Microsoft
Registered lookalikes
Spellings of Microsoft's official domains (microsoft.com, office365.com, hotmail.com, …) registered to other owners (identified by nameservers, registrar and redirects), checked daily; the ones with no address or mail server yet say so. Many are parked, for sale or run by other businesses and sites with a similar name; the ones a phishing source or address list has flagged carry a label.
Some of these come from registry zone files (ICANN CZDS). Our zone data terms apply to them: no marketing use of any kind, no harassing their registrants, no high-volume registry or registrar queries.
121 of the 1,671 are listed by a source or resolve to a listed address, checked hourly.
- onedrive.to EE · AS203273 · NetCraftersOU NetCrafters OULookalike of onedrive.com · the ending .to
DetailsHide details for onedrive.to
- Domain
- onedrive.to
- Spelling
- The name of onedrive.com with the ending .to
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Registered
- 2025-12-21 · Spaceship, Inc.
- Addresses
- 138.124.123.87 · Estonia · AS203273 NetCraftersOU NetCrafters OU
- Daily check
- Ended 2026-11-04 22:41 UTC
- h0tmail.autosLookalike of hotmail.com · similar-looking charactersMX present
DetailsHide details for h0tmail.autos
- Domain
- h0tmail.autos
- Spelling
- Spelled like hotmail.com with similar-looking characters
- First found
- 2026-11-01 · the day we first found it in the .autos zone file, already registered
- Registered
- 2025-12-20 · Spaceship, Inc.
- MX
- mx1.efwd.spaceship.netmx2.efwd.spaceship.net
- Daily check
- Ended 2026-11-04 22:41 UTC
- h0tmail.forumLookalike of hotmail.com · similar-looking charactersMX present
DetailsHide details for h0tmail.forum
- Domain
- h0tmail.forum
- Spelling
- Spelled like hotmail.com with similar-looking characters
- First found
- 2026-11-01 · the day we first found it in the .forum zone file, already registered
- Registered
- 2025-12-20 · Spaceship, Inc.
- MX
- mx1.efwd.spaceship.netmx2.efwd.spaceship.net
- Daily check
- Ended 2026-11-04 22:41 UTC
- h0tmail.lolLookalike of hotmail.com · similar-looking charactersMX present
DetailsHide details for h0tmail.lol
- Domain
- h0tmail.lol
- Spelling
- Spelled like hotmail.com with similar-looking characters
- First found
- 2026-11-01 · the day we first found it in the .lol zone file, already registered
- Registered
- 2025-12-20 · Spaceship, Inc.
- MX
- mx1.efwd.spaceship.netmx2.efwd.spaceship.net
- Daily check
- Ended 2026-11-04 22:41 UTC
- h0tmail.monsterLookalike of hotmail.com · similar-looking charactersMX present
DetailsHide details for h0tmail.monster
- Domain
- h0tmail.monster
- Spelling
- Spelled like hotmail.com with similar-looking characters
- First found
- 2026-11-01 · the day we first found it in the .monster zone file, already registered
- Registered
- 2025-12-20 · Spaceship, Inc.
- MX
- mx1.efwd.spaceship.netmx2.efwd.spaceship.net
- Daily check
- Ended 2026-11-04 22:41 UTC
- h0tmail.pro DE · AS47846 · SEDO-AS SEDO GmbHLookalike of hotmail.com · similar-looking charactersParking page · Sedo
DetailsHide details for h0tmail.pro
- Domain
- h0tmail.pro
- Spelling
- Spelled like hotmail.com with similar-looking characters
- First found
- 2026-11-01 · the day we first found it in the .pro zone file, already registered
- Registered
- 2025-12-20 · Name.com, Inc.
- Addresses
- 91.195.240.94 · Germany · AS47846 SEDO-AS SEDO GmbH · Sedo (parking page)
- Parking page · Sedo
- Sedo (91.195.240.94): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- h0tmail.restLookalike of hotmail.com · similar-looking charactersMX present
DetailsHide details for h0tmail.rest
- Domain
- h0tmail.rest
- Spelling
- Spelled like hotmail.com with similar-looking characters
- First found
- 2026-11-01 · the day we first found it in the .rest zone file, already registered
- Registered
- 2025-12-20 · Spaceship, Inc.
- MX
- mx1.efwd.spaceship.netmx2.efwd.spaceship.net
- Daily check
- Ended 2026-11-04 22:41 UTC
- office365.inkLookalike of office365.com · the ending .inkNo address or mail server yet
DetailsHide details for office365.ink
- Domain
- office365.ink
- Spelling
- The name of office365.com with the ending .ink
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Registered
- 2025-12-20 · Xin Net Technology Corporation
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- h0tmail.bizLookalike of hotmail.com · similar-looking charactersMX present
DetailsHide details for h0tmail.biz
- Domain
- h0tmail.biz
- Spelling
- Spelled like hotmail.com with similar-looking characters
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2025-12-20 · Spaceship, Inc.
- MX
- mx1.efwd.spaceship.netmx2.efwd.spaceship.net
- Daily check
- Ended 2026-11-04 22:41 UTC
- h0tmail.icuLookalike of hotmail.com · similar-looking charactersMX present
DetailsHide details for h0tmail.icu
- Domain
- h0tmail.icu
- Spelling
- Spelled like hotmail.com with similar-looking characters
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2025-12-20 · Spaceship, Inc.
- MX
- mx1.efwd.spaceship.netmx2.efwd.spaceship.net
- Daily check
- Ended 2026-11-04 22:41 UTC
- h0tmail.asiaLookalike of hotmail.com · similar-looking charactersMX present
DetailsHide details for h0tmail.asia
- Domain
- h0tmail.asia
- Spelling
- Spelled like hotmail.com with similar-looking characters
- First found
- 2026-11-01 · the day we first found it in the .asia zone file, already registered
- Registered
- 2025-12-19 · Spaceship, Inc.
- MX
- mx1.efwd.spaceship.netmx2.efwd.spaceship.net
- Daily check
- Ended 2026-11-04 22:41 UTC
- h0tmail.bondLookalike of hotmail.com · similar-looking charactersMX present
DetailsHide details for h0tmail.bond
- Domain
- h0tmail.bond
- Spelling
- Spelled like hotmail.com with similar-looking characters
- First found
- 2026-11-01 · the day we first found it in the .bond zone file, already registered
- Registered
- 2025-12-19 · Spaceship, Inc.
- MX
- mx1.efwd.spaceship.netmx2.efwd.spaceship.net
- Daily check
- Ended 2026-11-04 22:41 UTC
- h0tmail.spaceLookalike of hotmail.com · similar-looking charactersMX present
DetailsHide details for h0tmail.space
- Domain
- h0tmail.space
- Spelling
- Spelled like hotmail.com with similar-looking characters
- First found
- 2026-11-01 · the day we first found it in the .space zone file, already registered
- Registered
- 2025-12-19 · Spaceship, Inc.
- MX
- mx1.efwd.spaceship.netmx2.efwd.spaceship.net
- Daily check
- Ended 2026-11-04 22:41 UTC
- h0tmail.cfdLookalike of hotmail.com · similar-looking charactersMX present
DetailsHide details for h0tmail.cfd
- Domain
- h0tmail.cfd
- Spelling
- Spelled like hotmail.com with similar-looking characters
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2025-12-19 · Spaceship, Inc.
- MX
- mx1.efwd.spaceship.netmx2.efwd.spaceship.net
- Daily check
- Ended 2026-11-04 22:41 UTC
- h0tmail.cyouLookalike of hotmail.com · similar-looking charactersMX present
DetailsHide details for h0tmail.cyou
- Domain
- h0tmail.cyou
- Spelling
- Spelled like hotmail.com with similar-looking characters
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2025-12-19 · Spaceship, Inc.
- MX
- mx1.efwd.spaceship.netmx2.efwd.spaceship.net
- Daily check
- Ended 2026-11-04 22:41 UTC
- h0tmail.sbsLookalike of hotmail.com · similar-looking charactersMX present
DetailsHide details for h0tmail.sbs
- Domain
- h0tmail.sbs
- Spelling
- Spelled like hotmail.com with similar-looking characters
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2025-12-19 · Spaceship, Inc.
- MX
- mx1.efwd.spaceship.netmx2.efwd.spaceship.net
- Daily check
- Ended 2026-11-04 22:41 UTC
- h0tmail.xyzLookalike of hotmail.com · similar-looking charactersMX present
DetailsHide details for h0tmail.xyz
- Domain
- h0tmail.xyz
- Spelling
- Spelled like hotmail.com with similar-looking characters
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2025-12-19 · Spaceship, Inc.
- MX
- mx1.efwd.spaceship.netmx2.efwd.spaceship.net
- Daily check
- Ended 2026-11-04 22:41 UTC
- mifrosoft.space US · AS36352 · HostPapaLookalike of microsoft.com · a changed characterColoCrossingMX present
DetailsHide details for mifrosoft.space
- Domain
- mifrosoft.space
- Spelling
- Spelled like microsoft.com with a changed character
- First found
- 2026-11-01 · the day we first found it in the .space zone file, already registered
- Registered
- 2025-12-18 · Porkbun LLC
- Addresses
- 107.174.66.136 · United States · AS36352 AS-COLOCROSSING - HostPapa · ColoCrossing (shared hosting)
- ColoCrossing
- ColoCrossing (107.174.66.136): shared web hosting and domain registration. One address typically serves many customer sites.
- MX
- mail.mifrosoft.space
- Daily check
- Ended 2026-11-04 22:41 UTC
- migrosoft.spaceLookalike of microsoft.com · a changed characterNo address or mail server yet
DetailsHide details for migrosoft.space
- Domain
- migrosoft.space
- Spelling
- Spelled like microsoft.com with a changed character
- First found
- 2026-11-01 · the day we first found it in the .space zone file, already registered
- Registered
- 2025-12-18 · Porkbun LLC
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hotail.onlineLookalike of hotmail.com · a dropped letterMX present
DetailsHide details for hotail.online
- Domain
- hotail.online
- Spelling
- Spelled like hotmail.com with a dropped letter
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2025-12-18 · NameCheap, Inc.
