Microsoft

Software & cloud United Statesmicrosoft.comRank 1 of the most impersonated
Cert findings · 24 h
11
Cert findings · 7 days
118
64 reported or listed · 50 on phishing hosts · 4 on Spamhaus DROP
Registered lookalikes
1,671
121 listed by a source or an address list
Official domains
576
verified from Microsoft's own sites and records

Registered lookalikes

Checked daily · 2026-11-04 22:41 UTC

Spellings of Microsoft's official domains (microsoft.com, office365.com, hotmail.com, …) registered to other owners (identified by nameservers, registrar and redirects), checked daily; the ones with no address or mail server yet say so. Many are parked, for sale or run by other businesses and sites with a similar name; the ones a phishing source or address list has flagged carry a label.

Some of these come from registry zone files (ICANN CZDS). Our zone data terms apply to them: no marketing use of any kind, no harassing their registrants, no high-volume registry or registrar queries.

121 of the 1,671 are listed by a source or resolve to a listed address, checked hourly.

  1. ms-office.clickLookalike of microsoft.com · an added hyphen
    No address or mail server yet
    DetailsHide details for ms-office.click
    Domain
    ms-office.click
    Spelling
    Spelled like microsoft.com with an added hyphen
    First found
    2026-11-01 · the day we first found it in the .click zone file, already registered
    Registered
    2023-08-18 · GMO Internet, Inc. d/b/a Onamae.com
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  2. offlce365.net US · AS15169 · Google LLC8 addressesLookalike of office365.com · similar-looking characters
    GoogleMX present
    DetailsHide details for offlce365.net
    Domain
    offlce365.net
    Spelling
    Spelled like office365.com with similar-looking characters
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2023-08-18 · OVH sas
    Addresses
    216.239.32.21 · United States · AS15169 GOOGLE - Google LLC · Google (cloud provider)
    216.239.34.21 · United States · AS15169 GOOGLE - Google LLC · Google (cloud provider)
    216.239.36.21 · United States · AS15169 GOOGLE - Google LLC · Google (cloud provider)
    216.239.38.21 · United States · AS15169 GOOGLE - Google LLC · Google (cloud provider)
    2001:4860:4802:32::15
    2001:4860:4802:34::15
    2001:4860:4802:36::15
    2001:4860:4802:38::15
    Google
    Google (216.239.32.21, 216.239.34.21, 216.239.36.21, 216.239.38.21): a cloud provider. It rents servers and addresses to its customers.
    MX
    mxa.eu.mailgun.org
    mxb.eu.mailgun.org
    Daily check
    Ended 2026-11-04 22:41 UTC
  3. microsoftaccounts.supportLookalike of microsoft.com · the name with an added word
    No address or mail server yet
    DetailsHide details for microsoftaccounts.support
    Domain
    microsoftaccounts.support
    Spelling
    The name of microsoft.com with an added word
    First found
    2026-11-01 · the day we first found it in the .support zone file, already registered
    Registered
    2023-08-08 · Cloudflare, Inc
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  4. hotmail.rsvpLookalike of hotmail.com · the ending .rsvp
    MX present
    DetailsHide details for hotmail.rsvp
    Domain
    hotmail.rsvp
    Spelling
    The name of hotmail.com with the ending .rsvp
    First found
    2026-11-01 · the day the daily DNS check first found it registered
    Registered
    2023-08-08 · Squarespace Domains II LLC.
    MX
    mxa.mailgun.org
    mxb.mailgun.org
    Daily check
    Ended 2026-11-04 22:41 UTC
  5. microsoftonline.name US · AS16509 · Amazon.com, Inc.3 addressesLookalike of microsoftonline.com · the ending .name
    Amazon Web Services
    DetailsHide details for microsoftonline.name
    Domain
    microsoftonline.name
    Spelling
    The name of microsoftonline.com with the ending .name
    First found
    2026-10-31 · the day the daily DNS check first found it registered
    Registered
    2023-08-05 · Porkbun LLC
    Addresses
    207.207.210.23 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    207.207.210.36 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    207.207.210.50 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (207.207.210.23, 207.207.210.36, 207.207.210.50): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  6. mocrosoftonline.com AU · AS133618 · Trellian Pty. LimitedLookalike of microsoftonline.com · a letter from a neighbouring key
    Parking page · Above.comMX present
    DetailsHide details for mocrosoftonline.com
    Domain
    mocrosoftonline.com
    Spelling
    Spelled like microsoftonline.com with a letter from a neighbouring key
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2023-08-04 · Spaceship, Inc.
    Addresses
    103.224.182.244 · Australia · AS133618 TRELLIAN-AS-AP - Trellian Pty. Limited · Trellian / Above.com (parking page)
    Parking page · Above.com
    The registry delegates mocrosoftonline.com to Above.com’s nameservers, which answer for it. Above.com: a parking service. It answers for names that are typically for sale or unused. Trellian / Above.com (103.224.182.244): a parking service. It answers for names that are typically for sale or unused.
    MX
    park-mx.above.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  7. wicrosoft.org US · AS16509 · Amazon.com, Inc.2 addressesLookalike of microsoft.com · a changed character
    Parking page · Afternic
    DetailsHide details for wicrosoft.org
    Domain
    wicrosoft.org
    Spelling
    Spelled like microsoft.com with a changed character
    First found
    2026-11-01 · the day we first found it in the .org zone file, already registered
    Registered
    2023-07-25 · Internet Domain Service BS Corp
    Addresses
    13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    Parking page · Afternic
    The registry delegates wicrosoft.org to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
    Daily check
    Ended 2026-11-04 22:41 UTC
  8. microsof.clickLookalike of microsoft.com · a dropped letter
    No address or mail server yet
    DetailsHide details for microsof.click
    Domain
    microsof.click
    Spelling
    Spelled like microsoft.com with a dropped letter
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2023-07-25 · CSL Computer Service Langenbach GmbH d/b/a joker.com
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  9. rnicrosoft.app FR · AS16276 · OVH OVH SASLookalike of microsoft.com · similar-looking characters
    OVHMX present
    DetailsHide details for rnicrosoft.app
    Domain
    rnicrosoft.app
    Spelling
    Spelled like microsoft.com with similar-looking characters
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2023-07-21 · OVH sas
    Addresses
    213.186.33.5 · France · AS16276 OVH OVH SAS · OVH (cloud provider)
    OVH
    OVH (213.186.33.5): a cloud provider. It rents servers and addresses to its customers.
    MX
    mx4.mail.ovh.net
    mx3.mail.ovh.net
    Daily check
    Ended 2026-11-04 22:41 UTC
  10. microsofl.link US · AS14618 · Amazon.com, Inc.Lookalike of microsoft.com · a changed character
    Amazon Web Services
    DetailsHide details for microsofl.link
    Domain
    microsofl.link
    Spelling
    Spelled like microsoft.com with a changed character
    First found
    2026-11-01 · the day we first found it in the .link zone file, already registered
    Registered
    2023-07-18 · Amazon Registrar, Inc.
    Addresses
    54.157.124.218 · United States · AS14618 AMAZON-AES - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (54.157.124.218): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  11. outlook.wangLookalike of outlook.com · the ending .wang
    MX present
    DetailsHide details for outlook.wang
    Domain
    outlook.wang
    Spelling
    The name of outlook.com with the ending .wang
    First found
    2026-11-01 · the day the daily DNS check first found it registered
    Registered
    2023-07-11 · 烟台帝思普网络科技有限公司
    MX
    domain-us-1.cuiqiu.net
    domain-cn-1.cuiqiu.net
    Daily check
    Ended 2026-11-04 22:41 UTC
  12. microsoftlogin.xyzLookalike of microsoft.com · the name with an added word
    Registry lookup queuedMX present
    DetailsHide details for microsoftlogin.xyz
    Domain
    microsoftlogin.xyz
    Spelling
    The name of microsoft.com with an added word
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2023-06-29 · GoDaddy.com, LLC
    MX
    smtp.secureserver.net
    mailstore1.secureserver.net
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  13. onedrive.xyz US · AS16509 · Amazon.com, Inc.2 addressesLookalike of onedrive.com · the ending .xyz
    Parking page · Afternic
    DetailsHide details for onedrive.xyz
    Domain
    onedrive.xyz
    Spelling
    The name of onedrive.com with the ending .xyz
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2023-06-28 · Spaceship, Inc.
    Addresses
    13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    Parking page · Afternic
    The registry delegates onedrive.xyz to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
    Daily check
    Ended 2026-11-04 22:41 UTC
  14. micorsoft.caLookalike of microsoft.com · two letters swapped
    MX present
    DetailsHide details for micorsoft.ca
    Domain
    micorsoft.ca
    Spelling
    Spelled like microsoft.com with two letters swapped
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2023-06-14 · Go Daddy Domains Canada, Inc
    MX
    micorsoft-ca.mail.protection.outlook.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  15. h0tmail.net US · AS16509 · Amazon.com, Inc.Lookalike of hotmail.com · similar-looking characters
    Amazon Web Services
    DetailsHide details for h0tmail.net
    Domain
    h0tmail.net
    Spelling
    Spelled like hotmail.com with similar-looking characters
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2023-06-14 · NameCheap, Inc.
    Addresses
    35.183.191.31 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (35.183.191.31): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  16. oftice365.netLookalike of office365.com · a letter from a neighbouring key
    MX present
    DetailsHide details for oftice365.net
    Domain
    oftice365.net
    Spelling
    Spelled like office365.com with a letter from a neighbouring key
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2023-05-26 · Infomaniak Network SA
    MX
    mx.postal.sensiwave.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  17. otfice365.netLookalike of office365.com · a letter from a neighbouring key
    MX present
    DetailsHide details for otfice365.net
    Domain
    otfice365.net
    Spelling
    Spelled like office365.com with a letter from a neighbouring key
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2023-05-26 · Infomaniak Network SA
    MX
    mx.postal.sensiwave.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  18. microsoft365-update.zipLookalike of microsoft.com · the name with an added word
    No address or mail server yet
    DetailsHide details for microsoft365-update.zip
    Domain
    microsoft365-update.zip
    Spelling
    The name of microsoft.com with an added word
    First found
    2026-11-01 · the day we first found it in the .zip zone file, already registered
    Registered
    2023-05-17 · Squarespace Domains II LLC.
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  19. rnicrosoft.zip US · AS16509 · Amazon.com, Inc.2 addressesLookalike of microsoft.com · similar-looking characters
    Amazon Web Services
    DetailsHide details for rnicrosoft.zip
    Domain
    rnicrosoft.zip
    Spelling
    Spelled like microsoft.com with similar-looking characters
    First found
    2026-11-01 · the day we first found it in the .zip zone file, already registered
    Registered
    2023-05-15 · Porkbun LLC
    Addresses
    207.207.210.107 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    207.207.210.229 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (207.207.210.107, 207.207.210.229): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  20. microsoft.mov US · AS13335 · Cloudflare, Inc.4 addressesLookalike of microsoft.com · the ending .mov
    CloudflareMX present
    DetailsHide details for microsoft.mov
    Domain
    microsoft.mov
    Spelling
    The name of microsoft.com with the ending .mov
    First found
    2026-11-01 · the day the daily DNS check first found it registered
    Registered
    2023-05-15 · CloudFlare, Inc.
    Addresses
    104.21.61.144 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.211.51 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3033::6815:3d90
    2606:4700:3035::ac43:d333
    Cloudflare
    Cloudflare (104.21.61.144, 172.67.211.51): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    MX
    redbull.mxrouting.net
    redbull-relay.mxrouting.net
    Daily check
    Ended 2026-11-04 22:41 UTC
  21. xn--offce365-41a.net FR · AS16276 · OVH OVH SASLookalike of office365.com · international characters, shown as offìce365.net
    OVHMX present
    DetailsHide details for xn--offce365-41a.net
    Domain
    xn--offce365-41a.net
    Spelling
    Spelled like office365.com with international characters, shown as offìce365.net
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2023-05-15 · OVH sas
    Addresses
    57.128.87.136 · France · AS16276 OVH OVH SAS · OVH (cloud provider)
    OVH
    OVH (57.128.87.136): a cloud provider. It rents servers and addresses to its customers.
    MX
    mail.xn--offce365-41a.net
    Daily check
    Ended 2026-11-04 22:41 UTC
  22. ms-office.zipLookalike of microsoft.com · an added hyphen
    MX present
    DetailsHide details for ms-office.zip
    Domain
    ms-office.zip
    Spelling
    Spelled like microsoft.com with an added hyphen
    First found
    2026-11-01 · the day we first found it in the .zip zone file, already registered
    Registered
    2023-05-14 · Namecheap Inc.
    MX
    mail.cii3er.com
    mail.muc3.cc
    Daily check
    Ended 2026-11-04 22:41 UTC
  23. microsoftsecurity.zipLookalike of microsoft.com · the name with an added word
    No address or mail server yet
    DetailsHide details for microsoftsecurity.zip
    Domain
    microsoftsecurity.zip
    Spelling
    The name of microsoft.com with an added word
    First found
    2026-11-01 · the day we first found it in the .zip zone file, already registered
    Registered
    2023-05-13 · Squarespace Domains II LLC.
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  24. microsoft-office-update.zipLookalike of microsoft.com · the name with the word “office-update”
    No address or mail server yet
    DetailsHide details for microsoft-office-update.zip
    Domain
    microsoft-office-update.zip
    Spelling
    The name of microsoft.com with the word “office-update”
    First found
    2026-11-01 · the day we first found it in the .zip zone file, already registered
    Registered
    2023-05-12 · Squarespace Domains II LLC.
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  25. microsoft-security.zip US · AS16509 · Amazon.com, Inc.2 addressesLookalike of microsoft.com · the name with the word “security”
    Registry lookup queuedAmazon Web Services
    DetailsHide details for microsoft-security.zip
    Domain
    microsoft-security.zip
    Spelling
    The name of microsoft.com with the word “security”
    First found
    2026-11-01 · the day we first found it in the .zip zone file, already registered
    Registered
    2023-05-12 · GoDaddy.com, LLC
    Addresses
    3.33.152.147 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    15.197.142.173 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (3.33.152.147, 15.197.142.173): a cloud provider. It rents servers and addresses to its customers.
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  26. microsoft-update.zipLookalike of microsoft.com · the name with the word “update”
    No address or mail server yet
    DetailsHide details for microsoft-update.zip
    Domain
    microsoft-update.zip
    Spelling
    The name of microsoft.com with the word “update”
    First found
    2026-11-01 · the day we first found it in the .zip zone file, already registered
    Registered
    2023-05-12 · Squarespace Domains II LLC.
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  27. micrsoft.zipLookalike of microsoft.com · a dropped letter
    MX present
    DetailsHide details for micrsoft.zip
    Domain
    micrsoft.zip
    Spelling
    Spelled like microsoft.com with a dropped letter
    First found
    2026-11-01 · the day we first found it in the .zip zone file, already registered
    Registered
    2023-05-12 · Squarespace Domains II LLC.
    MX
    mxa.mailgun.org
    mxb.mailgun.org
    Daily check
    Ended 2026-11-04 22:41 UTC
  28. msofficeupdate.zipLookalike of microsoft.com · the name with an added word
    No address or mail server yet
    DetailsHide details for msofficeupdate.zip
    Domain
    msofficeupdate.zip
    Spelling
    The name of microsoft.com with an added word
    First found
    2026-11-01 · the day we first found it in the .zip zone file, already registered
    Registered
    2023-05-12 · Squarespace Domains II LLC.
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  29. one-drive.zipLookalike of microsoft.com · an added hyphen
    No address or mail server yet
    DetailsHide details for one-drive.zip
    Domain
    one-drive.zip
    Spelling
    Spelled like microsoft.com with an added hyphen
    First found
    2026-11-01 · the day we first found it in the .zip zone file, already registered
    Registered
    2023-05-12 · Squarespace Domains II LLC.
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  30. 0ffice365support.onlineLookalike of office365.com · similar-looking characters
    No address or mail server yetRegistry lookup queued
    DetailsHide details for 0ffice365support.online
    Domain
    0ffice365support.online
    Spelling
    Spelled like office365.com with similar-looking characters
    First found
    2026-11-01 · the day we first found it in the .online zone file, already registered
    Registered
    2023-05-11 · GoDaddy.com, LLC
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  31. office365.zipLookalike of office365.com · the ending .zip
    No address or mail server yet
    DetailsHide details for office365.zip
    Domain
    office365.zip
    Spelling
    The name of office365.com with the ending .zip
    First found
    2026-11-01 · the day the daily DNS check first found it registered
    Registered
    2023-05-11 · Squarespace Domains II LLC.
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  32. microsoft.zip US · AS16509 · Amazon.com, Inc.3 addressesLookalike of microsoft.com · the ending .zip
    Amazon Web Services
    DetailsHide details for microsoft.zip
    Domain
    microsoft.zip
    Spelling
    The name of microsoft.com with the ending .zip
    First found
    2026-11-01 · the day the daily DNS check first found it registered
    Registered
    2023-05-10 · Porkbun LLC
    Addresses
    207.207.210.23 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    207.207.210.36 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    207.207.210.50 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (207.207.210.23, 207.207.210.36, 207.207.210.50): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  33. hotmaill.org FR · AS16276 · OVH OVH SASLookalike of hotmail.com · a doubled letter
    OVHMX present
    DetailsHide details for hotmaill.org
    Domain
    hotmaill.org
    Spelling
    Spelled like hotmail.com with a doubled letter
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2023-05-01 · InterNetX GmbH
    Addresses
    51.75.144.104 · France · AS16276 OVH OVH SAS · OVH (cloud provider)
    OVH
    OVH (51.75.144.104): a cloud provider. It rents servers and addresses to its customers.
    MX
    mail.hotmaill.org
    Daily check
    Ended 2026-11-04 22:41 UTC
  34. microsof.cz US · AS20473 · The Constant Company, LLCLookalike of microsoft.com · a dropped letter
    VultrMX present
    DetailsHide details for microsof.cz
    Domain
    microsof.cz
    Spelling
    Spelled like microsoft.com with a dropped letter
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2023-04-26 · Gransy s.r.o.
    Addresses
    78.141.227.75 · United States · AS20473 AS-VULTR - The Constant Company, LLC · Vultr (cloud provider)
    Vultr
    Vultr (78.141.227.75): a cloud provider. It rents servers and addresses to its customers.
    MX
    mail.parktons.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  35. hotmail.dayLookalike of hotmail.com · the ending .day
    MX present
    DetailsHide details for hotmail.day
    Domain
    hotmail.day
    Spelling
    The name of hotmail.com with the ending .day
    First found
    2026-11-01 · the day the daily DNS check first found it registered
    Registered
    2023-04-21 · Squarespace Domains II LLC.
    MX
    route1.mx.cloudflare.net
    route2.mx.cloudflare.net
    route3.mx.cloudflare.net
    Daily check
    Ended 2026-11-04 22:41 UTC
  36. outlook.oooLookalike of outlook.com · the ending .ooo
    MX present
    DetailsHide details for outlook.ooo
    Domain
    outlook.ooo
    Spelling
    The name of outlook.com with the ending .ooo
    First found
    2026-11-01 · the day the daily DNS check first found it registered
    Registered
    2023-04-20 · Squarespace Domains II LLC
    MX
    outlook-ooo.mail.protection.outlook.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  37. xn--mcrosoftonline-llb.comLookalike of microsoftonline.com · international characters, shown as mìcrosoftonline.com
    Registry lookup queuedMX present
    DetailsHide details for xn--mcrosoftonline-llb.com
    Domain
    xn--mcrosoftonline-llb.com
    Spelling
    Spelled like microsoftonline.com with international characters, shown as mìcrosoftonline.com
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2023-04-19 · Squarespace Domains II LLC
    MX
    aspmx.l.google.com
    alt1.aspmx.l.google.com
    alt2.aspmx.l.google.com
    alt3.aspmx.l.google.com
    alt4.aspmx.l.google.com
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  38. microsoftonline.best US · AS16509 · Amazon.com, Inc.3 addressesLookalike of microsoftonline.com · the ending .best
    Amazon Web Services
    DetailsHide details for microsoftonline.best
    Domain
    microsoftonline.best
    Spelling
    The name of microsoftonline.com with the ending .best
    First found
    2026-10-31 · the day the daily DNS check first found it registered
    Registered
    2023-04-16 · Porkbun LLC
    Addresses
    207.207.210.23 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    207.207.210.36 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    207.207.210.50 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (207.207.210.23, 207.207.210.36, 207.207.210.50): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  39. mircosoft.fr DE · AS24940 · HETZNER-AS Hetzner Online G…2 addressesLookalike of microsoft.com · two letters swapped
    HetznerMX present
    DetailsHide details for mircosoft.fr
    Domain
    mircosoft.fr
    Spelling
    Spelled like microsoft.com with two letters swapped
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2023-04-08 · XNS Registrar B.V.
    Addresses
    88.198.116.121 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    2a01:4f8:c014:b2d8::1
    Hetzner
    Hetzner (88.198.116.121): a cloud provider. It rents servers and addresses to its customers.
    MX
    mx186.m2bp.com
    mx186.mb1p.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  40. microsoft365.wiki NL · AS20857 · TRANSIP-AS Signet B.V.Lookalike of microsoft365.com · the ending .wiki
    DetailsHide details for microsoft365.wiki
    Domain
    microsoft365.wiki
    Spelling
    The name of microsoft365.com with the ending .wiki
    First found
    2026-10-31 · the day the daily DNS check first found it registered
    Registered
    2023-04-01 · Hosting Concepts B.V. d/b/a Registrar.eu
    Addresses
    80.69.89.7 · Netherlands · AS20857 TRANSIP-AS Signet B.V.
    Daily check
    Ended 2026-11-04 22:41 UTC
  41. microsoft-365.onlineLookalike of microsoft365.com · an added hyphen
    MX present
    DetailsHide details for microsoft-365.online
    Domain
    microsoft-365.online
    Spelling
    Spelled like microsoft365.com with an added hyphen
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2023-03-31 · Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)
    MX
    mx1.qiye.aliyun.com
    mx2.qiye.aliyun.com
    mx3.qiye.aliyun.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  42. microsoftonline.camLookalike of microsoftonline.com · the ending .cam
    No address or mail server yet
    DetailsHide details for microsoftonline.cam
    Domain
    microsoftonline.cam
    Spelling
    The name of microsoftonline.com with the ending .cam
    First found
    2026-10-31 · the day the daily DNS check first found it registered
    Registered
    2023-03-17 · OVH sas
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  43. micr0soft.orgLookalike of microsoft.com · similar-looking characters
    MX present
    DetailsHide details for micr0soft.org
    Domain
    micr0soft.org
    Spelling
    Spelled like microsoft.com with similar-looking characters
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2023-03-09 · IONOS SE
    MX
    mx00.ionos.co.uk
    mx01.ionos.co.uk
    Daily check
    Ended 2026-11-04 22:41 UTC
  44. micrsoft.io US · AS13335 · Cloudflare, Inc.4 addressesLookalike of microsoft.com · a dropped letter
    CloudflareMX present
    DetailsHide details for micrsoft.io
    Domain
    micrsoft.io
    Spelling
    Spelled like microsoft.com with a dropped letter
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2023-03-07 · Cloudflare, Inc
    Addresses
    104.21.51.22 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.218.181 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3035::ac43:dab5
    2606:4700:3037::6815:3316
    Cloudflare
    Cloudflare (104.21.51.22, 172.67.218.181): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    MX
    route3.mx.cloudflare.net
    route2.mx.cloudflare.net
    route1.mx.cloudflare.net
    Daily check
    Ended 2026-11-04 22:41 UTC
  45. microsoft365.msLookalike of microsoft365.com · the ending .ms
    MX present
    DetailsHide details for microsoft365.ms
    Domain
    microsoft365.ms
    Spelling
    The name of microsoft365.com with the ending .ms
    First found
    2026-10-31 · the day the daily DNS check first found it registered
    Registered
    2023-02-26 · Key-Systems
    MX
    microsoft365-ms.mail.protection.outlook.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  46. mjcrosoft.co US · AS29873 · Newfold Digital, Inc.Lookalike of microsoft.com · a letter from a neighbouring key
    MX present
    DetailsHide details for mjcrosoft.co
    Domain
    mjcrosoft.co
    Spelling
    Spelled like microsoft.com with a letter from a neighbouring key
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2023-02-26 · Domain.com - Network Solutions, LLC
    Addresses
    66.96.162.135 · United States · AS29873 BIZLAND-SD - Newfold Digital, Inc.
    MX
    mx.mjcrosoft.co
    Daily check
    Ended 2026-11-04 22:41 UTC
  47. rnicrosoft-login.com US · AS15169 · Google LLC8 addressesLookalike of microsoft.com · similar-looking characters
    PhishDestroy CommunitySuspicious · highGoogleMX present
    DetailsHide details for rnicrosoft-login.com
    Domain
    rnicrosoft-login.com
    Spelling
    Spelled like microsoft.com with similar-looking characters
    First found
    2026-11-03 · the day DomainSpoof first saw a certificate naming it
    Registered
    2023-02-24 · Porkbun LLC
    Suspicious
    PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated high: it resolves to an address with no parking or holding signal.
    PhishDestroy Community
    PhishDestroy’s community list includes login-a700.rnicrosoft-login.com, a name under this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
    Addresses
    216.239.32.21 · United States · AS15169 GOOGLE - Google LLC · Google (cloud provider)
    216.239.34.21 · United States · AS15169 GOOGLE - Google LLC · Google (cloud provider)
    216.239.36.21 · United States · AS15169 GOOGLE - Google LLC · Google (cloud provider)
    216.239.38.21 · United States · AS15169 GOOGLE - Google LLC · Google (cloud provider)
    2001:4860:4802:32::15
    2001:4860:4802:34::15
    2001:4860:4802:36::15
    2001:4860:4802:38::15
    Google
    Google (216.239.32.21, 216.239.34.21, 216.239.36.21, 216.239.38.21): a cloud provider. It rents servers and addresses to its customers.
    MX
    mxa.eu.mailgun.org
    mxb.eu.mailgun.org
    Daily check
    Ended 2026-11-04 22:41 UTC
  48. hotmail.booLookalike of hotmail.com · the ending .boo
    MX present
    DetailsHide details for hotmail.boo
    Domain
    hotmail.boo
    Spelling
    The name of hotmail.com with the ending .boo
    First found
    2026-11-01 · the day the daily DNS check first found it registered
    Registered
    2023-02-18 · Squarespace Domains II LLC.
    MX
    route1.mx.cloudflare.net
    route3.mx.cloudflare.net
    route2.mx.cloudflare.net
    Daily check
    Ended 2026-11-04 22:41 UTC
  49. micfrosoftonline.liveLookalike of microsoft.com · an added character
    No address or mail server yet
    DetailsHide details for micfrosoftonline.live
    Domain
    micfrosoftonline.live
    Spelling
    Spelled like microsoft.com with an added character
    First found
    2026-11-01 · the day we first found it in the .live zone file, already registered
    Registered
    2023-02-14 · NameCheap, Inc.
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  50. hotm4il.clickLookalike of microsoft.com · similar-looking characters
    MX present
    DetailsHide details for hotm4il.click
    Domain
    hotm4il.click
    Spelling
    Spelled like microsoft.com with similar-looking characters
    First found
    2026-11-01 · the day we first found it in the .click zone file, already registered
    Registered
    2023-02-13 · Amazon Registrar, Inc.
    MX
    aspmx.l.google.com
    alt1.aspmx.l.google.com
    alt2.aspmx.l.google.com
    alt3.aspmx.l.google.com
    alt4.aspmx.l.google.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  51. microsoftonline.io US · AS16509 · Amazon.com, Inc.4 addressesLookalike of microsoftonline.com · the ending .io
    Amazon Web Services
    DetailsHide details for microsoftonline.io
    Domain
    microsoftonline.io
    Spelling
    The name of microsoftonline.com with the ending .io
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2023-01-26 · Gandi SAS
    Addresses
    108.138.85.8 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    108.138.85.26 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    108.138.85.93 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    108.138.85.107 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (108.138.85.8, 108.138.85.26, 108.138.85.93, 108.138.85.107): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  52. hotmail.page US · AS53831 · Squarespace, Inc.Lookalike of hotmail.com · the ending .page
    SquarespaceMX present
    DetailsHide details for hotmail.page
    Domain
    hotmail.page
    Spelling
    The name of hotmail.com with the ending .page
    First found
    2026-11-01 · the day the daily DNS check first found it registered
    Registered
    2023-01-19 · Squarespace Domains II LLC.
    Addresses
    198.49.23.145 · United States · AS53831 SQUARESPACE - Squarespace, Inc. · Squarespace (site builder)
    Squarespace
    Squarespace (198.49.23.145): a site builder. It hosts pages for anyone who signs up.
    MX
    aspmx.l.google.com
    alt1.aspmx.l.google.com
    alt2.aspmx.l.google.com
    alt3.aspmx.l.google.com
    alt4.aspmx.l.google.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  53. microsoftpnline.com AU · AS133618 · Trellian Pty. LimitedLookalike of microsoftonline.com · a letter from a neighbouring key
    Parking page · Above.comMX present
    DetailsHide details for microsoftpnline.com
    Domain
    microsoftpnline.com
    Spelling
    Spelled like microsoftonline.com with a letter from a neighbouring key
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2023-01-15 · Sav.com, LLC
    Addresses
    103.224.182.244 · Australia · AS133618 TRELLIAN-AS-AP - Trellian Pty. Limited · Trellian / Above.com (parking page)
    Parking page · Above.com
    The registry delegates microsoftpnline.com to Above.com’s nameservers, which answer for it. Above.com: a parking service. It answers for names that are typically for sale or unused. Trellian / Above.com (103.224.182.244): a parking service. It answers for names that are typically for sale or unused.
    MX
    park-mx.above.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  54. office365-security.infoLookalike of microsoft.com · the name with an added word
    MX present
    DetailsHide details for office365-security.info
    Domain
    office365-security.info
    Spelling
    The name of microsoft.com with an added word
    First found
    2026-11-01 · the day we first found it in the .info zone file, already registered
    Registered
    2023-01-13 · RegistryGate GmbH
    MX
    mail.office365-security.info
    Daily check
    Ended 2026-11-04 22:41 UTC
  55. micros-ft.onlineLookalike of microsoft.com · a dropped letter
    MX present
    DetailsHide details for micros-ft.online
    Domain
    micros-ft.online
    Spelling
    Spelled like microsoft.com with a dropped letter
    First found
    2026-11-01 · the day we first found it in the .online zone file, already registered
    Registered
    2023-01-09 · Tucows Domains Inc.
    MX
    aspmx.l.google.com
    alt1.aspmx.l.google.com
    alt2.aspmx.l.google.com
    alt3.aspmx.l.google.com
    alt4.aspmx.l.google.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  56. microsoftonilne.com US · AS16509 · Amazon.com, Inc.Lookalike of microsoftonline.com · two letters swapped
    Parking page · Dynadot parking
    DetailsHide details for microsoftonilne.com
    Domain
    microsoftonilne.com
    Spelling
    Spelled like microsoftonline.com with two letters swapped
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2023-01-06 · Dynadot Inc
    Addresses
    54.215.31.113 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Dynadot parking (parking page)
    Parking page · Dynadot parking
    Dynadot parking (54.215.31.113): a parking service. It answers for names that are typically for sale or unused.
    Daily check
    Ended 2026-11-04 22:41 UTC
  57. rnicrosoft.site CZ · AS30764 · PODA-AS PODA a.s.Lookalike of microsoft.com · similar-looking characters
    Registry lookup queuedMX present
    DetailsHide details for rnicrosoft.site
    Domain
    rnicrosoft.site
    Spelling
    Spelled like microsoft.com with similar-looking characters
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2023-01-05 · Tucows Domains Inc.
    Addresses
    193.165.151.150 · Czechia · AS30764 PODA-AS PODA a.s.
    MX
    mailserver.rnicrosoft.site
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  58. hotmail.store DE · AS8560 · IONOS-AS IONOS SE2 addressesLookalike of hotmail.com · the ending .store
    IONOSMX present
    DetailsHide details for hotmail.store
    Domain
    hotmail.store
    Spelling
    The name of hotmail.com with the ending .store
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2022-12-18 · IONOS SE
    Addresses
    217.160.0.79 · Germany · AS8560 IONOS-AS IONOS SE · IONOS (shared hosting)
    2001:8d8:100f:f000::200
    IONOS
    IONOS (217.160.0.79): shared web hosting and domain registration. One address typically serves many customer sites.
    MX
    mx00.ionos.de
    mx01.ionos.de
    Daily check
    Ended 2026-11-04 22:41 UTC
  59. microsoft365.pageLookalike of microsoft365.com · the ending .page
    MX present
    DetailsHide details for microsoft365.page
    Domain
    microsoft365.page
    Spelling
    The name of microsoft365.com with the ending .page
    First found
    2026-10-31 · the day the daily DNS check first found it registered
    Registered
    2022-12-16 · Squarespace Domains II LLC.
    MX
    microsoft365-page.mail.protection.outlook.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  60. micros0ft.ca US · AS16509 · Amazon.com, Inc.2 addressesLookalike of microsoft.com · similar-looking characters
    Amazon Web Services
    DetailsHide details for micros0ft.ca
    Domain
    micros0ft.ca
    Spelling
    Spelled like microsoft.com with similar-looking characters
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2022-12-11 · Go Daddy Domains Canada, Inc
    Addresses
    3.33.251.168 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    15.197.225.128 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (3.33.251.168, 15.197.225.128): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  61. hotmail.earthLookalike of hotmail.com · the ending .earth
    MX present
    DetailsHide details for hotmail.earth
    Domain
    hotmail.earth
    Spelling
    The name of hotmail.com with the ending .earth
    First found
    2026-11-01 · the day the daily DNS check first found it registered
    Registered
    2022-12-05 · Squarespace Domains II LLC
    MX
    mail.lowkeysteals.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  62. hotma1l.com US · AS53831 · Squarespace, Inc.4 addressesLookalike of hotmail.com · similar-looking characters
    SquarespaceMX present
    DetailsHide details for hotma1l.com
    Domain
    hotma1l.com
    Spelling
    Spelled like hotmail.com with similar-looking characters
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2022-11-29 · Squarespace Domains II LLC
    Addresses
    198.49.23.144 · United States · AS53831 SQUARESPACE - Squarespace, Inc. · Squarespace (site builder)
    198.49.23.145 · United States · AS53831 SQUARESPACE - Squarespace, Inc. · Squarespace (site builder)
    198.185.159.144 · United States · AS53831 SQUARESPACE - Squarespace, Inc. · Squarespace (site builder)
    198.185.159.145 · United States · AS53831 SQUARESPACE - Squarespace, Inc. · Squarespace (site builder)
    Squarespace
    Squarespace (198.49.23.144, 198.49.23.145, 198.185.159.144, 198.185.159.145): a site builder. It hosts pages for anyone who signs up.
    MX
    mxa.mailgun.org
    mxb.mailgun.org
    Daily check
    Ended 2026-11-04 22:41 UTC
  63. outl0ok.comLookalike of outlook.com · similar-looking characters
    MX present
    DetailsHide details for outl0ok.com
    Domain
    outl0ok.com
    Spelling
    Spelled like outlook.com with similar-looking characters
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2022-11-28 · Squarespace Domains II LLC
    MX
    mxa.mailgun.org
    mxb.mailgun.org
    Daily check
    Ended 2026-11-04 22:41 UTC
  64. icrosoftonline.net US · AS16509 · Amazon.com, Inc.2 addressesLookalike of microsoftonline.com · a dropped letter
    Registry lookup queuedAmazon Web Services
    DetailsHide details for icrosoftonline.net
    Domain
    icrosoftonline.net
    Spelling
    Spelled like microsoftonline.com with a dropped letter
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2022-11-18 · GoDaddy.com, LLC
    Addresses
    3.33.130.190 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    15.197.148.33 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (3.33.130.190, 15.197.148.33): a cloud provider. It rents servers and addresses to its customers.
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  65. microsoft-365.info DE · AS34788 · NMM-AS Neue Medien Muennich…Lookalike of microsoft365.com · an added hyphen
    MX present
    DetailsHide details for microsoft-365.info
    Domain
    microsoft-365.info
    Spelling
    Spelled like microsoft365.com with an added hyphen
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2022-11-09 · RegistryGate GmbH
    Addresses
    85.13.135.103 · Germany · AS34788 NMM-AS Neue Medien Muennich GmbH
    MX
    w01d3c79.kasserver.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  66. micrsoft.cloud US · AS16509 · Amazon.com, Inc.2 addressesLookalike of microsoft.com · a dropped letter
    Registry lookup queuedAmazon Web ServicesMX present
    DetailsHide details for micrsoft.cloud
    Domain
    micrsoft.cloud
    Spelling
    Spelled like microsoft.com with a dropped letter
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2022-11-08 · GoDaddy
    Addresses
    3.33.130.190 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    15.197.148.33 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (3.33.130.190, 15.197.148.33): a cloud provider. It rents servers and addresses to its customers.
    MX
    mail.micrsoft.cloud
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  67. microsft.cloudLookalike of microsoft.com · a dropped letter
    No address or mail server yetRegistry lookup queued
    DetailsHide details for microsft.cloud
    Domain
    microsft.cloud
    Spelling
    Spelled like microsoft.com with a dropped letter
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2022-11-03 · GoDaddy
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  68. microsft.online US · AS16509 · Amazon.com, Inc.2 addressesLookalike of microsoft.com · a dropped letter
    Registry lookup queuedAmazon Web Services
    DetailsHide details for microsft.online
    Domain
    microsft.online
    Spelling
    Spelled like microsoft.com with a dropped letter
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2022-11-03 · GoDaddy.com, LLC
    Addresses
    3.33.130.190 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    15.197.148.33 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (3.33.130.190, 15.197.148.33): a cloud provider. It rents servers and addresses to its customers.
