Microsoft

Software & cloud United Statesmicrosoft.comRank 1 of the most impersonated
Cert findings · 24 h
11
Cert findings · 7 days
118
64 reported or listed · 50 on phishing hosts · 4 on Spamhaus DROP
Registered lookalikes
1,670
121 listed by a source or an address list
Official domains
576
verified from Microsoft's own sites and records

Registered lookalikes

Checked daily · 2026-11-04 22:41 UTC

Spellings of Microsoft's official domains (microsoft.com, office365.com, hotmail.com, …) registered to other owners (identified by nameservers, registrar and redirects), checked daily; the ones with no address or mail server yet say so. Many are parked, for sale or run by other businesses and sites with a similar name; the ones a phishing source or address list has flagged carry a label.

Some of these come from registry zone files (ICANN CZDS). Our zone data terms apply to them: no marketing use of any kind, no harassing their registrants, no high-volume registry or registrar queries.

121 of the 1,670 are listed by a source or resolve to a listed address, checked hourly.

  1. office365.net.cn CN · AS37963 · Hangzhou Alibaba Advertisin…Lookalike of office365.com · the ending .net.cn
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    office365.net.cn
    Spelling
    The name of office365.com with the ending .net.cn
    First found
    2026-11-01 · the day the daily DNS check first found it registered
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    139.196.15.172 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · office365.net.cn resolved to it 2026-11-01 21:04 UTC
    Addresses
    139.196.15.172 · China · AS37963 ALIBABA-CN-NET - Hangzhou Alibaba Advertising Co.,Ltd.
    Daily check
    Ended 2026-11-04 22:41 UTC
  2. office365.or.at AT · AS25575 · DOMAINTECHNIK Ledl.net GmbH…Lookalike of office365.com · the ending .or.at
    Address on DomainSpoof’s phishing-host listMX present
    DetailsHide
    Domain
    office365.or.at
    Spelling
    The name of office365.com with the ending .or.at
    First found
    2026-11-01 · the day the daily DNS check first found it registered
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    213.145.228.16 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · office365.or.at resolved to it 2026-11-01 21:04 UTC
    Addresses
    213.145.228.16 · Austria · AS25575 DOMAINTECHNIK Ledl.net GmbH & Co. KG
    MX
    office365-or-at.mail.protection.outlook.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  3. hotmail.kz KZ · AS48716 · PSKZ-ALA PS Internet Compan…2 addressesLookalike of hotmail.com · the ending .kz
    Address on DomainSpoof’s phishing-host listMX present
    DetailsHide
    Domain
    hotmail.kz
    Spelling
    The name of hotmail.com with the ending .kz
    First found
    2026-11-01 · the day the daily DNS check first found it registered
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    194.39.65.21 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · hotmail.kz resolved to it 2026-11-01 13:15 UTC
    Addresses
    194.39.65.21 · Kazakhstan · AS48716 PSKZ-ALA PS Internet Company LLP
    2a00:5da0:1000::163
    MX
    mail.hotmail.kz
    Daily check
    Ended 2026-11-04 22:41 UTC
  4. hotmail.nz AU · AS38719 · Dreamscape Networks LimitedLookalike of hotmail.com · the ending .nz
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    hotmail.nz
    Spelling
    The name of hotmail.com with the ending .nz
    First found
    2026-11-01 · the day the daily DNS check first found it registered
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    202.174.80.44 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · hotmail.nz resolved to it 2026-11-01 13:15 UTC
    Addresses
    202.174.80.44 · Australia · AS38719 DREAMSCAPE-AS-AP - Dreamscape Networks Limited
    Daily check
    Ended 2026-11-04 22:41 UTC
  5. microsoftonline.lt CY · AS47583 · AS-HOSTINGER Hostinger Inte…Lookalike of microsoftonline.com · the ending .lt
    Address on DomainSpoof’s phishing-host listHostinger
    DetailsHide
    Domain
    microsoftonline.lt
    Spelling
    The name of microsoftonline.com with the ending .lt
    First found
    2026-10-31 · the day the daily DNS check first found it registered
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoftonline.lt resolved to it 2026-11-05 05:20 UTC
    Addresses
    2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
    Daily check
    Ended 2026-11-04 22:41 UTC
  6. microsoft365.eu PL · AS48707 · AS48707-OPS-PL AS48707 OPS …Lookalike of microsoft365.com · the ending .eu
    Address on DomainSpoof’s phishing-host listMX present
    DetailsHide
    Domain
    microsoft365.eu
    Spelling
    The name of microsoft365.com with the ending .eu
    First found
    2026-10-31 · the day the daily DNS check first found it registered
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    185.253.212.22 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft365.eu resolved to it 2026-11-05 05:18 UTC
    Addresses
    185.253.212.22 · Poland · AS48707 AS48707-OPS-PL AS48707 OPS PL sp. z o.o.
    MX
    blackhole.aftermarket.pl
    Daily check
    Ended 2026-11-04 22:41 UTC
  7. microsoft365.hu HU · AS208154 · elin ELIN.hu Informatikai S…Lookalike of microsoft365.com · the ending .hu
    Address on DomainSpoof’s phishing-host listMX present
    DetailsHide
    Domain
    microsoft365.hu
    Spelling
    The name of microsoft365.com with the ending .hu
    First found
    2026-10-31 · the day the daily DNS check first found it registered
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    185.75.192.3 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft365.hu resolved to it 2026-11-05 05:18 UTC
    Addresses
    185.75.192.3 · Hungary · AS208154 elin ELIN.hu Informatikai Szolgaltato es Tanacsado Kft.
    MX
    microsoft365-hu.mail.protection.outlook.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  8. microsoft365.kz US · AS40934 · Fortinet Inc.2 addressesLookalike of microsoft365.com · the ending .kz
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    microsoft365.kz
    Spelling
    The name of microsoft365.com with the ending .kz
    First found
    2026-10-31 · the day the daily DNS check first found it registered
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    208.91.112.55 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft365.kz resolved to it 2026-11-05 05:18 UTC
    Addresses
    208.91.112.55 · United States · AS40934 FORTINET - Fortinet Inc.
    2620:101:9000:53::55
    Daily check
    Ended 2026-11-04 22:41 UTC
  9. microsoft365.ph US · AS23470 · ReliableSite.Net LLCLookalike of microsoft365.com · the ending .ph
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    microsoft365.ph
    Spelling
    The name of microsoft365.com with the ending .ph
    First found
    2026-10-31 · the day the daily DNS check first found it registered
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    172.93.103.101 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft365.ph resolved to it 2026-11-05 05:18 UTC
    Addresses
    172.93.103.101 · United States · AS23470 RELIABLESITE - ReliableSite.Net LLC
    Daily check
    Ended 2026-11-04 22:41 UTC
  10. microsoft365.sk SK · AS51013 · WEBSUPPORT-SRO-SK-AS WebSup…2 addressesLookalike of microsoft365.com · the ending .sk
    Address on DomainSpoof’s phishing-host listMX present
    DetailsHide
    Domain
    microsoft365.sk
    Spelling
    The name of microsoft365.com with the ending .sk
    First found
    2026-10-31 · the day the daily DNS check first found it registered
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    37.9.175.196 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft365.sk resolved to it 2026-11-05 05:18 UTC
    Addresses
    37.9.175.196 · Slovakia · AS51013 WEBSUPPORT-SRO-SK-AS WebSupport s.r.o.
    2a00:4b40:aaaa:2009::5
    MX
    microsoft365-sk.mail.protection.outlook.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  11. miccrosoft.de DE · AS24940 · HETZNER-AS Hetzner Online G…Lookalike of microsoft.com · a doubled letter
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide
    Domain
    miccrosoft.de
    Spelling
    Spelled like microsoft.com with a doubled letter
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    The registry publishes no registration date for .de
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    144.76.59.138 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · miccrosoft.de resolved to it 2026-11-04 18:09 UTC
    Addresses
    144.76.59.138 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (144.76.59.138): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  12. microoft.de DE · AS24940 · HETZNER-AS Hetzner Online G…Lookalike of microsoft.com · a dropped letter
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide
    Domain
    microoft.de
    Spelling
    Spelled like microsoft.com with a dropped letter
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    The registry publishes no registration date for .de
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    144.76.59.138 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microoft.de resolved to it 2026-11-04 18:09 UTC
    Addresses
    144.76.59.138 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (144.76.59.138): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  13. microsofft.it IT · AS31034 · ARUBA-ASN Aruba S.p.A.Lookalike of microsoft.com · a doubled letter
    Address on DomainSpoof’s phishing-host listMX present
    DetailsHide
    Domain
    microsofft.it
    Spelling
    Spelled like microsoft.com with a doubled letter
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    62.149.128.40 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsofft.it resolved to it 2026-11-04 18:09 UTC
    Addresses
    62.149.128.40 · Italy · AS31034 ARUBA-ASN Aruba S.p.A.
    MX
    mx.microsofft.it
    Daily check
    Ended 2026-11-04 22:41 UTC
  14. midrosoft.de DE · AS8560 · IONOS-AS IONOS SELookalike of microsoft.com · a letter from a neighbouring key
    Address on DomainSpoof’s phishing-host listIONOSMX present
    DetailsHide
    Domain
    midrosoft.de
    Spelling
    Spelled like microsoft.com with a letter from a neighbouring key
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    The registry publishes no registration date for .de
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    217.160.0.36 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · midrosoft.de resolved to it 2026-11-04 18:09 UTC
    Addresses
    217.160.0.36 · Germany · AS8560 IONOS-AS IONOS SE · IONOS (shared hosting)
    IONOS
    IONOS (217.160.0.36): shared web hosting and domain registration. One address typically serves many customer sites.
    MX
    mx00.ionos.de
    mx01.ionos.de
    Daily check
    Ended 2026-11-04 22:41 UTC
  15. mircosoft.de DE · AS8560 · IONOS-AS IONOS SE2 addressesLookalike of microsoft.com · two letters swapped
    Address on DomainSpoof’s phishing-host listIONOSMX present
    DetailsHide
    Domain
    mircosoft.de
    Spelling
    Spelled like microsoft.com with two letters swapped
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    The registry publishes no registration date for .de
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    217.160.0.127 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · mircosoft.de resolved to it 2026-11-04 18:09 UTC
    Addresses
    217.160.0.127 · Germany · AS8560 IONOS-AS IONOS SE · IONOS (shared hosting)
    2001:8d8:100f:f000::200
    IONOS
    IONOS (217.160.0.127): shared web hosting and domain registration. One address typically serves many customer sites.
