Microsoft

Software & cloud United Statesmicrosoft.comRank 1 of the most impersonated
Cert findings · 24 h
11
Cert findings · 7 days
118
64 reported or listed · 50 on phishing hosts · 4 on Spamhaus DROP
Registered lookalikes
1,671
121 listed by a source or an address list
Official domains
576
verified from Microsoft's own sites and records

Registered lookalikes

Checked daily · 2026-11-04 22:41 UTC

Spellings of Microsoft's official domains (microsoft.com, office365.com, hotmail.com, …) registered to other owners (identified by nameservers, registrar and redirects), checked daily; the ones with no address or mail server yet say so. Many are parked, for sale or run by other businesses and sites with a similar name; the ones a phishing source or address list has flagged carry a label.

Some of these come from registry zone files (ICANN CZDS). Our zone data terms apply to them: no marketing use of any kind, no harassing their registrants, no high-volume registry or registrar queries.

121 of the 1,671 are listed by a source or resolve to a listed address, checked hourly.

  1. office365.onl US · AS13335 · Cloudflare, Inc.4 addressesLookalike of office365.com · the ending .onl
    Cloudflare
    DetailsHide details for office365.onl
    Domain
    office365.onl
    Spelling
    The name of office365.com with the ending .onl
    First found
    2026-11-01 · the day the daily DNS check first found it registered
    Registered
    2026-06-14 · Dynadot Inc
    Addresses
    104.21.31.229 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.180.184 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3030::ac43:b4b8
    2606:4700:3035::6815:1fe5
    Cloudflare
    Cloudflare (104.21.31.229, 172.67.180.184): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  2. one-drive.top US · AS15169 · Google LLCLookalike of microsoft.com · an added hyphen
    Google
    DetailsHide details for one-drive.top
    Domain
    one-drive.top
    Spelling
    Spelled like microsoft.com with an added hyphen
    First found
    2026-11-03 · the day we first found it in the .top zone file, already registered
    Registered
    2026-06-12 · NameSilo,LLC
    Addresses
    8.8.8.8 · United States · AS15169 GOOGLE - Google LLC · Google (cloud provider)
    Google
    Google (8.8.8.8): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  3. zonedrive.xyz US · AS16509 · Amazon.com, Inc.2 addressesLookalike of microsoft.com · an added character
    Parking page · Afternic
    DetailsHide details for zonedrive.xyz
    Domain
    zonedrive.xyz
    Spelling
    Spelled like microsoft.com with an added character
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-12 · GMO Internet Group, Inc. d/b/a Onamae.com
    Addresses
    13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    Parking page · Afternic
    The registry delegates zonedrive.xyz to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
    Daily check
    Ended 2026-11-04 22:41 UTC
  4. donedrive.site US · AS36351 · IBM Cloud4 addressesLookalike of microsoft.com · an added character
    MX present
    DetailsHide details for donedrive.site
    Domain
    donedrive.site
    Spelling
    Spelled like microsoft.com with an added character
    First found
    2026-11-01 · the day we first found it in the .site zone file, already registered
    Registered
    2026-06-11 · HOSTINGER operations, UAB
    Addresses
    141.125.104.208 · United States · AS36351 SOFTLAYER - IBM Cloud
    141.125.157.19 · United States · AS36351 SOFTLAYER - IBM Cloud
    158.176.188.102 · United States · AS36351 SOFTLAYER - IBM Cloud
    158.176.192.52 · United States · AS36351 SOFTLAYER - IBM Cloud
    MX
    mta1.youcan.shop
    mta2.youcan.shop
    Daily check
    Ended 2026-11-04 22:41 UTC
  5. onedrive.wang HK · AS142403 · YISU CLOUD LTDLookalike of onedrive.com · the ending .wang
    DetailsHide details for onedrive.wang
    Domain
    onedrive.wang
    Spelling
    The name of onedrive.com with the ending .wang
    First found
    2026-11-01 · the day the daily DNS check first found it registered
    Registered
    2026-06-10 · 厦门三五互联信息有限公司
    Addresses
    154.221.25.41 · Hong Kong · AS142403 YISUCLOUDLTD-HK - YISU CLOUD LTD
    Daily check
    Ended 2026-11-04 22:41 UTC
  6. micr0s0ft.com US · AS16509 · Amazon.com, Inc.2 addressesLookalike of microsoft.com · similar-looking characters
    Registry lookup queuedParking page · Afternic
    DetailsHide details for micr0s0ft.com
    Domain
    micr0s0ft.com
    Spelling
    Spelled like microsoft.com with similar-looking characters
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2026-06-10 · InlandDomains, LLC
    Addresses
    13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    Parking page · Afternic
    The registry delegates micr0s0ft.com to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  7. microsoftonline.digitalLookalike of microsoftonline.com · the ending .digital
    No address or mail server yet
    DetailsHide details for microsoftonline.digital
    Domain
    microsoftonline.digital
    Spelling
    The name of microsoftonline.com with the ending .digital
    First found
    2026-10-31 · the day the daily DNS check first found it registered
    Registered
    2026-06-09 · Global Domain Group LLC
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  8. microso-ft.com RO · AS39287 · materialism Materialism s.r…Lookalike of microsoft.com · an added hyphen
    DetailsHide details for microso-ft.com
    Domain
    microso-ft.com
    Spelling
    Spelled like microsoft.com with an added hyphen
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2026-06-09 · Hosting Concepts B.V. d/b/a Registrar.eu
    Addresses
    45.142.141.214 · Romania · AS39287 materialism Materialism s.r.l.
    Daily check
    Ended 2026-11-04 22:41 UTC
  9. mircosoft.pro AU · AS133618 · Trellian Pty. LimitedLookalike of microsoft.com · two letters swapped
    Parking page · Above.comMX present
    DetailsHide details for mircosoft.pro
    Domain
    mircosoft.pro
    Spelling
    Spelled like microsoft.com with two letters swapped
    First found
    2026-11-01 · the day we first found it in the .pro zone file, already registered
    Registered
    2026-06-08 · CommuniGal Communication Ltd.
    Addresses
    103.224.182.219 · Australia · AS133618 TRELLIAN-AS-AP - Trellian Pty. Limited · Trellian / Above.com (parking page)
    Parking page · Above.com
    The registry delegates mircosoft.pro to Above.com’s nameservers, which answer for it. Above.com: a parking service. It answers for names that are typically for sale or unused. Trellian / Above.com (103.224.182.219): a parking service. It answers for names that are typically for sale or unused.
    MX
    park-mx.above.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  10. microssoft.fr DE · AS51167 · CONTABO Contabo GmbHLookalike of microsoft.com · a doubled letter
    ContaboMX present
    DetailsHide details for microssoft.fr
    Domain
    microssoft.fr
    Spelling
    Spelled like microsoft.com with a doubled letter
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2026-06-08 · IONOS SE
    Addresses
    185.2.100.88 · Germany · AS51167 CONTABO Contabo GmbH · Contabo (cloud provider)
    Contabo
    Contabo (185.2.100.88): a cloud provider. It rents servers and addresses to its customers.
    MX
    mx00.ionos.fr
    mx01.ionos.fr
    Daily check
    Ended 2026-11-04 22:41 UTC
  11. microsoftupdateservice.org MD · AS200019 · AlexHost ALEXHOST S.R.L.Lookalike of microsoft.com · the name with an added word
    DetailsHide details for microsoftupdateservice.org
    Domain
    microsoftupdateservice.org
    Spelling
    The name of microsoft.com with an added word
    First found
    2026-11-01 · the day we first found it in the .org zone file, already registered
    Registered
    2026-06-07 · Hosting Concepts B.V. d/b/a Registrar.eu
    Addresses
    80.97.124.186 · Moldova · AS200019 AlexHost ALEXHOST S.R.L.
    Daily check
    Ended 2026-11-04 22:41 UTC
  12. micorsoft.xyz US · AS16509 · Amazon.com, Inc.2 addressesLookalike of microsoft.com · two letters swapped
    Parking page · Afternic
    DetailsHide details for micorsoft.xyz
    Domain
    micorsoft.xyz
    Spelling
    Spelled like microsoft.com with two letters swapped
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2026-06-07 · Dynadot Inc
    Addresses
    13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    Parking page · Afternic
    The registry delegates micorsoft.xyz to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
    Daily check
    Ended 2026-11-04 22:41 UTC
  13. microsoftonline.lat US · AS13335 · Cloudflare, Inc.4 addressesLookalike of microsoftonline.com · the ending .lat
    Cloudflare
    DetailsHide details for microsoftonline.lat
    Domain
    microsoftonline.lat
    Spelling
    The name of microsoftonline.com with the ending .lat
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2026-06-05 · Dynadot Inc
    Addresses
    104.21.45.154 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.216.101 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3035::6815:2d9a
    2606:4700:3036::ac43:d865
    Cloudflare
    Cloudflare (104.21.45.154, 172.67.216.101): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  14. microosoft.storeLookalike of microsoft.com · a doubled letter
    MX present
    DetailsHide details for microosoft.store
    Domain
    microosoft.store
    Spelling
    Spelled like microsoft.com with a doubled letter
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2026-06-04 · DNSPod, Inc.
    MX
    mail.microosoft.store
    Daily check
    Ended 2026-11-04 22:41 UTC
  15. rnicrosoft.asia US · AS16509 · Amazon.com, Inc.2 addressesLookalike of microsoft.com · similar-looking characters
    Amazon Web ServicesMX present
    DetailsHide details for rnicrosoft.asia
    Domain
    rnicrosoft.asia
    Spelling
    Spelled like microsoft.com with similar-looking characters
    First found
    2026-11-01 · the day we first found it in the .asia zone file, already registered
    Registered
    2026-05-29 · Name.com, Inc.
    Addresses
    216.198.79.1 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    216.198.79.65 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (216.198.79.1, 216.198.79.65): a cloud provider. It rents servers and addresses to its customers.
    MX
    mx1.improvmx.com
    mx2.improvmx.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  16. officee365.site AU · AS9313 · Network Technology (AUST) P…Lookalike of office365.com · a doubled letter
    Registry lookup queued
    DetailsHide details for officee365.site
    Domain
    officee365.site
    Spelling
    Spelled like office365.com with a doubled letter
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2026-05-29 · GoDaddy.com, LLC
    Addresses
    110.239.141.158 · Australia · AS9313 ONTHENET-AS - Network Technology (AUST) P/L
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  17. microsoft-security.systems DE · AS206834 · TEAMINTERNET-CA-AS Team Int…Lookalike of microsoft.com · the name with the word “security”
    Parking page · ParkingCrew (Team Internet)
    DetailsHide details for microsoft-security.systems
    Domain
    microsoft-security.systems
    Spelling
    The name of microsoft.com with the word “security”
    First found
    2026-11-01 · the day we first found it in the .systems zone file, already registered
    Registered
    2026-05-27 · Hosting Concepts B.V. d/b/a Registrar.eu
    Addresses
    185.53.179.136 · Germany · AS206834 TEAMINTERNET-CA-AS Team Internet AG · ParkingCrew (Team Internet) (parking page)
    Parking page · ParkingCrew (Team Internet)
    ParkingCrew (Team Internet) (185.53.179.136): a parking service. It answers for names that are typically for sale or unused.
    Daily check
    Ended 2026-11-04 22:41 UTC
  18. microsoftomline.live US · AS53831 · Squarespace, Inc.4 addressesLookalike of microsoftonline.com · a letter from a neighbouring key
    Squarespace
    DetailsHide details for microsoftomline.live
    Domain
    microsoftomline.live
    Spelling
    Spelled like microsoftonline.com with a letter from a neighbouring key
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2026-05-27 · Squarespace Domains II LLC
    Addresses
    198.49.23.144 · United States · AS53831 SQUARESPACE - Squarespace, Inc. · Squarespace (site builder)
    198.49.23.145 · United States · AS53831 SQUARESPACE - Squarespace, Inc. · Squarespace (site builder)
    198.185.159.144 · United States · AS53831 SQUARESPACE - Squarespace, Inc. · Squarespace (site builder)
    198.185.159.145 · United States · AS53831 SQUARESPACE - Squarespace, Inc. · Squarespace (site builder)
    Squarespace
    Squarespace (198.49.23.144, 198.49.23.145, 198.185.159.144, 198.185.159.145): a site builder. It hosts pages for anyone who signs up.
    Daily check
    Ended 2026-11-04 22:41 UTC
  19. offlce365.appLookalike of office365.com · similar-looking characters
    No address or mail server yet
    DetailsHide details for offlce365.app
    Domain
    offlce365.app
    Spelling
    Spelled like office365.com with similar-looking characters
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2026-05-26 · CloudFlare, Inc.
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  20. microsofts.camLookalike of microsoft.com · an added character
    MX present
    DetailsHide details for microsofts.cam
    Domain
    microsofts.cam
    Spelling
    Spelled like microsoft.com with an added character
    First found
    2026-11-01 · the day we first found it in the .cam zone file, already registered
    Registered
    2026-05-25 · Gname.com Pte. Ltd.
    MX
    microsofts-cam.mail.protection.outlook.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  21. mskoffice.org AU · AS133618 · Trellian Pty. LimitedLookalike of microsoft.com · an added character
    Parking page · Above.comMX present
    DetailsHide details for mskoffice.org
    Domain
    mskoffice.org
    Spelling
    Spelled like microsoft.com with an added character
    First found
    2026-11-01 · the day we first found it in the .org zone file, already registered
    Registered
    2026-05-25 · Tucows Domains Inc.
    Addresses
    103.224.182.215 · Australia · AS133618 TRELLIAN-AS-AP - Trellian Pty. Limited · Trellian / Above.com (parking page)
    Parking page · Above.com
    The registry delegates mskoffice.org to Above.com’s nameservers, which answer for it. Above.com: a parking service. It answers for names that are typically for sale or unused. Trellian / Above.com (103.224.182.215): a parking service. It answers for names that are typically for sale or unused.
    MX
    park-mx.above.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  22. micrisoft.netLookalike of microsoft.com · a letter from a neighbouring key
    No address or mail server yet
    DetailsHide details for micrisoft.net
    Domain
    micrisoft.net
    Spelling
    Spelled like microsoft.com with a letter from a neighbouring key
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2026-05-23 · Cloudflare, Inc.
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  23. onedrivee.com AU · AS154653 · ParkLogic Pty LtdLookalike of onedrive.com · a doubled letter
    Parking page · ParkLogicMX present
    DetailsHide details for onedrivee.com
    Domain
    onedrivee.com
    Spelling
    Spelled like onedrive.com with a doubled letter
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2026-05-22 · Realtime Register B.V.
    Addresses
    162.4.84.241 · Australia · AS154653 PARKLOGICPTYLTD-AS-AP - ParkLogic Pty Ltd · ParkLogic (parking page)
    Parking page · ParkLogic
    The registry delegates onedrivee.com to ParkLogic’s nameservers, which answer for it. ParkLogic (162.4.84.241): a parking service. It answers for names that are typically for sale or unused.
    MX
    mx156.hostedmxserver.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  24. share-point.appLookalike of microsoft.com · an added hyphen
    Registry lookup queuedMX present
    DetailsHide details for share-point.app
    Domain
    share-point.app
    Spelling
    Spelled like microsoft.com with an added hyphen
    First found
    2026-11-01 · the day we first found it in the .app zone file, already registered
    Registered
    2026-05-20 · GoDaddy.com, LLC
    MX
    aspmx.l.google.com
    alt1.aspmx.l.google.com
    alt2.aspmx.l.google.com
    alt3.aspmx.l.google.com
    alt4.aspmx.l.google.com
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  25. microsftonline.co DE · AS51167 · CONTABO Contabo GmbHLookalike of microsoftonline.com · a dropped letter
    Contabo
    DetailsHide details for microsftonline.co
    Domain
    microsftonline.co
    Spelling
    Spelled like microsoftonline.com with a dropped letter
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2026-05-20 · Dynadot Inc
    Addresses
    194.163.185.7 · Germany · AS51167 CONTABO Contabo GmbH · Contabo (cloud provider)
    Contabo
    Contabo (194.163.185.7): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  26. micorsoft.co US · AS16509 · Amazon.com, Inc.2 addressesLookalike of microsoft.com · two letters swapped
    Parking page · Afternic
    DetailsHide details for micorsoft.co
    Domain
    micorsoft.co
    Spelling
    Spelled like microsoft.com with two letters swapped
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2026-05-19 · Dynadot Inc
    Addresses
    13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    Parking page · Afternic
    The registry delegates micorsoft.co to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
    Daily check
    Ended 2026-11-04 22:41 UTC
  27. mircosoft.co US · AS16509 · Amazon.com, Inc.2 addressesLookalike of microsoft.com · two letters swapped
    Parking page · Afternic
    DetailsHide details for mircosoft.co
    Domain
    mircosoft.co
    Spelling
    Spelled like microsoft.com with two letters swapped
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2026-05-19 · Dynadot Inc
    Addresses
    13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    Parking page · Afternic
    The registry delegates mircosoft.co to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
    Daily check
    Ended 2026-11-04 22:41 UTC
  28. microsoftp.orgLookalike of microsoft.com · an added character
    MX present
    DetailsHide details for microsoftp.org
    Domain
    microsoftp.org
    Spelling
    Spelled like microsoft.com with an added character
    First found
    2026-11-01 · the day we first found it in the .org zone file, already registered
    Registered
    2026-05-18 · July Name Limited
    MX
    mail.microsoftp.org
    Daily check
    Ended 2026-11-04 22:41 UTC
  29. 0utl00k.net US · AS13335 · Cloudflare, Inc.4 addressesLookalike of outlook.com · similar-looking characters
    Cloudflare
    DetailsHide details for 0utl00k.net
    Domain
    0utl00k.net
    Spelling
    Spelled like outlook.com with similar-looking characters
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2026-05-18 · Dynadot Inc
    Addresses
    104.21.17.108 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.175.122 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3033::ac43:af7a
    2606:4700:3036::6815:116c
    Cloudflare
    Cloudflare (104.21.17.108, 172.67.175.122): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  30. 0ffice365.net US · AS13335 · Cloudflare, Inc.4 addressesLookalike of office365.com · similar-looking characters
    Cloudflare
    DetailsHide details for 0ffice365.net
    Domain
    0ffice365.net
    Spelling
    Spelled like office365.com with similar-looking characters
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2026-05-18 · Dynadot Inc
    Addresses
    104.21.58.209 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.164.172 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::ac43:a4ac
    2606:4700:3036::6815:3ad1
    Cloudflare
    Cloudflare (104.21.58.209, 172.67.164.172): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  31. hotmqil.co AU · AS133618 · Trellian Pty. LimitedLookalike of hotmail.com · a letter from a neighbouring key
    Parking page · Above.comMX present
    DetailsHide details for hotmqil.co
    Domain
    hotmqil.co
    Spelling
    Spelled like hotmail.com with a letter from a neighbouring key
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2026-05-18 · Dynadot Inc
    Addresses
    103.224.182.215 · Australia · AS133618 TRELLIAN-AS-AP - Trellian Pty. Limited · Trellian / Above.com (parking page)
    Parking page · Above.com
    The registry delegates hotmqil.co to Above.com’s nameservers, which answer for it. Above.com: a parking service. It answers for names that are typically for sale or unused. Trellian / Above.com (103.224.182.215): a parking service. It answers for names that are typically for sale or unused.
    MX
    park-mx.above.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  32. hotmaill.buzz US · AS13335 · Cloudflare, Inc.4 addressesLookalike of microsoft.com · a doubled letter
    Registry lookup queuedCloudflareMX present
    DetailsHide details for hotmaill.buzz
    Domain
    hotmaill.buzz
    Spelling
    Spelled like microsoft.com with a doubled letter
    First found
    2026-11-01 · the day we first found it in the .buzz zone file, already registered
    Registered
    2026-05-16 · GoDaddy.com, LLC
    Addresses
    104.21.54.118 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.138.122 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::6815:3676
    2606:4700:3037::ac43:8a7a
    Cloudflare
    Cloudflare (104.21.54.118, 172.67.138.122): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    MX
    route2.mx.cloudflare.net
    route1.mx.cloudflare.net
    route3.mx.cloudflare.net
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  33. microsofth.orgLookalike of microsoft.com · an added character
    MX present
    DetailsHide details for microsofth.org
    Domain
    microsofth.org
    Spelling
    Spelled like microsoft.com with an added character
    First found
    2026-11-01 · the day we first found it in the .org zone file, already registered
    Registered
    2026-05-16 · July Name Limited
    MX
    mail.microsofth.org
    Daily check
    Ended 2026-11-04 22:41 UTC
  34. microsoftk.orgLookalike of microsoft.com · an added character
    MX present
    DetailsHide details for microsoftk.org
    Domain
    microsoftk.org
    Spelling
    Spelled like microsoft.com with an added character
    First found
    2026-11-01 · the day we first found it in the .org zone file, already registered
    Registered
    2026-05-15 · July Name Limited
    MX
    mail.microsoftk.org
    Daily check
    Ended 2026-11-04 22:41 UTC
  35. microsofto.orgLookalike of microsoft.com · an added character
    Registry lookup queuedMX present
    DetailsHide details for microsofto.org
    Domain
    microsofto.org
    Spelling
    Spelled like microsoft.com with an added character
    First found
    2026-11-01 · the day we first found it in the .org zone file, already registered
    Registered
    2026-05-15 · July Name Limited
    MX
    mail.microsofto.org
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  36. microsoftr.orgLookalike of microsoft.com · an added character
    MX present
    DetailsHide details for microsoftr.org
    Domain
    microsoftr.org
    Spelling
    Spelled like microsoft.com with an added character
    First found
    2026-11-01 · the day we first found it in the .org zone file, already registered
    Registered
    2026-05-14 · July Name Limited
    MX
    mail.microsoftr.org
    Daily check
    Ended 2026-11-04 22:41 UTC
  37. mlcrosoftonline.com US · AS16509 · Amazon.com, Inc.2 addressesLookalike of microsoftonline.com · similar-looking characters
    Parking page · Afternic
    DetailsHide details for mlcrosoftonline.com
    Domain
    mlcrosoftonline.com
    Spelling
    Spelled like microsoftonline.com with similar-looking characters
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2026-05-12 · Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)
    Addresses
    13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    Parking page · Afternic
    The registry delegates mlcrosoftonline.com to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
    Daily check
    Ended 2026-11-04 22:41 UTC
  38. microsoftonlineauth.org DE · AS51167 · CONTABO Contabo GmbHLookalike of microsoft.com · the name with an added word
    Contabo
    DetailsHide details for microsoftonlineauth.org
    Domain
    microsoftonlineauth.org
    Spelling
    The name of microsoft.com with an added word
    First found
    2026-11-01 · the day we first found it in the .org zone file, already registered
    Registered
    2026-05-11 · Cloudflare, Inc.