- MX
- eforward1.registrar-servers.comeforward2.registrar-servers.comeforward3.registrar-servers.comeforward4.registrar-servers.comeforward5.registrar-servers.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- outlook.garden US · AS16509 · Amazon.com, Inc.2 addressesLookalike of outlook.com · the ending .gardenAmazon Web Services
DetailsHide details for outlook.garden
- Domain
- outlook.garden
- Spelling
- The name of outlook.com with the ending .garden
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Registered
- 2025-12-17 · Porkbun
- Addresses
- 207.207.210.107 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)207.207.210.229 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (207.207.210.107, 207.207.210.229): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- outlook.moi US · AS16509 · Amazon.com, Inc.2 addressesLookalike of outlook.com · the ending .moiAmazon Web Services
DetailsHide details for outlook.moi
- Domain
- outlook.moi
- Spelling
- The name of outlook.com with the ending .moi
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Registered
- 2025-12-17 · Porkbun LLC
- Addresses
- 207.207.210.107 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)207.207.210.229 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (207.207.210.107, 207.207.210.229): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hotmail.foo US · AS16509 · Amazon.com, Inc.2 addressesLookalike of hotmail.com · the ending .fooAmazon Web Services
DetailsHide details for hotmail.foo
- Domain
- hotmail.foo
- Spelling
- The name of hotmail.com with the ending .foo
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Registered
- 2025-12-17 · Porkbun LLC
- Addresses
- 207.207.210.107 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)207.207.210.229 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (207.207.210.107, 207.207.210.229): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hotmail.moi US · AS16509 · Amazon.com, Inc.2 addressesLookalike of hotmail.com · the ending .moiAmazon Web Services
DetailsHide details for hotmail.moi
- Domain
- hotmail.moi
- Spelling
- The name of hotmail.com with the ending .moi
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Registered
- 2025-12-17 · Porkbun LLC
- Addresses
- 207.207.210.107 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)207.207.210.229 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (207.207.210.107, 207.207.210.229): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- rnicrosoftonline.live US · AS13335 · Cloudflare, Inc.4 addressesLookalike of microsoftonline.com · similar-looking charactersCloudflare
DetailsHide details for rnicrosoftonline.live
- Domain
- rnicrosoftonline.live
- Spelling
- Spelled like microsoftonline.com with similar-looking characters
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2025-12-17 · Hosting Concepts B.V. d/b/a Registrar.eu
- Addresses
- 104.21.68.247 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.200.131 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3030::ac43:c8832606:4700:3032::6815:44f7
- Cloudflare
- Cloudflare (104.21.68.247, 172.67.200.131): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- recover-outlook.live US · AS13335 · Cloudflare, Inc.4 addressesLookalike of microsoft.com · the name with an added wordCloudflare
DetailsHide details for recover-outlook.live
- Domain
- recover-outlook.live
- Spelling
- The name of microsoft.com with an added word
- First found
- 2026-11-01 · the day we first found it in the .live zone file, already registered
- Registered
- 2025-12-16 · Global Domain Group LLC
- Addresses
- 104.21.74.123 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.158.93 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3037::6815:4a7b2606:4700:3037::ac43:9e5d
- Cloudflare
- Cloudflare (104.21.74.123, 172.67.158.93): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- sharedpoint.cloud US · AS16509 · Amazon.com, Inc.2 addressesLookalike of microsoft.com · an added characterRegistry lookup queuedAmazon Web Services
DetailsHide details for sharedpoint.cloud
- Domain
- sharedpoint.cloud
- Spelling
- Spelled like microsoft.com with an added character
- First found
- 2026-11-01 · the day we first found it in the .cloud zone file, already registered
- Registered
- 2025-12-16 · GoDaddy
- Addresses
- 13.248.213.45 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)76.223.67.189 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (13.248.213.45, 76.223.67.189): a cloud provider. It rents servers and addresses to its customers.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- sharedpoint.email US · AS16509 · Amazon.com, Inc.2 addressesLookalike of microsoft.com · an added characterRegistry lookup queuedAmazon Web Services
DetailsHide details for sharedpoint.email
- Domain
- sharedpoint.email
- Spelling
- Spelled like microsoft.com with an added character
- First found
- 2026-11-01 · the day we first found it in the .email zone file, already registered
- Registered
- 2025-12-16 · GoDaddy.com, LLC
- Addresses
- 13.248.213.45 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)76.223.67.189 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (13.248.213.45, 76.223.67.189): a cloud provider. It rents servers and addresses to its customers.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hotmaill.site US · AS13335 · Cloudflare, Inc.4 addressesLookalike of hotmail.com · a doubled letterRegistry lookup queuedCloudflareMX present
DetailsHide details for hotmaill.site
- Domain
- hotmaill.site
- Spelling
- Spelled like hotmail.com with a doubled letter
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2025-12-16 · GoDaddy.com, LLC
- Addresses
- 104.21.45.81 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.212.62 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3030::ac43:d43e2606:4700:3034::6815:2d51
- Cloudflare
- Cloudflare (104.21.45.81, 172.67.212.62): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- MX
- route3.mx.cloudflare.netroute1.mx.cloudflare.netroute2.mx.cloudflare.net
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hotmaii.netLookalike of hotmail.com · similar-looking charactersMX present
DetailsHide details for hotmaii.net
- Domain
- hotmaii.net
- Spelling
- Spelled like hotmail.com with similar-looking characters
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2025-12-15 · Porkbun LLC
- MX
- route1.mx.cloudflare.netroute3.mx.cloudflare.netroute2.mx.cloudflare.net
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsof.co AU · AS133618 · Trellian Pty. LimitedLookalike of microsoft.com · a dropped letterParking page · Above.comMX present
DetailsHide details for microsof.co
- Domain
- microsof.co
- Spelling
- Spelled like microsoft.com with a dropped letter
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2025-12-13 · Dynadot Inc
- Addresses
- 103.224.182.244 · Australia · AS133618 TRELLIAN-AS-AP - Trellian Pty. Limited · Trellian / Above.com (parking page)
- Parking page · Above.com
- The registry delegates microsof.co to Above.com’s nameservers, which answer for it. Above.com: a parking service. It answers for names that are typically for sale or unused. Trellian / Above.com (103.224.182.244): a parking service. It answers for names that are typically for sale or unused.
- MX
- park-mx.above.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsofts.xyz US · AS22612 · Namecheap, Inc.Lookalike of microsoft.com · an added characterRegistry lookup queuedNamecheap
DetailsHide details for microsofts.xyz
- Domain
- microsofts.xyz
- Spelling
- Spelled like microsoft.com with an added character
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-12 · GoDaddy.com, LLC
- Addresses
- 159.198.44.210 · United States · AS22612 NAMECHEAP-NET - Namecheap, Inc. · Namecheap (shared hosting)
- Namecheap
- Namecheap (159.198.44.210): shared web hosting and domain registration. One address typically serves many customer sites.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- out1ook.store CN · AS45090 · Shenzhen Tencent Computer S…Lookalike of outlook.com · similar-looking characters
DetailsHide details for out1ook.store
- Domain
- out1ook.store
- Spelling
- Spelled like outlook.com with similar-looking characters
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2025-12-10 · Chengdu West Dimension Digital Technology Co., Ltd.
- Addresses
- 211.159.175.233 · China · AS45090 TENCENT-NET-AP - Shenzhen Tencent Computer Systems Company Limited
- Daily check
- Ended 2026-11-04 22:41 UTC
- rnicrosoft365.live US · AS16509 · Amazon.com, Inc.2 addressesLookalike of microsoft365.com · similar-looking charactersAmazon Web Services
DetailsHide details for rnicrosoft365.live
- Domain
- rnicrosoft365.live
- Spelling
- Spelled like microsoft365.com with similar-looking characters
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2025-12-10 · Porkbun LLC
- Addresses
- 207.207.210.107 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)207.207.210.229 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (207.207.210.107, 207.207.210.229): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ooffice365.com AU · AS133618 · Trellian Pty. LimitedLookalike of office365.com · a doubled letterParking page · Above.comMX present
DetailsHide details for ooffice365.com
- Domain
- ooffice365.com
- Spelling
- Spelled like office365.com with a doubled letter
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2025-12-09 · Spaceship, Inc.
- Addresses
- 103.224.182.244 · Australia · AS133618 TRELLIAN-AS-AP - Trellian Pty. Limited · Trellian / Above.com (parking page)
- Parking page · Above.com
- The registry delegates ooffice365.com to Above.com’s nameservers, which answer for it. Above.com: a parking service. It answers for names that are typically for sale or unused. Trellian / Above.com (103.224.182.244): a parking service. It answers for names that are typically for sale or unused.
- MX
- park-mx.above.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- hot-mail.pro RU · AS197695 · AS-REGRU "Domain names regi…Lookalike of microsoft.com · an added hyphenMX present
DetailsHide details for hot-mail.pro
- Domain
- hot-mail.pro
- Spelling
- Spelled like microsoft.com with an added hyphen
- First found
- 2026-11-01 · the day we first found it in the .pro zone file, already registered
- Registered
- 2025-12-08 · Registrar of Domain Names REG.RU LLC
- Addresses
- 194.58.112.174 · Russia · AS197695 AS-REGRU "Domain names registrar REG.RU", Ltd
- MX
- mxs1.reg.rumxs2.reg.ru
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-security.live US · AS16509 · Amazon.com, Inc.2 addressesLookalike of microsoft.com · the name with the word “security”Registry lookup queuedAmazon Web Services
DetailsHide details for microsoft-security.live
- Domain
- microsoft-security.live
- Spelling
- The name of microsoft.com with the word “security”
- First found
- 2026-11-01 · the day we first found it in the .live zone file, already registered
- Registered
- 2025-12-08 · GoDaddy.com, LLC
- Addresses
- 13.248.243.5 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)76.223.105.230 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (13.248.243.5, 76.223.105.230): a cloud provider. It rents servers and addresses to its customers.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoftonilne.coLookalike of microsoftonline.com · two letters swappedNo address or mail server yet
DetailsHide details for microsoftonilne.co
- Domain
- microsoftonilne.co
- Spelling
- Spelled like microsoftonline.com with two letters swapped
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2025-12-08 · Cloudflare, Inc.
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- mixrosoft365.com AU · AS133618 · Trellian Pty. LimitedLookalike of microsoft365.com · a letter from a neighbouring keyParking page · Above.comMX present
DetailsHide details for mixrosoft365.com
- Domain
- mixrosoft365.com
- Spelling
- Spelled like microsoft365.com with a letter from a neighbouring key
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2025-12-08 · Sav.com, LLC - 18
- Addresses
- 103.224.182.244 · Australia · AS133618 TRELLIAN-AS-AP - Trellian Pty. Limited · Trellian / Above.com (parking page)
- Parking page · Above.com
- The registry delegates mixrosoft365.com to Above.com’s nameservers, which answer for it. Above.com: a parking service. It answers for names that are typically for sale or unused. Trellian / Above.com (103.224.182.244): a parking service. It answers for names that are typically for sale or unused.
- MX
- park-mx.above.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsofl.cloud FR · AS16276 · OVH OVH SASLookalike of microsoft.com · a changed characterOVHMX present
DetailsHide details for microsofl.cloud
- Domain
- microsofl.cloud
- Spelling
- Spelled like microsoft.com with a changed character
- First found
- 2026-11-01 · the day we first found it in the .cloud zone file, already registered
- Registered
- 2025-12-07 · OVH sas
- Addresses
- 213.186.33.5 · France · AS16276 OVH OVH SAS · OVH (cloud provider)
- OVH
- OVH (213.186.33.5): a cloud provider. It rents servers and addresses to its customers.
- MX
- mx1.mail.ovh.netmx2.mail.ovh.netmx3.mail.ovh.net
- Daily check
- Ended 2026-11-04 22:41 UTC
- outlook.com.lc GB · AS207957 · ServHost-AS SERV.HOST GROUP…Lookalike of outlook.com · the ending .com.lcMX present
DetailsHide details for outlook.com.lc
- Domain
- outlook.com.lc
- Spelling
- The name of outlook.com with the ending .com.lc
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Registered
- 2025-12-04 · Dynadot Inc
- Addresses
- 91.196.34.10 · United Kingdom · AS207957 ServHost-AS SERV.HOST GROUP LTD
- MX
- mail.firstmail.co
- Daily check
- Ended 2026-11-04 22:41 UTC
- outlook.org.ua UA · AS200000 · Ukraine-AS Hosting Ukraine …Lookalike of outlook.com · the ending .org.uaMX present
DetailsHide details for outlook.org.ua
- Domain
- outlook.org.ua
- Spelling
- The name of outlook.com with the ending .org.ua
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Registered
- 2025-12-03 · Hosting Ukraine LLC
- Addresses
- 91.206.200.91 · Ukraine · AS200000 Ukraine-AS Hosting Ukraine LTD
- MX
- outlook-org-ua.mail.protection.outlook.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- milcrosoft.cyou US · AS13335 · Cloudflare, Inc.4 addressesLookalike of microsoft.com · an added characterCloudflare
DetailsHide details for milcrosoft.cyou
- Domain
- milcrosoft.cyou
- Spelling
- Spelled like microsoft.com with an added character
- First found
- 2026-11-01 · the day we first found it in the .cyou zone file, already registered
- Registered
- 2025-12-02 · Web Commerce Communications Limited dba WebNic.cc
- Addresses
- 104.21.74.200 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.206.57 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3031::6815:4ac82606:4700:3034::ac43:ce39
- Cloudflare
- Cloudflare (104.21.74.200, 172.67.206.57): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- mincrosoft.cfd US · AS13335 · Cloudflare, Inc.4 addressesLookalike of microsoft.com · an added characterCloudflare
DetailsHide details for mincrosoft.cfd
- Domain
- mincrosoft.cfd
- Spelling
- Spelled like microsoft.com with an added character
- First found
- 2026-11-01 · the day we first found it in the .cfd zone file, already registered
- Registered
- 2025-12-02 · Web Commerce Communications Limited dba WebNic.cc
- Addresses
- 104.21.75.43 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.213.82 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3035::6815:4b2b2606:4700:3037::ac43:d552
- Cloudflare
- Cloudflare (104.21.75.43, 172.67.213.82): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-refund.info US · AS13335 · Cloudflare, Inc.4 addressesLookalike of microsoft.com · the name with the word “refund”Cloudflare
DetailsHide details for microsoft-refund.info
- Domain
- microsoft-refund.info
- Spelling
- The name of microsoft.com with the word “refund”
- First found
- 2026-11-01 · the day we first found it in the .info zone file, already registered
- Registered
- 2025-12-01 · PDR Ltd. d/b/a PublicDomainRegistry.com
- Addresses
- 104.21.67.83 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.218.170 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3033::6815:43532606:4700:3035::ac43:daaa
- Cloudflare
- Cloudflare (104.21.67.83, 172.67.218.170): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- mircosoft.store US · AS16509 · Amazon.com, Inc.2 addressesLookalike of microsoft.com · two letters swappedRegistry lookup queuedParking page · Afternic
DetailsHide details for mircosoft.store
- Domain
- mircosoft.store
- Spelling
- Spelled like microsoft.com with two letters swapped
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2025-11-30 · GoDaddy.com, LLC
- Addresses
- 13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
- Parking page · Afternic
- The registry delegates mircosoft.store to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- miscrosoft.infoLookalike of microsoft.com · an added characterRegistry lookup queued
DetailsHide details for miscrosoft.info
- Domain
- miscrosoft.info
- Spelling
- Spelled like microsoft.com with an added character
- First found
- 2026-11-01 · the day we first found it in the .info zone file, already registered
- Registered
- 2025-11-28 · GoDaddy.com, LLC
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- miscrosoft.proLookalike of microsoft.com · an added characterRegistry lookup queued
DetailsHide details for miscrosoft.pro
- Domain
- miscrosoft.pro
- Spelling
- Spelled like microsoft.com with an added character
- First found
- 2026-11-01 · the day we first found it in the .pro zone file, already registered
- Registered
- 2025-11-28 · GoDaddy.com, LLC
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- miscrosoft.storeLookalike of microsoft.com · an added characterRegistry lookup queued
DetailsHide details for miscrosoft.store
- Domain
- miscrosoft.store
- Spelling
- Spelled like microsoft.com with an added character
- First found
- 2026-11-01 · the day we first found it in the .store zone file, already registered
- Registered
- 2025-11-28 · GoDaddy.com, LLC
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- miscrosoft365.cloudLookalike of microsoft.com · an added characterRegistry lookup queued
DetailsHide details for miscrosoft365.cloud
- Domain
- miscrosoft365.cloud
- Spelling
- Spelled like microsoft.com with an added character
- First found
- 2026-11-01 · the day we first found it in the .cloud zone file, already registered
- Registered
- 2025-11-28 · GoDaddy
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- mikrosoft.xyz US · AS16509 · Amazon.com, Inc.2 addressesLookalike of microsoft.com · a changed characterParking page · Afternic
DetailsHide details for mikrosoft.xyz
- Domain
- mikrosoft.xyz
- Spelling
- Spelled like microsoft.com with a changed character
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-11-26 · NameSilo, LLC
- Addresses
- 13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
- Parking page · Afternic
- The registry delegates mikrosoft.xyz to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- mircosoft.xyz US · AS16509 · Amazon.com, Inc.2 addressesLookalike of microsoft.com · two letters swappedAmazon Web Services
DetailsHide details for mircosoft.xyz
- Domain
- mircosoft.xyz
- Spelling
- Spelled like microsoft.com with two letters swapped
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2025-11-26 · NameSilo, LLC
- Addresses
- 44.232.173.249 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)52.40.42.113 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (44.232.173.249, 52.40.42.113): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsofitonline.topLookalike of microsoft.com · an added characterNo address or mail server yet
DetailsHide details for microsofitonline.top
- Domain
- microsofitonline.top
- Spelling
- Spelled like microsoft.com with an added character
- First found
- 2026-11-03 · the day we first found it in the .top zone file, already registered
- Registered
- 2025-11-25 · NameSilo,LLC
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-services.app US · AS13335 · Cloudflare, Inc.4 addressesLookalike of microsoft.com · the name with the word “services”CloudflareMX present
DetailsHide details for microsoft-services.app
- Domain
- microsoft-services.app
- Spelling
- The name of microsoft.com with the word “services”
- First found
- 2026-11-01 · the day we first found it in the .app zone file, already registered
- Registered
- 2025-11-24 · CloudFlare, Inc.
- Addresses
- 104.21.79.2 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.139.56 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3034::ac43:8b382606:4700:3035::6815:4f02
- Cloudflare
- Cloudflare (104.21.79.2, 172.67.139.56): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- MX
- mail.microsoft-services.app
- Daily check
- Ended 2026-11-04 22:41 UTC
- outlook.casa US · AS16509 · Amazon.com, Inc.2 addressesLookalike of outlook.com · the ending .casaAmazon Web ServicesMX present
DetailsHide details for outlook.casa
- Domain
- outlook.casa
- Spelling
- The name of outlook.com with the ending .casa
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Registered
- 2025-11-24 · Spaceship, Inc.
- Addresses
- 44.232.173.249 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)52.40.42.113 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (44.232.173.249, 52.40.42.113): a cloud provider. It rents servers and addresses to its customers.
- MX
- mx1.efwd.spaceship.netmx2.efwd.spaceship.net
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsotfonline.coLookalike of microsoftonline.com · two letters swappedNo address or mail server yet
DetailsHide details for microsotfonline.co
- Domain
- microsotfonline.co
- Spelling
- Spelled like microsoftonline.com with two letters swapped
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2025-11-24 · Cloudflare, Inc.
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microshoft.store US · AS13335 · Cloudflare, Inc.2 addressesLookalike of microsoft.com · an added characterCloudflare
DetailsHide details for microshoft.store
- Domain
- microshoft.store
- Spelling
- Spelled like microsoft.com with an added character
- First found
- 2026-11-01 · the day we first found it in the .store zone file, already registered
- Registered
- 2025-11-21 · Namify Domains Inc
- Addresses
- 23.227.38.65 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2620:127:f00f:5::
- Cloudflare
- Cloudflare (23.227.38.65): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-updateservice.orgLookalike of microsoft.com · the name with the word “updateservice”No address or mail server yet
DetailsHide details for microsoft-updateservice.org
- Domain
- microsoft-updateservice.org
- Spelling
- The name of microsoft.com with the word “updateservice”
- First found
- 2026-11-01 · the day we first found it in the .org zone file, already registered
- Registered
- 2025-11-21 · Cloudflare, Inc.
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hotmail.monsterLookalike of hotmail.com · the ending .monsterNo address or mail server yet
DetailsHide details for hotmail.monster
- Domain
- hotmail.monster
- Spelling
- The name of hotmail.com with the ending .monster
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Registered
- 2025-11-21 · Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microzoft.site IT · AS39729 · REGISTER-AS REGISTER S.P.A.Lookalike of microsoft.com · a letter from a neighbouring keyMX present
DetailsHide details for microzoft.site
- Domain
- microzoft.site
- Spelling
- Spelled like microsoft.com with a letter from a neighbouring key
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2025-11-20 · eNom, LLC
- Addresses
- 81.88.57.68 · Italy · AS39729 REGISTER-AS REGISTER S.P.A.
- MX
- mail-fr.securemail.pro
- Daily check
- Ended 2026-11-04 22:41 UTC
- outlook.ovh FR · AS16276 · OVH OVH SASLookalike of outlook.com · the ending .ovhOVHMX present
DetailsHide details for outlook.ovh
- Domain
- outlook.ovh
- Spelling
- The name of outlook.com with the ending .ovh
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Registered
- 2025-11-19 · OVH
- Addresses
- 213.186.33.5 · France · AS16276 OVH OVH SAS · OVH (cloud provider)
- OVH
- OVH (213.186.33.5): a cloud provider. It rents servers and addresses to its customers.
- MX
- mx4.mail.ovh.netmx3.mail.ovh.net
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsof.net ID · AS58487 · CV. Rumahweb Indonesia2 addressesLookalike of microsoft.com · a dropped letterMX present
DetailsHide details for microsof.net
- Domain
- microsof.net
- Spelling
- Spelled like microsoft.com with a dropped letter
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2025-11-19 · CV. Rumahweb Indonesia
- Addresses
- 103.247.10.177 · Indonesia · AS58487 CRI-AS-AP - CV. Rumahweb Indonesia2001:df0:27b:2::5:e264
- MX
- microsof.net
- Daily check
- Ended 2026-11-04 22:41 UTC
- hotmial.icu DE · AS47846 · SEDO-AS SEDO GmbHLookalike of hotmail.com · two letters swappedParking page · SedoMX present
DetailsHide details for hotmial.icu
- Domain
- hotmial.icu
- Spelling
- Spelled like hotmail.com with two letters swapped
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2025-11-18 · NameSilo, LLC
- Addresses
- 91.195.240.123 · Germany · AS47846 SEDO-AS SEDO GmbH · Sedo (parking page)
- Parking page · Sedo
- Sedo (91.195.240.123): a parking service. It answers for names that are typically for sale or unused.
- MX
- mx1.titan.emailmx2.titan.email
- Daily check
- Ended 2026-11-04 22:41 UTC
- microssft.xyz US · AS16509 · Amazon.com, Inc.2 addressesLookalike of microsoft.com · a changed characterParking page · Afternic
DetailsHide details for microssft.xyz
- Domain
- microssft.xyz
- Spelling
- Spelled like microsoft.com with a changed character
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-11-17 · GMO Internet Group, Inc. d/b/a Onamae.com
- Addresses
- 13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
- Parking page · Afternic
- The registry delegates microssft.xyz to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoftonline.exchangeLookalike of microsoftonline.com · the ending .exchangeNo address or mail server yet
DetailsHide details for microsoftonline.exchange
- Domain
- microsoftonline.exchange
- Spelling
- The name of microsoftonline.com with the ending .exchange
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2025-11-14 · OVH SAS
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- micros0ft.top CN · AS45102 · Alibaba (US) Technology Co.…Lookalike of microsoft.com · similar-looking charactersAlibaba CloudMX present
DetailsHide details for micros0ft.top
- Domain
- micros0ft.top
- Spelling
- Spelled like microsoft.com with similar-looking characters
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2025-11-12 · 北京新网数码信息技术有限公司
- Addresses
- 47.241.53.26 · China · AS45102 ALIBABA-CN-NET - Alibaba (US) Technology Co., Ltd. · Alibaba Cloud (cloud provider)
- Alibaba Cloud
- Alibaba Cloud (47.241.53.26): a cloud provider. It rents servers and addresses to its customers.
