Microsoft
Registered lookalikes
Spellings of Microsoft's official domains (microsoft.com, office365.com, hotmail.com, …) registered to other owners (identified by nameservers, registrar and redirects), checked daily; the ones with no address or mail server yet say so. Many are parked, for sale or run by other businesses and sites with a similar name; the ones a phishing source or address list has flagged carry a label.
Some of these come from registry zone files (ICANN CZDS). Our zone data terms apply to them: no marketing use of any kind, no harassing their registrants, no high-volume registry or registrar queries.
121 of the 1,671 are listed by a source or resolve to a listed address, checked hourly.
- microsoft-365.netLookalike of microsoft365.com · an added hyphenNo address or mail server yet
DetailsHide details for microsoft-365.net
- Domain
- microsoft-365.net
- Spelling
- Spelled like microsoft365.com with an added hyphen
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2024-11-27 · PDR Ltd. d/b/a PublicDomainRegistry.com
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- mircosoft.winLookalike of microsoft.com · two letters swappedMX present
DetailsHide details for mircosoft.win
- Domain
- mircosoft.win
- Spelling
- Spelled like microsoft.com with two letters swapped
- First found
- 2026-11-01 · the day we first found it in the .win zone file, already registered
- Registered
- 2024-11-23 · Cloudflare, Inc.
- MX
- mx01.mail.icloud.commx02.mail.icloud.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- micrasoft.online DE · AS8560 · IONOS-AS IONOS SE2 addressesLookalike of microsoft.com · a changed characterIONOSMX present
DetailsHide details for micrasoft.online
- Domain
- micrasoft.online
- Spelling
- Spelled like microsoft.com with a changed character
- First found
- 2026-11-01 · the day we first found it in the .online zone file, already registered
- Registered
- 2024-11-18 · IONOS SE
- Addresses
- 217.160.0.11 · Germany · AS8560 IONOS-AS IONOS SE · IONOS (shared hosting)2001:8d8:100f:f000::200
- IONOS
- IONOS (217.160.0.11): shared web hosting and domain registration. One address typically serves many customer sites.
- MX
- mx00.ionos.co.ukmx01.ionos.co.uk
- Daily check
- Ended 2026-11-04 22:41 UTC
- office365account.info US · AS16509 · Amazon.com, Inc.2 addressesLookalike of microsoft.com · the name with an added wordRegistry lookup queuedAmazon Web Services
DetailsHide details for office365account.info
- Domain
- office365account.info
- Spelling
- The name of microsoft.com with an added word
- First found
- 2026-11-01 · the day we first found it in the .info zone file, already registered
- Registered
- 2024-11-15 · GoDaddy.com, LLC
- Addresses
- 13.248.243.5 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)76.223.105.230 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (13.248.243.5, 76.223.105.230): a cloud provider. It rents servers and addresses to its customers.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hotmail.cvLookalike of hotmail.com · the ending .cvMX present
DetailsHide details for hotmail.cv
- Domain
- hotmail.cv
- Spelling
- The name of hotmail.com with the ending .cv
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Registered
- 2024-11-11 · Namesilo
- MX
- mail.hotmail.cv
- Daily check
- Ended 2026-11-04 22:41 UTC
- oonedrive.orgLookalike of microsoft.com · a doubled letterNo address or mail server yet
DetailsHide details for oonedrive.org
- Domain
- oonedrive.org
- Spelling
- Spelled like microsoft.com with a doubled letter
- First found
- 2026-11-01 · the day we first found it in the .org zone file, already registered
- Registered
- 2024-11-05 · NameCheap, Inc.
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- 0utlook.supportLookalike of outlook.com · similar-looking charactersMX present
DetailsHide details for 0utlook.support
- Domain
- 0utlook.support
- Spelling
- Spelled like outlook.com with similar-looking characters
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2024-11-04 · Porkbun LLC
- MX
- in1-smtp.messagingengine.comin2-smtp.messagingengine.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- rnicrosoft.cloudLookalike of microsoft.com · similar-looking charactersNo address or mail server yet
DetailsHide details for rnicrosoft.cloud
- Domain
- rnicrosoft.cloud
- Spelling
- Spelled like microsoft.com with similar-looking characters
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2024-11-04 · OVH sas
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft365.asia US · AS16509 · Amazon.com, Inc.2 addressesLookalike of microsoft365.com · the ending .asiaAmazon Web ServicesMX present
DetailsHide details for microsoft365.asia
- Domain
- microsoft365.asia
- Spelling
- The name of microsoft365.com with the ending .asia
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2024-10-29 · GoDaddy.com, LLC
- Addresses
- 13.248.243.5 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)76.223.105.230 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (13.248.243.5, 76.223.105.230): a cloud provider. It rents servers and addresses to its customers.
- MX
- microsoft365-asia.mail.protection.outlook.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- hotmail.ooo AU · AS154653 · ParkLogic Pty LtdLookalike of hotmail.com · the ending .oooParking page · ParkLogicMX present
DetailsHide details for hotmail.ooo
- Domain
- hotmail.ooo
- Spelling
- The name of hotmail.com with the ending .ooo
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Registered
- 2024-10-21 · NameSilo, LLC
- Addresses
- 162.4.84.247 · Australia · AS154653 PARKLOGICPTYLTD-AS-AP - ParkLogic Pty Ltd · ParkLogic (parking page)
- Parking page · ParkLogic
- The registry delegates hotmail.ooo to ParkLogic’s nameservers, which answer for it. ParkLogic (162.4.84.247): a parking service. It answers for names that are typically for sale or unused.
- MX
- mail.eye-mail.net
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoftoline.org US · AS16509 · Amazon.com, Inc.2 addressesLookalike of microsoftonline.com · a dropped letterRegistry lookup queuedAmazon Web Services
DetailsHide details for microsoftoline.org
- Domain
- microsoftoline.org
- Spelling
- Spelled like microsoftonline.com with a dropped letter
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2024-10-15 · GoDaddy.com, LLC
- Addresses
- 3.33.130.190 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)15.197.148.33 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (3.33.130.190, 15.197.148.33): a cloud provider. It rents servers and addresses to its customers.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- offices365.link AU · AS154653 · ParkLogic Pty LtdLookalike of microsoft.com · an added characterParking page · ParkLogicMX present
DetailsHide details for offices365.link
- Domain
- offices365.link
- Spelling
- Spelled like microsoft.com with an added character
- First found
- 2026-11-01 · the day we first found it in the .link zone file, already registered
- Registered
- 2024-10-09 · NameSilo, LLC
- Addresses
- 162.4.84.247 · Australia · AS154653 PARKLOGICPTYLTD-AS-AP - ParkLogic Pty Ltd · ParkLogic (parking page)
- Parking page · ParkLogic
- The registry delegates offices365.link to ParkLogic’s nameservers, which answer for it. ParkLogic (162.4.84.247): a parking service. It answers for names that are typically for sale or unused.
- MX
- mail.eye-mail.net
- Daily check
- Ended 2026-11-04 22:41 UTC
- office365.store ES · AS57910 · SCIP-AS Soluciones Corporat…Lookalike of office365.com · the ending .storeMX present
DetailsHide details for office365.store
- Domain
- office365.store
- Spelling
- The name of office365.com with the ending .store
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2024-10-04 · Soluciones Corporativas IP, SL
- Addresses
- 31.214.178.45 · Spain · AS57910 SCIP-AS Soluciones Corporativas IP, SL
- MX
- mx01.dondominio.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- m1crosoftonl1ne.com US · AS16509 · Amazon.com, Inc.2 addressesLookalike of microsoftonline.com · similar-looking charactersAmazon Web Services
DetailsHide details for m1crosoftonl1ne.com
- Domain
- m1crosoftonl1ne.com
- Spelling
- Spelled like microsoftonline.com with similar-looking characters
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2024-09-25 · Porkbun LLC
- Addresses
- 207.207.210.107 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)207.207.210.229 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (207.207.210.107, 207.207.210.229): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsotf.cloudLookalike of microsoft.com · two letters swappedMX present
DetailsHide details for microsotf.cloud
- Domain
- microsotf.cloud
- Spelling
- Spelled like microsoft.com with two letters swapped
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2024-09-22 · OVH sas
- MX
- mx1.mail.ovh.netmx2.mail.ovh.netmx3.mail.ovh.net
- Daily check
- Ended 2026-11-04 22:41 UTC
- hotmaiil.frLookalike of hotmail.com · a doubled letterMX present
DetailsHide details for hotmaiil.fr
- Domain
- hotmaiil.fr
- Spelling
- Spelled like hotmail.com with a doubled letter
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2024-09-14 · OVH
- MX
- reception01.mail-vert.fr
- Daily check
- Ended 2026-11-04 22:41 UTC
- outlook.movLookalike of outlook.com · the ending .movMX present
DetailsHide details for outlook.mov
- Domain
- outlook.mov
- Spelling
- The name of outlook.com with the ending .mov
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Registered
- 2024-09-13 · Porkbun LLC
- MX
- mail3.nestlemart.commail2.cosuber.commail.gamcgo.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- xn--hotmil-lta.comLookalike of hotmail.com · international characters, shown as hotmàil.comMX present
DetailsHide details for xn--hotmil-lta.com
- Domain
- xn--hotmil-lta.com
- Spelling
- Spelled like hotmail.com with international characters, shown as hotmàil.com
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2024-09-13 · Dynadot Inc
- MX
- mainmx4.darkprobe.comauxmx4.darkprobe.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-support.top CN · AS45102 · Alibaba (US) Technology Co.…Lookalike of microsoft.com · the name with the word “support”Alibaba Cloud
DetailsHide details for microsoft-support.top
- Domain
- microsoft-support.top
- Spelling
- The name of microsoft.com with the word “support”
- First found
- 2026-11-03 · the day we first found it in the .top zone file, already registered
- Registered
- 2024-09-12 · 阿里云计算有限公司
- Addresses
- 47.237.96.118 · China · AS45102 ALIBABA-CN-NET - Alibaba (US) Technology Co., Ltd. · Alibaba Cloud (cloud provider)
- Alibaba Cloud
- Alibaba Cloud (47.237.96.118): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- outlook.fmLookalike of outlook.com · the ending .fmMX present
DetailsHide details for outlook.fm
- Domain
- outlook.fm
- Spelling
- The name of outlook.com with the ending .fm
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Registered
- 2024-09-09 · TLD Registrar Solutions Ltd.
- MX
- mail2.cosuber.commail3.nestlemart.commail.gamcgo.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- outlook.moe US · AS13335 · Cloudflare, Inc.4 addressesLookalike of outlook.com · the ending .moeCloudflare
DetailsHide details for outlook.moe
- Domain
- outlook.moe
- Spelling
- The name of outlook.com with the ending .moe
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Registered
- 2024-09-08 · Porkbun
- Addresses
- 104.21.66.85 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.157.253 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3034::ac43:9dfd2606:4700:3036::6815:4255
- Cloudflare
- Cloudflare (104.21.66.85, 172.67.157.253): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- outlook.pageLookalike of outlook.com · the ending .pageNo address or mail server yet
DetailsHide details for outlook.page
- Domain
- outlook.page
- Spelling
- The name of outlook.com with the ending .page
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Registered
- 2024-09-03 · CloudFlare, Inc.