    Addresses
    37.60.233.173 · Germany · AS51167 CONTABO Contabo GmbH · Contabo (cloud provider)
    Contabo
    Contabo (37.60.233.173): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  39. microsoftx.orgLookalike of microsoft.com · an added character
    MX present
    DetailsHide details for microsoftx.org
    Domain
    microsoftx.org
    Spelling
    Spelled like microsoft.com with an added character
    First found
    2026-11-01 · the day we first found it in the .org zone file, already registered
    Registered
    2026-05-11 · July Name Limited
    MX
    mail.microsoftx.org
    Daily check
    Ended 2026-11-04 22:41 UTC
  40. microsofta.orgLookalike of microsoft.com · an added character
    MX present
    DetailsHide details for microsofta.org
    Domain
    microsofta.org
    Spelling
    Spelled like microsoft.com with an added character
    First found
    2026-11-01 · the day we first found it in the .org zone file, already registered
    Registered
    2026-05-09 · July Name Limited
    MX
    mail.microsofta.org
    Daily check
    Ended 2026-11-04 22:41 UTC
  41. microsoftc.orgLookalike of microsoft.com · an added character
    Registry lookup queuedMX present
    DetailsHide details for microsoftc.org
    Domain
    microsoftc.org
    Spelling
    Spelled like microsoft.com with an added character
    First found
    2026-11-01 · the day we first found it in the .org zone file, already registered
    Registered
    2026-05-09 · July Name Limited
    MX
    mail.microsoftc.org
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  42. microsofts.world US · AS16509 · Amazon.com, Inc.2 addressesLookalike of microsoft.com · an added character
    Amazon Web Services
    DetailsHide details for microsofts.world
    Domain
    microsofts.world
    Spelling
    Spelled like microsoft.com with an added character
    First found
    2026-11-01 · the day we first found it in the .world zone file, already registered
    Registered
    2026-05-09 · Porkbun LLC
    Addresses
    44.227.65.245 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    44.227.76.166 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (44.227.65.245, 44.227.76.166): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  43. hotmail.surfLookalike of hotmail.com · the ending .surf
    MX present
    DetailsHide details for hotmail.surf
    Domain
    hotmail.surf
    Spelling
    The name of hotmail.com with the ending .surf
    First found
    2026-11-01 · the day the daily DNS check first found it registered
    Registered
    2026-05-09 · NameSilo, LLC
    MX
    route3.mx.cloudflare.net
    route2.mx.cloudflare.net
    route1.mx.cloudflare.net
    Daily check
    Ended 2026-11-04 22:41 UTC
  44. microsoftd.orgLookalike of microsoft.com · an added character
    MX present
    DetailsHide details for microsoftd.org
    Domain
    microsoftd.org
    Spelling
    Spelled like microsoft.com with an added character
    First found
    2026-11-01 · the day we first found it in the .org zone file, already registered
    Registered
    2026-05-08 · July Name Limited
    MX
    mail.microsoftd.org
    Daily check
    Ended 2026-11-04 22:41 UTC
  45. microsoftz.orgLookalike of microsoft.com · an added character
    MX present
    DetailsHide details for microsoftz.org
    Domain
    microsoftz.org
    Spelling
    Spelled like microsoft.com with an added character
    First found
    2026-11-01 · the day we first found it in the .org zone file, already registered
    Registered
    2026-05-08 · July Name Limited
    MX
    mail.microsoftz.org
    Daily check
    Ended 2026-11-04 22:41 UTC
  46. office365v.xyzLookalike of microsoft.com · an added character
    MX present
    DetailsHide details for office365v.xyz
    Domain
    office365v.xyz
    Spelling
    Spelled like microsoft.com with an added character
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-05-07 · DNSPod, Inc.
    MX
    office365v-xyz.mail.eo.outlook.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  47. outlook.com.cm US · AS14061 · DigitalOcean, LLCLookalike of outlook.com · the ending .com.cm
    DigitalOcean
    DetailsHide details for outlook.com.cm
    Domain
    outlook.com.cm
    Spelling
    The name of outlook.com with the ending .com.cm
    First found
    2026-11-01 · the day the daily DNS check first found it registered
    Registered
    2026-05-07 · Netcom.cm Sarl
    Addresses
    167.99.110.211 · United States · AS14061 DIGITALOCEAN-ASN - DigitalOcean, LLC · DigitalOcean (cloud provider)
    DigitalOcean
    DigitalOcean (167.99.110.211): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  48. hotmail.com.cm US · AS14061 · DigitalOcean, LLCLookalike of hotmail.com · the ending .com.cm
    DigitalOcean
    DetailsHide details for hotmail.com.cm
    Domain
    hotmail.com.cm
    Spelling
    The name of hotmail.com with the ending .com.cm
    First found
    2026-11-01 · the day the daily DNS check first found it registered
    Registered
    2026-05-07 · Netcom.cm Sarl
    Addresses
    167.99.110.211 · United States · AS14061 DIGITALOCEAN-ASN - DigitalOcean, LLC · DigitalOcean (cloud provider)
    DigitalOcean
    DigitalOcean (167.99.110.211): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  49. offices365.top CZ · AS60592 · GRANSY Gransy s.r.o.9 addressesLookalike of microsoft.com · an added character
    Parking page · ParktonsMX present
    DetailsHide details for offices365.top
    Domain
    offices365.top
    Spelling
    Spelled like microsoft.com with an added character
    First found
    2026-11-03 · the day we first found it in the .top zone file, already registered
    Registered
    2026-05-05 · Gransy s.r.o. d/b/a subreg.cz
    Addresses
    46.8.9.220 · Czechia · AS60592 GRANSY Gransy s.r.o. · Parktons (parking page)
    46.8.9.222 · Czechia · AS60592 GRANSY Gransy s.r.o. · Parktons (parking page)
    46.8.9.223 · Czechia · AS60592 GRANSY Gransy s.r.o. · Parktons (parking page)
    46.8.9.224 · Czechia · AS60592 GRANSY Gransy s.r.o. · Parktons (parking page)
    46.8.9.225 · Czechia · AS60592 GRANSY Gransy s.r.o. · Parktons (parking page)
    46.8.9.226 · Czechia · AS60592 GRANSY Gransy s.r.o. · Parktons (parking page)
    46.8.9.227 · Czechia · AS60592 GRANSY Gransy s.r.o. · Parktons (parking page)
    46.8.9.228 · Czechia · AS60592 GRANSY Gransy s.r.o. · Parktons (parking page)
    46.8.9.229 · Czechia · AS60592 GRANSY Gransy s.r.o. · Parktons (parking page)
    Parking page · Parktons
    The registry delegates offices365.top to Parktons’s nameservers, which answer for it. Parktons (46.8.9.220, 46.8.9.222, 46.8.9.223, 46.8.9.224, 46.8.9.225, 46.8.9.226, 46.8.9.227, 46.8.9.228, 46.8.9.229): a parking service. It answers for names that are typically for sale or unused.
    MX
    mail.parktons.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  50. outlook.downloadLookalike of outlook.com · the ending .download
    No address or mail server yet
    DetailsHide details for outlook.download
    Domain
    outlook.download
    Spelling
    The name of outlook.com with the ending .download
    First found
    2026-11-01 · the day the daily DNS check first found it registered
    Registered
    2026-05-05 · Porkbun
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  51. onedrive.download US · AS13335 · Cloudflare, Inc.4 addressesLookalike of onedrive.com · the ending .download
    Cloudflare
    DetailsHide details for onedrive.download
    Domain
    onedrive.download
    Spelling
    The name of onedrive.com with the ending .download
    First found
    2026-11-01 · the day the daily DNS check first found it registered
    Registered
    2026-05-05 · Porkbun
    Addresses
    104.21.34.89 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.202.5 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3033::ac43:ca05
    2606:4700:3035::6815:2259
    Cloudflare
    Cloudflare (104.21.34.89, 172.67.202.5): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  52. microsoft-security.topLookalike of microsoft.com · the name with the word “security”
    No address or mail server yet
    DetailsHide details for microsoft-security.top
    Domain
    microsoft-security.top
    Spelling
    The name of microsoft.com with the word “security”
    First found
    2026-11-03 · the day we first found it in the .top zone file, already registered
    Registered
    2026-05-02 · Dynadot LLC
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  53. outlook.inkLookalike of outlook.com · the ending .ink
    MX present
    DetailsHide details for outlook.ink
    Domain
    outlook.ink
    Spelling
    The name of outlook.com with the ending .ink
    First found
    2026-11-01 · the day the daily DNS check first found it registered
    Registered
    2026-05-01 · Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)
    MX
    route3.mx.cloudflare.net
    route1.mx.cloudflare.net
    route2.mx.cloudflare.net
    Daily check
    Ended 2026-11-04 22:41 UTC
  54. securesharepoint.online US · AS13335 · Cloudflare, Inc.4 addressesLookalike of microsoft.com · the name with an added word
    Cloudflare
    DetailsHide details for securesharepoint.online
    Domain
    securesharepoint.online
    Spelling
    The name of microsoft.com with an added word
    First found
    2026-11-01 · the day we first found it in the .online zone file, already registered
    Registered
    2026-04-30 · Dynadot Inc
    Addresses
    104.21.74.187 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.205.161 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3032::6815:4abb
    2606:4700:3037::ac43:cda1
    Cloudflare
    Cloudflare (104.21.74.187, 172.67.205.161): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  55. sharerpoint.cam US · AS13335 · Cloudflare, Inc.4 addressesLookalike of microsoft.com · an added character
    Cloudflare
    DetailsHide details for sharerpoint.cam
    Domain
    sharerpoint.cam
    Spelling
    Spelled like microsoft.com with an added character
    First found
    2026-11-01 · the day we first found it in the .cam zone file, already registered
    Registered
    2026-04-30 · Global Domain Group LLC
    Addresses
    104.21.91.18 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.208.49 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::6815:5b12
    2606:4700:3037::ac43:d031
    Cloudflare
    Cloudflare (104.21.91.18, 172.67.208.49): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  56. micros0ft365.com US · AS16509 · Amazon.com, Inc.2 addressesLookalike of microsoft365.com · similar-looking characters
    Registry lookup queuedParking page · Afternic
    DetailsHide details for micros0ft365.com
    Domain
    micros0ft365.com
    Spelling
    Spelled like microsoft365.com with similar-looking characters
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2026-04-30 · Circle of Domains LLC
    Addresses
    13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    Parking page · Afternic
    The registry delegates micros0ft365.com to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  57. mcrosoft.cloud US · AS16509 · Amazon.com, Inc.2 addressesLookalike of microsoft.com · a dropped letter
    Amazon Web Services
    DetailsHide details for mcrosoft.cloud
    Domain
    mcrosoft.cloud
    Spelling
    Spelled like microsoft.com with a dropped letter
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2026-04-30 · Porkbun LLC
    Addresses
    207.207.210.107 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    207.207.210.229 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (207.207.210.107, 207.207.210.229): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  58. mcrosoft.store US · AS16509 · Amazon.com, Inc.2 addressesLookalike of microsoft.com · a dropped letter
    Amazon Web Services
    DetailsHide details for mcrosoft.store
    Domain
    mcrosoft.store
    Spelling
    Spelled like microsoft.com with a dropped letter
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2026-04-30 · Porkbun LLC
    Addresses
    207.207.210.107 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    207.207.210.229 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (207.207.210.107, 207.207.210.229): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  59. outlook.how US · AS53831 · Squarespace, Inc.4 addressesLookalike of outlook.com · the ending .how
    SquarespaceMX present
    DetailsHide details for outlook.how
    Domain
    outlook.how
    Spelling
    The name of outlook.com with the ending .how
    First found
    2026-11-01 · the day the daily DNS check first found it registered
    Registered
    2026-04-29 · Squarespace Domains II LLC.
    Addresses
    198.49.23.144 · United States · AS53831 SQUARESPACE - Squarespace, Inc. · Squarespace (site builder)
    198.49.23.145 · United States · AS53831 SQUARESPACE - Squarespace, Inc. · Squarespace (site builder)
    198.185.159.144 · United States · AS53831 SQUARESPACE - Squarespace, Inc. · Squarespace (site builder)
    198.185.159.145 · United States · AS53831 SQUARESPACE - Squarespace, Inc. · Squarespace (site builder)
    Squarespace
    Squarespace (198.49.23.144, 198.49.23.145, 198.185.159.144, 198.185.159.145): a site builder. It hosts pages for anyone who signs up.
    MX
    mxa.mailgun.org
    mxb.mailgun.org
    Daily check
    Ended 2026-11-04 22:41 UTC
  60. hotmail.now US · AS13335 · Cloudflare, Inc.4 addressesLookalike of hotmail.com · the ending .now
    CloudflareMX present
    DetailsHide details for hotmail.now
    Domain
    hotmail.now
    Spelling
    The name of hotmail.com with the ending .now
    First found
    2026-11-01 · the day the daily DNS check first found it registered
    Registered
    2026-04-29 · Dynadot Inc
    Addresses
    104.21.8.141 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.139.134 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::ac43:8b86
    2606:4700:3037::6815:88d
    Cloudflare
    Cloudflare (104.21.8.141, 172.67.139.134): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    MX
    route3.mx.cloudflare.net
    route1.mx.cloudflare.net
    route2.mx.cloudflare.net
    Daily check
    Ended 2026-11-04 22:41 UTC
  61. miclosoft.online US · AS174 · Cogent Communications, LLCLookalike of microsoft.com · a changed character
    MX present
    DetailsHide details for miclosoft.online
    Domain
    miclosoft.online
    Spelling
    Spelled like microsoft.com with a changed character
    First found
    2026-11-01 · the day we first found it in the .online zone file, already registered
    Registered
    2026-04-27 · Ultahost, Inc.