- MX
- ai.phish365.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoftoniine.org US · AS16509 · Amazon.com, Inc.2 addressesLookalike of microsoftonline.com · similar-looking charactersRegistry lookup queuedAmazon Web Services
DetailsHide details for microsoftoniine.org
- Domain
- microsoftoniine.org
- Spelling
- Spelled like microsoftonline.com with similar-looking characters
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2025-11-10 · GoDaddy.com, LLC
- Addresses
- 13.248.213.45 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)76.223.67.189 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (13.248.213.45, 76.223.67.189): a cloud provider. It rents servers and addresses to its customers.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- mlcrosoft.movLookalike of microsoft.com · similar-looking charactersNo address or mail server yet
DetailsHide details for mlcrosoft.mov
- Domain
- mlcrosoft.mov
- Spelling
- Spelled like microsoft.com with similar-looking characters
- First found
- 2026-11-01 · the day we first found it in the .mov zone file, already registered
- Registered
- 2025-11-08 · Tucows Domains Inc
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- onedrive.ai US · AS14618 · Amazon.com, Inc.Lookalike of onedrive.com · the ending .aiParking page · Atom
DetailsHide details for onedrive.ai
- Domain
- onedrive.ai
- Spelling
- The name of onedrive.com with the ending .ai
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Registered
- 2025-11-08 · NameCheap, Inc.
- Addresses
- 52.20.84.62 · United States · AS14618 AMAZON-AES - Amazon.com, Inc. · Atom (parking page)
- Parking page · Atom
- The registry delegates onedrive.ai to Atom’s nameservers, which answer for it. Atom (52.20.84.62): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsnft.xyz CY · AS47583 · AS-HOSTINGER Hostinger Inte…4 addressesLookalike of microsoft.com · a changed characterHostinger CDNMX present
DetailsHide details for microsnft.xyz
- Domain
- microsnft.xyz
- Spelling
- Spelled like microsoft.com with a changed character
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-11-06 · HOSTINGER operations, UAB
- Addresses
- 191.96.144.172 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger CDN (cdn)212.1.212.253 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger CDN (cdn)2a02:4780:21:8551:b1ec:4e0b:66b6:c2a02:4780:22:a6cd:a0f5:e9e5:658c:419
- Hostinger CDN
- Hostinger CDN (191.96.144.172, 212.1.212.253): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- MX
- mx1.hostinger.commx2.hostinger.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- onedrive.cam US · AS13335 · Cloudflare, Inc.4 addressesLookalike of onedrive.com · the ending .camCloudflare
DetailsHide details for onedrive.cam
- Domain
- onedrive.cam
- Spelling
- The name of onedrive.com with the ending .cam
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Registered
- 2025-11-06 · Spaceship, Inc.
- Addresses
- 104.21.77.89 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.205.250 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3035::6815:4d592606:4700:3037::ac43:cdfa
- Cloudflare
- Cloudflare (104.21.77.89, 172.67.205.250): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-support.help US · AS31898 · Oracle CorporationLookalike of microsoft.com · the name with the word “support”Oracle Cloud
DetailsHide details for microsoft-support.help
- Domain
- microsoft-support.help
- Spelling
- The name of microsoft.com with the word “support”
- First found
- 2026-11-01 · the day we first found it in the .help zone file, already registered
- Registered
- 2025-11-05 · Porkbun LLC
- Addresses
- 141.147.67.113 · United States · AS31898 ORACLE-BMC-31898 - Oracle Corporation · Oracle Cloud (cloud provider)
- Oracle Cloud
- Oracle Cloud (141.147.67.113): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- office365.pics US · AS16509 · Amazon.com, Inc.2 addressesLookalike of office365.com · the ending .picsAmazon Web Services
DetailsHide details for office365.pics
- Domain
- office365.pics
- Spelling
- The name of office365.com with the ending .pics
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Registered
- 2025-11-04 · Key-Systems, LLC
- Addresses
- 3.33.130.190 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)15.197.148.33 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (3.33.130.190, 15.197.148.33): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- sharepoints.siteLookalike of microsoft.com · an added characterMX present
DetailsHide details for sharepoints.site
- Domain
- sharepoints.site
- Spelling
- Spelled like microsoft.com with an added character
- First found
- 2026-11-01 · the day we first found it in the .site zone file, already registered
- Registered
- 2025-11-03 · Cloudflare, Inc.
- MX
- sharepoints-site.mail.protection.outlook.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- rnicrosoftonline.cfd AU · AS154653 · ParkLogic Pty LtdLookalike of microsoftonline.com · similar-looking charactersParking page · ParkLogicMX present
DetailsHide details for rnicrosoftonline.cfd
- Domain
- rnicrosoftonline.cfd
- Spelling
- Spelled like microsoftonline.com with similar-looking characters
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2025-11-02 · NameSilo, LLC
- Addresses
- 162.4.84.247 · Australia · AS154653 PARKLOGICPTYLTD-AS-AP - ParkLogic Pty Ltd · ParkLogic (parking page)
- Parking page · ParkLogic
- The registry delegates rnicrosoftonline.cfd to ParkLogic’s nameservers, which answer for it. ParkLogic (162.4.84.247): a parking service. It answers for names that are typically for sale or unused.
- MX
- mail.eye-mail.net
- Daily check
- Ended 2026-11-04 22:41 UTC
- rnicrosoftonline.top AU · AS154653 · ParkLogic Pty LtdLookalike of microsoftonline.com · similar-looking charactersParking page · ParkLogicMX present
DetailsHide details for rnicrosoftonline.top
- Domain
- rnicrosoftonline.top
- Spelling
- Spelled like microsoftonline.com with similar-looking characters
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2025-11-02 · NameSilo,LLC
- Addresses
- 162.4.84.247 · Australia · AS154653 PARKLOGICPTYLTD-AS-AP - ParkLogic Pty Ltd · ParkLogic (parking page)
- Parking page · ParkLogic
- The registry delegates rnicrosoftonline.top to ParkLogic’s nameservers, which answer for it. ParkLogic (162.4.84.247): a parking service. It answers for names that are typically for sale or unused.
- MX
- mail.eye-mail.net
- Daily check
- Ended 2026-11-04 22:41 UTC
- hotmaill.online US · AS16509 · Amazon.com, Inc.2 addressesLookalike of hotmail.com · a doubled letterRegistry lookup queuedAmazon Web Services
DetailsHide details for hotmaill.online
- Domain
- hotmaill.online
- Spelling
- Spelled like hotmail.com with a doubled letter
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2025-11-01 · GoDaddy.com, LLC
- Addresses
- 3.33.251.168 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)15.197.225.128 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (3.33.251.168, 15.197.225.128): a cloud provider. It rents servers and addresses to its customers.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsfot.vip AU · AS154653 · ParkLogic Pty LtdLookalike of microsoft.com · two letters swappedParking page · ParkLogicMX present
DetailsHide details for microsfot.vip
- Domain
- microsfot.vip
- Spelling
- Spelled like microsoft.com with two letters swapped
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2025-10-31 · NameSilo, LLC
- Addresses
- 162.4.84.247 · Australia · AS154653 PARKLOGICPTYLTD-AS-AP - ParkLogic Pty Ltd · ParkLogic (parking page)
- Parking page · ParkLogic
- The registry delegates microsfot.vip to ParkLogic’s nameservers, which answer for it. ParkLogic (162.4.84.247): a parking service. It answers for names that are typically for sale or unused.
- MX
- mail.eye-mail.net
- Daily check
- Ended 2026-11-04 22:41 UTC
- 0nedrive.wtf US · AS13335 · Cloudflare, Inc.4 addressesLookalike of onedrive.com · similar-looking charactersCloudflare
DetailsHide details for 0nedrive.wtf
- Domain
- 0nedrive.wtf
- Spelling
- Spelled like onedrive.com with similar-looking characters
- First found
- 2026-11-01 · the day we first found it in the .wtf zone file, already registered
- Registered
- 2025-10-30 · Spaceship, Inc.
- Addresses
- 104.21.48.237 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.188.92 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3031::ac43:bc5c2606:4700:3036::6815:30ed
- Cloudflare
- Cloudflare (104.21.48.237, 172.67.188.92): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsuft.org AU · AS154653 · ParkLogic Pty LtdLookalike of microsoft.com · a changed characterParking page · ParkLogicMX present
DetailsHide details for microsuft.org
- Domain
- microsuft.org
- Spelling
- Spelled like microsoft.com with a changed character
- First found
- 2026-11-01 · the day we first found it in the .org zone file, already registered
- Registered
- 2025-10-30 · NameSilo, LLC
- Addresses
- 162.4.84.247 · Australia · AS154653 PARKLOGICPTYLTD-AS-AP - ParkLogic Pty Ltd · ParkLogic (parking page)
- Parking page · ParkLogic
- The registry delegates microsuft.org to ParkLogic’s nameservers, which answer for it. ParkLogic (162.4.84.247): a parking service. It answers for names that are typically for sale or unused.
- MX
- mail.eye-mail.net
- Daily check
- Ended 2026-11-04 22:41 UTC
- m1crosoft.cloud DE · AS24940 · HETZNER-AS Hetzner Online G…Lookalike of microsoft.com · similar-looking charactersHetznerMX present
DetailsHide details for m1crosoft.cloud
- Domain
- m1crosoft.cloud
- Spelling
- Spelled like microsoft.com with similar-looking characters
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2025-10-30 · Key-Systems, LLC
- Addresses
- 116.203.46.102 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (116.203.46.102): a cloud provider. It rents servers and addresses to its customers.
- MX
- mail.m1crosoft.cloud
- Daily check
- Ended 2026-11-04 22:41 UTC
- rnicrosoft365.cloud CY · AS47583 · AS-HOSTINGER Hostinger Inte…Lookalike of microsoft365.com · similar-looking charactersParking page · Hostinger expired-domain page
DetailsHide details for rnicrosoft365.cloud
- Domain
- rnicrosoft365.cloud
- Spelling
- Spelled like microsoft365.com with similar-looking characters
- First found
- 2026-11-01 · the day we first found it in the .cloud zone file, already registered
- Registered
- 2025-10-28 · HOSTINGER operations, UAB
- Addresses
- 2.57.91.92 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger expired-domain page (parking page)
- Parking page · Hostinger expired-domain page
- The registry delegates rnicrosoft365.cloud to Hostinger expired-domain page’s nameservers, which answer for it. Hostinger expired-domain page (2.57.91.92): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hotmail.bot US · AS16509 · Amazon.com, Inc.Lookalike of hotmail.com · the ending .botAmazon Web Services
DetailsHide details for hotmail.bot
- Domain
- hotmail.bot
- Spelling
- The name of hotmail.com with the ending .bot
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Registered
- 2025-10-28 · 101domain GRS Limited
- Addresses
- 52.60.87.163 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (52.60.87.163): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- outlook.box AU · AS154653 · ParkLogic Pty LtdLookalike of outlook.com · the ending .boxParking page · ParkLogicMX present
DetailsHide details for outlook.box
- Domain
- outlook.box
- Spelling
- The name of outlook.com with the ending .box
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Registered
- 2025-10-27 · NameSilo, LLC
- Addresses
- 162.4.84.247 · Australia · AS154653 PARKLOGICPTYLTD-AS-AP - ParkLogic Pty Ltd · ParkLogic (parking page)
- Parking page · ParkLogic
- The registry delegates outlook.box to ParkLogic’s nameservers, which answer for it. ParkLogic (162.4.84.247): a parking service. It answers for names that are typically for sale or unused.
- MX
- mail.eye-mail.net
- Daily check
- Ended 2026-11-04 22:41 UTC
- onedrive.si SI · AS5603 · SIOL-NET Telekom Slovenije,…Lookalike of onedrive.com · the ending .si
DetailsHide details for onedrive.si
- Domain
- onedrive.si
- Spelling
- The name of onedrive.com with the ending .si
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Registered
- 2025-10-24 · AVANT.SI d.o.o.