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- office365-login.info DE · AS25394 · MK-NETZDIENSTE-AS MK Netzdi…Lookalike of microsoft.com · the name with an added word
DetailsHide details for office365-login.info
- Domain
- office365-login.info
- Spelling
- The name of microsoft.com with an added word
- First found
- 2026-11-01 · the day we first found it in the .info zone file, already registered
- Registered
- 2024-08-23 · INWX GmbH
- Addresses
- 94.100.132.71 · Germany · AS25394 MK-NETZDIENSTE-AS MK Netzdienste Verwaltungs GmbH trading as MK Netzdienste GmbH & Co. KG
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft.co.ssLookalike of microsoft.com · the ending .co.ssNo address or mail server yet
DetailsHide details for microsoft.co.ss
- Domain
- microsoft.co.ss
- Spelling
- The name of microsoft.com with the ending .co.ss
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Registered
- 2024-08-23 · Afriregister South Sudan
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft.ssLookalike of microsoft.com · the ending .ssNo address or mail server yet
DetailsHide details for microsoft.ss
- Domain
- microsoft.ss
- Spelling
- The name of microsoft.com with the ending .ss
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Registered
- 2024-08-23 · Afriregister South Sudan
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsooft.info DE · AS47846 · SEDO-AS SEDO GmbHLookalike of microsoft.com · a doubled letterParking page · Sedo
DetailsHide details for microsooft.info
- Domain
- microsooft.info
- Spelling
- Spelled like microsoft.com with a doubled letter
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2024-08-21 · NameSilo, LLC
- Addresses
- 91.195.240.123 · Germany · AS47846 SEDO-AS SEDO GmbH · Sedo (parking page)
- Parking page · Sedo
- Sedo (91.195.240.123): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- micorsoft.info US · AS8075 · Microsoft CorporationLookalike of microsoft.com · two letters swappedRegistry lookup queuedMicrosoft Azure
DetailsHide details for micorsoft.info
- Domain
- micorsoft.info
- Spelling
- Spelled like microsoft.com with two letters swapped
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2024-08-19 · GoDaddy.com, LLC
- Addresses
- 104.40.147.216 · United States · AS8075 MICROSOFT-CORP-MSN-AS-BLOCK - Microsoft Corporation · Microsoft Azure (cloud provider)
- Microsoft Azure
- Microsoft Azure (104.40.147.216): a cloud provider. It rents servers and addresses to its customers.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsofe.techLookalike of microsoft.com · a changed characterNo address or mail server yet
DetailsHide details for microsofe.tech
- Domain
- microsofe.tech
- Spelling
- Spelled like microsoft.com with a changed character
- First found
- 2026-11-01 · the day we first found it in the .tech zone file, already registered
- Registered
- 2024-07-29 · Chengdu West Dimension Digital Technology Co., Ltd.
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- outlook.topLookalike of outlook.com · the ending .topMX present
DetailsHide details for outlook.top
- Domain
- outlook.top
- Spelling
- The name of outlook.com with the ending .top
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Registered
- 2024-07-27 · 阿里云计算有限公司
- MX
- mail.outlook.top
- Daily check
- Ended 2026-11-04 22:41 UTC
- hotmaio.co.ukLookalike of hotmail.com · a letter from a neighbouring keyMX present
DetailsHide details for hotmaio.co.uk
- Domain
- hotmaio.co.uk
- Spelling
- Spelled like hotmail.com with a letter from a neighbouring key
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2024-07-26 · GoDaddy.com, LLC.
- MX
- aero4.stememail.commail4.stememail.net
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsofonline.orgLookalike of microsoftonline.com · a dropped letterNo address or mail server yet
DetailsHide details for microsofonline.org
- Domain
- microsofonline.org
- Spelling
- Spelled like microsoftonline.com with a dropped letter
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2024-07-25 · Cloudflare, Inc.
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- mlcrosoftonline.net US · AS13335 · Cloudflare, Inc.4 addressesLookalike of microsoftonline.com · similar-looking charactersPhishDestroy CommunitySuspicious · highCloudflareMX present
DetailsHide details for mlcrosoftonline.net
- Domain
- mlcrosoftonline.net
- Spelling
- Spelled like microsoftonline.com with similar-looking characters
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2024-07-24 · Amazon Registrar, Inc.
- Suspicious
- PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated high: it resolves to an address with no parking or holding signal.
- PhishDestroy Community
- PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- Addresses
- 104.21.62.233 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.139.238 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3030::ac43:8bee2606:4700:3035::6815:3ee9
- Cloudflare
- Cloudflare (104.21.62.233, 172.67.139.238): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- MX
- mxa.mailgun.orgmxb.mailgun.org
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsft.live US · AS13335 · Cloudflare, Inc.4 addressesLookalike of microsoft.com · a dropped letterRegistry lookup queuedCloudflare
DetailsHide details for microsft.live
- Domain
- microsft.live
- Spelling
- Spelled like microsoft.com with a dropped letter
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2024-07-24 · GoDaddy.com, LLC
- Addresses
- 104.21.23.212 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.213.174 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3034::6815:17d42606:4700:3035::ac43:d5ae
- Cloudflare
- Cloudflare (104.21.23.212, 172.67.213.174): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hotmqil.co.ukLookalike of hotmail.com · a letter from a neighbouring keyMX present
DetailsHide details for hotmqil.co.uk
- Domain
- hotmqil.co.uk
- Spelling
- Spelled like hotmail.com with a letter from a neighbouring key
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2024-07-20 · GoDaddy.com, LLC.
- MX
- aero4.stememail.commail4.stememail.net
- Daily check
- Ended 2026-11-04 22:41 UTC
- hotmaill.click US · AS13335 · Cloudflare, Inc.4 addressesLookalike of hotmail.com · a doubled letterCloudflareMX present
DetailsHide details for hotmaill.click
- Domain
- hotmaill.click
- Spelling
- Spelled like hotmail.com with a doubled letter
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2024-07-15 · Isimtescil Bilisim A.S.
- Addresses
- 104.21.91.21 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.208.52 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3036::ac43:d0342606:4700:3037::6815:5b15
- Cloudflare
- Cloudflare (104.21.91.21, 172.67.208.52): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- MX
- mail3.hotmaill.click
- Daily check
- Ended 2026-11-04 22:41 UTC
- hotmaii.info US · AS19871 · Network Solutions, LLCLookalike of hotmail.com · similar-looking charactersParking page · Network Solutions hostingMX present
DetailsHide details for hotmaii.info
- Domain
- hotmaii.info
- Spelling
- Spelled like hotmail.com with similar-looking characters
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2024-06-26 · NameSilo, LLC
- Addresses
- 162.241.70.152 · United States · AS19871 NETWORK-SOLUTIONS-HOSTING - Network Solutions, LLC · Network Solutions hosting (parking page)
- Parking page · Network Solutions hosting
- Network Solutions hosting (162.241.70.152): a parking service. It answers for names that are typically for sale or unused.
- MX
- hotmaii.info
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft365.london US · AS16509 · Amazon.com, Inc.2 addressesLookalike of microsoft365.com · the ending .londonAmazon Web Services
DetailsHide details for microsoft365.london
- Domain
- microsoft365.london
- Spelling
- The name of microsoft365.com with the ending .london
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2024-06-25 · GoDaddy.com, LLC
- Addresses
- 3.33.130.190 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)15.197.148.33 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (3.33.130.190, 15.197.148.33): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft365.study US · AS16509 · Amazon.com, Inc.2 addressesLookalike of microsoft365.com · the ending .studyAmazon Web Services
DetailsHide details for microsoft365.study
- Domain
- microsoft365.study
- Spelling
- The name of microsoft365.com with the ending .study
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2024-06-25 · GoDaddy.com, LLC
- Addresses
- 3.33.130.190 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)15.197.148.33 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (3.33.130.190, 15.197.148.33): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- outlook.co.bzLookalike of outlook.com · the ending .co.bzMX present
DetailsHide details for outlook.co.bz
- Domain
- outlook.co.bz
- Spelling
- The name of outlook.com with the ending .co.bz
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Registered
- 2024-06-20 · NameCheap, Inc.
- MX
- aspmx.l.google.comalt1.aspmx.l.google.comalt2.aspmx.l.google.comaspmx2.googlemail.comaspmx3.googlemail.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- icrosoft.email US · AS16509 · Amazon.com, Inc.2 addressesLookalike of microsoft.com · a dropped letterAmazon Web Services
DetailsHide details for icrosoft.email
- Domain
- icrosoft.email
- Spelling
- Spelled like microsoft.com with a dropped letter
- First found
- 2026-11-01 · the day we first found it in the .email zone file, already registered
- Registered
- 2024-06-18 · Porkbun LLC
- Addresses
- 207.207.210.107 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)207.207.210.229 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (207.207.210.107, 207.207.210.229): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- icrosoft365.live US · AS16509 · Amazon.com, Inc.2 addressesLookalike of microsoft365.com · a dropped letterAmazon Web Services
DetailsHide details for icrosoft365.live
- Domain
- icrosoft365.live
- Spelling
- Spelled like microsoft365.com with a dropped letter
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2024-06-18 · Porkbun LLC
- Addresses
- 207.207.210.107 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)207.207.210.229 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (207.207.210.107, 207.207.210.229): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- icrosoft.live US · AS16509 · Amazon.com, Inc.2 addressesLookalike of microsoft.com · a dropped letterAmazon Web Services
DetailsHide details for icrosoft.live
- Domain
- icrosoft.live
- Spelling
- Spelled like microsoft.com with a dropped letter
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2024-06-18 · Porkbun LLC
- Addresses
- 207.207.210.107 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)207.207.210.229 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (207.207.210.107, 207.207.210.229): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoftsonline.orgLookalike of microsoft.com · an added characterNo address or mail server yet
DetailsHide details for microsoftsonline.org
- Domain
- microsoftsonline.org
- Spelling
- Spelled like microsoft.com with an added character
- First found
- 2026-11-01 · the day we first found it in the .org zone file, already registered
- Registered
- 2024-06-13 · Cloudflare, Inc.
