajl.de US · AS22612 · Namecheap, Inc.Lookalike of hotmail.com · a letter from a neighbouring keyParking page · Namecheap parkingMX present
DetailsHide details for hotmajl.de
- Domain
- hotmajl.de
- Spelling
- Spelled like hotmail.com with a letter from a neighbouring key
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- The registry publishes no registration date for .de
- Addresses
- 162.255.119.121 · United States · AS22612 NAMECHEAP-NET - Namecheap, Inc. · Namecheap parking (parking page)
- Parking page · Namecheap parking
- Namecheap parking (162.255.119.121): a parking service. It answers for names that are typically for sale or unused.
- MX
- mx1.forwardemail.netmx2.forwardemail.net
- Daily check
- Ended 2026-11-04 22:41 UTC
- hotmal.esLookalike of hotmail.com · a dropped letterMX present
DetailsHide details for hotmal.es
- Domain
- hotmal.es
- Spelling
- Spelled like hotmail.com with a dropped letter
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- MX
- reception01.mail-vert.fr
- Daily check
- Ended 2026-11-04 22:41 UTC
- hotmal.itLookalike of hotmail.com · a dropped letterMX present
DetailsHide details for hotmal.it
- Domain
- hotmal.it
- Spelling
- Spelled like hotmail.com with a dropped letter
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- MX
- hasty.bestinv.orgtrash.bestinv.org
- Daily check
- Ended 2026-11-04 22:41 UTC
- hotmall.de DE · AS25504 · CRONON-AS Vautron Rechenzen…Lookalike of hotmail.com · similar-looking charactersMX present
DetailsHide details for hotmall.de
- Domain
- hotmall.de
- Spelling
- Spelled like hotmail.com with similar-looking characters
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- The registry publishes no registration date for .de
- Addresses
- 151.252.49.69 · Germany · AS25504 CRONON-AS Vautron Rechenzentrum AG
- MX
- mail.hotmall.de
- Daily check
- Ended 2026-11-04 22:41 UTC
- hotmall.shop US · AS16509 · Amazon.com, Inc.2 addressesLookalike of hotmail.com · similar-looking charactersRegistry lookup queuedParking page · Afternic
DetailsHide details for hotmall.shop
- Domain
- hotmall.shop
- Spelling
- Spelled like hotmail.com with similar-looking characters
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Addresses
- 13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
- Parking page · Afternic
- The registry delegates hotmall.shop to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hotmaol.de DE · AS47846 · SEDO-AS SEDO GmbHLookalike of hotmail.com · a letter from a neighbouring keyParking page · Sedo
DetailsHide details for hotmaol.de
- Domain
- hotmaol.de
- Spelling
- Spelled like hotmail.com with a letter from a neighbouring key
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- The registry publishes no registration date for .de
- Addresses
- 64.190.63.111 · Germany · AS47846 SEDO-AS SEDO GmbH · Sedo (parking page)
- Parking page · Sedo
- The registry delegates hotmaol.de to Sedo’s nameservers, which answer for it. Sedo (64.190.63.111): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hotmaol.esLookalike of hotmail.com · a letter from a neighbouring keyMX present
DetailsHide details for hotmaol.es
- Domain
- hotmaol.es
- Spelling
- Spelled like hotmail.com with a letter from a neighbouring key
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- MX
- mike.zesti.org
- Daily check
- Ended 2026-11-04 22:41 UTC
- hotmial.es DE · AS47846 · SEDO-AS SEDO GmbHLookalike of hotmail.com · two letters swappedParking page · Sedo
DetailsHide details for hotmial.es
- Domain
- hotmial.es
- Spelling
- Spelled like hotmail.com with two letters swapped
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Addresses
- 64.190.63.222 · Germany · AS47846 SEDO-AS SEDO GmbH · Sedo (parking page)
- Parking page · Sedo
- The registry delegates hotmial.es to Sedo’s nameservers, which answer for it. Sedo (64.190.63.222): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hotmial.it DE · AS47846 · SEDO-AS SEDO GmbHLookalike of hotmail.com · two letters swappedParking page · Sedo
DetailsHide details for hotmial.it
- Domain
- hotmial.it
- Spelling
- Spelled like hotmail.com with two letters swapped
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Addresses
- 64.190.63.222 · Germany · AS47846 SEDO-AS SEDO GmbH · Sedo (parking page)
- Parking page · Sedo
- The registry delegates hotmial.it to Sedo’s nameservers, which answer for it. Sedo (64.190.63.222): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hotmil.es 127.0.0.1Lookalike of hotmail.com · a dropped letterParking page · Sedo
DetailsHide details for hotmil.es
- Domain
- hotmil.es
- Spelling
- Spelled like hotmail.com with a dropped letter
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Addresses
- 127.0.0.1
- Parking page · Sedo
- The registry delegates hotmil.es to Sedo’s nameservers, which answer for it. Sedo: a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hotmmail.es DE · AS47846 · SEDO-AS SEDO GmbHLookalike of hotmail.com · a doubled letterParking page · Sedo
DetailsHide details for hotmmail.es
- Domain
- hotmmail.es
- Spelling
- Spelled like hotmail.com with a doubled letter
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Addresses
- 64.190.63.111 · Germany · AS47846 SEDO-AS SEDO GmbH · Sedo (parking page)
- Parking page · Sedo
- The registry delegates hotmmail.es to Sedo’s nameservers, which answer for it. Sedo (64.190.63.111): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hotmmail.itLookalike of hotmail.com · a doubled letterNo address or mail server yet
DetailsHide details for hotmmail.it
- Domain
- hotmmail.it
- Spelling
- Spelled like hotmail.com with a doubled letter
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hotmsil.esLookalike of hotmail.com · a letter from a neighbouring keyMX present
DetailsHide details for hotmsil.es
- Domain
- hotmsil.es
- Spelling
- Spelled like hotmail.com with a letter from a neighbouring key
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- MX
- route2.mx.cloudflare.netroute1.mx.cloudflare.netroute3.mx.cloudflare.net
- Daily check
- Ended 2026-11-04 22:41 UTC
- hotrnail.de DE · AS8560 · IONOS-AS IONOS SE2 addressesLookalike of hotmail.com · similar-looking charactersIONOSMX present
DetailsHide details for hotrnail.de
- Domain
- hotrnail.de
- Spelling
- Spelled like hotmail.com with similar-looking characters
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- The registry publishes no registration date for .de
- Addresses
- 217.160.0.135 · Germany · AS8560 IONOS-AS IONOS SE · IONOS (shared hosting)2001:8d8:100f:f000::200
- IONOS
- IONOS (217.160.0.135): shared web hosting and domain registration. One address typically serves many customer sites.
- MX
- mx00.ionos.demx01.ionos.de
- Daily check
- Ended 2026-11-04 22:41 UTC
Registered domains using the name
Domains from registry zone files (ICANN CZDS), checked daily like the lookalikes above. Each row says how it matches Microsoft's names. Resellers, fans and other businesses register names like these too. Our zone data terms apply to them.
100 of 808 shown: listed ones first, then the newest registrations.
- sharepoint365.support KN · AS402253 · SKN Subnet & Telecom LtdContains “sharepoint”Address on Spamhaus DROP
DetailsHide details for sharepoint365.support
- Domain
- sharepoint365.support
- Match
- A new registration containing “sharepoint”, one of the names we match for Microsoft
- First found
- 2026-11-05 · the day the .support zone file first listed it as a new registration
- Registered
- 2026-11-04 · Spaceship, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 13:14 UTC
- Address on Spamhaus DROP
- 104.251.180.138 is on Spamhaus DROP · sharepoint365.support resolved to it 2026-11-05 05:11 UTC
- Addresses
- 104.251.180.138 · St. Kitts & Nevis · AS402253 SKN-NETWORK-1 - SKN Subnet & Telecom Ltd
- Daily check
- Ended 2026-11-04 22:41 UTC
- cdn-microsoft.top SG · AS63949 · Akamai Connected Cloud3 addressesContains “microsoft”2 addresses on DomainSpoof’s phishing-host listAkamai Linode
DetailsHide details for cdn-microsoft.top
- Domain
- cdn-microsoft.top
- Match
- A new registration containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-05 · the day the .top zone file first listed it as a new registration
- Registered
- 2026-11-04 · NameSilo,LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 13:14 UTC
- 2 addresses on DomainSpoof’s phishing-host list
- 172.232.24.161 (cdn-microsoft.top resolved to it 2026-11-05 04:17 UTC), 172.232.24.235 (cdn-microsoft.top resolved to it 2026-11-05 04:17 UTC) are on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours
- Addresses
- 45.79.154.26 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)172.232.24.161 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)172.232.24.235 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
- Akamai Linode
- Akamai Linode (45.79.154.26, 172.232.24.161, 172.232.24.235): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoftoffice365.top SG · AS63949 · Akamai Connected Cloud3 addressesContains “microsoft”Listed by MetaMask3 addresses on DomainSpoof’s phishing-host listAkamai Linode
DetailsHide details for microsoftoffice365.top
- Domain
- microsoftoffice365.top
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-03 · the day we first found it in the .top zone file, already registered
- Registered
- 2026-10-30 · NameSilo,LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 13:14 UTC
- Listed by MetaMask
- Listed by MetaMask · microsoftoffice365.top · in the feed since 2026-11-01 11:44 UTC
- 3 addresses on DomainSpoof’s phishing-host list
- 172.232.24.161 (microsoftoffice365.top resolved to it 2026-11-05 00:46 UTC), 172.232.24.235 (microsoftoffice365.top resolved to it 2026-11-05 00:46 UTC), 172.234.25.42 (microsoftoffice365.top resolved to it 2026-11-05 00:46 UTC) are on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours
- Addresses
- 172.232.24.161 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)172.232.24.235 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)172.234.25.42 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
- Akamai Linode
- Akamai Linode (172.232.24.161, 172.232.24.235, 172.234.25.42): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- onedrive-sync.top SG · AS63949 · Akamai Connected Cloud3 addressesContains “onedrive”3 addresses on DomainSpoof’s phishing-host listAkamai Linode
DetailsHide details for onedrive-sync.top
- Domain
- onedrive-sync.top
- Match
- A domain containing “onedrive”, one of the names we match for Microsoft
- First found
- 2026-11-03 · the day we first found it in the .top zone file, already registered
- Registered
- 2026-10-29 · NameSilo,LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 13:14 UTC
- 3 addresses on DomainSpoof’s phishing-host list
- 172.232.24.161 (onedrive-sync.top resolved to it 2026-11-05 00:46 UTC), 172.232.24.235 (onedrive-sync.top resolved to it 2026-11-05 00:46 UTC), 172.234.25.42 (onedrive-sync.top resolved to it 2026-11-05 00:46 UTC) are on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours
- Addresses
- 172.232.24.161 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)172.232.24.235 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)172.234.25.42 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
- Akamai Linode
- Akamai Linode (172.232.24.161, 172.232.24.235, 172.234.25.42): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoftsupp.info RU · AS209207 · DHOST-AS Digital Hosting Pr…Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for microsoftsupp.info
- Domain
- microsoftsupp.info
- Match
- A registered domain containing “microsoft”, one of the names we match for Microsoft
- Zone file copy
- 2026-10-31 · the day of the .info zone file copy it was found in
- Registered
- 2026-10-22 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 13:14 UTC
- Address on DomainSpoof’s phishing-host list
- 168.113.215.244 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoftsupp.info resolved to it 2026-11-05 00:46 UTC
- Addresses
- 168.113.215.244 · Russia · AS209207 DHOST-AS Digital Hosting Provider LLC
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-office.topContains “microsoft”Listed by MetaMaskNo address or mail server yet
DetailsHide details for microsoft-office.top
- Domain
- microsoft-office.top
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-03 · the day we first found it in the .top zone file, already registered
- Registered
- 2026-10-18 · West263 International Limited
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 13:14 UTC
- Listed by MetaMask
- Listed by MetaMask · microsoft-office.top · in the feed since 2026-10-27 05:34 UTC
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoftsharefile.topContains “microsoft”Listed by MetaMaskNo address or mail server yet
DetailsHide details for microsoftsharefile.top
- Domain
- microsoftsharefile.top
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-03 · the day we first found it in the .top zone file, already registered
- Registered
- 2026-10-18 · NameSilo,LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 13:14 UTC
- Listed by MetaMask
- Listed by MetaMask · microsoftsharefile.top · in the feed since 2026-10-27 05:34 UTC
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoftsharefile1.topContains “microsoft”Listed by MetaMaskNo address or mail server yet
DetailsHide details for microsoftsharefile1.top
- Domain
- microsoftsharefile1.top
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-03 · the day we first found it in the .top zone file, already registered
- Registered
- 2026-10-18 · NameSilo,LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 13:14 UTC
- Listed by MetaMask
- Listed by MetaMask · microsoftsharefile1.top · in the feed since 2026-10-27 05:34 UTC
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoftes.liveContains “microsoft”Listed by MetaMaskNo address or mail server yet
DetailsHide details for microsoftes.live
- Domain
- microsoftes.live
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .live zone file, already registered
- Registered
- 2026-10-06 · Dynadot Inc
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 13:14 UTC
- Listed by MetaMask
- Listed by MetaMask · microsoftes.live · in the feed since 2026-10-27 05:34 UTC
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-teams.sbs US · AS13335 · Cloudflare, Inc.4 addressesContains “microsoft”Listed by MetaMaskCloudflare
DetailsHide details for microsoft-teams.sbs
- Domain
- microsoft-teams.sbs
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .sbs zone file, already registered
- Registered
- 2026-10-03 · Dynadot Inc
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 13:14 UTC
- Listed by MetaMask
- Listed by MetaMask · microsoft-teams.sbs · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.32.178 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.153.49 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3036::ac43:99312606:4700:3037::6815:20b2
- Cloudflare
- Cloudflare (104.21.32.178, 172.67.153.49): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-office365.site US · AS13335 · Cloudflare, Inc.4 addressesContains “microsoft”Listed by MetaMaskReported by PhishDestroyCloudflareMX present
DetailsHide details for microsoft-office365.site
- Domain
- microsoft-office365.site
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .site zone file, already registered
- Registered
- 2026-09-26 · Cloudflare, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 13:14 UTC
- Listed by MetaMask
- Listed by MetaMask · microsoft-office365.site · in the feed since 2026-10-27 05:34 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · microsoft-office365.site · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 104.21.16.197 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.215.149 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3034::ac43:d7952606:4700:3035::6815:10c5
- Cloudflare
- Cloudflare (104.21.16.197, 172.67.215.149): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- MX
- mx01.mail.icloud.commx02.mail.icloud.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-onedrive.org SG · AS63949 · Akamai Connected CloudContains “microsoft”Listed by MetaMaskAkamai Linode
DetailsHide details for microsoft-onedrive.org
- Domain
- microsoft-onedrive.org
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .org zone file, already registered
- Registered
- 2026-09-25 · Squarespace Domains LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 13:14 UTC
- Listed by MetaMask
- Listed by MetaMask · microsoft-onedrive.org · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 74.207.228.73 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
- Akamai Linode
- Akamai Linode (74.207.228.73): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-edge.download IS · AS50613 · ThorDC-AS Advania Island ehfContains “microsoft”Address on DomainSpoof’s phishing-host listMX present
DetailsHide details for microsoft-edge.download
- Domain
- microsoft-edge.download
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .download zone file, already registered
- Registered
- 2026-09-23 · TLD Registrar Solutions Ltd.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 13:14 UTC
- Address on DomainSpoof’s phishing-host list
- 82.221.136.24 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-edge.download resolved to it 2026-11-05 00:46 UTC
- Addresses
- 82.221.136.24 · Iceland · AS50613 ThorDC-AS Advania Island ehf
- MX
- mx1.sf.ice-networks.commx2.sf.ice-networks.commx3.sf.ice-networks.commx4.sf.ice-networks.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- office-365.shop DE · AS8560 · IONOS-AS IONOS SE2 addressesContains “office-365”Address on DomainSpoof’s phishing-host listIONOSMX present
DetailsHide details for office-365.shop
- Domain
- office-365.shop
- Match
- A registered domain containing “office-365”, one of the names we match for Microsoft
- Zone file copy
- 2026-10-31 · the day of the .shop zone file copy it was found in
- Registered
- 2026-09-22 · IONOS SE
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 13:14 UTC
- Address on DomainSpoof’s phishing-host list
- 217.160.0.115 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · office-365.shop resolved to it 2026-11-05 00:46 UTC
- Addresses
- 217.160.0.115 · Germany · AS8560 IONOS-AS IONOS SE · IONOS (shared hosting)2001:8d8:100f:f000::200
- IONOS
- IONOS (217.160.0.115): shared web hosting and domain registration. One address typically serves many customer sites.
- MX
- mail.protonmail.chmailsec.protonmail.ch
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-teams.sarlContains “microsoft”Listed by MetaMaskNo address or mail server yet
DetailsHide details for microsoft-teams.sarl
- Domain
- microsoft-teams.sarl
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .sarl zone file, already registered
- Registered
- 2026-09-19 · Cloudflare, Inc
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 13:14 UTC
- Listed by MetaMask
- Listed by MetaMask · microsoft-teams.sarl · in the feed since 2026-10-27 05:34 UTC
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-meet.live PA · AS64107 · RACK SPHERE HOSTING S.A.Contains “microsoft”Listed by MetaMask
DetailsHide details for microsoft-meet.live
- Domain
- microsoft-meet.live
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .live zone file, already registered
- Registered
- 2026-09-15 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 13:14 UTC
- Listed by MetaMask
- Listed by MetaMask · microsoft-meet.live · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 45.225.135.67 · Panama · AS64107 AS64107 - RACK SPHERE HOSTING S.A.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-cedar-technologies.click SG · AS63949 · Akamai Connected Cloud3 addressesContains “microsoft”3 addresses on DomainSpoof’s phishing-host listAkamai Linode
DetailsHide details for microsoft-cedar-technologies.click
- Domain
- microsoft-cedar-technologies.click
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .click zone file, already registered
- Registered
- 2026-08-21 · NameSilo, LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 13:14 UTC
- 3 addresses on DomainSpoof’s phishing-host list
- 172.232.24.161 (microsoft-cedar-technologies.click resolved to it 2026-11-05 00:46 UTC), 172.232.24.235 (microsoft-cedar-technologies.click resolved to it 2026-11-05 00:46 UTC), 172.234.25.42 (microsoft-cedar-technologies.click resolved to it 2026-11-05 00:46 UTC) are on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours
- Addresses
- 172.232.24.161 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)172.232.24.235 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)172.234.25.42 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
- Akamai Linode
- Akamai Linode (172.232.24.161, 172.232.24.235, 172.234.25.42): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- com-onedrive.live US · AS13335 · Cloudflare, Inc.4 addressesContains “onedrive”Listed by MetaMaskCloudflare
DetailsHide details for com-onedrive.live
- Domain
- com-onedrive.live
- Match
- A domain containing “onedrive”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .live zone file, already registered
- Registered
- 2026-08-16 · Cloudflare, Inc
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 13:14 UTC
- Listed by MetaMask
- Listed by MetaMask · com-onedrive.live · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.33.172 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.165.13 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3034::6815:21ac2606:4700:3036::ac43:a50d
- Cloudflare
- Cloudflare (104.21.33.172, 172.67.165.13): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft3.sbsContains “microsoft”Listed by MetaMaskNo address or mail server yet
DetailsHide details for microsoft3.sbs
- Domain
- microsoft3.sbs
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .sbs zone file, already registered
- Registered
- 2026-08-07 · NameSilo, LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 13:14 UTC
- Listed by MetaMask
- Listed by MetaMask · microsoft3.sbs · in the feed since 2026-10-27 05:34 UTC
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoftonline-sharepoint-com.live US · AS13335 · Cloudflare, Inc.4 addressesContains “microsoftonline”Listed by MetaMaskCloudflare
DetailsHide details for microsoftonline-sharepoint-com.live
- Domain
- microsoftonline-sharepoint-com.live
- Match
- A domain containing “microsoftonline”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .live zone file, already registered
- Registered
- 2026-08-07 · Cloudflare, Inc
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 13:14 UTC
- Listed by MetaMask
- Listed by MetaMask · microsoftonline-sharepoint-com.live · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.51.191 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.184.169 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3031::6815:33bf2606:4700:3032::ac43:b8a9
- Cloudflare
- Cloudflare (104.21.51.191, 172.67.184.169): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoftonline-sharepoint.online US · AS14061 · DigitalOcean, LLCContains “microsoftonline”Listed by MetaMaskDigitalOcean
DetailsHide details for microsoftonline-sharepoint.online
- Domain
- microsoftonline-sharepoint.online
- Match
- A domain containing “microsoftonline”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .online zone file, already registered
- Registered
- 2026-07-27 · Cloudflare, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 13:14 UTC
- Listed by MetaMask
- Listed by MetaMask · microsoftonline-sharepoint.online · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 178.62.99.223 · United States · AS14061 DIGITALOCEAN-ASN - DigitalOcean, LLC · DigitalOcean (cloud provider)
- DigitalOcean
- DigitalOcean (178.62.99.223): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- office365microsoft.help SG · AS63949 · Akamai Connected Cloud3 addressesContains “microsoft”3 addresses on DomainSpoof’s phishing-host listAkamai LinodeMX present
DetailsHide details for office365microsoft.help
- Domain
- office365microsoft.help
- Match
- A registered domain containing “microsoft”, one of the names we match for Microsoft
- Zone file copy
- 2026-10-31 · the day of the .help zone file copy it was found in
- Registered
- 2026-07-26 · NameSilo, LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 13:14 UTC
- 3 addresses on DomainSpoof’s phishing-host list
- 172.232.24.161 (office365microsoft.help resolved to it 2026-11-05 00:46 UTC), 172.232.24.235 (office365microsoft.help resolved to it 2026-11-05 00:46 UTC), 172.234.25.42 (office365microsoft.help resolved to it 2026-11-05 00:46 UTC) are on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours
- Addresses
- 172.232.24.161 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)172.232.24.235 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)172.234.25.42 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
- Akamai Linode
- Akamai Linode (172.232.24.161, 172.232.24.235, 172.234.25.42): a cloud provider. It rents servers and addresses to its customers.
- MX
- mx1.titan.emailmx2.titan.email
- Daily check
- Ended 2026-11-04 22:41 UTC
- msoffice.email CY · AS47583 · AS-HOSTINGER Hostinger Inte…Contains “msoffice”Address on DomainSpoof’s phishing-host listHostinger
DetailsHide details for msoffice.email
- Domain
- msoffice.email
- Match
- A domain containing “msoffice”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .email zone file, already registered
- Registered
- 2026-07-24 · HOSTINGER operations, UAB
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 13:14 UTC
- Address on DomainSpoof’s phishing-host list
- 2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · msoffice.email resolved to it 2026-11-05 00:46 UTC
- Addresses
- 2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
- Hostinger
- Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
- Daily check
- Ended 2026-11-04 22:41 UTC
- msoffice.live CY · AS47583 · AS-HOSTINGER Hostinger Inte…Contains “msoffice”Address on DomainSpoof’s phishing-host listHostinger
DetailsHide details for msoffice.live
- Domain
- msoffice.live
- Match
- A registered domain containing “msoffice”, one of the names we match for Microsoft
- Zone file copy
- 2026-10-31 · the day of the .live zone file copy it was found in
- Registered
- 2026-07-24 · HOSTINGER operations, UAB
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 13:14 UTC
- Address on DomainSpoof’s phishing-host list
- 2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · msoffice.live resolved to it 2026-11-05 00:46 UTC
- Addresses
- 2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
- Hostinger
- Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoftonline-outlook.live US · AS13335 · Cloudflare, Inc.4 addressesContains “microsoftonline”Listed by MetaMaskCloudflare
DetailsHide details for microsoftonline-outlook.live
- Domain
- microsoftonline-outlook.live
- Match
- A domain containing “microsoftonline”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .live zone file, already registered
- Registered
- 2026-07-17 · Cloudflare, Inc
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 13:14 UTC
- Listed by MetaMask
- Listed by MetaMask · microsoftonline-outlook.live · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.24.65 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.217.82 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3030::6815:18412606:4700:3031::ac43:d952
- Cloudflare
- Cloudflare (104.21.24.65, 172.67.217.82): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- onmicrosoftfolder.sbs SG · AS63949 · Akamai Connected Cloud3 addressesContains “microsoft”3 addresses on DomainSpoof’s phishing-host listAkamai Linode
DetailsHide details for onmicrosoftfolder.sbs
- Domain
- onmicrosoftfolder.sbs
- Match
- A registered domain containing “microsoft”, one of the names we match for Microsoft
- Zone file copy
- 2026-10-31 · the day of the .sbs zone file copy it was found in
- Registered
- 2026-07-08 · NameSilo, LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 13:14 UTC
- 3 addresses on DomainSpoof’s phishing-host list
- 172.232.24.161 (onmicrosoftfolder.sbs resolved to it 2026-11-05 00:46 UTC), 172.232.24.235 (onmicrosoftfolder.sbs resolved to it 2026-11-05 00:46 UTC), 172.234.25.42 (onmicrosoftfolder.sbs resolved to it 2026-11-05 00:46 UTC) are on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours
- Addresses
- 172.232.24.161 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)172.232.24.235 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)172.234.25.42 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
- Akamai Linode
- Akamai Linode (172.232.24.161, 172.232.24.235, 172.234.25.42): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoftprada.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for microsoftprada.xyz
- Domain
- microsoftprada.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-07-04 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 13:14 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoftprada.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoftcisco.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for microsoftcisco.xyz
- Domain
- microsoftcisco.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-07-02 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 13:14 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoftcisco.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoftinstagram.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for microsoftinstagram.xyz
- Domain
- microsoftinstagram.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-07-02 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 13:14 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoftinstagram.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsofttencent.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for microsofttencent.xyz
- Domain
- microsofttencent.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-07-02 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 13:14 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsofttencent.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hsbc-microsoft.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for hsbc-microsoft.xyz
- Domain
- hsbc-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-29 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 13:14 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · hsbc-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ibm-microsoft.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for ibm-microsoft.xyz
- Domain
- ibm-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-29 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 13:14 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · ibm-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-bmw.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for microsoft-bmw.xyz
- Domain
- microsoft-bmw.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-29 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 13:14 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-bmw.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-fedex.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for microsoft-fedex.xyz
- Domain
- microsoft-fedex.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-29 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 13:14 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-fedex.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-nintendo.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for microsoft-nintendo.xyz
- Domain
- microsoft-nintendo.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-29 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 13:14 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-nintendo.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-puma.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for microsoft-puma.xyz
- Domain
- microsoft-puma.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-29 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 13:14 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-puma.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-sap.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for microsoft-sap.xyz
- Domain
- microsoft-sap.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-29 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 13:14 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-sap.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-target.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for microsoft-target.xyz
- Domain
- microsoft-target.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-29 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 13:14 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-target.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-volkswagen.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for microsoft-volkswagen.xyz
- Domain
- microsoft-volkswagen.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-29 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 13:14 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-volkswagen.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- nintendo-microsoft.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for nintendo-microsoft.xyz
- Domain
- nintendo-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-29 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 13:14 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · nintendo-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- cisco-microsoft.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for cisco-microsoft.xyz
- Domain
- cisco-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-28 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 13:14 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · cisco-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hermes-microsoft.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for hermes-microsoft.xyz
- Domain
- hermes-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-28 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 13:14 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · hermes-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- kia-microsoft.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for kia-microsoft.xyz
- Domain
- kia-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-28 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 13:14 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · kia-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-amazon.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for microsoft-amazon.xyz
- Domain
- microsoft-amazon.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-28 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 13:14 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-amazon.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-hyundai.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for microsoft-hyundai.xyz
- Domain
- microsoft-hyundai.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-28 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 13:14 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-hyundai.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-nescafe.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for microsoft-nescafe.xyz
- Domain
- microsoft-nescafe.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-28 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 13:14 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-nescafe.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-pepsi.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for microsoft-pepsi.xyz
- Domain
- microsoft-pepsi.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-28 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 13:14 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-pepsi.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-starbucks.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for microsoft-starbucks.xyz
- Domain
- microsoft-starbucks.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-28 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 13:14 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-starbucks.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-zara.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for microsoft-zara.xyz
- Domain
- microsoft-zara.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-28 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 13:14 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-zara.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- paypal-microsoft.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for paypal-microsoft.xyz
- Domain
- paypal-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-28 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 13:14 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · paypal-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- prada-microsoft.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for prada-microsoft.xyz
- Domain
- prada-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-28 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 13:14 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · prada-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- gillette-microsoft.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for gillette-microsoft.xyz
- Domain
- gillette-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-27 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 13:14 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · gillette-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-netflix.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for microsoft-netflix.xyz
- Domain
- microsoft-netflix.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-27 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 13:14 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-netflix.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- tencent-microsoft.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for tencent-microsoft.xyz
- Domain
- tencent-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-27 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 13:14 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · tencent-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- totalenergies-microsoft.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for totalenergies-microsoft.xyz
- Domain
- totalenergies-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-27 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 13:14 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · totalenergies-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- sap-microsoft.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for sap-microsoft.xyz
- Domain
- sap-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-26 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 13:14 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · sap-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- sharepoint.tips DE · AS212317 · HETZNER-CLOUD3-AS Hetzner O…14 addressesContains “sharepoint”5 addresses on DomainSpoof’s phishing-host listHetzner +1
DetailsHide details for sharepoint.tips
- Domain
- sharepoint.tips
- Match
- A domain containing “sharepoint”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .tips zone file, already registered
- Registered
- 2026-06-15 · Domain Science Kutatási Szolgáltató Korlátolt Felelősségű Társaság
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 13:14 UTC
- 5 addresses on DomainSpoof’s phishing-host list
- 195.201.128.179 (sharepoint.tips resolved to it 2026-11-05 00:46 UTC), 46.62.237.138 (sharepoint.tips resolved to it 2026-11-05 00:46 UTC), 5.161.230.87 (sharepoint.tips resolved to it 2026-11-05 00:46 UTC), 5.161.47.86 (sharepoint.tips resolved to it 2026-11-05 00:46 UTC), 5.78.156.59 (sharepoint.tips resolved to it 2026-11-05 00:46 UTC) are on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours
- Addresses
- 5.78.156.59 · Germany · AS212317 HETZNER-CLOUD3-AS Hetzner Online GmbH5.161.47.86 · Germany · AS213230 HETZNER-CLOUD2-AS Hetzner Online GmbH5.161.230.87 · Germany · AS213230 HETZNER-CLOUD2-AS Hetzner Online GmbH46.62.237.138 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)76.223.91.20 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)195.201.128.179 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)2406:da1e:214:c901:49:871:e9e1:eb922600:1f1c:6db:8801:ca20:5f5a:5f45:48d02a05:d014:179b:c400:b5e:feaf:a6dc:b5082a05:d014:179b:c400:2dc9:16fd:7cbd:e2552a05:d014:179b:c400:5ed8:1db0:4443:ca252a05:d014:179b:c400:a327:40ee:24cc:61802a05:d014:179b:c400:aa99:a226:6c94:e722a05:d014:179b:c400:adda:f567:8e83:5e24
- Hetzner +1
- Hetzner (46.62.237.138, 195.201.128.179): a cloud provider. It rents servers and addresses to its customers. Amazon Web Services (76.223.91.20): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-ai-claude.top DE · AS47846 · SEDO-AS SEDO GmbHContains “microsoft”Listed by MetaMaskParking page · Sedo
DetailsHide details for microsoft-ai-claude.top
- Domain
- microsoft-ai-claude.top
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-03 · the day we first found it in the .top zone file, already registered
- Registered
- 2026-05-29 · NameSilo,LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 13:14 UTC
- Listed by MetaMask
- Listed by MetaMask · microsoft-ai-claude.top · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 91.195.240.123 · Germany · AS47846 SEDO-AS SEDO GmbH · Sedo (parking page)
- Parking page · Sedo
- Sedo (91.195.240.123): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-google.top DE · AS47846 · SEDO-AS SEDO GmbHContains “microsoft”Listed by MetaMaskParking page · Sedo
DetailsHide details for microsoft-google.top
- Domain
- microsoft-google.top
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-03 · the day we first found it in the .top zone file, already registered
- Registered
- 2026-05-29 · NameSilo,LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 13:14 UTC
- Listed by MetaMask
- Listed by MetaMask · microsoft-google.top · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 91.195.240.123 · Germany · AS47846 SEDO-AS SEDO GmbH · Sedo (parking page)
- Parking page · Sedo
- Sedo (91.195.240.123): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoftcom.live US · AS16509 · Amazon.com, Inc.2 addressesContains “microsoft”Listed by MetaMaskReported by PhishDestroyRegistry lookup queuedAmazon Web Services
DetailsHide details for microsoftcom.live
- Domain
- microsoftcom.live
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .live zone file, already registered
- Registered
- 2026-05-29 · GoDaddy.com, LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 13:14 UTC
- Listed by MetaMask
- Listed by MetaMask · microsoftcom.live · in the feed since 2026-10-27 05:34 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · microsoftcom.live · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 13.248.243.5 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)76.223.105.230 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (13.248.243.5, 76.223.105.230): a cloud provider. It rents servers and addresses to its customers.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- evaservi-hotmail.online DE · AS8560 · IONOS-AS IONOS SEContains “hotmail”Address on DomainSpoof’s phishing-host listIONOSMX present
DetailsHide details for evaservi-hotmail.online
- Domain
- evaservi-hotmail.online
- Match
- A domain containing “hotmail”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .online zone file, already registered
- Registered
- 2026-05-24 · IONOS SE
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 13:14 UTC
- Address on DomainSpoof’s phishing-host list
- 217.76.128.47 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · evaservi-hotmail.online resolved to it 2026-11-05 00:46 UTC
- Addresses
- 217.76.128.47 · Germany · AS8560 IONOS-AS IONOS SE · IONOS (shared hosting)
- IONOS
- IONOS (217.76.128.47): shared web hosting and domain registration. One address typically serves many customer sites.
- MX
- mx.serviciodecorreo.es
- Daily check
- Ended 2026-11-04 22:41 UTC
- outlook-mail.site CY · AS47583 · AS-HOSTINGER Hostinger Inte…Contains “outlook”Address on DomainSpoof’s phishing-host listHostinger
DetailsHide details for outlook-mail.site
- Domain
- outlook-mail.site
- Match
- A registered domain containing “outlook”, one of the names we match for Microsoft
- Zone file copy
- 2026-10-31 · the day of the .site zone file copy it was found in
- Registered
- 2026-04-24 · HOSTINGER operations, UAB
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 13:14 UTC
- Address on DomainSpoof’s phishing-host list
- 2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · outlook-mail.site resolved to it 2026-11-05 00:46 UTC
- Addresses
- 2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
- Hostinger
- Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
- Daily check
- Ended 2026-11-04 22:41 UTC
- entra-id-platform.online JP · AS7506 · GMO Internet, Inc.Contains “entra-id”Address on DomainSpoof’s phishing-host list
DetailsHide details for entra-id-platform.online
- Domain
- entra-id-platform.online
- Match
- A domain containing “entra-id”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .online zone file, already registered
- Registered
- 2026-04-19 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 13:14 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · entra-id-platform.online resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- azure-microsoft.top JP · AS9370 · SAKURA Internet Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for azure-microsoft.top
- Domain
- azure-microsoft.top
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-03 · the day we first found it in the .top zone file, already registered
- Registered
- 2026-04-09 · GMO Internet, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 13:14 UTC
- Address on DomainSpoof’s phishing-host list
- 160.16.200.77 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · azure-microsoft.top resolved to it 2026-11-05 00:46 UTC
- Addresses
- 160.16.200.77 · Japan · AS9370 SAKURA-B - SAKURA Internet Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- team-microsoft.top JP · AS9370 · SAKURA Internet Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for team-microsoft.top
- Domain
- team-microsoft.top
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-03 · the day we first found it in the .top zone file, already registered
- Registered
- 2026-04-09 · GMO Internet, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 13:14 UTC
- Address on DomainSpoof’s phishing-host list
- 160.16.200.77 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · team-microsoft.top resolved to it 2026-11-05 00:46 UTC
- Addresses
- 160.16.200.77 · Japan · AS9370 SAKURA-B - SAKURA Internet Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-office365.cloud DE · AS8560 · IONOS-AS IONOS SE2 addressesContains “microsoft”Reported by PhishDestroyAddress on DomainSpoof’s phishing-host listIONOSMX present
DetailsHide details for microsoft-office365.cloud
- Domain
- microsoft-office365.cloud
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .cloud zone file, already registered
- Registered
- 2026-03-18 · IONOS SE
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 13:14 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · microsoft-office365.cloud · in the feed since 2026-10-25 23:31 UTC
- Address on DomainSpoof’s phishing-host list
- 217.160.0.235 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-office365.cloud resolved to it 2026-11-05 00:46 UTC
- Addresses
- 217.160.0.235 · Germany · AS8560 IONOS-AS IONOS SE · IONOS (shared hosting)2001:8d8:100f:f000::200
- IONOS
- IONOS (217.160.0.235): shared web hosting and domain registration. One address typically serves many customer sites.
- MX
- mx00.ionos.demx01.ionos.de
- Daily check
- Ended 2026-11-04 22:41 UTC
- office365online.live CY · AS47583 · AS-HOSTINGER Hostinger Inte…Contains “office365”Address on DomainSpoof’s phishing-host listHostingerMX present
DetailsHide details for office365online.live
- Domain
- office365online.live
- Match
- A domain containing “office365”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .live zone file, already registered
- Registered
- 2026-03-15 · HOSTINGER operations, UAB
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 13:14 UTC
- Address on DomainSpoof’s phishing-host list
- 2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · office365online.live resolved to it 2026-11-05 00:46 UTC
- Addresses
- 2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
- Hostinger
- Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
- MX
- mx1.hostinger.commx2.hostinger.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- hotmails.sbs CY · AS47583 · AS-HOSTINGER Hostinger Inte…Contains “hotmail”Address on DomainSpoof’s phishing-host listHostingerMX present
DetailsHide details for hotmails.sbs
- Domain
- hotmails.sbs
- Match
- A registered domain containing “hotmail”, one of the names we match for Microsoft
- Zone file copy
- 2026-10-31 · the day of the .sbs zone file copy it was found in
- Registered
- 2026-01-05 · HOSTINGER operations, UAB
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 13:14 UTC
- Address on DomainSpoof’s phishing-host list
- 2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · hotmails.sbs resolved to it 2026-11-05 00:46 UTC
- Addresses
- 2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
- Hostinger
- Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
- MX
- mx1.hostinger.commx2.hostinger.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- secret-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for secret-microsoft.xyz
- Domain
- secret-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-25 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 13:14 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · secret-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- session-microsoft-trello.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for session-microsoft-trello.xyz
- Domain
- session-microsoft-trello.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-25 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 13:14 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · session-microsoft-trello.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- short-authority-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for short-authority-microsoft.xyz
- Domain
- short-authority-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-25 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 13:14 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · short-authority-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- shortcut-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for shortcut-microsoft.xyz
- Domain
- shortcut-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-25 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 13:14 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · shortcut-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- simulink-microsoft-class.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for simulink-microsoft-class.xyz
- Domain
- simulink-microsoft-class.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-25 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 13:14 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · simulink-microsoft-class.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- simulink-priority-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for simulink-priority-microsoft.xyz
- Domain
- simulink-priority-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-25 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 13:14 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · simulink-priority-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- smartsheet-microsoft-rest.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for smartsheet-microsoft-rest.xyz
- Domain
- smartsheet-microsoft-rest.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-25 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 13:14 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · smartsheet-microsoft-rest.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- smartsheet-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for smartsheet-microsoft.xyz
- Domain
- smartsheet-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-25 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 13:14 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · smartsheet-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- smartsheet-seaborn-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for smartsheet-seaborn-microsoft.xyz
- Domain
- smartsheet-seaborn-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-25 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 13:14 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · smartsheet-seaborn-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- snapshot-microsoft-circleci.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for snapshot-microsoft-circleci.xyz
- Domain
- snapshot-microsoft-circleci.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-25 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 13:14 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · snapshot-microsoft-circleci.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- soap-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for soap-microsoft.xyz
- Domain
- soap-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-25 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 13:14 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · soap-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- solidworks-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for solidworks-microsoft.xyz
- Domain
- solidworks-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-25 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 13:14 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · solidworks-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- utilization-follower-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for utilization-follower-microsoft.xyz
- Domain
- utilization-follower-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 13:14 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · utilization-follower-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- variable-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for variable-microsoft.xyz
- Domain
- variable-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 13:14 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · variable-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- verilog-microsoft-tablet.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for verilog-microsoft-tablet.xyz
- Domain
- verilog-microsoft-tablet.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 13:14 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · verilog-microsoft-tablet.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- vhdl-microsoft-partition.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for vhdl-microsoft-partition.xyz
- Domain
- vhdl-microsoft-partition.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 13:14 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · vhdl-microsoft-partition.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- wasm-microsoft-bootstrap.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for wasm-microsoft-bootstrap.xyz
- Domain
- wasm-microsoft-bootstrap.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 13:14 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · wasm-microsoft-bootstrap.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- wasm-wrike-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for wasm-wrike-microsoft.xyz
- Domain
- wasm-wrike-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 13:14 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · wasm-wrike-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- wave-confluence-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for wave-confluence-microsoft.xyz
- Domain
- wave-confluence-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 13:14 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · wave-confluence-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- waypoint-microsoft-store.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for waypoint-microsoft-store.xyz
- Domain
- waypoint-microsoft-store.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 13:14 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · waypoint-microsoft-store.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- while-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for while-microsoft.xyz
- Domain
- while-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 13:14 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · while-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- whom-microsoft-connect.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for whom-microsoft-connect.xyz
- Domain
- whom-microsoft-connect.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 13:14 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · whom-microsoft-connect.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- yaml-microsoft-vector.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for yaml-microsoft-vector.xyz
- Domain
- yaml-microsoft-vector.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 13:14 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · yaml-microsoft-vector.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- office365-sec.xyz TR · AS51557 · TR-ISIMTESCIL-20201202 Isim…Contains “office365”Address on DomainSpoof’s phishing-host list
DetailsHide details for office365-sec.xyz
- Domain
- office365-sec.xyz
- Match
- A registered domain containing “office365”, one of the names we match for Microsoft
- Zone file copy
- 2026-10-31 · the day of the .xyz zone file copy it was found in
- Registered
- 2025-12-24 · İsimtescil Bilişim A.Ş.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 13:14 UTC
- Address on DomainSpoof’s phishing-host list
- 93.89.226.17 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · office365-sec.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 93.89.226.17 · Türkiye · AS51557 TR-ISIMTESCIL-20201202 Isimtescil Bilisim A.S.
- Daily check
- Ended 2026-11-04 22:41 UTC
- onedrive365.live US · AS214036 · ULTAHOST-AS Ultahost, Inc.Contains “onedrive”Address on DomainSpoof’s phishing-host listMX present
DetailsHide details for onedrive365.live
- Domain
- onedrive365.live
- Match
- A registered domain containing “onedrive”, one of the names we match for Microsoft
- Zone file copy
- 2026-10-31 · the day of the .live zone file copy it was found in
- Registered
- 2025-12-18 · Ultahost, Inc
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 13:14 UTC
- Address on DomainSpoof’s phishing-host list
- 79.133.41.61 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · onedrive365.live resolved to it 2026-11-05 00:46 UTC
- Addresses
- 79.133.41.61 · United States · AS214036 ULTAHOST-AS Ultahost, Inc.
- MX
- onedrive365.live
- Daily check
- Ended 2026-11-04 22:41 UTC
- hotmailbr.store CY · AS47583 · AS-HOSTINGER Hostinger Inte…Contains “hotmail”Address on DomainSpoof’s phishing-host listHostinger
DetailsHide details for hotmailbr.store
- Domain
- hotmailbr.store
- Match
- A registered domain containing “hotmail”, one of the names we match for Microsoft
- Zone file copy
- 2026-10-31 · the day of the .store zone file copy it was found in
- Registered
- 2025-12-15 · HOSTINGER operations, UAB
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 13:14 UTC
- Address on DomainSpoof’s phishing-host list
- 2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · hotmailbr.store resolved to it 2026-11-05 00:46 UTC
- Addresses
- 2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
- Hostinger
- Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
- Daily check
- Ended 2026-11-04 22:41 UTC
- instagram-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for instagram-microsoft.xyz
- Domain
- instagram-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 13:14 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · instagram-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- instagram-when-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for instagram-when-microsoft.xyz
- Domain
- instagram-when-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 13:14 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · instagram-when-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- instance-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for instance-microsoft.xyz
- Domain
- instance-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 13:14 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · instance-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- jetty-microsoft-drone.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for jetty-microsoft-drone.xyz
- Domain
- jetty-microsoft-drone.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 13:14 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · jetty-microsoft-drone.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- jetty-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for jetty-microsoft.xyz
- Domain
- jetty-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 13:14 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · jetty-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- jetty-opengl-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for jetty-opengl-microsoft.xyz
- Domain
- jetty-opengl-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 13:14 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · jetty-opengl-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