- Addresses
- 193.95.228.92 · Slovenia · AS5603 SIOL-NET Telekom Slovenije, d.d.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoftsecurity.click AU · AS154653 · ParkLogic Pty LtdLookalike of microsoft.com · the name with an added wordParking page · ParkLogicMX present
DetailsHide details for microsoftsecurity.click
- Domain
- microsoftsecurity.click
- Spelling
- The name of microsoft.com with an added word
- First found
- 2026-11-01 · the day we first found it in the .click zone file, already registered
- Registered
- 2025-10-23 · NameSilo, LLC
- Addresses
- 162.4.84.247 · Australia · AS154653 PARKLOGICPTYLTD-AS-AP - ParkLogic Pty Ltd · ParkLogic (parking page)
- Parking page · ParkLogic
- The registry delegates microsoftsecurity.click to ParkLogic’s nameservers, which answer for it. ParkLogic (162.4.84.247): a parking service. It answers for names that are typically for sale or unused.
- MX
- mail.eye-mail.net
- Daily check
- Ended 2026-11-04 22:41 UTC
- rnicrosoftonline.co US · AS13335 · Cloudflare, Inc.4 addressesLookalike of microsoftonline.com · similar-looking charactersCloudflare
DetailsHide details for rnicrosoftonline.co
- Domain
- rnicrosoftonline.co
- Spelling
- Spelled like microsoftonline.com with similar-looking characters
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2025-10-23 · Ascio Technologies, Inc. Danmark - Filial af Ascio technologies, Inc. USA
- Addresses
- 104.21.67.177 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.179.4 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3033::ac43:b3042606:4700:3035::6815:43b1
- Cloudflare
- Cloudflare (104.21.67.177, 172.67.179.4): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- sharepoints.dev SG · AS63949 · Akamai Connected Cloud3 addressesLookalike of microsoft.com · an added characterAkamai LinodeParking page · ParkLogic
DetailsHide details for sharepoints.dev
- Domain
- sharepoints.dev
- Spelling
- Spelled like microsoft.com with an added character
- First found
- 2026-11-01 · the day we first found it in the .dev zone file, already registered
- Registered
- 2025-10-22 · Hosting Concepts B.V. d/b/a Registrar.eu
- Addresses
- 172.232.29.171 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)172.234.220.168 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)172.239.193.234 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
- Akamai Linode
- Akamai Linode (172.232.29.171, 172.234.220.168, 172.239.193.234): a cloud provider. It rents servers and addresses to its customers.
- Parking page · ParkLogic
- The registry delegates sharepoints.dev to ParkLogic’s nameservers, which answer for it. ParkLogic: a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoftonilne.info US · AS14061 · DigitalOcean, LLC2 addressesLookalike of microsoftonline.com · two letters swappedDigitalOcean
DetailsHide details for microsoftonilne.info
- Domain
- microsoftonilne.info
- Spelling
- Spelled like microsoftonline.com with two letters swapped
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2025-10-22 · Nicnames, Inc.
- Addresses
- 159.203.143.218 · United States · AS14061 DIGITALOCEAN-ASN - DigitalOcean, LLC · DigitalOcean (cloud provider)2604:a880:800:14:0:1:225d:c000
- DigitalOcean
- DigitalOcean (159.203.143.218): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsft.dev US · AS16509 · Amazon.com, Inc.2 addressesLookalike of microsoft.com · a dropped letterAmazon Web Services
DetailsHide details for microsft.dev
- Domain
- microsft.dev
- Spelling
- Spelled like microsoft.com with a dropped letter
- First found
- 2026-11-01 · the day we first found it in the .dev zone file, already registered
- Registered
- 2025-10-20 · Porkbun LLC
- Addresses
- 207.207.210.107 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)207.207.210.229 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (207.207.210.107, 207.207.210.229): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- rnicrosoft.blog US · AS16509 · Amazon.com, Inc.2 addressesLookalike of microsoft.com · similar-looking charactersAmazon Web Services
DetailsHide details for rnicrosoft.blog
- Domain
- rnicrosoft.blog
- Spelling
- Spelled like microsoft.com with similar-looking characters
- First found
- 2026-11-01 · the day we first found it in the .blog zone file, already registered
- Registered
- 2025-10-18 · Go Daddy, LLC
- Addresses
- 3.33.130.190 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)15.197.148.33 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (3.33.130.190, 15.197.148.33): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoftoniine.live US · AS16509 · Amazon.com, Inc.3 addressesLookalike of microsoftonline.com · similar-looking charactersRegistry lookup queuedAmazon Web Services +1
DetailsHide details for microsoftoniine.live
- Domain
- microsoftoniine.live
- Spelling
- Spelled like microsoftonline.com with similar-looking characters
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2025-10-17 · GoDaddy.com, LLC
- Addresses
- 3.33.130.190 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)15.197.148.33 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)164.92.249.216 · United States · AS14061 DIGITALOCEAN-ASN - DigitalOcean, LLC · DigitalOcean (cloud provider)
- Amazon Web Services +1
- Amazon Web Services (3.33.130.190, 15.197.148.33): a cloud provider. It rents servers and addresses to its customers. DigitalOcean (164.92.249.216): a cloud provider. It rents servers and addresses to its customers.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- outlook.onl AU · AS154653 · ParkLogic Pty LtdLookalike of outlook.com · the ending .onlParking page · ParkLogicMX present
DetailsHide details for outlook.onl
- Domain
- outlook.onl
- Spelling
- The name of outlook.com with the ending .onl
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Registered
- 2025-10-16 · NameSilo, LLC
- Addresses
- 162.4.84.247 · Australia · AS154653 PARKLOGICPTYLTD-AS-AP - ParkLogic Pty Ltd · ParkLogic (parking page)
- Parking page · ParkLogic
- The registry delegates outlook.onl to ParkLogic’s nameservers, which answer for it. ParkLogic (162.4.84.247): a parking service. It answers for names that are typically for sale or unused.
- MX
- mail.eye-mail.net
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsofts.help AU · AS154653 · ParkLogic Pty LtdLookalike of microsoft.com · an added characterParking page · ParkLogicMX present
DetailsHide details for microsofts.help
- Domain
- microsofts.help
- Spelling
- Spelled like microsoft.com with an added character
- First found
- 2026-11-01 · the day we first found it in the .help zone file, already registered
- Registered
- 2025-10-15 · NameSilo, LLC
- Addresses
- 162.4.84.247 · Australia · AS154653 PARKLOGICPTYLTD-AS-AP - ParkLogic Pty Ltd · ParkLogic (parking page)
- Parking page · ParkLogic
- The registry delegates microsofts.help to ParkLogic’s nameservers, which answer for it. ParkLogic (162.4.84.247): a parking service. It answers for names that are typically for sale or unused.
- MX
- mail.eye-mail.net
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoftomline.com AU · AS133618 · Trellian Pty. LimitedLookalike of microsoftonline.com · a letter from a neighbouring keyParking page · Above.comMX present
DetailsHide details for microsoftomline.com
- Domain
- microsoftomline.com
- Spelling
- Spelled like microsoftonline.com with a letter from a neighbouring key
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2025-10-12 · Sav.com, LLC
- Addresses
- 103.224.182.252 · Australia · AS133618 TRELLIAN-AS-AP - Trellian Pty. Limited · Trellian / Above.com (parking page)
- Parking page · Above.com
- The registry delegates microsoftomline.com to Above.com’s nameservers, which answer for it. Above.com: a parking service. It answers for names that are typically for sale or unused. Trellian / Above.com (103.224.182.252): a parking service. It answers for names that are typically for sale or unused.
- MX
- park-mx.above.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoftonlime.com AU · AS133618 · Trellian Pty. LimitedLookalike of microsoftonline.com · a letter from a neighbouring keyPhishDestroy CommunitySuspicious · mediumParking page · Above.comMX present
DetailsHide details for microsoftonlime.com
- Domain
- microsoftonlime.com
- Spelling
- Spelled like microsoftonline.com with a letter from a neighbouring key
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2025-10-12 · TurnCommerce, Inc. DBA NameBright.com
- Suspicious
- PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated medium: no address yet, or a parking or holding signal.
- PhishDestroy Community
- PhishDestroy’s community list includes passsword.microsoftonlime.com, a name under this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- Addresses
- 103.224.182.252 · Australia · AS133618 TRELLIAN-AS-AP - Trellian Pty. Limited · Trellian / Above.com (parking page)
- Parking page · Above.com
- The registry delegates microsoftonlime.com to Above.com’s nameservers, which answer for it. Above.com: a parking service. It answers for names that are typically for sale or unused. Trellian / Above.com (103.224.182.252): a parking service. It answers for names that are typically for sale or unused.
- MX
- park-mx.above.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoftoneline.cloud FR · AS16276 · OVH OVH SASLookalike of microsoft.com · an added characterOVHMX present
DetailsHide details for microsoftoneline.cloud
- Domain
- microsoftoneline.cloud
- Spelling
- Spelled like microsoft.com with an added character
- First found
- 2026-11-01 · the day we first found it in the .cloud zone file, already registered
- Registered
- 2025-10-10 · OVH sas
- Addresses
- 213.186.33.5 · France · AS16276 OVH OVH SAS · OVH (cloud provider)
- OVH
- OVH (213.186.33.5): a cloud provider. It rents servers and addresses to its customers.
- MX
- mx1.hostinger.commx2.hostinger.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- 0utlook.app US · AS16509 · Amazon.com, Inc.2 addressesLookalike of outlook.com · similar-looking charactersRegistry lookup queuedAmazon Web Services
DetailsHide details for 0utlook.app
- Domain
- 0utlook.app
- Spelling
- Spelled like outlook.com with similar-looking characters
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2025-10-08 · GoDaddy.com, LLC
- Addresses
- 13.248.243.5 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)76.223.105.230 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (13.248.243.5, 76.223.105.230): a cloud provider. It rents servers and addresses to its customers.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ms-office.app US · AS396982 · Google LLC2 addressesLookalike of microsoft.com · an added hyphenGoogle CloudMX present
DetailsHide details for ms-office.app
- Domain
- ms-office.app
- Spelling
- Spelled like microsoft.com with an added hyphen
- First found
- 2026-11-01 · the day we first found it in the .app zone file, already registered
- Registered
- 2025-10-07 · Gandi SAS
- Addresses
- 34.41.139.193 · United States · AS396982 GOOGLE-CLOUD-PLATFORM - Google LLC · Google Cloud (cloud provider)2600:1900:4001:96e:8000:1:e2f4:45ea
- Google Cloud
- Google Cloud (34.41.139.193): a cloud provider. It rents servers and addresses to its customers.
- MX
- mx1.csof.netmx2.csof.net
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsft.ca US · AS16509 · Amazon.com, Inc.2 addressesLookalike of microsoft.com · a dropped letterAmazon Web Services
DetailsHide details for microsft.ca
- Domain
- microsft.ca
- Spelling
- Spelled like microsoft.com with a dropped letter
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2025-10-06 · Go Get Canada Domain Registrar Ltd.
- Addresses
- 44.233.250.75 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)52.38.196.63 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (44.233.250.75, 52.38.196.63): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
Registered domains using the name
Domains from registry zone files (ICANN CZDS), checked daily like the lookalikes above. Each row says how it matches Microsoft's names. Resellers, fans and other businesses register names like these too. Our zone data terms apply to them.
100 of 808 shown: listed ones first, then the newest registrations.