    Addresses
    38.134.148.71 · United States · AS174 COGENT-174 - Cogent Communications, LLC
    MX
    mail.miclosoft.online
    miclosoft.online
    Daily check
    Ended 2026-11-04 22:41 UTC
  62. dmsoffice.online DE · AS8560 · IONOS-AS IONOS SE2 addressesLookalike of microsoft.com · an added character
    IONOSMX present
    DetailsHide details for dmsoffice.online
    Domain
    dmsoffice.online
    Spelling
    Spelled like microsoft.com with an added character
    First found
    2026-11-01 · the day we first found it in the .online zone file, already registered
    Registered
    2026-04-25 · IONOS SE
    Addresses
    74.208.236.97 · Germany · AS8560 IONOS-AS IONOS SE · IONOS (shared hosting)
    2607:f1c0:100f:f000::238
    IONOS
    IONOS (74.208.236.97): shared web hosting and domain registration. One address typically serves many customer sites.
    MX
    mx00.ionos.com
    mx01.ionos.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  63. dmsoffice.org DE · AS8560 · IONOS-AS IONOS SE2 addressesLookalike of microsoft.com · an added character
    IONOSMX present
    DetailsHide details for dmsoffice.org
    Domain
    dmsoffice.org
    Spelling
    Spelled like microsoft.com with an added character
    First found
    2026-11-01 · the day we first found it in the .org zone file, already registered
    Registered
    2026-04-25 · IONOS SE
    Addresses
    74.208.236.97 · Germany · AS8560 IONOS-AS IONOS SE · IONOS (shared hosting)
    2607:f1c0:100f:f000::238
    IONOS
    IONOS (74.208.236.97): shared web hosting and domain registration. One address typically serves many customer sites.
    MX
    mx00.ionos.com
    mx01.ionos.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  64. dmsoffice.store DE · AS8560 · IONOS-AS IONOS SE2 addressesLookalike of microsoft.com · an added character
    IONOSMX present
    DetailsHide details for dmsoffice.store
    Domain
    dmsoffice.store
    Spelling
    Spelled like microsoft.com with an added character
    First found
    2026-11-01 · the day we first found it in the .store zone file, already registered
    Registered
    2026-04-25 · IONOS SE
    Addresses
    74.208.236.97 · Germany · AS8560 IONOS-AS IONOS SE · IONOS (shared hosting)
    2607:f1c0:100f:f000::238
    IONOS
    IONOS (74.208.236.97): shared web hosting and domain registration. One address typically serves many customer sites.
    MX
    mx00.ionos.com
    mx01.ionos.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  65. rnicr0s0ft.tech US · AS31898 · Oracle CorporationLookalike of microsoft.com · similar-looking characters
    Oracle CloudMX present
    DetailsHide details for rnicr0s0ft.tech
    Domain
    rnicr0s0ft.tech
    Spelling
    Spelled like microsoft.com with similar-looking characters
    First found
    2026-11-01 · the day we first found it in the .tech zone file, already registered
    Registered
    2026-04-24 · Network Solutions, LLC
    Addresses
    192.185.5.192 · United States · AS31898 ORACLE-BMC-31898 - Oracle Corporation · Oracle Cloud (cloud provider)
    Oracle Cloud
    Oracle Cloud (192.185.5.192): a cloud provider. It rents servers and addresses to its customers.
    MX
    mail.rnicr0s0ft.tech
    rnicr0s0ft.tech
    Daily check
    Ended 2026-11-04 22:41 UTC
  66. hotmail.workLookalike of hotmail.com · the ending .work
    No address or mail server yet
    DetailsHide details for hotmail.work
    Domain
    hotmail.work
    Spelling
    The name of hotmail.com with the ending .work
    First found
    2026-11-01 · the day the daily DNS check first found it registered
    Registered
    2026-04-24 · Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  67. outlook.blog US · AS13335 · Cloudflare, Inc.4 addressesLookalike of outlook.com · the ending .blog
    CloudflareMX present
    DetailsHide details for outlook.blog
    Domain
    outlook.blog
    Spelling
    The name of outlook.com with the ending .blog
    First found
    2026-11-01 · the day the daily DNS check first found it registered
    Registered
    2026-04-22 · Go Daddy, LLC
    Addresses
    104.21.34.19 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.153.53 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::6815:2213
    2606:4700:3033::ac43:9935
    Cloudflare
    Cloudflare (104.21.34.19, 172.67.153.53): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    MX
    route2.mx.cloudflare.net
    route3.mx.cloudflare.net
    route1.mx.cloudflare.net
    Daily check
    Ended 2026-11-04 22:41 UTC
  68. outlook.ingLookalike of outlook.com · the ending .ing
    MX present
    DetailsHide details for outlook.ing
    Domain
    outlook.ing
    Spelling
    The name of outlook.com with the ending .ing
    First found
    2026-11-01 · the day the daily DNS check first found it registered
    Registered
    2026-04-22 · Porkbun LLC
    MX
    tuesday.mxrouting.net
    tuesday-relay.mxrouting.net
    Daily check
    Ended 2026-11-04 22:41 UTC
  69. microsoftupdate.xyzLookalike of microsoft.com · the name with an added word
    No address or mail server yetRegistry lookup queued
    DetailsHide details for microsoftupdate.xyz
    Domain
    microsoftupdate.xyz
    Spelling
    The name of microsoft.com with an added word
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-04-21 · GoDaddy.com, LLC
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  70. office365.mom US · AS16509 · Amazon.com, Inc.3 addressesLookalike of office365.com · the ending .mom
    Amazon Web Services
    DetailsHide details for office365.mom
    Domain
    office365.mom
    Spelling
    The name of office365.com with the ending .mom
    First found
    2026-11-01 · the day the daily DNS check first found it registered
    Registered
    2026-04-21 · Porkbun LLC
    Addresses
    207.207.210.23 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    207.207.210.36 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    207.207.210.50 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (207.207.210.23, 207.207.210.36, 207.207.210.50): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  71. 0utlook.onlineLookalike of outlook.com · similar-looking characters
    MX present
    DetailsHide details for 0utlook.online
    Domain
    0utlook.online
    Spelling
    Spelled like outlook.com with similar-looking characters
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2026-04-17 · Xin Net Technology Corporation
    MX
    124.221.236.251
    Daily check
    Ended 2026-11-04 22:41 UTC
  72. loginmicrosoft-onedrive325.zip US · AS16509 · Amazon.com, Inc.2 addressesLookalike of microsoft.com · the name with an added word
    Registry lookup queuedAmazon Web Services
    DetailsHide details for loginmicrosoft-onedrive325.zip
    Domain
    loginmicrosoft-onedrive325.zip
    Spelling
    The name of microsoft.com with an added word
    First found
    2026-11-01 · the day we first found it in the .zip zone file, already registered
    Registered
    2026-04-16 · GoDaddy.com, LLC
    Addresses
    13.248.243.5 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    76.223.105.230 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (13.248.243.5, 76.223.105.230): a cloud provider. It rents servers and addresses to its customers.
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  73. microsoft-accounts.helpLookalike of microsoft.com · the name with the word “accounts”
    PhishDestroy CommunitySuspicious · mediumNo address or mail server yet
    DetailsHide details for microsoft-accounts.help
    Domain
    microsoft-accounts.help
    Spelling
    The name of microsoft.com with the word “accounts”
    First found
    2026-11-01 · the day we first found it in the .help zone file, already registered
    Registered
    2026-04-16 · Gandi SAS
    Suspicious
    PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated medium: no address yet, or a parking or holding signal.
    PhishDestroy Community
    PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  74. microsoftonlline.com AU · AS133618 · Trellian Pty. LimitedLookalike of microsoftonline.com · a doubled letter
    Parking page · Above.comMX present
    DetailsHide details for microsoftonlline.com
    Domain
    microsoftonlline.com
    Spelling
    Spelled like microsoftonline.com with a doubled letter
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2026-04-15 · Chengdu Fly-Digital Technology Co., Ltd.
    Addresses
    103.224.182.244 · Australia · AS133618 TRELLIAN-AS-AP - Trellian Pty. Limited · Trellian / Above.com (parking page)
    Parking page · Above.com
    The registry delegates microsoftonlline.com to Above.com’s nameservers, which answer for it. Above.com: a parking service. It answers for names that are typically for sale or unused. Trellian / Above.com (103.224.182.244): a parking service. It answers for names that are typically for sale or unused.
    MX
    park-mx.above.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  75. mlcros0ft.tech IN · AS140641 · YOTTA NETWORK SERVICES PRIV…Lookalike of microsoft.com · similar-looking characters
    MX present
    DetailsHide details for mlcros0ft.tech
    Domain
    mlcros0ft.tech
    Spelling
    Spelled like microsoft.com with similar-looking characters
    First found
    2026-11-01 · the day we first found it in the .tech zone file, already registered
    Registered
    2026-04-14 · Namify Domains Inc
    Addresses
    103.235.70.188 · India · AS140641 YOTTA - YOTTA NETWORK SERVICES PRIVATE LIMITED
    MX
    mail.mlcros0ft.tech
    Daily check
    Ended 2026-11-04 22:41 UTC
  76. microsoftonline.helpLookalike of microsoftonline.com · the ending .help
    No address or mail server yet
    DetailsHide details for microsoftonline.help
    Domain
    microsoftonline.help
    Spelling
    The name of microsoftonline.com with the ending .help
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2026-04-14 · HOSTINGER operations, UAB
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  77. microsft.plLookalike of microsoft.com · a dropped letter
    No address or mail server yet
    DetailsHide details for microsft.pl
    Domain
    microsft.pl
    Spelling
    Spelled like microsoft.com with a dropped letter
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2026-04-14 · home.pl sp. z o.o.
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  78. micros0ft.xyzLookalike of microsoft.com · similar-looking characters
    Registry lookup queuedMX present
    DetailsHide details for micros0ft.xyz
    Domain
    micros0ft.xyz
    Spelling
    Spelled like microsoft.com with similar-looking characters
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2026-04-12 · GoDaddy.com, LLC
    MX
    route3.mx.cloudflare.net
    route1.mx.cloudflare.net
    route2.mx.cloudflare.net
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  79. hotmail.app US · AS16509 · Amazon.com, Inc.2 addressesLookalike of hotmail.com · the ending .app
    Parking page · Afternic
    DetailsHide details for hotmail.app
    Domain
    hotmail.app
    Spelling
    The name of hotmail.com with the ending .app
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2026-04-11 · Sav.com, LLC - 50
    Addresses
    13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    Parking page · Afternic
    The registry delegates hotmail.app to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
    Daily check
    Ended 2026-11-04 22:41 UTC
  80. microsofts.asiaLookalike of microsoft.com · an added character
    No address or mail server yet
    DetailsHide details for microsofts.asia
    Domain
    microsofts.asia
    Spelling
    Spelled like microsoft.com with an added character
    First found
    2026-11-01 · the day we first found it in the .asia zone file, already registered
    Registered
    2026-04-10 · GNAME.COM PTE. LTD.
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  81. m1crosoft.asia SC · AS328543 · Sun Network Company LimitedLookalike of microsoft.com · similar-looking characters
    MX present
    DetailsHide details for m1crosoft.asia
    Domain
    m1crosoft.asia
    Spelling
    Spelled like microsoft.com with similar-looking characters
    First found
    2026-11-01 · the day we first found it in the .asia zone file, already registered
    Registered
    2026-04-09 · Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)
    Addresses
    102.220.91.83 · Seychelles · AS328543 Sun Network Company Limited - Sun Network Company Limited
    MX
    mail.m1crosoft.asia
    Daily check
    Ended 2026-11-04 22:41 UTC
  82. microsotf365.netLookalike of microsoft365.com · two letters swapped
    MX present
    DetailsHide details for microsotf365.net
    Domain
    microsotf365.net
    Spelling
    Spelled like microsoft365.com with two letters swapped
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2026-04-09 · Cloudflare, Inc.