    MX
    mx00.ionos.de
    mx01.ionos.de
    Daily check
    Ended 2026-11-04 22:41 UTC
  16. mlcrosoft.eu FR · AS24935 · ATE-AS Eurofiber France SASLookalike of microsoft.com · similar-looking characters
    Address on DomainSpoof’s phishing-host listMX present
    DetailsHide
    Domain
    mlcrosoft.eu
    Spelling
    Spelled like microsoft.com with similar-looking characters
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    185.26.106.234 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · mlcrosoft.eu resolved to it 2026-11-04 18:09 UTC
    Addresses
    185.26.106.234 · France · AS24935 ATE-AS Eurofiber France SAS
    MX
    mx1.netim.net
    mx2.netim.net
    Daily check
    Ended 2026-11-04 22:41 UTC
  17. rnicrosoft.lt LT · AS212531 · Interneto-vizija UAB "Inter…Lookalike of microsoft.com · similar-looking characters
    Address on DomainSpoof’s phishing-host listMX present
    DetailsHide
    Domain
    rnicrosoft.lt
    Spelling
    Spelled like microsoft.com with similar-looking characters
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    79.98.25.1 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · rnicrosoft.lt resolved to it 2026-11-04 18:09 UTC
    Addresses
    79.98.25.1 · Lithuania · AS212531 Interneto-vizija UAB "Interneto vizija"
    MX
    mx-parked.serveriai.lt
    mx-backup.serveriai.lt
    Daily check
    Ended 2026-11-04 22:41 UTC
  18. h0tmail.es DE · AS6724 · STRATO Strato GmbH2 addressesLookalike of hotmail.com · similar-looking characters
    Address on DomainSpoof’s phishing-host listMX present
    DetailsHide
    Domain
    h0tmail.es
    Spelling
    Spelled like hotmail.com with similar-looking characters
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    81.169.145.153 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · h0tmail.es resolved to it 2026-11-04 16:24 UTC
    Addresses
    81.169.145.153 · Germany · AS6724 STRATO Strato GmbH
    2a01:238:20a:202:1153::
    MX
    smtp.rzone.de
    Daily check
    Ended 2026-11-04 22:41 UTC
  19. hotmaill.de DE · AS24940 · HETZNER-AS Hetzner Online G…Lookalike of hotmail.com · a doubled letter
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide
    Domain
    hotmaill.de
    Spelling
    Spelled like hotmail.com with a doubled letter
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    The registry publishes no registration date for .de
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    144.76.59.138 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · hotmaill.de resolved to it 2026-11-04 16:24 UTC
    Addresses
    144.76.59.138 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (144.76.59.138): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  20. hotmsil.de DE · AS24940 · HETZNER-AS Hetzner Online G…Lookalike of hotmail.com · a letter from a neighbouring key
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide
    Domain
    hotmsil.de
    Spelling
    Spelled like hotmail.com with a letter from a neighbouring key
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    The registry publishes no registration date for .de
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    144.76.59.138 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · hotmsil.de resolved to it 2026-11-04 16:24 UTC
    Addresses
    144.76.59.138 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (144.76.59.138): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  21. hotmsil.it IT · AS31034 · ARUBA-ASN Aruba S.p.A.Lookalike of hotmail.com · a letter from a neighbouring key
    Address on DomainSpoof’s phishing-host listMX present
    DetailsHide
    Domain
    hotmsil.it
    Spelling
    Spelled like hotmail.com with a letter from a neighbouring key
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    62.149.128.40 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · hotmsil.it resolved to it 2026-11-04 16:24 UTC
    Addresses
    62.149.128.40 · Italy · AS31034 ARUBA-ASN Aruba S.p.A.
    MX
    mx.hotmsil.it
    Daily check
    Ended 2026-11-04 22:41 UTC
  22. microssoft.netLookalike of microsoft.com · a doubled letter
    No address or mail server yet
    DetailsHide
    Domain
    microssoft.net
    Spelling
    Spelled like microsoft.com with a doubled letter
    First found
    2026-11-04 · the day the daily DNS check first found it registered
    Registered
    2026-11-04 · Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  23. micro-softs.org DE · AS24940 · HETZNER-AS Hetzner Online G…Lookalike of microsoft.com · an added character
    Registry lookup queuedHetznerMX present
    DetailsHide
    Domain
    micro-softs.org
    Spelling
    Spelled like microsoft.com with an added character
    First found
    2026-11-04 · the day the .org zone file first listed it as a new registration
    Registered
    2026-11-03 · Wild West Domains, LLC
    Addresses
    65.108.222.128 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (65.108.222.128): a cloud provider. It rents servers and addresses to its customers.
    MX
    mail.micro-softs.org
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  24. microsofts.network US · AS13335 · Cloudflare, Inc.4 addressesLookalike of microsoft.com · an added character
    Cloudflare
    DetailsHide
    Domain
    microsofts.network
    Spelling
    Spelled like microsoft.com with an added character
    First found
    2026-11-04 · the day the .network zone file first listed it as a new registration
    Registered
    2026-11-03 · Dynadot Inc
    Addresses
    104.21.58.151 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.205.44 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3033::ac43:cd2c
    2606:4700:3034::6815:3a97
    Cloudflare
    Cloudflare (104.21.58.151, 172.67.205.44): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  25. auth-microsoft.app US · AS13335 · Cloudflare, Inc.4 addressesLookalike of microsoft.com · the name with the word “auth”
    Cloudflare
    DetailsHide
    Domain
    auth-microsoft.app
    Spelling
    The name of microsoft.com with the word “auth”
    First found
    2026-11-04 · the day the .app zone file first listed it as a new registration
    Registered
    2026-11-02 · CloudFlare, Inc.
    Addresses
    104.21.18.90 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.181.134 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3034::6815:125a
    2606:4700:3034::ac43:b586
    Cloudflare
    Cloudflare (104.21.18.90, 172.67.181.134): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  26. outlook-verify-session.top US · AS13335 · Cloudflare, Inc.4 addressesLookalike of microsoft.com · the name with an added word
    Cloudflare
    DetailsHide
    Domain
    outlook-verify-session.top
    Spelling
    The name of microsoft.com with an added word
    First found
    2026-11-03 · the day we first found it in the .top zone file, already registered
    Registered
    2026-11-02 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    Addresses
    104.21.61.167 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.212.44 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::6815:3da7
    2606:4700:3031::ac43:d42c
    Cloudflare
    Cloudflare (104.21.61.167, 172.67.212.44): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  27. hotmil.xyz US · AS13335 · Cloudflare, Inc.4 addressesLookalike of hotmail.com · a dropped letter
    Cloudflare
    DetailsHide
    Domain
    hotmil.xyz
    Spelling
    Spelled like hotmail.com with a dropped letter
    First found
    2026-11-03 · the day the .xyz zone file first listed it as a new registration
    Registered
    2026-11-02 · Name.com, Inc.
    Addresses
    104.21.16.204 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.215.233 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::6815:10cc
    2606:4700:3032::ac43:d7e9
    Cloudflare
    Cloudflare (104.21.16.204, 172.67.215.233): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  28. mircosoft.services US · AS16509 · Amazon.com, Inc.2 addressesLookalike of microsoft.com · two letters swapped
    Amazon Web Services
    DetailsHide
    Domain
    mircosoft.services
    Spelling
    Spelled like microsoft.com with two letters swapped
    First found
    2026-11-03 · the day the .services zone file first listed it as a new registration
    Registered
    2026-11-02 · GoDaddy.com, LLC
    Addresses
    3.33.130.190 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    15.197.148.33 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (3.33.130.190, 15.197.148.33): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  29. securesharepointonline.icu US · AS13335 · Cloudflare, Inc.4 addressesLookalike of microsoft.com · the name with an added word
    Cloudflare
    DetailsHide
    Domain
    securesharepointonline.icu
    Spelling
    The name of microsoft.com with an added word
    First found
    2026-11-03 · the day the .icu zone file first listed it as a new registration
    Registered
    2026-11-02 · NameSilo, LLC
    Addresses
    104.21.10.51 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.162.46 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3034::6815:a33
    2606:4700:3035::ac43:a22e
    Cloudflare
    Cloudflare (104.21.10.51, 172.67.162.46): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  30. outlook.ssLookalike of outlook.com · the ending .ss
    No address or mail server yet
    DetailsHide
    Domain
    outlook.ss
    Spelling
    The name of outlook.com with the ending .ss
    First found
    2026-11-01 · the day the daily DNS check first found it registered
    Registered
    2026-10-28 · Afriregister South Sudan
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  31. hotmail.ssLookalike of hotmail.com · the ending .ss
    No address or mail server yet
    DetailsHide
    Domain
    hotmail.ss
    Spelling
    The name of hotmail.com with the ending .ss
    First found
    2026-11-01 · the day the daily DNS check first found it registered
    Registered
    2026-10-28 · Afriregister South Sudan
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  32. sharepolnt.app US · AS14061 · DigitalOcean, LLCLookalike of microsoft.com · similar-looking characters
    Registry lookup queuedDigitalOceanMX present
    DetailsHide
    Domain
    sharepolnt.app
    Spelling
    Spelled like microsoft.com with similar-looking characters
    First found
    2026-11-01 · the day we first found it in the .app zone file, already registered
    Registered
    2026-10-27 · GoDaddy.com, LLC
    Addresses
    206.81.5.157 · United States · AS14061 DIGITALOCEAN-ASN - DigitalOcean, LLC · DigitalOcean (cloud provider)
    DigitalOcean
    DigitalOcean (206.81.5.157): a cloud provider. It rents servers and addresses to its customers.
    MX
    mxa.mailgun.org
    mxb.mailgun.org
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  33. hotmail.yt US · AS16509 · Amazon.com, Inc.Lookalike of hotmail.com · the ending .yt
    Amazon Web Services
    DetailsHide
    Domain
    hotmail.yt
    Spelling
    The name of hotmail.com with the ending .yt
    First found
    2026-11-01 · the day the daily DNS check first found it registered
    Registered
    2026-10-27 · Realtime Register B.V.
    Addresses
    52.213.114.86 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (52.213.114.86): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  34. microsooft.dev US · AS8075 · Microsoft CorporationLookalike of microsoft.com · a doubled letter
    Microsoft Azure
    DetailsHide
    Domain
    microsooft.dev
    Spelling
    Spelled like microsoft.com with a doubled letter
    First found
    2026-11-01 · the day we first found it in the .dev zone file, already registered
    Registered
    2026-10-26 · CloudFlare, Inc.
    Addresses
    20.0.144.205 · United States · AS8075 MICROSOFT-CORP-MSN-AS-BLOCK - Microsoft Corporation · Microsoft Azure (cloud provider)
    Microsoft Azure
    Microsoft Azure (20.0.144.205): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  35. mjcrosoftonline.comLookalike of microsoftonline.com · a letter from a neighbouring key
    No address or mail server yet
    DetailsHide
    Domain
    mjcrosoftonline.com
    Spelling
    Spelled like microsoftonline.com with a letter from a neighbouring key
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2026-10-24 · Cloudflare, Inc.
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  36. misrosoft.orgLookalike of microsoft.com · a changed character
    No address or mail server yet
    DetailsHide
    Domain
    misrosoft.org
    Spelling
    Spelled like microsoft.com with a changed character
    First found
    2026-11-01 · the day we first found it in the .org zone file, already registered
    Registered
    2026-10-22 · Squarespace Domains II LLC
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  37. rnicrosoft.funLookalike of microsoft.com · similar-looking characters
    No address or mail server yet
    DetailsHide
    Domain
    rnicrosoft.fun
    Spelling
    Spelled like microsoft.com with similar-looking characters
    First found
    2026-11-01 · the day we first found it in the .fun zone file, already registered
    Registered
    2026-10-22 · Cloudflare, Inc.
