Microsoft
Registered lookalikes
Spellings of Microsoft's official domains (microsoft.com, office365.com, hotmail.com, …) registered to other owners (identified by nameservers, registrar and redirects), checked daily; the ones with no address or mail server yet say so. Many are parked, for sale or run by other businesses and sites with a similar name; the ones a phishing source or address list has flagged carry a label.
Some of these come from registry zone files (ICANN CZDS). Our zone data terms apply to them: no marketing use of any kind, no harassing their registrants, no high-volume registry or registrar queries.
121 of the 1,671 are listed by a source or resolve to a listed address, checked hourly.
- office365.onl US · AS13335 · Cloudflare, Inc.4 addressesLookalike of office365.com · the ending .onlCloudflare
DetailsHide details for office365.onl
- Domain
- office365.onl
- Spelling
- The name of office365.com with the ending .onl
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Registered
- 2026-06-14 · Dynadot Inc
- Addresses
- 104.21.31.229 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.180.184 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3030::ac43:b4b82606:4700:3035::6815:1fe5
- Cloudflare
- Cloudflare (104.21.31.229, 172.67.180.184): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- one-drive.top US · AS15169 · Google LLCLookalike of microsoft.com · an added hyphenGoogle
DetailsHide details for one-drive.top
- Domain
- one-drive.top
- Spelling
- Spelled like microsoft.com with an added hyphen
- First found
- 2026-11-03 · the day we first found it in the .top zone file, already registered
- Registered
- 2026-06-12 · NameSilo,LLC
- Addresses
- 8.8.8.8 · United States · AS15169 GOOGLE - Google LLC · Google (cloud provider)
- Google (8.8.8.8): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- zonedrive.xyz US · AS16509 · Amazon.com, Inc.2 addressesLookalike of microsoft.com · an added characterParking page · Afternic
DetailsHide details for zonedrive.xyz
- Domain
- zonedrive.xyz
- Spelling
- Spelled like microsoft.com with an added character
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-12 · GMO Internet Group, Inc. d/b/a Onamae.com
- Addresses
- 13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
- Parking page · Afternic
- The registry delegates zonedrive.xyz to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- donedrive.site US · AS36351 · IBM Cloud4 addressesLookalike of microsoft.com · an added characterMX present
DetailsHide details for donedrive.site
- Domain
- donedrive.site
- Spelling
- Spelled like microsoft.com with an added character
- First found
- 2026-11-01 · the day we first found it in the .site zone file, already registered
- Registered
- 2026-06-11 · HOSTINGER operations, UAB
- Addresses
- 141.125.104.208 · United States · AS36351 SOFTLAYER - IBM Cloud141.125.157.19 · United States · AS36351 SOFTLAYER - IBM Cloud158.176.188.102 · United States · AS36351 SOFTLAYER - IBM Cloud158.176.192.52 · United States · AS36351 SOFTLAYER - IBM Cloud
- MX
- mta1.youcan.shopmta2.youcan.shop
- Daily check
- Ended 2026-11-04 22:41 UTC
- onedrive.wang HK · AS142403 · YISU CLOUD LTDLookalike of onedrive.com · the ending .wang
DetailsHide details for onedrive.wang
- Domain
- onedrive.wang
- Spelling
- The name of onedrive.com with the ending .wang
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Registered
- 2026-06-10 · 厦门三五互联信息有限公司
- Addresses
- 154.221.25.41 · Hong Kong · AS142403 YISUCLOUDLTD-HK - YISU CLOUD LTD
- Daily check
- Ended 2026-11-04 22:41 UTC
- micr0s0ft.com US · AS16509 · Amazon.com, Inc.2 addressesLookalike of microsoft.com · similar-looking charactersRegistry lookup queuedParking page · Afternic
DetailsHide details for micr0s0ft.com
- Domain
- micr0s0ft.com
- Spelling
- Spelled like microsoft.com with similar-looking characters
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2026-06-10 · InlandDomains, LLC
- Addresses
- 13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
- Parking page · Afternic
- The registry delegates micr0s0ft.com to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoftonline.digitalLookalike of microsoftonline.com · the ending .digitalNo address or mail server yet
DetailsHide details for microsoftonline.digital
- Domain
- microsoftonline.digital
- Spelling
- The name of microsoftonline.com with the ending .digital
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2026-06-09 · Global Domain Group LLC
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microso-ft.com RO · AS39287 · materialism Materialism s.r…Lookalike of microsoft.com · an added hyphen
DetailsHide details for microso-ft.com
- Domain
- microso-ft.com
- Spelling
- Spelled like microsoft.com with an added hyphen
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2026-06-09 · Hosting Concepts B.V. d/b/a Registrar.eu
- Addresses
- 45.142.141.214 · Romania · AS39287 materialism Materialism s.r.l.
- Daily check
- Ended 2026-11-04 22:41 UTC
- mircosoft.pro AU · AS133618 · Trellian Pty. LimitedLookalike of microsoft.com · two letters swappedParking page · Above.comMX present
DetailsHide details for mircosoft.pro
- Domain
- mircosoft.pro
- Spelling
- Spelled like microsoft.com with two letters swapped
- First found
- 2026-11-01 · the day we first found it in the .pro zone file, already registered
- Registered
- 2026-06-08 · CommuniGal Communication Ltd.
- Addresses
- 103.224.182.219 · Australia · AS133618 TRELLIAN-AS-AP - Trellian Pty. Limited · Trellian / Above.com (parking page)
- Parking page · Above.com
- The registry delegates mircosoft.pro to Above.com’s nameservers, which answer for it. Above.com: a parking service. It answers for names that are typically for sale or unused. Trellian / Above.com (103.224.182.219): a parking service. It answers for names that are typically for sale or unused.
- MX
- park-mx.above.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- microssoft.fr DE · AS51167 · CONTABO Contabo GmbHLookalike of microsoft.com · a doubled letterContaboMX present
DetailsHide details for microssoft.fr
- Domain
- microssoft.fr
- Spelling
- Spelled like microsoft.com with a doubled letter
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2026-06-08 · IONOS SE
- Addresses
- 185.2.100.88 · Germany · AS51167 CONTABO Contabo GmbH · Contabo (cloud provider)
- Contabo
- Contabo (185.2.100.88): a cloud provider. It rents servers and addresses to its customers.
- MX
- mx00.ionos.frmx01.ionos.fr
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoftupdateservice.org MD · AS200019 · AlexHost ALEXHOST S.R.L.Lookalike of microsoft.com · the name with an added word
DetailsHide details for microsoftupdateservice.org
- Domain
- microsoftupdateservice.org
- Spelling
- The name of microsoft.com with an added word
- First found
- 2026-11-01 · the day we first found it in the .org zone file, already registered
- Registered
- 2026-06-07 · Hosting Concepts B.V. d/b/a Registrar.eu
- Addresses
- 80.97.124.186 · Moldova · AS200019 AlexHost ALEXHOST S.R.L.
- Daily check
- Ended 2026-11-04 22:41 UTC
- micorsoft.xyz US · AS16509 · Amazon.com, Inc.2 addressesLookalike of microsoft.com · two letters swappedParking page · Afternic
DetailsHide details for micorsoft.xyz
- Domain
- micorsoft.xyz
- Spelling
- Spelled like microsoft.com with two letters swapped
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2026-06-07 · Dynadot Inc
- Addresses
- 13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
- Parking page · Afternic
- The registry delegates micorsoft.xyz to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoftonline.lat US · AS13335 · Cloudflare, Inc.4 addressesLookalike of microsoftonline.com · the ending .latCloudflare
DetailsHide details for microsoftonline.lat
- Domain
- microsoftonline.lat
- Spelling
- The name of microsoftonline.com with the ending .lat
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2026-06-05 · Dynadot Inc
- Addresses
- 104.21.45.154 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.216.101 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3035::6815:2d9a2606:4700:3036::ac43:d865
- Cloudflare
- Cloudflare (104.21.45.154, 172.67.216.101): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microosoft.storeLookalike of microsoft.com · a doubled letterMX present
DetailsHide details for microosoft.store
- Domain
- microosoft.store
- Spelling
- Spelled like microsoft.com with a doubled letter
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2026-06-04 · DNSPod, Inc.
- MX
- mail.microosoft.store
- Daily check
- Ended 2026-11-04 22:41 UTC
- rnicrosoft.asia US · AS16509 · Amazon.com, Inc.2 addressesLookalike of microsoft.com · similar-looking charactersAmazon Web ServicesMX present
DetailsHide details for rnicrosoft.asia
- Domain
- rnicrosoft.asia
- Spelling
- Spelled like microsoft.com with similar-looking characters
- First found
- 2026-11-01 · the day we first found it in the .asia zone file, already registered
- Registered
- 2026-05-29 · Name.com, Inc.
- Addresses
- 216.198.79.1 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)216.198.79.65 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (216.198.79.1, 216.198.79.65): a cloud provider. It rents servers and addresses to its customers.
- MX
- mx1.improvmx.commx2.improvmx.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- officee365.site AU · AS9313 · Network Technology (AUST) P…Lookalike of office365.com · a doubled letterRegistry lookup queued
DetailsHide details for officee365.site
- Domain
- officee365.site
- Spelling
- Spelled like office365.com with a doubled letter
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2026-05-29 · GoDaddy.com, LLC
- Addresses
- 110.239.141.158 · Australia · AS9313 ONTHENET-AS - Network Technology (AUST) P/L
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-security.systems DE · AS206834 · TEAMINTERNET-CA-AS Team Int…Lookalike of microsoft.com · the name with the word “security”Parking page · ParkingCrew (Team Internet)
DetailsHide details for microsoft-security.systems
- Domain
- microsoft-security.systems
- Spelling
- The name of microsoft.com with the word “security”
- First found
- 2026-11-01 · the day we first found it in the .systems zone file, already registered
- Registered
- 2026-05-27 · Hosting Concepts B.V. d/b/a Registrar.eu
- Addresses
- 185.53.179.136 · Germany · AS206834 TEAMINTERNET-CA-AS Team Internet AG · ParkingCrew (Team Internet) (parking page)
- Parking page · ParkingCrew (Team Internet)
- ParkingCrew (Team Internet) (185.53.179.136): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoftomline.live US · AS53831 · Squarespace, Inc.4 addressesLookalike of microsoftonline.com · a letter from a neighbouring keySquarespace
DetailsHide details for microsoftomline.live
- Domain
- microsoftomline.live
- Spelling
- Spelled like microsoftonline.com with a letter from a neighbouring key
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2026-05-27 · Squarespace Domains II LLC
- Addresses
- 198.49.23.144 · United States · AS53831 SQUARESPACE - Squarespace, Inc. · Squarespace (site builder)198.49.23.145 · United States · AS53831 SQUARESPACE - Squarespace, Inc. · Squarespace (site builder)198.185.159.144 · United States · AS53831 SQUARESPACE - Squarespace, Inc. · Squarespace (site builder)198.185.159.145 · United States · AS53831 SQUARESPACE - Squarespace, Inc. · Squarespace (site builder)
- Squarespace
- Squarespace (198.49.23.144, 198.49.23.145, 198.185.159.144, 198.185.159.145): a site builder. It hosts pages for anyone who signs up.
- Daily check
- Ended 2026-11-04 22:41 UTC
- offlce365.appLookalike of office365.com · similar-looking charactersNo address or mail server yet
DetailsHide details for offlce365.app
- Domain
- offlce365.app
- Spelling
- Spelled like office365.com with similar-looking characters
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2026-05-26 · CloudFlare, Inc.
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsofts.camLookalike of microsoft.com · an added characterMX present
DetailsHide details for microsofts.cam
- Domain
- microsofts.cam
- Spelling
- Spelled like microsoft.com with an added character
- First found
- 2026-11-01 · the day we first found it in the .cam zone file, already registered
- Registered
- 2026-05-25 · Gname.com Pte. Ltd.
- MX
- microsofts-cam.mail.protection.outlook.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- mskoffice.org AU · AS133618 · Trellian Pty. LimitedLookalike of microsoft.com · an added characterParking page · Above.comMX present
DetailsHide details for mskoffice.org
- Domain
- mskoffice.org
- Spelling
- Spelled like microsoft.com with an added character
- First found
- 2026-11-01 · the day we first found it in the .org zone file, already registered
- Registered
- 2026-05-25 · Tucows Domains Inc.
- Addresses
- 103.224.182.215 · Australia · AS133618 TRELLIAN-AS-AP - Trellian Pty. Limited · Trellian / Above.com (parking page)
- Parking page · Above.com
- The registry delegates mskoffice.org to Above.com’s nameservers, which answer for it. Above.com: a parking service. It answers for names that are typically for sale or unused. Trellian / Above.com (103.224.182.215): a parking service. It answers for names that are typically for sale or unused.
- MX
- park-mx.above.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- micrisoft.netLookalike of microsoft.com · a letter from a neighbouring keyNo address or mail server yet
DetailsHide details for micrisoft.net
- Domain
- micrisoft.net
- Spelling
- Spelled like microsoft.com with a letter from a neighbouring key
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2026-05-23 · Cloudflare, Inc.
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- onedrivee.com AU · AS154653 · ParkLogic Pty LtdLookalike of onedrive.com · a doubled letterParking page · ParkLogicMX present
DetailsHide details for onedrivee.com
- Domain
- onedrivee.com
- Spelling
- Spelled like onedrive.com with a doubled letter
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2026-05-22 · Realtime Register B.V.
- Addresses
- 162.4.84.241 · Australia · AS154653 PARKLOGICPTYLTD-AS-AP - ParkLogic Pty Ltd · ParkLogic (parking page)
- Parking page · ParkLogic
- The registry delegates onedrivee.com to ParkLogic’s nameservers, which answer for it. ParkLogic (162.4.84.241): a parking service. It answers for names that are typically for sale or unused.
- MX
- mx156.hostedmxserver.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- share-point.appLookalike of microsoft.com · an added hyphenRegistry lookup queuedMX present
DetailsHide details for share-point.app
- Domain
- share-point.app
- Spelling
- Spelled like microsoft.com with an added hyphen
- First found
- 2026-11-01 · the day we first found it in the .app zone file, already registered
- Registered
- 2026-05-20 · GoDaddy.com, LLC
- MX
- aspmx.l.google.comalt1.aspmx.l.google.comalt2.aspmx.l.google.comalt3.aspmx.l.google.comalt4.aspmx.l.google.com
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsftonline.co DE · AS51167 · CONTABO Contabo GmbHLookalike of microsoftonline.com · a dropped letterContabo
DetailsHide details for microsftonline.co
- Domain
- microsftonline.co
- Spelling
- Spelled like microsoftonline.com with a dropped letter
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2026-05-20 · Dynadot Inc
- Addresses
- 194.163.185.7 · Germany · AS51167 CONTABO Contabo GmbH · Contabo (cloud provider)
- Contabo
- Contabo (194.163.185.7): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- micorsoft.co US · AS16509 · Amazon.com, Inc.2 addressesLookalike of microsoft.com · two letters swappedParking page · Afternic
DetailsHide details for micorsoft.co
- Domain
- micorsoft.co
- Spelling
- Spelled like microsoft.com with two letters swapped
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2026-05-19 · Dynadot Inc
- Addresses
- 13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
- Parking page · Afternic
- The registry delegates micorsoft.co to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- mircosoft.co US · AS16509 · Amazon.com, Inc.2 addressesLookalike of microsoft.com · two letters swappedParking page · Afternic
DetailsHide details for mircosoft.co
- Domain
- mircosoft.co
- Spelling
- Spelled like microsoft.com with two letters swapped
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2026-05-19 · Dynadot Inc
- Addresses
- 13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
- Parking page · Afternic
- The registry delegates mircosoft.co to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoftp.orgLookalike of microsoft.com · an added characterMX present
DetailsHide details for microsoftp.org
- Domain
- microsoftp.org
- Spelling
- Spelled like microsoft.com with an added character
- First found
- 2026-11-01 · the day we first found it in the .org zone file, already registered
- Registered
- 2026-05-18 · July Name Limited
- MX
- mail.microsoftp.org
- Daily check
- Ended 2026-11-04 22:41 UTC
- 0utl00k.net US · AS13335 · Cloudflare, Inc.4 addressesLookalike of outlook.com · similar-looking charactersCloudflare
DetailsHide details for 0utl00k.net
- Domain
- 0utl00k.net
- Spelling
- Spelled like outlook.com with similar-looking characters
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2026-05-18 · Dynadot Inc
- Addresses
- 104.21.17.108 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.175.122 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3033::ac43:af7a2606:4700:3036::6815:116c
- Cloudflare
- Cloudflare (104.21.17.108, 172.67.175.122): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- 0ffice365.net US · AS13335 · Cloudflare, Inc.4 addressesLookalike of office365.com · similar-looking charactersCloudflare
DetailsHide details for 0ffice365.net
- Domain
- 0ffice365.net
- Spelling
- Spelled like office365.com with similar-looking characters
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2026-05-18 · Dynadot Inc
- Addresses
- 104.21.58.209 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.164.172 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3031::ac43:a4ac2606:4700:3036::6815:3ad1
- Cloudflare
- Cloudflare (104.21.58.209, 172.67.164.172): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hotmqil.co AU · AS133618 · Trellian Pty. LimitedLookalike of hotmail.com · a letter from a neighbouring keyParking page · Above.comMX present
DetailsHide details for hotmqil.co
- Domain
- hotmqil.co
- Spelling
- Spelled like hotmail.com with a letter from a neighbouring key
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2026-05-18 · Dynadot Inc
- Addresses
- 103.224.182.215 · Australia · AS133618 TRELLIAN-AS-AP - Trellian Pty. Limited · Trellian / Above.com (parking page)
- Parking page · Above.com
- The registry delegates hotmqil.co to Above.com’s nameservers, which answer for it. Above.com: a parking service. It answers for names that are typically for sale or unused. Trellian / Above.com (103.224.182.215): a parking service. It answers for names that are typically for sale or unused.
- MX
- park-mx.above.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- hotmaill.buzz US · AS13335 · Cloudflare, Inc.4 addressesLookalike of microsoft.com · a doubled letterRegistry lookup queuedCloudflareMX present
DetailsHide details for hotmaill.buzz
- Domain
- hotmaill.buzz
- Spelling
- Spelled like microsoft.com with a doubled letter
- First found
- 2026-11-01 · the day we first found it in the .buzz zone file, already registered
- Registered
- 2026-05-16 · GoDaddy.com, LLC
- Addresses
- 104.21.54.118 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.138.122 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3031::6815:36762606:4700:3037::ac43:8a7a
- Cloudflare
- Cloudflare (104.21.54.118, 172.67.138.122): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- MX
- route2.mx.cloudflare.netroute1.mx.cloudflare.netroute3.mx.cloudflare.net
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsofth.orgLookalike of microsoft.com · an added characterMX present
DetailsHide details for microsofth.org
- Domain
- microsofth.org
- Spelling
- Spelled like microsoft.com with an added character
- First found
- 2026-11-01 · the day we first found it in the .org zone file, already registered
- Registered
- 2026-05-16 · July Name Limited
- MX
- mail.microsofth.org
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoftk.orgLookalike of microsoft.com · an added characterMX present
DetailsHide details for microsoftk.org
- Domain
- microsoftk.org
- Spelling
- Spelled like microsoft.com with an added character
- First found
- 2026-11-01 · the day we first found it in the .org zone file, already registered
- Registered
- 2026-05-15 · July Name Limited
- MX
- mail.microsoftk.org
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsofto.orgLookalike of microsoft.com · an added characterRegistry lookup queuedMX present
DetailsHide details for microsofto.org
- Domain
- microsofto.org
- Spelling
- Spelled like microsoft.com with an added character
- First found
- 2026-11-01 · the day we first found it in the .org zone file, already registered
- Registered
- 2026-05-15 · July Name Limited
- MX
- mail.microsofto.org
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoftr.orgLookalike of microsoft.com · an added characterMX present
DetailsHide details for microsoftr.org
- Domain
- microsoftr.org
- Spelling
- Spelled like microsoft.com with an added character
- First found
- 2026-11-01 · the day we first found it in the .org zone file, already registered
- Registered
- 2026-05-14 · July Name Limited
- MX
- mail.microsoftr.org
- Daily check
- Ended 2026-11-04 22:41 UTC
- mlcrosoftonline.com US · AS16509 · Amazon.com, Inc.2 addressesLookalike of microsoftonline.com · similar-looking charactersParking page · Afternic
DetailsHide details for mlcrosoftonline.com
- Domain
- mlcrosoftonline.com
- Spelling
- Spelled like microsoftonline.com with similar-looking characters
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2026-05-12 · Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)
- Addresses
- 13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
- Parking page · Afternic
- The registry delegates mlcrosoftonline.com to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoftonlineauth.org DE · AS51167 · CONTABO Contabo GmbHLookalike of microsoft.com · the name with an added wordContabo
DetailsHide details for microsoftonlineauth.org
- Domain
- microsoftonlineauth.org
- Spelling
- The name of microsoft.com with an added word
- First found
- 2026-11-01 · the day we first found it in the .org zone file, already registered
- Registered
- 2026-05-11 · Cloudflare, Inc.
- Addresses
- 37.60.233.173 · Germany · AS51167 CONTABO Contabo GmbH · Contabo (cloud provider)
- Contabo
- Contabo (37.60.233.173): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoftx.orgLookalike of microsoft.com · an added characterMX present
DetailsHide details for microsoftx.org
- Domain
- microsoftx.org
- Spelling
- Spelled like microsoft.com with an added character
- First found
- 2026-11-01 · the day we first found it in the .org zone file, already registered
- Registered
- 2026-05-11 · July Name Limited
- MX
- mail.microsoftx.org
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsofta.orgLookalike of microsoft.com · an added characterMX present
DetailsHide details for microsofta.org
- Domain
- microsofta.org
- Spelling
- Spelled like microsoft.com with an added character
- First found
- 2026-11-01 · the day we first found it in the .org zone file, already registered
- Registered
- 2026-05-09 · July Name Limited
- MX
- mail.microsofta.org
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoftc.orgLookalike of microsoft.com · an added characterRegistry lookup queuedMX present
DetailsHide details for microsoftc.org
- Domain
- microsoftc.org
- Spelling
- Spelled like microsoft.com with an added character
- First found
- 2026-11-01 · the day we first found it in the .org zone file, already registered
- Registered
- 2026-05-09 · July Name Limited
- MX
- mail.microsoftc.org
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsofts.world US · AS16509 · Amazon.com, Inc.2 addressesLookalike of microsoft.com · an added characterAmazon Web Services
DetailsHide details for microsofts.world
- Domain
- microsofts.world
- Spelling
- Spelled like microsoft.com with an added character
- First found
- 2026-11-01 · the day we first found it in the .world zone file, already registered
- Registered
- 2026-05-09 · Porkbun LLC
- Addresses
- 44.227.65.245 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)44.227.76.166 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (44.227.65.245, 44.227.76.166): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hotmail.surfLookalike of hotmail.com · the ending .surfMX present
DetailsHide details for hotmail.surf
- Domain
- hotmail.surf
- Spelling
- The name of hotmail.com with the ending .surf
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Registered
- 2026-05-09 · NameSilo, LLC
- MX
- route3.mx.cloudflare.netroute2.mx.cloudflare.netroute1.mx.cloudflare.net
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoftd.orgLookalike of microsoft.com · an added characterMX present
DetailsHide details for microsoftd.org
- Domain
- microsoftd.org
- Spelling
- Spelled like microsoft.com with an added character
- First found
- 2026-11-01 · the day we first found it in the .org zone file, already registered
- Registered
- 2026-05-08 · July Name Limited
- MX
- mail.microsoftd.org
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoftz.orgLookalike of microsoft.com · an added characterMX present
DetailsHide details for microsoftz.org
- Domain
- microsoftz.org
- Spelling
- Spelled like microsoft.com with an added character
- First found
- 2026-11-01 · the day we first found it in the .org zone file, already registered
- Registered
- 2026-05-08 · July Name Limited
- MX
- mail.microsoftz.org
- Daily check
- Ended 2026-11-04 22:41 UTC
- office365v.xyzLookalike of microsoft.com · an added characterMX present
DetailsHide details for office365v.xyz
- Domain
- office365v.xyz
- Spelling
- Spelled like microsoft.com with an added character
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-05-07 · DNSPod, Inc.
- MX
- office365v-xyz.mail.eo.outlook.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- outlook.com.cm US · AS14061 · DigitalOcean, LLCLookalike of outlook.com · the ending .com.cmDigitalOcean
DetailsHide details for outlook.com.cm
- Domain
- outlook.com.cm
- Spelling
- The name of outlook.com with the ending .com.cm
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Registered
- 2026-05-07 · Netcom.cm Sarl
- Addresses
- 167.99.110.211 · United States · AS14061 DIGITALOCEAN-ASN - DigitalOcean, LLC · DigitalOcean (cloud provider)
- DigitalOcean
- DigitalOcean (167.99.110.211): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hotmail.com.cm US · AS14061 · DigitalOcean, LLCLookalike of hotmail.com · the ending .com.cmDigitalOcean
DetailsHide details for hotmail.com.cm
- Domain
- hotmail.com.cm
- Spelling
- The name of hotmail.com with the ending .com.cm
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Registered
- 2026-05-07 · Netcom.cm Sarl
- Addresses
- 167.99.110.211 · United States · AS14061 DIGITALOCEAN-ASN - DigitalOcean, LLC · DigitalOcean (cloud provider)
- DigitalOcean
- DigitalOcean (167.99.110.211): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- offices365.top CZ · AS60592 · GRANSY Gransy s.r.o.9 addressesLookalike of microsoft.com · an added characterParking page · ParktonsMX present
DetailsHide details for offices365.top
- Domain
- offices365.top
- Spelling
- Spelled like microsoft.com with an added character
- First found
- 2026-11-03 · the day we first found it in the .top zone file, already registered
- Registered
- 2026-05-05 · Gransy s.r.o. d/b/a subreg.cz
- Addresses
- 46.8.9.220 · Czechia · AS60592 GRANSY Gransy s.r.o. · Parktons (parking page)46.8.9.222 · Czechia · AS60592 GRANSY Gransy s.r.o. · Parktons (parking page)46.8.9.223 · Czechia · AS60592 GRANSY Gransy s.r.o. · Parktons (parking page)46.8.9.224 · Czechia · AS60592 GRANSY Gransy s.r.o. · Parktons (parking page)46.8.9.225 · Czechia · AS60592 GRANSY Gransy s.r.o. · Parktons (parking page)46.8.9.226 · Czechia · AS60592 GRANSY Gransy s.r.o. · Parktons (parking page)46.8.9.227 · Czechia · AS60592 GRANSY Gransy s.r.o. · Parktons (parking page)46.8.9.228 · Czechia · AS60592 GRANSY Gransy s.r.o. · Parktons (parking page)46.8.9.229 · Czechia · AS60592 GRANSY Gransy s.r.o. · Parktons (parking page)
- Parking page · Parktons
- The registry delegates offices365.top to Parktons’s nameservers, which answer for it. Parktons (46.8.9.220, 46.8.9.222, 46.8.9.223, 46.8.9.224, 46.8.9.225, 46.8.9.226, 46.8.9.227, 46.8.9.228, 46.8.9.229): a parking service. It answers for names that are typically for sale or unused.
- MX
- mail.parktons.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- outlook.downloadLookalike of outlook.com · the ending .downloadNo address or mail server yet
DetailsHide details for outlook.download
- Domain
- outlook.download
- Spelling
- The name of outlook.com with the ending .download
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Registered
- 2026-05-05 · Porkbun
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- onedrive.download US · AS13335 · Cloudflare, Inc.4 addressesLookalike of onedrive.com · the ending .downloadCloudflare
DetailsHide details for onedrive.download
- Domain
- onedrive.download
- Spelling
- The name of onedrive.com with the ending .download
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Registered
- 2026-05-05 · Porkbun
- Addresses
- 104.21.34.89 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.202.5 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3033::ac43:ca052606:4700:3035::6815:2259
- Cloudflare
- Cloudflare (104.21.34.89, 172.67.202.5): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-security.topLookalike of microsoft.com · the name with the word “security”No address or mail server yet
DetailsHide details for microsoft-security.top
- Domain
- microsoft-security.top
- Spelling
- The name of microsoft.com with the word “security”
- First found
- 2026-11-03 · the day we first found it in the .top zone file, already registered
- Registered
- 2026-05-02 · Dynadot LLC
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- outlook.inkLookalike of outlook.com · the ending .inkMX present
DetailsHide details for outlook.ink
- Domain
- outlook.ink
- Spelling
- The name of outlook.com with the ending .ink
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Registered
- 2026-05-01 · Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)
- MX
- route3.mx.cloudflare.netroute1.mx.cloudflare.netroute2.mx.cloudflare.net
- Daily check
- Ended 2026-11-04 22:41 UTC
- securesharepoint.online US · AS13335 · Cloudflare, Inc.4 addressesLookalike of microsoft.com · the name with an added wordCloudflare
DetailsHide details for securesharepoint.online
- Domain
- securesharepoint.online
- Spelling
- The name of microsoft.com with an added word
- First found
- 2026-11-01 · the day we first found it in the .online zone file, already registered
- Registered
- 2026-04-30 · Dynadot Inc
- Addresses
- 104.21.74.187 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.205.161 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3032::6815:4abb2606:4700:3037::ac43:cda1
- Cloudflare
- Cloudflare (104.21.74.187, 172.67.205.161): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- sharerpoint.cam US · AS13335 · Cloudflare, Inc.4 addressesLookalike of microsoft.com · an added characterCloudflare
DetailsHide details for sharerpoint.cam
- Domain
- sharerpoint.cam
- Spelling
- Spelled like microsoft.com with an added character
- First found
- 2026-11-01 · the day we first found it in the .cam zone file, already registered
- Registered
- 2026-04-30 · Global Domain Group LLC
- Addresses
- 104.21.91.18 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.208.49 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3031::6815:5b122606:4700:3037::ac43:d031
- Cloudflare
- Cloudflare (104.21.91.18, 172.67.208.49): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- micros0ft365.com US · AS16509 · Amazon.com, Inc.2 addressesLookalike of microsoft365.com · similar-looking charactersRegistry lookup queuedParking page · Afternic
DetailsHide details for micros0ft365.com
- Domain
- micros0ft365.com
- Spelling
- Spelled like microsoft365.com with similar-looking characters
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2026-04-30 · Circle of Domains LLC
- Addresses
- 13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
- Parking page · Afternic
- The registry delegates micros0ft365.com to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- mcrosoft.cloud US · AS16509 · Amazon.com, Inc.2 addressesLookalike of microsoft.com · a dropped letterAmazon Web Services
DetailsHide details for mcrosoft.cloud
- Domain
- mcrosoft.cloud
- Spelling
- Spelled like microsoft.com with a dropped letter
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2026-04-30 · Porkbun LLC
- Addresses
- 207.207.210.107 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)207.207.210.229 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (207.207.210.107, 207.207.210.229): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- mcrosoft.store US · AS16509 · Amazon.com, Inc.2 addressesLookalike of microsoft.com · a dropped letterAmazon Web Services
DetailsHide details for mcrosoft.store
- Domain
- mcrosoft.store
- Spelling
- Spelled like microsoft.com with a dropped letter
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2026-04-30 · Porkbun LLC
- Addresses
- 207.207.210.107 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)207.207.210.229 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (207.207.210.107, 207.207.210.229): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- outlook.how US · AS53831 · Squarespace, Inc.4 addressesLookalike of outlook.com · the ending .howSquarespaceMX present
DetailsHide details for outlook.how
- Domain
- outlook.how
- Spelling
- The name of outlook.com with the ending .how
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Registered
- 2026-04-29 · Squarespace Domains II LLC.
- Addresses
- 198.49.23.144 · United States · AS53831 SQUARESPACE - Squarespace, Inc. · Squarespace (site builder)198.49.23.145 · United States · AS53831 SQUARESPACE - Squarespace, Inc. · Squarespace (site builder)198.185.159.144 · United States · AS53831 SQUARESPACE - Squarespace, Inc. · Squarespace (site builder)198.185.159.145 · United States · AS53831 SQUARESPACE - Squarespace, Inc. · Squarespace (site builder)
- Squarespace
- Squarespace (198.49.23.144, 198.49.23.145, 198.185.159.144, 198.185.159.145): a site builder. It hosts pages for anyone who signs up.
- MX
- mxa.mailgun.orgmxb.mailgun.org
- Daily check
- Ended 2026-11-04 22:41 UTC
- hotmail.now US · AS13335 · Cloudflare, Inc.4 addressesLookalike of hotmail.com · the ending .nowCloudflareMX present
DetailsHide details for hotmail.now
- Domain
- hotmail.now
- Spelling
- The name of hotmail.com with the ending .now
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Registered
- 2026-04-29 · Dynadot Inc
- Addresses
- 104.21.8.141 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.139.134 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3031::ac43:8b862606:4700:3037::6815:88d
- Cloudflare
- Cloudflare (104.21.8.141, 172.67.139.134): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- MX
- route3.mx.cloudflare.netroute1.mx.cloudflare.netroute2.mx.cloudflare.net
- Daily check
- Ended 2026-11-04 22:41 UTC
- miclosoft.online US · AS174 · Cogent Communications, LLCLookalike of microsoft.com · a changed characterMX present
DetailsHide details for miclosoft.online
- Domain
- miclosoft.online
- Spelling
- Spelled like microsoft.com with a changed character
- First found
- 2026-11-01 · the day we first found it in the .online zone file, already registered
- Registered
- 2026-04-27 · Ultahost, Inc.
- Addresses
- 38.134.148.71 · United States · AS174 COGENT-174 - Cogent Communications, LLC
- MX
- mail.miclosoft.onlinemiclosoft.online
- Daily check
- Ended 2026-11-04 22:41 UTC
- dmsoffice.online DE · AS8560 · IONOS-AS IONOS SE2 addressesLookalike of microsoft.com · an added characterIONOSMX present
DetailsHide details for dmsoffice.online
- Domain
- dmsoffice.online
- Spelling
- Spelled like microsoft.com with an added character
- First found
- 2026-11-01 · the day we first found it in the .online zone file, already registered
- Registered
- 2026-04-25 · IONOS SE
- Addresses
- 74.208.236.97 · Germany · AS8560 IONOS-AS IONOS SE · IONOS (shared hosting)2607:f1c0:100f:f000::238
- IONOS
- IONOS (74.208.236.97): shared web hosting and domain registration. One address typically serves many customer sites.
- MX
- mx00.ionos.commx01.ionos.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- dmsoffice.org DE · AS8560 · IONOS-AS IONOS SE2 addressesLookalike of microsoft.com · an added characterIONOSMX present
DetailsHide details for dmsoffice.org
- Domain
- dmsoffice.org
- Spelling
- Spelled like microsoft.com with an added character
- First found
- 2026-11-01 · the day we first found it in the .org zone file, already registered
- Registered
- 2026-04-25 · IONOS SE
- Addresses
- 74.208.236.97 · Germany · AS8560 IONOS-AS IONOS SE · IONOS (shared hosting)2607:f1c0:100f:f000::238
- IONOS
- IONOS (74.208.236.97): shared web hosting and domain registration. One address typically serves many customer sites.
- MX
- mx00.ionos.commx01.ionos.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- dmsoffice.store DE · AS8560 · IONOS-AS IONOS SE2 addressesLookalike of microsoft.com · an added characterIONOSMX present
DetailsHide details for dmsoffice.store
- Domain
- dmsoffice.store
- Spelling
- Spelled like microsoft.com with an added character
- First found
- 2026-11-01 · the day we first found it in the .store zone file, already registered
- Registered
- 2026-04-25 · IONOS SE
- Addresses
- 74.208.236.97 · Germany · AS8560 IONOS-AS IONOS SE · IONOS (shared hosting)2607:f1c0:100f:f000::238
- IONOS
- IONOS (74.208.236.97): shared web hosting and domain registration. One address typically serves many customer sites.
- MX
- mx00.ionos.commx01.ionos.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- rnicr0s0ft.tech US · AS31898 · Oracle CorporationLookalike of microsoft.com · similar-looking charactersOracle CloudMX present
DetailsHide details for rnicr0s0ft.tech
- Domain
- rnicr0s0ft.tech
- Spelling
- Spelled like microsoft.com with similar-looking characters
- First found
- 2026-11-01 · the day we first found it in the .tech zone file, already registered
- Registered
- 2026-04-24 · Network Solutions, LLC
- Addresses
- 192.185.5.192 · United States · AS31898 ORACLE-BMC-31898 - Oracle Corporation · Oracle Cloud (cloud provider)
- Oracle Cloud
- Oracle Cloud (192.185.5.192): a cloud provider. It rents servers and addresses to its customers.
- MX
- mail.rnicr0s0ft.techrnicr0s0ft.tech
- Daily check
- Ended 2026-11-04 22:41 UTC
- hotmail.workLookalike of hotmail.com · the ending .workNo address or mail server yet
DetailsHide details for hotmail.work
- Domain
- hotmail.work
- Spelling
- The name of hotmail.com with the ending .work
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Registered
- 2026-04-24 · Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- outlook.blog US · AS13335 · Cloudflare, Inc.4 addressesLookalike of outlook.com · the ending .blogCloudflareMX present
DetailsHide details for outlook.blog
- Domain
- outlook.blog
- Spelling
- The name of outlook.com with the ending .blog
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Registered
- 2026-04-22 · Go Daddy, LLC
- Addresses
- 104.21.34.19 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.153.53 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3031::6815:22132606:4700:3033::ac43:9935
- Cloudflare
- Cloudflare (104.21.34.19, 172.67.153.53): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- MX
- route2.mx.cloudflare.netroute3.mx.cloudflare.netroute1.mx.cloudflare.net
- Daily check
- Ended 2026-11-04 22:41 UTC
- outlook.ingLookalike of outlook.com · the ending .ingMX present
DetailsHide details for outlook.ing
- Domain
- outlook.ing
- Spelling
- The name of outlook.com with the ending .ing
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Registered
- 2026-04-22 · Porkbun LLC
- MX
- tuesday.mxrouting.nettuesday-relay.mxrouting.net
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoftupdate.xyzLookalike of microsoft.com · the name with an added wordNo address or mail server yetRegistry lookup queued
DetailsHide details for microsoftupdate.xyz
- Domain
- microsoftupdate.xyz
- Spelling
- The name of microsoft.com with an added word
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-04-21 · GoDaddy.com, LLC
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- office365.mom US · AS16509 · Amazon.com, Inc.3 addressesLookalike of office365.com · the ending .momAmazon Web Services
DetailsHide details for office365.mom
- Domain
- office365.mom
- Spelling
- The name of office365.com with the ending .mom
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Registered
- 2026-04-21 · Porkbun LLC
- Addresses
- 207.207.210.23 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)207.207.210.36 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)207.207.210.50 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (207.207.210.23, 207.207.210.36, 207.207.210.50): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- 0utlook.onlineLookalike of outlook.com · similar-looking charactersMX present
DetailsHide details for 0utlook.online
- Domain
- 0utlook.online
- Spelling
- Spelled like outlook.com with similar-looking characters
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2026-04-17 · Xin Net Technology Corporation
- MX
- 124.221.236.251
- Daily check
- Ended 2026-11-04 22:41 UTC
- loginmicrosoft-onedrive325.zip US · AS16509 · Amazon.com, Inc.2 addressesLookalike of microsoft.com · the name with an added wordRegistry lookup queuedAmazon Web Services
DetailsHide details for loginmicrosoft-onedrive325.zip
- Domain
- loginmicrosoft-onedrive325.zip
- Spelling
- The name of microsoft.com with an added word
- First found
- 2026-11-01 · the day we first found it in the .zip zone file, already registered
- Registered
- 2026-04-16 · GoDaddy.com, LLC
- Addresses
- 13.248.243.5 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)76.223.105.230 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (13.248.243.5, 76.223.105.230): a cloud provider. It rents servers and addresses to its customers.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-accounts.helpLookalike of microsoft.com · the name with the word “accounts”PhishDestroy CommunitySuspicious · mediumNo address or mail server yet
DetailsHide details for microsoft-accounts.help
- Domain
- microsoft-accounts.help
- Spelling
- The name of microsoft.com with the word “accounts”
- First found
- 2026-11-01 · the day we first found it in the .help zone file, already registered
- Registered
- 2026-04-16 · Gandi SAS
- Suspicious
- PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated medium: no address yet, or a parking or holding signal.
- PhishDestroy Community
- PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoftonlline.com AU · AS133618 · Trellian Pty. LimitedLookalike of microsoftonline.com · a doubled letterParking page · Above.comMX present
DetailsHide details for microsoftonlline.com
- Domain
- microsoftonlline.com
- Spelling
- Spelled like microsoftonline.com with a doubled letter
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2026-04-15 · Chengdu Fly-Digital Technology Co., Ltd.
- Addresses
- 103.224.182.244 · Australia · AS133618 TRELLIAN-AS-AP - Trellian Pty. Limited · Trellian / Above.com (parking page)
- Parking page · Above.com
- The registry delegates microsoftonlline.com to Above.com’s nameservers, which answer for it. Above.com: a parking service. It answers for names that are typically for sale or unused. Trellian / Above.com (103.224.182.244): a parking service. It answers for names that are typically for sale or unused.
- MX
- park-mx.above.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- mlcros0ft.tech IN · AS140641 · YOTTA NETWORK SERVICES PRIV…Lookalike of microsoft.com · similar-looking charactersMX present
DetailsHide details for mlcros0ft.tech
- Domain
- mlcros0ft.tech
- Spelling
- Spelled like microsoft.com with similar-looking characters
- First found
- 2026-11-01 · the day we first found it in the .tech zone file, already registered
- Registered
- 2026-04-14 · Namify Domains Inc
- Addresses
- 103.235.70.188 · India · AS140641 YOTTA - YOTTA NETWORK SERVICES PRIVATE LIMITED
- MX
- mail.mlcros0ft.tech
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoftonline.helpLookalike of microsoftonline.com · the ending .helpNo address or mail server yet
DetailsHide details for microsoftonline.help
- Domain
- microsoftonline.help
- Spelling
- The name of microsoftonline.com with the ending .help
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2026-04-14 · HOSTINGER operations, UAB
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsft.plLookalike of microsoft.com · a dropped letterNo address or mail server yet
DetailsHide details for microsft.pl
- Domain
- microsft.pl
- Spelling
- Spelled like microsoft.com with a dropped letter
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2026-04-14 · home.pl sp. z o.o.
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- micros0ft.xyzLookalike of microsoft.com · similar-looking charactersRegistry lookup queuedMX present
DetailsHide details for micros0ft.xyz
- Domain
- micros0ft.xyz
- Spelling
- Spelled like microsoft.com with similar-looking characters
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2026-04-12 · GoDaddy.com, LLC
- MX
- route3.mx.cloudflare.netroute1.mx.cloudflare.netroute2.mx.cloudflare.net
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hotmail.app US · AS16509 · Amazon.com, Inc.2 addressesLookalike of hotmail.com · the ending .appParking page · Afternic
DetailsHide details for hotmail.app
- Domain
- hotmail.app
- Spelling
- The name of hotmail.com with the ending .app
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2026-04-11 · Sav.com, LLC - 50
- Addresses
- 13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
- Parking page · Afternic
- The registry delegates hotmail.app to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsofts.asiaLookalike of microsoft.com · an added characterNo address or mail server yet
DetailsHide details for microsofts.asia
- Domain
- microsofts.asia
- Spelling
- Spelled like microsoft.com with an added character
- First found
- 2026-11-01 · the day we first found it in the .asia zone file, already registered
- Registered
- 2026-04-10 · GNAME.COM PTE. LTD.
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- m1crosoft.asia SC · AS328543 · Sun Network Company LimitedLookalike of microsoft.com · similar-looking charactersMX present
DetailsHide details for m1crosoft.asia
- Domain
- m1crosoft.asia
- Spelling
- Spelled like microsoft.com with similar-looking characters
- First found
- 2026-11-01 · the day we first found it in the .asia zone file, already registered
- Registered
- 2026-04-09 · Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)
- Addresses
- 102.220.91.83 · Seychelles · AS328543 Sun Network Company Limited - Sun Network Company Limited
- MX
- mail.m1crosoft.asia
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsotf365.netLookalike of microsoft365.com · two letters swappedMX present
DetailsHide details for microsotf365.net
- Domain
- microsotf365.net
- Spelling
- Spelled like microsoft365.com with two letters swapped
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2026-04-09 · Cloudflare, Inc.
- MX
- mx.zoho.eumx2.zoho.eumx3.zoho.eu
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsotf365.orgLookalike of microsoft365.com · two letters swappedNo address or mail server yet
DetailsHide details for microsotf365.org
- Domain
- microsotf365.org
- Spelling
- Spelled like microsoft365.com with two letters swapped
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2026-04-09 · Cloudflare, Inc.
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- xn--microsft-s4a.com US · AS13335 · Cloudflare, Inc.4 addressesLookalike of microsoft.com · international characters, shown as microsöft.comCloudflare
DetailsHide details for xn--microsft-s4a.com
- Domain
- xn--microsft-s4a.com
- Spelling
- Spelled like microsoft.com with international characters, shown as microsöft.com
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2026-04-08 · HOSTINGER operations, UAB
- Addresses
- 104.21.69.70 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.206.11 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3034::ac43:ce0b2606:4700:3036::6815:4546
- Cloudflare
- Cloudflare (104.21.69.70, 172.67.206.11): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsovt.com SE · AS44136 · ASODERLAND ODERLAND Webbhot…2 addressesLookalike of microsoft.com · a letter from a neighbouring keyMX present
DetailsHide details for microsovt.com
- Domain
- microsovt.com
- Spelling
- Spelled like microsoft.com with a letter from a neighbouring key
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2026-04-07 · NameCheap, Inc.
- Addresses
- 91.201.60.10 · Sweden · AS44136 ASODERLAND ODERLAND Webbhotell AB2a02:28f0:300b:24::
- MX
- mx1.oderland.commx2.oderland.commx3.oderland.commx4.oderland.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsofltonline.info FR · AS16276 · OVH OVH SASLookalike of microsoft.com · an added characterOVHMX present
DetailsHide details for microsofltonline.info
- Domain
- microsofltonline.info
- Spelling
- Spelled like microsoft.com with an added character
- First found
- 2026-11-01 · the day we first found it in the .info zone file, already registered
- Registered
- 2026-04-06 · IONOS SE
- Addresses
- 15.204.246.8 · France · AS16276 OVH OVH SAS · OVH (cloud provider)
- OVH
- OVH (15.204.246.8): a cloud provider. It rents servers and addresses to its customers.
- MX
- microsofltonline-info.mail.protection.outlook.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- outlook-verify.com US · AS13335 · Cloudflare, Inc.4 addressesLookalike of outlook.com · the name with the word “verify”Cloudflare
DetailsHide details for outlook-verify.com
- Domain
- outlook-verify.com
- Spelling
- The name of outlook.com with the word “verify”
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Registered
- 2026-04-05 · Cloudflare, Inc.
- Addresses
- 104.21.42.33 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.199.187 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3032::6815:2a212606:4700:3033::ac43:c7bb
- Cloudflare
- Cloudflare (104.21.42.33, 172.67.199.187): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-update.support US · AS14618 · Amazon.com, Inc.2 addressesLookalike of microsoft.com · the name with the word “update”Amazon Web Services
DetailsHide details for microsoft-update.support
- Domain
- microsoft-update.support
- Spelling
- The name of microsoft.com with the word “update”
- First found
- 2026-11-01 · the day we first found it in the .support zone file, already registered
- Registered
- 2026-04-04 · Name.com, Inc.
- Addresses
- 18.208.88.157 · United States · AS14618 AMAZON-AES - Amazon.com, Inc. · Amazon Web Services (cloud provider)98.84.224.111 · United States · AS14618 AMAZON-AES - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (18.208.88.157, 98.84.224.111): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hotmail.clubLookalike of hotmail.com · the ending .clubNo address or mail server yet
DetailsHide details for hotmail.club
- Domain
- hotmail.club
- Spelling
- The name of hotmail.com with the ending .club
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Registered
- 2026-04-04 · Cloudflare, Inc.
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hotmaill.icuLookalike of hotmail.com · a doubled letterMX present
DetailsHide details for hotmaill.icu
- Domain
- hotmaill.icu
- Spelling
- Spelled like hotmail.com with a doubled letter
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2026-04-04 · IONOS SE
- MX
- route3.mx.cloudflare.netroute2.mx.cloudflare.netroute1.mx.cloudflare.net
- Daily check
- Ended 2026-11-04 22:41 UTC
- 0utlook.liveLookalike of outlook.com · similar-looking charactersMX present
DetailsHide details for 0utlook.live
- Domain
- 0utlook.live
- Spelling
- Spelled like outlook.com with similar-looking characters
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2026-04-03 · Cloudflare, Inc
- MX
- 0utlook-live.mail.protection.outlook.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- micrsoft.topLookalike of microsoft.com · a dropped letterNo address or mail server yet
DetailsHide details for micrsoft.top
- Domain
- micrsoft.top
- Spelling
- Spelled like microsoft.com with a dropped letter
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2026-04-03 · NameSilo,LLC
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- one-drive.info PL · AS43641 · Sollutium-NL SOLLUTIUM EU S…Lookalike of microsoft.com · an added hyphen
DetailsHide details for one-drive.info
- Domain
- one-drive.info
- Spelling
- Spelled like microsoft.com with an added hyphen
- First found
- 2026-11-01 · the day we first found it in the .info zone file, already registered
- Registered
- 2026-04-02 · HOSTINGER operations, UAB
- Addresses
- 85.137.52.44 · Poland · AS43641 Sollutium-NL SOLLUTIUM EU Sp z.o.o.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsft.us US · AS16509 · Amazon.com, Inc.2 addressesLookalike of microsoft.com · a dropped letterParking page · Afternic
DetailsHide details for microsft.us
- Domain
- microsft.us
- Spelling
- Spelled like microsoft.com with a dropped letter
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2026-04-02 · Spaceship, Inc.
- Addresses
- 13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
- Parking page · Afternic
- The registry delegates microsft.us to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsooft.orgLookalike of microsoft.com · a doubled letterPhishDestroy CommunitySuspicious · mediumNo address or mail server yet
DetailsHide details for microsooft.org
- Domain
- microsooft.org
- Spelling
- Spelled like microsoft.com with a doubled letter
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2026-04-02 · Cloudflare, Inc.
- Suspicious
- PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated medium: no address yet, or a parking or holding signal.
- PhishDestroy Community
- PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- nicrosoft.us US · AS16509 · Amazon.com, Inc.2 addressesLookalike of microsoft.com · a letter from a neighbouring keyAmazon Web Services
DetailsHide details for nicrosoft.us
- Domain
- nicrosoft.us
- Spelling
- Spelled like microsoft.com with a letter from a neighbouring key
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2026-04-02 · GoDaddy.com, LLC
- Addresses
- 13.248.243.5 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)76.223.105.230 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (13.248.243.5, 76.223.105.230): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoftservice.cloud US · AS15169 · Google LLCLookalike of microsoft.com · the name with an added wordGoogle
DetailsHide details for microsoftservice.cloud
- Domain
- microsoftservice.cloud
- Spelling
- The name of microsoft.com with an added word
- First found
- 2026-11-01 · the day we first found it in the .cloud zone file, already registered
- Registered
- 2026-03-31 · Global Domain Group LLC
- Addresses
- 8.8.8.8 · United States · AS15169 GOOGLE - Google LLC · Google (cloud provider)
- Google (8.8.8.8): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- rnlcrosoft.org US · AS16509 · Amazon.com, Inc.2 addressesLookalike of microsoft.com · similar-looking charactersAmazon Web Services
DetailsHide details for rnlcrosoft.org
- Domain
- rnlcrosoft.org
- Spelling
- Spelled like microsoft.com with similar-looking characters
- First found
- 2026-11-01 · the day we first found it in the .org zone file, already registered
- Registered
- 2026-03-29 · Name.com, Inc.
- Addresses
- 64.29.17.1 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)216.198.79.1 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (64.29.17.1, 216.198.79.1): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- outlook.workLookalike of outlook.com · the ending .workMX present
DetailsHide details for outlook.work
- Domain
- outlook.work
- Spelling
- The name of outlook.com with the ending .work
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Registered
- 2026-03-26 · Cloudflare, Inc.
- MX
- in1-smtp.messagingengine.comin2-smtp.messagingengine.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- hotma1l.co.uk US · AS16509 · Amazon.com, Inc.Lookalike of hotmail.com · similar-looking charactersAmazon Web ServicesMX present
DetailsHide details for hotma1l.co.uk
- Domain
- hotma1l.co.uk
- Spelling
- Spelled like hotmail.com with similar-looking characters
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2026-03-26 · 101domain GRS Ltd
- Addresses
- 52.60.87.163 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (52.60.87.163): a cloud provider. It rents servers and addresses to its customers.
- MX
- aspmx.l.google.comalt1.aspmx.l.google.comalt2.aspmx.l.google.comalt3.aspmx.l.google.comalt4.aspmx.l.google.com
- Daily check
- Ended 2026-11-04 22:41 UTC
Registered domains using the name
Domains from registry zone files (ICANN CZDS), checked daily like the lookalikes above. Each row says how it matches Microsoft's names. Resellers, fans and other businesses register names like these too. Our zone data terms apply to them.
100 of 808 shown: listed ones first, then the newest registrations.
- sharepoint365.support KN · AS402253 · SKN Subnet & Telecom LtdContains “sharepoint”Address on Spamhaus DROP
DetailsHide details for sharepoint365.support
- Domain
- sharepoint365.support
- Match
- A new registration containing “sharepoint”, one of the names we match for Microsoft
- First found
- 2026-11-05 · the day the .support zone file first listed it as a new registration
- Registered
- 2026-11-04 · Spaceship, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on Spamhaus DROP
- 104.251.180.138 is on Spamhaus DROP · sharepoint365.support resolved to it 2026-11-05 05:11 UTC
- Addresses
- 104.251.180.138 · St. Kitts & Nevis · AS402253 SKN-NETWORK-1 - SKN Subnet & Telecom Ltd
- Daily check
- Ended 2026-11-04 22:41 UTC
- cdn-microsoft.top SG · AS63949 · Akamai Connected Cloud3 addressesContains “microsoft”2 addresses on DomainSpoof’s phishing-host listAkamai Linode
DetailsHide details for cdn-microsoft.top
- Domain
- cdn-microsoft.top
- Match
- A new registration containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-05 · the day the .top zone file first listed it as a new registration
- Registered
- 2026-11-04 · NameSilo,LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- 2 addresses on DomainSpoof’s phishing-host list
- 172.232.24.161 (cdn-microsoft.top resolved to it 2026-11-05 04:17 UTC), 172.232.24.235 (cdn-microsoft.top resolved to it 2026-11-05 04:17 UTC) are on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours
- Addresses
- 45.79.154.26 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)172.232.24.161 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)172.232.24.235 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
- Akamai Linode
- Akamai Linode (45.79.154.26, 172.232.24.161, 172.232.24.235): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoftoffice365.top SG · AS63949 · Akamai Connected Cloud3 addressesContains “microsoft”Listed by MetaMask3 addresses on DomainSpoof’s phishing-host listAkamai Linode
DetailsHide details for microsoftoffice365.top
- Domain
- microsoftoffice365.top
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-03 · the day we first found it in the .top zone file, already registered
- Registered
- 2026-10-30 · NameSilo,LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Listed by MetaMask
- Listed by MetaMask · microsoftoffice365.top · in the feed since 2026-11-01 11:44 UTC
- 3 addresses on DomainSpoof’s phishing-host list
- 172.232.24.161 (microsoftoffice365.top resolved to it 2026-11-05 00:46 UTC), 172.232.24.235 (microsoftoffice365.top resolved to it 2026-11-05 00:46 UTC), 172.234.25.42 (microsoftoffice365.top resolved to it 2026-11-05 00:46 UTC) are on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours
- Addresses
- 172.232.24.161 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)172.232.24.235 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)172.234.25.42 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
- Akamai Linode
- Akamai Linode (172.232.24.161, 172.232.24.235, 172.234.25.42): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- onedrive-sync.top SG · AS63949 · Akamai Connected Cloud3 addressesContains “onedrive”3 addresses on DomainSpoof’s phishing-host listAkamai Linode
DetailsHide details for onedrive-sync.top
- Domain
- onedrive-sync.top
- Match
- A domain containing “onedrive”, one of the names we match for Microsoft
- First found
- 2026-11-03 · the day we first found it in the .top zone file, already registered
- Registered
- 2026-10-29 · NameSilo,LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- 3 addresses on DomainSpoof’s phishing-host list
- 172.232.24.161 (onedrive-sync.top resolved to it 2026-11-05 00:46 UTC), 172.232.24.235 (onedrive-sync.top resolved to it 2026-11-05 00:46 UTC), 172.234.25.42 (onedrive-sync.top resolved to it 2026-11-05 00:46 UTC) are on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours
- Addresses
- 172.232.24.161 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)172.232.24.235 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)172.234.25.42 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
- Akamai Linode
- Akamai Linode (172.232.24.161, 172.232.24.235, 172.234.25.42): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoftsupp.info RU · AS209207 · DHOST-AS Digital Hosting Pr…Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for microsoftsupp.info
- Domain
- microsoftsupp.info
- Match
- A registered domain containing “microsoft”, one of the names we match for Microsoft
- Zone file copy
- 2026-10-31 · the day of the .info zone file copy it was found in
- Registered
- 2026-10-22 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 168.113.215.244 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoftsupp.info resolved to it 2026-11-05 00:46 UTC
- Addresses
- 168.113.215.244 · Russia · AS209207 DHOST-AS Digital Hosting Provider LLC
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-office.topContains “microsoft”Listed by MetaMaskNo address or mail server yet
DetailsHide details for microsoft-office.top
- Domain
- microsoft-office.top
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-03 · the day we first found it in the .top zone file, already registered
- Registered
- 2026-10-18 · West263 International Limited
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Listed by MetaMask
- Listed by MetaMask · microsoft-office.top · in the feed since 2026-10-27 05:34 UTC
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoftsharefile.topContains “microsoft”Listed by MetaMaskNo address or mail server yet
DetailsHide details for microsoftsharefile.top
- Domain
- microsoftsharefile.top
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-03 · the day we first found it in the .top zone file, already registered
- Registered
- 2026-10-18 · NameSilo,LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Listed by MetaMask
- Listed by MetaMask · microsoftsharefile.top · in the feed since 2026-10-27 05:34 UTC
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoftsharefile1.topContains “microsoft”Listed by MetaMaskNo address or mail server yet
DetailsHide details for microsoftsharefile1.top
- Domain
- microsoftsharefile1.top
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-03 · the day we first found it in the .top zone file, already registered
- Registered
- 2026-10-18 · NameSilo,LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Listed by MetaMask
- Listed by MetaMask · microsoftsharefile1.top · in the feed since 2026-10-27 05:34 UTC
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoftes.liveContains “microsoft”Listed by MetaMaskNo address or mail server yet
DetailsHide details for microsoftes.live
- Domain
- microsoftes.live
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .live zone file, already registered
- Registered
- 2026-10-06 · Dynadot Inc
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Listed by MetaMask
- Listed by MetaMask · microsoftes.live · in the feed since 2026-10-27 05:34 UTC
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-teams.sbs US · AS13335 · Cloudflare, Inc.4 addressesContains “microsoft”Listed by MetaMaskCloudflare
DetailsHide details for microsoft-teams.sbs
- Domain
- microsoft-teams.sbs
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .sbs zone file, already registered
- Registered
- 2026-10-03 · Dynadot Inc
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Listed by MetaMask
- Listed by MetaMask · microsoft-teams.sbs · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.32.178 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.153.49 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3036::ac43:99312606:4700:3037::6815:20b2
- Cloudflare
- Cloudflare (104.21.32.178, 172.67.153.49): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-office365.site US · AS13335 · Cloudflare, Inc.4 addressesContains “microsoft”Listed by MetaMaskReported by PhishDestroyCloudflareMX present
DetailsHide details for microsoft-office365.site
- Domain
- microsoft-office365.site
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .site zone file, already registered
- Registered
- 2026-09-26 · Cloudflare, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Listed by MetaMask
- Listed by MetaMask · microsoft-office365.site · in the feed since 2026-10-27 05:34 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · microsoft-office365.site · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 104.21.16.197 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.215.149 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3034::ac43:d7952606:4700:3035::6815:10c5
- Cloudflare
- Cloudflare (104.21.16.197, 172.67.215.149): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- MX
- mx01.mail.icloud.commx02.mail.icloud.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-onedrive.org SG · AS63949 · Akamai Connected CloudContains “microsoft”Listed by MetaMaskAkamai Linode
DetailsHide details for microsoft-onedrive.org
- Domain
- microsoft-onedrive.org
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .org zone file, already registered
- Registered
- 2026-09-25 · Squarespace Domains LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Listed by MetaMask
- Listed by MetaMask · microsoft-onedrive.org · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 74.207.228.73 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
- Akamai Linode
- Akamai Linode (74.207.228.73): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-edge.download IS · AS50613 · ThorDC-AS Advania Island ehfContains “microsoft”Address on DomainSpoof’s phishing-host listMX present
DetailsHide details for microsoft-edge.download
- Domain
- microsoft-edge.download
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .download zone file, already registered
- Registered
- 2026-09-23 · TLD Registrar Solutions Ltd.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 82.221.136.24 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-edge.download resolved to it 2026-11-05 00:46 UTC
- Addresses
- 82.221.136.24 · Iceland · AS50613 ThorDC-AS Advania Island ehf
- MX
- mx1.sf.ice-networks.commx2.sf.ice-networks.commx3.sf.ice-networks.commx4.sf.ice-networks.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- office-365.shop DE · AS8560 · IONOS-AS IONOS SE2 addressesContains “office-365”Address on DomainSpoof’s phishing-host listIONOSMX present
DetailsHide details for office-365.shop
- Domain
- office-365.shop
- Match
- A registered domain containing “office-365”, one of the names we match for Microsoft
- Zone file copy
- 2026-10-31 · the day of the .shop zone file copy it was found in
- Registered
- 2026-09-22 · IONOS SE
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 217.160.0.115 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · office-365.shop resolved to it 2026-11-05 00:46 UTC
- Addresses
- 217.160.0.115 · Germany · AS8560 IONOS-AS IONOS SE · IONOS (shared hosting)2001:8d8:100f:f000::200
- IONOS
- IONOS (217.160.0.115): shared web hosting and domain registration. One address typically serves many customer sites.
- MX
- mail.protonmail.chmailsec.protonmail.ch
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-teams.sarlContains “microsoft”Listed by MetaMaskNo address or mail server yet
DetailsHide details for microsoft-teams.sarl
- Domain
- microsoft-teams.sarl
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .sarl zone file, already registered
- Registered
- 2026-09-19 · Cloudflare, Inc
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Listed by MetaMask
- Listed by MetaMask · microsoft-teams.sarl · in the feed since 2026-10-27 05:34 UTC
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-meet.live PA · AS64107 · RACK SPHERE HOSTING S.A.Contains “microsoft”Listed by MetaMask
DetailsHide details for microsoft-meet.live
- Domain
- microsoft-meet.live
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .live zone file, already registered
- Registered
- 2026-09-15 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Listed by MetaMask
- Listed by MetaMask · microsoft-meet.live · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 45.225.135.67 · Panama · AS64107 AS64107 - RACK SPHERE HOSTING S.A.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-cedar-technologies.click SG · AS63949 · Akamai Connected Cloud3 addressesContains “microsoft”3 addresses on DomainSpoof’s phishing-host listAkamai Linode
DetailsHide details for microsoft-cedar-technologies.click
- Domain
- microsoft-cedar-technologies.click
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .click zone file, already registered
- Registered
- 2026-08-21 · NameSilo, LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- 3 addresses on DomainSpoof’s phishing-host list
- 172.232.24.161 (microsoft-cedar-technologies.click resolved to it 2026-11-05 00:46 UTC), 172.232.24.235 (microsoft-cedar-technologies.click resolved to it 2026-11-05 00:46 UTC), 172.234.25.42 (microsoft-cedar-technologies.click resolved to it 2026-11-05 00:46 UTC) are on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours
- Addresses
- 172.232.24.161 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)172.232.24.235 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)172.234.25.42 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
- Akamai Linode
- Akamai Linode (172.232.24.161, 172.232.24.235, 172.234.25.42): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- com-onedrive.live US · AS13335 · Cloudflare, Inc.4 addressesContains “onedrive”Listed by MetaMaskCloudflare
DetailsHide details for com-onedrive.live
- Domain
- com-onedrive.live
- Match
- A domain containing “onedrive”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .live zone file, already registered
- Registered
- 2026-08-16 · Cloudflare, Inc
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Listed by MetaMask
- Listed by MetaMask · com-onedrive.live · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.33.172 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.165.13 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3034::6815:21ac2606:4700:3036::ac43:a50d
- Cloudflare
- Cloudflare (104.21.33.172, 172.67.165.13): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft3.sbsContains “microsoft”Listed by MetaMaskNo address or mail server yet
DetailsHide details for microsoft3.sbs
- Domain
- microsoft3.sbs
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .sbs zone file, already registered
- Registered
- 2026-08-07 · NameSilo, LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Listed by MetaMask
- Listed by MetaMask · microsoft3.sbs · in the feed since 2026-10-27 05:34 UTC
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoftonline-sharepoint-com.live US · AS13335 · Cloudflare, Inc.4 addressesContains “microsoftonline”Listed by MetaMaskCloudflare
DetailsHide details for microsoftonline-sharepoint-com.live
- Domain
- microsoftonline-sharepoint-com.live
- Match
- A domain containing “microsoftonline”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .live zone file, already registered
- Registered
- 2026-08-07 · Cloudflare, Inc
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Listed by MetaMask
- Listed by MetaMask · microsoftonline-sharepoint-com.live · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.51.191 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.184.169 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3031::6815:33bf2606:4700:3032::ac43:b8a9
- Cloudflare
- Cloudflare (104.21.51.191, 172.67.184.169): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoftonline-sharepoint.online US · AS14061 · DigitalOcean, LLCContains “microsoftonline”Listed by MetaMaskDigitalOcean
DetailsHide details for microsoftonline-sharepoint.online
- Domain
- microsoftonline-sharepoint.online
- Match
- A domain containing “microsoftonline”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .online zone file, already registered
- Registered
- 2026-07-27 · Cloudflare, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Listed by MetaMask
- Listed by MetaMask · microsoftonline-sharepoint.online · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 178.62.99.223 · United States · AS14061 DIGITALOCEAN-ASN - DigitalOcean, LLC · DigitalOcean (cloud provider)
- DigitalOcean
- DigitalOcean (178.62.99.223): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- office365microsoft.help SG · AS63949 · Akamai Connected Cloud3 addressesContains “microsoft”3 addresses on DomainSpoof’s phishing-host listAkamai LinodeMX present
DetailsHide details for office365microsoft.help
- Domain
- office365microsoft.help
- Match
- A registered domain containing “microsoft”, one of the names we match for Microsoft
- Zone file copy
- 2026-10-31 · the day of the .help zone file copy it was found in
- Registered
- 2026-07-26 · NameSilo, LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- 3 addresses on DomainSpoof’s phishing-host list
- 172.232.24.161 (office365microsoft.help resolved to it 2026-11-05 00:46 UTC), 172.232.24.235 (office365microsoft.help resolved to it 2026-11-05 00:46 UTC), 172.234.25.42 (office365microsoft.help resolved to it 2026-11-05 00:46 UTC) are on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours
- Addresses
- 172.232.24.161 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)172.232.24.235 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)172.234.25.42 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
- Akamai Linode
- Akamai Linode (172.232.24.161, 172.232.24.235, 172.234.25.42): a cloud provider. It rents servers and addresses to its customers.
- MX
- mx1.titan.emailmx2.titan.email
- Daily check
- Ended 2026-11-04 22:41 UTC
- msoffice.email CY · AS47583 · AS-HOSTINGER Hostinger Inte…Contains “msoffice”Address on DomainSpoof’s phishing-host listHostinger
DetailsHide details for msoffice.email
- Domain
- msoffice.email
- Match
- A domain containing “msoffice”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .email zone file, already registered
- Registered
- 2026-07-24 · HOSTINGER operations, UAB
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · msoffice.email resolved to it 2026-11-05 00:46 UTC
- Addresses
- 2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
- Hostinger
- Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
- Daily check
- Ended 2026-11-04 22:41 UTC
- msoffice.live CY · AS47583 · AS-HOSTINGER Hostinger Inte…Contains “msoffice”Address on DomainSpoof’s phishing-host listHostinger
DetailsHide details for msoffice.live
- Domain
- msoffice.live
- Match
- A registered domain containing “msoffice”, one of the names we match for Microsoft
- Zone file copy
- 2026-10-31 · the day of the .live zone file copy it was found in
- Registered
- 2026-07-24 · HOSTINGER operations, UAB
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · msoffice.live resolved to it 2026-11-05 00:46 UTC
- Addresses
- 2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
- Hostinger
- Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoftonline-outlook.live US · AS13335 · Cloudflare, Inc.4 addressesContains “microsoftonline”Listed by MetaMaskCloudflare
DetailsHide details for microsoftonline-outlook.live
- Domain
- microsoftonline-outlook.live
- Match
- A domain containing “microsoftonline”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .live zone file, already registered
- Registered
- 2026-07-17 · Cloudflare, Inc
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Listed by MetaMask
- Listed by MetaMask · microsoftonline-outlook.live · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.24.65 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.217.82 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3030::6815:18412606:4700:3031::ac43:d952
- Cloudflare
- Cloudflare (104.21.24.65, 172.67.217.82): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- onmicrosoftfolder.sbs SG · AS63949 · Akamai Connected Cloud3 addressesContains “microsoft”3 addresses on DomainSpoof’s phishing-host listAkamai Linode
DetailsHide details for onmicrosoftfolder.sbs
- Domain
- onmicrosoftfolder.sbs
- Match
- A registered domain containing “microsoft”, one of the names we match for Microsoft
- Zone file copy
- 2026-10-31 · the day of the .sbs zone file copy it was found in
- Registered
- 2026-07-08 · NameSilo, LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- 3 addresses on DomainSpoof’s phishing-host list
- 172.232.24.161 (onmicrosoftfolder.sbs resolved to it 2026-11-05 00:46 UTC), 172.232.24.235 (onmicrosoftfolder.sbs resolved to it 2026-11-05 00:46 UTC), 172.234.25.42 (onmicrosoftfolder.sbs resolved to it 2026-11-05 00:46 UTC) are on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours
- Addresses
- 172.232.24.161 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)172.232.24.235 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)172.234.25.42 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
- Akamai Linode
- Akamai Linode (172.232.24.161, 172.232.24.235, 172.234.25.42): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoftprada.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for microsoftprada.xyz
- Domain
- microsoftprada.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-07-04 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoftprada.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoftcisco.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for microsoftcisco.xyz
- Domain
- microsoftcisco.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-07-02 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoftcisco.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoftinstagram.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for microsoftinstagram.xyz
- Domain
- microsoftinstagram.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-07-02 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoftinstagram.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsofttencent.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for microsofttencent.xyz
- Domain
- microsofttencent.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-07-02 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsofttencent.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hsbc-microsoft.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for hsbc-microsoft.xyz
- Domain
- hsbc-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-29 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · hsbc-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ibm-microsoft.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for ibm-microsoft.xyz
- Domain
- ibm-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-29 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · ibm-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-bmw.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for microsoft-bmw.xyz
- Domain
- microsoft-bmw.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-29 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-bmw.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-fedex.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for microsoft-fedex.xyz
- Domain
- microsoft-fedex.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-29 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-fedex.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-nintendo.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for microsoft-nintendo.xyz
- Domain
- microsoft-nintendo.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-29 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-nintendo.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-puma.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for microsoft-puma.xyz
- Domain
- microsoft-puma.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-29 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-puma.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-sap.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for microsoft-sap.xyz
- Domain
- microsoft-sap.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-29 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-sap.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-target.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for microsoft-target.xyz
- Domain
- microsoft-target.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-29 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-target.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-volkswagen.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for microsoft-volkswagen.xyz
- Domain
- microsoft-volkswagen.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-29 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-volkswagen.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- nintendo-microsoft.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for nintendo-microsoft.xyz
- Domain
- nintendo-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-29 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · nintendo-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- cisco-microsoft.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for cisco-microsoft.xyz
- Domain
- cisco-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-28 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · cisco-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hermes-microsoft.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for hermes-microsoft.xyz
- Domain
- hermes-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-28 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · hermes-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- kia-microsoft.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for kia-microsoft.xyz
- Domain
- kia-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-28 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · kia-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-amazon.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for microsoft-amazon.xyz
- Domain
- microsoft-amazon.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-28 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-amazon.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-hyundai.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for microsoft-hyundai.xyz
- Domain
- microsoft-hyundai.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-28 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-hyundai.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-nescafe.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for microsoft-nescafe.xyz
- Domain
- microsoft-nescafe.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-28 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-nescafe.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-pepsi.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for microsoft-pepsi.xyz
- Domain
- microsoft-pepsi.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-28 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-pepsi.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-starbucks.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for microsoft-starbucks.xyz
- Domain
- microsoft-starbucks.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-28 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-starbucks.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-zara.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for microsoft-zara.xyz
- Domain
- microsoft-zara.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-28 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-zara.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- paypal-microsoft.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for paypal-microsoft.xyz
- Domain
- paypal-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-28 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · paypal-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- prada-microsoft.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for prada-microsoft.xyz
- Domain
- prada-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-28 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · prada-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- gillette-microsoft.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for gillette-microsoft.xyz
- Domain
- gillette-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-27 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · gillette-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-netflix.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for microsoft-netflix.xyz
- Domain
- microsoft-netflix.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-27 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-netflix.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- tencent-microsoft.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for tencent-microsoft.xyz
- Domain
- tencent-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-27 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · tencent-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- totalenergies-microsoft.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for totalenergies-microsoft.xyz
- Domain
- totalenergies-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-27 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · totalenergies-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- sap-microsoft.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for sap-microsoft.xyz
- Domain
- sap-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-26 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · sap-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- sharepoint.tips DE · AS212317 · HETZNER-CLOUD3-AS Hetzner O…14 addressesContains “sharepoint”5 addresses on DomainSpoof’s phishing-host listHetzner +1
DetailsHide details for sharepoint.tips
- Domain
- sharepoint.tips
- Match
- A domain containing “sharepoint”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .tips zone file, already registered
- Registered
- 2026-06-15 · Domain Science Kutatási Szolgáltató Korlátolt Felelősségű Társaság
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- 5 addresses on DomainSpoof’s phishing-host list
- 195.201.128.179 (sharepoint.tips resolved to it 2026-11-05 00:46 UTC), 46.62.237.138 (sharepoint.tips resolved to it 2026-11-05 00:46 UTC), 5.161.230.87 (sharepoint.tips resolved to it 2026-11-05 00:46 UTC), 5.161.47.86 (sharepoint.tips resolved to it 2026-11-05 00:46 UTC), 5.78.156.59 (sharepoint.tips resolved to it 2026-11-05 00:46 UTC) are on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours
- Addresses
- 5.78.156.59 · Germany · AS212317 HETZNER-CLOUD3-AS Hetzner Online GmbH5.161.47.86 · Germany · AS213230 HETZNER-CLOUD2-AS Hetzner Online GmbH5.161.230.87 · Germany · AS213230 HETZNER-CLOUD2-AS Hetzner Online GmbH46.62.237.138 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)76.223.91.20 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)195.201.128.179 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)2406:da1e:214:c901:49:871:e9e1:eb922600:1f1c:6db:8801:ca20:5f5a:5f45:48d02a05:d014:179b:c400:b5e:feaf:a6dc:b5082a05:d014:179b:c400:2dc9:16fd:7cbd:e2552a05:d014:179b:c400:5ed8:1db0:4443:ca252a05:d014:179b:c400:a327:40ee:24cc:61802a05:d014:179b:c400:aa99:a226:6c94:e722a05:d014:179b:c400:adda:f567:8e83:5e24
- Hetzner +1
- Hetzner (46.62.237.138, 195.201.128.179): a cloud provider. It rents servers and addresses to its customers. Amazon Web Services (76.223.91.20): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-ai-claude.top DE · AS47846 · SEDO-AS SEDO GmbHContains “microsoft”Listed by MetaMaskParking page · Sedo
DetailsHide details for microsoft-ai-claude.top
- Domain
- microsoft-ai-claude.top
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-03 · the day we first found it in the .top zone file, already registered
- Registered
- 2026-05-29 · NameSilo,LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Listed by MetaMask
- Listed by MetaMask · microsoft-ai-claude.top · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 91.195.240.123 · Germany · AS47846 SEDO-AS SEDO GmbH · Sedo (parking page)
- Parking page · Sedo
- Sedo (91.195.240.123): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-google.top DE · AS47846 · SEDO-AS SEDO GmbHContains “microsoft”Listed by MetaMaskParking page · Sedo
DetailsHide details for microsoft-google.top
- Domain
- microsoft-google.top
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-03 · the day we first found it in the .top zone file, already registered
- Registered
- 2026-05-29 · NameSilo,LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Listed by MetaMask
- Listed by MetaMask · microsoft-google.top · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 91.195.240.123 · Germany · AS47846 SEDO-AS SEDO GmbH · Sedo (parking page)
- Parking page · Sedo
- Sedo (91.195.240.123): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoftcom.live US · AS16509 · Amazon.com, Inc.2 addressesContains “microsoft”Listed by MetaMaskReported by PhishDestroyRegistry lookup queuedAmazon Web Services
DetailsHide details for microsoftcom.live
- Domain
- microsoftcom.live
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .live zone file, already registered
- Registered
- 2026-05-29 · GoDaddy.com, LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Listed by MetaMask
- Listed by MetaMask · microsoftcom.live · in the feed since 2026-10-27 05:34 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · microsoftcom.live · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 13.248.243.5 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)76.223.105.230 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (13.248.243.5, 76.223.105.230): a cloud provider. It rents servers and addresses to its customers.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- evaservi-hotmail.online DE · AS8560 · IONOS-AS IONOS SEContains “hotmail”Address on DomainSpoof’s phishing-host listIONOSMX present
DetailsHide details for evaservi-hotmail.online
- Domain
- evaservi-hotmail.online
- Match
- A domain containing “hotmail”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .online zone file, already registered
- Registered
- 2026-05-24 · IONOS SE
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 217.76.128.47 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · evaservi-hotmail.online resolved to it 2026-11-05 00:46 UTC
- Addresses
- 217.76.128.47 · Germany · AS8560 IONOS-AS IONOS SE · IONOS (shared hosting)
- IONOS
- IONOS (217.76.128.47): shared web hosting and domain registration. One address typically serves many customer sites.
- MX
- mx.serviciodecorreo.es
- Daily check
- Ended 2026-11-04 22:41 UTC
- outlook-mail.site CY · AS47583 · AS-HOSTINGER Hostinger Inte…Contains “outlook”Address on DomainSpoof’s phishing-host listHostinger
DetailsHide details for outlook-mail.site
- Domain
- outlook-mail.site
- Match
- A registered domain containing “outlook”, one of the names we match for Microsoft
- Zone file copy
- 2026-10-31 · the day of the .site zone file copy it was found in
- Registered
- 2026-04-24 · HOSTINGER operations, UAB
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · outlook-mail.site resolved to it 2026-11-05 00:46 UTC
- Addresses
- 2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
- Hostinger
- Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
- Daily check
- Ended 2026-11-04 22:41 UTC
- entra-id-platform.online JP · AS7506 · GMO Internet, Inc.Contains “entra-id”Address on DomainSpoof’s phishing-host list
DetailsHide details for entra-id-platform.online
- Domain
- entra-id-platform.online
- Match
- A domain containing “entra-id”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .online zone file, already registered
- Registered
- 2026-04-19 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · entra-id-platform.online resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- azure-microsoft.top JP · AS9370 · SAKURA Internet Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for azure-microsoft.top
- Domain
- azure-microsoft.top
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-03 · the day we first found it in the .top zone file, already registered
- Registered
- 2026-04-09 · GMO Internet, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 160.16.200.77 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · azure-microsoft.top resolved to it 2026-11-05 00:46 UTC
- Addresses
- 160.16.200.77 · Japan · AS9370 SAKURA-B - SAKURA Internet Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- team-microsoft.top JP · AS9370 · SAKURA Internet Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for team-microsoft.top
- Domain
- team-microsoft.top
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-03 · the day we first found it in the .top zone file, already registered
- Registered
- 2026-04-09 · GMO Internet, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 160.16.200.77 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · team-microsoft.top resolved to it 2026-11-05 00:46 UTC
- Addresses
- 160.16.200.77 · Japan · AS9370 SAKURA-B - SAKURA Internet Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-office365.cloud DE · AS8560 · IONOS-AS IONOS SE2 addressesContains “microsoft”Reported by PhishDestroyAddress on DomainSpoof’s phishing-host listIONOSMX present
DetailsHide details for microsoft-office365.cloud
- Domain
- microsoft-office365.cloud
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .cloud zone file, already registered
- Registered
- 2026-03-18 · IONOS SE
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · microsoft-office365.cloud · in the feed since 2026-10-25 23:31 UTC
- Address on DomainSpoof’s phishing-host list
- 217.160.0.235 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-office365.cloud resolved to it 2026-11-05 00:46 UTC
- Addresses
- 217.160.0.235 · Germany · AS8560 IONOS-AS IONOS SE · IONOS (shared hosting)2001:8d8:100f:f000::200
- IONOS
- IONOS (217.160.0.235): shared web hosting and domain registration. One address typically serves many customer sites.
- MX
- mx00.ionos.demx01.ionos.de
- Daily check
- Ended 2026-11-04 22:41 UTC
- office365online.live CY · AS47583 · AS-HOSTINGER Hostinger Inte…Contains “office365”Address on DomainSpoof’s phishing-host listHostingerMX present
DetailsHide details for office365online.live
- Domain
- office365online.live
- Match
- A domain containing “office365”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .live zone file, already registered
- Registered
- 2026-03-15 · HOSTINGER operations, UAB
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · office365online.live resolved to it 2026-11-05 00:46 UTC
- Addresses
- 2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
- Hostinger
- Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
- MX
- mx1.hostinger.commx2.hostinger.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- hotmails.sbs CY · AS47583 · AS-HOSTINGER Hostinger Inte…Contains “hotmail”Address on DomainSpoof’s phishing-host listHostingerMX present
DetailsHide details for hotmails.sbs
- Domain
- hotmails.sbs
- Match
- A registered domain containing “hotmail”, one of the names we match for Microsoft
- Zone file copy
- 2026-10-31 · the day of the .sbs zone file copy it was found in
- Registered
- 2026-01-05 · HOSTINGER operations, UAB
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · hotmails.sbs resolved to it 2026-11-05 00:46 UTC
- Addresses
- 2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
- Hostinger
- Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
- MX
- mx1.hostinger.commx2.hostinger.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- secret-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for secret-microsoft.xyz
- Domain
- secret-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-25 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · secret-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- session-microsoft-trello.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for session-microsoft-trello.xyz
- Domain
- session-microsoft-trello.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-25 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · session-microsoft-trello.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- short-authority-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for short-authority-microsoft.xyz
- Domain
- short-authority-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-25 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · short-authority-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- shortcut-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for shortcut-microsoft.xyz
- Domain
- shortcut-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-25 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · shortcut-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- simulink-microsoft-class.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for simulink-microsoft-class.xyz
- Domain
- simulink-microsoft-class.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-25 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · simulink-microsoft-class.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- simulink-priority-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for simulink-priority-microsoft.xyz
- Domain
- simulink-priority-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-25 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · simulink-priority-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- smartsheet-microsoft-rest.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for smartsheet-microsoft-rest.xyz
- Domain
- smartsheet-microsoft-rest.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-25 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · smartsheet-microsoft-rest.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- smartsheet-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for smartsheet-microsoft.xyz
- Domain
- smartsheet-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-25 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · smartsheet-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- smartsheet-seaborn-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for smartsheet-seaborn-microsoft.xyz
- Domain
- smartsheet-seaborn-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-25 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · smartsheet-seaborn-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- snapshot-microsoft-circleci.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for snapshot-microsoft-circleci.xyz
- Domain
- snapshot-microsoft-circleci.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-25 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · snapshot-microsoft-circleci.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- soap-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for soap-microsoft.xyz
- Domain
- soap-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-25 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · soap-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- solidworks-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for solidworks-microsoft.xyz
- Domain
- solidworks-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-25 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · solidworks-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- utilization-follower-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for utilization-follower-microsoft.xyz
- Domain
- utilization-follower-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · utilization-follower-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- variable-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for variable-microsoft.xyz
- Domain
- variable-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · variable-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- verilog-microsoft-tablet.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for verilog-microsoft-tablet.xyz
- Domain
- verilog-microsoft-tablet.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · verilog-microsoft-tablet.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- vhdl-microsoft-partition.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for vhdl-microsoft-partition.xyz
- Domain
- vhdl-microsoft-partition.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · vhdl-microsoft-partition.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- wasm-microsoft-bootstrap.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for wasm-microsoft-bootstrap.xyz
- Domain
- wasm-microsoft-bootstrap.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · wasm-microsoft-bootstrap.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- wasm-wrike-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for wasm-wrike-microsoft.xyz
- Domain
- wasm-wrike-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · wasm-wrike-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- wave-confluence-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for wave-confluence-microsoft.xyz
- Domain
- wave-confluence-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · wave-confluence-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- waypoint-microsoft-store.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for waypoint-microsoft-store.xyz
- Domain
- waypoint-microsoft-store.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · waypoint-microsoft-store.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- while-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for while-microsoft.xyz
- Domain
- while-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · while-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- whom-microsoft-connect.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for whom-microsoft-connect.xyz
- Domain
- whom-microsoft-connect.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · whom-microsoft-connect.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- yaml-microsoft-vector.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for yaml-microsoft-vector.xyz
- Domain
- yaml-microsoft-vector.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · yaml-microsoft-vector.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- office365-sec.xyz TR · AS51557 · TR-ISIMTESCIL-20201202 Isim…Contains “office365”Address on DomainSpoof’s phishing-host list
DetailsHide details for office365-sec.xyz
- Domain
- office365-sec.xyz
- Match
- A registered domain containing “office365”, one of the names we match for Microsoft
- Zone file copy
- 2026-10-31 · the day of the .xyz zone file copy it was found in
- Registered
- 2025-12-24 · İsimtescil Bilişim A.Ş.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 93.89.226.17 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · office365-sec.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 93.89.226.17 · Türkiye · AS51557 TR-ISIMTESCIL-20201202 Isimtescil Bilisim A.S.
- Daily check
- Ended 2026-11-04 22:41 UTC
- onedrive365.live US · AS214036 · ULTAHOST-AS Ultahost, Inc.Contains “onedrive”Address on DomainSpoof’s phishing-host listMX present
DetailsHide details for onedrive365.live
- Domain
- onedrive365.live
- Match
- A registered domain containing “onedrive”, one of the names we match for Microsoft
- Zone file copy
- 2026-10-31 · the day of the .live zone file copy it was found in
- Registered
- 2025-12-18 · Ultahost, Inc
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 79.133.41.61 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · onedrive365.live resolved to it 2026-11-05 00:46 UTC
- Addresses
- 79.133.41.61 · United States · AS214036 ULTAHOST-AS Ultahost, Inc.
- MX
- onedrive365.live
- Daily check
- Ended 2026-11-04 22:41 UTC
- hotmailbr.store CY · AS47583 · AS-HOSTINGER Hostinger Inte…Contains “hotmail”Address on DomainSpoof’s phishing-host listHostinger
DetailsHide details for hotmailbr.store
- Domain
- hotmailbr.store
- Match
- A registered domain containing “hotmail”, one of the names we match for Microsoft
- Zone file copy
- 2026-10-31 · the day of the .store zone file copy it was found in
- Registered
- 2025-12-15 · HOSTINGER operations, UAB
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · hotmailbr.store resolved to it 2026-11-05 00:46 UTC
- Addresses
- 2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
- Hostinger
- Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
- Daily check
- Ended 2026-11-04 22:41 UTC
- instagram-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for instagram-microsoft.xyz
- Domain
- instagram-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · instagram-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- instagram-when-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for instagram-when-microsoft.xyz
- Domain
- instagram-when-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · instagram-when-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- instance-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for instance-microsoft.xyz
- Domain
- instance-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · instance-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- jetty-microsoft-drone.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for jetty-microsoft-drone.xyz
- Domain
- jetty-microsoft-drone.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · jetty-microsoft-drone.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- jetty-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for jetty-microsoft.xyz
- Domain
- jetty-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · jetty-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- jetty-opengl-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for jetty-opengl-microsoft.xyz
- Domain
- jetty-opengl-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · jetty-opengl-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC