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsfot.xyzLookalike of microsoft.com · two letters swappedNo address or mail server yet
DetailsHide details for microsfot.xyz
- Domain
- microsfot.xyz
- Spelling
- Spelled like microsoft.com with two letters swapped
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2024-06-13 · NameSilo, LLC
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- office365.app US · AS16509 · Amazon.com, Inc.2 addressesLookalike of office365.com · the ending .appParking page · Afternic
DetailsHide details for office365.app
- Domain
- office365.app
- Spelling
- The name of office365.com with the ending .app
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2024-06-12 · Global Domains International, Inc. DBA DomainCostClub.com
- Addresses
- 13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
- Parking page · Afternic
- The registry delegates office365.app to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- offlce365.comLookalike of office365.com · similar-looking charactersNo address or mail server yet
DetailsHide details for offlce365.com
- Domain
- offlce365.com
- Spelling
- Spelled like office365.com with similar-looking characters
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2024-06-08 · 1API GmbH
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- gms-office.ovh FR · AS16276 · OVH OVH SASLookalike of microsoft.com · an added characterOVHMX present
DetailsHide details for gms-office.ovh
- Domain
- gms-office.ovh
- Spelling
- Spelled like microsoft.com with an added character
- First found
- 2026-11-01 · the day we first found it in the .ovh zone file, already registered
- Registered
- 2024-06-07 · OVH
- Addresses
- 213.186.33.5 · France · AS16276 OVH OVH SAS · OVH (cloud provider)
- OVH
- OVH (213.186.33.5): a cloud provider. It rents servers and addresses to its customers.
- MX
- mx1.mail.ovh.netmx2.mail.ovh.netmx3.mail.ovh.net
- Daily check
- Ended 2026-11-04 22:41 UTC
- micros0ft.appLookalike of microsoft.com · similar-looking charactersMX present
DetailsHide details for micros0ft.app
- Domain
- micros0ft.app
- Spelling
- Spelled like microsoft.com with similar-looking characters
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2024-06-04 · Porkbun LLC
- MX
- mxa.mailgun.orgmxb.mailgun.org
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft.re US · AS396982 · Google LLCLookalike of microsoft.com · the ending .reGoogle Cloud
DetailsHide details for microsoft.re
- Domain
- microsoft.re
- Spelling
- The name of microsoft.com with the ending .re
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Registered
- 2024-05-28 · Hosting Concepts B.V. d/b/a Openprovider
- Addresses
- 34.117.176.22 · United States · AS396982 GOOGLE-CLOUD-PLATFORM - Google LLC · Google Cloud (cloud provider)
- Google Cloud
- Google Cloud (34.117.176.22): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hotmail.ngLookalike of hotmail.com · the ending .ngMX present
DetailsHide details for hotmail.ng
- Domain
- hotmail.ng
- Spelling
- The name of hotmail.com with the ending .ng
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Registered
- 2024-05-25 · TRUEHOST CLOUD
- MX
- smtp.google.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- micr0soft.xyzLookalike of microsoft.com · similar-looking charactersNo address or mail server yetRegistry lookup queued
DetailsHide details for micr0soft.xyz
- Domain
- micr0soft.xyz
- Spelling
- Spelled like microsoft.com with similar-looking characters
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2024-05-19 · GoDaddy.com, LLC
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft365.tv US · AS16509 · Amazon.com, Inc.2 addressesLookalike of microsoft365.com · the ending .tvAmazon Web ServicesMX present
DetailsHide details for microsoft365.tv
- Domain
- microsoft365.tv
- Spelling
- The name of microsoft365.com with the ending .tv
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2024-05-17 · GoDaddy.com, LLC
- Addresses
- 13.248.243.5 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)76.223.105.230 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (13.248.243.5, 76.223.105.230): a cloud provider. It rents servers and addresses to its customers.
- MX
- microsoft365-tv.mail.protection.outlook.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- hotmaill.appLookalike of hotmail.com · a doubled letterMX present
DetailsHide details for hotmaill.app
- Domain
- hotmaill.app
- Spelling
- Spelled like hotmail.com with a doubled letter
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2024-05-12 · CloudFlare, Inc.
- MX
- mail.hotmaill.app
- Daily check
- Ended 2026-11-04 22:41 UTC
- micro-soc-ft.topLookalike of microsoft.com · an added characterNo address or mail server yet
DetailsHide details for micro-soc-ft.top
- Domain
- micro-soc-ft.top
- Spelling
- Spelled like microsoft.com with an added character
- First found
- 2026-11-03 · the day we first found it in the .top zone file, already registered
- Registered
- 2024-05-08 · NameSilo,LLC
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hotmali.funLookalike of microsoft.com · two letters swappedMX present
DetailsHide details for hotmali.fun
- Domain
- hotmali.fun
- Spelling
- Spelled like microsoft.com with two letters swapped
- First found
- 2026-11-01 · the day we first found it in the .fun zone file, already registered
- Registered
- 2024-04-23 · DNSPod, Inc.
- MX
- mail.hotmali.fun
- Daily check
- Ended 2026-11-04 22:41 UTC
- mcrosoft.fr DE · AS24940 · HETZNER-AS Hetzner Online G…2 addressesLookalike of microsoft.com · a dropped letterHetznerMX present
DetailsHide details for mcrosoft.fr
- Domain
- mcrosoft.fr
- Spelling
- Spelled like microsoft.com with a dropped letter
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2024-04-23 · XNS Registrar B.V.
- Addresses
- 88.198.116.121 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)2a01:4f8:c014:b2d8::1
- Hetzner
- Hetzner (88.198.116.121): a cloud provider. It rents servers and addresses to its customers.
- MX
- mx186.m2bp.commx186.mb1p.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- outlook.org.uk US · AS16509 · Amazon.com, Inc.2 addressesLookalike of outlook.com · the ending .org.ukParking page · Afternic
DetailsHide details for outlook.org.uk
- Domain
- outlook.org.uk
- Spelling
- The name of outlook.com with the ending .org.uk
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Registered
- 2024-04-17 · Premkumar Veerabadran t/a sitekart
- Addresses
- 13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
- Parking page · Afternic
- The registry delegates outlook.org.uk to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hotmall.infoLookalike of hotmail.com · similar-looking charactersMX present
DetailsHide details for hotmall.info
- Domain
- hotmall.info
- Spelling
- Spelled like hotmail.com with similar-looking characters
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2024-04-17 · NameCheap, Inc.
- MX
- route1.mx.cloudflare.netroute2.mx.cloudflare.netroute3.mx.cloudflare.net
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft.com.ua UA · AS200000 · Ukraine-AS Hosting Ukraine …2 addressesLookalike of microsoft.com · the ending .com.uaMX present
DetailsHide details for microsoft.com.ua
- Domain
- microsoft.com.ua
- Spelling
- The name of microsoft.com with the ending .com.ua
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Registered
- 2024-04-06 · PE Freehost
- Addresses
- 185.68.16.174 · Ukraine · AS200000 Ukraine-AS Hosting Ukraine LTD2a00:7a60:0:10ae::1
- MX
- mx.services
- Daily check
- Ended 2026-11-04 22:41 UTC
- hot-mail.asia DE · AS197540 · netcup-AS netcup GmbHLookalike of microsoft.com · an added hyphenMX present
DetailsHide details for hot-mail.asia
- Domain
- hot-mail.asia
- Spelling
- Spelled like microsoft.com with an added hyphen
- First found
- 2026-11-01 · the day we first found it in the .asia zone file, already registered
- Registered
- 2024-04-03 · Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)
- Addresses
- 185.232.69.85 · Germany · AS197540 netcup-AS netcup GmbH
- MX
- hot-mail.asia
- Daily check
- Ended 2026-11-04 22:41 UTC
- hot-mail.funLookalike of microsoft.com · an added hyphenMX present
DetailsHide details for hot-mail.fun
- Domain
- hot-mail.fun
- Spelling
- Spelled like microsoft.com with an added hyphen
- First found
- 2026-11-01 · the day we first found it in the .fun zone file, already registered
- Registered
- 2024-04-03 · Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)
- MX
- route2.mx.cloudflare.netroute3.mx.cloudflare.netroute1.mx.cloudflare.net
- Daily check
- Ended 2026-11-04 22:41 UTC
- hot-mail.icu DE · AS197540 · netcup-AS netcup GmbHLookalike of microsoft.com · an added hyphenMX present
DetailsHide details for hot-mail.icu
- Domain
- hot-mail.icu
- Spelling
- Spelled like microsoft.com with an added hyphen
- First found
- 2026-11-01 · the day we first found it in the .icu zone file, already registered
- Registered
- 2024-04-03 · Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)
- Addresses
- 185.232.69.85 · Germany · AS197540 netcup-AS netcup GmbH
- MX
- route1.mx.cloudflare.netroute2.mx.cloudflare.netroute3.mx.cloudflare.net
- Daily check
- Ended 2026-11-04 22:41 UTC
- hot-mail.loveLookalike of microsoft.com · an added hyphenNo address or mail server yet
DetailsHide details for hot-mail.love
- Domain
- hot-mail.love
- Spelling
- Spelled like microsoft.com with an added hyphen
- First found
- 2026-11-01 · the day we first found it in the .love zone file, already registered
- Registered
- 2024-04-03 · Alibaba Cloud Computing Ltd.
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hot-mail.redLookalike of microsoft.com · an added hyphenMX present
DetailsHide details for hot-mail.red
- Domain
- hot-mail.red
- Spelling
- Spelled like microsoft.com with an added hyphen
- First found
- 2026-11-01 · the day we first found it in the .red zone file, already registered
- Registered
- 2024-04-03 · Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)
- MX
- route1.mx.cloudflare.netroute2.mx.cloudflare.netroute3.mx.cloudflare.net
- Daily check
- Ended 2026-11-04 22:41 UTC
- hot-mail.siteLookalike of microsoft.com · an added hyphenNo address or mail server yet
DetailsHide details for hot-mail.site
- Domain
- hot-mail.site
- Spelling
- Spelled like microsoft.com with an added hyphen
- First found
- 2026-11-01 · the day we first found it in the .site zone file, already registered
- Registered
- 2024-04-03 · Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hot-mail.spaceLookalike of microsoft.com · an added hyphenMX present
DetailsHide details for hot-mail.space
- Domain
- hot-mail.space
- Spelling
- Spelled like microsoft.com with an added hyphen
- First found
- 2026-11-01 · the day we first found it in the .space zone file, already registered
- Registered
- 2024-04-03 · Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)
- MX
- route2.mx.cloudflare.netroute3.mx.cloudflare.netroute1.mx.cloudflare.net
- Daily check
- Ended 2026-11-04 22:41 UTC
- hot-mail.storeLookalike of microsoft.com · an added hyphenMX present
DetailsHide details for hot-mail.store
- Domain
- hot-mail.store
- Spelling
- Spelled like microsoft.com with an added hyphen
- First found
- 2026-11-01 · the day we first found it in the .store zone file, already registered
- Registered
- 2024-04-03 · Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)
- MX
- route1.mx.cloudflare.netroute2.mx.cloudflare.netroute3.mx.cloudflare.net
- Daily check
- Ended 2026-11-04 22:41 UTC
- hot-mail.website DE · AS197540 · netcup-AS netcup GmbHLookalike of microsoft.com · an added hyphenMX present
DetailsHide details for hot-mail.website
- Domain
- hot-mail.website
- Spelling
- Spelled like microsoft.com with an added hyphen
- First found
- 2026-11-01 · the day we first found it in the .website zone file, already registered
- Registered
- 2024-04-03 · Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)
- Addresses
- 185.232.69.85 · Germany · AS197540 netcup-AS netcup GmbH
- MX
- hot-mail.website
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsofft.tech AR · AS16814 · NSS S.A.Lookalike of microsoft.com · a doubled letterMX present
DetailsHide details for microsofft.tech
- Domain
- microsofft.tech
- Spelling
- Spelled like microsoft.com with a doubled letter
- First found
- 2026-11-01 · the day we first found it in the .tech zone file, already registered
- Registered
- 2024-04-03 · HOSTINGER operations, UAB
- Addresses
- 200.123.161.214 · Argentina · AS16814 AS16814 - NSS S.A.
- MX
- mail1.microsofft.tech
- Daily check
- Ended 2026-11-04 22:41 UTC
- xn--offce365-e2a.com US · AS16509 · Amazon.com, Inc.2 addressesLookalike of office365.com · international characters, shown as offíce365.comRegistry lookup queuedAmazon Web Services
DetailsHide details for xn--offce365-e2a.com
- Domain
- xn--offce365-e2a.com
- Spelling
- Spelled like office365.com with international characters, shown as offíce365.com
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2024-04-03 · GoDaddy.com, LLC
- Addresses
- 3.33.130.190 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)15.197.148.33 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (3.33.130.190, 15.197.148.33): a cloud provider. It rents servers and addresses to its customers.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsofts.studioLookalike of microsoft.com · an added characterNo address or mail server yet
DetailsHide details for microsofts.studio
- Domain
- microsofts.studio
- Spelling
- Spelled like microsoft.com with an added character
- First found
- 2026-11-01 · the day we first found it in the .studio zone file, already registered
- Registered
- 2024-04-01 · Name.com, Inc.
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-alerts.email DE · AS47846 · SEDO-AS SEDO GmbHLookalike of microsoft.com · the name with the word “alerts”Parking page · Sedo
DetailsHide details for microsoft-alerts.email
- Domain
- microsoft-alerts.email
- Spelling
- The name of microsoft.com with the word “alerts”
- First found
- 2026-11-01 · the day we first found it in the .email zone file, already registered
- Registered
- 2024-03-29 · NameSilo, LLC
- Addresses
- 91.195.240.123 · Germany · AS47846 SEDO-AS SEDO GmbH · Sedo (parking page)
- Parking page · Sedo
- Sedo (91.195.240.123): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoftt.net AU · AS45638 · SYNERGY WHOLESALE PTY LTDLookalike of microsoft.com · a doubled letter
DetailsHide details for microsoftt.net
- Domain
- microsoftt.net
- Spelling
- Spelled like microsoft.com with a doubled letter
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2024-03-10 · Synergy Wholesale Accreditations Pty Ltd
- Addresses
- 103.42.108.46 · Australia · AS45638 SYNERGYWHOLESALE-AP - SYNERGY WHOLESALE PTY LTD
- Daily check
- Ended 2026-11-04 22:41 UTC
- sharepoints.xyz US · AS13335 · Cloudflare, Inc.4 addressesLookalike of microsoft.com · an added characterCloudflare
DetailsHide details for sharepoints.xyz
- Domain
- sharepoints.xyz
- Spelling
- Spelled like microsoft.com with an added character
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2024-03-08 · Cloudflare, Inc.
- Addresses
- 104.21.68.213 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.198.171 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3031::6815:44d52606:4700:3036::ac43:c6ab
- Cloudflare
- Cloudflare (104.21.68.213, 172.67.198.171): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsofr.net CH · AS211452 · KANTONAR Kanton Appenzell A…2 addressesLookalike of microsoft.com · a letter from a neighbouring key
DetailsHide details for microsofr.net
- Domain
- microsofr.net
- Spelling
- Spelled like microsoft.com with a letter from a neighbouring key
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2024-02-23 · RegistryGate GmbH
- Addresses
- 193.5.177.119 · Switzerland · AS211452 KANTONAR Kanton Appenzell Ausserrhoden2a07:291b:500:1700::119
- Daily check
- Ended 2026-11-04 22:41 UTC
- office365.lat US · AS16509 · Amazon.com, Inc.2 addressesLookalike of office365.com · the ending .latAmazon Web ServicesMX present
DetailsHide details for office365.lat
- Domain
- office365.lat
- Spelling
- The name of office365.com with the ending .lat
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2024-02-03 · Porkbun LLC
- Addresses
- 207.207.210.107 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)207.207.210.229 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (207.207.210.107, 207.207.210.229): a cloud provider. It rents servers and addresses to its customers.
- MX
- office365-lat.mail.protection.outlook.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsofts.top US · AS8075 · Microsoft CorporationLookalike of microsoft.com · an added characterMicrosoft AzureMX present
DetailsHide details for microsofts.top
- Domain
- microsofts.top
- Spelling
- Spelled like microsoft.com with an added character
- First found
- 2026-11-03 · the day we first found it in the .top zone file, already registered
- Registered
- 2024-01-24 · Porkbun LLC
- Addresses
- 20.230.54.136 · United States · AS8075 MICROSOFT-CORP-MSN-AS-BLOCK - Microsoft Corporation · Microsoft Azure (cloud provider)
- Microsoft Azure
- Microsoft Azure (20.230.54.136): a cloud provider. It rents servers and addresses to its customers.
- MX
- microsofts-top.mail.protection.outlook.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft365.co AU · AS133618 · Trellian Pty. LimitedLookalike of microsoft365.com · the ending .coParking page · Above.comMX present
DetailsHide details for microsoft365.co
- Domain
- microsoft365.co
- Spelling
- The name of microsoft365.com with the ending .co
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2024-01-23 · Sav.com, LLC - 2
- Addresses
- 103.224.182.244 · Australia · AS133618 TRELLIAN-AS-AP - Trellian Pty. Limited · Trellian / Above.com (parking page)
- Parking page · Above.com
- The registry delegates microsoft365.co to Above.com’s nameservers, which answer for it. Above.com: a parking service. It answers for names that are typically for sale or unused. Trellian / Above.com (103.224.182.244): a parking service. It answers for names that are typically for sale or unused.
- MX
- park-mx.above.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- onedrivehelp.topLookalike of microsoft.com · the name with an added wordNo address or mail server yet
DetailsHide details for onedrivehelp.top
- Domain
- onedrivehelp.top
- Spelling
- The name of microsoft.com with an added word
- First found
- 2026-11-03 · the day we first found it in the .top zone file, already registered
- Registered
- 2024-01-08 · NameSilo,LLC
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ofrice365.com US · AS8075 · Microsoft CorporationLookalike of office365.com · a letter from a neighbouring keyMicrosoft Azure
DetailsHide details for ofrice365.com
- Domain
- ofrice365.com
- Spelling
- Spelled like office365.com with a letter from a neighbouring key
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2023-12-20 · Squarespace Domains LLC
- Addresses
- 20.151.218.73 · United States · AS8075 MICROSOFT-CORP-MSN-AS-BLOCK - Microsoft Corporation · Microsoft Azure (cloud provider)
- Microsoft Azure
- Microsoft Azure (20.151.218.73): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoftservice.linkLookalike of microsoft.com · the name with an added wordNo address or mail server yet
DetailsHide details for microsoftservice.link
- Domain
- microsoftservice.link
- Spelling
- The name of microsoft.com with an added word
- First found
- 2026-11-01 · the day we first found it in the .link zone file, already registered
- Registered
- 2023-12-06 · NameSilo, LLC
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- onedrive.topLookalike of onedrive.com · the ending .topNo address or mail server yet
DetailsHide details for onedrive.top
- Domain
- onedrive.top
- Spelling
- The name of onedrive.com with the ending .top
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2023-11-30 · Spaceship, Inc.
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- one-drive.space FR · AS16276 · OVH OVH SASLookalike of microsoft.com · an added hyphenOVHMX present
DetailsHide details for one-drive.space
- Domain
- one-drive.space
- Spelling
- Spelled like microsoft.com with an added hyphen
- First found
- 2026-11-01 · the day we first found it in the .space zone file, already registered
- Registered
- 2023-11-27 · IONOS SE
- Addresses
- 51.38.238.202 · France · AS16276 OVH OVH SAS · OVH (cloud provider)
- OVH
- OVH (51.38.238.202): a cloud provider. It rents servers and addresses to its customers.
- MX
- mx00.ionos.frmx01.ionos.fr
- Daily check
- Ended 2026-11-04 22:41 UTC
- mircosoft.email DE · AS15817 · MITTWALD-AS Robert Meyer tr…Lookalike of microsoft.com · two letters swappedMX present
DetailsHide details for mircosoft.email
- Domain
- mircosoft.email
- Spelling
- Spelled like microsoft.com with two letters swapped
- First found
- 2026-11-01 · the day we first found it in the .email zone file, already registered
- Registered
- 2023-11-21 · InterNetX GmbH
- Addresses
- 157.97.43.127 · Germany · AS15817 MITTWALD-AS Robert Meyer trading as "Mittwald CM Service GmbH & Co. KG"
- MX
- mx1.agenturserver.demx2.agenturserver.demx3.agenturserver.demx4.agenturserver.de
- Daily check
- Ended 2026-11-04 22:41 UTC
- onedrive-update.zipLookalike of microsoft.com · the name with an added wordMX present
DetailsHide details for onedrive-update.zip
- Domain
- onedrive-update.zip
- Spelling
- The name of microsoft.com with an added word
- First found
- 2026-11-01 · the day we first found it in the .zip zone file, already registered
- Registered
- 2023-11-17 · Namecheap Inc.
- MX
- eforward1.registrar-servers.comeforward2.registrar-servers.comeforward3.registrar-servers.comeforward4.registrar-servers.comeforward5.registrar-servers.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- office365.ky US · AS16509 · Amazon.com, Inc.2 addressesLookalike of office365.com · the ending .kyAmazon Web Services
DetailsHide details for office365.ky
- Domain
- office365.ky
- Spelling
- The name of office365.com with the ending .ky
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Registered
- 2023-11-07 · GoDaddy
- Addresses
- 3.33.130.190 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)15.197.148.33 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (3.33.130.190, 15.197.148.33): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- mlcrosoft.info DE · AS3209 · VODANET Vodafone GmbHLookalike of microsoft.com · similar-looking charactersRegistry lookup queuedMX present
DetailsHide details for mlcrosoft.info
- Domain
- mlcrosoft.info
- Spelling
- Spelled like microsoft.com with similar-looking characters
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2023-11-03 · Mesh Digital Limited
- Addresses
- 178.13.238.153 · Germany · AS3209 VODANET Vodafone GmbH
- MX
- mxlb.ispgateway.de
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- onedrlve.online NO · AS12996 · DOMENESHOP Domeneshop AS2 addressesLookalike of onedrive.com · similar-looking characters
DetailsHide details for onedrlve.online
- Domain
- onedrlve.online
- Spelling
- Spelled like onedrive.com with similar-looking characters
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2023-11-02 · Domeneshop AS dba domainnameshop.com
- Addresses
- 185.134.245.113 · Norway · AS12996 DOMENESHOP Domeneshop AS2a01:5b40:0:bc03::1
- Daily check
- Ended 2026-11-04 22:41 UTC
- securemsoffice365hub.online DE · AS8560 · IONOS-AS IONOS SE2 addressesLookalike of microsoft.com · the name with an added wordIONOSMX present
DetailsHide details for securemsoffice365hub.online
- Domain
- securemsoffice365hub.online
- Spelling
- The name of microsoft.com with an added word
- First found
- 2026-11-01 · the day we first found it in the .online zone file, already registered
- Registered
- 2023-10-13 · IONOS SE
- Addresses
- 74.208.236.140 · Germany · AS8560 IONOS-AS IONOS SE · IONOS (shared hosting)2607:f1c0:100f:f000::200
- IONOS
- IONOS (74.208.236.140): shared web hosting and domain registration. One address typically serves many customer sites.
- MX
- mx00.ionos.commx01.ionos.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- 0ffice365.live US · AS16509 · Amazon.com, Inc.2 addressesLookalike of office365.com · similar-looking charactersRegistry lookup queuedAmazon Web Services
DetailsHide details for 0ffice365.live
- Domain
- 0ffice365.live
- Spelling
- Spelled like office365.com with similar-looking characters
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2023-10-09 · GoDaddy.com, LLC
- Addresses
- 13.248.213.45 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)76.223.67.189 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (13.248.213.45, 76.223.67.189): a cloud provider. It rents servers and addresses to its customers.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- onedrive.uk DE · AS47846 · SEDO-AS SEDO GmbHLookalike of onedrive.com · the ending .ukParking page · Sedo
DetailsHide details for onedrive.uk
- Domain
- onedrive.uk
- Spelling
- The name of onedrive.com with the ending .uk
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Registered
- 2023-10-07 · Realtime Register BV
- Addresses
- 64.190.63.111 · Germany · AS47846 SEDO-AS SEDO GmbH · Sedo (parking page)
- Parking page · Sedo
- The registry delegates onedrive.uk to Sedo’s nameservers, which answer for it. Sedo (64.190.63.111): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microssoft.dev US · AS16509 · Amazon.com, Inc.2 addressesLookalike of microsoft.com · a doubled letterRegistry lookup queuedAmazon Web Services
DetailsHide details for microssoft.dev
- Domain
- microssoft.dev
- Spelling
- Spelled like microsoft.com with a doubled letter
- First found
- 2026-11-01 · the day we first found it in the .dev zone file, already registered
- Registered
- 2023-09-25 · GoDaddy.com, LLC
- Addresses
- 13.248.213.45 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)76.223.67.189 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (13.248.213.45, 76.223.67.189): a cloud provider. It rents servers and addresses to its customers.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microssoft.app US · AS16509 · Amazon.com, Inc.2 addressesLookalike of microsoft.com · a doubled letterRegistry lookup queuedAmazon Web Services
DetailsHide details for microssoft.app
- Domain
- microssoft.app
- Spelling
- Spelled like microsoft.com with a doubled letter
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2023-09-25 · GoDaddy.com, LLC
- Addresses
- 13.248.213.45 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)76.223.67.189 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (13.248.213.45, 76.223.67.189): a cloud provider. It rents servers and addresses to its customers.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microssoft.cloud US · AS16509 · Amazon.com, Inc.2 addressesLookalike of microsoft.com · a doubled letterRegistry lookup queuedAmazon Web Services
DetailsHide details for microssoft.cloud
- Domain
- microssoft.cloud
- Spelling
- Spelled like microsoft.com with a doubled letter
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2023-09-25 · GoDaddy
- Addresses
- 13.248.213.45 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)76.223.67.189 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (13.248.213.45, 76.223.67.189): a cloud provider. It rents servers and addresses to its customers.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microssoft.co US · AS16509 · Amazon.com, Inc.2 addressesLookalike of microsoft.com · a doubled letterAmazon Web Services
DetailsHide details for microssoft.co
- Domain
- microssoft.co
- Spelling
- Spelled like microsoft.com with a doubled letter
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2023-09-25 · GoDaddy.com, LLC
- Addresses
- 13.248.213.45 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)76.223.67.189 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (13.248.213.45, 76.223.67.189): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- onedrives.live DE · AS680 · DFN Verein zur Foerderung e…Lookalike of microsoft.com · an added characterMX present
DetailsHide details for onedrives.live
- Domain
- onedrives.live
- Spelling
- Spelled like microsoft.com with an added character
- First found
- 2026-11-01 · the day we first found it in the .live zone file, already registered
- Registered
- 2023-09-15 · NameCheap, Inc.
- Addresses
- 194.95.33.17 · Germany · AS680 DFN Verein zur Foerderung eines Deutschen Forschungsnetzes e.V.
- MX
- mx.onedrives.live
- Daily check
- Ended 2026-11-04 22:41 UTC
- mlcrosoft.email US · AS13335 · Cloudflare, Inc.4 addressesLookalike of microsoft.com · similar-looking charactersCloudflare
DetailsHide details for mlcrosoft.email
- Domain
- mlcrosoft.email
- Spelling
- Spelled like microsoft.com with similar-looking characters
- First found
- 2026-11-01 · the day we first found it in the .email zone file, already registered
- Registered
- 2023-09-06 · Gandi SAS
- Addresses
- 212.104.128.0 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)212.104.128.1 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)212.104.128.2 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)212.104.128.3 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (212.104.128.0, 212.104.128.1, 212.104.128.2, 212.104.128.3): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsotf.cz CZ · AS24971 · MASTER-AS MasterDC s.r.o.Lookalike of microsoft.com · two letters swappedMX present
DetailsHide details for microsotf.cz
- Domain
- microsotf.cz
- Spelling
- Spelled like microsoft.com with two letters swapped
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2023-09-06 · ACTIVE 24, s.r.o.
- Addresses
- 37.205.13.152 · Czechia · AS24971 MASTER-AS MasterDC s.r.o.
- MX
- mail.microsotf.cz
- Daily check
- Ended 2026-11-04 22:41 UTC
- mycrosoft.win US · AS13335 · Cloudflare, Inc.4 addressesLookalike of microsoft.com · a changed characterCloudflare
DetailsHide details for mycrosoft.win
- Domain
- mycrosoft.win
- Spelling
- Spelled like microsoft.com with a changed character
- First found
- 2026-11-01 · the day we first found it in the .win zone file, already registered
- Registered
- 2023-08-31 · Cloudflare, Inc.
- Addresses
- 104.21.92.155 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.195.77 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3036::6815:5c9b2606:4700:3037::ac43:c34d
- Cloudflare
- Cloudflare (104.21.92.155, 172.67.195.77): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- outlook.clubLookalike of outlook.com · the ending .clubMX present
DetailsHide details for outlook.club
- Domain
- outlook.club
- Spelling
- The name of outlook.com with the ending .club
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Registered
- 2023-08-26 · GoDaddy.com, LLC
- MX
- aspmx.l.google.comalt1.aspmx.l.google.comalt2.aspmx.l.google.comalt3.aspmx.l.google.comalt4.aspmx.l.google.com
- Daily check
- Ended 2026-11-04 22:41 UTC
Registered domains using the name
Domains from registry zone files (ICANN CZDS), checked daily like the lookalikes above. Each row says how it matches Microsoft's names. Resellers, fans and other businesses register names like these too. Our zone data terms apply to them.
100 of 808 shown: listed ones first, then the newest registrations.
- sharepoint365.support KN · AS402253 · SKN Subnet & Telecom LtdContains “sharepoint”Address on Spamhaus DROP
DetailsHide details for sharepoint365.support
- Domain
- sharepoint365.support
- Match
- A new registration containing “sharepoint”, one of the names we match for Microsoft
- First found
- 2026-11-05 · the day the .support zone file first listed it as a new registration
- Registered
- 2026-11-04 · Spaceship, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on Spamhaus DROP
- 104.251.180.138 is on Spamhaus DROP · sharepoint365.support resolved to it 2026-11-05 05:11 UTC
- Addresses
- 104.251.180.138 · St. Kitts & Nevis · AS402253 SKN-NETWORK-1 - SKN Subnet & Telecom Ltd
- Daily check
- Ended 2026-11-04 22:41 UTC
- cdn-microsoft.top SG · AS63949 · Akamai Connected Cloud3 addressesContains “microsoft”2 addresses on DomainSpoof’s phishing-host listAkamai Linode
DetailsHide details for cdn-microsoft.top
- Domain
- cdn-microsoft.top
- Match
- A new registration containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-05 · the day the .top zone file first listed it as a new registration
- Registered
- 2026-11-04 · NameSilo,LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- 2 addresses on DomainSpoof’s phishing-host list
- 172.232.24.161 (cdn-microsoft.top resolved to it 2026-11-05 04:17 UTC), 172.232.24.235 (cdn-microsoft.top resolved to it 2026-11-05 04:17 UTC) are on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours
- Addresses
- 45.79.154.26 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)172.232.24.161 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)172.232.24.235 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
- Akamai Linode
- Akamai Linode (45.79.154.26, 172.232.24.161, 172.232.24.235): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoftoffice365.top SG · AS63949 · Akamai Connected Cloud3 addressesContains “microsoft”Listed by MetaMask3 addresses on DomainSpoof’s phishing-host listAkamai Linode
DetailsHide details for microsoftoffice365.top
- Domain
- microsoftoffice365.top
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-03 · the day we first found it in the .top zone file, already registered
- Registered
- 2026-10-30 · NameSilo,LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Listed by MetaMask
- Listed by MetaMask · microsoftoffice365.top · in the feed since 2026-11-01 11:44 UTC
- 3 addresses on DomainSpoof’s phishing-host list
- 172.232.24.161 (microsoftoffice365.top resolved to it 2026-11-05 00:46 UTC), 172.232.24.235 (microsoftoffice365.top resolved to it 2026-11-05 00:46 UTC), 172.234.25.42 (microsoftoffice365.top resolved to it 2026-11-05 00:46 UTC) are on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours
- Addresses
- 172.232.24.161 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)172.232.24.235 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)172.234.25.42 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
- Akamai Linode
- Akamai Linode (172.232.24.161, 172.232.24.235, 172.234.25.42): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- onedrive-sync.top SG · AS63949 · Akamai Connected Cloud3 addressesContains “onedrive”3 addresses on DomainSpoof’s phishing-host listAkamai Linode
DetailsHide details for onedrive-sync.top
- Domain
- onedrive-sync.top
- Match
- A domain containing “onedrive”, one of the names we match for Microsoft
- First found
- 2026-11-03 · the day we first found it in the .top zone file, already registered
- Registered
- 2026-10-29 · NameSilo,LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- 3 addresses on DomainSpoof’s phishing-host list
- 172.232.24.161 (onedrive-sync.top resolved to it 2026-11-05 00:46 UTC), 172.232.24.235 (onedrive-sync.top resolved to it 2026-11-05 00:46 UTC), 172.234.25.42 (onedrive-sync.top resolved to it 2026-11-05 00:46 UTC) are on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours
- Addresses
- 172.232.24.161 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)172.232.24.235 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)172.234.25.42 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
- Akamai Linode
- Akamai Linode (172.232.24.161, 172.232.24.235, 172.234.25.42): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoftsupp.info RU · AS209207 · DHOST-AS Digital Hosting Pr…Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for microsoftsupp.info
- Domain
- microsoftsupp.info
- Match
- A registered domain containing “microsoft”, one of the names we match for Microsoft
- Zone file copy
- 2026-10-31 · the day of the .info zone file copy it was found in
- Registered
- 2026-10-22 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 168.113.215.244 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoftsupp.info resolved to it 2026-11-05 00:46 UTC
- Addresses
- 168.113.215.244 · Russia · AS209207 DHOST-AS Digital Hosting Provider LLC
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-office.topContains “microsoft”Listed by MetaMaskNo address or mail server yet
DetailsHide details for microsoft-office.top
- Domain
- microsoft-office.top
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-03 · the day we first found it in the .top zone file, already registered
- Registered
- 2026-10-18 · West263 International Limited
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Listed by MetaMask
- Listed by MetaMask · microsoft-office.top · in the feed since 2026-10-27 05:34 UTC
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoftsharefile.topContains “microsoft”Listed by MetaMaskNo address or mail server yet
DetailsHide details for microsoftsharefile.top
- Domain
- microsoftsharefile.top
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-03 · the day we first found it in the .top zone file, already registered
- Registered
- 2026-10-18 · NameSilo,LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Listed by MetaMask
- Listed by MetaMask · microsoftsharefile.top · in the feed since 2026-10-27 05:34 UTC
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoftsharefile1.topContains “microsoft”Listed by MetaMaskNo address or mail server yet
DetailsHide details for microsoftsharefile1.top
- Domain
- microsoftsharefile1.top
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-03 · the day we first found it in the .top zone file, already registered
- Registered
- 2026-10-18 · NameSilo,LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Listed by MetaMask
- Listed by MetaMask · microsoftsharefile1.top · in the feed since 2026-10-27 05:34 UTC
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoftes.liveContains “microsoft”Listed by MetaMaskNo address or mail server yet
DetailsHide details for microsoftes.live
- Domain
- microsoftes.live
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .live zone file, already registered
- Registered
- 2026-10-06 · Dynadot Inc
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Listed by MetaMask
- Listed by MetaMask · microsoftes.live · in the feed since 2026-10-27 05:34 UTC
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-teams.sbs US · AS13335 · Cloudflare, Inc.4 addressesContains “microsoft”Listed by MetaMaskCloudflare
DetailsHide details for microsoft-teams.sbs
- Domain
- microsoft-teams.sbs
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .sbs zone file, already registered
- Registered
- 2026-10-03 · Dynadot Inc
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Listed by MetaMask
- Listed by MetaMask · microsoft-teams.sbs · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.32.178 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.153.49 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3036::ac43:99312606:4700:3037::6815:20b2
- Cloudflare
- Cloudflare (104.21.32.178, 172.67.153.49): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-office365.site US · AS13335 · Cloudflare, Inc.4 addressesContains “microsoft”Listed by MetaMaskReported by PhishDestroyCloudflareMX present
DetailsHide details for microsoft-office365.site
- Domain
- microsoft-office365.site
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .site zone file, already registered
- Registered
- 2026-09-26 · Cloudflare, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Listed by MetaMask
- Listed by MetaMask · microsoft-office365.site · in the feed since 2026-10-27 05:34 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · microsoft-office365.site · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 104.21.16.197 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.215.149 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3034::ac43:d7952606:4700:3035::6815:10c5
- Cloudflare
- Cloudflare (104.21.16.197, 172.67.215.149): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- MX
- mx01.mail.icloud.commx02.mail.icloud.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-onedrive.org SG · AS63949 · Akamai Connected CloudContains “microsoft”Listed by MetaMaskAkamai Linode
DetailsHide details for microsoft-onedrive.org
- Domain
- microsoft-onedrive.org
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .org zone file, already registered
- Registered
- 2026-09-25 · Squarespace Domains LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Listed by MetaMask
- Listed by MetaMask · microsoft-onedrive.org · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 74.207.228.73 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
- Akamai Linode
- Akamai Linode (74.207.228.73): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-edge.download IS · AS50613 · ThorDC-AS Advania Island ehfContains “microsoft”Address on DomainSpoof’s phishing-host listMX present
DetailsHide details for microsoft-edge.download
- Domain
- microsoft-edge.download
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .download zone file, already registered
- Registered
- 2026-09-23 · TLD Registrar Solutions Ltd.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 82.221.136.24 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-edge.download resolved to it 2026-11-05 00:46 UTC
- Addresses
- 82.221.136.24 · Iceland · AS50613 ThorDC-AS Advania Island ehf
- MX
- mx1.sf.ice-networks.commx2.sf.ice-networks.commx3.sf.ice-networks.commx4.sf.ice-networks.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- office-365.shop DE · AS8560 · IONOS-AS IONOS SE2 addressesContains “office-365”Address on DomainSpoof’s phishing-host listIONOSMX present
DetailsHide details for office-365.shop
- Domain
- office-365.shop
- Match
- A registered domain containing “office-365”, one of the names we match for Microsoft
- Zone file copy
- 2026-10-31 · the day of the .shop zone file copy it was found in
- Registered
- 2026-09-22 · IONOS SE
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 217.160.0.115 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · office-365.shop resolved to it 2026-11-05 00:46 UTC
- Addresses
- 217.160.0.115 · Germany · AS8560 IONOS-AS IONOS SE · IONOS (shared hosting)2001:8d8:100f:f000::200
- IONOS
- IONOS (217.160.0.115): shared web hosting and domain registration. One address typically serves many customer sites.
- MX
- mail.protonmail.chmailsec.protonmail.ch
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-teams.sarlContains “microsoft”Listed by MetaMaskNo address or mail server yet
DetailsHide details for microsoft-teams.sarl
- Domain
- microsoft-teams.sarl
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .sarl zone file, already registered
- Registered
- 2026-09-19 · Cloudflare, Inc
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Listed by MetaMask
- Listed by MetaMask · microsoft-teams.sarl · in the feed since 2026-10-27 05:34 UTC
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-meet.live PA · AS64107 · RACK SPHERE HOSTING S.A.Contains “microsoft”Listed by MetaMask
DetailsHide details for microsoft-meet.live
- Domain
- microsoft-meet.live
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .live zone file, already registered
- Registered
- 2026-09-15 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Listed by MetaMask
- Listed by MetaMask · microsoft-meet.live · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 45.225.135.67 · Panama · AS64107 AS64107 - RACK SPHERE HOSTING S.A.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-cedar-technologies.click SG · AS63949 · Akamai Connected Cloud3 addressesContains “microsoft”3 addresses on DomainSpoof’s phishing-host listAkamai Linode
DetailsHide details for microsoft-cedar-technologies.click
- Domain
- microsoft-cedar-technologies.click
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .click zone file, already registered
- Registered
- 2026-08-21 · NameSilo, LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- 3 addresses on DomainSpoof’s phishing-host list
- 172.232.24.161 (microsoft-cedar-technologies.click resolved to it 2026-11-05 00:46 UTC), 172.232.24.235 (microsoft-cedar-technologies.click resolved to it 2026-11-05 00:46 UTC), 172.234.25.42 (microsoft-cedar-technologies.click resolved to it 2026-11-05 00:46 UTC) are on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours
- Addresses
- 172.232.24.161 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)172.232.24.235 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)172.234.25.42 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
- Akamai Linode
- Akamai Linode (172.232.24.161, 172.232.24.235, 172.234.25.42): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- com-onedrive.live US · AS13335 · Cloudflare, Inc.4 addressesContains “onedrive”Listed by MetaMaskCloudflare
DetailsHide details for com-onedrive.live
- Domain
- com-onedrive.live
- Match
- A domain containing “onedrive”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .live zone file, already registered
- Registered
- 2026-08-16 · Cloudflare, Inc
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Listed by MetaMask
- Listed by MetaMask · com-onedrive.live · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.33.172 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.165.13 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3034::6815:21ac2606:4700:3036::ac43:a50d
- Cloudflare
- Cloudflare (104.21.33.172, 172.67.165.13): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft3.sbsContains “microsoft”Listed by MetaMaskNo address or mail server yet
DetailsHide details for microsoft3.sbs
- Domain
- microsoft3.sbs
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .sbs zone file, already registered
- Registered
- 2026-08-07 · NameSilo, LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Listed by MetaMask
- Listed by MetaMask · microsoft3.sbs · in the feed since 2026-10-27 05:34 UTC
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoftonline-sharepoint-com.live US · AS13335 · Cloudflare, Inc.4 addressesContains “microsoftonline”Listed by MetaMaskCloudflare
DetailsHide details for microsoftonline-sharepoint-com.live
- Domain
- microsoftonline-sharepoint-com.live
- Match
- A domain containing “microsoftonline”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .live zone file, already registered
- Registered
- 2026-08-07 · Cloudflare, Inc
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Listed by MetaMask
- Listed by MetaMask · microsoftonline-sharepoint-com.live · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.51.191 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.184.169 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3031::6815:33bf2606:4700:3032::ac43:b8a9
- Cloudflare
- Cloudflare (104.21.51.191, 172.67.184.169): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoftonline-sharepoint.online US · AS14061 · DigitalOcean, LLCContains “microsoftonline”Listed by MetaMaskDigitalOcean
DetailsHide details for microsoftonline-sharepoint.online
- Domain
- microsoftonline-sharepoint.online
- Match
- A domain containing “microsoftonline”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .online zone file, already registered
- Registered
- 2026-07-27 · Cloudflare, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Listed by MetaMask
- Listed by MetaMask · microsoftonline-sharepoint.online · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 178.62.99.223 · United States · AS14061 DIGITALOCEAN-ASN - DigitalOcean, LLC · DigitalOcean (cloud provider)
- DigitalOcean
- DigitalOcean (178.62.99.223): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- office365microsoft.help SG · AS63949 · Akamai Connected Cloud3 addressesContains “microsoft”3 addresses on DomainSpoof’s phishing-host listAkamai LinodeMX present
DetailsHide details for office365microsoft.help
- Domain
- office365microsoft.help
- Match
- A registered domain containing “microsoft”, one of the names we match for Microsoft
- Zone file copy
- 2026-10-31 · the day of the .help zone file copy it was found in
- Registered
- 2026-07-26 · NameSilo, LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- 3 addresses on DomainSpoof’s phishing-host list
- 172.232.24.161 (office365microsoft.help resolved to it 2026-11-05 00:46 UTC), 172.232.24.235 (office365microsoft.help resolved to it 2026-11-05 00:46 UTC), 172.234.25.42 (office365microsoft.help resolved to it 2026-11-05 00:46 UTC) are on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours
- Addresses
- 172.232.24.161 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)172.232.24.235 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)172.234.25.42 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
- Akamai Linode
- Akamai Linode (172.232.24.161, 172.232.24.235, 172.234.25.42): a cloud provider. It rents servers and addresses to its customers.
- MX
- mx1.titan.emailmx2.titan.email
- Daily check
- Ended 2026-11-04 22:41 UTC
- msoffice.email CY · AS47583 · AS-HOSTINGER Hostinger Inte…Contains “msoffice”Address on DomainSpoof’s phishing-host listHostinger
DetailsHide details for msoffice.email
- Domain
- msoffice.email
- Match
- A domain containing “msoffice”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .email zone file, already registered
- Registered
- 2026-07-24 · HOSTINGER operations, UAB
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · msoffice.email resolved to it 2026-11-05 00:46 UTC
- Addresses
- 2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
- Hostinger
- Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
- Daily check
- Ended 2026-11-04 22:41 UTC
- msoffice.live CY · AS47583 · AS-HOSTINGER Hostinger Inte…Contains “msoffice”Address on DomainSpoof’s phishing-host listHostinger
DetailsHide details for msoffice.live
- Domain
- msoffice.live
- Match
- A registered domain containing “msoffice”, one of the names we match for Microsoft
- Zone file copy
- 2026-10-31 · the day of the .live zone file copy it was found in
- Registered
- 2026-07-24 · HOSTINGER operations, UAB
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · msoffice.live resolved to it 2026-11-05 00:46 UTC
- Addresses
- 2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
- Hostinger
- Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoftonline-outlook.live US · AS13335 · Cloudflare, Inc.4 addressesContains “microsoftonline”Listed by MetaMaskCloudflare
DetailsHide details for microsoftonline-outlook.live
- Domain
- microsoftonline-outlook.live
- Match
- A domain containing “microsoftonline”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .live zone file, already registered
- Registered
- 2026-07-17 · Cloudflare, Inc
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Listed by MetaMask
- Listed by MetaMask · microsoftonline-outlook.live · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.24.65 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.217.82 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3030::6815:18412606:4700:3031::ac43:d952
- Cloudflare
- Cloudflare (104.21.24.65, 172.67.217.82): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- onmicrosoftfolder.sbs SG · AS63949 · Akamai Connected Cloud3 addressesContains “microsoft”3 addresses on DomainSpoof’s phishing-host listAkamai Linode
DetailsHide details for onmicrosoftfolder.sbs
- Domain
- onmicrosoftfolder.sbs
- Match
- A registered domain containing “microsoft”, one of the names we match for Microsoft
- Zone file copy
- 2026-10-31 · the day of the .sbs zone file copy it was found in
- Registered
- 2026-07-08 · NameSilo, LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- 3 addresses on DomainSpoof’s phishing-host list
- 172.232.24.161 (onmicrosoftfolder.sbs resolved to it 2026-11-05 00:46 UTC), 172.232.24.235 (onmicrosoftfolder.sbs resolved to it 2026-11-05 00:46 UTC), 172.234.25.42 (onmicrosoftfolder.sbs resolved to it 2026-11-05 00:46 UTC) are on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours
- Addresses
- 172.232.24.161 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)172.232.24.235 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)172.234.25.42 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
- Akamai Linode
- Akamai Linode (172.232.24.161, 172.232.24.235, 172.234.25.42): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoftprada.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for microsoftprada.xyz
- Domain
- microsoftprada.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-07-04 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoftprada.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoftcisco.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for microsoftcisco.xyz
- Domain
- microsoftcisco.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-07-02 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoftcisco.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoftinstagram.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for microsoftinstagram.xyz
- Domain
- microsoftinstagram.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-07-02 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoftinstagram.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsofttencent.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for microsofttencent.xyz
- Domain
- microsofttencent.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-07-02 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsofttencent.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hsbc-microsoft.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for hsbc-microsoft.xyz
- Domain
- hsbc-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-29 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · hsbc-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- ibm-microsoft.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for ibm-microsoft.xyz
- Domain
- ibm-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-29 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · ibm-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-bmw.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for microsoft-bmw.xyz
- Domain
- microsoft-bmw.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-29 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-bmw.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-fedex.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for microsoft-fedex.xyz
- Domain
- microsoft-fedex.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-29 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-fedex.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-nintendo.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for microsoft-nintendo.xyz
- Domain
- microsoft-nintendo.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-29 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-nintendo.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-puma.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for microsoft-puma.xyz
- Domain
- microsoft-puma.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-29 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-puma.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-sap.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for microsoft-sap.xyz
- Domain
- microsoft-sap.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-29 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-sap.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-target.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for microsoft-target.xyz
- Domain
- microsoft-target.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-29 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-target.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-volkswagen.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for microsoft-volkswagen.xyz
- Domain
- microsoft-volkswagen.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-29 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-volkswagen.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- nintendo-microsoft.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for nintendo-microsoft.xyz
- Domain
- nintendo-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-29 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · nintendo-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- cisco-microsoft.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for cisco-microsoft.xyz
- Domain
- cisco-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-28 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · cisco-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- hermes-microsoft.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for hermes-microsoft.xyz
- Domain
- hermes-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-28 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · hermes-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- kia-microsoft.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for kia-microsoft.xyz
- Domain
- kia-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-28 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · kia-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-amazon.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for microsoft-amazon.xyz
- Domain
- microsoft-amazon.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-28 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-amazon.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-hyundai.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for microsoft-hyundai.xyz
- Domain
- microsoft-hyundai.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-28 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-hyundai.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-nescafe.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for microsoft-nescafe.xyz
- Domain
- microsoft-nescafe.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-28 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-nescafe.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-pepsi.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for microsoft-pepsi.xyz
- Domain
- microsoft-pepsi.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-28 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-pepsi.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-starbucks.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for microsoft-starbucks.xyz
- Domain
- microsoft-starbucks.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-28 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-starbucks.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-zara.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for microsoft-zara.xyz
- Domain
- microsoft-zara.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-28 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-zara.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- paypal-microsoft.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for paypal-microsoft.xyz
- Domain
- paypal-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-28 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · paypal-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- prada-microsoft.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for prada-microsoft.xyz
- Domain
- prada-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-28 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · prada-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- gillette-microsoft.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for gillette-microsoft.xyz
- Domain
- gillette-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-27 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · gillette-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-netflix.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for microsoft-netflix.xyz
- Domain
- microsoft-netflix.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-27 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-netflix.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- tencent-microsoft.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for tencent-microsoft.xyz
- Domain
- tencent-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-27 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · tencent-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- totalenergies-microsoft.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for totalenergies-microsoft.xyz
- Domain
- totalenergies-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-27 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · totalenergies-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- sap-microsoft.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”Address on DomainSpoof’s phishing-host listHetzner
DetailsHide details for sap-microsoft.xyz
- Domain
- sap-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-26 · NicNames, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · sap-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
- Hetzner
- Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- sharepoint.tips DE · AS212317 · HETZNER-CLOUD3-AS Hetzner O…14 addressesContains “sharepoint”5 addresses on DomainSpoof’s phishing-host listHetzner +1
DetailsHide details for sharepoint.tips
- Domain
- sharepoint.tips
- Match
- A domain containing “sharepoint”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .tips zone file, already registered
- Registered
- 2026-06-15 · Domain Science Kutatási Szolgáltató Korlátolt Felelősségű Társaság
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- 5 addresses on DomainSpoof’s phishing-host list
- 195.201.128.179 (sharepoint.tips resolved to it 2026-11-05 00:46 UTC), 46.62.237.138 (sharepoint.tips resolved to it 2026-11-05 00:46 UTC), 5.161.230.87 (sharepoint.tips resolved to it 2026-11-05 00:46 UTC), 5.161.47.86 (sharepoint.tips resolved to it 2026-11-05 00:46 UTC), 5.78.156.59 (sharepoint.tips resolved to it 2026-11-05 00:46 UTC) are on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours
- Addresses
- 5.78.156.59 · Germany · AS212317 HETZNER-CLOUD3-AS Hetzner Online GmbH5.161.47.86 · Germany · AS213230 HETZNER-CLOUD2-AS Hetzner Online GmbH5.161.230.87 · Germany · AS213230 HETZNER-CLOUD2-AS Hetzner Online GmbH46.62.237.138 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)76.223.91.20 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)195.201.128.179 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)2406:da1e:214:c901:49:871:e9e1:eb922600:1f1c:6db:8801:ca20:5f5a:5f45:48d02a05:d014:179b:c400:b5e:feaf:a6dc:b5082a05:d014:179b:c400:2dc9:16fd:7cbd:e2552a05:d014:179b:c400:5ed8:1db0:4443:ca252a05:d014:179b:c400:a327:40ee:24cc:61802a05:d014:179b:c400:aa99:a226:6c94:e722a05:d014:179b:c400:adda:f567:8e83:5e24
- Hetzner +1
- Hetzner (46.62.237.138, 195.201.128.179): a cloud provider. It rents servers and addresses to its customers. Amazon Web Services (76.223.91.20): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-ai-claude.top DE · AS47846 · SEDO-AS SEDO GmbHContains “microsoft”Listed by MetaMaskParking page · Sedo
DetailsHide details for microsoft-ai-claude.top
- Domain
- microsoft-ai-claude.top
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-03 · the day we first found it in the .top zone file, already registered
- Registered
- 2026-05-29 · NameSilo,LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Listed by MetaMask
- Listed by MetaMask · microsoft-ai-claude.top · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 91.195.240.123 · Germany · AS47846 SEDO-AS SEDO GmbH · Sedo (parking page)
- Parking page · Sedo
- Sedo (91.195.240.123): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-google.top DE · AS47846 · SEDO-AS SEDO GmbHContains “microsoft”Listed by MetaMaskParking page · Sedo
DetailsHide details for microsoft-google.top
- Domain
- microsoft-google.top
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-03 · the day we first found it in the .top zone file, already registered
- Registered
- 2026-05-29 · NameSilo,LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Listed by MetaMask
- Listed by MetaMask · microsoft-google.top · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 91.195.240.123 · Germany · AS47846 SEDO-AS SEDO GmbH · Sedo (parking page)
- Parking page · Sedo
- Sedo (91.195.240.123): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoftcom.live US · AS16509 · Amazon.com, Inc.2 addressesContains “microsoft”Listed by MetaMaskReported by PhishDestroyRegistry lookup queuedAmazon Web Services
DetailsHide details for microsoftcom.live
- Domain
- microsoftcom.live
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .live zone file, already registered
- Registered
- 2026-05-29 · GoDaddy.com, LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Listed by MetaMask
- Listed by MetaMask · microsoftcom.live · in the feed since 2026-10-27 05:34 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · microsoftcom.live · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 13.248.243.5 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)76.223.105.230 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (13.248.243.5, 76.223.105.230): a cloud provider. It rents servers and addresses to its customers.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- evaservi-hotmail.online DE · AS8560 · IONOS-AS IONOS SEContains “hotmail”Address on DomainSpoof’s phishing-host listIONOSMX present
DetailsHide details for evaservi-hotmail.online
- Domain
- evaservi-hotmail.online
- Match
- A domain containing “hotmail”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .online zone file, already registered
- Registered
- 2026-05-24 · IONOS SE
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 217.76.128.47 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · evaservi-hotmail.online resolved to it 2026-11-05 00:46 UTC
- Addresses
- 217.76.128.47 · Germany · AS8560 IONOS-AS IONOS SE · IONOS (shared hosting)
- IONOS
- IONOS (217.76.128.47): shared web hosting and domain registration. One address typically serves many customer sites.
- MX
- mx.serviciodecorreo.es
- Daily check
- Ended 2026-11-04 22:41 UTC
- outlook-mail.site CY · AS47583 · AS-HOSTINGER Hostinger Inte…Contains “outlook”Address on DomainSpoof’s phishing-host listHostinger
DetailsHide details for outlook-mail.site
- Domain
- outlook-mail.site
- Match
- A registered domain containing “outlook”, one of the names we match for Microsoft
- Zone file copy
- 2026-10-31 · the day of the .site zone file copy it was found in
- Registered
- 2026-04-24 · HOSTINGER operations, UAB
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · outlook-mail.site resolved to it 2026-11-05 00:46 UTC
- Addresses
- 2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
- Hostinger
- Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
- Daily check
- Ended 2026-11-04 22:41 UTC
- entra-id-platform.online JP · AS7506 · GMO Internet, Inc.Contains “entra-id”Address on DomainSpoof’s phishing-host list
DetailsHide details for entra-id-platform.online
- Domain
- entra-id-platform.online
- Match
- A domain containing “entra-id”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .online zone file, already registered
- Registered
- 2026-04-19 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · entra-id-platform.online resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- azure-microsoft.top JP · AS9370 · SAKURA Internet Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for azure-microsoft.top
- Domain
- azure-microsoft.top
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-03 · the day we first found it in the .top zone file, already registered
- Registered
- 2026-04-09 · GMO Internet, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 160.16.200.77 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · azure-microsoft.top resolved to it 2026-11-05 00:46 UTC
- Addresses
- 160.16.200.77 · Japan · AS9370 SAKURA-B - SAKURA Internet Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- team-microsoft.top JP · AS9370 · SAKURA Internet Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for team-microsoft.top
- Domain
- team-microsoft.top
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-03 · the day we first found it in the .top zone file, already registered
- Registered
- 2026-04-09 · GMO Internet, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 160.16.200.77 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · team-microsoft.top resolved to it 2026-11-05 00:46 UTC
- Addresses
- 160.16.200.77 · Japan · AS9370 SAKURA-B - SAKURA Internet Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- microsoft-office365.cloud DE · AS8560 · IONOS-AS IONOS SE2 addressesContains “microsoft”Reported by PhishDestroyAddress on DomainSpoof’s phishing-host listIONOSMX present
DetailsHide details for microsoft-office365.cloud
- Domain
- microsoft-office365.cloud
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .cloud zone file, already registered
- Registered
- 2026-03-18 · IONOS SE
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · microsoft-office365.cloud · in the feed since 2026-10-25 23:31 UTC
- Address on DomainSpoof’s phishing-host list
- 217.160.0.235 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-office365.cloud resolved to it 2026-11-05 00:46 UTC
- Addresses
- 217.160.0.235 · Germany · AS8560 IONOS-AS IONOS SE · IONOS (shared hosting)2001:8d8:100f:f000::200
- IONOS
- IONOS (217.160.0.235): shared web hosting and domain registration. One address typically serves many customer sites.
- MX
- mx00.ionos.demx01.ionos.de
- Daily check
- Ended 2026-11-04 22:41 UTC
- office365online.live CY · AS47583 · AS-HOSTINGER Hostinger Inte…Contains “office365”Address on DomainSpoof’s phishing-host listHostingerMX present
DetailsHide details for office365online.live
- Domain
- office365online.live
- Match
- A domain containing “office365”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .live zone file, already registered
- Registered
- 2026-03-15 · HOSTINGER operations, UAB
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · office365online.live resolved to it 2026-11-05 00:46 UTC
- Addresses
- 2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
- Hostinger
- Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
- MX
- mx1.hostinger.commx2.hostinger.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- hotmails.sbs CY · AS47583 · AS-HOSTINGER Hostinger Inte…Contains “hotmail”Address on DomainSpoof’s phishing-host listHostingerMX present
DetailsHide details for hotmails.sbs
- Domain
- hotmails.sbs
- Match
- A registered domain containing “hotmail”, one of the names we match for Microsoft
- Zone file copy
- 2026-10-31 · the day of the .sbs zone file copy it was found in
- Registered
- 2026-01-05 · HOSTINGER operations, UAB
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · hotmails.sbs resolved to it 2026-11-05 00:46 UTC
- Addresses
- 2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
- Hostinger
- Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
- MX
- mx1.hostinger.commx2.hostinger.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- secret-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for secret-microsoft.xyz
- Domain
- secret-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-25 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · secret-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- session-microsoft-trello.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for session-microsoft-trello.xyz
- Domain
- session-microsoft-trello.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-25 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · session-microsoft-trello.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- short-authority-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for short-authority-microsoft.xyz
- Domain
- short-authority-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-25 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · short-authority-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- shortcut-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for shortcut-microsoft.xyz
- Domain
- shortcut-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-25 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · shortcut-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- simulink-microsoft-class.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for simulink-microsoft-class.xyz
- Domain
- simulink-microsoft-class.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-25 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · simulink-microsoft-class.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- simulink-priority-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for simulink-priority-microsoft.xyz
- Domain
- simulink-priority-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-25 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · simulink-priority-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- smartsheet-microsoft-rest.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for smartsheet-microsoft-rest.xyz
- Domain
- smartsheet-microsoft-rest.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-25 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · smartsheet-microsoft-rest.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- smartsheet-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for smartsheet-microsoft.xyz
- Domain
- smartsheet-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-25 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · smartsheet-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- smartsheet-seaborn-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for smartsheet-seaborn-microsoft.xyz
- Domain
- smartsheet-seaborn-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-25 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · smartsheet-seaborn-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- snapshot-microsoft-circleci.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for snapshot-microsoft-circleci.xyz
- Domain
- snapshot-microsoft-circleci.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-25 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · snapshot-microsoft-circleci.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- soap-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for soap-microsoft.xyz
- Domain
- soap-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-25 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · soap-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- solidworks-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for solidworks-microsoft.xyz
- Domain
- solidworks-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-25 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · solidworks-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- utilization-follower-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for utilization-follower-microsoft.xyz
- Domain
- utilization-follower-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · utilization-follower-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- variable-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for variable-microsoft.xyz
- Domain
- variable-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · variable-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- verilog-microsoft-tablet.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for verilog-microsoft-tablet.xyz
- Domain
- verilog-microsoft-tablet.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · verilog-microsoft-tablet.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- vhdl-microsoft-partition.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for vhdl-microsoft-partition.xyz
- Domain
- vhdl-microsoft-partition.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · vhdl-microsoft-partition.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- wasm-microsoft-bootstrap.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for wasm-microsoft-bootstrap.xyz
- Domain
- wasm-microsoft-bootstrap.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · wasm-microsoft-bootstrap.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- wasm-wrike-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for wasm-wrike-microsoft.xyz
- Domain
- wasm-wrike-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · wasm-wrike-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- wave-confluence-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for wave-confluence-microsoft.xyz
- Domain
- wave-confluence-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · wave-confluence-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- waypoint-microsoft-store.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for waypoint-microsoft-store.xyz
- Domain
- waypoint-microsoft-store.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · waypoint-microsoft-store.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- while-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for while-microsoft.xyz
- Domain
- while-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · while-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- whom-microsoft-connect.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for whom-microsoft-connect.xyz
- Domain
- whom-microsoft-connect.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · whom-microsoft-connect.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- yaml-microsoft-vector.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for yaml-microsoft-vector.xyz
- Domain
- yaml-microsoft-vector.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · yaml-microsoft-vector.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- office365-sec.xyz TR · AS51557 · TR-ISIMTESCIL-20201202 Isim…Contains “office365”Address on DomainSpoof’s phishing-host list
DetailsHide details for office365-sec.xyz
- Domain
- office365-sec.xyz
- Match
- A registered domain containing “office365”, one of the names we match for Microsoft
- Zone file copy
- 2026-10-31 · the day of the .xyz zone file copy it was found in
- Registered
- 2025-12-24 · İsimtescil Bilişim A.Ş.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 93.89.226.17 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · office365-sec.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 93.89.226.17 · Türkiye · AS51557 TR-ISIMTESCIL-20201202 Isimtescil Bilisim A.S.
- Daily check
- Ended 2026-11-04 22:41 UTC
- onedrive365.live US · AS214036 · ULTAHOST-AS Ultahost, Inc.Contains “onedrive”Address on DomainSpoof’s phishing-host listMX present
DetailsHide details for onedrive365.live
- Domain
- onedrive365.live
- Match
- A registered domain containing “onedrive”, one of the names we match for Microsoft
- Zone file copy
- 2026-10-31 · the day of the .live zone file copy it was found in
- Registered
- 2025-12-18 · Ultahost, Inc
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 79.133.41.61 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · onedrive365.live resolved to it 2026-11-05 00:46 UTC
- Addresses
- 79.133.41.61 · United States · AS214036 ULTAHOST-AS Ultahost, Inc.
- MX
- onedrive365.live
- Daily check
- Ended 2026-11-04 22:41 UTC
- hotmailbr.store CY · AS47583 · AS-HOSTINGER Hostinger Inte…Contains “hotmail”Address on DomainSpoof’s phishing-host listHostinger
DetailsHide details for hotmailbr.store
- Domain
- hotmailbr.store
- Match
- A registered domain containing “hotmail”, one of the names we match for Microsoft
- Zone file copy
- 2026-10-31 · the day of the .store zone file copy it was found in
- Registered
- 2025-12-15 · HOSTINGER operations, UAB
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · hotmailbr.store resolved to it 2026-11-05 00:46 UTC
- Addresses
- 2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
- Hostinger
- Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
- Daily check
- Ended 2026-11-04 22:41 UTC
- instagram-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for instagram-microsoft.xyz
- Domain
- instagram-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · instagram-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- instagram-when-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for instagram-when-microsoft.xyz
- Domain
- instagram-when-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · instagram-when-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- instance-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for instance-microsoft.xyz
- Domain
- instance-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · instance-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- jetty-microsoft-drone.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for jetty-microsoft-drone.xyz
- Domain
- jetty-microsoft-drone.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · jetty-microsoft-drone.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- jetty-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for jetty-microsoft.xyz
- Domain
- jetty-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · jetty-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- jetty-opengl-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”Address on DomainSpoof’s phishing-host list
DetailsHide details for jetty-opengl-microsoft.xyz
- Domain
- jetty-opengl-microsoft.xyz
- Match
- A domain containing “microsoft”, one of the names we match for Microsoft
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · jetty-opengl-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC