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  38. onedrive.website US · AS13335 · Cloudflare, Inc.4 addressesLookalike of onedrive.com · the ending .website
    Cloudflare
    DetailsHide
    Domain
    onedrive.website
    Spelling
    The name of onedrive.com with the ending .website
    First found
    2026-11-01 · the day the daily DNS check first found it registered
    Registered
    2026-10-22 · Network Solutions, LLC
    Addresses
    104.21.59.228 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.184.211 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3033::ac43:b8d3
    2606:4700:3037::6815:3be4
    Cloudflare
    Cloudflare (104.21.59.228, 172.67.184.211): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  39. hotmail.ongLookalike of hotmail.com · the ending .ong
    MX present
    DetailsHide
    Domain
    hotmail.ong
    Spelling
    The name of hotmail.com with the ending .ong
    First found
    2026-11-01 · the day the daily DNS check first found it registered
    Registered
    2026-10-22 · Cloudflare, Inc.
    MX
    aspmx1.migadu.com
    aspmx2.migadu.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  40. microsoftonline.businessLookalike of microsoftonline.com · the ending .business
    No address or mail server yet
    DetailsHide
    Domain
    microsoftonline.business
    Spelling
    The name of microsoftonline.com with the ending .business
    First found
    2026-10-31 · the day the daily DNS check first found it registered
    Registered
    2026-10-22 · Hosting Concepts B.V. d/b/a Registrar.eu
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  41. microsoftonline.enterprisesLookalike of microsoftonline.com · the ending .enterprises
    No address or mail server yet
    DetailsHide
    Domain
    microsoftonline.enterprises
    Spelling
    The name of microsoftonline.com with the ending .enterprises
    First found
    2026-10-31 · the day the daily DNS check first found it registered
    Registered
    2026-10-22 · Hosting Concepts B.V. d/b/a Registrar.eu
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  42. service-microsoft.info US · AS13335 · Cloudflare, Inc.4 addressesLookalike of microsoft.com · the name with the word “service”
    Cloudflare
    DetailsHide
    Domain
    service-microsoft.info
    Spelling
    The name of microsoft.com with the word “service”
    First found
    2026-11-01 · the day we first found it in the .info zone file, already registered
    Registered
    2026-10-21 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    Addresses
    104.21.21.246 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.201.115 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3034::ac43:c973
    2606:4700:3036::6815:15f6
    Cloudflare
    Cloudflare (104.21.21.246, 172.67.201.115): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  43. mlcrosoftsupport.infoLookalike of microsoft.com · similar-looking characters
    MX present
    DetailsHide
    Domain
    mlcrosoftsupport.info
    Spelling
    Spelled like microsoft.com with similar-looking characters
    First found
    2026-11-01 · the day we first found it in the .info zone file, already registered
    Registered
    2026-10-19 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    MX
    mx.zoho.eu
    mx2.zoho.eu
    mx3.zoho.eu
    Daily check
    Ended 2026-11-04 22:41 UTC
  44. rnicrosoftonline.link US · AS31898 · Oracle CorporationLookalike of microsoftonline.com · similar-looking characters
    Oracle Cloud
    DetailsHide
    Domain
    rnicrosoftonline.link
    Spelling
    Spelled like microsoftonline.com with similar-looking characters
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2026-10-19 · Network Solutions, LLC
    Addresses
    74.91.138.142 · United States · AS31898 ORACLE-BMC-31898 - Oracle Corporation · Oracle Cloud (cloud provider)
    Oracle Cloud
    Oracle Cloud (74.91.138.142): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  45. hotmaiil.online US · AS31898 · Oracle CorporationLookalike of hotmail.com · a doubled letter
    Oracle CloudMX present
    DetailsHide
    Domain
    hotmaiil.online
    Spelling
    Spelled like hotmail.com with a doubled letter
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2026-10-19 · NameCheap, Inc.
    Addresses
    50.6.36.216 · United States · AS31898 ORACLE-BMC-31898 - Oracle Corporation · Oracle Cloud (cloud provider)
    Oracle Cloud
    Oracle Cloud (50.6.36.216): a cloud provider. It rents servers and addresses to its customers.
    MX
    eforward1.registrar-servers.com
    eforward2.registrar-servers.com
    eforward3.registrar-servers.com
    eforward4.registrar-servers.com
    eforward5.registrar-servers.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  46. microsoft.kred US · AS13335 · Cloudflare, Inc.4 addressesLookalike of microsoft.com · the ending .kred
    Cloudflare
    DetailsHide
    Domain
    microsoft.kred
    Spelling
    The name of microsoft.com with the ending .kred
    First found
    2026-11-01 · the day the daily DNS check first found it registered
    Registered
    2026-10-18 · Dynadot Inc
    Addresses
    104.21.65.230 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.152.23 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3030::6815:41e6
    2606:4700:3033::ac43:9817
    Cloudflare
    Cloudflare (104.21.65.230, 172.67.152.23): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  47. hotmail.downloadLookalike of hotmail.com · the ending .download
    MX present
    DetailsHide
    Domain
    hotmail.download
    Spelling
    The name of hotmail.com with the ending .download
    First found
    2026-11-01 · the day the daily DNS check first found it registered
    Registered
    2026-10-18 · Cloudflare, Inc.
    MX
    route1.mx.cloudflare.net
    route2.mx.cloudflare.net
    route3.mx.cloudflare.net
    Daily check
    Ended 2026-11-04 22:41 UTC
  48. micros0ft-support.art RO · AS9009 · M247 M247 Europe SRLLookalike of microsoft.com · similar-looking characters
    MX present
    DetailsHide
    Domain
    micros0ft-support.art
    Spelling
    Spelled like microsoft.com with similar-looking characters
    First found
    2026-11-01 · the day we first found it in the .art zone file, already registered
    Registered
    2026-10-16 · NameSilo, LLC
    Addresses
    38.132.122.165 · Romania · AS9009 M247 M247 Europe SRL
    MX
    _dc-mx.5a354dc20a2b.micros0ft-support.art
    Daily check
    Ended 2026-11-04 22:41 UTC
  49. authmicrosoft.xyz US · AS16509 · Amazon.com, Inc.2 addressesLookalike of microsoft.com · the name with an added word
    Parking page · Afternic
    DetailsHide
    Domain
    authmicrosoft.xyz
    Spelling
    The name of microsoft.com with an added word
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-10-15 · GMO Internet Group, Inc. d/b/a Onamae.com
    Addresses
    13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    Parking page · Afternic
    The registry delegates authmicrosoft.xyz to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
    Daily check
    Ended 2026-11-04 22:41 UTC
  50. microsofl.tech DE · AS24940 · HETZNER-AS Hetzner Online G…Lookalike of microsoft.com · a changed character
    HetznerMX present
    DetailsHide
    Domain
    microsofl.tech
    Spelling
    Spelled like microsoft.com with a changed character
    First found
    2026-11-01 · the day we first found it in the .tech zone file, already registered
    Registered
    2026-10-15 · Infomaniak Network SA
    Addresses
    178.104.166.182 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (178.104.166.182): a cloud provider. It rents servers and addresses to its customers.
    MX
    mta-gw.infomaniak.ch
    Daily check
    Ended 2026-11-04 22:41 UTC
  51. microsotf.ca US · AS13335 · Cloudflare, Inc.4 addressesLookalike of microsoft.com · two letters swapped
    CloudflareMX present
    DetailsHide
    Domain
    microsotf.ca
    Spelling
    Spelled like microsoft.com with two letters swapped
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2026-10-15 · Gandi Services Inc., Gandi SAS
    Addresses
    104.21.33.195 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.149.24 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3030::6815:21c3
    2606:4700:3034::ac43:9518
    Cloudflare
    Cloudflare (104.21.33.195, 172.67.149.24): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    MX
    mail.protonmail.ch
    mailsec.protonmail.ch
    Daily check
    Ended 2026-11-04 22:41 UTC
  52. h0tmail.cam BG · AS44476 · zetta-as ZETTA HOSTING SOLU…Lookalike of hotmail.com · similar-looking characters
    MX present
    DetailsHide
    Domain
    h0tmail.cam
    Spelling
    Spelled like hotmail.com with similar-looking characters
    First found
    2026-11-01 · the day we first found it in the .cam zone file, already registered
    Registered
    2026-10-14 · Spaceship, Inc.
    Addresses
    185.176.40.163 · Bulgaria · AS44476 zetta-as ZETTA HOSTING SOLUTIONS LLC.
    MX
    mx.h0tmail.cam
    Daily check
    Ended 2026-11-04 22:41 UTC
  53. m1crosoft.pl PL · AS12741 · AS-NETIA Netia SALookalike of microsoft.com · similar-looking characters
    MX present
    DetailsHide
    Domain
    m1crosoft.pl
    Spelling
    Spelled like microsoft.com with similar-looking characters
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2026-10-14 · LH.pl Sp. z o.o.
    Addresses
    81.210.38.46 · Poland · AS12741 AS-NETIA Netia SA
    MX
    s169.cyber-folks.pl
    Daily check
    Ended 2026-11-04 22:41 UTC
  54. deliverymicrosoft.top US · AS13335 · Cloudflare, Inc.4 addressesLookalike of microsoft.com · the name with an added word
    Cloudflare
    DetailsHide
    Domain
    deliverymicrosoft.top
    Spelling
    The name of microsoft.com with an added word
    First found
    2026-11-03 · the day we first found it in the .top zone file, already registered
    Registered
    2026-10-13 · NameSilo,LLC
    Addresses
    104.21.85.64 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.203.14 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3032::6815:5540
    2606:4700:3032::ac43:cb0e
    Cloudflare
    Cloudflare (104.21.85.64, 172.67.203.14): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  55. login-micorsoftonline.icu US · AS13335 · Cloudflare, Inc.4 addressesLookalike of microsoftonline.com · two letters swapped
    Cloudflare
    DetailsHide
    Domain
    login-micorsoftonline.icu
    Spelling
    Spelled like microsoftonline.com with two letters swapped
    First found
    2026-11-01 · the day we first found it in the .icu zone file, already registered
    Registered
    2026-10-13 · NameSilo, LLC
    Addresses
    104.21.82.16 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.193.82 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3032::ac43:c152
    2606:4700:3034::6815:5210
    Cloudflare
    Cloudflare (104.21.82.16, 172.67.193.82): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  56. office365-cloud-sync-service.techLookalike of microsoft.com · the name with an added word
    No address or mail server yet
    DetailsHide
    Domain
    office365-cloud-sync-service.tech
    Spelling
    The name of microsoft.com with an added word
    First found
    2026-11-01 · the day we first found it in the .tech zone file, already registered
    Registered
    2026-10-13 · Namify Domains Inc
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  57. office365.homesLookalike of office365.com · the ending .homes
    MX present
    DetailsHide
    Domain
    office365.homes
    Spelling
    The name of office365.com with the ending .homes
    First found
    2026-11-01 · the day the daily DNS check first found it registered
    Registered
    2026-10-13 · NameSilo, LLC
    MX
    office365-homes.mail.protection.outlook.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  58. mlcrosoft.si SI · AS34779 · T-2-AS T-2, d.o.o.Lookalike of microsoft.com · similar-looking characters
    MX present
    DetailsHide
    Domain
    mlcrosoft.si
    Spelling
    Spelled like microsoft.com with similar-looking characters
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2026-10-13 · Webtasy, d.o.o.
    Addresses
    89.212.249.51 · Slovenia · AS34779 T-2-AS T-2, d.o.o.
    MX
    mlcrosoft-si.mail.protection.outlook.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  59. onedrive.com.lc US · AS14956 · RouterHosting LLCLookalike of onedrive.com · the ending .com.lc
    DetailsHide
    Domain
    onedrive.com.lc
    Spelling
    The name of onedrive.com with the ending .com.lc
    First found
    2026-11-01 · the day the daily DNS check first found it registered
    Registered
    2026-10-12 · Hosting Concepts B.V. d/b/a Registrar.eu
    Addresses
    144.172.100.119 · United States · AS14956 ROUTERHOSTING - RouterHosting LLC
    Daily check
    Ended 2026-11-04 22:41 UTC
  60. login-outlook.live CY · AS47583 · AS-HOSTINGER Hostinger Inte…Lookalike of outlook.com · the name with the word “login”
    Hostinger
    DetailsHide
    Domain
    login-outlook.live
    Spelling
    The name of outlook.com with the word “login”
    First found
    2026-11-01 · the day the daily DNS check first found it registered
    Registered
    2026-10-11 · Dynadot Inc
    Addresses
    179.236.251.232 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (179.236.251.232): shared web hosting and domain registration. One address typically serves many customer sites.
    Daily check
    Ended 2026-11-04 22:41 UTC
  61. outlook.tfLookalike of outlook.com · the ending .tf
    MX present
    DetailsHide
    Domain
    outlook.tf
    Spelling
    The name of outlook.com with the ending .tf
    First found
    2026-11-01 · the day the daily DNS check first found it registered
    Registered
    2026-10-10 · OVH
    MX
    route2.mx.cloudflare.net
    route3.mx.cloudflare.net
    route1.mx.cloudflare.net
    Daily check
    Ended 2026-11-04 22:41 UTC
  62. hotmail.net.in US · AS16509 · Amazon.com, Inc.2 addressesLookalike of hotmail.com · the ending .net.in
    Amazon Web ServicesMX present
    DetailsHide
    Domain
    hotmail.net.in
    Spelling
    The name of hotmail.com with the ending .net.in
    First found
    2026-11-01 · the day the daily DNS check first found it registered
    Registered
    2026-10-10 · GoDaddy
    Addresses
    3.33.130.190 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    15.197.148.33 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (3.33.130.190, 15.197.148.33): a cloud provider. It rents servers and addresses to its customers.
    MX
    mailserver.purelymail.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  63. microsofta.xyz US · AS16509 · Amazon.com, Inc.2 addressesLookalike of microsoft.com · an added character
    Parking page · Afternic
    DetailsHide
    Domain
    microsofta.xyz
    Spelling
    Spelled like microsoft.com with an added character
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-10-09 · GMO Internet Group, Inc. d/b/a Onamae.com
    Addresses
    13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    Parking page · Afternic
    The registry delegates microsofta.xyz to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
    Daily check
    Ended 2026-11-04 22:41 UTC
  64. microsoftsecurity.training US · AS13335 · Cloudflare, Inc.4 addressesLookalike of microsoft.com · the name with an added word
    CloudflareMX present
    DetailsHide
    Domain
    microsoftsecurity.training
    Spelling
    The name of microsoft.com with an added word
    First found
    2026-11-01 · the day we first found it in the .training zone file, already registered
    Registered
    2026-10-09 · Cloudflare, Inc
    Addresses
    104.21.18.235 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.183.228 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3030::6815:12eb
    2606:4700:3033::ac43:b7e4
    Cloudflare
    Cloudflare (104.21.18.235, 172.67.183.228): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    MX
    microsoftsecurity-training.mail.protection.outlook.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  65. microsofty.xyz US · AS16509 · Amazon.com, Inc.2 addressesLookalike of microsoft.com · an added character
    Parking page · Afternic
    DetailsHide
    Domain
    microsofty.xyz
    Spelling
    Spelled like microsoft.com with an added character
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-10-09 · GMO Internet Group, Inc. d/b/a Onamae.com
    Addresses
    13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    Parking page · Afternic
    The registry delegates microsofty.xyz to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
    Daily check
    Ended 2026-11-04 22:41 UTC
  66. nonedrive.xyz US · AS16509 · Amazon.com, Inc.2 addressesLookalike of microsoft.com · an added character
    Parking page · Afternic
    DetailsHide
    Domain
    nonedrive.xyz
    Spelling
    Spelled like microsoft.com with an added character
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-10-09 · GMO Internet Group, Inc. d/b/a Onamae.com
    Addresses
    13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    Parking page · Afternic
    The registry delegates nonedrive.xyz to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
    Daily check
    Ended 2026-11-04 22:41 UTC
  67. nicrosoft.me US · AS16509 · Amazon.com, Inc.2 addressesLookalike of microsoft.com · a letter from a neighbouring key
    Amazon Web Services
    DetailsHide
    Domain
    nicrosoft.me
    Spelling
    Spelled like microsoft.com with a letter from a neighbouring key
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2026-10-07 · GoDaddy.com, LLC
    Addresses
    13.248.213.45 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    76.223.67.189 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (13.248.213.45, 76.223.67.189): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  68. sharepoin.onlineLookalike of microsoft.com · a dropped letter
    No address or mail server yet
    DetailsHide
    Domain
    sharepoin.online
    Spelling
    Spelled like microsoft.com with a dropped letter
    First found
    2026-11-01 · the day we first found it in the .online zone file, already registered
    Registered
    2026-10-06 · NameCheap, Inc.
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  69. onedrve.live FR · AS29169 · GANDI-AS GANDI SASLookalike of onedrive.com · a dropped letter
    MX present
    DetailsHide
    Domain
    onedrve.live
    Spelling
    Spelled like onedrive.com with a dropped letter
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2026-10-06 · Gandi SAS
    Addresses
    217.70.184.38 · France · AS29169 GANDI-AS GANDI SAS
    MX
    spool.mail.gandi.net
    fb.mail.gandi.net
    Daily check
    Ended 2026-11-04 22:41 UTC
  70. securesharepointonline.top US · AS13335 · Cloudflare, Inc.4 addressesLookalike of microsoft.com · the name with an added word
    Cloudflare
    DetailsHide
    Domain
    securesharepointonline.top
    Spelling
    The name of microsoft.com with an added word
    First found
    2026-11-03 · the day we first found it in the .top zone file, already registered
    Registered
    2026-10-05 · NameSilo,LLC
    Addresses
    104.21.2.59 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.128.209 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::6815:23b
    2606:4700:3037::ac43:80d1
    Cloudflare
    Cloudflare (104.21.2.59, 172.67.128.209): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  71. mlcrosoft.sbs BR · AS28343 · UNIFIQUE TELECOMUNICACOES S…Lookalike of microsoft.com · similar-looking characters
    DetailsHide
    Domain
    mlcrosoft.sbs
    Spelling
    Spelled like microsoft.com with similar-looking characters
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2026-10-04 · HOSTINGER operations, UAB
    Addresses
    187.109.235.26 · Brazil · AS28343 AS28343 - UNIFIQUE TELECOMUNICACOES S/A
    Daily check
    Ended 2026-11-04 22:41 UTC
  72. micros0ft-id.xyz US · AS16509 · Amazon.com, Inc.2 addressesLookalike of microsoft.com · similar-looking characters
    Registry lookup queuedAmazon Web Services
    DetailsHide
    Domain
    micros0ft-id.xyz
    Spelling
    Spelled like microsoft.com with similar-looking characters
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-10-02 · GoDaddy.com, LLC
    Addresses
    13.248.213.45 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    76.223.67.189 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (13.248.213.45, 76.223.67.189): a cloud provider. It rents servers and addresses to its customers.
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  73. mjcrosoft.comLookalike of microsoft.com · a letter from a neighbouring key
    No address or mail server yet
    DetailsHide
    Domain
    mjcrosoft.com
    Spelling
    Spelled like microsoft.com with a letter from a neighbouring key
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2026-10-02 · Cloudflare, Inc.
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  74. hotail.xyz US · AS16509 · Amazon.com, Inc.2 addressesLookalike of hotmail.com · a dropped letter
    Parking page · Afternic
    DetailsHide
    Domain
    hotail.xyz
    Spelling
    Spelled like hotmail.com with a dropped letter
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2026-10-02 · GMO Internet Group, Inc. d/b/a Onamae.com
    Addresses
    13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    Parking page · Afternic
    The registry delegates hotail.xyz to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
    Daily check
    Ended 2026-11-04 22:41 UTC
  75. micr0s0ft-login.onlineLookalike of microsoft.com · similar-looking characters
    No address or mail server yet
    DetailsHide
    Domain
    micr0s0ft-login.online
    Spelling
    Spelled like microsoft.com with similar-looking characters
    First found
    2026-11-01 · the day we first found it in the .online zone file, already registered
    Registered
    2026-10-01 · Cloudflare, Inc.
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  76. microsott.plLookalike of microsoft.com · a letter from a neighbouring key
    MX present
    DetailsHide
    Domain
    microsott.pl
    Spelling
    Spelled like microsoft.com with a letter from a neighbouring key
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2026-10-01 · home.pl sp. z o.o.
    MX
    poczta2616962.home.pl
    Daily check
    Ended 2026-11-04 22:41 UTC
  77. microsofthelp.servicesLookalike of microsoft.com · the name with an added word
    Registry lookup queuedMX present
    DetailsHide
    Domain
    microsofthelp.services
    Spelling
    The name of microsoft.com with an added word
    First found
    2026-11-01 · the day we first found it in the .services zone file, already registered
    Registered
    2026-09-30 · GoDaddy.com, LLC
    MX
    microsofthelp-services.mail.protection.outlook.com
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  78. microsoftsecurity.sbs US · AS13335 · Cloudflare, Inc.4 addressesLookalike of microsoft.com · the name with an added word
    Cloudflare
    DetailsHide
    Domain
    microsoftsecurity.sbs
    Spelling
    The name of microsoft.com with an added word
    First found
    2026-11-01 · the day we first found it in the .sbs zone file, already registered
    Registered
    2026-09-30 · NameSilo, LLC
    Addresses
    104.21.0.131 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.150.250 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3030::ac43:96fa
    2606:4700:3035::6815:83
    Cloudflare
    Cloudflare (104.21.0.131, 172.67.150.250): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  79. hotmail.partyLookalike of hotmail.com · the ending .party
    MX present
    DetailsHide
    Domain
    hotmail.party
    Spelling
    The name of hotmail.com with the ending .party
    First found
    2026-11-01 · the day the daily DNS check first found it registered
    Registered
    2026-09-30 · Cloudflare, Inc.
    MX
    route3.mx.cloudflare.net
    route2.mx.cloudflare.net
    route1.mx.cloudflare.net
    Daily check
    Ended 2026-11-04 22:41 UTC
  80. mifrosoft.com US · AS16509 · Amazon.com, Inc.2 addressesLookalike of microsoft.com · a letter from a neighbouring key
    Registry lookup queuedParking page · Afternic
    DetailsHide
    Domain
    mifrosoft.com
    Spelling
    Spelled like microsoft.com with a letter from a neighbouring key
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2026-09-29 · DomaintoOrder, LLC
    Addresses
    13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    Parking page · Afternic
    The registry delegates mifrosoft.com to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  81. micrpsoftonline.com US · AS16509 · Amazon.com, Inc.2 addressesLookalike of microsoftonline.com · a letter from a neighbouring key
    Registry lookup queuedParking page · Afternic
    DetailsHide
    Domain
    micrpsoftonline.com
    Spelling
    Spelled like microsoftonline.com with a letter from a neighbouring key
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2026-09-28 · Abbey Road Domains LLC
    Addresses
    13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    Parking page · Afternic
    The registry delegates micrpsoftonline.com to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  82. bmsoffice.online CY · AS47583 · AS-HOSTINGER Hostinger Inte…4 addressesLookalike of microsoft.com · an added character
    Hostinger CDN
    DetailsHide
    Domain
    bmsoffice.online
    Spelling
    Spelled like microsoft.com with an added character
    First found
    2026-11-01 · the day we first found it in the .online zone file, already registered
    Registered
    2026-09-27 · HOSTINGER operations, UAB
    Addresses
    2.57.91.17 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger CDN (cdn)
    88.222.222.119 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger CDN (cdn)
    2a02:4780:84:84be:35ce:e514:40d0:9d0
    2a02:4780:84:db13:deaf:67cd:c88f:bd1c
    Hostinger CDN
    Hostinger CDN (2.57.91.17, 88.222.222.119): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  83. micresoft.topLookalike of microsoft.com · a changed character
    No address or mail server yet
    DetailsHide
    Domain
    micresoft.top
    Spelling
    Spelled like microsoft.com with a changed character
    First found
    2026-11-03 · the day we first found it in the .top zone file, already registered
    Registered
    2026-09-25 · NameSilo,LLC
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  84. 0nedrive.online US · AS397273 · RenderLookalike of onedrive.com · similar-looking characters
    DetailsHide
    Domain
    0nedrive.online
    Spelling
    Spelled like onedrive.com with similar-looking characters
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2026-09-24 · Global Domain Group LLC
    Addresses
    216.24.57.1 · United States · AS397273 RENDER - Render
    Daily check
    Ended 2026-11-04 22:41 UTC
  85. microsoftolnine.comLookalike of microsoftonline.com · two letters swapped
    MX present
    DetailsHide
    Domain
    microsoftolnine.com
    Spelling
    Spelled like microsoftonline.com with two letters swapped
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2026-09-24 · Ultahost, Inc.
    MX
    mx.ultahost.com
    mx2.ultahost.com
    mx3.ultahost.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  86. microsof.cloud DE · AS24940 · HETZNER-AS Hetzner Online G…2 addressesLookalike of microsoft.com · a dropped letter
    Parking page · park-my-domain
    DetailsHide
    Domain
    microsof.cloud
    Spelling
    Spelled like microsoft.com with a dropped letter
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2026-09-24 · Dynadot, LLC
    Addresses
    157.90.33.73 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · park-my-domain (parking page)
    157.90.33.74 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · park-my-domain (parking page)
    Parking page · park-my-domain
    The registry delegates microsof.cloud to park-my-domain’s nameservers, which answer for it. park-my-domain (157.90.33.73, 157.90.33.74): a parking service. It answers for names that are typically for sale or unused.
    Daily check
    Ended 2026-11-04 22:41 UTC
  87. microsoft-security.onlineLookalike of microsoft.com · the name with the word “security”
    No address or mail server yet
    DetailsHide
    Domain
    microsoft-security.online
    Spelling
    The name of microsoft.com with the word “security”
    First found
    2026-11-01 · the day we first found it in the .online zone file, already registered
    Registered
    2026-09-23 · Cloudflare, Inc.
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  88. one-drive.tech CZ · AS29208 · QUANTCOM-AS Quantcom, a.s.Lookalike of microsoft.com · an added hyphen
    MX present
    DetailsHide
    Domain
    one-drive.tech
    Spelling
    Spelled like microsoft.com with an added hyphen
    First found
    2026-11-01 · the day we first found it in the .tech zone file, already registered
    Registered
    2026-09-23 · Gransy, s.r.o.
    Addresses
    85.93.99.52 · Czechia · AS29208 QUANTCOM-AS Quantcom, a.s.
    MX
    mail.phishtest.cz
    Daily check
    Ended 2026-11-04 22:41 UTC
  89. securemicrosoftupdate.xyz HK · AS154177 · LIGHT NODE LIMITEDLookalike of microsoft.com · the name with an added word
    DetailsHide
    Domain
    securemicrosoftupdate.xyz
    Spelling
    The name of microsoft.com with an added word
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-09-22 · NameSilo, LLC
    Addresses
    38.54.61.36 · Hong Kong · AS154177 LIGHT4-AS-AP - LIGHT NODE LIMITED
    Daily check
    Ended 2026-11-04 22:41 UTC
  90. outlook.beerLookalike of outlook.com · the ending .beer
    MX present
    DetailsHide
    Domain
    outlook.beer
    Spelling
    The name of outlook.com with the ending .beer
    First found
    2026-11-01 · the day the daily DNS check first found it registered
    Registered
    2026-09-22 · Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)
    MX
    mx.gpto.edu.kg
    Daily check
    Ended 2026-11-04 22:41 UTC
  91. outlook.day US · AS13335 · Cloudflare, Inc.4 addressesLookalike of outlook.com · the ending .day
    Cloudflare
    DetailsHide
    Domain
    outlook.day
    Spelling
    The name of outlook.com with the ending .day
    First found
    2026-11-01 · the day the daily DNS check first found it registered
    Registered
    2026-09-22 · CloudFlare, Inc.
    Addresses
    104.21.45.38 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.208.197 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::ac43:d0c5
    2606:4700:3034::6815:2d26
    Cloudflare
    Cloudflare (104.21.45.38, 172.67.208.197): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  92. microsoff.onlineLookalike of microsoft.com · a letter from a neighbouring key
    No address or mail server yet
    DetailsHide
    Domain
    microsoff.online
    Spelling
    Spelled like microsoft.com with a letter from a neighbouring key
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2026-09-22 · Xin Net Technology Corporation
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  93. nicrosoft.fr FR · AS29169 · GANDI-AS GANDI SASLookalike of microsoft.com · a letter from a neighbouring key
    MX present
    DetailsHide
    Domain
    nicrosoft.fr
    Spelling
    Spelled like microsoft.com with a letter from a neighbouring key
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2026-09-21 · GANDI
    Addresses
    217.70.184.38 · France · AS29169 GANDI-AS GANDI SAS
    MX
    spool.mail.gandi.net
    fb.mail.gandi.net
    Daily check
    Ended 2026-11-04 22:41 UTC
  94. hotmil.frLookalike of hotmail.com · a dropped letter
    MX present
    DetailsHide
    Domain
    hotmil.fr
    Spelling
    Spelled like hotmail.com with a dropped letter
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2026-09-21 · OVH
    MX
    reception01.mail-vert.fr
    Daily check
    Ended 2026-11-04 22:41 UTC
  95. secure-microsoft.appLookalike of microsoft.com · the name with the word “secure”
    No address or mail server yet
    DetailsHide
    Domain
    secure-microsoft.app
    Spelling
    The name of microsoft.com with the word “secure”
    First found
    2026-11-01 · the day we first found it in the .app zone file, already registered
    Registered
    2026-09-19 · Dynadot LLC.
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  96. microsoftonline.com.lcLookalike of microsoftonline.com · the ending .com.lc
    No address or mail server yet
    DetailsHide
    Domain
    microsoftonline.com.lc
    Spelling
    The name of microsoftonline.com with the ending .com.lc
    First found
    2026-10-31 · the day the daily DNS check first found it registered
    Registered
    2026-09-19 · Dynadot Inc
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  97. hotmaill.xyz US · AS36352 · HostPapaLookalike of hotmail.com · a doubled letter
    ColoCrossing
    DetailsHide
    Domain
    hotmaill.xyz
    Spelling
    Spelled like hotmail.com with a doubled letter
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2026-09-18 · Porkbun LLC
    Addresses
    198.46.221.149 · United States · AS36352 AS-COLOCROSSING - HostPapa · ColoCrossing (shared hosting)
    ColoCrossing
    ColoCrossing (198.46.221.149): shared web hosting and domain registration. One address typically serves many customer sites.
    Daily check
    Ended 2026-11-04 22:41 UTC
  98. office365.fitLookalike of office365.com · the ending .fit
    No address or mail server yet
    DetailsHide
    Domain
    office365.fit
    Spelling
    The name of office365.com with the ending .fit
    First found
    2026-11-01 · the day the daily DNS check first found it registered
    Registered
    2026-09-17 · Chengdu West Dimension Digital Technology Co., Ltd.
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  99. miicrosoftonline.com US · AS16509 · Amazon.com, Inc.2 addressesLookalike of microsoftonline.com · a doubled letter
    Registry lookup queuedParking page · Afternic
    DetailsHide
    Domain
    miicrosoftonline.com
    Spelling
    Spelled like microsoftonline.com with a doubled letter
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2026-09-16 · MidWestDomains, LLC
    Addresses
    13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    Parking page · Afternic
    The registry delegates miicrosoftonline.com to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  100. login-microsoft.blog US · AS16509 · Amazon.com, Inc.2 addressesLookalike of microsoft.com · the name with the word “login”
    Amazon Web Services
    DetailsHide
    Domain
    login-microsoft.blog
    Spelling
    The name of microsoft.com with the word “login”
    First found
    2026-11-01 · the day we first found it in the .blog zone file, already registered
    Registered
    2026-09-15 · Porkbun, LLC
    Addresses
    13.50.172.138 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    13.63.193.12 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (13.50.172.138, 13.63.193.12): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC

Registered domains using the name

Domains from registry zone files (ICANN CZDS), checked daily like the lookalikes above. Each row says how it matches Microsoft's names. Resellers, fans and other businesses register names like these too. Our zone data terms apply to them.

100 of 808 shown: listed ones first, then the newest registrations.

  1. sharepoint365.support KN · AS402253 · SKN Subnet & Telecom LtdContains “sharepoint”
    Address on Spamhaus DROP
    DetailsHide
    Domain
    sharepoint365.support
    Match
    A new registration containing “sharepoint”, one of the names we match for Microsoft
    First found
    2026-11-05 · the day the .support zone file first listed it as a new registration
    Registered
    2026-11-04 · Spaceship, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on Spamhaus DROP
    104.251.180.138 is on Spamhaus DROP · sharepoint365.support resolved to it 2026-11-05 05:11 UTC
    Addresses
    104.251.180.138 · St. Kitts & Nevis · AS402253 SKN-NETWORK-1 - SKN Subnet & Telecom Ltd
    Daily check
    Ended 2026-11-04 22:41 UTC
  2. cdn-microsoft.top SG · AS63949 · Akamai Connected Cloud3 addressesContains “microsoft”
    2 addresses on DomainSpoof’s phishing-host listAkamai Linode
    DetailsHide
    Domain
    cdn-microsoft.top
    Match
    A new registration containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-05 · the day the .top zone file first listed it as a new registration
    Registered
    2026-11-04 · NameSilo,LLC
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    2 addresses on DomainSpoof’s phishing-host list
    172.232.24.161 (cdn-microsoft.top resolved to it 2026-11-05 04:17 UTC), 172.232.24.235 (cdn-microsoft.top resolved to it 2026-11-05 04:17 UTC) are on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours
    Addresses
    45.79.154.26 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    172.232.24.161 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    172.232.24.235 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    Akamai Linode
    Akamai Linode (45.79.154.26, 172.232.24.161, 172.232.24.235): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  3. microsoftoffice365.top SG · AS63949 · Akamai Connected Cloud3 addressesContains “microsoft”
    Listed by MetaMask3 addresses on DomainSpoof’s phishing-host listAkamai Linode
    DetailsHide
    Domain
    microsoftoffice365.top
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-03 · the day we first found it in the .top zone file, already registered
    Registered
    2026-10-30 · NameSilo,LLC
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · microsoftoffice365.top · in the feed since 2026-11-01 11:44 UTC
    3 addresses on DomainSpoof’s phishing-host list
    172.232.24.161 (microsoftoffice365.top resolved to it 2026-11-05 00:46 UTC), 172.232.24.235 (microsoftoffice365.top resolved to it 2026-11-05 00:46 UTC), 172.234.25.42 (microsoftoffice365.top resolved to it 2026-11-05 00:46 UTC) are on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours
    Addresses
    172.232.24.161 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    172.232.24.235 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    172.234.25.42 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    Akamai Linode
    Akamai Linode (172.232.24.161, 172.232.24.235, 172.234.25.42): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  4. onedrive-sync.top SG · AS63949 · Akamai Connected Cloud3 addressesContains “onedrive”
    3 addresses on DomainSpoof’s phishing-host listAkamai Linode
    DetailsHide
    Domain
    onedrive-sync.top
    Match
    A domain containing “onedrive”, one of the names we match for Microsoft
    First found
    2026-11-03 · the day we first found it in the .top zone file, already registered
    Registered
    2026-10-29 · NameSilo,LLC
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    3 addresses on DomainSpoof’s phishing-host list
    172.232.24.161 (onedrive-sync.top resolved to it 2026-11-05 00:46 UTC), 172.232.24.235 (onedrive-sync.top resolved to it 2026-11-05 00:46 UTC), 172.234.25.42 (onedrive-sync.top resolved to it 2026-11-05 00:46 UTC) are on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours
    Addresses
    172.232.24.161 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    172.232.24.235 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    172.234.25.42 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    Akamai Linode
    Akamai Linode (172.232.24.161, 172.232.24.235, 172.234.25.42): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  5. microsoftsupp.info RU · AS209207 · DHOST-AS Digital Hosting Pr…Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    microsoftsupp.info
    Match
    A registered domain containing “microsoft”, one of the names we match for Microsoft
    Zone file copy
    2026-10-31 · the day of the .info zone file copy it was found in
    Registered
    2026-10-22 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    168.113.215.244 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoftsupp.info resolved to it 2026-11-05 00:46 UTC
    Addresses
    168.113.215.244 · Russia · AS209207 DHOST-AS Digital Hosting Provider LLC
    Daily check
    Ended 2026-11-04 22:41 UTC
  6. microsoft-office.topContains “microsoft”
    Listed by MetaMaskNo address or mail server yet
    DetailsHide
    Domain
    microsoft-office.top
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-03 · the day we first found it in the .top zone file, already registered
    Registered
    2026-10-18 · West263 International Limited
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · microsoft-office.top · in the feed since 2026-10-27 05:34 UTC
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  7. microsoftsharefile.topContains “microsoft”
    Listed by MetaMaskNo address or mail server yet
    DetailsHide
    Domain
    microsoftsharefile.top
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-03 · the day we first found it in the .top zone file, already registered
    Registered
    2026-10-18 · NameSilo,LLC
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · microsoftsharefile.top · in the feed since 2026-10-27 05:34 UTC
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  8. microsoftsharefile1.topContains “microsoft”
    Listed by MetaMaskNo address or mail server yet
    DetailsHide
    Domain
    microsoftsharefile1.top
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-03 · the day we first found it in the .top zone file, already registered
    Registered
    2026-10-18 · NameSilo,LLC
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · microsoftsharefile1.top · in the feed since 2026-10-27 05:34 UTC
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  9. microsoftes.liveContains “microsoft”
    Listed by MetaMaskNo address or mail server yet
    DetailsHide
    Domain
    microsoftes.live
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .live zone file, already registered
    Registered
    2026-10-06 · Dynadot Inc
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · microsoftes.live · in the feed since 2026-10-27 05:34 UTC
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  10. microsoft-teams.sbs US · AS13335 · Cloudflare, Inc.4 addressesContains “microsoft”
    Listed by MetaMaskCloudflare
    DetailsHide
    Domain
    microsoft-teams.sbs
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .sbs zone file, already registered
    Registered
    2026-10-03 · Dynadot Inc
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · microsoft-teams.sbs · in the feed since 2026-10-27 05:34 UTC
    Addresses
    104.21.32.178 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.153.49 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3036::ac43:9931
    2606:4700:3037::6815:20b2
    Cloudflare
    Cloudflare (104.21.32.178, 172.67.153.49): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  11. microsoft-office365.site US · AS13335 · Cloudflare, Inc.4 addressesContains “microsoft”
    Listed by MetaMaskReported by PhishDestroyCloudflareMX present
    DetailsHide
    Domain
    microsoft-office365.site
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .site zone file, already registered
    Registered
    2026-09-26 · Cloudflare, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · microsoft-office365.site · in the feed since 2026-10-27 05:34 UTC
    Reported by PhishDestroy
    Reported by PhishDestroy · microsoft-office365.site · in the feed since 2026-10-25 23:31 UTC
    Addresses
    104.21.16.197 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.215.149 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3034::ac43:d795
    2606:4700:3035::6815:10c5
    Cloudflare
    Cloudflare (104.21.16.197, 172.67.215.149): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    MX
    mx01.mail.icloud.com
    mx02.mail.icloud.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  12. microsoft-onedrive.org SG · AS63949 · Akamai Connected CloudContains “microsoft”
    Listed by MetaMaskAkamai Linode
    DetailsHide
    Domain
    microsoft-onedrive.org
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .org zone file, already registered
    Registered
    2026-09-25 · Squarespace Domains LLC
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · microsoft-onedrive.org · in the feed since 2026-10-27 05:34 UTC
    Addresses
    74.207.228.73 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    Akamai Linode
    Akamai Linode (74.207.228.73): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  13. microsoft-edge.download IS · AS50613 · ThorDC-AS Advania Island ehfContains “microsoft”
    Address on DomainSpoof’s phishing-host listMX present
    DetailsHide
    Domain
    microsoft-edge.download
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .download zone file, already registered
    Registered
    2026-09-23 · TLD Registrar Solutions Ltd.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    82.221.136.24 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-edge.download resolved to it 2026-11-05 00:46 UTC
    Addresses
    82.221.136.24 · Iceland · AS50613 ThorDC-AS Advania Island ehf
    MX
    mx1.sf.ice-networks.com
    mx2.sf.ice-networks.com
    mx3.sf.ice-networks.com
    mx4.sf.ice-networks.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  14. office-365.shop DE · AS8560 · IONOS-AS IONOS SE2 addressesContains “office-365”
    Address on DomainSpoof’s phishing-host listIONOSMX present
    DetailsHide
    Domain
    office-365.shop
    Match
    A registered domain containing “office-365”, one of the names we match for Microsoft
    Zone file copy
    2026-10-31 · the day of the .shop zone file copy it was found in
    Registered
    2026-09-22 · IONOS SE
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    217.160.0.115 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · office-365.shop resolved to it 2026-11-05 00:46 UTC
    Addresses
    217.160.0.115 · Germany · AS8560 IONOS-AS IONOS SE · IONOS (shared hosting)
    2001:8d8:100f:f000::200
    IONOS
    IONOS (217.160.0.115): shared web hosting and domain registration. One address typically serves many customer sites.
    MX
    mail.protonmail.ch
    mailsec.protonmail.ch
    Daily check
    Ended 2026-11-04 22:41 UTC
  15. microsoft-teams.sarlContains “microsoft”
    Listed by MetaMaskNo address or mail server yet
    DetailsHide
    Domain
    microsoft-teams.sarl
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .sarl zone file, already registered
    Registered
    2026-09-19 · Cloudflare, Inc
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · microsoft-teams.sarl · in the feed since 2026-10-27 05:34 UTC
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  16. microsoft-meet.live PA · AS64107 · RACK SPHERE HOSTING S.A.Contains “microsoft”
    Listed by MetaMask
    DetailsHide
    Domain
    microsoft-meet.live
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .live zone file, already registered
    Registered
    2026-09-15 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · microsoft-meet.live · in the feed since 2026-10-27 05:34 UTC
    Addresses
    45.225.135.67 · Panama · AS64107 AS64107 - RACK SPHERE HOSTING S.A.
    Daily check
    Ended 2026-11-04 22:41 UTC
  17. microsoft-cedar-technologies.click SG · AS63949 · Akamai Connected Cloud3 addressesContains “microsoft”
    3 addresses on DomainSpoof’s phishing-host listAkamai Linode
    DetailsHide
    Domain
    microsoft-cedar-technologies.click
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .click zone file, already registered
    Registered
    2026-08-21 · NameSilo, LLC
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    3 addresses on DomainSpoof’s phishing-host list
    172.232.24.161 (microsoft-cedar-technologies.click resolved to it 2026-11-05 00:46 UTC), 172.232.24.235 (microsoft-cedar-technologies.click resolved to it 2026-11-05 00:46 UTC), 172.234.25.42 (microsoft-cedar-technologies.click resolved to it 2026-11-05 00:46 UTC) are on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours
    Addresses
    172.232.24.161 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    172.232.24.235 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    172.234.25.42 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    Akamai Linode
    Akamai Linode (172.232.24.161, 172.232.24.235, 172.234.25.42): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  18. com-onedrive.live US · AS13335 · Cloudflare, Inc.4 addressesContains “onedrive”
    Listed by MetaMaskCloudflare
    DetailsHide
    Domain
    com-onedrive.live
    Match
    A domain containing “onedrive”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .live zone file, already registered
    Registered
    2026-08-16 · Cloudflare, Inc
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · com-onedrive.live · in the feed since 2026-10-27 05:34 UTC
    Addresses
    104.21.33.172 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.165.13 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3034::6815:21ac
    2606:4700:3036::ac43:a50d
    Cloudflare
    Cloudflare (104.21.33.172, 172.67.165.13): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  19. microsoft3.sbsContains “microsoft”
    Listed by MetaMaskNo address or mail server yet
    DetailsHide
    Domain
    microsoft3.sbs
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .sbs zone file, already registered
    Registered
    2026-08-07 · NameSilo, LLC
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · microsoft3.sbs · in the feed since 2026-10-27 05:34 UTC
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  20. microsoftonline-sharepoint-com.live US · AS13335 · Cloudflare, Inc.4 addressesContains “microsoftonline”
    Listed by MetaMaskCloudflare
    DetailsHide
    Domain
    microsoftonline-sharepoint-com.live
    Match
    A domain containing “microsoftonline”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .live zone file, already registered
    Registered
    2026-08-07 · Cloudflare, Inc
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · microsoftonline-sharepoint-com.live · in the feed since 2026-10-27 05:34 UTC
    Addresses
    104.21.51.191 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.184.169 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::6815:33bf
    2606:4700:3032::ac43:b8a9
    Cloudflare
    Cloudflare (104.21.51.191, 172.67.184.169): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  21. microsoftonline-sharepoint.online US · AS14061 · DigitalOcean, LLCContains “microsoftonline”
    Listed by MetaMaskDigitalOcean
    DetailsHide
    Domain
    microsoftonline-sharepoint.online
    Match
    A domain containing “microsoftonline”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .online zone file, already registered
    Registered
    2026-07-27 · Cloudflare, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · microsoftonline-sharepoint.online · in the feed since 2026-10-27 05:34 UTC
    Addresses
    178.62.99.223 · United States · AS14061 DIGITALOCEAN-ASN - DigitalOcean, LLC · DigitalOcean (cloud provider)
    DigitalOcean
    DigitalOcean (178.62.99.223): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  22. office365microsoft.help SG · AS63949 · Akamai Connected Cloud3 addressesContains “microsoft”
    3 addresses on DomainSpoof’s phishing-host listAkamai LinodeMX present
    DetailsHide
    Domain
    office365microsoft.help
    Match
    A registered domain containing “microsoft”, one of the names we match for Microsoft
    Zone file copy
    2026-10-31 · the day of the .help zone file copy it was found in
    Registered
    2026-07-26 · NameSilo, LLC
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    3 addresses on DomainSpoof’s phishing-host list
    172.232.24.161 (office365microsoft.help resolved to it 2026-11-05 00:46 UTC), 172.232.24.235 (office365microsoft.help resolved to it 2026-11-05 00:46 UTC), 172.234.25.42 (office365microsoft.help resolved to it 2026-11-05 00:46 UTC) are on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours
    Addresses
    172.232.24.161 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    172.232.24.235 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    172.234.25.42 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    Akamai Linode
    Akamai Linode (172.232.24.161, 172.232.24.235, 172.234.25.42): a cloud provider. It rents servers and addresses to its customers.
    MX
    mx1.titan.email
    mx2.titan.email
    Daily check
    Ended 2026-11-04 22:41 UTC
  23. msoffice.email CY · AS47583 · AS-HOSTINGER Hostinger Inte…Contains “msoffice”
    Address on DomainSpoof’s phishing-host listHostinger
    DetailsHide
    Domain
    msoffice.email
    Match
    A domain containing “msoffice”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .email zone file, already registered
    Registered
    2026-07-24 · HOSTINGER operations, UAB
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · msoffice.email resolved to it 2026-11-05 00:46 UTC
    Addresses
    2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
    Daily check
    Ended 2026-11-04 22:41 UTC
  24. msoffice.live CY · AS47583 · AS-HOSTINGER Hostinger Inte…Contains “msoffice”
    Address on DomainSpoof’s phishing-host listHostinger
    DetailsHide
    Domain
    msoffice.live
    Match
    A registered domain containing “msoffice”, one of the names we match for Microsoft
    Zone file copy
    2026-10-31 · the day of the .live zone file copy it was found in
    Registered
    2026-07-24 · HOSTINGER operations, UAB
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · msoffice.live resolved to it 2026-11-05 00:46 UTC
    Addresses
    2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
    Daily check
    Ended 2026-11-04 22:41 UTC
  25. microsoftonline-outlook.live US · AS13335 · Cloudflare, Inc.4 addressesContains “microsoftonline”
    Listed by MetaMaskCloudflare
    DetailsHide
    Domain
    microsoftonline-outlook.live
    Match
    A domain containing “microsoftonline”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .live zone file, already registered
    Registered
    2026-07-17 · Cloudflare, Inc
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · microsoftonline-outlook.live · in the feed since 2026-10-27 05:34 UTC
    Addresses
    104.21.24.65 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.217.82 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3030::6815:1841
    2606:4700:3031::ac43:d952
    Cloudflare
    Cloudflare (104.21.24.65, 172.67.217.82): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  26. onmicrosoftfolder.sbs SG · AS63949 · Akamai Connected Cloud3 addressesContains “microsoft”
    3 addresses on DomainSpoof’s phishing-host listAkamai Linode
    DetailsHide
    Domain
    onmicrosoftfolder.sbs
    Match
    A registered domain containing “microsoft”, one of the names we match for Microsoft
    Zone file copy
    2026-10-31 · the day of the .sbs zone file copy it was found in
    Registered
    2026-07-08 · NameSilo, LLC
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    3 addresses on DomainSpoof’s phishing-host list
    172.232.24.161 (onmicrosoftfolder.sbs resolved to it 2026-11-05 00:46 UTC), 172.232.24.235 (onmicrosoftfolder.sbs resolved to it 2026-11-05 00:46 UTC), 172.234.25.42 (onmicrosoftfolder.sbs resolved to it 2026-11-05 00:46 UTC) are on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours
    Addresses
    172.232.24.161 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    172.232.24.235 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    172.234.25.42 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    Akamai Linode
    Akamai Linode (172.232.24.161, 172.232.24.235, 172.234.25.42): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  27. microsoftprada.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide
    Domain
    microsoftprada.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-07-04 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoftprada.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  28. microsoftcisco.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide
    Domain
    microsoftcisco.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-07-02 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoftcisco.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  29. microsoftinstagram.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide
    Domain
    microsoftinstagram.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-07-02 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoftinstagram.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  30. microsofttencent.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide
    Domain
    microsofttencent.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-07-02 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsofttencent.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  31. hsbc-microsoft.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide
    Domain
    hsbc-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-29 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · hsbc-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  32. ibm-microsoft.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide
    Domain
    ibm-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-29 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · ibm-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  33. microsoft-bmw.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide
    Domain
    microsoft-bmw.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-29 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-bmw.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  34. microsoft-fedex.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide
    Domain
    microsoft-fedex.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-29 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-fedex.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  35. microsoft-nintendo.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide
    Domain
    microsoft-nintendo.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-29 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-nintendo.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  36. microsoft-puma.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide
    Domain
    microsoft-puma.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-29 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-puma.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  37. microsoft-sap.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide
    Domain
    microsoft-sap.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-29 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-sap.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  38. microsoft-target.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide
    Domain
    microsoft-target.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-29 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-target.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  39. microsoft-volkswagen.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide
    Domain
    microsoft-volkswagen.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-29 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-volkswagen.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  40. nintendo-microsoft.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide
    Domain
    nintendo-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-29 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · nintendo-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  41. cisco-microsoft.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide
    Domain
    cisco-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-28 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · cisco-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  42. hermes-microsoft.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide
    Domain
    hermes-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-28 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · hermes-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  43. kia-microsoft.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide
    Domain
    kia-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-28 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · kia-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  44. microsoft-amazon.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide
    Domain
    microsoft-amazon.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-28 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-amazon.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  45. microsoft-hyundai.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide
    Domain
    microsoft-hyundai.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-28 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-hyundai.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  46. microsoft-nescafe.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide
    Domain
    microsoft-nescafe.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-28 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-nescafe.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  47. microsoft-pepsi.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide
    Domain
    microsoft-pepsi.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-28 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-pepsi.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  48. microsoft-starbucks.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide
    Domain
    microsoft-starbucks.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-28 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-starbucks.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  49. microsoft-zara.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide
    Domain
    microsoft-zara.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-28 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-zara.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  50. paypal-microsoft.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide
    Domain
    paypal-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-28 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · paypal-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  51. prada-microsoft.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide
    Domain
    prada-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-28 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · prada-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  52. gillette-microsoft.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide
    Domain
    gillette-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-27 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · gillette-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  53. microsoft-netflix.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide
    Domain
    microsoft-netflix.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-27 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-netflix.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  54. tencent-microsoft.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide
    Domain
    tencent-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-27 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · tencent-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  55. totalenergies-microsoft.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide
    Domain
    totalenergies-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-27 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · totalenergies-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  56. sap-microsoft.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide
    Domain
    sap-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-26 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · sap-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  57. sharepoint.tips DE · AS212317 · HETZNER-CLOUD3-AS Hetzner O…14 addressesContains “sharepoint”
    5 addresses on DomainSpoof’s phishing-host listHetzner +1
    DetailsHide
    Domain
    sharepoint.tips
    Match
    A domain containing “sharepoint”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .tips zone file, already registered
    Registered
    2026-06-15 · Domain Science Kutatási Szolgáltató Korlátolt Felelősségű Társaság
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    5 addresses on DomainSpoof’s phishing-host list
    195.201.128.179 (sharepoint.tips resolved to it 2026-11-05 00:46 UTC), 46.62.237.138 (sharepoint.tips resolved to it 2026-11-05 00:46 UTC), 5.161.230.87 (sharepoint.tips resolved to it 2026-11-05 00:46 UTC), 5.161.47.86 (sharepoint.tips resolved to it 2026-11-05 00:46 UTC), 5.78.156.59 (sharepoint.tips resolved to it 2026-11-05 00:46 UTC) are on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours
    Addresses
    5.78.156.59 · Germany · AS212317 HETZNER-CLOUD3-AS Hetzner Online GmbH
    5.161.47.86 · Germany · AS213230 HETZNER-CLOUD2-AS Hetzner Online GmbH
    5.161.230.87 · Germany · AS213230 HETZNER-CLOUD2-AS Hetzner Online GmbH
    46.62.237.138 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    76.223.91.20 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    195.201.128.179 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    2406:da1e:214:c901:49:871:e9e1:eb92
    2600:1f1c:6db:8801:ca20:5f5a:5f45:48d0
    2a05:d014:179b:c400:b5e:feaf:a6dc:b508
    2a05:d014:179b:c400:2dc9:16fd:7cbd:e255
    2a05:d014:179b:c400:5ed8:1db0:4443:ca25
    2a05:d014:179b:c400:a327:40ee:24cc:6180
    2a05:d014:179b:c400:aa99:a226:6c94:e72
    2a05:d014:179b:c400:adda:f567:8e83:5e24
    Hetzner +1
    Hetzner (46.62.237.138, 195.201.128.179): a cloud provider. It rents servers and addresses to its customers. Amazon Web Services (76.223.91.20): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  58. microsoft-ai-claude.top DE · AS47846 · SEDO-AS SEDO GmbHContains “microsoft”
    Listed by MetaMaskParking page · Sedo
    DetailsHide
    Domain
    microsoft-ai-claude.top
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-03 · the day we first found it in the .top zone file, already registered
    Registered
    2026-05-29 · NameSilo,LLC
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · microsoft-ai-claude.top · in the feed since 2026-10-27 05:34 UTC
    Addresses
    91.195.240.123 · Germany · AS47846 SEDO-AS SEDO GmbH · Sedo (parking page)
    Parking page · Sedo
    Sedo (91.195.240.123): a parking service. It answers for names that are typically for sale or unused.
    Daily check
    Ended 2026-11-04 22:41 UTC
  59. microsoft-google.top DE · AS47846 · SEDO-AS SEDO GmbHContains “microsoft”
    Listed by MetaMaskParking page · Sedo
    DetailsHide
    Domain
    microsoft-google.top
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-03 · the day we first found it in the .top zone file, already registered
    Registered
    2026-05-29 · NameSilo,LLC
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · microsoft-google.top · in the feed since 2026-10-27 05:34 UTC
    Addresses
    91.195.240.123 · Germany · AS47846 SEDO-AS SEDO GmbH · Sedo (parking page)
    Parking page · Sedo
    Sedo (91.195.240.123): a parking service. It answers for names that are typically for sale or unused.
    Daily check
    Ended 2026-11-04 22:41 UTC
  60. microsoftcom.live US · AS16509 · Amazon.com, Inc.2 addressesContains “microsoft”
    Listed by MetaMaskReported by PhishDestroyRegistry lookup queuedAmazon Web Services
    DetailsHide
    Domain
    microsoftcom.live
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .live zone file, already registered
    Registered
    2026-05-29 · GoDaddy.com, LLC
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · microsoftcom.live · in the feed since 2026-10-27 05:34 UTC
    Reported by PhishDestroy
    Reported by PhishDestroy · microsoftcom.live · in the feed since 2026-10-25 23:31 UTC
    Addresses
    13.248.243.5 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    76.223.105.230 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (13.248.243.5, 76.223.105.230): a cloud provider. It rents servers and addresses to its customers.
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  61. evaservi-hotmail.online DE · AS8560 · IONOS-AS IONOS SEContains “hotmail”
    Address on DomainSpoof’s phishing-host listIONOSMX present
    DetailsHide
    Domain
    evaservi-hotmail.online
    Match
    A domain containing “hotmail”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .online zone file, already registered
    Registered
    2026-05-24 · IONOS SE
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    217.76.128.47 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · evaservi-hotmail.online resolved to it 2026-11-05 00:46 UTC
    Addresses
    217.76.128.47 · Germany · AS8560 IONOS-AS IONOS SE · IONOS (shared hosting)
    IONOS
    IONOS (217.76.128.47): shared web hosting and domain registration. One address typically serves many customer sites.
    MX
    mx.serviciodecorreo.es
    Daily check
    Ended 2026-11-04 22:41 UTC
  62. outlook-mail.site CY · AS47583 · AS-HOSTINGER Hostinger Inte…Contains “outlook”
    Address on DomainSpoof’s phishing-host listHostinger
    DetailsHide
    Domain
    outlook-mail.site
    Match
    A registered domain containing “outlook”, one of the names we match for Microsoft
    Zone file copy
    2026-10-31 · the day of the .site zone file copy it was found in
    Registered
    2026-04-24 · HOSTINGER operations, UAB
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · outlook-mail.site resolved to it 2026-11-05 00:46 UTC
    Addresses
    2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
    Daily check
    Ended 2026-11-04 22:41 UTC
  63. entra-id-platform.online JP · AS7506 · GMO Internet, Inc.Contains “entra-id”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    entra-id-platform.online
    Match
    A domain containing “entra-id”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .online zone file, already registered
    Registered
    2026-04-19 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · entra-id-platform.online resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  64. azure-microsoft.top JP · AS9370 · SAKURA Internet Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    azure-microsoft.top
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-03 · the day we first found it in the .top zone file, already registered
    Registered
    2026-04-09 · GMO Internet, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    160.16.200.77 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · azure-microsoft.top resolved to it 2026-11-05 00:46 UTC
    Addresses
    160.16.200.77 · Japan · AS9370 SAKURA-B - SAKURA Internet Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  65. team-microsoft.top JP · AS9370 · SAKURA Internet Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    team-microsoft.top
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-03 · the day we first found it in the .top zone file, already registered
    Registered
    2026-04-09 · GMO Internet, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    160.16.200.77 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · team-microsoft.top resolved to it 2026-11-05 00:46 UTC
    Addresses
    160.16.200.77 · Japan · AS9370 SAKURA-B - SAKURA Internet Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  66. microsoft-office365.cloud DE · AS8560 · IONOS-AS IONOS SE2 addressesContains “microsoft”
    Reported by PhishDestroyAddress on DomainSpoof’s phishing-host listIONOSMX present
    DetailsHide
    Domain
    microsoft-office365.cloud
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .cloud zone file, already registered
    Registered
    2026-03-18 · IONOS SE
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Reported by PhishDestroy
    Reported by PhishDestroy · microsoft-office365.cloud · in the feed since 2026-10-25 23:31 UTC
    Address on DomainSpoof’s phishing-host list
    217.160.0.235 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-office365.cloud resolved to it 2026-11-05 00:46 UTC
    Addresses
    217.160.0.235 · Germany · AS8560 IONOS-AS IONOS SE · IONOS (shared hosting)
    2001:8d8:100f:f000::200
    IONOS
    IONOS (217.160.0.235): shared web hosting and domain registration. One address typically serves many customer sites.
    MX
    mx00.ionos.de
    mx01.ionos.de
    Daily check
    Ended 2026-11-04 22:41 UTC
  67. office365online.live CY · AS47583 · AS-HOSTINGER Hostinger Inte…Contains “office365”
    Address on DomainSpoof’s phishing-host listHostingerMX present
    DetailsHide
    Domain
    office365online.live
    Match
    A domain containing “office365”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .live zone file, already registered
    Registered
    2026-03-15 · HOSTINGER operations, UAB
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · office365online.live resolved to it 2026-11-05 00:46 UTC
    Addresses
    2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
    MX
    mx1.hostinger.com
    mx2.hostinger.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  68. hotmails.sbs CY · AS47583 · AS-HOSTINGER Hostinger Inte…Contains “hotmail”
    Address on DomainSpoof’s phishing-host listHostingerMX present
    DetailsHide
    Domain
    hotmails.sbs
    Match
    A registered domain containing “hotmail”, one of the names we match for Microsoft
    Zone file copy
    2026-10-31 · the day of the .sbs zone file copy it was found in
    Registered
    2026-01-05 · HOSTINGER operations, UAB
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · hotmails.sbs resolved to it 2026-11-05 00:46 UTC
    Addresses
    2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
    MX
    mx1.hostinger.com
    mx2.hostinger.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  69. secret-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    secret-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-25 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · secret-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  70. session-microsoft-trello.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    session-microsoft-trello.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-25 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · session-microsoft-trello.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  71. short-authority-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    short-authority-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-25 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · short-authority-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  72. shortcut-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    shortcut-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-25 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · shortcut-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  73. simulink-microsoft-class.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    simulink-microsoft-class.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-25 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · simulink-microsoft-class.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  74. simulink-priority-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    simulink-priority-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-25 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · simulink-priority-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  75. smartsheet-microsoft-rest.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    smartsheet-microsoft-rest.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-25 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · smartsheet-microsoft-rest.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  76. smartsheet-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    smartsheet-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-25 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · smartsheet-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  77. smartsheet-seaborn-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    smartsheet-seaborn-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-25 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · smartsheet-seaborn-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  78. snapshot-microsoft-circleci.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    snapshot-microsoft-circleci.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-25 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · snapshot-microsoft-circleci.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  79. soap-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    soap-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-25 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · soap-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  80. solidworks-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    solidworks-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-25 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · solidworks-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  81. utilization-follower-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    utilization-follower-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · utilization-follower-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  82. variable-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    variable-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · variable-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  83. verilog-microsoft-tablet.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    verilog-microsoft-tablet.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · verilog-microsoft-tablet.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  84. vhdl-microsoft-partition.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    vhdl-microsoft-partition.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · vhdl-microsoft-partition.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  85. wasm-microsoft-bootstrap.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    wasm-microsoft-bootstrap.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · wasm-microsoft-bootstrap.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  86. wasm-wrike-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    wasm-wrike-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · wasm-wrike-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  87. wave-confluence-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    wave-confluence-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · wave-confluence-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  88. waypoint-microsoft-store.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    waypoint-microsoft-store.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · waypoint-microsoft-store.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  89. while-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    while-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · while-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  90. whom-microsoft-connect.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    whom-microsoft-connect.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · whom-microsoft-connect.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  91. yaml-microsoft-vector.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    yaml-microsoft-vector.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · yaml-microsoft-vector.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  92. office365-sec.xyz TR · AS51557 · TR-ISIMTESCIL-20201202 Isim…Contains “office365”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    office365-sec.xyz
    Match
    A registered domain containing “office365”, one of the names we match for Microsoft
    Zone file copy
    2026-10-31 · the day of the .xyz zone file copy it was found in
    Registered
    2025-12-24 · İsimtescil Bilişim A.Ş.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    93.89.226.17 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · office365-sec.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    93.89.226.17 · Türkiye · AS51557 TR-ISIMTESCIL-20201202 Isimtescil Bilisim A.S.
    Daily check
    Ended 2026-11-04 22:41 UTC
  93. onedrive365.live US · AS214036 · ULTAHOST-AS Ultahost, Inc.Contains “onedrive”
    Address on DomainSpoof’s phishing-host listMX present
    DetailsHide
    Domain
    onedrive365.live
    Match
    A registered domain containing “onedrive”, one of the names we match for Microsoft
    Zone file copy
    2026-10-31 · the day of the .live zone file copy it was found in
    Registered
    2025-12-18 · Ultahost, Inc
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    79.133.41.61 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · onedrive365.live resolved to it 2026-11-05 00:46 UTC
    Addresses
    79.133.41.61 · United States · AS214036 ULTAHOST-AS Ultahost, Inc.
    MX
    onedrive365.live
    Daily check
    Ended 2026-11-04 22:41 UTC
  94. hotmailbr.store CY · AS47583 · AS-HOSTINGER Hostinger Inte…Contains “hotmail”
    Address on DomainSpoof’s phishing-host listHostinger
    DetailsHide
    Domain
    hotmailbr.store
    Match
    A registered domain containing “hotmail”, one of the names we match for Microsoft
    Zone file copy
    2026-10-31 · the day of the .store zone file copy it was found in
    Registered
    2025-12-15 · HOSTINGER operations, UAB
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · hotmailbr.store resolved to it 2026-11-05 00:46 UTC
    Addresses
    2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
    Daily check
    Ended 2026-11-04 22:41 UTC
  95. instagram-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    instagram-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · instagram-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  96. instagram-when-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    instagram-when-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · instagram-when-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  97. instance-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    instance-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · instance-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  98. jetty-microsoft-drone.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    jetty-microsoft-drone.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · jetty-microsoft-drone.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  99. jetty-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    jetty-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · jetty-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  100. jetty-opengl-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide
    Domain
    jetty-opengl-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · jetty-opengl-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC

More brands in Software & cloud

All brands →