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  69. 0ffice365.info DE · AS24940 · HETZNER-AS Hetzner Online G…Lookalike of office365.com · similar-looking characters
    HetznerMX present
    DetailsHide details for 0ffice365.info
    Domain
    0ffice365.info
    Spelling
    Spelled like office365.com with similar-looking characters
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2022-11-02 · 1API GmbH
    Addresses
    49.12.15.157 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (49.12.15.157): a cloud provider. It rents servers and addresses to its customers.
    MX
    v.rod.topway.ch
    Daily check
    Ended 2026-11-04 22:41 UTC
  70. mircosoft.topLookalike of microsoft.com · two letters swapped
    No address or mail server yet
    DetailsHide details for mircosoft.top
    Domain
    mircosoft.top
    Spelling
    Spelled like microsoft.com with two letters swapped
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2022-10-28 · NameSilo,LLC
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  71. micr0soft365.com SG · AS63949 · Akamai Connected Cloud8 addressesLookalike of microsoft365.com · similar-looking characters
    Parking page · Shared parking pageMX present
    DetailsHide details for micr0soft365.com
    Domain
    micr0soft365.com
    Spelling
    Spelled like microsoft365.com with similar-looking characters
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2022-10-23 · Spaceship, Inc.
    Addresses
    45.33.83.100 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Shared parking page (parking page)
    45.79.167.180 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Shared parking page (parking page)
    66.175.209.179 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Shared parking page (parking page)
    96.126.111.165 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Shared parking page (parking page)
    2600:3c03::f03c:95ff:fe00:29ca
    2600:3c03::f03c:95ff:fe91:5d52
    2600:3c03::f03c:95ff:feed:4d4f
    2600:3c03::f03c:95ff:feed:cf2a
    Parking page · Shared parking page
    Shared parking page (45.33.83.100, 45.79.167.180, 66.175.209.179, 96.126.111.165): a parking service. It answers for names that are typically for sale or unused.
    MX
    mail.mailerhost.net
    Daily check
    Ended 2026-11-04 22:41 UTC
  72. microsof.techLookalike of microsoft.com · a dropped letter
    No address or mail server yet
    DetailsHide details for microsof.tech
    Domain
    microsof.tech
    Spelling
    Spelled like microsoft.com with a dropped letter
    First found
    2026-11-01 · the day we first found it in the .tech zone file, already registered
    Registered
    2022-10-12 · Gransy, s.r.o.
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  73. microsoftupdate.topLookalike of microsoft.com · the name with an added word
    MX present
    DetailsHide details for microsoftupdate.top
    Domain
    microsoftupdate.top
    Spelling
    The name of microsoft.com with an added word
    First found
    2026-11-03 · the day we first found it in the .top zone file, already registered
    Registered
    2022-09-16 · NameSilo,LLC
    MX
    route2.mx.cloudflare.net
    route3.mx.cloudflare.net
    route1.mx.cloudflare.net
    Daily check
    Ended 2026-11-04 22:41 UTC
  74. microsoftupdate.appLookalike of microsoft.com · the name with an added word
    MX present
    DetailsHide details for microsoftupdate.app
    Domain
    microsoftupdate.app
    Spelling
    The name of microsoft.com with an added word
    First found
    2026-11-01 · the day we first found it in the .app zone file, already registered
    Registered
    2022-09-16 · NameSilo, LLC
    MX
    route3.mx.cloudflare.net
    route2.mx.cloudflare.net
    route1.mx.cloudflare.net
    Daily check
    Ended 2026-11-04 22:41 UTC
  75. microsoftonlin.net US · AS16509 · Amazon.com, Inc.2 addressesLookalike of microsoftonline.com · a dropped letter
    Registry lookup queuedAmazon Web Services
    DetailsHide details for microsoftonlin.net
    Domain
    microsoftonlin.net
    Spelling
    Spelled like microsoftonline.com with a dropped letter
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2022-09-12 · GoDaddy.com, LLC
    Addresses
    3.33.130.190 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    15.197.148.33 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (3.33.130.190, 15.197.148.33): a cloud provider. It rents servers and addresses to its customers.
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  76. outlook.co.zm DE · AS51167 · CONTABO Contabo GmbHLookalike of outlook.com · the ending .co.zm
    ContaboMX present
    DetailsHide details for outlook.co.zm
    Domain
    outlook.co.zm
    Spelling
    The name of outlook.com with the ending .co.zm
    First found
    2026-11-01 · the day the daily DNS check first found it registered
    Registered
    2022-09-01 · Zamnet
    Addresses
    194.163.153.15 · Germany · AS51167 CONTABO Contabo GmbH · Contabo (cloud provider)
    Contabo
    Contabo (194.163.153.15): a cloud provider. It rents servers and addresses to its customers.
    MX
    mx.webz.co.zm
    Daily check
    Ended 2026-11-04 22:41 UTC
  77. mircosoft.online DE · AS8560 · IONOS-AS IONOS SE2 addressesLookalike of microsoft.com · two letters swapped
    IONOSMX present
    DetailsHide details for mircosoft.online
    Domain
    mircosoft.online
    Spelling
    Spelled like microsoft.com with two letters swapped
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2022-08-25 · IONOS SE
    Addresses
    217.160.122.194 · Germany · AS8560 IONOS-AS IONOS SE · IONOS (shared hosting)
    2001:8d8:1001:2012:db80:6ed9:f383:f035
    IONOS
    IONOS (217.160.122.194): shared web hosting and domain registration. One address typically serves many customer sites.
    MX
    mx00.ionos.de
    mx01.ionos.de
    Daily check
    Ended 2026-11-04 22:41 UTC
  78. microsoft365.in US · AS16509 · Amazon.com, Inc.2 addressesLookalike of microsoft365.com · the ending .in
    Parking page · Afternic
    DetailsHide details for microsoft365.in
    Domain
    microsoft365.in
    Spelling
    The name of microsoft365.com with the ending .in
    First found
    2026-10-31 · the day the daily DNS check first found it registered
    Registered
    2022-08-14 · eNom, Inc.
    Addresses
    13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    Parking page · Afternic
    The registry delegates microsoft365.in to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
    Daily check
    Ended 2026-11-04 22:41 UTC
  79. xn--microsft-r3a.comLookalike of microsoft.com · international characters, shown as microsòft.com
    No address or mail server yetRegistry lookup queued
    DetailsHide details for xn--microsft-r3a.com
    Domain
    xn--microsft-r3a.com
    Spelling
    Spelled like microsoft.com with international characters, shown as microsòft.com
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2022-08-06 · Squarespace Domains II LLC
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  80. hotmaill.cloud CN · AS132203 · Tencent Building, Kejizhong…Lookalike of microsoft.com · a doubled letter
    Tencent CloudMX present
    DetailsHide details for hotmaill.cloud
    Domain
    hotmaill.cloud
    Spelling
    Spelled like microsoft.com with a doubled letter
    First found
    2026-11-01 · the day we first found it in the .cloud zone file, already registered
    Registered
    2022-07-27 · DNSPod, Inc.
    Addresses
    119.28.122.100 · China · AS132203 TENCENT-NET-AP-CN - Tencent Building, Kejizhongyi Avenue · Tencent Cloud (cloud provider)
    Tencent Cloud
    Tencent Cloud (119.28.122.100): a cloud provider. It rents servers and addresses to its customers.
    MX
    119.28.122.100
    Daily check
    Ended 2026-11-04 22:41 UTC
  81. login-outlook.net US · AS16509 · Amazon.com, Inc.2 addressesLookalike of outlook.com · the name with the word “login”
    Registry lookup queuedAmazon Web ServicesMX present
    DetailsHide details for login-outlook.net
    Domain
    login-outlook.net
    Spelling
    The name of outlook.com with the word “login”
    First found
    2026-11-01 · the day the daily DNS check first found it registered
    Registered
    2022-07-21 · GoDaddy.com, LLC
    Addresses
    3.33.130.190 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    15.197.148.33 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (3.33.130.190, 15.197.148.33): a cloud provider. It rents servers and addresses to its customers.
    MX
    mx2.mailwombat.com
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  82. mcirosoft.pl US · AS16509 · Amazon.com, Inc.Lookalike of microsoft.com · two letters swapped
    Amazon Web ServicesMX present
    DetailsHide details for mcirosoft.pl
    Domain
    mcirosoft.pl
    Spelling
    Spelled like microsoft.com with two letters swapped
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2022-06-09 · Aftermarket.pl Limited
    Addresses
    63.187.51.235 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (63.187.51.235): a cloud provider. It rents servers and addresses to its customers.
    MX
    mail.mcirosoft.pl
    Daily check
    Ended 2026-11-04 22:41 UTC
  83. office365support.cloudLookalike of microsoft.com · the name with an added word
    No address or mail server yetRegistry lookup queued
    DetailsHide details for office365support.cloud
    Domain
    office365support.cloud
    Spelling
    The name of microsoft.com with an added word
    First found
    2026-11-01 · the day we first found it in the .cloud zone file, already registered
    Registered
    2022-06-07 · GoDaddy
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  84. micros0ft.net US · AS16509 · Amazon.com, Inc.2 addressesLookalike of microsoft.com · similar-looking characters
    Registry lookup queuedAmazon Web Services
    DetailsHide details for micros0ft.net
    Domain
    micros0ft.net
    Spelling
    Spelled like microsoft.com with similar-looking characters
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2022-06-04 · GoDaddy.com, LLC
    Addresses
    3.33.130.190 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    15.197.148.33 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (3.33.130.190, 15.197.148.33): a cloud provider. It rents servers and addresses to its customers.