- sharepoint365.support KN · AS402253 · SKN Subnet & Telecom LtdContains “sharepoint”Address on Spamhaus DROP
DetailsHide details for sharepoint365.support
- Domain
- sharepoint365.support
- Match
- A new registration containing “sharepoint”, one of the names we match for Microsoft
- First found
- 2026-11-05 · the day the .support zone file first listed it as a new registration
- Registered
- 2026-11-04 · Spaceship, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on Spamhaus DROP
- 104.251.180.138 is on Spamhaus DROP · sharepoint365.support resolved to it 2026-11-05 05:11 UTC
- Addresses
- 104.251.180.138 · St. Kitts & Nevis · AS402253 SKN-NETWORK-1 - SKN Subnet & Telecom Ltd
- Daily check
- Ended 2026-11-04 22:41 UTC
- cdn-microsoft.top SG · AS63949 · Akamai Connected Cloud3 addressesContains “microsoft”2 addresses on DomainSpoof’s phishing-host listAkamai Linode
DetailsHide details for cdn-microsoft.top
- Domain
- cdn-microsoft.top
- Match
- A new registration containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-05 · the day the .top zone file first listed it as a new registration
- Registered
- 2026-11-04 · NameSilo,LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- 2 addresses on DomainSpoof’s phishing-host list
- 172.232.24.161 (cdn-microsoft.top resolved to it 2026-11-05 04:17 UTC), 172.232.24.235 (cdn-microsoft.top resolved to it 2026-11-05 04:17 UTC) are on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours
- Addresses
- 45.79.154.26 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)172.232.24.161 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)172.232.24.235 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
- Akamai Linode
- Akamai Linode (45.79.154.26, 172.232.24.161, 172.232.24.235): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoftoffice365.top SG · AS63949 · Akamai Connected Cloud3 addressesContains “microsoft”Listed by MetaMask3 addresses on DomainSpoof’s phishing-host listAkamai Linode
DetailsHide details for microsoftoffice365.top
- Domain
- microsoftoffice365.top
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-03 · the day we first found it in the .top zone file, already registered
- Registered
- 2026-10-30 · NameSilo,LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Listed by MetaMask
- Listed by MetaMask · microsoftoffice365.top · in the feed since 2026-11-01 11:44 UTC
- 3 addresses on DomainSpoof’s phishing-host list
- 172.232.24.161 (microsoftoffice365.top resolved to it 2026-11-05 00:46 UTC), 172.232.24.235 (microsoftoffice365.top resolved to it 2026-11-05 00:46 UTC), 172.234.25.42 (microsoftoffice365.top resolved to it 2026-11-05 00:46 UTC) are on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours
- Addresses
- 172.232.24.161 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)172.232.24.235 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)172.234.25.42 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
- Akamai Linode
- Akamai Linode (172.232.24.161, 172.232.24.235, 172.234.25.42): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- onedrive-sync.top SG · AS63949 · Akamai Connected Cloud3 addressesContains “onedrive”3 addresses on DomainSpoof’s phishing-host listAkamai Linode
DetailsHide details for onedrive-sync.top
- Domain
- onedrive-sync.top
- Match
- A domain containing “onedrive”, one of the names we match for Microsoft
- First found
- 2026-11-03 · the day we first found it in the .top zone file, already registered
- Registered
- 2026-10-29 · NameSilo,LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- 3 addresses on DomainSpoof’s phishing-host list
- 172.232.24.161 (onedrive-sync.top resolved to it 2026-11-05 00:46 UTC), 172.232.24.235 (onedrive-sync.top resolved to it 2026-11-05 00:46 UTC), 172.234.25.42 (onedrive-sync.top resolved to it 2026-11-05 00:46 UTC) are on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours
- Addresses
- 172.232.24.161 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)172.232.24.235 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)172.234.25.42 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
- Akamai Linode
- Akamai Linode (172.232.24.161, 172.232.24.235, 172.234.25.42): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoftsupp.info RU · AS209207 · DHOST-AS Digital Hosting Pr…Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for microsoftsupp.info
- Domain
- microsoftsupp.info
- Match
- A registered domain containing “microsoft”, one of the names we match for Microsoft
- Zone file copy
- 2026-10-31 · the day of the .info zone file copy it was found in
- Registered
- 2026-10-22 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 168.113.215.244 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoftsupp.info resolved to it 2026-11-05 00:46 UTC
- Addresses
- 168.113.215.244 · Russia · AS209207 DHOST-AS Digital Hosting Provider LLC
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-office.topContains “microsoft”Listed by MetaMaskNo address or mail server yet
DetailsHide details for microsoft-office.top
- Domain
- microsoft-office.top
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-03 · the day we first found it in the .top zone file, already registered
- Registered
- 2026-10-18 · West263 International Limited
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Listed by MetaMask
- Listed by MetaMask · microsoft-office.top · in the feed since 2026-10-27 05:34 UTC
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoftsharefile.topContains “microsoft”Listed by MetaMaskNo address or mail server yet
DetailsHide details for microsoftsharefile.top
- Domain
- microsoftsharefile.top
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-03 · the day we first found it in the .top zone file, already registered
- Registered
- 2026-10-18 · NameSilo,LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Listed by MetaMask
- Listed by MetaMask · microsoftsharefile.top · in the feed since 2026-10-27 05:34 UTC
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoftsharefile1.topContains “microsoft”Listed by MetaMaskNo address or mail server yet
DetailsHide details for microsoftsharefile1.top
- Domain
- microsoftsharefile1.top
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-03 · the day we first found it in the .top zone file, already registered
- Registered
- 2026-10-18 · NameSilo,LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Listed by MetaMask
- Listed by MetaMask · microsoftsharefile1.top · in the feed since 2026-10-27 05:34 UTC
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoftes.liveContains “microsoft”Listed by MetaMaskNo address or mail server yet
DetailsHide details for microsoftes.live
- Domain
- microsoftes.live
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .live zone file, already registered
- Registered
- 2026-10-06 · Dynadot Inc
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Listed by MetaMask
- Listed by MetaMask · microsoftes.live · in the feed since 2026-10-27 05:34 UTC
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-teams.sbs US · AS13335 · Cloudflare, Inc.4 addressesContains “microsoft”Listed by MetaMaskCloudflare
DetailsHide details for microsoft-teams.sbs
- Domain
- microsoft-teams.sbs
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .sbs zone file, already registered
- Registered
- 2026-10-03 · Dynadot Inc
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Listed by MetaMask
- Listed by MetaMask · microsoft-teams.sbs · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.32.178 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.153.49 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3036::ac43:99312606:4700:3037::6815:20b2
- Cloudflare
- Cloudflare (104.21.32.178, 172.67.153.49): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-office365.site US · AS13335 · Cloudflare, Inc.4 addressesContains “microsoft”Listed by MetaMaskReported by PhishDestroyCloudflareMX present
DetailsHide details for microsoft-office365.site
- Domain
- microsoft-office365.site
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .site zone file, already registered
- Registered
- 2026-09-26 · Cloudflare, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Listed by MetaMask
- Listed by MetaMask · microsoft-office365.site · in the feed since 2026-10-27 05:34 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · microsoft-office365.site · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 104.21.16.197 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.215.149 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3034::ac43:d7952606:4700:3035::6815:10c5
- Cloudflare
- Cloudflare (104.21.16.197, 172.67.215.149): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- MX
- mx01.mail.icloud.commx02.mail.icloud.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-onedrive.org SG · AS63949 · Akamai Connected CloudContains “microsoft”Listed by MetaMaskAkamai Linode
DetailsHide details for microsoft-onedrive.org
- Domain
- microsoft-onedrive.org
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .org zone file, already registered
- Registered
- 2026-09-25 · Squarespace Domains LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Listed by MetaMask
- Listed by MetaMask · microsoft-onedrive.org · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 74.207.228.73 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
- Akamai Linode
- Akamai Linode (74.207.228.73): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-edge.download IS · AS50613 · ThorDC-AS Advania Island ehfContains “microsoft”Address on DomainSpoof’s phishing-host listMX present
DetailsHide details for microsoft-edge.download
- Domain
- microsoft-edge.download
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .download zone file, already registered
- Registered
- 2026-09-23 · TLD Registrar Solutions Ltd.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 82.221.136.24 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-edge.download resolved to it 2026-11-05 00:46 UTC
- Addresses
- 82.221.136.24 · Iceland · AS50613 ThorDC-AS Advania Island ehf
- MX
- mx1.sf.ice-networks.commx2.sf.ice-networks.commx3.sf.ice-networks.commx4.sf.ice-networks.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- office-365.shop DE · AS8560 · IONOS-AS IONOS SE2 addressesContains “office-365”Address on DomainSpoof’s phishing-host listIONOSMX present
DetailsHide details for office-365.shop
- Domain
- office-365.shop
- Match
- A registered domain containing “office-365”, one of the names we match for Microsoft
- Zone file copy
- 2026-10-31 · the day of the .shop zone file copy it was found in
- Registered
- 2026-09-22 · IONOS SE
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 217.160.0.115 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · office-365.shop resolved to it 2026-11-05 00:46 UTC
- Addresses
- 217.160.0.115 · Germany · AS8560 IONOS-AS IONOS SE · IONOS (shared hosting)2001:8d8:100f:f000::200
- IONOS
- IONOS (217.160.0.115): shared web hosting and domain registration. One address typically serves many customer sites.
- MX
- mail.protonmail.chmailsec.protonmail.ch
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-teams.sarlContains “microsoft”Listed by MetaMaskNo address or mail server yet
DetailsHide details for microsoft-teams.sarl
- Domain
- microsoft-teams.sarl
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .sarl zone file, already registered
- Registered
- 2026-09-19 · Cloudflare, Inc
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Listed by MetaMask
- Listed by MetaMask · microsoft-teams.sarl · in the feed since 2026-10-27 05:34 UTC
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-meet.live PA · AS64107 · RACK SPHERE HOSTING S.A.Contains “microsoft”Listed by MetaMask
DetailsHide details for microsoft-meet.live
- Domain
- microsoft-meet.live
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .live zone file, already registered
- Registered
- 2026-09-15 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Listed by MetaMask
- Listed by MetaMask · microsoft-meet.live · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 45.225.135.67 · Panama · AS64107 AS64107 - RACK SPHERE HOSTING S.A.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-cedar-technologies.click SG · AS63949 · Akamai Connected Cloud3 addressesContains “microsoft”3 addresses on DomainSpoof’s phishing-host listAkamai Linode
DetailsHide details for microsoft-cedar-technologies.click
- Domain
- microsoft-cedar-technologies.click
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .click zone file, already registered
- Registered
- 2026-08-21 · NameSilo, LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- 3 addresses on DomainSpoof’s phishing-host list
- 172.232.24.161 (microsoft-cedar-technologies.click resolved to it 2026-11-05 00:46 UTC), 172.232.24.235 (microsoft-cedar-technologies.click resolved to it 2026-11-05 00:46 UTC), 172.234.25.42 (microsoft-cedar-technologies.click resolved to it 2026-11-05 00:46 UTC) are on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours
- Addresses
- 172.232.24.161 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)172.232.24.235 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)172.234.25.42 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
- Akamai Linode
- Akamai Linode (172.232.24.161, 172.232.24.235, 172.234.25.42): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- com-onedrive.live US · AS13335 · Cloudflare, Inc.4 addressesContains “onedrive”Listed by MetaMaskCloudflare
DetailsHide details for com-onedrive.live
- Domain
- com-onedrive.live
- Match
- A domain containing “onedrive”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .live zone file, already registered
- Registered
- 2026-08-16 · Cloudflare, Inc
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Listed by MetaMask
- Listed by MetaMask · com-onedrive.live · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.33.172 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.165.13 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3034::6815:21ac2606:4700:3036::ac43:a50d
- Cloudflare
- Cloudflare (104.21.33.172, 172.67.165.13): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft3.sbsContains “microsoft”Listed by MetaMaskNo address or mail server yet
DetailsHide details for microsoft3.sbs
- Domain
- microsoft3.sbs
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .sbs zone file, already registered
- Registered
- 2026-08-07 · NameSilo, LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Listed by MetaMask
- Listed by MetaMask · microsoft3.sbs · in the feed since 2026-10-27 05:34 UTC
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoftonline-sharepoint-com.live US · AS13335 · Cloudflare, Inc.4 addressesContains “microsoftonline”Listed by MetaMaskCloudflare
DetailsHide details for microsoftonline-sharepoint-com.live
- Domain
- microsoftonline-sharepoint-com.live
- Match
- A domain containing “microsoftonline”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .live zone file, already registered
- Registered
- 2026-08-07 · Cloudflare, Inc
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Listed by MetaMask
- Listed by MetaMask · microsoftonline-sharepoint-com.live · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.51.191 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.184.169 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3031::6815:33bf2606:4700:3032::ac43:b8a9
- Cloudflare
- Cloudflare (104.21.51.191, 172.67.184.169): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoftonline-sharepoint.online US · AS14061 · DigitalOcean, LLCContains “microsoftonline”Listed by MetaMaskDigitalOcean
DetailsHide details for microsoftonline-sharepoint.online
- Domain
- microsoftonline-sharepoint.online
- Match
- A domain containing “microsoftonline”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .online zone file, already registered
- Registered
- 2026-07-27 · Cloudflare, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Listed by MetaMask
- Listed by MetaMask · microsoftonline-sharepoint.online · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 178.62.99.223 · United States · AS14061 DIGITALOCEAN-ASN - DigitalOcean, LLC · DigitalOcean (cloud provider)
- DigitalOcean
- DigitalOcean (178.62.99.223): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- office365microsoft.help SG · AS63949 · Akamai Connected Cloud3 addressesContains “microsoft”3 addresses on DomainSpoof’s phishing-host listAkamai LinodeMX present
DetailsHide details for office365microsoft.help
- Domain
- office365microsoft.help
- Match
- A registered domain containing “microsoft”, one of the names we match for Microsoft
- Zone file copy
- 2026-10-31 · the day of the .help zone file copy it was found in
- Registered
- 2026-07-26 · NameSilo, LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- 3 addresses on DomainSpoof’s phishing-host list
- 172.232.24.161 (office365microsoft.help resolved to it 2026-11-05 00:46 UTC), 172.232.24.235 (office365microsoft.help resolved to it 2026-11-05 00:46 UTC), 172.234.25.42 (office365microsoft.help resolved to it 2026-11-05 00:46 UTC) are on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours
- Addresses
- 172.232.24.161 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)172.232.24.235 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)172.234.25.42 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
- Akamai Linode
- Akamai Linode (172.232.24.161, 172.232.24.235, 172.234.25.42): a cloud provider. It rents servers and addresses to its customers.
- MX
- mx1.titan.emailmx2.titan.email
- Daily check
- Ended 2026-11-04 22:41 UTC
- msoffice.email CY · AS47583 · AS-HOSTINGER Hostinger Inte…Contains “msoffice”Address on DomainSpoof’s phishing-host listHostinger
DetailsHide details for msoffice.email
- Domain
- msoffice.email
- Match
- A domain containing “msoffice”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .email zone file, already registered
- Registered
- 2026-07-24 · HOSTINGER operations, UAB
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · msoffice.email resolved to it 2026-11-05 00:46 UTC
- Addresses
- 2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
- Hostinger
- Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
- Daily check
- Ended 2026-11-04 22:41 UTC
- msoffice.live CY · AS47583 · AS-HOSTINGER Hostinger Inte…Contains “msoffice”Address on DomainSpoof’s phishing-host listHostinger
DetailsHide details for msoffice.live
- Domain
- msoffice.live
- Match
- A registered domain containing “msoffice”, one of the names we match for Microsoft
- Zone file copy
- 2026-10-31 · the day of the .live zone file copy it was found in
- Registered
- 2026-07-24 · HOSTINGER operations, UAB
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · msoffice.live resolved to it 2026-11-05 00:46 UTC
- Addresses
- 2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
- Hostinger
- Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoftonline-outlook.live US · AS13335 · Cloudflare, Inc.4 addressesContains “microsoftonline”Listed by MetaMaskCloudflare
DetailsHide details for microsoftonline-outlook.live
- Domain
- microsoftonline-outlook.live
- Match
- A domain containing “microsoftonline”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .live zone file, already registered
- Registered
- 2026-07-17 · Cloudflare, Inc
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Listed by MetaMask
- Listed by MetaMask · microsoftonline-outlook.live · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.24.65 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.217.82 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3030::6815:18412606:4700:3031::ac43:d952
- Cloudflare
- Cloudflare (104.21.24.65, 172.67.217.82): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- onmicrosoftfolder.sbs SG · AS63949 · Akamai Connected Cloud3 addressesContains “microsoft”3 addresses on DomainSpoof’s phishing-host listAkamai Linode
DetailsHide details for onmicrosoftfolder.sbs
- Domain
- onmicrosoftfolder.sbs
- Match
- A registered domain containing “microsoft”, one of the names we match for Microsoft
- Zone file copy
- 2026-10-31 · the day of the .sbs zone file copy it was found in
- Registered
- 2026-07-08 · NameSilo, LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- 3 addresses on DomainSpoof’s phishing-host list
- 172.232.24.161 (onmicrosoftfolder.sbs resolved to it 2026-11-05 00:46 UTC), 172.232.24.235 (onmicrosoftfolder.sbs resolved to it 2026-11-05 00:46 UTC), 172.234.25.42 (onmicrosoftfolder.sbs resolved to it 2026-11-05 00:46 UTC) are on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours
- Addresses
- 172.232.24.161 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)172.232.24.235 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)172.234.25.42 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
- Akamai Linode
- Akamai Linode (172.232.24.161, 172.232.24.235, 172.234.25.42): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoftprada.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for microsoftprada.xyz
- Domain
- microsoftprada.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-07-04 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoftprada.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoftcisco.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for microsoftcisco.xyz
- Domain
- microsoftcisco.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-07-02 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoftcisco.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoftinstagram.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for microsoftinstagram.xyz
- Domain
- microsoftinstagram.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-07-02 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoftinstagram.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsofttencent.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for microsofttencent.xyz
- Domain
- microsofttencent.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-07-02 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsofttencent.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hsbc-microsoft.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for hsbc-microsoft.xyz
- Domain
- hsbc-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-29 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · hsbc-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ibm-microsoft.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for ibm-microsoft.xyz
- Domain
- ibm-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-29 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · ibm-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-bmw.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for microsoft-bmw.xyz
- Domain
- microsoft-bmw.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-29 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-bmw.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-fedex.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for microsoft-fedex.xyz
- Domain
- microsoft-fedex.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-29 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-fedex.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-nintendo.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for microsoft-nintendo.xyz
- Domain
- microsoft-nintendo.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-29 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-nintendo.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-puma.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for microsoft-puma.xyz
- Domain
- microsoft-puma.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-29 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-puma.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-sap.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for microsoft-sap.xyz
- Domain
- microsoft-sap.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-29 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-sap.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-target.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for microsoft-target.xyz
- Domain
- microsoft-target.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-29 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-target.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-volkswagen.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for microsoft-volkswagen.xyz
- Domain
- microsoft-volkswagen.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-29 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-volkswagen.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- nintendo-microsoft.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for nintendo-microsoft.xyz
- Domain
- nintendo-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-29 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · nintendo-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- cisco-microsoft.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for cisco-microsoft.xyz
- Domain
- cisco-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-28 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · cisco-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hermes-microsoft.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for hermes-microsoft.xyz
- Domain
- hermes-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-28 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · hermes-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- kia-microsoft.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for kia-microsoft.xyz
- Domain
- kia-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-28 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · kia-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-amazon.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for microsoft-amazon.xyz
- Domain
- microsoft-amazon.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-28 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-amazon.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-hyundai.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for microsoft-hyundai.xyz
- Domain
- microsoft-hyundai.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-28 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-hyundai.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-nescafe.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for microsoft-nescafe.xyz
- Domain
- microsoft-nescafe.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-28 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-nescafe.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-pepsi.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for microsoft-pepsi.xyz
- Domain
- microsoft-pepsi.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-28 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-pepsi.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-starbucks.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for microsoft-starbucks.xyz
- Domain
- microsoft-starbucks.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-28 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-starbucks.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-zara.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for microsoft-zara.xyz
- Domain
- microsoft-zara.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-28 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-zara.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- paypal-microsoft.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for paypal-microsoft.xyz
- Domain
- paypal-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-28 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · paypal-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- prada-microsoft.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for prada-microsoft.xyz
- Domain
- prada-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-28 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · prada-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- gillette-microsoft.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for gillette-microsoft.xyz
- Domain
- gillette-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-27 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · gillette-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-netflix.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for microsoft-netflix.xyz
- Domain
- microsoft-netflix.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-27 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-netflix.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- tencent-microsoft.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for tencent-microsoft.xyz
- Domain
- tencent-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-27 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · tencent-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- totalenergies-microsoft.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for totalenergies-microsoft.xyz
- Domain
- totalenergies-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-27 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · totalenergies-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- sap-microsoft.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for sap-microsoft.xyz
- Domain
- sap-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-26 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · sap-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- sharepoint.tips DE · AS212317 · HETZNER-CLOUD3-AS Hetzner O…14 addressesContains “sharepoint”5 addresses on DomainSpoof’s phishing-host listHetzner +1
DetailsHide details for sharepoint.tips
- Domain
- sharepoint.tips
- Match
- A domain containing “sharepoint”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .tips zone file, already registered
- Registered
- 2026-06-15 · Domain Science Kutatási Szolgáltató Korlátolt Felelősségű Társaság
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- 5 addresses on DomainSpoof’s phishing-host list
- 195.201.128.179 (sharepoint.tips resolved to it 2026-11-05 00:46 UTC), 46.62.237.138 (sharepoint.tips resolved to it 2026-11-05 00:46 UTC), 5.161.230.87 (sharepoint.tips resolved to it 2026-11-05 00:46 UTC), 5.161.47.86 (sharepoint.tips resolved to it 2026-11-05 00:46 UTC), 5.78.156.59 (sharepoint.tips resolved to it 2026-11-05 00:46 UTC) are on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours
- Addresses
- 5.78.156.59 · Germany · AS212317 HETZNER-CLOUD3-AS Hetzner Online GmbH5.161.47.86 · Germany · AS213230 HETZNER-CLOUD2-AS Hetzner Online GmbH5.161.230.87 · Germany · AS213230 HETZNER-CLOUD2-AS Hetzner Online GmbH46.62.237.138 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)76.223.91.20 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)195.201.128.179 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)2406:da1e:214:c901:49:871:e9e1:eb922600:1f1c:6db:8801:ca20:5f5a:5f45:48d02a05:d014:179b:c400:b5e:feaf:a6dc:b5082a05:d014:179b:c400:2dc9:16fd:7cbd:e2552a05:d014:179b:c400:5ed8:1db0:4443:ca252a05:d014:179b:c400:a327:40ee:24cc:61802a05:d014:179b:c400:aa99:a226:6c94:e722a05:d014:179b:c400:adda:f567:8e83:5e24
- Hetzner +1
- Hetzner (46.62.237.138, 195.201.128.179): a cloud provider. It rents servers and addresses to its customers. Amazon Web Services (76.223.91.20): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-ai-claude.top DE · AS47846 · SEDO-AS SEDO GmbHContains “microsoft”Listed by MetaMaskParking page · Sedo
DetailsHide details for microsoft-ai-claude.top
- Domain
- microsoft-ai-claude.top
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-03 · the day we first found it in the .top zone file, already registered
- Registered
- 2026-05-29 · NameSilo,LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Listed by MetaMask
- Listed by MetaMask · microsoft-ai-claude.top · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 91.195.240.123 · Germany · AS47846 SEDO-AS SEDO GmbH · Sedo (parking page)
- Parking page · Sedo
- Sedo (91.195.240.123): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-google.top DE · AS47846 · SEDO-AS SEDO GmbHContains “microsoft”Listed by MetaMaskParking page · Sedo
DetailsHide details for microsoft-google.top
- Domain
- microsoft-google.top
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-03 · the day we first found it in the .top zone file, already registered
- Registered
- 2026-05-29 · NameSilo,LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Listed by MetaMask
- Listed by MetaMask · microsoft-google.top · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 91.195.240.123 · Germany · AS47846 SEDO-AS SEDO GmbH · Sedo (parking page)
- Parking page · Sedo
- Sedo (91.195.240.123): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoftcom.live US · AS16509 · Amazon.com, Inc.2 addressesContains “microsoft”Listed by MetaMaskReported by PhishDestroyRegistry lookup queuedAmazon Web Services
DetailsHide details for microsoftcom.live
- Domain
- microsoftcom.live
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .live zone file, already registered
- Registered
- 2026-05-29 · GoDaddy.com, LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Listed by MetaMask
- Listed by MetaMask · microsoftcom.live · in the feed since 2026-10-27 05:34 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · microsoftcom.live · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 13.248.243.5 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)76.223.105.230 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (13.248.243.5, 76.223.105.230): a cloud provider. It rents servers and addresses to its customers.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- evaservi-hotmail.online DE · AS8560 · IONOS-AS IONOS SEContains “hotmail”Address on DomainSpoof’s phishing-host listIONOSMX present
DetailsHide details for evaservi-hotmail.online
- Domain
- evaservi-hotmail.online
- Match
- A domain containing “hotmail”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .online zone file, already registered
- Registered
- 2026-05-24 · IONOS SE
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 217.76.128.47 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · evaservi-hotmail.online resolved to it 2026-11-05 00:46 UTC
- Addresses
- 217.76.128.47 · Germany · AS8560 IONOS-AS IONOS SE · IONOS (shared hosting)
- IONOS
- IONOS (217.76.128.47): shared web hosting and domain registration. One address typically serves many customer sites.
- MX
- mx.serviciodecorreo.es
- Daily check
- Ended 2026-11-04 22:41 UTC
- outlook-mail.site CY · AS47583 · AS-HOSTINGER Hostinger Inte…Contains “outlook”Address on DomainSpoof’s phishing-host listHostinger
DetailsHide details for outlook-mail.site
- Domain
- outlook-mail.site
- Match
- A registered domain containing “outlook”, one of the names we match for Microsoft
- Zone file copy
- 2026-10-31 · the day of the .site zone file copy it was found in
- Registered
- 2026-04-24 · HOSTINGER operations, UAB
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · outlook-mail.site resolved to it 2026-11-05 00:46 UTC
- Addresses
- 2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
- Hostinger
- Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
- Daily check
- Ended 2026-11-04 22:41 UTC
- entra-id-platform.online JP · AS7506 · GMO Internet, Inc.Contains “entra-id”Address on DomainSpoof’s phishing-host list
DetailsHide details for entra-id-platform.online
- Domain
- entra-id-platform.online
- Match
- A domain containing “entra-id”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .online zone file, already registered
- Registered
- 2026-04-19 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · entra-id-platform.online resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- azure-microsoft.top JP · AS9370 · SAKURA Internet Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for azure-microsoft.top
- Domain
- azure-microsoft.top
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-03 · the day we first found it in the .top zone file, already registered
- Registered
- 2026-04-09 · GMO Internet, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 160.16.200.77 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · azure-microsoft.top resolved to it 2026-11-05 00:46 UTC
- Addresses
- 160.16.200.77 · Japan · AS9370 SAKURA-B - SAKURA Internet Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- team-microsoft.top JP · AS9370 · SAKURA Internet Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for team-microsoft.top
- Domain
- team-microsoft.top
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-03 · the day we first found it in the .top zone file, already registered
- Registered
- 2026-04-09 · GMO Internet, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 160.16.200.77 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · team-microsoft.top resolved to it 2026-11-05 00:46 UTC
- Addresses
- 160.16.200.77 · Japan · AS9370 SAKURA-B - SAKURA Internet Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-office365.cloud DE · AS8560 · IONOS-AS IONOS SE2 addressesContains “microsoft”Reported by PhishDestroyAddress on DomainSpoof’s phishing-host listIONOSMX present
DetailsHide details for microsoft-office365.cloud
- Domain
- microsoft-office365.cloud
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .cloud zone file, already registered
- Registered
- 2026-03-18 · IONOS SE
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · microsoft-office365.cloud · in the feed since 2026-10-25 23:31 UTC
- Address on DomainSpoof’s phishing-host list
- 217.160.0.235 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-office365.cloud resolved to it 2026-11-05 00:46 UTC
- Addresses
- 217.160.0.235 · Germany · AS8560 IONOS-AS IONOS SE · IONOS (shared hosting)2001:8d8:100f:f000::200
- IONOS
- IONOS (217.160.0.235): shared web hosting and domain registration. One address typically serves many customer sites.
- MX
- mx00.ionos.demx01.ionos.de
- Daily check
- Ended 2026-11-04 22:41 UTC
- office365online.live CY · AS47583 · AS-HOSTINGER Hostinger Inte…Contains “office365”Address on DomainSpoof’s phishing-host listHostingerMX present
DetailsHide details for office365online.live
- Domain
- office365online.live
- Match
- A domain containing “office365”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .live zone file, already registered
- Registered
- 2026-03-15 · HOSTINGER operations, UAB
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · office365online.live resolved to it 2026-11-05 00:46 UTC
- Addresses
- 2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
- Hostinger
- Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
- MX
- mx1.hostinger.commx2.hostinger.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- hotmails.sbs CY · AS47583 · AS-HOSTINGER Hostinger Inte…Contains “hotmail”Address on DomainSpoof’s phishing-host listHostingerMX present
DetailsHide details for hotmails.sbs
- Domain
- hotmails.sbs
- Match
- A registered domain containing “hotmail”, one of the names we match for Microsoft
- Zone file copy
- 2026-10-31 · the day of the .sbs zone file copy it was found in
- Registered
- 2026-01-05 · HOSTINGER operations, UAB
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · hotmails.sbs resolved to it 2026-11-05 00:46 UTC
- Addresses
- 2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
- Hostinger
- Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
- MX
- mx1.hostinger.commx2.hostinger.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- secret-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for secret-microsoft.xyz
- Domain
- secret-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-25 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · secret-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- session-microsoft-trello.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for session-microsoft-trello.xyz
- Domain
- session-microsoft-trello.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-25 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · session-microsoft-trello.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- short-authority-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for short-authority-microsoft.xyz
- Domain
- short-authority-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-25 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · short-authority-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- shortcut-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for shortcut-microsoft.xyz
- Domain
- shortcut-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-25 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · shortcut-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- simulink-microsoft-class.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for simulink-microsoft-class.xyz
- Domain
- simulink-microsoft-class.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-25 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · simulink-microsoft-class.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- simulink-priority-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for simulink-priority-microsoft.xyz
- Domain
- simulink-priority-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-25 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · simulink-priority-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- smartsheet-microsoft-rest.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for smartsheet-microsoft-rest.xyz
- Domain
- smartsheet-microsoft-rest.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-25 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · smartsheet-microsoft-rest.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- smartsheet-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for smartsheet-microsoft.xyz
- Domain
- smartsheet-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-25 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · smartsheet-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- smartsheet-seaborn-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for smartsheet-seaborn-microsoft.xyz
- Domain
- smartsheet-seaborn-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-25 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · smartsheet-seaborn-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- snapshot-microsoft-circleci.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for snapshot-microsoft-circleci.xyz
- Domain
- snapshot-microsoft-circleci.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-25 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · snapshot-microsoft-circleci.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- soap-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for soap-microsoft.xyz
- Domain
- soap-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-25 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · soap-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- solidworks-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for solidworks-microsoft.xyz
- Domain
- solidworks-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-25 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · solidworks-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- utilization-follower-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for utilization-follower-microsoft.xyz
- Domain
- utilization-follower-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · utilization-follower-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- variable-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for variable-microsoft.xyz
- Domain
- variable-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · variable-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- verilog-microsoft-tablet.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for verilog-microsoft-tablet.xyz
- Domain
- verilog-microsoft-tablet.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · verilog-microsoft-tablet.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- vhdl-microsoft-partition.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for vhdl-microsoft-partition.xyz
- Domain
- vhdl-microsoft-partition.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · vhdl-microsoft-partition.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- wasm-microsoft-bootstrap.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for wasm-microsoft-bootstrap.xyz
- Domain
- wasm-microsoft-bootstrap.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · wasm-microsoft-bootstrap.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- wasm-wrike-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for wasm-wrike-microsoft.xyz
- Domain
- wasm-wrike-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · wasm-wrike-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- wave-confluence-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for wave-confluence-microsoft.xyz
- Domain
- wave-confluence-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · wave-confluence-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- waypoint-microsoft-store.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for waypoint-microsoft-store.xyz
- Domain
- waypoint-microsoft-store.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · waypoint-microsoft-store.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- while-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for while-microsoft.xyz
- Domain
- while-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · while-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- whom-microsoft-connect.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for whom-microsoft-connect.xyz
- Domain
- whom-microsoft-connect.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · whom-microsoft-connect.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- yaml-microsoft-vector.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for yaml-microsoft-vector.xyz
- Domain
- yaml-microsoft-vector.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · yaml-microsoft-vector.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- office365-sec.xyz TR · AS51557 · TR-ISIMTESCIL-20201202 Isim…Contains “office365”Address on DomainSpoof’s phishing-host list
DetailsHide details for office365-sec.xyz
- Domain
- office365-sec.xyz
- Match
- A registered domain containing “office365”, one of the names we match for Microsoft
- Zone file copy
- 2026-10-31 · the day of the .xyz zone file copy it was found in
- Registered
- 2025-12-24 · İsimtescil Bilişim A.Ş.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 93.89.226.17 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · office365-sec.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 93.89.226.17 · Türkiye · AS51557 TR-ISIMTESCIL-20201202 Isimtescil Bilisim A.S.
- Daily check
- Ended 2026-11-04 22:41 UTC
- onedrive365.live US · AS214036 · ULTAHOST-AS Ultahost, Inc.Contains “onedrive”Address on DomainSpoof’s phishing-host listMX present
DetailsHide details for onedrive365.live
- Domain
- onedrive365.live
- Match
- A registered domain containing “onedrive”, one of the names we match for Microsoft
- Zone file copy
- 2026-10-31 · the day of the .live zone file copy it was found in
- Registered
- 2025-12-18 · Ultahost, Inc
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 79.133.41.61 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · onedrive365.live resolved to it 2026-11-05 00:46 UTC
- Addresses
- 79.133.41.61 · United States · AS214036 ULTAHOST-AS Ultahost, Inc.
- MX
- onedrive365.live
- Daily check
- Ended 2026-11-04 22:41 UTC
- hotmailbr.store CY · AS47583 · AS-HOSTINGER Hostinger Inte…Contains “hotmail”Address on DomainSpoof’s phishing-host listHostinger
DetailsHide details for hotmailbr.store
- Domain
- hotmailbr.store
- Match
- A registered domain containing “hotmail”, one of the names we match for Microsoft
- Zone file copy
- 2026-10-31 · the day of the .store zone file copy it was found in
- Registered
- 2025-12-15 · HOSTINGER operations, UAB
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · hotmailbr.store resolved to it 2026-11-05 00:46 UTC
- Addresses
- 2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
- Hostinger
- Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
- Daily check
- Ended 2026-11-04 22:41 UTC
- instagram-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for instagram-microsoft.xyz
- Domain
- instagram-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · instagram-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- instagram-when-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for instagram-when-microsoft.xyz
- Domain
- instagram-when-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · instagram-when-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- instance-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for instance-microsoft.xyz
- Domain
- instance-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · instance-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- jetty-microsoft-drone.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for jetty-microsoft-drone.xyz
- Domain
- jetty-microsoft-drone.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · jetty-microsoft-drone.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- jetty-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for jetty-microsoft.xyz
- Domain
- jetty-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · jetty-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- jetty-opengl-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for jetty-opengl-microsoft.xyz
- Domain
- jetty-opengl-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · jetty-opengl-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC

