Microsoft
Registered lookalikes
Spellings of Microsoft's official domains (microsoft.com, office365.com, hotmail.com, …) registered to other owners (identified by nameservers, registrar and redirects), checked daily; the ones with no address or mail server yet say so. Many are parked, for sale or run by other businesses and sites with a similar name; the ones a phishing source or address list has flagged carry a label.
Some of these come from registry zone files (ICANN CZDS). Our zone data terms apply to them: no marketing use of any kind, no harassing their registrants, no high-volume registry or registrar queries.
121 of the 1,670 are listed by a source or resolve to a listed address, checked hourly.
- out1ook.topLookalike of outlook.com · similar-looking charactersNo address or mail server yet
DetailsHide details for out1ook.top
- Domain
- out1ook.top
- Spelling
- Spelled like outlook.com with similar-looking characters
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2026-09-15 · NameMart Pte. Ltd.
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hotmial.net US · AS13335 · Cloudflare, Inc.4 addressesLookalike of hotmail.com · two letters swappedRegistry lookup queuedCloudflareMX present
DetailsHide details for hotmial.net
- Domain
- hotmial.net
- Spelling
- Spelled like hotmail.com with two letters swapped
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2026-09-14 · GoDaddy.com, LLC
- Addresses
- 104.21.25.116 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.134.50 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3033::6815:19742606:4700:3037::ac43:8632
- Cloudflare
- Cloudflare (104.21.25.116, 172.67.134.50): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- MX
- route1.mx.cloudflare.net_dc-mx.1dcca9adeede.hotmial.netroute3.mx.cloudflare.netroute2.mx.cloudflare.net
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- outlo0k.com US · AS16509 · Amazon.com, Inc.2 addressesLookalike of outlook.com · similar-looking charactersRegistry lookup queuedParking page · Afternic
DetailsHide details for outlo0k.com
- Domain
- outlo0k.com
- Spelling
- Spelled like outlook.com with similar-looking characters
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2026-09-12 · Circle of Domains LLC
- Addresses
- 13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
- Parking page · Afternic
- The registry delegates outlo0k.com to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- mircosoft.me US · AS16509 · Amazon.com, Inc.2 addressesLookalike of microsoft.com · two letters swappedParking page · Afternic
DetailsHide details for mircosoft.me
- Domain
- mircosoft.me
- Spelling
- Spelled like microsoft.com with two letters swapped
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2026-09-12 · NameSilo, LLC
- Addresses
- 13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
- Parking page · Afternic
- The registry delegates mircosoft.me to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoftsupport.xyz US · AS13335 · Cloudflare, Inc.4 addressesLookalike of microsoft.com · the name with an added wordCloudflare
DetailsHide details for microsoftsupport.xyz
- Domain
- microsoftsupport.xyz
- Spelling
- The name of microsoft.com with an added word
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-09-11 · Dynadot Inc
- Addresses
- 104.21.36.33 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.184.87 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3033::6815:24212606:4700:3034::ac43:b857
- Cloudflare
- Cloudflare (104.21.36.33, 172.67.184.87): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- miscrosoft.online US · AS13335 · Cloudflare, Inc.4 addressesLookalike of microsoft.com · an added characterCloudflareMX present
DetailsHide details for miscrosoft.online
- Domain
- miscrosoft.online
- Spelling
- Spelled like microsoft.com with an added character
- First found
- 2026-11-01 · the day we first found it in the .online zone file, already registered
- Registered
- 2026-09-10 · Web Commerce Communications Limited dba WebNic.cc
- Addresses
- 104.21.6.117 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.134.209 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3035::6815:6752606:4700:3037::ac43:86d1
- Cloudflare
- Cloudflare (104.21.6.117, 172.67.134.209): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- MX
- route2.mx.cloudflare.netroute1.mx.cloudflare.netroute3.mx.cloudflare.net
- Daily check
- Ended 2026-11-04 22:41 UTC
- officem365.site AU · AS9313 · Network Technology (AUST) P…Lookalike of microsoft.com · an added characterRegistry lookup queued
DetailsHide details for officem365.site
- Domain
- officem365.site
- Spelling
- Spelled like microsoft.com with an added character
- First found
- 2026-11-01 · the day we first found it in the .site zone file, already registered
- Registered
- 2026-09-09 · GoDaddy.com, LLC
- Addresses
- 110.239.141.158 · Australia · AS9313 ONTHENET-AS - Network Technology (AUST) P/L
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- rn1cr0s0ft.cfdLookalike of microsoft.com · similar-looking charactersMX present
DetailsHide details for rn1cr0s0ft.cfd
- Domain
- rn1cr0s0ft.cfd
- Spelling
- Spelled like microsoft.com with similar-looking characters
- First found
- 2026-11-01 · the day we first found it in the .cfd zone file, already registered
- Registered
- 2026-09-09 · NameSilo, LLC
- MX
- inbound-smtp.eu-north-1.amazonaws.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- hotmail.qponLookalike of hotmail.com · the ending .qponMX present
DetailsHide details for hotmail.qpon
- Domain
- hotmail.qpon
- Spelling
- The name of hotmail.com with the ending .qpon
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Registered
- 2026-09-08 · Global Domain Group LLC
- MX
- mail.hotmail.qpon
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoftrecovery.liveLookalike of microsoft.com · the name with an added wordMX present
DetailsHide details for microsoftrecovery.live
- Domain
- microsoftrecovery.live
- Spelling
- The name of microsoft.com with an added word
- First found
- 2026-11-01 · the day we first found it in the .live zone file, already registered
- Registered
- 2026-09-07 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- MX
- mx1.privateemail.commx2.privateemail.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsotf.dev CN · AS132203 · Tencent Building, Kejizhong…Lookalike of microsoft.com · two letters swappedTencent Cloud
DetailsHide details for microsotf.dev
- Domain
- microsotf.dev
- Spelling
- Spelled like microsoft.com with two letters swapped
- First found
- 2026-11-01 · the day we first found it in the .dev zone file, already registered
- Registered
- 2026-09-03 · Dynadot LLC.
- Addresses
- 43.164.1.51 · China · AS132203 TENCENT-NET-AP-CN - Tencent Building, Kejizhongyi Avenue · Tencent Cloud (cloud provider)
- Tencent Cloud
- Tencent Cloud (43.164.1.51): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- moffice365.xyz US · AS16509 · Amazon.com, Inc.2 addressesLookalike of microsoft.com · an added characterParking page · Afternic
DetailsHide details for moffice365.xyz
- Domain
- moffice365.xyz
- Spelling
- Spelled like microsoft.com with an added character
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-09-03 · GMO Internet Group, Inc. d/b/a Onamae.com
- Addresses
- 13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
- Parking page · Afternic
- The registry delegates moffice365.xyz to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ms-office.site US · AS13335 · Cloudflare, Inc.4 addressesLookalike of microsoft.com · an added hyphenCloudflareMX present
DetailsHide details for ms-office.site
- Domain
- ms-office.site
- Spelling
- Spelled like microsoft.com with an added hyphen
- First found
- 2026-11-01 · the day we first found it in the .site zone file, already registered
- Registered
- 2026-09-03 · GMO Internet Group, Inc. d/b/a Onamae.com
- Addresses
- 104.21.31.230 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.180.187 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3030::6815:1fe62606:4700:3032::ac43:b4bb
- Cloudflare
- Cloudflare (104.21.31.230, 172.67.180.187): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- MX
- inbound-smtp.ap-northeast-1.amazonaws.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- mycrosoft.online CN · AS37963 · Hangzhou Alibaba Advertisin…Lookalike of microsoft.com · a changed character
DetailsHide details for mycrosoft.online
- Domain
- mycrosoft.online
- Spelling
- Spelled like microsoft.com with a changed character
- First found
- 2026-11-01 · the day we first found it in the .online zone file, already registered
- Registered
- 2026-09-03 · Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)
- Addresses
- 47.100.172.51 · China · AS37963 ALIBABA-CN-NET - Hangzhou Alibaba Advertising Co.,Ltd.
- Daily check
- Ended 2026-11-04 22:41 UTC
- onedrivee.xyz US · AS16509 · Amazon.com, Inc.2 addressesLookalike of onedrive.com · a doubled letterParking page · Afternic
DetailsHide details for onedrivee.xyz
- Domain
- onedrivee.xyz
- Spelling
- Spelled like onedrive.com with a doubled letter
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2026-09-03 · GMO Internet Group, Inc. d/b/a Onamae.com
- Addresses
- 13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
- Parking page · Afternic
- The registry delegates onedrivee.xyz to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsofonline.co CY · AS47583 · AS-HOSTINGER Hostinger Inte…Lookalike of microsoftonline.com · a dropped letterHostinger
DetailsHide details for microsofonline.co
- Domain
- microsofonline.co
- Spelling
- Spelled like microsoftonline.com with a dropped letter
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2026-09-03 · Tucows Domains Inc.
- Addresses
- 187.127.179.28 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
- Hostinger
- Hostinger (187.127.179.28): shared web hosting and domain registration. One address typically serves many customer sites.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsofts.icu CN · AS45090 · Shenzhen Tencent Computer S…Lookalike of microsoft.com · an added character
DetailsHide details for microsofts.icu
- Domain
- microsofts.icu
- Spelling
- Spelled like microsoft.com with an added character
- First found
- 2026-11-01 · the day we first found it in the .icu zone file, already registered
- Registered
- 2026-09-02 · Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)
- Addresses
- 106.52.92.28 · China · AS45090 TENCENT-NET-AP - Shenzhen Tencent Computer Systems Company Limited
- Daily check
- Ended 2026-11-04 22:41 UTC
- one-drived.xyz US · AS16509 · Amazon.com, Inc.2 addressesLookalike of microsoft.com · an added characterParking page · Afternic
DetailsHide details for one-drived.xyz
- Domain
- one-drived.xyz
- Spelling
- Spelled like microsoft.com with an added character
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-09-02 · GMO Internet Group, Inc. d/b/a Onamae.com
- Addresses
- 13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
- Parking page · Afternic
- The registry delegates one-drived.xyz to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- oflice365.online SK · AS51013 · WEBSUPPORT-SRO-SK-AS WebSup…2 addressesLookalike of microsoft.com · a changed characterMX present
DetailsHide details for oflice365.online
- Domain
- oflice365.online
- Spelling
- Spelled like microsoft.com with a changed character
- First found
- 2026-11-01 · the day we first found it in the .online zone file, already registered
- Registered
- 2026-09-01 · Ascio Technologies, Inc. Danmark - Filial af Ascio technologies, Inc. USA
- Addresses
- 37.9.175.163 · Slovakia · AS51013 WEBSUPPORT-SRO-SK-AS WebSupport s.r.o.2a00:4b40:aaaa:2005::7
- MX
- mx10.active24.czmx20.active24.cz
- Daily check
- Ended 2026-11-04 22:41 UTC
- outlook.ngoLookalike of outlook.com · the ending .ngoMX present
DetailsHide details for outlook.ngo
- Domain
- outlook.ngo
- Spelling
- The name of outlook.com with the ending .ngo
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Registered
- 2026-09-01 · Cloudflare, Inc.
- MX
- route2.mx.cloudflare.netroute3.mx.cloudflare.netroute1.mx.cloudflare.net
- Daily check
- Ended 2026-11-04 22:41 UTC
- 0nedrlve.cfd 224.166.110.38Lookalike of onedrive.com · similar-looking characters
DetailsHide details for 0nedrlve.cfd
- Domain
- 0nedrlve.cfd
- Spelling
- Spelled like onedrive.com with similar-looking characters
- First found
- 2026-11-01 · the day we first found it in the .cfd zone file, already registered
- Registered
- 2026-08-27 · NameSilo, LLC
- Addresses
- 224.166.110.38
- Daily check
- Ended 2026-11-04 22:41 UTC
- msooffice.xyz US · AS14061 · DigitalOcean, LLC3 addressesLookalike of microsoft.com · a doubled letterDigitalOcean
DetailsHide details for msooffice.xyz
- Domain
- msooffice.xyz
- Spelling
- Spelled like microsoft.com with a doubled letter
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-08-27 · Dynadot Inc
- Addresses
- 129.212.134.63 · United States · AS14061 DIGITALOCEAN-ASN - DigitalOcean, LLC · DigitalOcean (cloud provider)129.212.146.52 · United States · AS14061 DIGITALOCEAN-ASN - DigitalOcean, LLC · DigitalOcean (cloud provider)209.38.63.194 · United States · AS14061 DIGITALOCEAN-ASN - DigitalOcean, LLC · DigitalOcean (cloud provider)
- DigitalOcean
- DigitalOcean (129.212.134.63, 129.212.146.52, 209.38.63.194): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- outlook.scienceLookalike of outlook.com · the ending .scienceMX present
DetailsHide details for outlook.science
- Domain
- outlook.science
- Spelling
- The name of outlook.com with the ending .science
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Registered
- 2026-08-26 · Cloudflare, Inc.
- MX
- route3.mx.cloudflare.netroute2.mx.cloudflare.netroute1.mx.cloudflare.net
- Daily check
- Ended 2026-11-04 22:41 UTC
- hotmail.wiki US · AS13335 · Cloudflare, Inc.4 addressesLookalike of hotmail.com · the ending .wikiCloudflareMX present
DetailsHide details for hotmail.wiki
- Domain
- hotmail.wiki
- Spelling
- The name of hotmail.com with the ending .wiki
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Registered
- 2026-08-26 · GMO Internet, Inc. d/b/a Onamae.com
- Addresses
- 104.21.63.134 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.145.199 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3033::ac43:91c72606:4700:3035::6815:3f86
- Cloudflare
- Cloudflare (104.21.63.134, 172.67.145.199): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- MX
- mail.365hmail.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft365.tw TW · AS3462 · Data Communication Business…Lookalike of microsoft365.com · the ending .tw
DetailsHide details for microsoft365.tw
- Domain
- microsoft365.tw
- Spelling
- The name of microsoft365.com with the ending .tw
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2026-08-25 · GoDaddy
- Addresses
- 211.22.203.3 · Taiwan · AS3462 HINET - Data Communication Business Group
- Daily check
- Ended 2026-11-04 22:41 UTC
- hotmaol.onlineLookalike of hotmail.com · a letter from a neighbouring keyMX present
DetailsHide details for hotmaol.online
- Domain
- hotmaol.online
- Spelling
- Spelled like hotmail.com with a letter from a neighbouring key
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2026-08-25 · NameCheap, Inc.
- MX
- eforward1.registrar-servers.comeforward2.registrar-servers.comeforward3.registrar-servers.comeforward4.registrar-servers.comeforward5.registrar-servers.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoftservicealert.app US · AS16509 · Amazon.com, Inc.2 addressesLookalike of microsoft.com · the name with an added wordRegistry lookup queuedAmazon Web Services
DetailsHide details for microsoftservicealert.app
- Domain
- microsoftservicealert.app
- Spelling
- The name of microsoft.com with an added word
- First found
- 2026-11-01 · the day we first found it in the .app zone file, already registered
- Registered
- 2026-08-24 · GoDaddy.com, LLC
- Addresses
- 13.248.243.5 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)76.223.105.230 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (13.248.243.5, 76.223.105.230): a cloud provider. It rents servers and addresses to its customers.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- office365-verify.org US · AS40237 · United Telephone CompanyLookalike of microsoft.com · the name with an added wordMX present
DetailsHide details for office365-verify.org
- Domain
- office365-verify.org
- Spelling
- The name of microsoft.com with an added word
- First found
- 2026-11-01 · the day we first found it in the .org zone file, already registered
- Registered
- 2026-08-24 · Cloud DNS Ltd
- Addresses
- 66.128.242.158 · United States · AS40237 UNITED-TELEPHONE - United Telephone Company
- MX
- relay1.merit-cloud.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- microssoft.topLookalike of microsoft.com · a doubled letterNo address or mail server yet
DetailsHide details for microssoft.top
- Domain
- microssoft.top
- Spelling
- Spelled like microsoft.com with a doubled letter
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2026-08-24 · NameSilo,LLC
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- xn--mcrosoft-21a.com BE · AS34762 · COMBELL-AS Combell NVLookalike of microsoft.com · international characters, shown as mìcrosoft.comMX present
DetailsHide details for xn--mcrosoft-21a.com
- Domain
- xn--mcrosoft-21a.com
- Spelling
- Spelled like microsoft.com with international characters, shown as mìcrosoft.com
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2026-08-22 · Register SPA
- Addresses
- 213.158.93.23 · Belgium · AS34762 COMBELL-AS Combell NV
- MX
- mail.register.it
- Daily check
- Ended 2026-11-04 22:41 UTC
- outlook.fashionLookalike of outlook.com · the ending .fashionMX present
DetailsHide details for outlook.fashion
- Domain
- outlook.fashion
- Spelling
- The name of outlook.com with the ending .fashion
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Registered
- 2026-08-20 · West263 International Limited
- MX
- outlook-com.olc.protection.outlook.fashionoutlook-com.olc.protection.outlook.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- hotmail.cloudLookalike of hotmail.com · the ending .cloudMX present
DetailsHide details for hotmail.cloud
- Domain
- hotmail.cloud
- Spelling
- The name of hotmail.com with the ending .cloud
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Registered
- 2026-08-20 · Alibaba Cloud Computing Ltd.
- MX
- route3.mx.cloudflare.netroute2.mx.cloudflare.netroute1.mx.cloudflare.net
- Daily check
- Ended 2026-11-04 22:41 UTC
- microzoft.online US · AS16509 · Amazon.com, Inc.2 addressesLookalike of microsoft.com · a letter from a neighbouring keyRegistry lookup queuedAmazon Web Services
DetailsHide details for microzoft.online
- Domain
- microzoft.online
- Spelling
- Spelled like microsoft.com with a letter from a neighbouring key
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2026-08-19 · GoDaddy.com, LLC
- Addresses
- 13.248.243.5 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)76.223.105.230 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (13.248.243.5, 76.223.105.230): a cloud provider. It rents servers and addresses to its customers.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsofts.artLookalike of microsoft.com · an added characterMX present
DetailsHide details for microsofts.art
- Domain
- microsofts.art
- Spelling
- Spelled like microsoft.com with an added character
- First found
- 2026-11-01 · the day we first found it in the .art zone file, already registered
- Registered
- 2026-08-18 · Gname.com Pte. Ltd.
- MX
- microsofts-art.mail.protection.outlook.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsofts.cloudLookalike of microsoft.com · an added characterNo address or mail server yet
DetailsHide details for microsofts.cloud
- Domain
- microsofts.cloud
- Spelling
- Spelled like microsoft.com with an added character
- First found
- 2026-11-01 · the day we first found it in the .cloud zone file, already registered
- Registered
- 2026-08-18 · NameSilo, LLC
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoftonlije.comLookalike of microsoftonline.com · a letter from a neighbouring keyNo address or mail server yet
DetailsHide details for microsoftonlije.com
- Domain
- microsoftonlije.com
- Spelling
- Spelled like microsoftonline.com with a letter from a neighbouring key
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2026-08-18 · Cloudflare, Inc.
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoftonlind.comLookalike of microsoftonline.com · a letter from a neighbouring keyNo address or mail server yet
DetailsHide details for microsoftonlind.com
- Domain
- microsoftonlind.com
- Spelling
- Spelled like microsoftonline.com with a letter from a neighbouring key
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2026-08-18 · Cloudflare, Inc.
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoftonlkne.comLookalike of microsoftonline.com · a letter from a neighbouring keyNo address or mail server yet
DetailsHide details for microsoftonlkne.com
- Domain
- microsoftonlkne.com
- Spelling
- Spelled like microsoftonline.com with a letter from a neighbouring key
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2026-08-18 · Cloudflare, Inc.
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- mkcrosoftonline.comLookalike of microsoftonline.com · a letter from a neighbouring keyNo address or mail server yet
DetailsHide details for mkcrosoftonline.com
- Domain
- mkcrosoftonline.com
- Spelling
- Spelled like microsoftonline.com with a letter from a neighbouring key
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2026-08-18 · Cloudflare, Inc.
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- micrsooft.xyz US · AS16509 · Amazon.com, Inc.2 addressesLookalike of microsoft.com · two letters swappedParking page · Afternic
DetailsHide details for micrsooft.xyz
- Domain
- micrsooft.xyz
- Spelling
- Spelled like microsoft.com with two letters swapped
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2026-08-17 · GMO Internet Group, Inc. d/b/a Onamae.com
- Addresses
- 13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
- Parking page · Afternic
- The registry delegates micrsooft.xyz to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsofl.top US · AS32097 · WholeSale Internet, Inc.Lookalike of microsoft.com · a changed character
DetailsHide details for microsofl.top
- Domain
- microsofl.top
- Spelling
- Spelled like microsoft.com with a changed character
- First found
- 2026-11-03 · the day we first found it in the .top zone file, already registered
- Registered
- 2026-08-16 · PDR Ltd.
- Addresses
- 69.30.247.172 · United States · AS32097 WII - WholeSale Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ms-office.org US · AS54113 · Fastly, Inc.4 addressesLookalike of microsoft.com · an added hyphenFastly
DetailsHide details for ms-office.org
- Domain
- ms-office.org
- Spelling
- Spelled like microsoft.com with an added hyphen
- First found
- 2026-11-01 · the day we first found it in the .org zone file, already registered
- Registered
- 2026-08-13 · Cloudflare, Inc.
- Addresses
- 185.199.108.153 · United States · AS54113 FASTLY - Fastly, Inc. · Fastly (cdn)185.199.109.153 · United States · AS54113 FASTLY - Fastly, Inc. · Fastly (cdn)185.199.110.153 · United States · AS54113 FASTLY - Fastly, Inc. · Fastly (cdn)185.199.111.153 · United States · AS54113 FASTLY - Fastly, Inc. · Fastly (cdn)
- Fastly
- Fastly (185.199.108.153, 185.199.109.153, 185.199.110.153, 185.199.111.153): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoftonline.mom US · AS16509 · Amazon.com, Inc.Lookalike of microsoftonline.com · the ending .momParking page · Dynadot parkingMX present
DetailsHide details for microsoftonline.mom
- Domain
- microsoftonline.mom
- Spelling
- The name of microsoftonline.com with the ending .mom
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2026-08-10 · Dynadot Inc
- Addresses
- 54.215.31.113 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Dynadot parking (parking page)
- Parking page · Dynadot parking
- Dynadot parking (54.215.31.113): a parking service. It answers for names that are typically for sale or unused.
- MX
- webhost.dynadot.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- hotmaill.netLookalike of hotmail.com · a doubled letterMX present
DetailsHide details for hotmaill.net
- Domain
- hotmaill.net
- Spelling
- Spelled like hotmail.com with a doubled letter
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2026-08-08 · Cloudflare, Inc.
- MX
- route2.mx.cloudflare.netroute1.mx.cloudflare.netroute3.mx.cloudflare.net
- Daily check
- Ended 2026-11-04 22:41 UTC
- office365.rest US · AS14956 · RouterHosting LLCLookalike of office365.com · the ending .rest
DetailsHide details for office365.rest
- Domain
- office365.rest
- Spelling
- The name of office365.com with the ending .rest
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Registered
- 2026-08-07 · Global Domain Group LLC
- Addresses
- 144.172.98.53 · United States · AS14956 ROUTERHOSTING - RouterHosting LLC
- Daily check
- Ended 2026-11-04 22:41 UTC
- office365auth.orgLookalike of microsoft.com · the name with an added wordNo address or mail server yet
DetailsHide details for office365auth.org
- Domain
- office365auth.org
- Spelling
- The name of microsoft.com with an added word
- First found
- 2026-11-01 · the day we first found it in the .org zone file, already registered
- Registered
- 2026-08-05 · Cloudflare, Inc.
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- vicrosoft.onlineLookalike of microsoft.com · a changed characterMX present
DetailsHide details for vicrosoft.online
- Domain
- vicrosoft.online
- Spelling
- Spelled like microsoft.com with a changed character
- First found
- 2026-11-01 · the day we first found it in the .online zone file, already registered
- Registered
- 2026-08-05 · IONOS SE
- MX
- mx00.ionos.commx01.ionos.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- office365.id CY · AS47583 · AS-HOSTINGER Hostinger Inte…Lookalike of office365.com · the ending .idHostingerMX present
DetailsHide details for office365.id
- Domain
- office365.id
- Spelling
- The name of office365.com with the ending .id
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Registered
- 2026-08-05 · PT Web Media Technology Indonesia
- Addresses
- 141.136.39.164 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
- Hostinger
- Hostinger (141.136.39.164): shared web hosting and domain registration. One address typically serves many customer sites.
- MX
- mx1.hostinger.commx2.hostinger.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- 0ffice365.org US · AS13335 · Cloudflare, Inc.4 addressesLookalike of office365.com · similar-looking charactersCloudflare
DetailsHide details for 0ffice365.org
- Domain
- 0ffice365.org
- Spelling
- Spelled like office365.com with similar-looking characters
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2026-08-05 · Dynadot Inc
- Addresses
- 104.21.0.193 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.128.57 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3032::6815:c12606:4700:3036::ac43:8039
- Cloudflare
- Cloudflare (104.21.0.193, 172.67.128.57): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- office365.net.in US · AS209242 · CLOUDFLARESPECTRUM Cloudfla…Lookalike of office365.com · the ending .net.inCloudflareMX present
DetailsHide details for office365.net.in
- Domain
- office365.net.in
- Spelling
- The name of office365.com with the ending .net.in
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Registered
- 2026-08-04 · GoDaddy
- Addresses
- 160.153.0.161 · United States · AS209242 CLOUDFLARESPECTRUM Cloudflare London, LLC · Cloudflare (cdn)
- Cloudflare
- Cloudflare (160.153.0.161): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- MX
- office365-net-in.mail.protection.outlook.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- mircosoft.chat CN · AS45090 · Shenzhen Tencent Computer S…Lookalike of microsoft.com · two letters swapped
DetailsHide details for mircosoft.chat
- Domain
- mircosoft.chat
- Spelling
- Spelled like microsoft.com with two letters swapped
- First found
- 2026-11-01 · the day we first found it in the .chat zone file, already registered
- Registered
- 2026-08-03 · DNSPod, Inc.
- Addresses
- 118.195.209.31 · China · AS45090 TENCENT-NET-AP - Shenzhen Tencent Computer Systems Company Limited
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoftonlinw.com AU · AS133618 · Trellian Pty. LimitedLookalike of microsoftonline.com · a letter from a neighbouring keyParking page · Above.comMX present
DetailsHide details for microsoftonlinw.com
- Domain
- microsoftonlinw.com
- Spelling
- Spelled like microsoftonline.com with a letter from a neighbouring key
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2026-08-02 · TuringSign Inc. d/b/a Cosmotown
- Addresses
- 103.224.182.244 · Australia · AS133618 TRELLIAN-AS-AP - Trellian Pty. Limited · Trellian / Above.com (parking page)
- Parking page · Above.com
- The registry delegates microsoftonlinw.com to Above.com’s nameservers, which answer for it. Above.com: a parking service. It answers for names that are typically for sale or unused. Trellian / Above.com (103.224.182.244): a parking service. It answers for names that are typically for sale or unused.
- MX
- park-mx.above.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- auth-microsoft.sbs US · AS15169 · Google LLCLookalike of microsoft.com · the name with the word “auth”Google
DetailsHide details for auth-microsoft.sbs
- Domain
- auth-microsoft.sbs
- Spelling
- The name of microsoft.com with the word “auth”
- First found
- 2026-11-01 · the day we first found it in the .sbs zone file, already registered
- Registered
- 2026-07-30 · NameSilo, LLC
- Addresses
- 8.8.8.8 · United States · AS15169 GOOGLE - Google LLC · Google (cloud provider)
- Google (8.8.8.8): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsooft.storeLookalike of microsoft.com · a doubled letterMX present
DetailsHide details for microsooft.store
- Domain
- microsooft.store
- Spelling
- Spelled like microsoft.com with a doubled letter
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2026-07-29 · West263 International Limited
- MX
- mail.microsooft.store
- Daily check
- Ended 2026-11-04 22:41 UTC
- hotmail.giving US · AS16509 · Amazon.com, Inc.2 addressesLookalike of hotmail.com · the ending .givingAmazon Web ServicesMX present
DetailsHide details for hotmail.giving
- Domain
- hotmail.giving
- Spelling
- The name of hotmail.com with the ending .giving
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Registered
- 2026-07-28 · Name.com, Inc.
- Addresses
- 216.150.16.129 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)216.150.16.193 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (216.150.16.129, 216.150.16.193): a cloud provider. It rents servers and addresses to its customers.
- MX
- mail.camatoken.xyz
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoftsupport.center FR · AS16276 · OVH OVH SASLookalike of microsoft.com · the name with an added wordRegistry lookup queuedOVH
DetailsHide details for microsoftsupport.center
- Domain
- microsoftsupport.center
- Spelling
- The name of microsoft.com with an added word
- First found
- 2026-11-01 · the day we first found it in the .center zone file, already registered
- Registered
- 2026-07-27 · GoDaddy.com, LLC
- Addresses
- 51.79.255.122 · France · AS16276 OVH OVH SAS · OVH (cloud provider)
- OVH
- OVH (51.79.255.122): a cloud provider. It rents servers and addresses to its customers.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- offic365.net US · AS13335 · Cloudflare, Inc.4 addressesLookalike of office365.com · a dropped letterCloudflare
DetailsHide details for offic365.net
- Domain
- offic365.net
- Spelling
- Spelled like office365.com with a dropped letter
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2026-07-25 · Dynadot Inc
- Addresses
- 104.21.93.25 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.203.7 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3031::ac43:cb072606:4700:3037::6815:5d19
- Cloudflare
- Cloudflare (104.21.93.25, 172.67.203.7): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ofice365.org US · AS13335 · Cloudflare, Inc.4 addressesLookalike of office365.com · a dropped letterCloudflare
DetailsHide details for ofice365.org
- Domain
- ofice365.org
- Spelling
- Spelled like office365.com with a dropped letter
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2026-07-25 · Dynadot Inc
- Addresses
- 104.21.34.171 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.163.77 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3032::ac43:a34d2606:4700:3034::6815:22ab
- Cloudflare
- Cloudflare (104.21.34.171, 172.67.163.77): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoff.cz CZ · AS24806 · INTERNET-CZ INTERNET CZ, a.…Lookalike of microsoft.com · a letter from a neighbouring keyMX present
DetailsHide details for microsoff.cz
- Domain
- microsoff.cz
- Spelling
- Spelled like microsoft.com with a letter from a neighbouring key
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2026-07-23 · INTERNET CZ, a.s.
- Addresses
- 185.129.138.203 · Czechia · AS24806 INTERNET-CZ INTERNET CZ, a.s.
- MX
- mxavas.forpsi.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft.rent US · AS16509 · Amazon.com, Inc.Lookalike of microsoft.com · the ending .rentParking page · Dynadot parking
DetailsHide details for microsoft.rent
- Domain
- microsoft.rent
- Spelling
- The name of microsoft.com with the ending .rent
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Registered
- 2026-07-22 · Dynadot Inc
- Addresses
- 54.215.31.113 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Dynadot parking (parking page)
- Parking page · Dynadot parking
- Dynadot parking (54.215.31.113): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- onedrvie.live AU · AS133618 · Trellian Pty. LimitedLookalike of onedrive.com · two letters swappedParking page · Above.comMX present
DetailsHide details for onedrvie.live
- Domain
- onedrvie.live
- Spelling
- Spelled like onedrive.com with two letters swapped
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2026-07-22 · Dynadot Inc
- Addresses
- 103.224.182.219 · Australia · AS133618 TRELLIAN-AS-AP - Trellian Pty. Limited · Trellian / Above.com (parking page)
- Parking page · Above.com
- The registry delegates onedrvie.live to Above.com’s nameservers, which answer for it. Above.com: a parking service. It answers for names that are typically for sale or unused. Trellian / Above.com (103.224.182.219): a parking service. It answers for names that are typically for sale or unused.
- MX
- park-mx.above.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- onesrive.live AU · AS133618 · Trellian Pty. LimitedLookalike of onedrive.com · a letter from a neighbouring keyParking page · Above.comMX present
DetailsHide details for onesrive.live
- Domain
- onesrive.live
- Spelling
- Spelled like onedrive.com with a letter from a neighbouring key
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2026-07-22 · Dynadot Inc
- Addresses
- 103.224.182.213 · Australia · AS133618 TRELLIAN-AS-AP - Trellian Pty. Limited · Trellian / Above.com (parking page)
- Parking page · Above.com
- The registry delegates onesrive.live to Above.com’s nameservers, which answer for it. Above.com: a parking service. It answers for names that are typically for sale or unused. Trellian / Above.com (103.224.182.213): a parking service. It answers for names that are typically for sale or unused.
- MX
- park-mx.above.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- hottmail.xyzLookalike of microsoft.com · a doubled letterMX present
DetailsHide details for hottmail.xyz
- Domain
- hottmail.xyz
- Spelling
- Spelled like microsoft.com with a doubled letter
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-07-21 · HOSTINGER operations, UAB
- MX
- mailserver.purelymail.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- outlook.monsterLookalike of outlook.com · the ending .monsterMX present
DetailsHide details for outlook.monster
- Domain
- outlook.monster
- Spelling
- The name of outlook.com with the ending .monster
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Registered
- 2026-07-21 · Gname.com Pte. Ltd.
- MX
- route2.mx.cloudflare.netroute1.mx.cloudflare.netroute3.mx.cloudflare.net
- Daily check
- Ended 2026-11-04 22:41 UTC
- office365.one US · AS13335 · Cloudflare, Inc.4 addressesLookalike of office365.com · the ending .oneCloudflare
DetailsHide details for office365.one
- Domain
- office365.one
- Spelling
- The name of office365.com with the ending .one
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Registered
- 2026-07-21 · Dynadot Inc
- Addresses
- 104.21.86.52 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.215.85 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3031::ac43:d7552606:4700:3037::6815:5634
- Cloudflare
- Cloudflare (104.21.86.52, 172.67.215.85): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ofice365.net US · AS13335 · Cloudflare, Inc.4 addressesLookalike of office365.com · a dropped letterCloudflare
DetailsHide details for ofice365.net
- Domain
- ofice365.net
- Spelling
- Spelled like office365.com with a dropped letter
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2026-07-21 · Dynadot Inc
- Addresses
- 104.21.36.140 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.194.217 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3035::6815:248c2606:4700:3035::ac43:c2d9
- Cloudflare
- Cloudflare (104.21.36.140, 172.67.194.217): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- xn--mcrosoft365-ocb.com RO · AS39287 · materialism Materialism s.r…Lookalike of microsoft365.com · international characters, shown as mícrosoft365.comRegistry lookup queued
DetailsHide details for xn--mcrosoft365-ocb.com
- Domain
- xn--mcrosoft365-ocb.com
- Spelling
- Spelled like microsoft365.com with international characters, shown as mícrosoft365.com
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2026-07-21 · Tucows Domains Inc.
- Addresses
- 45.142.140.128 · Romania · AS39287 materialism Materialism s.r.l.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsof.online FR · AS16276 · OVH OVH SASLookalike of microsoft.com · a dropped letterOVHMX present
DetailsHide details for microsof.online
- Domain
- microsof.online
- Spelling
- Spelled like microsoft.com with a dropped letter
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2026-07-21 · OVH sas
- Addresses
- 213.186.33.5 · France · AS16276 OVH OVH SAS · OVH (cloud provider)
- OVH
- OVH (213.186.33.5): a cloud provider. It rents servers and addresses to its customers.
- MX
- mx1.mail.ovh.netmx2.mail.ovh.netmx3.mail.ovh.net
- Daily check
- Ended 2026-11-04 22:41 UTC
- 0ffice-365.live US · AS13335 · Cloudflare, Inc.4 addressesLookalike of microsoft.com · similar-looking charactersCloudflare
DetailsHide details for 0ffice-365.live
- Domain
- 0ffice-365.live
- Spelling
- Spelled like microsoft.com with similar-looking characters
- First found
- 2026-11-01 · the day we first found it in the .live zone file, already registered
- Registered
- 2026-07-20 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Addresses
- 104.21.61.250 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.217.64 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3031::6815:3dfa2606:4700:3034::ac43:d940
- Cloudflare
- Cloudflare (104.21.61.250, 172.67.217.64): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoftsupport.pro US · AS394456 · Epik LLCLookalike of microsoft.com · the name with an added wordPhishDestroy CommunitySuspicious · mediumMX present
DetailsHide details for microsoftsupport.pro
- Domain
- microsoftsupport.pro
- Spelling
- The name of microsoft.com with an added word
- First found
- 2026-11-01 · the day we first found it in the .pro zone file, already registered
- Registered
- 2026-07-20 · DomainRegistry.com LLC
- Suspicious
- PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated medium: no address yet, or a parking or holding signal.
- PhishDestroy Community
- PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- Addresses
- 66.223.49.89 · United States · AS394456 EPIK-LLC - Epik LLC
- MX
- mailserver.businessidentity.llc
- Daily check
- Ended 2026-11-04 22:41 UTC
- micorsoft.help US · AS16509 · Amazon.com, Inc.2 addressesLookalike of microsoft.com · two letters swappedAmazon Web ServicesMX present
DetailsHide details for micorsoft.help
- Domain
- micorsoft.help
- Spelling
- Spelled like microsoft.com with two letters swapped
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2026-07-15 · Key-Systems, LLC
- Addresses
- 3.33.130.190 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)15.197.148.33 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (3.33.130.190, 15.197.148.33): a cloud provider. It rents servers and addresses to its customers.
- MX
- aspmx.l.google.comalt1.aspmx.l.google.comalt2.aspmx.l.google.comalt3.aspmx.l.google.comalt4.aspmx.l.google.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- micorsoft.us AU · AS133618 · Trellian Pty. LimitedLookalike of microsoft.com · two letters swappedParking page · Above.comMX present
DetailsHide details for micorsoft.us
- Domain
- micorsoft.us
- Spelling
- Spelled like microsoft.com with two letters swapped
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2026-07-14 · CommuniGal Communication Ltd.
- Addresses
- 103.224.182.214 · Australia · AS133618 TRELLIAN-AS-AP - Trellian Pty. Limited · Trellian / Above.com (parking page)
- Parking page · Above.com
- The registry delegates micorsoft.us to Above.com’s nameservers, which answer for it. Above.com: a parking service. It answers for names that are typically for sale or unused. Trellian / Above.com (103.224.182.214): a parking service. It answers for names that are typically for sale or unused.
- MX
- park-mx.above.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- micrsoft.siteLookalike of microsoft.com · a dropped letterNo address or mail server yet
DetailsHide details for micrsoft.site
- Domain
- micrsoft.site
- Spelling
- Spelled like microsoft.com with a dropped letter
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2026-07-11 · Atak Domain Bilgi Teknolojileri A.Ş.
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- xn--mcrosoft-l2a.comLookalike of microsoft.com · international characters, shown as mîcrosoft.comNo address or mail server yet
DetailsHide details for xn--mcrosoft-l2a.com
- Domain
- xn--mcrosoft-l2a.com
- Spelling
- Spelled like microsoft.com with international characters, shown as mîcrosoft.com
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2026-07-11 · DEVEXPANSE LTD d/b/a Regery.com
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- xn--microsft-j4a.comLookalike of microsoft.com · international characters, shown as microsõft.comNo address or mail server yet
DetailsHide details for xn--microsft-j4a.com
- Domain
- xn--microsft-j4a.com
- Spelling
- Spelled like microsoft.com with international characters, shown as microsõft.com
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2026-07-11 · DEVEXPANSE LTD d/b/a Regery.com
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- xn--micrsoft-h4a.com DE · AS51167 · CONTABO Contabo GmbHLookalike of microsoft.com · international characters, shown as micrõsoft.comContabo
DetailsHide details for xn--micrsoft-h4a.com
- Domain
- xn--micrsoft-h4a.com
- Spelling
- Spelled like microsoft.com with international characters, shown as micrõsoft.com
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2026-07-10 · DEVEXPANSE LTD d/b/a Regery.com
- Addresses
- 38.242.227.17 · Germany · AS51167 CONTABO Contabo GmbH · Contabo (cloud provider)
- Contabo
- Contabo (38.242.227.17): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- xn--micrsoft-y3a.comLookalike of microsoft.com · international characters, shown as micrósoft.comNo address or mail server yet
DetailsHide details for xn--micrsoft-y3a.com
- Domain
- xn--micrsoft-y3a.com
- Spelling
- Spelled like microsoft.com with international characters, shown as micrósoft.com
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2026-07-10 · DEVEXPANSE LTD d/b/a Regery.com
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsofts.xinLookalike of microsoft.com · an added characterMX present
DetailsHide details for microsofts.xin
- Domain
- microsofts.xin
- Spelling
- Spelled like microsoft.com with an added character
- First found
- 2026-11-01 · the day we first found it in the .xin zone file, already registered
- Registered
- 2026-07-09 · GNAME.COM PTE. LTD.
- MX
- microsofts-xin.mail.protection.outlook.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- hotmail.website US · AS15169 · Google LLC4 addressesLookalike of hotmail.com · the ending .websiteGoogle
DetailsHide details for hotmail.website
- Domain
- hotmail.website
- Spelling
- The name of hotmail.com with the ending .website
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Registered
- 2026-07-09 · Porkbun LLC
- Addresses
- 216.239.32.21 · United States · AS15169 GOOGLE - Google LLC · Google (cloud provider)216.239.34.21 · United States · AS15169 GOOGLE - Google LLC · Google (cloud provider)216.239.36.21 · United States · AS15169 GOOGLE - Google LLC · Google (cloud provider)216.239.38.21 · United States · AS15169 GOOGLE - Google LLC · Google (cloud provider)
- Google (216.239.32.21, 216.239.34.21, 216.239.36.21, 216.239.38.21): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- sharedpoint.xyz US · AS16509 · Amazon.com, Inc.2 addressesLookalike of microsoft.com · an added characterParking page · Afternic
DetailsHide details for sharedpoint.xyz
- Domain
- sharedpoint.xyz
- Spelling
- Spelled like microsoft.com with an added character
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-07-08 · GMO Internet Group, Inc. d/b/a Onamae.com
- Addresses
- 13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
- Parking page · Afternic
- The registry delegates sharedpoint.xyz to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsofc.storeLookalike of microsoft.com · a changed characterMX present
DetailsHide details for microsofc.store
- Domain
- microsofc.store
- Spelling
- Spelled like microsoft.com with a changed character
- First found
- 2026-11-01 · the day we first found it in the .store zone file, already registered
- Registered
- 2026-07-07 · Spaceship, Inc.
- MX
- mail.microsofc.store
- Daily check
- Ended 2026-11-04 22:41 UTC
- onedriver.xyz US · AS16509 · Amazon.com, Inc.2 addressesLookalike of microsoft.com · an added characterParking page · Afternic
DetailsHide details for onedriver.xyz
- Domain
- onedriver.xyz
- Spelling
- Spelled like microsoft.com with an added character
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-07-06 · GMO Internet Group, Inc. d/b/a Onamae.com
- Addresses
- 13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
- Parking page · Afternic
- The registry delegates onedriver.xyz to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- outlook.gay US · AS16509 · Amazon.com, Inc.2 addressesLookalike of outlook.com · the ending .gayAmazon Web Services
DetailsHide details for outlook.gay
- Domain
- outlook.gay
- Spelling
- The name of outlook.com with the ending .gay
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Registered
- 2026-07-04 · Porkbun
- Addresses
- 207.207.210.107 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)207.207.210.229 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (207.207.210.107, 207.207.210.229): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- outlook.health US · AS16509 · Amazon.com, Inc.2 addressesLookalike of outlook.com · the ending .healthParking page · Afternic
DetailsHide details for outlook.health
- Domain
- outlook.health
- Spelling
- The name of outlook.com with the ending .health
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Registered
- 2026-07-03 · Sav.com, LLC - 37
- Addresses
- 13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
- Parking page · Afternic
- The registry delegates outlook.health to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- out1ook.xyz US · AS16509 · Amazon.com, Inc.2 addressesLookalike of outlook.com · similar-looking charactersParking page · Afternic
DetailsHide details for out1ook.xyz
- Domain
- out1ook.xyz
- Spelling
- Spelled like outlook.com with similar-looking characters
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2026-07-01 · GMO Internet Group, Inc. d/b/a Onamae.com
- Addresses
- 13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
- Parking page · Afternic
- The registry delegates out1ook.xyz to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsotfonline.cloudLookalike of microsoft.com · two letters swappedNo address or mail server yet
DetailsHide details for microsotfonline.cloud
- Domain
- microsotfonline.cloud
- Spelling
- Spelled like microsoft.com with two letters swapped
- First found
- 2026-11-01 · the day we first found it in the .cloud zone file, already registered
- Registered
- 2026-06-30 · NameSilo, LLC
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsofotnline.com US · AS13335 · Cloudflare, Inc.4 addressesLookalike of microsoftonline.com · two letters swappedCloudflare
DetailsHide details for microsofotnline.com
- Domain
- microsofotnline.com
- Spelling
- Spelled like microsoftonline.com with two letters swapped
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2026-06-30 · Sav.com, LLC - 40
- Addresses
- 104.21.46.141 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.139.53 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3035::ac43:8b352606:4700:3036::6815:2e8d
- Cloudflare
- Cloudflare (104.21.46.141, 172.67.139.53): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- outlook.com.scLookalike of outlook.com · the ending .com.scMX present
DetailsHide details for outlook.com.sc
- Domain
- outlook.com.sc
- Spelling
- The name of outlook.com with the ending .com.sc
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Registered
- 2026-06-26 · Dynadot Inc
- MX
- webhost.dynadot.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsofts.hair US · AS396982 · Google LLCLookalike of microsoft.com · an added characterGoogle Cloud
DetailsHide details for microsofts.hair
- Domain
- microsofts.hair
- Spelling
- Spelled like microsoft.com with an added character
- First found
- 2026-11-01 · the day we first found it in the .hair zone file, already registered
- Registered
- 2026-06-24 · Name.com, Inc.
- Addresses
- 34.111.179.208 · United States · AS396982 GOOGLE-CLOUD-PLATFORM - Google LLC · Google Cloud (cloud provider)
- Google Cloud
- Google Cloud (34.111.179.208): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- office-365-support.tech FR · AS16276 · OVH OVH SAS2 addressesLookalike of microsoft.com · the name with an added wordOVHMX present
DetailsHide details for office-365-support.tech
- Domain
- office-365-support.tech
- Spelling
- The name of microsoft.com with an added word
- First found
- 2026-11-01 · the day we first found it in the .tech zone file, already registered
- Registered
- 2026-06-23 · OVH sas
- Addresses
- 51.210.247.234 · France · AS16276 OVH OVH SAS · OVH (cloud provider)2001:41d0:42b:43::1
- OVH
- OVH (51.210.247.234): a cloud provider. It rents servers and addresses to its customers.
- MX
- blackhole.tem.scaleway.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- office365.topLookalike of office365.com · the ending .topNo address or mail server yet
DetailsHide details for office365.top
- Domain
- office365.top
- Spelling
- The name of office365.com with the ending .top
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2026-06-20 · Gname.com Pte. Ltd.
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsnft.topLookalike of microsoft.com · a changed characterNo address or mail server yet
DetailsHide details for microsnft.top
- Domain
- microsnft.top
- Spelling
- Spelled like microsoft.com with a changed character
- First found
- 2026-11-03 · the day we first found it in the .top zone file, already registered
- Registered
- 2026-06-17 · NameSilo,LLC
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoftbank.online ES · AS57910 · SCIP-AS Soluciones Corporat…Lookalike of microsoft.com · the name with an added word
DetailsHide details for microsoftbank.online
- Domain
- microsoftbank.online
- Spelling
- The name of microsoft.com with an added word
- First found
- 2026-11-01 · the day we first found it in the .online zone file, already registered
- Registered
- 2026-06-17 · Soluciones Corporativas IP, SL
- Addresses
- 31.214.178.55 · Spain · AS57910 SCIP-AS Soluciones Corporativas IP, SL
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoftsupporthelp.infoLookalike of microsoft.com · the name with an added wordNo address or mail server yet
DetailsHide details for microsoftsupporthelp.info
- Domain
- microsoftsupporthelp.info
- Spelling
- The name of microsoft.com with an added word
- First found
- 2026-11-01 · the day we first found it in the .info zone file, already registered
- Registered
- 2026-06-17 · Squarespace Domains II LLC
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- mlcrosoft.supportLookalike of microsoft.com · similar-looking charactersNo address or mail server yet
DetailsHide details for mlcrosoft.support
- Domain
- mlcrosoft.support
- Spelling
- Spelled like microsoft.com with similar-looking characters
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2026-06-17 · Cloudflare, Inc
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsofts.restLookalike of microsoft.com · an added characterMX present
DetailsHide details for microsofts.rest
- Domain
- microsofts.rest
- Spelling
- Spelled like microsoft.com with an added character
- First found
- 2026-11-01 · the day we first found it in the .rest zone file, already registered
- Registered
- 2026-06-16 · Gname.com Pte. Ltd.
- MX
- microsofts-rest.mail.protection.outlook.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- hotrnail.org US · AS14061 · DigitalOcean, LLCLookalike of hotmail.com · similar-looking charactersDigitalOceanMX present
DetailsHide details for hotrnail.org
- Domain
- hotrnail.org
- Spelling
- Spelled like hotmail.com with similar-looking characters
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2026-06-16 · Cloudflare, Inc.
- Addresses
- 167.71.187.192 · United States · AS14061 DIGITALOCEAN-ASN - DigitalOcean, LLC · DigitalOcean (cloud provider)
- DigitalOcean
- DigitalOcean (167.71.187.192): a cloud provider. It rents servers and addresses to its customers.
- MX
- mail.hotrnail.org
- Daily check
- Ended 2026-11-04 22:41 UTC
- icrosoftonline.cloud CY · AS47583 · AS-HOSTINGER Hostinger Inte…Lookalike of microsoft.com · a dropped letterHostinger
DetailsHide details for icrosoftonline.cloud
- Domain
- icrosoftonline.cloud
- Spelling
- Spelled like microsoft.com with a dropped letter
- First found
- 2026-11-01 · the day we first found it in the .cloud zone file, already registered
- Registered
- 2026-06-15 · Tucows Domains Inc.
- Addresses
- 187.127.179.28 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
- Hostinger
- Hostinger (187.127.179.28): shared web hosting and domain registration. One address typically serves many customer sites.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microosoft.digital US · AS13335 · Cloudflare, Inc.4 addressesLookalike of microsoft.com · a doubled letterCloudflare
DetailsHide details for microosoft.digital
- Domain
- microosoft.digital
- Spelling
- Spelled like microsoft.com with a doubled letter
- First found
- 2026-11-01 · the day we first found it in the .digital zone file, already registered
- Registered
- 2026-06-15 · Global Domain Group LLC
- Addresses
- 104.21.44.86 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.198.54 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3032::ac43:c6362606:4700:3036::6815:2c56
- Cloudflare
- Cloudflare (104.21.44.86, 172.67.198.54): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoftonlnie.com US · AS13335 · Cloudflare, Inc.4 addressesLookalike of microsoftonline.com · two letters swappedCloudflare
DetailsHide details for microsoftonlnie.com
- Domain
- microsoftonlnie.com
- Spelling
- Spelled like microsoftonline.com with two letters swapped
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2026-06-15 · Cloudflare, Inc.
- Addresses
- 104.21.91.173 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.176.222 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3031::6815:5bad2606:4700:3031::ac43:b0de
- Cloudflare
- Cloudflare (104.21.91.173, 172.67.176.222): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
Registered domains using the name
Domains from registry zone files (ICANN CZDS), checked daily like the lookalikes above. Each row says how it matches Microsoft's names. Resellers, fans and other businesses register names like these too. Our zone data terms apply to them.
100 of 808 shown: listed ones first, then the newest registrations.
- sharepoint365.support KN · AS402253 · SKN Subnet & Telecom LtdContains “sharepoint”Address on Spamhaus DROP
DetailsHide details for sharepoint365.support
- Domain
- sharepoint365.support
- Match
- A new registration containing “sharepoint”, one of the names we match for Microsoft
- First found
- 2026-11-05 · the day the .support zone file first listed it as a new registration
- Registered
- 2026-11-04 · Spaceship, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on Spamhaus DROP
- 104.251.180.138 is on Spamhaus DROP · sharepoint365.support resolved to it 2026-11-05 05:11 UTC
- Addresses
- 104.251.180.138 · St. Kitts & Nevis · AS402253 SKN-NETWORK-1 - SKN Subnet & Telecom Ltd
- Daily check
- Ended 2026-11-04 22:41 UTC
- cdn-microsoft.top SG · AS63949 · Akamai Connected Cloud3 addressesContains “microsoft”2 addresses on DomainSpoof’s phishing-host listAkamai Linode
DetailsHide details for cdn-microsoft.top
- Domain
- cdn-microsoft.top
- Match
- A new registration containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-05 · the day the .top zone file first listed it as a new registration
- Registered
- 2026-11-04 · NameSilo,LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- 2 addresses on DomainSpoof’s phishing-host list
- 172.232.24.161 (cdn-microsoft.top resolved to it 2026-11-05 04:17 UTC), 172.232.24.235 (cdn-microsoft.top resolved to it 2026-11-05 04:17 UTC) are on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours
- Addresses
- 45.79.154.26 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)172.232.24.161 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)172.232.24.235 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
- Akamai Linode
- Akamai Linode (45.79.154.26, 172.232.24.161, 172.232.24.235): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoftoffice365.top SG · AS63949 · Akamai Connected Cloud3 addressesContains “microsoft”Listed by MetaMask3 addresses on DomainSpoof’s phishing-host listAkamai Linode
DetailsHide details for microsoftoffice365.top
- Domain
- microsoftoffice365.top
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-03 · the day we first found it in the .top zone file, already registered
- Registered
- 2026-10-30 · NameSilo,LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · microsoftoffice365.top · in the feed since 2026-11-01 11:44 UTC
- 3 addresses on DomainSpoof’s phishing-host list
- 172.232.24.161 (microsoftoffice365.top resolved to it 2026-11-05 00:46 UTC), 172.232.24.235 (microsoftoffice365.top resolved to it 2026-11-05 00:46 UTC), 172.234.25.42 (microsoftoffice365.top resolved to it 2026-11-05 00:46 UTC) are on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours
- Addresses
- 172.232.24.161 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)172.232.24.235 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)172.234.25.42 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
- Akamai Linode
- Akamai Linode (172.232.24.161, 172.232.24.235, 172.234.25.42): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- onedrive-sync.top SG · AS63949 · Akamai Connected Cloud3 addressesContains “onedrive”3 addresses on DomainSpoof’s phishing-host listAkamai Linode
DetailsHide details for onedrive-sync.top
- Domain
- onedrive-sync.top
- Match
- A domain containing “onedrive”, one of the names we match for Microsoft
- First found
- 2026-11-03 · the day we first found it in the .top zone file, already registered
- Registered
- 2026-10-29 · NameSilo,LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- 3 addresses on DomainSpoof’s phishing-host list
- 172.232.24.161 (onedrive-sync.top resolved to it 2026-11-05 00:46 UTC), 172.232.24.235 (onedrive-sync.top resolved to it 2026-11-05 00:46 UTC), 172.234.25.42 (onedrive-sync.top resolved to it 2026-11-05 00:46 UTC) are on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours
- Addresses
- 172.232.24.161 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)172.232.24.235 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)172.234.25.42 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
- Akamai Linode
- Akamai Linode (172.232.24.161, 172.232.24.235, 172.234.25.42): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoftsupp.info RU · AS209207 · DHOST-AS Digital Hosting Pr…Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for microsoftsupp.info
- Domain
- microsoftsupp.info
- Match
- A registered domain containing “microsoft”, one of the names we match for Microsoft
- Zone file copy
- 2026-10-31 · the day of the .info zone file copy it was found in
- Registered
- 2026-10-22 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 168.113.215.244 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoftsupp.info resolved to it 2026-11-05 00:46 UTC
- Addresses
- 168.113.215.244 · Russia · AS209207 DHOST-AS Digital Hosting Provider LLC
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-office.topContains “microsoft”Listed by MetaMaskNo address or mail server yet
DetailsHide details for microsoft-office.top
- Domain
- microsoft-office.top
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-03 · the day we first found it in the .top zone file, already registered
- Registered
- 2026-10-18 · West263 International Limited
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · microsoft-office.top · in the feed since 2026-10-27 05:34 UTC
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoftsharefile.topContains “microsoft”Listed by MetaMaskNo address or mail server yet
DetailsHide details for microsoftsharefile.top
- Domain
- microsoftsharefile.top
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-03 · the day we first found it in the .top zone file, already registered
- Registered
- 2026-10-18 · NameSilo,LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · microsoftsharefile.top · in the feed since 2026-10-27 05:34 UTC
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoftsharefile1.topContains “microsoft”Listed by MetaMaskNo address or mail server yet
DetailsHide details for microsoftsharefile1.top
- Domain
- microsoftsharefile1.top
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-03 · the day we first found it in the .top zone file, already registered
- Registered
- 2026-10-18 · NameSilo,LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · microsoftsharefile1.top · in the feed since 2026-10-27 05:34 UTC
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoftes.liveContains “microsoft”Listed by MetaMaskNo address or mail server yet
DetailsHide details for microsoftes.live
- Domain
- microsoftes.live
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .live zone file, already registered
- Registered
- 2026-10-06 · Dynadot Inc
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · microsoftes.live · in the feed since 2026-10-27 05:34 UTC
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-teams.sbs US · AS13335 · Cloudflare, Inc.4 addressesContains “microsoft”Listed by MetaMaskCloudflare
DetailsHide details for microsoft-teams.sbs
- Domain
- microsoft-teams.sbs
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .sbs zone file, already registered
- Registered
- 2026-10-03 · Dynadot Inc
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · microsoft-teams.sbs · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.32.178 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.153.49 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3036::ac43:99312606:4700:3037::6815:20b2
- Cloudflare
- Cloudflare (104.21.32.178, 172.67.153.49): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-office365.site US · AS13335 · Cloudflare, Inc.4 addressesContains “microsoft”Listed by MetaMaskReported by PhishDestroyCloudflareMX present
DetailsHide details for microsoft-office365.site
- Domain
- microsoft-office365.site
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .site zone file, already registered
- Registered
- 2026-09-26 · Cloudflare, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · microsoft-office365.site · in the feed since 2026-10-27 05:34 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · microsoft-office365.site · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 104.21.16.197 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.215.149 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3034::ac43:d7952606:4700:3035::6815:10c5
- Cloudflare
- Cloudflare (104.21.16.197, 172.67.215.149): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- MX
- mx01.mail.icloud.commx02.mail.icloud.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-onedrive.org SG · AS63949 · Akamai Connected CloudContains “microsoft”Listed by MetaMaskAkamai Linode
DetailsHide details for microsoft-onedrive.org
- Domain
- microsoft-onedrive.org
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .org zone file, already registered
- Registered
- 2026-09-25 · Squarespace Domains LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · microsoft-onedrive.org · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 74.207.228.73 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
- Akamai Linode
- Akamai Linode (74.207.228.73): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-edge.download IS · AS50613 · ThorDC-AS Advania Island ehfContains “microsoft”Address on DomainSpoof’s phishing-host listMX present
DetailsHide details for microsoft-edge.download
- Domain
- microsoft-edge.download
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .download zone file, already registered
- Registered
- 2026-09-23 · TLD Registrar Solutions Ltd.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 82.221.136.24 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-edge.download resolved to it 2026-11-05 00:46 UTC
- Addresses
- 82.221.136.24 · Iceland · AS50613 ThorDC-AS Advania Island ehf
- MX
- mx1.sf.ice-networks.commx2.sf.ice-networks.commx3.sf.ice-networks.commx4.sf.ice-networks.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- office-365.shop DE · AS8560 · IONOS-AS IONOS SE2 addressesContains “office-365”Address on DomainSpoof’s phishing-host listIONOSMX present
DetailsHide details for office-365.shop
- Domain
- office-365.shop
- Match
- A registered domain containing “office-365”, one of the names we match for Microsoft
- Zone file copy
- 2026-10-31 · the day of the .shop zone file copy it was found in
- Registered
- 2026-09-22 · IONOS SE
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 217.160.0.115 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · office-365.shop resolved to it 2026-11-05 00:46 UTC
- Addresses
- 217.160.0.115 · Germany · AS8560 IONOS-AS IONOS SE · IONOS (shared hosting)2001:8d8:100f:f000::200
- IONOS
- IONOS (217.160.0.115): shared web hosting and domain registration. One address typically serves many customer sites.
- MX
- mail.protonmail.chmailsec.protonmail.ch
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-teams.sarlContains “microsoft”Listed by MetaMaskNo address or mail server yet
DetailsHide details for microsoft-teams.sarl
- Domain
- microsoft-teams.sarl
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .sarl zone file, already registered
- Registered
- 2026-09-19 · Cloudflare, Inc
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · microsoft-teams.sarl · in the feed since 2026-10-27 05:34 UTC
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-meet.live PA · AS64107 · RACK SPHERE HOSTING S.A.Contains “microsoft”Listed by MetaMask
DetailsHide details for microsoft-meet.live
- Domain
- microsoft-meet.live
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .live zone file, already registered
- Registered
- 2026-09-15 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · microsoft-meet.live · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 45.225.135.67 · Panama · AS64107 AS64107 - RACK SPHERE HOSTING S.A.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-cedar-technologies.click SG · AS63949 · Akamai Connected Cloud3 addressesContains “microsoft”3 addresses on DomainSpoof’s phishing-host listAkamai Linode
DetailsHide details for microsoft-cedar-technologies.click
- Domain
- microsoft-cedar-technologies.click
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .click zone file, already registered
- Registered
- 2026-08-21 · NameSilo, LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- 3 addresses on DomainSpoof’s phishing-host list
- 172.232.24.161 (microsoft-cedar-technologies.click resolved to it 2026-11-05 00:46 UTC), 172.232.24.235 (microsoft-cedar-technologies.click resolved to it 2026-11-05 00:46 UTC), 172.234.25.42 (microsoft-cedar-technologies.click resolved to it 2026-11-05 00:46 UTC) are on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours
- Addresses
- 172.232.24.161 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)172.232.24.235 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)172.234.25.42 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
- Akamai Linode
- Akamai Linode (172.232.24.161, 172.232.24.235, 172.234.25.42): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- com-onedrive.live US · AS13335 · Cloudflare, Inc.4 addressesContains “onedrive”Listed by MetaMaskCloudflare
DetailsHide details for com-onedrive.live
- Domain
- com-onedrive.live
- Match
- A domain containing “onedrive”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .live zone file, already registered
- Registered
- 2026-08-16 · Cloudflare, Inc
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · com-onedrive.live · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.33.172 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.165.13 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3034::6815:21ac2606:4700:3036::ac43:a50d
- Cloudflare
- Cloudflare (104.21.33.172, 172.67.165.13): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft3.sbsContains “microsoft”Listed by MetaMaskNo address or mail server yet
DetailsHide details for microsoft3.sbs
- Domain
- microsoft3.sbs
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .sbs zone file, already registered
- Registered
- 2026-08-07 · NameSilo, LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · microsoft3.sbs · in the feed since 2026-10-27 05:34 UTC
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoftonline-sharepoint-com.live US · AS13335 · Cloudflare, Inc.4 addressesContains “microsoftonline”Listed by MetaMaskCloudflare
DetailsHide details for microsoftonline-sharepoint-com.live
- Domain
- microsoftonline-sharepoint-com.live
- Match
- A domain containing “microsoftonline”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .live zone file, already registered
- Registered
- 2026-08-07 · Cloudflare, Inc
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · microsoftonline-sharepoint-com.live · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.51.191 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.184.169 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3031::6815:33bf2606:4700:3032::ac43:b8a9
- Cloudflare
- Cloudflare (104.21.51.191, 172.67.184.169): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoftonline-sharepoint.online US · AS14061 · DigitalOcean, LLCContains “microsoftonline”Listed by MetaMaskDigitalOcean
DetailsHide details for microsoftonline-sharepoint.online
- Domain
- microsoftonline-sharepoint.online
- Match
- A domain containing “microsoftonline”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .online zone file, already registered
- Registered
- 2026-07-27 · Cloudflare, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · microsoftonline-sharepoint.online · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 178.62.99.223 · United States · AS14061 DIGITALOCEAN-ASN - DigitalOcean, LLC · DigitalOcean (cloud provider)
- DigitalOcean
- DigitalOcean (178.62.99.223): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- office365microsoft.help SG · AS63949 · Akamai Connected Cloud3 addressesContains “microsoft”3 addresses on DomainSpoof’s phishing-host listAkamai LinodeMX present
DetailsHide details for office365microsoft.help
- Domain
- office365microsoft.help
- Match
- A registered domain containing “microsoft”, one of the names we match for Microsoft
- Zone file copy
- 2026-10-31 · the day of the .help zone file copy it was found in
- Registered
- 2026-07-26 · NameSilo, LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- 3 addresses on DomainSpoof’s phishing-host list
- 172.232.24.161 (office365microsoft.help resolved to it 2026-11-05 00:46 UTC), 172.232.24.235 (office365microsoft.help resolved to it 2026-11-05 00:46 UTC), 172.234.25.42 (office365microsoft.help resolved to it 2026-11-05 00:46 UTC) are on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours
- Addresses
- 172.232.24.161 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)172.232.24.235 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)172.234.25.42 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
- Akamai Linode
- Akamai Linode (172.232.24.161, 172.232.24.235, 172.234.25.42): a cloud provider. It rents servers and addresses to its customers.
- MX
- mx1.titan.emailmx2.titan.email
- Daily check
- Ended 2026-11-04 22:41 UTC
- msoffice.email CY · AS47583 · AS-HOSTINGER Hostinger Inte…Contains “msoffice”Address on DomainSpoof’s phishing-host listHostinger
DetailsHide details for msoffice.email
- Domain
- msoffice.email
- Match
- A domain containing “msoffice”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .email zone file, already registered
- Registered
- 2026-07-24 · HOSTINGER operations, UAB
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · msoffice.email resolved to it 2026-11-05 00:46 UTC
- Addresses
- 2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
- Hostinger
- Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
- Daily check
- Ended 2026-11-04 22:41 UTC
- msoffice.live CY · AS47583 · AS-HOSTINGER Hostinger Inte…Contains “msoffice”Address on DomainSpoof’s phishing-host listHostinger
DetailsHide details for msoffice.live
- Domain
- msoffice.live
- Match
- A registered domain containing “msoffice”, one of the names we match for Microsoft
- Zone file copy
- 2026-10-31 · the day of the .live zone file copy it was found in
- Registered
- 2026-07-24 · HOSTINGER operations, UAB
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · msoffice.live resolved to it 2026-11-05 00:46 UTC
- Addresses
- 2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
- Hostinger
- Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoftonline-outlook.live US · AS13335 · Cloudflare, Inc.4 addressesContains “microsoftonline”Listed by MetaMaskCloudflare
DetailsHide details for microsoftonline-outlook.live
- Domain
- microsoftonline-outlook.live
- Match
- A domain containing “microsoftonline”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .live zone file, already registered
- Registered
- 2026-07-17 · Cloudflare, Inc
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · microsoftonline-outlook.live · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.24.65 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.217.82 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3030::6815:18412606:4700:3031::ac43:d952
- Cloudflare
- Cloudflare (104.21.24.65, 172.67.217.82): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- onmicrosoftfolder.sbs SG · AS63949 · Akamai Connected Cloud3 addressesContains “microsoft”3 addresses on DomainSpoof’s phishing-host listAkamai Linode
DetailsHide details for onmicrosoftfolder.sbs
- Domain
- onmicrosoftfolder.sbs
- Match
- A registered domain containing “microsoft”, one of the names we match for Microsoft
- Zone file copy
- 2026-10-31 · the day of the .sbs zone file copy it was found in
- Registered
- 2026-07-08 · NameSilo, LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- 3 addresses on DomainSpoof’s phishing-host list
- 172.232.24.161 (onmicrosoftfolder.sbs resolved to it 2026-11-05 00:46 UTC), 172.232.24.235 (onmicrosoftfolder.sbs resolved to it 2026-11-05 00:46 UTC), 172.234.25.42 (onmicrosoftfolder.sbs resolved to it 2026-11-05 00:46 UTC) are on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours
- Addresses
- 172.232.24.161 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)172.232.24.235 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)172.234.25.42 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
- Akamai Linode
- Akamai Linode (172.232.24.161, 172.232.24.235, 172.234.25.42): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoftprada.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for microsoftprada.xyz
- Domain
- microsoftprada.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-07-04 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoftprada.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoftcisco.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for microsoftcisco.xyz
- Domain
- microsoftcisco.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-07-02 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoftcisco.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoftinstagram.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for microsoftinstagram.xyz
- Domain
- microsoftinstagram.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-07-02 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoftinstagram.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsofttencent.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for microsofttencent.xyz
- Domain
- microsofttencent.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-07-02 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsofttencent.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hsbc-microsoft.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for hsbc-microsoft.xyz
- Domain
- hsbc-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-29 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · hsbc-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ibm-microsoft.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for ibm-microsoft.xyz
- Domain
- ibm-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-29 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · ibm-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-bmw.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for microsoft-bmw.xyz
- Domain
- microsoft-bmw.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-29 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-bmw.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-fedex.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for microsoft-fedex.xyz
- Domain
- microsoft-fedex.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-29 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-fedex.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-nintendo.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for microsoft-nintendo.xyz
- Domain
- microsoft-nintendo.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-29 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-nintendo.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-puma.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for microsoft-puma.xyz
- Domain
- microsoft-puma.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-29 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-puma.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-sap.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for microsoft-sap.xyz
- Domain
- microsoft-sap.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-29 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-sap.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-target.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for microsoft-target.xyz
- Domain
- microsoft-target.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-29 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-target.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-volkswagen.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for microsoft-volkswagen.xyz
- Domain
- microsoft-volkswagen.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-29 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-volkswagen.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- nintendo-microsoft.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for nintendo-microsoft.xyz
- Domain
- nintendo-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-29 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · nintendo-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- cisco-microsoft.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for cisco-microsoft.xyz
- Domain
- cisco-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-28 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · cisco-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hermes-microsoft.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for hermes-microsoft.xyz
- Domain
- hermes-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-28 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · hermes-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- kia-microsoft.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for kia-microsoft.xyz
- Domain
- kia-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-28 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · kia-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-amazon.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for microsoft-amazon.xyz
- Domain
- microsoft-amazon.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-28 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-amazon.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-hyundai.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for microsoft-hyundai.xyz
- Domain
- microsoft-hyundai.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-28 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-hyundai.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-nescafe.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for microsoft-nescafe.xyz
- Domain
- microsoft-nescafe.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-28 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-nescafe.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-pepsi.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for microsoft-pepsi.xyz
- Domain
- microsoft-pepsi.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-28 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-pepsi.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-starbucks.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for microsoft-starbucks.xyz
- Domain
- microsoft-starbucks.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-28 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-starbucks.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-zara.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for microsoft-zara.xyz
- Domain
- microsoft-zara.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-28 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-zara.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- paypal-microsoft.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for paypal-microsoft.xyz
- Domain
- paypal-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-28 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · paypal-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- prada-microsoft.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for prada-microsoft.xyz
- Domain
- prada-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-28 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · prada-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- gillette-microsoft.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for gillette-microsoft.xyz
- Domain
- gillette-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-27 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · gillette-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-netflix.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for microsoft-netflix.xyz
- Domain
- microsoft-netflix.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-27 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-netflix.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- tencent-microsoft.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for tencent-microsoft.xyz
- Domain
- tencent-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-27 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · tencent-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- totalenergies-microsoft.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for totalenergies-microsoft.xyz
- Domain
- totalenergies-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-27 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · totalenergies-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- sap-microsoft.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for sap-microsoft.xyz
- Domain
- sap-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-26 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · sap-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- sharepoint.tips DE · AS212317 · HETZNER-CLOUD3-AS Hetzner O…14 addressesContains “sharepoint”5 addresses on DomainSpoof’s phishing-host listHetzner +1
DetailsHide details for sharepoint.tips
- Domain
- sharepoint.tips
- Match
- A domain containing “sharepoint”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .tips zone file, already registered
- Registered
- 2026-06-15 · Domain Science Kutatási Szolgáltató Korlátolt Felelősségű Társaság
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- 5 addresses on DomainSpoof’s phishing-host list
- 195.201.128.179 (sharepoint.tips resolved to it 2026-11-05 00:46 UTC), 46.62.237.138 (sharepoint.tips resolved to it 2026-11-05 00:46 UTC), 5.161.230.87 (sharepoint.tips resolved to it 2026-11-05 00:46 UTC), 5.161.47.86 (sharepoint.tips resolved to it 2026-11-05 00:46 UTC), 5.78.156.59 (sharepoint.tips resolved to it 2026-11-05 00:46 UTC) are on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours
- Addresses
- 5.78.156.59 · Germany · AS212317 HETZNER-CLOUD3-AS Hetzner Online GmbH5.161.47.86 · Germany · AS213230 HETZNER-CLOUD2-AS Hetzner Online GmbH5.161.230.87 · Germany · AS213230 HETZNER-CLOUD2-AS Hetzner Online GmbH46.62.237.138 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)76.223.91.20 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)195.201.128.179 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)2406:da1e:214:c901:49:871:e9e1:eb922600:1f1c:6db:8801:ca20:5f5a:5f45:48d02a05:d014:179b:c400:b5e:feaf:a6dc:b5082a05:d014:179b:c400:2dc9:16fd:7cbd:e2552a05:d014:179b:c400:5ed8:1db0:4443:ca252a05:d014:179b:c400:a327:40ee:24cc:61802a05:d014:179b:c400:aa99:a226:6c94:e722a05:d014:179b:c400:adda:f567:8e83:5e24
- Hetzner +1
- Hetzner (46.62.237.138, 195.201.128.179): a cloud provider. It rents servers and addresses to its customers. Amazon Web Services (76.223.91.20): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-ai-claude.top DE · AS47846 · SEDO-AS SEDO GmbHContains “microsoft”Listed by MetaMaskParking page · Sedo
DetailsHide details for microsoft-ai-claude.top
- Domain
- microsoft-ai-claude.top
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-03 · the day we first found it in the .top zone file, already registered
- Registered
- 2026-05-29 · NameSilo,LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · microsoft-ai-claude.top · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 91.195.240.123 · Germany · AS47846 SEDO-AS SEDO GmbH · Sedo (parking page)
- Parking page · Sedo
- Sedo (91.195.240.123): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-google.top DE · AS47846 · SEDO-AS SEDO GmbHContains “microsoft”Listed by MetaMaskParking page · Sedo
DetailsHide details for microsoft-google.top
- Domain
- microsoft-google.top
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-03 · the day we first found it in the .top zone file, already registered
- Registered
- 2026-05-29 · NameSilo,LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · microsoft-google.top · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 91.195.240.123 · Germany · AS47846 SEDO-AS SEDO GmbH · Sedo (parking page)
- Parking page · Sedo
- Sedo (91.195.240.123): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoftcom.live US · AS16509 · Amazon.com, Inc.2 addressesContains “microsoft”Listed by MetaMaskReported by PhishDestroyRegistry lookup queuedAmazon Web Services
DetailsHide details for microsoftcom.live
- Domain
- microsoftcom.live
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .live zone file, already registered
- Registered
- 2026-05-29 · GoDaddy.com, LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · microsoftcom.live · in the feed since 2026-10-27 05:34 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · microsoftcom.live · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 13.248.243.5 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)76.223.105.230 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (13.248.243.5, 76.223.105.230): a cloud provider. It rents servers and addresses to its customers.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- evaservi-hotmail.online DE · AS8560 · IONOS-AS IONOS SEContains “hotmail”Address on DomainSpoof’s phishing-host listIONOSMX present
DetailsHide details for evaservi-hotmail.online
- Domain
- evaservi-hotmail.online
- Match
- A domain containing “hotmail”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .online zone file, already registered
- Registered
- 2026-05-24 · IONOS SE
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 217.76.128.47 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · evaservi-hotmail.online resolved to it 2026-11-05 00:46 UTC
- Addresses
- 217.76.128.47 · Germany · AS8560 IONOS-AS IONOS SE · IONOS (shared hosting)
- IONOS
- IONOS (217.76.128.47): shared web hosting and domain registration. One address typically serves many customer sites.
- MX
- mx.serviciodecorreo.es
- Daily check
- Ended 2026-11-04 22:41 UTC
- outlook-mail.site CY · AS47583 · AS-HOSTINGER Hostinger Inte…Contains “outlook”Address on DomainSpoof’s phishing-host listHostinger
DetailsHide details for outlook-mail.site
- Domain
- outlook-mail.site
- Match
- A registered domain containing “outlook”, one of the names we match for Microsoft
- Zone file copy
- 2026-10-31 · the day of the .site zone file copy it was found in
- Registered
- 2026-04-24 · HOSTINGER operations, UAB
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · outlook-mail.site resolved to it 2026-11-05 00:46 UTC
- Addresses
- 2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
- Hostinger
- Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
- Daily check
- Ended 2026-11-04 22:41 UTC
- entra-id-platform.online JP · AS7506 · GMO Internet, Inc.Contains “entra-id”Address on DomainSpoof’s phishing-host list
DetailsHide details for entra-id-platform.online
- Domain
- entra-id-platform.online
- Match
- A domain containing “entra-id”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .online zone file, already registered
- Registered
- 2026-04-19 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · entra-id-platform.online resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- azure-microsoft.top JP · AS9370 · SAKURA Internet Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for azure-microsoft.top
- Domain
- azure-microsoft.top
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-03 · the day we first found it in the .top zone file, already registered
- Registered
- 2026-04-09 · GMO Internet, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 160.16.200.77 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · azure-microsoft.top resolved to it 2026-11-05 00:46 UTC
- Addresses
- 160.16.200.77 · Japan · AS9370 SAKURA-B - SAKURA Internet Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- team-microsoft.top JP · AS9370 · SAKURA Internet Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for team-microsoft.top
- Domain
- team-microsoft.top
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-03 · the day we first found it in the .top zone file, already registered
- Registered
- 2026-04-09 · GMO Internet, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 160.16.200.77 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · team-microsoft.top resolved to it 2026-11-05 00:46 UTC
- Addresses
- 160.16.200.77 · Japan · AS9370 SAKURA-B - SAKURA Internet Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-office365.cloud DE · AS8560 · IONOS-AS IONOS SE2 addressesContains “microsoft”Reported by PhishDestroyAddress on DomainSpoof’s phishing-host listIONOSMX present
DetailsHide details for microsoft-office365.cloud
- Domain
- microsoft-office365.cloud
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .cloud zone file, already registered
- Registered
- 2026-03-18 · IONOS SE
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · microsoft-office365.cloud · in the feed since 2026-10-25 23:31 UTC
- Address on DomainSpoof’s phishing-host list
- 217.160.0.235 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-office365.cloud resolved to it 2026-11-05 00:46 UTC
- Addresses
- 217.160.0.235 · Germany · AS8560 IONOS-AS IONOS SE · IONOS (shared hosting)2001:8d8:100f:f000::200
- IONOS
- IONOS (217.160.0.235): shared web hosting and domain registration. One address typically serves many customer sites.
- MX
- mx00.ionos.demx01.ionos.de
- Daily check
- Ended 2026-11-04 22:41 UTC
- office365online.live CY · AS47583 · AS-HOSTINGER Hostinger Inte…Contains “office365”Address on DomainSpoof’s phishing-host listHostingerMX present
DetailsHide details for office365online.live
- Domain
- office365online.live
- Match
- A domain containing “office365”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .live zone file, already registered
- Registered
- 2026-03-15 · HOSTINGER operations, UAB
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · office365online.live resolved to it 2026-11-05 00:46 UTC
- Addresses
- 2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
- Hostinger
- Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
- MX
- mx1.hostinger.commx2.hostinger.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- hotmails.sbs CY · AS47583 · AS-HOSTINGER Hostinger Inte…Contains “hotmail”Address on DomainSpoof’s phishing-host listHostingerMX present
DetailsHide details for hotmails.sbs
- Domain
- hotmails.sbs
- Match
- A registered domain containing “hotmail”, one of the names we match for Microsoft
- Zone file copy
- 2026-10-31 · the day of the .sbs zone file copy it was found in
- Registered
- 2026-01-05 · HOSTINGER operations, UAB
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · hotmails.sbs resolved to it 2026-11-05 00:46 UTC
- Addresses
- 2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
- Hostinger
- Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
- MX
- mx1.hostinger.commx2.hostinger.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- secret-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for secret-microsoft.xyz
- Domain
- secret-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-25 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · secret-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- session-microsoft-trello.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for session-microsoft-trello.xyz
- Domain
- session-microsoft-trello.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-25 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · session-microsoft-trello.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- short-authority-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for short-authority-microsoft.xyz
- Domain
- short-authority-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-25 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · short-authority-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- shortcut-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for shortcut-microsoft.xyz
- Domain
- shortcut-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-25 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · shortcut-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- simulink-microsoft-class.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for simulink-microsoft-class.xyz
- Domain
- simulink-microsoft-class.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-25 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · simulink-microsoft-class.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- simulink-priority-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for simulink-priority-microsoft.xyz
- Domain
- simulink-priority-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-25 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · simulink-priority-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- smartsheet-microsoft-rest.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for smartsheet-microsoft-rest.xyz
- Domain
- smartsheet-microsoft-rest.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-25 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · smartsheet-microsoft-rest.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- smartsheet-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for smartsheet-microsoft.xyz
- Domain
- smartsheet-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-25 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · smartsheet-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- smartsheet-seaborn-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for smartsheet-seaborn-microsoft.xyz
- Domain
- smartsheet-seaborn-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-25 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · smartsheet-seaborn-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- snapshot-microsoft-circleci.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for snapshot-microsoft-circleci.xyz
- Domain
- snapshot-microsoft-circleci.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-25 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · snapshot-microsoft-circleci.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- soap-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for soap-microsoft.xyz
- Domain
- soap-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-25 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · soap-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- solidworks-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for solidworks-microsoft.xyz
- Domain
- solidworks-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-25 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · solidworks-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- utilization-follower-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for utilization-follower-microsoft.xyz
- Domain
- utilization-follower-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · utilization-follower-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- variable-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for variable-microsoft.xyz
- Domain
- variable-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · variable-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- verilog-microsoft-tablet.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for verilog-microsoft-tablet.xyz
- Domain
- verilog-microsoft-tablet.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · verilog-microsoft-tablet.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- vhdl-microsoft-partition.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for vhdl-microsoft-partition.xyz
- Domain
- vhdl-microsoft-partition.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · vhdl-microsoft-partition.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- wasm-microsoft-bootstrap.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for wasm-microsoft-bootstrap.xyz
- Domain
- wasm-microsoft-bootstrap.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · wasm-microsoft-bootstrap.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- wasm-wrike-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for wasm-wrike-microsoft.xyz
- Domain
- wasm-wrike-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · wasm-wrike-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- wave-confluence-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for wave-confluence-microsoft.xyz
- Domain
- wave-confluence-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · wave-confluence-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- waypoint-microsoft-store.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for waypoint-microsoft-store.xyz
- Domain
- waypoint-microsoft-store.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · waypoint-microsoft-store.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- while-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for while-microsoft.xyz
- Domain
- while-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · while-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- whom-microsoft-connect.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for whom-microsoft-connect.xyz
- Domain
- whom-microsoft-connect.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · whom-microsoft-connect.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- yaml-microsoft-vector.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for yaml-microsoft-vector.xyz
- Domain
- yaml-microsoft-vector.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · yaml-microsoft-vector.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- office365-sec.xyz TR · AS51557 · TR-ISIMTESCIL-20201202 Isim…Contains “office365”Address on DomainSpoof’s phishing-host list
DetailsHide details for office365-sec.xyz
- Domain
- office365-sec.xyz
- Match
- A registered domain containing “office365”, one of the names we match for Microsoft
- Zone file copy
- 2026-10-31 · the day of the .xyz zone file copy it was found in
- Registered
- 2025-12-24 · İsimtescil Bilişim A.Ş.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 93.89.226.17 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · office365-sec.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 93.89.226.17 · Türkiye · AS51557 TR-ISIMTESCIL-20201202 Isimtescil Bilisim A.S.
- Daily check
- Ended 2026-11-04 22:41 UTC
- onedrive365.live US · AS214036 · ULTAHOST-AS Ultahost, Inc.Contains “onedrive”Address on DomainSpoof’s phishing-host listMX present
DetailsHide details for onedrive365.live
- Domain
- onedrive365.live
- Match
- A registered domain containing “onedrive”, one of the names we match for Microsoft
- Zone file copy
- 2026-10-31 · the day of the .live zone file copy it was found in
- Registered
- 2025-12-18 · Ultahost, Inc
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 79.133.41.61 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · onedrive365.live resolved to it 2026-11-05 00:46 UTC
- Addresses
- 79.133.41.61 · United States · AS214036 ULTAHOST-AS Ultahost, Inc.
- MX
- onedrive365.live
- Daily check
- Ended 2026-11-04 22:41 UTC
- hotmailbr.store CY · AS47583 · AS-HOSTINGER Hostinger Inte…Contains “hotmail”Address on DomainSpoof’s phishing-host listHostinger
DetailsHide details for hotmailbr.store
- Domain
- hotmailbr.store
- Match
- A registered domain containing “hotmail”, one of the names we match for Microsoft
- Zone file copy
- 2026-10-31 · the day of the .store zone file copy it was found in
- Registered
- 2025-12-15 · HOSTINGER operations, UAB
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · hotmailbr.store resolved to it 2026-11-05 00:46 UTC
- Addresses
- 2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
- Hostinger
- Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
- Daily check
- Ended 2026-11-04 22:41 UTC
- instagram-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for instagram-microsoft.xyz
- Domain
- instagram-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · instagram-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- instagram-when-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for instagram-when-microsoft.xyz
- Domain
- instagram-when-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · instagram-when-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- instance-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for instance-microsoft.xyz
- Domain
- instance-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · instance-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- jetty-microsoft-drone.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for jetty-microsoft-drone.xyz
- Domain
- jetty-microsoft-drone.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · jetty-microsoft-drone.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- jetty-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for jetty-microsoft.xyz
- Domain
- jetty-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · jetty-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- jetty-opengl-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for jetty-opengl-microsoft.xyz
- Domain
- jetty-opengl-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · jetty-opengl-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