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  85. office365.nrw DE · AS8560 · IONOS-AS IONOS SE2 addressesLookalike of office365.com · the ending .nrw
    IONOSMX present
    DetailsHide details for office365.nrw
    Domain
    office365.nrw
    Spelling
    The name of office365.com with the ending .nrw
    First found
    2026-11-01 · the day the daily DNS check first found it registered
    Registered
    2022-06-01 · IONOS SE
    Addresses
    217.160.0.195 · Germany · AS8560 IONOS-AS IONOS SE · IONOS (shared hosting)
    2001:8d8:100f:f000::2ec
    IONOS
    IONOS (217.160.0.195): shared web hosting and domain registration. One address typically serves many customer sites.
    MX
    mx00.ionos.de
    mx01.ionos.de
    Daily check
    Ended 2026-11-04 22:41 UTC
  86. outlook.cam CN · AS132203 · Tencent Building, Kejizhong…Lookalike of outlook.com · the ending .cam
    Tencent CloudMX present
    DetailsHide details for outlook.cam
    Domain
    outlook.cam
    Spelling
    The name of outlook.com with the ending .cam
    First found
    2026-11-01 · the day the daily DNS check first found it registered
    Registered
    2022-05-28 · Dynadot Inc
    Addresses
    43.153.17.201 · China · AS132203 TENCENT-NET-AP-CN - Tencent Building, Kejizhongyi Avenue · Tencent Cloud (cloud provider)
    Tencent Cloud
    Tencent Cloud (43.153.17.201): a cloud provider. It rents servers and addresses to its customers.
    MX
    mail.outlook.cam
    Daily check
    Ended 2026-11-04 22:41 UTC
  87. office365.funLookalike of office365.com · the ending .fun
    No address or mail server yet
    DetailsHide details for office365.fun
    Domain
    office365.fun
    Spelling
    The name of office365.com with the ending .fun
    First found
    2026-11-01 · the day the daily DNS check first found it registered
    Registered
    2022-05-26 · DNSPod, Inc.
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  88. microsoft365.ccLookalike of microsoft365.com · the ending .cc
    MX present
    DetailsHide details for microsoft365.cc
    Domain
    microsoft365.cc
    Spelling
    The name of microsoft365.com with the ending .cc
    First found
    2026-10-31 · the day the daily DNS check first found it registered
    Registered
    2022-05-18 · Alibaba Cloud Computing Ltd. d/b/a HiChina (www.net.cn)
    MX
    microsoft365-cc.mail.protection.outlook.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  89. office365.health US · AS16509 · Amazon.com, Inc.2 addressesLookalike of office365.com · the ending .health
    Amazon Web Services
    DetailsHide details for office365.health
    Domain
    office365.health
    Spelling
    The name of office365.com with the ending .health
    First found
    2026-11-01 · the day the daily DNS check first found it registered
    Registered
    2022-05-09 · GoDaddy.com, LLC
    Addresses
    3.33.130.190 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    15.197.148.33 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (3.33.130.190, 15.197.148.33): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  90. microsoft365.sr US · AS209242 · CLOUDFLARESPECTRUM Cloudfla…2 addressesLookalike of microsoft365.com · the ending .sr
    CloudflareMX present
    DetailsHide details for microsoft365.sr
    Domain
    microsoft365.sr
    Spelling
    The name of microsoft365.com with the ending .sr
    First found
    2026-10-31 · the day the daily DNS check first found it registered
    Registered
    2022-05-06 · Caribbean Communication Services N.V. (Datasur)
    Addresses
    199.60.103.47 · United States · AS209242 CLOUDFLARESPECTRUM Cloudflare London, LLC · Cloudflare (cdn)
    199.60.103.147 · United States · AS209242 CLOUDFLARESPECTRUM Cloudflare London, LLC · Cloudflare (cdn)
    Cloudflare
    Cloudflare (199.60.103.47, 199.60.103.147): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    MX
    microsoft365-sr.mail.protection.outlook.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  91. microscoft.onlineLookalike of microsoft.com · an added character
    Registry lookup queuedMX present
    DetailsHide details for microscoft.online
    Domain
    microscoft.online
    Spelling
    Spelled like microsoft.com with an added character
    First found
    2026-11-01 · the day we first found it in the .online zone file, already registered
    Registered
    2022-04-27 · GoDaddy.com, LLC
    MX
    aspmx.l.google.com
    alt1.aspmx.l.google.com
    alt2.aspmx.l.google.com
    alt3.aspmx.l.google.com
    alt4.aspmx.l.google.com
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  92. hotmail.blog CY · AS47583 · AS-HOSTINGER Hostinger Inte…2 addressesLookalike of hotmail.com · the ending .blog
    HostingerMX present
    DetailsHide details for hotmail.blog
    Domain
    hotmail.blog
    Spelling
    The name of hotmail.com with the ending .blog
    First found
    2026-11-01 · the day the daily DNS check first found it registered
    Registered
    2022-04-01 · Go Daddy, LLC
    Addresses
    145.79.26.79 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    2a02:4780:5c:2194:0:3275:f55d:b
    Hostinger
    Hostinger (145.79.26.79): shared web hosting and domain registration. One address typically serves many customer sites.
    MX
    mx1.hostinger.com
    mx2.hostinger.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  93. hotmail.one US · AS13335 · Cloudflare, Inc.4 addressesLookalike of hotmail.com · the ending .one
    CloudflareMX present
    DetailsHide details for hotmail.one
    Domain
    hotmail.one
    Spelling
    The name of hotmail.com with the ending .one
    First found
    2026-11-01 · the day the daily DNS check first found it registered
    Registered
    2022-04-01 · GoDaddy.com, LLC
    Addresses
    104.21.82.247 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.166.54 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3030::ac43:a636
    2606:4700:3036::6815:52f7
    Cloudflare
    Cloudflare (104.21.82.247, 172.67.166.54): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    MX
    route1.mx.cloudflare.net
    route2.mx.cloudflare.net
    route3.mx.cloudflare.net
    Daily check
    Ended 2026-11-04 22:41 UTC
  94. microsft.cz US · AS20473 · The Constant Company, LLCLookalike of microsoft.com · a dropped letter
    VultrMX present
    DetailsHide details for microsft.cz
    Domain
    microsft.cz
    Spelling
    Spelled like microsoft.com with a dropped letter
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2022-03-18 · Gransy s.r.o.
    Addresses
    78.141.227.75 · United States · AS20473 AS-VULTR - The Constant Company, LLC · Vultr (cloud provider)
    Vultr
    Vultr (78.141.227.75): a cloud provider. It rents servers and addresses to its customers.
    MX
    mail.parktons.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  95. hotmall.xyz US · AS16509 · Amazon.com, Inc.2 addressesLookalike of hotmail.com · similar-looking characters
    Parking page · Dan.com
    DetailsHide details for hotmall.xyz
    Domain
    hotmall.xyz
    Spelling
    Spelled like hotmail.com with similar-looking characters
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2022-02-25 · Sav.com, LLC - 2
    Addresses
    13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    Parking page · Dan.com
    The registry delegates hotmall.xyz to Dan.com’s nameservers, which answer for it. Dan.com: a parking service. It answers for names that are typically for sale or unused. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
    Daily check
    Ended 2026-11-04 22:41 UTC
  96. xn--hotmal-fwa.com US · AS16509 · Amazon.com, Inc.2 addressesLookalike of hotmail.com · international characters, shown as hotmaîl.com
    Registry lookup queuedAmazon Web ServicesMX present
    DetailsHide details for xn--hotmal-fwa.com
    Domain
    xn--hotmal-fwa.com
    Spelling
    Spelled like hotmail.com with international characters, shown as hotmaîl.com
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2022-02-22 · GoDaddy.com, LLC
    Addresses
    3.33.130.190 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    15.197.148.33 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (3.33.130.190, 15.197.148.33): a cloud provider. It rents servers and addresses to its customers.
    MX
    xnhotmalfwa-com0m1e.mail.protection.outlook.com
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  97. hotmaik.net US · AS26347 · New Dream Network, LLCLookalike of hotmail.com · a letter from a neighbouring key
    DetailsHide details for hotmaik.net
    Domain
    hotmaik.net
    Spelling
    Spelled like hotmail.com with a letter from a neighbouring key
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2022-02-18 · NameSilo, LLC
    Addresses
    75.119.205.255 · United States · AS26347 DREAMHOST-AS - New Dream Network, LLC
    Daily check
    Ended 2026-11-04 22:41 UTC
  98. office365.xyz US · AS16509 · Amazon.com, Inc.2 addressesLookalike of office365.com · the ending .xyz
    Parking page · Afternic
    DetailsHide details for office365.xyz
    Domain
    office365.xyz
    Spelling
    The name of office365.com with the ending .xyz
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2022-02-08 · Spaceship, Inc.
    Addresses
    13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    Parking page · Afternic
    The registry delegates office365.xyz to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
    Daily check
    Ended 2026-11-04 22:41 UTC
  99. mircosoft.biz US · AS13335 · Cloudflare, Inc.4 addressesLookalike of microsoft.com · two letters swapped
    CloudflareMX present
    DetailsHide details for mircosoft.biz
    Domain
    mircosoft.biz
    Spelling
    Spelled like microsoft.com with two letters swapped
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2022-01-29 · Cloudflare, Inc.
    Addresses
    104.21.36.241 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.201.52 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3032::6815:24f1
    2606:4700:3037::ac43:c934
    Cloudflare
    Cloudflare (104.21.36.241, 172.67.201.52): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    MX
    mircosoft-biz.mail.eo.outlook.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  100. offices365.live US · AS16509 · Amazon.com, Inc.2 addressesLookalike of microsoft.com · an added character
    Registry lookup queuedAmazon Web Services
    DetailsHide details for offices365.live
    Domain
    offices365.live
    Spelling
    Spelled like microsoft.com with an added character
    First found
    2026-11-01 · the day we first found it in the .live zone file, already registered
    Registered
    2022-01-28 · GoDaddy.com, LLC
    Addresses
    3.33.130.190 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    15.197.148.33 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (3.33.130.190, 15.197.148.33): a cloud provider. It rents servers and addresses to its customers.