    MX
    mx.zoho.eu
    mx2.zoho.eu
    mx3.zoho.eu
    Daily check
    Ended 2026-11-04 22:41 UTC
  83. microsotf365.orgLookalike of microsoft365.com · two letters swapped
    No address or mail server yet
    DetailsHide details for microsotf365.org
    Domain
    microsotf365.org
    Spelling
    Spelled like microsoft365.com with two letters swapped
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2026-04-09 · Cloudflare, Inc.
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  84. xn--microsft-s4a.com US · AS13335 · Cloudflare, Inc.4 addressesLookalike of microsoft.com · international characters, shown as microsöft.com
    Cloudflare
    DetailsHide details for xn--microsft-s4a.com
    Domain
    xn--microsft-s4a.com
    Spelling
    Spelled like microsoft.com with international characters, shown as microsöft.com
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2026-04-08 · HOSTINGER operations, UAB
    Addresses
    104.21.69.70 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.206.11 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3034::ac43:ce0b
    2606:4700:3036::6815:4546
    Cloudflare
    Cloudflare (104.21.69.70, 172.67.206.11): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  85. microsovt.com SE · AS44136 · ASODERLAND ODERLAND Webbhot…2 addressesLookalike of microsoft.com · a letter from a neighbouring key
    MX present
    DetailsHide details for microsovt.com
    Domain
    microsovt.com
    Spelling
    Spelled like microsoft.com with a letter from a neighbouring key
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2026-04-07 · NameCheap, Inc.
    Addresses
    91.201.60.10 · Sweden · AS44136 ASODERLAND ODERLAND Webbhotell AB
    2a02:28f0:300b:24::
    MX
    mx1.oderland.com
    mx2.oderland.com
    mx3.oderland.com
    mx4.oderland.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  86. microsofltonline.info FR · AS16276 · OVH OVH SASLookalike of microsoft.com · an added character
    OVHMX present
    DetailsHide details for microsofltonline.info
    Domain
    microsofltonline.info
    Spelling
    Spelled like microsoft.com with an added character
    First found
    2026-11-01 · the day we first found it in the .info zone file, already registered
    Registered
    2026-04-06 · IONOS SE
    Addresses
    15.204.246.8 · France · AS16276 OVH OVH SAS · OVH (cloud provider)
    OVH
    OVH (15.204.246.8): a cloud provider. It rents servers and addresses to its customers.
    MX
    microsofltonline-info.mail.protection.outlook.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  87. outlook-verify.com US · AS13335 · Cloudflare, Inc.4 addressesLookalike of outlook.com · the name with the word “verify”
    Cloudflare
    DetailsHide details for outlook-verify.com
    Domain
    outlook-verify.com
    Spelling
    The name of outlook.com with the word “verify”
    First found
    2026-11-01 · the day the daily DNS check first found it registered
    Registered
    2026-04-05 · Cloudflare, Inc.
    Addresses
    104.21.42.33 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.199.187 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3032::6815:2a21
    2606:4700:3033::ac43:c7bb
    Cloudflare
    Cloudflare (104.21.42.33, 172.67.199.187): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  88. microsoft-update.support US · AS14618 · Amazon.com, Inc.2 addressesLookalike of microsoft.com · the name with the word “update”
    Amazon Web Services
    DetailsHide details for microsoft-update.support
    Domain
    microsoft-update.support
    Spelling
    The name of microsoft.com with the word “update”
    First found
    2026-11-01 · the day we first found it in the .support zone file, already registered
    Registered
    2026-04-04 · Name.com, Inc.
    Addresses
    18.208.88.157 · United States · AS14618 AMAZON-AES - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    98.84.224.111 · United States · AS14618 AMAZON-AES - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (18.208.88.157, 98.84.224.111): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  89. hotmail.clubLookalike of hotmail.com · the ending .club
    No address or mail server yet
    DetailsHide details for hotmail.club
    Domain
    hotmail.club
    Spelling
    The name of hotmail.com with the ending .club
    First found
    2026-11-01 · the day the daily DNS check first found it registered
    Registered
    2026-04-04 · Cloudflare, Inc.
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  90. hotmaill.icuLookalike of hotmail.com · a doubled letter
    MX present
    DetailsHide details for hotmaill.icu
    Domain
    hotmaill.icu
    Spelling
    Spelled like hotmail.com with a doubled letter
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2026-04-04 · IONOS SE
    MX
    route3.mx.cloudflare.net
    route2.mx.cloudflare.net
    route1.mx.cloudflare.net
    Daily check
    Ended 2026-11-04 22:41 UTC
  91. 0utlook.liveLookalike of outlook.com · similar-looking characters
    MX present
    DetailsHide details for 0utlook.live
    Domain
    0utlook.live
    Spelling
    Spelled like outlook.com with similar-looking characters
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2026-04-03 · Cloudflare, Inc
    MX
    0utlook-live.mail.protection.outlook.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  92. micrsoft.topLookalike of microsoft.com · a dropped letter
    No address or mail server yet
    DetailsHide details for micrsoft.top
    Domain
    micrsoft.top
    Spelling
    Spelled like microsoft.com with a dropped letter
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2026-04-03 · NameSilo,LLC
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  93. one-drive.info PL · AS43641 · Sollutium-NL SOLLUTIUM EU S…Lookalike of microsoft.com · an added hyphen
    DetailsHide details for one-drive.info
    Domain
    one-drive.info
    Spelling
    Spelled like microsoft.com with an added hyphen
    First found
    2026-11-01 · the day we first found it in the .info zone file, already registered
    Registered
    2026-04-02 · HOSTINGER operations, UAB
    Addresses
    85.137.52.44 · Poland · AS43641 Sollutium-NL SOLLUTIUM EU Sp z.o.o.
    Daily check
    Ended 2026-11-04 22:41 UTC
  94. microsft.us US · AS16509 · Amazon.com, Inc.2 addressesLookalike of microsoft.com · a dropped letter
    Parking page · Afternic
    DetailsHide details for microsft.us
    Domain
    microsft.us
    Spelling
    Spelled like microsoft.com with a dropped letter
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2026-04-02 · Spaceship, Inc.
    Addresses
    13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    Parking page · Afternic
    The registry delegates microsft.us to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
    Daily check
    Ended 2026-11-04 22:41 UTC
  95. microsooft.orgLookalike of microsoft.com · a doubled letter
    PhishDestroy CommunitySuspicious · mediumNo address or mail server yet
    DetailsHide details for microsooft.org
    Domain
    microsooft.org
    Spelling
    Spelled like microsoft.com with a doubled letter
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2026-04-02 · Cloudflare, Inc.
    Suspicious
    PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated medium: no address yet, or a parking or holding signal.
    PhishDestroy Community
    PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  96. nicrosoft.us US · AS16509 · Amazon.com, Inc.2 addressesLookalike of microsoft.com · a letter from a neighbouring key
    Amazon Web Services
    DetailsHide details for nicrosoft.us
    Domain
    nicrosoft.us
    Spelling
    Spelled like microsoft.com with a letter from a neighbouring key
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2026-04-02 · GoDaddy.com, LLC
    Addresses
    13.248.243.5 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    76.223.105.230 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (13.248.243.5, 76.223.105.230): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  97. microsoftservice.cloud US · AS15169 · Google LLCLookalike of microsoft.com · the name with an added word
    Google
    DetailsHide details for microsoftservice.cloud
    Domain
    microsoftservice.cloud
    Spelling
    The name of microsoft.com with an added word
    First found
    2026-11-01 · the day we first found it in the .cloud zone file, already registered
    Registered
    2026-03-31 · Global Domain Group LLC
    Addresses
    8.8.8.8 · United States · AS15169 GOOGLE - Google LLC · Google (cloud provider)
    Google
    Google (8.8.8.8): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  98. rnlcrosoft.org US · AS16509 · Amazon.com, Inc.2 addressesLookalike of microsoft.com · similar-looking characters
    Amazon Web Services
    DetailsHide details for rnlcrosoft.org
    Domain
    rnlcrosoft.org
    Spelling
    Spelled like microsoft.com with similar-looking characters
    First found
    2026-11-01 · the day we first found it in the .org zone file, already registered
    Registered
    2026-03-29 · Name.com, Inc.
    Addresses
    64.29.17.1 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    216.198.79.1 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (64.29.17.1, 216.198.79.1): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  99. outlook.workLookalike of outlook.com · the ending .work
    MX present
    DetailsHide details for outlook.work
    Domain
    outlook.work
    Spelling
    The name of outlook.com with the ending .work
    First found
    2026-11-01 · the day the daily DNS check first found it registered
    Registered
    2026-03-26 · Cloudflare, Inc.
    MX
    in1-smtp.messagingengine.com
    in2-smtp.messagingengine.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  100. hotma1l.co.uk US · AS16509 · Amazon.com, Inc.Lookalike of hotmail.com · similar-looking characters
    Amazon Web ServicesMX present
    DetailsHide details for hotma1l.co.uk
    Domain
    hotma1l.co.uk
    Spelling
    Spelled like hotmail.com with similar-looking characters
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2026-03-26 · 101domain GRS Ltd
    Addresses
    52.60.87.163 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (52.60.87.163): a cloud provider. It rents servers and addresses to its customers.
    MX
    aspmx.l.google.com
    alt1.aspmx.l.google.com
    alt2.aspmx.l.google.com
    alt3.aspmx.l.google.com
    alt4.aspmx.l.google.com
    Daily check
    Ended 2026-11-04 22:41 UTC

Registered domains using the name

Domains from registry zone files (ICANN CZDS), checked daily like the lookalikes above. Each row says how it matches Microsoft's names. Resellers, fans and other businesses register names like these too. Our zone data terms apply to them.

100 of 808 shown: listed ones first, then the newest registrations.

  1. sharepoint365.support KN · AS402253 · SKN Subnet & Telecom LtdContains “sharepoint”
    Address on Spamhaus DROP
    DetailsHide details for sharepoint365.support
    Domain
    sharepoint365.support
    Match
    A new registration containing “sharepoint”, one of the names we match for Microsoft
    First found
    2026-11-05 · the day the .support zone file first listed it as a new registration
    Registered
    2026-11-04 · Spaceship, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on Spamhaus DROP
    104.251.180.138 is on Spamhaus DROP · sharepoint365.support resolved to it 2026-11-05 05:11 UTC
    Addresses
    104.251.180.138 · St. Kitts & Nevis · AS402253 SKN-NETWORK-1 - SKN Subnet & Telecom Ltd
    Daily check
    Ended 2026-11-04 22:41 UTC
  2. cdn-microsoft.top SG · AS63949 · Akamai Connected Cloud3 addressesContains “microsoft”
    2 addresses on DomainSpoof’s phishing-host listAkamai Linode
    DetailsHide details for cdn-microsoft.top
    Domain
    cdn-microsoft.top
    Match
    A new registration containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-05 · the day the .top zone file first listed it as a new registration
    Registered
    2026-11-04 · NameSilo,LLC
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    2 addresses on DomainSpoof’s phishing-host list
    172.232.24.161 (cdn-microsoft.top resolved to it 2026-11-05 04:17 UTC), 172.232.24.235 (cdn-microsoft.top resolved to it 2026-11-05 04:17 UTC) are on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours
    Addresses
    45.79.154.26 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    172.232.24.161 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    172.232.24.235 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    Akamai Linode
    Akamai Linode (45.79.154.26, 172.232.24.161, 172.232.24.235): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  3. microsoftoffice365.top SG · AS63949 · Akamai Connected Cloud3 addressesContains “microsoft”
    Listed by MetaMask3 addresses on DomainSpoof’s phishing-host listAkamai Linode
    DetailsHide details for microsoftoffice365.top
    Domain
    microsoftoffice365.top
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-03 · the day we first found it in the .top zone file, already registered
    Registered
    2026-10-30 · NameSilo,LLC
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Listed by MetaMask
    Listed by MetaMask · microsoftoffice365.top · in the feed since 2026-11-01 11:44 UTC
    3 addresses on DomainSpoof’s phishing-host list
    172.232.24.161 (microsoftoffice365.top resolved to it 2026-11-05 00:46 UTC), 172.232.24.235 (microsoftoffice365.top resolved to it 2026-11-05 00:46 UTC), 172.234.25.42 (microsoftoffice365.top resolved to it 2026-11-05 00:46 UTC) are on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours
    Addresses
    172.232.24.161 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    172.232.24.235 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    172.234.25.42 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    Akamai Linode
    Akamai Linode (172.232.24.161, 172.232.24.235, 172.234.25.42): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  4. onedrive-sync.top SG · AS63949 · Akamai Connected Cloud3 addressesContains “onedrive”
    3 addresses on DomainSpoof’s phishing-host listAkamai Linode
    DetailsHide details for onedrive-sync.top
    Domain
    onedrive-sync.top
    Match
    A domain containing “onedrive”, one of the names we match for Microsoft
    First found
    2026-11-03 · the day we first found it in the .top zone file, already registered
    Registered
    2026-10-29 · NameSilo,LLC
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    3 addresses on DomainSpoof’s phishing-host list
    172.232.24.161 (onedrive-sync.top resolved to it 2026-11-05 00:46 UTC), 172.232.24.235 (onedrive-sync.top resolved to it 2026-11-05 00:46 UTC), 172.234.25.42 (onedrive-sync.top resolved to it 2026-11-05 00:46 UTC) are on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours
    Addresses
    172.232.24.161 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    172.232.24.235 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    172.234.25.42 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    Akamai Linode
    Akamai Linode (172.232.24.161, 172.232.24.235, 172.234.25.42): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  5. microsoftsupp.info RU · AS209207 · DHOST-AS Digital Hosting Pr…Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide details for microsoftsupp.info
    Domain
    microsoftsupp.info
    Match
    A registered domain containing “microsoft”, one of the names we match for Microsoft
    Zone file copy
    2026-10-31 · the day of the .info zone file copy it was found in
    Registered
    2026-10-22 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    168.113.215.244 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoftsupp.info resolved to it 2026-11-05 00:46 UTC
    Addresses
    168.113.215.244 · Russia · AS209207 DHOST-AS Digital Hosting Provider LLC
    Daily check
    Ended 2026-11-04 22:41 UTC
  6. microsoft-office.topContains “microsoft”
    Listed by MetaMaskNo address or mail server yet
    DetailsHide details for microsoft-office.top
    Domain
    microsoft-office.top
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-03 · the day we first found it in the .top zone file, already registered
    Registered
    2026-10-18 · West263 International Limited
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Listed by MetaMask
    Listed by MetaMask · microsoft-office.top · in the feed since 2026-10-27 05:34 UTC
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  7. microsoftsharefile.topContains “microsoft”
    Listed by MetaMaskNo address or mail server yet
    DetailsHide details for microsoftsharefile.top
    Domain
    microsoftsharefile.top
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-03 · the day we first found it in the .top zone file, already registered
    Registered
    2026-10-18 · NameSilo,LLC
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Listed by MetaMask
    Listed by MetaMask · microsoftsharefile.top · in the feed since 2026-10-27 05:34 UTC
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  8. microsoftsharefile1.topContains “microsoft”
    Listed by MetaMaskNo address or mail server yet
    DetailsHide details for microsoftsharefile1.top
    Domain
    microsoftsharefile1.top
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-03 · the day we first found it in the .top zone file, already registered
    Registered
    2026-10-18 · NameSilo,LLC
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Listed by MetaMask
    Listed by MetaMask · microsoftsharefile1.top · in the feed since 2026-10-27 05:34 UTC
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  9. microsoftes.liveContains “microsoft”
    Listed by MetaMaskNo address or mail server yet
    DetailsHide details for microsoftes.live
    Domain
    microsoftes.live
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .live zone file, already registered
    Registered
    2026-10-06 · Dynadot Inc
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Listed by MetaMask
    Listed by MetaMask · microsoftes.live · in the feed since 2026-10-27 05:34 UTC
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  10. microsoft-teams.sbs US · AS13335 · Cloudflare, Inc.4 addressesContains “microsoft”
    Listed by MetaMaskCloudflare
    DetailsHide details for microsoft-teams.sbs
    Domain
    microsoft-teams.sbs
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .sbs zone file, already registered
    Registered
    2026-10-03 · Dynadot Inc
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Listed by MetaMask
    Listed by MetaMask · microsoft-teams.sbs · in the feed since 2026-10-27 05:34 UTC
    Addresses
    104.21.32.178 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.153.49 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3036::ac43:9931
    2606:4700:3037::6815:20b2
    Cloudflare
    Cloudflare (104.21.32.178, 172.67.153.49): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  11. microsoft-office365.site US · AS13335 · Cloudflare, Inc.4 addressesContains “microsoft”
    Listed by MetaMaskReported by PhishDestroyCloudflareMX present
    DetailsHide details for microsoft-office365.site
    Domain
    microsoft-office365.site
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .site zone file, already registered
    Registered
    2026-09-26 · Cloudflare, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Listed by MetaMask
    Listed by MetaMask · microsoft-office365.site · in the feed since 2026-10-27 05:34 UTC
    Reported by PhishDestroy
    Reported by PhishDestroy · microsoft-office365.site · in the feed since 2026-10-25 23:31 UTC
    Addresses
    104.21.16.197 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.215.149 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3034::ac43:d795
    2606:4700:3035::6815:10c5
    Cloudflare
    Cloudflare (104.21.16.197, 172.67.215.149): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    MX
    mx01.mail.icloud.com
    mx02.mail.icloud.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  12. microsoft-onedrive.org SG · AS63949 · Akamai Connected CloudContains “microsoft”
    Listed by MetaMaskAkamai Linode
    DetailsHide details for microsoft-onedrive.org
    Domain
    microsoft-onedrive.org
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .org zone file, already registered
    Registered
    2026-09-25 · Squarespace Domains LLC
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Listed by MetaMask
    Listed by MetaMask · microsoft-onedrive.org · in the feed since 2026-10-27 05:34 UTC
    Addresses
    74.207.228.73 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    Akamai Linode
    Akamai Linode (74.207.228.73): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  13. microsoft-edge.download IS · AS50613 · ThorDC-AS Advania Island ehfContains “microsoft”
    Address on DomainSpoof’s phishing-host listMX present
    DetailsHide details for microsoft-edge.download
    Domain
    microsoft-edge.download
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .download zone file, already registered
    Registered
    2026-09-23 · TLD Registrar Solutions Ltd.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    82.221.136.24 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-edge.download resolved to it 2026-11-05 00:46 UTC
    Addresses
    82.221.136.24 · Iceland · AS50613 ThorDC-AS Advania Island ehf
    MX
    mx1.sf.ice-networks.com
    mx2.sf.ice-networks.com
    mx3.sf.ice-networks.com
    mx4.sf.ice-networks.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  14. office-365.shop DE · AS8560 · IONOS-AS IONOS SE2 addressesContains “office-365”
    Address on DomainSpoof’s phishing-host listIONOSMX present
    DetailsHide details for office-365.shop
    Domain
    office-365.shop
    Match
    A registered domain containing “office-365”, one of the names we match for Microsoft
    Zone file copy
    2026-10-31 · the day of the .shop zone file copy it was found in
    Registered
    2026-09-22 · IONOS SE
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    217.160.0.115 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · office-365.shop resolved to it 2026-11-05 00:46 UTC
    Addresses
    217.160.0.115 · Germany · AS8560 IONOS-AS IONOS SE · IONOS (shared hosting)
    2001:8d8:100f:f000::200
    IONOS
    IONOS (217.160.0.115): shared web hosting and domain registration. One address typically serves many customer sites.
    MX
    mail.protonmail.ch
    mailsec.protonmail.ch
    Daily check
    Ended 2026-11-04 22:41 UTC
  15. microsoft-teams.sarlContains “microsoft”
    Listed by MetaMaskNo address or mail server yet
    DetailsHide details for microsoft-teams.sarl
    Domain
    microsoft-teams.sarl
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .sarl zone file, already registered
    Registered
    2026-09-19 · Cloudflare, Inc
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Listed by MetaMask
    Listed by MetaMask · microsoft-teams.sarl · in the feed since 2026-10-27 05:34 UTC
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  16. microsoft-meet.live PA · AS64107 · RACK SPHERE HOSTING S.A.Contains “microsoft”
    Listed by MetaMask
    DetailsHide details for microsoft-meet.live
    Domain
    microsoft-meet.live
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .live zone file, already registered
    Registered
    2026-09-15 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Listed by MetaMask
    Listed by MetaMask · microsoft-meet.live · in the feed since 2026-10-27 05:34 UTC
    Addresses
    45.225.135.67 · Panama · AS64107 AS64107 - RACK SPHERE HOSTING S.A.
    Daily check
    Ended 2026-11-04 22:41 UTC
  17. microsoft-cedar-technologies.click SG · AS63949 · Akamai Connected Cloud3 addressesContains “microsoft”
    3 addresses on DomainSpoof’s phishing-host listAkamai Linode
    DetailsHide details for microsoft-cedar-technologies.click
    Domain
    microsoft-cedar-technologies.click
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .click zone file, already registered
    Registered
    2026-08-21 · NameSilo, LLC
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    3 addresses on DomainSpoof’s phishing-host list
    172.232.24.161 (microsoft-cedar-technologies.click resolved to it 2026-11-05 00:46 UTC), 172.232.24.235 (microsoft-cedar-technologies.click resolved to it 2026-11-05 00:46 UTC), 172.234.25.42 (microsoft-cedar-technologies.click resolved to it 2026-11-05 00:46 UTC) are on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours
    Addresses
    172.232.24.161 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    172.232.24.235 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    172.234.25.42 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    Akamai Linode
    Akamai Linode (172.232.24.161, 172.232.24.235, 172.234.25.42): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  18. com-onedrive.live US · AS13335 · Cloudflare, Inc.4 addressesContains “onedrive”
    Listed by MetaMaskCloudflare
    DetailsHide details for com-onedrive.live
    Domain
    com-onedrive.live
    Match
    A domain containing “onedrive”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .live zone file, already registered
    Registered
    2026-08-16 · Cloudflare, Inc
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Listed by MetaMask
    Listed by MetaMask · com-onedrive.live · in the feed since 2026-10-27 05:34 UTC
    Addresses
    104.21.33.172 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.165.13 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3034::6815:21ac
    2606:4700:3036::ac43:a50d
    Cloudflare
    Cloudflare (104.21.33.172, 172.67.165.13): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  19. microsoft3.sbsContains “microsoft”
    Listed by MetaMaskNo address or mail server yet
    DetailsHide details for microsoft3.sbs
    Domain
    microsoft3.sbs
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .sbs zone file, already registered
    Registered
    2026-08-07 · NameSilo, LLC
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Listed by MetaMask
    Listed by MetaMask · microsoft3.sbs · in the feed since 2026-10-27 05:34 UTC
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  20. microsoftonline-sharepoint-com.live US · AS13335 · Cloudflare, Inc.4 addressesContains “microsoftonline”
    Listed by MetaMaskCloudflare
    DetailsHide details for microsoftonline-sharepoint-com.live
    Domain
    microsoftonline-sharepoint-com.live
    Match
    A domain containing “microsoftonline”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .live zone file, already registered
    Registered
    2026-08-07 · Cloudflare, Inc
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Listed by MetaMask
    Listed by MetaMask · microsoftonline-sharepoint-com.live · in the feed since 2026-10-27 05:34 UTC
    Addresses
    104.21.51.191 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.184.169 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::6815:33bf
    2606:4700:3032::ac43:b8a9
    Cloudflare
    Cloudflare (104.21.51.191, 172.67.184.169): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  21. microsoftonline-sharepoint.online US · AS14061 · DigitalOcean, LLCContains “microsoftonline”
    Listed by MetaMaskDigitalOcean
    DetailsHide details for microsoftonline-sharepoint.online
    Domain
    microsoftonline-sharepoint.online
    Match
    A domain containing “microsoftonline”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .online zone file, already registered
    Registered
    2026-07-27 · Cloudflare, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Listed by MetaMask
    Listed by MetaMask · microsoftonline-sharepoint.online · in the feed since 2026-10-27 05:34 UTC
    Addresses
    178.62.99.223 · United States · AS14061 DIGITALOCEAN-ASN - DigitalOcean, LLC · DigitalOcean (cloud provider)
    DigitalOcean
    DigitalOcean (178.62.99.223): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  22. office365microsoft.help SG · AS63949 · Akamai Connected Cloud3 addressesContains “microsoft”
    3 addresses on DomainSpoof’s phishing-host listAkamai LinodeMX present
    DetailsHide details for office365microsoft.help
    Domain
    office365microsoft.help
    Match
    A registered domain containing “microsoft”, one of the names we match for Microsoft
    Zone file copy
    2026-10-31 · the day of the .help zone file copy it was found in
    Registered
    2026-07-26 · NameSilo, LLC
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    3 addresses on DomainSpoof’s phishing-host list
    172.232.24.161 (office365microsoft.help resolved to it 2026-11-05 00:46 UTC), 172.232.24.235 (office365microsoft.help resolved to it 2026-11-05 00:46 UTC), 172.234.25.42 (office365microsoft.help resolved to it 2026-11-05 00:46 UTC) are on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours
    Addresses
    172.232.24.161 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    172.232.24.235 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    172.234.25.42 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    Akamai Linode
    Akamai Linode (172.232.24.161, 172.232.24.235, 172.234.25.42): a cloud provider. It rents servers and addresses to its customers.
    MX
    mx1.titan.email
    mx2.titan.email
    Daily check
    Ended 2026-11-04 22:41 UTC
  23. msoffice.email CY · AS47583 · AS-HOSTINGER Hostinger Inte…Contains “msoffice”
    Address on DomainSpoof’s phishing-host listHostinger
    DetailsHide details for msoffice.email
    Domain
    msoffice.email
    Match
    A domain containing “msoffice”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .email zone file, already registered
    Registered
    2026-07-24 · HOSTINGER operations, UAB
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · msoffice.email resolved to it 2026-11-05 00:46 UTC
    Addresses
    2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
    Daily check
    Ended 2026-11-04 22:41 UTC
  24. msoffice.live CY · AS47583 · AS-HOSTINGER Hostinger Inte…Contains “msoffice”
    Address on DomainSpoof’s phishing-host listHostinger
    DetailsHide details for msoffice.live
    Domain
    msoffice.live
    Match
    A registered domain containing “msoffice”, one of the names we match for Microsoft
    Zone file copy
    2026-10-31 · the day of the .live zone file copy it was found in
    Registered
    2026-07-24 · HOSTINGER operations, UAB
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · msoffice.live resolved to it 2026-11-05 00:46 UTC
    Addresses
    2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
    Daily check
    Ended 2026-11-04 22:41 UTC
  25. microsoftonline-outlook.live US · AS13335 · Cloudflare, Inc.4 addressesContains “microsoftonline”
    Listed by MetaMaskCloudflare
    DetailsHide details for microsoftonline-outlook.live
    Domain
    microsoftonline-outlook.live
    Match
    A domain containing “microsoftonline”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .live zone file, already registered
    Registered
    2026-07-17 · Cloudflare, Inc
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Listed by MetaMask
    Listed by MetaMask · microsoftonline-outlook.live · in the feed since 2026-10-27 05:34 UTC
    Addresses
    104.21.24.65 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.217.82 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3030::6815:1841
    2606:4700:3031::ac43:d952
    Cloudflare
    Cloudflare (104.21.24.65, 172.67.217.82): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  26. onmicrosoftfolder.sbs SG · AS63949 · Akamai Connected Cloud3 addressesContains “microsoft”
    3 addresses on DomainSpoof’s phishing-host listAkamai Linode
    DetailsHide details for onmicrosoftfolder.sbs
    Domain
    onmicrosoftfolder.sbs
    Match
    A registered domain containing “microsoft”, one of the names we match for Microsoft
    Zone file copy
    2026-10-31 · the day of the .sbs zone file copy it was found in
    Registered
    2026-07-08 · NameSilo, LLC
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    3 addresses on DomainSpoof’s phishing-host list
    172.232.24.161 (onmicrosoftfolder.sbs resolved to it 2026-11-05 00:46 UTC), 172.232.24.235 (onmicrosoftfolder.sbs resolved to it 2026-11-05 00:46 UTC), 172.234.25.42 (onmicrosoftfolder.sbs resolved to it 2026-11-05 00:46 UTC) are on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours
    Addresses
    172.232.24.161 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    172.232.24.235 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    172.234.25.42 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    Akamai Linode
    Akamai Linode (172.232.24.161, 172.232.24.235, 172.234.25.42): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  27. microsoftprada.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide details for microsoftprada.xyz
    Domain
    microsoftprada.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-07-04 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoftprada.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  28. microsoftcisco.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide details for microsoftcisco.xyz
    Domain
    microsoftcisco.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-07-02 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoftcisco.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  29. microsoftinstagram.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide details for microsoftinstagram.xyz
    Domain
    microsoftinstagram.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-07-02 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoftinstagram.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  30. microsofttencent.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide details for microsofttencent.xyz
    Domain
    microsofttencent.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-07-02 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsofttencent.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  31. hsbc-microsoft.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide details for hsbc-microsoft.xyz
    Domain
    hsbc-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-29 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · hsbc-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  32. ibm-microsoft.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide details for ibm-microsoft.xyz
    Domain
    ibm-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-29 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · ibm-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  33. microsoft-bmw.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide details for microsoft-bmw.xyz
    Domain
    microsoft-bmw.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-29 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-bmw.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  34. microsoft-fedex.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide details for microsoft-fedex.xyz
    Domain
    microsoft-fedex.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-29 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-fedex.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  35. microsoft-nintendo.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide details for microsoft-nintendo.xyz
    Domain
    microsoft-nintendo.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-29 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-nintendo.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  36. microsoft-puma.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide details for microsoft-puma.xyz
    Domain
    microsoft-puma.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-29 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-puma.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  37. microsoft-sap.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide details for microsoft-sap.xyz
    Domain
    microsoft-sap.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-29 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-sap.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  38. microsoft-target.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide details for microsoft-target.xyz
    Domain
    microsoft-target.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-29 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-target.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  39. microsoft-volkswagen.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide details for microsoft-volkswagen.xyz
    Domain
    microsoft-volkswagen.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-29 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-volkswagen.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  40. nintendo-microsoft.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide details for nintendo-microsoft.xyz
    Domain
    nintendo-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-29 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · nintendo-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  41. cisco-microsoft.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide details for cisco-microsoft.xyz
    Domain
    cisco-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-28 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · cisco-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  42. hermes-microsoft.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide details for hermes-microsoft.xyz
    Domain
    hermes-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-28 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · hermes-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  43. kia-microsoft.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide details for kia-microsoft.xyz
    Domain
    kia-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-28 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · kia-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  44. microsoft-amazon.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide details for microsoft-amazon.xyz
    Domain
    microsoft-amazon.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-28 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-amazon.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  45. microsoft-hyundai.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide details for microsoft-hyundai.xyz
    Domain
    microsoft-hyundai.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-28 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-hyundai.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  46. microsoft-nescafe.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide details for microsoft-nescafe.xyz
    Domain
    microsoft-nescafe.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-28 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-nescafe.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  47. microsoft-pepsi.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide details for microsoft-pepsi.xyz
    Domain
    microsoft-pepsi.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-28 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-pepsi.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  48. microsoft-starbucks.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide details for microsoft-starbucks.xyz
    Domain
    microsoft-starbucks.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-28 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-starbucks.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  49. microsoft-zara.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide details for microsoft-zara.xyz
    Domain
    microsoft-zara.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-28 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-zara.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  50. paypal-microsoft.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide details for paypal-microsoft.xyz
    Domain
    paypal-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-28 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · paypal-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  51. prada-microsoft.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide details for prada-microsoft.xyz
    Domain
    prada-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-28 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · prada-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  52. gillette-microsoft.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide details for gillette-microsoft.xyz
    Domain
    gillette-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-27 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · gillette-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  53. microsoft-netflix.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide details for microsoft-netflix.xyz
    Domain
    microsoft-netflix.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-27 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-netflix.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  54. tencent-microsoft.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide details for tencent-microsoft.xyz
    Domain
    tencent-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-27 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · tencent-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  55. totalenergies-microsoft.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide details for totalenergies-microsoft.xyz
    Domain
    totalenergies-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-27 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · totalenergies-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  56. sap-microsoft.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide details for sap-microsoft.xyz
    Domain
    sap-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-26 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · sap-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  57. sharepoint.tips DE · AS212317 · HETZNER-CLOUD3-AS Hetzner O…14 addressesContains “sharepoint”
    5 addresses on DomainSpoof’s phishing-host listHetzner +1
    DetailsHide details for sharepoint.tips
    Domain
    sharepoint.tips
    Match
    A domain containing “sharepoint”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .tips zone file, already registered
    Registered
    2026-06-15 · Domain Science Kutatási Szolgáltató Korlátolt Felelősségű Társaság
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    5 addresses on DomainSpoof’s phishing-host list
    195.201.128.179 (sharepoint.tips resolved to it 2026-11-05 00:46 UTC), 46.62.237.138 (sharepoint.tips resolved to it 2026-11-05 00:46 UTC), 5.161.230.87 (sharepoint.tips resolved to it 2026-11-05 00:46 UTC), 5.161.47.86 (sharepoint.tips resolved to it 2026-11-05 00:46 UTC), 5.78.156.59 (sharepoint.tips resolved to it 2026-11-05 00:46 UTC) are on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours
    Addresses
    5.78.156.59 · Germany · AS212317 HETZNER-CLOUD3-AS Hetzner Online GmbH
    5.161.47.86 · Germany · AS213230 HETZNER-CLOUD2-AS Hetzner Online GmbH
    5.161.230.87 · Germany · AS213230 HETZNER-CLOUD2-AS Hetzner Online GmbH
    46.62.237.138 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    76.223.91.20 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    195.201.128.179 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    2406:da1e:214:c901:49:871:e9e1:eb92
    2600:1f1c:6db:8801:ca20:5f5a:5f45:48d0
    2a05:d014:179b:c400:b5e:feaf:a6dc:b508
    2a05:d014:179b:c400:2dc9:16fd:7cbd:e255
    2a05:d014:179b:c400:5ed8:1db0:4443:ca25
    2a05:d014:179b:c400:a327:40ee:24cc:6180
    2a05:d014:179b:c400:aa99:a226:6c94:e72
    2a05:d014:179b:c400:adda:f567:8e83:5e24
    Hetzner +1
    Hetzner (46.62.237.138, 195.201.128.179): a cloud provider. It rents servers and addresses to its customers. Amazon Web Services (76.223.91.20): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  58. microsoft-ai-claude.top DE · AS47846 · SEDO-AS SEDO GmbHContains “microsoft”
    Listed by MetaMaskParking page · Sedo
    DetailsHide details for microsoft-ai-claude.top
    Domain
    microsoft-ai-claude.top
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-03 · the day we first found it in the .top zone file, already registered
    Registered
    2026-05-29 · NameSilo,LLC
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Listed by MetaMask
    Listed by MetaMask · microsoft-ai-claude.top · in the feed since 2026-10-27 05:34 UTC
    Addresses
    91.195.240.123 · Germany · AS47846 SEDO-AS SEDO GmbH · Sedo (parking page)
    Parking page · Sedo
    Sedo (91.195.240.123): a parking service. It answers for names that are typically for sale or unused.
    Daily check
    Ended 2026-11-04 22:41 UTC
  59. microsoft-google.top DE · AS47846 · SEDO-AS SEDO GmbHContains “microsoft”
    Listed by MetaMaskParking page · Sedo
    DetailsHide details for microsoft-google.top
    Domain
    microsoft-google.top
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-03 · the day we first found it in the .top zone file, already registered
    Registered
    2026-05-29 · NameSilo,LLC
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Listed by MetaMask
    Listed by MetaMask · microsoft-google.top · in the feed since 2026-10-27 05:34 UTC
    Addresses
    91.195.240.123 · Germany · AS47846 SEDO-AS SEDO GmbH · Sedo (parking page)
    Parking page · Sedo
    Sedo (91.195.240.123): a parking service. It answers for names that are typically for sale or unused.
    Daily check
    Ended 2026-11-04 22:41 UTC
  60. microsoftcom.live US · AS16509 · Amazon.com, Inc.2 addressesContains “microsoft”
    Listed by MetaMaskReported by PhishDestroyRegistry lookup queuedAmazon Web Services
    DetailsHide details for microsoftcom.live
    Domain
    microsoftcom.live
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .live zone file, already registered
    Registered
    2026-05-29 · GoDaddy.com, LLC
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Listed by MetaMask
    Listed by MetaMask · microsoftcom.live · in the feed since 2026-10-27 05:34 UTC
    Reported by PhishDestroy
    Reported by PhishDestroy · microsoftcom.live · in the feed since 2026-10-25 23:31 UTC
    Addresses
    13.248.243.5 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    76.223.105.230 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (13.248.243.5, 76.223.105.230): a cloud provider. It rents servers and addresses to its customers.
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  61. evaservi-hotmail.online DE · AS8560 · IONOS-AS IONOS SEContains “hotmail”
    Address on DomainSpoof’s phishing-host listIONOSMX present
    DetailsHide details for evaservi-hotmail.online
    Domain
    evaservi-hotmail.online
    Match
    A domain containing “hotmail”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .online zone file, already registered
    Registered
    2026-05-24 · IONOS SE
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    217.76.128.47 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · evaservi-hotmail.online resolved to it 2026-11-05 00:46 UTC
    Addresses
    217.76.128.47 · Germany · AS8560 IONOS-AS IONOS SE · IONOS (shared hosting)
    IONOS
    IONOS (217.76.128.47): shared web hosting and domain registration. One address typically serves many customer sites.
    MX
    mx.serviciodecorreo.es
    Daily check
    Ended 2026-11-04 22:41 UTC
  62. outlook-mail.site CY · AS47583 · AS-HOSTINGER Hostinger Inte…Contains “outlook”
    Address on DomainSpoof’s phishing-host listHostinger
    DetailsHide details for outlook-mail.site
    Domain
    outlook-mail.site
    Match
    A registered domain containing “outlook”, one of the names we match for Microsoft
    Zone file copy
    2026-10-31 · the day of the .site zone file copy it was found in
    Registered
    2026-04-24 · HOSTINGER operations, UAB
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · outlook-mail.site resolved to it 2026-11-05 00:46 UTC
    Addresses
    2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
    Daily check
    Ended 2026-11-04 22:41 UTC
  63. entra-id-platform.online JP · AS7506 · GMO Internet, Inc.Contains “entra-id”
    Address on DomainSpoof’s phishing-host list
    DetailsHide details for entra-id-platform.online
    Domain
    entra-id-platform.online
    Match
    A domain containing “entra-id”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .online zone file, already registered
    Registered
    2026-04-19 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · entra-id-platform.online resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  64. azure-microsoft.top JP · AS9370 · SAKURA Internet Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide details for azure-microsoft.top
    Domain
    azure-microsoft.top
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-03 · the day we first found it in the .top zone file, already registered
    Registered
    2026-04-09 · GMO Internet, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    160.16.200.77 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · azure-microsoft.top resolved to it 2026-11-05 00:46 UTC
    Addresses
    160.16.200.77 · Japan · AS9370 SAKURA-B - SAKURA Internet Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  65. team-microsoft.top JP · AS9370 · SAKURA Internet Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide details for team-microsoft.top
    Domain
    team-microsoft.top
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-03 · the day we first found it in the .top zone file, already registered
    Registered
    2026-04-09 · GMO Internet, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    160.16.200.77 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · team-microsoft.top resolved to it 2026-11-05 00:46 UTC
    Addresses
    160.16.200.77 · Japan · AS9370 SAKURA-B - SAKURA Internet Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  66. microsoft-office365.cloud DE · AS8560 · IONOS-AS IONOS SE2 addressesContains “microsoft”
    Reported by PhishDestroyAddress on DomainSpoof’s phishing-host listIONOSMX present
    DetailsHide details for microsoft-office365.cloud
    Domain
    microsoft-office365.cloud
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .cloud zone file, already registered
    Registered
    2026-03-18 · IONOS SE
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Reported by PhishDestroy
    Reported by PhishDestroy · microsoft-office365.cloud · in the feed since 2026-10-25 23:31 UTC
    Address on DomainSpoof’s phishing-host list
    217.160.0.235 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-office365.cloud resolved to it 2026-11-05 00:46 UTC
    Addresses
    217.160.0.235 · Germany · AS8560 IONOS-AS IONOS SE · IONOS (shared hosting)
    2001:8d8:100f:f000::200
    IONOS
    IONOS (217.160.0.235): shared web hosting and domain registration. One address typically serves many customer sites.
    MX
    mx00.ionos.de
    mx01.ionos.de
    Daily check
    Ended 2026-11-04 22:41 UTC
  67. office365online.live CY · AS47583 · AS-HOSTINGER Hostinger Inte…Contains “office365”
    Address on DomainSpoof’s phishing-host listHostingerMX present
    DetailsHide details for office365online.live
    Domain
    office365online.live
    Match
    A domain containing “office365”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .live zone file, already registered
    Registered
    2026-03-15 · HOSTINGER operations, UAB
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · office365online.live resolved to it 2026-11-05 00:46 UTC
    Addresses
    2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
    MX
    mx1.hostinger.com
    mx2.hostinger.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  68. hotmails.sbs CY · AS47583 · AS-HOSTINGER Hostinger Inte…Contains “hotmail”
    Address on DomainSpoof’s phishing-host listHostingerMX present
    DetailsHide details for hotmails.sbs
    Domain
    hotmails.sbs
    Match
    A registered domain containing “hotmail”, one of the names we match for Microsoft
    Zone file copy
    2026-10-31 · the day of the .sbs zone file copy it was found in
    Registered
    2026-01-05 · HOSTINGER operations, UAB
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · hotmails.sbs resolved to it 2026-11-05 00:46 UTC
    Addresses
    2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
    MX
    mx1.hostinger.com
    mx2.hostinger.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  69. secret-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide details for secret-microsoft.xyz
    Domain
    secret-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-25 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · secret-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  70. session-microsoft-trello.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide details for session-microsoft-trello.xyz
    Domain
    session-microsoft-trello.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-25 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · session-microsoft-trello.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  71. short-authority-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide details for short-authority-microsoft.xyz
    Domain
    short-authority-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-25 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · short-authority-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  72. shortcut-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide details for shortcut-microsoft.xyz
    Domain
    shortcut-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-25 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · shortcut-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  73. simulink-microsoft-class.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide details for simulink-microsoft-class.xyz
    Domain
    simulink-microsoft-class.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-25 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · simulink-microsoft-class.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  74. simulink-priority-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide details for simulink-priority-microsoft.xyz
    Domain
    simulink-priority-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-25 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · simulink-priority-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  75. smartsheet-microsoft-rest.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide details for smartsheet-microsoft-rest.xyz
    Domain
    smartsheet-microsoft-rest.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-25 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · smartsheet-microsoft-rest.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  76. smartsheet-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide details for smartsheet-microsoft.xyz
    Domain
    smartsheet-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-25 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · smartsheet-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  77. smartsheet-seaborn-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide details for smartsheet-seaborn-microsoft.xyz
    Domain
    smartsheet-seaborn-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-25 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · smartsheet-seaborn-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  78. snapshot-microsoft-circleci.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide details for snapshot-microsoft-circleci.xyz
    Domain
    snapshot-microsoft-circleci.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-25 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · snapshot-microsoft-circleci.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  79. soap-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide details for soap-microsoft.xyz
    Domain
    soap-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-25 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · soap-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  80. solidworks-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide details for solidworks-microsoft.xyz
    Domain
    solidworks-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-25 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · solidworks-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  81. utilization-follower-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide details for utilization-follower-microsoft.xyz
    Domain
    utilization-follower-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · utilization-follower-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  82. variable-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide details for variable-microsoft.xyz
    Domain
    variable-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · variable-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  83. verilog-microsoft-tablet.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide details for verilog-microsoft-tablet.xyz
    Domain
    verilog-microsoft-tablet.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · verilog-microsoft-tablet.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  84. vhdl-microsoft-partition.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide details for vhdl-microsoft-partition.xyz
    Domain
    vhdl-microsoft-partition.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · vhdl-microsoft-partition.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  85. wasm-microsoft-bootstrap.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide details for wasm-microsoft-bootstrap.xyz
    Domain
    wasm-microsoft-bootstrap.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · wasm-microsoft-bootstrap.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  86. wasm-wrike-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide details for wasm-wrike-microsoft.xyz
    Domain
    wasm-wrike-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · wasm-wrike-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  87. wave-confluence-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide details for wave-confluence-microsoft.xyz
    Domain
    wave-confluence-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · wave-confluence-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  88. waypoint-microsoft-store.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide details for waypoint-microsoft-store.xyz
    Domain
    waypoint-microsoft-store.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · waypoint-microsoft-store.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  89. while-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide details for while-microsoft.xyz
    Domain
    while-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · while-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  90. whom-microsoft-connect.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide details for whom-microsoft-connect.xyz
    Domain
    whom-microsoft-connect.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · whom-microsoft-connect.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  91. yaml-microsoft-vector.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide details for yaml-microsoft-vector.xyz
    Domain
    yaml-microsoft-vector.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · yaml-microsoft-vector.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  92. office365-sec.xyz TR · AS51557 · TR-ISIMTESCIL-20201202 Isim…Contains “office365”
    Address on DomainSpoof’s phishing-host list
    DetailsHide details for office365-sec.xyz
    Domain
    office365-sec.xyz
    Match
    A registered domain containing “office365”, one of the names we match for Microsoft
    Zone file copy
    2026-10-31 · the day of the .xyz zone file copy it was found in
    Registered
    2025-12-24 · İsimtescil Bilişim A.Ş.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    93.89.226.17 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · office365-sec.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    93.89.226.17 · Türkiye · AS51557 TR-ISIMTESCIL-20201202 Isimtescil Bilisim A.S.
    Daily check
    Ended 2026-11-04 22:41 UTC
  93. onedrive365.live US · AS214036 · ULTAHOST-AS Ultahost, Inc.Contains “onedrive”
    Address on DomainSpoof’s phishing-host listMX present
    DetailsHide details for onedrive365.live
    Domain
    onedrive365.live
    Match
    A registered domain containing “onedrive”, one of the names we match for Microsoft
    Zone file copy
    2026-10-31 · the day of the .live zone file copy it was found in
    Registered
    2025-12-18 · Ultahost, Inc
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    79.133.41.61 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · onedrive365.live resolved to it 2026-11-05 00:46 UTC
    Addresses
    79.133.41.61 · United States · AS214036 ULTAHOST-AS Ultahost, Inc.
    MX
    onedrive365.live
    Daily check
    Ended 2026-11-04 22:41 UTC
  94. hotmailbr.store CY · AS47583 · AS-HOSTINGER Hostinger Inte…Contains “hotmail”
    Address on DomainSpoof’s phishing-host listHostinger
    DetailsHide details for hotmailbr.store
    Domain
    hotmailbr.store
    Match
    A registered domain containing “hotmail”, one of the names we match for Microsoft
    Zone file copy
    2026-10-31 · the day of the .store zone file copy it was found in
    Registered
    2025-12-15 · HOSTINGER operations, UAB
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · hotmailbr.store resolved to it 2026-11-05 00:46 UTC
    Addresses
    2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
    Daily check
    Ended 2026-11-04 22:41 UTC
  95. instagram-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide details for instagram-microsoft.xyz
    Domain
    instagram-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · instagram-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  96. instagram-when-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide details for instagram-when-microsoft.xyz
    Domain
    instagram-when-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · instagram-when-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  97. instance-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide details for instance-microsoft.xyz
    Domain
    instance-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · instance-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  98. jetty-microsoft-drone.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide details for jetty-microsoft-drone.xyz
    Domain
    jetty-microsoft-drone.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · jetty-microsoft-drone.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  99. jetty-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide details for jetty-microsoft.xyz
    Domain
    jetty-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · jetty-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  100. jetty-opengl-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide details for jetty-opengl-microsoft.xyz
    Domain
    jetty-opengl-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · jetty-opengl-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC

More brands in Software & cloud

All brands →