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC

Registered domains using the name

Domains from registry zone files (ICANN CZDS), checked daily like the lookalikes above. Each row says how it matches Microsoft's names. Resellers, fans and other businesses register names like these too. Our zone data terms apply to them.

100 of 808 shown: listed ones first, then the newest registrations.

  1. sharepoint365.support KN · AS402253 · SKN Subnet & Telecom LtdContains “sharepoint”
    Address on Spamhaus DROP
    DetailsHide details for sharepoint365.support
    Domain
    sharepoint365.support
    Match
    A new registration containing “sharepoint”, one of the names we match for Microsoft
    First found
    2026-11-05 · the day the .support zone file first listed it as a new registration
    Registered
    2026-11-04 · Spaceship, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on Spamhaus DROP
    104.251.180.138 is on Spamhaus DROP · sharepoint365.support resolved to it 2026-11-05 05:11 UTC
    Addresses
    104.251.180.138 · St. Kitts & Nevis · AS402253 SKN-NETWORK-1 - SKN Subnet & Telecom Ltd
    Daily check
    Ended 2026-11-04 22:41 UTC
  2. cdn-microsoft.top SG · AS63949 · Akamai Connected Cloud3 addressesContains “microsoft”
    2 addresses on DomainSpoof’s phishing-host listAkamai Linode
    DetailsHide details for cdn-microsoft.top
    Domain
    cdn-microsoft.top
    Match
    A new registration containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-05 · the day the .top zone file first listed it as a new registration
    Registered
    2026-11-04 · NameSilo,LLC
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    2 addresses on DomainSpoof’s phishing-host list
    172.232.24.161 (cdn-microsoft.top resolved to it 2026-11-05 04:17 UTC), 172.232.24.235 (cdn-microsoft.top resolved to it 2026-11-05 04:17 UTC) are on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours
    Addresses
    45.79.154.26 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    172.232.24.161 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    172.232.24.235 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    Akamai Linode
    Akamai Linode (45.79.154.26, 172.232.24.161, 172.232.24.235): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  3. microsoftoffice365.top SG · AS63949 · Akamai Connected Cloud3 addressesContains “microsoft”
    Listed by MetaMask3 addresses on DomainSpoof’s phishing-host listAkamai Linode
    DetailsHide details for microsoftoffice365.top
    Domain
    microsoftoffice365.top
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-03 · the day we first found it in the .top zone file, already registered
    Registered
    2026-10-30 · NameSilo,LLC
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Listed by MetaMask
    Listed by MetaMask · microsoftoffice365.top · in the feed since 2026-11-01 11:44 UTC
    3 addresses on DomainSpoof’s phishing-host list
    172.232.24.161 (microsoftoffice365.top resolved to it 2026-11-05 00:46 UTC), 172.232.24.235 (microsoftoffice365.top resolved to it 2026-11-05 00:46 UTC), 172.234.25.42 (microsoftoffice365.top resolved to it 2026-11-05 00:46 UTC) are on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours
    Addresses
    172.232.24.161 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    172.232.24.235 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    172.234.25.42 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    Akamai Linode
    Akamai Linode (172.232.24.161, 172.232.24.235, 172.234.25.42): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  4. onedrive-sync.top SG · AS63949 · Akamai Connected Cloud3 addressesContains “onedrive”
    3 addresses on DomainSpoof’s phishing-host listAkamai Linode
    DetailsHide details for onedrive-sync.top
    Domain
    onedrive-sync.top
    Match
    A domain containing “onedrive”, one of the names we match for Microsoft
    First found
    2026-11-03 · the day we first found it in the .top zone file, already registered
    Registered
    2026-10-29 · NameSilo,LLC
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    3 addresses on DomainSpoof’s phishing-host list
    172.232.24.161 (onedrive-sync.top resolved to it 2026-11-05 00:46 UTC), 172.232.24.235 (onedrive-sync.top resolved to it 2026-11-05 00:46 UTC), 172.234.25.42 (onedrive-sync.top resolved to it 2026-11-05 00:46 UTC) are on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours
    Addresses
    172.232.24.161 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    172.232.24.235 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    172.234.25.42 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    Akamai Linode
    Akamai Linode (172.232.24.161, 172.232.24.235, 172.234.25.42): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  5. microsoftsupp.info RU · AS209207 · DHOST-AS Digital Hosting Pr…Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide details for microsoftsupp.info
    Domain
    microsoftsupp.info
    Match
    A registered domain containing “microsoft”, one of the names we match for Microsoft
    Zone file copy
    2026-10-31 · the day of the .info zone file copy it was found in
    Registered
    2026-10-22 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    168.113.215.244 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoftsupp.info resolved to it 2026-11-05 00:46 UTC
    Addresses
    168.113.215.244 · Russia · AS209207 DHOST-AS Digital Hosting Provider LLC
    Daily check
    Ended 2026-11-04 22:41 UTC
  6. microsoft-office.topContains “microsoft”
    Listed by MetaMaskNo address or mail server yet
    DetailsHide details for microsoft-office.top
    Domain
    microsoft-office.top
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-03 · the day we first found it in the .top zone file, already registered
    Registered
    2026-10-18 · West263 International Limited
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Listed by MetaMask
    Listed by MetaMask · microsoft-office.top · in the feed since 2026-10-27 05:34 UTC
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  7. microsoftsharefile.topContains “microsoft”
    Listed by MetaMaskNo address or mail server yet
    DetailsHide details for microsoftsharefile.top
    Domain
    microsoftsharefile.top
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-03 · the day we first found it in the .top zone file, already registered
    Registered
    2026-10-18 · NameSilo,LLC
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Listed by MetaMask
    Listed by MetaMask · microsoftsharefile.top · in the feed since 2026-10-27 05:34 UTC
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  8. microsoftsharefile1.topContains “microsoft”
    Listed by MetaMaskNo address or mail server yet
    DetailsHide details for microsoftsharefile1.top
    Domain
    microsoftsharefile1.top
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-03 · the day we first found it in the .top zone file, already registered
    Registered
    2026-10-18 · NameSilo,LLC
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Listed by MetaMask
    Listed by MetaMask · microsoftsharefile1.top · in the feed since 2026-10-27 05:34 UTC
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  9. microsoftes.liveContains “microsoft”
    Listed by MetaMaskNo address or mail server yet
    DetailsHide details for microsoftes.live
    Domain
    microsoftes.live
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .live zone file, already registered
    Registered
    2026-10-06 · Dynadot Inc
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Listed by MetaMask
    Listed by MetaMask · microsoftes.live · in the feed since 2026-10-27 05:34 UTC
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  10. microsoft-teams.sbs US · AS13335 · Cloudflare, Inc.4 addressesContains “microsoft”
    Listed by MetaMaskCloudflare
    DetailsHide details for microsoft-teams.sbs
    Domain
    microsoft-teams.sbs
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .sbs zone file, already registered
    Registered
    2026-10-03 · Dynadot Inc
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Listed by MetaMask
    Listed by MetaMask · microsoft-teams.sbs · in the feed since 2026-10-27 05:34 UTC
    Addresses
    104.21.32.178 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.153.49 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3036::ac43:9931
    2606:4700:3037::6815:20b2
    Cloudflare
    Cloudflare (104.21.32.178, 172.67.153.49): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  11. microsoft-office365.site US · AS13335 · Cloudflare, Inc.4 addressesContains “microsoft”
    Listed by MetaMaskReported by PhishDestroyCloudflareMX present
    DetailsHide details for microsoft-office365.site
    Domain
    microsoft-office365.site
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .site zone file, already registered
    Registered
    2026-09-26 · Cloudflare, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Listed by MetaMask
    Listed by MetaMask · microsoft-office365.site · in the feed since 2026-10-27 05:34 UTC
    Reported by PhishDestroy
    Reported by PhishDestroy · microsoft-office365.site · in the feed since 2026-10-25 23:31 UTC
    Addresses
    104.21.16.197 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.215.149 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3034::ac43:d795
    2606:4700:3035::6815:10c5
    Cloudflare
    Cloudflare (104.21.16.197, 172.67.215.149): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    MX
    mx01.mail.icloud.com
    mx02.mail.icloud.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  12. microsoft-onedrive.org SG · AS63949 · Akamai Connected CloudContains “microsoft”
    Listed by MetaMaskAkamai Linode
    DetailsHide details for microsoft-onedrive.org
    Domain
    microsoft-onedrive.org
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .org zone file, already registered
    Registered
    2026-09-25 · Squarespace Domains LLC
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Listed by MetaMask
    Listed by MetaMask · microsoft-onedrive.org · in the feed since 2026-10-27 05:34 UTC
    Addresses
    74.207.228.73 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    Akamai Linode
    Akamai Linode (74.207.228.73): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  13. microsoft-edge.download IS · AS50613 · ThorDC-AS Advania Island ehfContains “microsoft”
    Address on DomainSpoof’s phishing-host listMX present
    DetailsHide details for microsoft-edge.download
    Domain
    microsoft-edge.download
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .download zone file, already registered
    Registered
    2026-09-23 · TLD Registrar Solutions Ltd.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    82.221.136.24 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-edge.download resolved to it 2026-11-05 00:46 UTC
    Addresses
    82.221.136.24 · Iceland · AS50613 ThorDC-AS Advania Island ehf
    MX
    mx1.sf.ice-networks.com
    mx2.sf.ice-networks.com
    mx3.sf.ice-networks.com
    mx4.sf.ice-networks.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  14. office-365.shop DE · AS8560 · IONOS-AS IONOS SE2 addressesContains “office-365”
    Address on DomainSpoof’s phishing-host listIONOSMX present
    DetailsHide details for office-365.shop
    Domain
    office-365.shop
    Match
    A registered domain containing “office-365”, one of the names we match for Microsoft
    Zone file copy
    2026-10-31 · the day of the .shop zone file copy it was found in
    Registered
    2026-09-22 · IONOS SE
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    217.160.0.115 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · office-365.shop resolved to it 2026-11-05 00:46 UTC
    Addresses
    217.160.0.115 · Germany · AS8560 IONOS-AS IONOS SE · IONOS (shared hosting)
    2001:8d8:100f:f000::200
    IONOS
    IONOS (217.160.0.115): shared web hosting and domain registration. One address typically serves many customer sites.
    MX
    mail.protonmail.ch
    mailsec.protonmail.ch
    Daily check
    Ended 2026-11-04 22:41 UTC
  15. microsoft-teams.sarlContains “microsoft”
    Listed by MetaMaskNo address or mail server yet
    DetailsHide details for microsoft-teams.sarl
    Domain
    microsoft-teams.sarl
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .sarl zone file, already registered
    Registered
    2026-09-19 · Cloudflare, Inc
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Listed by MetaMask
    Listed by MetaMask · microsoft-teams.sarl · in the feed since 2026-10-27 05:34 UTC
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  16. microsoft-meet.live PA · AS64107 · RACK SPHERE HOSTING S.A.Contains “microsoft”
    Listed by MetaMask
    DetailsHide details for microsoft-meet.live
    Domain
    microsoft-meet.live
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .live zone file, already registered
    Registered
    2026-09-15 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Listed by MetaMask
    Listed by MetaMask · microsoft-meet.live · in the feed since 2026-10-27 05:34 UTC
    Addresses
    45.225.135.67 · Panama · AS64107 AS64107 - RACK SPHERE HOSTING S.A.
    Daily check
    Ended 2026-11-04 22:41 UTC
  17. microsoft-cedar-technologies.click SG · AS63949 · Akamai Connected Cloud3 addressesContains “microsoft”
    3 addresses on DomainSpoof’s phishing-host listAkamai Linode
    DetailsHide details for microsoft-cedar-technologies.click
    Domain
    microsoft-cedar-technologies.click
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .click zone file, already registered
    Registered
    2026-08-21 · NameSilo, LLC
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    3 addresses on DomainSpoof’s phishing-host list
    172.232.24.161 (microsoft-cedar-technologies.click resolved to it 2026-11-05 00:46 UTC), 172.232.24.235 (microsoft-cedar-technologies.click resolved to it 2026-11-05 00:46 UTC), 172.234.25.42 (microsoft-cedar-technologies.click resolved to it 2026-11-05 00:46 UTC) are on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours
    Addresses
    172.232.24.161 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    172.232.24.235 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    172.234.25.42 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    Akamai Linode
    Akamai Linode (172.232.24.161, 172.232.24.235, 172.234.25.42): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  18. com-onedrive.live US · AS13335 · Cloudflare, Inc.4 addressesContains “onedrive”
    Listed by MetaMaskCloudflare
    DetailsHide details for com-onedrive.live
    Domain
    com-onedrive.live
    Match
    A domain containing “onedrive”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .live zone file, already registered
    Registered
    2026-08-16 · Cloudflare, Inc
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Listed by MetaMask
    Listed by MetaMask · com-onedrive.live · in the feed since 2026-10-27 05:34 UTC
    Addresses
    104.21.33.172 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.165.13 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3034::6815:21ac
    2606:4700:3036::ac43:a50d
    Cloudflare
    Cloudflare (104.21.33.172, 172.67.165.13): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  19. microsoft3.sbsContains “microsoft”
    Listed by MetaMaskNo address or mail server yet
    DetailsHide details for microsoft3.sbs
    Domain
    microsoft3.sbs
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .sbs zone file, already registered
    Registered
    2026-08-07 · NameSilo, LLC
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Listed by MetaMask
    Listed by MetaMask · microsoft3.sbs · in the feed since 2026-10-27 05:34 UTC
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  20. microsoftonline-sharepoint-com.live US · AS13335 · Cloudflare, Inc.4 addressesContains “microsoftonline”
    Listed by MetaMaskCloudflare
    DetailsHide details for microsoftonline-sharepoint-com.live
    Domain
    microsoftonline-sharepoint-com.live
    Match
    A domain containing “microsoftonline”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .live zone file, already registered
    Registered
    2026-08-07 · Cloudflare, Inc
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Listed by MetaMask
    Listed by MetaMask · microsoftonline-sharepoint-com.live · in the feed since 2026-10-27 05:34 UTC
    Addresses
    104.21.51.191 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.184.169 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::6815:33bf
    2606:4700:3032::ac43:b8a9
    Cloudflare
    Cloudflare (104.21.51.191, 172.67.184.169): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  21. microsoftonline-sharepoint.online US · AS14061 · DigitalOcean, LLCContains “microsoftonline”
    Listed by MetaMaskDigitalOcean
    DetailsHide details for microsoftonline-sharepoint.online
    Domain
    microsoftonline-sharepoint.online
    Match
    A domain containing “microsoftonline”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .online zone file, already registered
    Registered
    2026-07-27 · Cloudflare, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Listed by MetaMask
    Listed by MetaMask · microsoftonline-sharepoint.online · in the feed since 2026-10-27 05:34 UTC
    Addresses
    178.62.99.223 · United States · AS14061 DIGITALOCEAN-ASN - DigitalOcean, LLC · DigitalOcean (cloud provider)
    DigitalOcean
    DigitalOcean (178.62.99.223): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  22. office365microsoft.help SG · AS63949 · Akamai Connected Cloud3 addressesContains “microsoft”
    3 addresses on DomainSpoof’s phishing-host listAkamai LinodeMX present
    DetailsHide details for office365microsoft.help
    Domain
    office365microsoft.help
    Match
    A registered domain containing “microsoft”, one of the names we match for Microsoft
    Zone file copy
    2026-10-31 · the day of the .help zone file copy it was found in
    Registered
    2026-07-26 · NameSilo, LLC
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    3 addresses on DomainSpoof’s phishing-host list
    172.232.24.161 (office365microsoft.help resolved to it 2026-11-05 00:46 UTC), 172.232.24.235 (office365microsoft.help resolved to it 2026-11-05 00:46 UTC), 172.234.25.42 (office365microsoft.help resolved to it 2026-11-05 00:46 UTC) are on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours
    Addresses
    172.232.24.161 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    172.232.24.235 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    172.234.25.42 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    Akamai Linode
    Akamai Linode (172.232.24.161, 172.232.24.235, 172.234.25.42): a cloud provider. It rents servers and addresses to its customers.
    MX
    mx1.titan.email
    mx2.titan.email
    Daily check
    Ended 2026-11-04 22:41 UTC
  23. msoffice.email CY · AS47583 · AS-HOSTINGER Hostinger Inte…Contains “msoffice”
    Address on DomainSpoof’s phishing-host listHostinger
    DetailsHide details for msoffice.email
    Domain
    msoffice.email
    Match
    A domain containing “msoffice”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .email zone file, already registered
    Registered
    2026-07-24 · HOSTINGER operations, UAB
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · msoffice.email resolved to it 2026-11-05 00:46 UTC
    Addresses
    2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
    Daily check
    Ended 2026-11-04 22:41 UTC
  24. msoffice.live CY · AS47583 · AS-HOSTINGER Hostinger Inte…Contains “msoffice”
    Address on DomainSpoof’s phishing-host listHostinger
    DetailsHide details for msoffice.live
    Domain
    msoffice.live
    Match
    A registered domain containing “msoffice”, one of the names we match for Microsoft
    Zone file copy
    2026-10-31 · the day of the .live zone file copy it was found in
    Registered
    2026-07-24 · HOSTINGER operations, UAB
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · msoffice.live resolved to it 2026-11-05 00:46 UTC
    Addresses
    2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
    Daily check
    Ended 2026-11-04 22:41 UTC
  25. microsoftonline-outlook.live US · AS13335 · Cloudflare, Inc.4 addressesContains “microsoftonline”
    Listed by MetaMaskCloudflare
    DetailsHide details for microsoftonline-outlook.live
    Domain
    microsoftonline-outlook.live
    Match
    A domain containing “microsoftonline”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .live zone file, already registered
    Registered
    2026-07-17 · Cloudflare, Inc
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Listed by MetaMask
    Listed by MetaMask · microsoftonline-outlook.live · in the feed since 2026-10-27 05:34 UTC
    Addresses
    104.21.24.65 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.217.82 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3030::6815:1841
    2606:4700:3031::ac43:d952
    Cloudflare
    Cloudflare (104.21.24.65, 172.67.217.82): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  26. onmicrosoftfolder.sbs SG · AS63949 · Akamai Connected Cloud3 addressesContains “microsoft”
    3 addresses on DomainSpoof’s phishing-host listAkamai Linode
    DetailsHide details for onmicrosoftfolder.sbs
    Domain
    onmicrosoftfolder.sbs
    Match
    A registered domain containing “microsoft”, one of the names we match for Microsoft
    Zone file copy
    2026-10-31 · the day of the .sbs zone file copy it was found in
    Registered
    2026-07-08 · NameSilo, LLC
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    3 addresses on DomainSpoof’s phishing-host list
    172.232.24.161 (onmicrosoftfolder.sbs resolved to it 2026-11-05 00:46 UTC), 172.232.24.235 (onmicrosoftfolder.sbs resolved to it 2026-11-05 00:46 UTC), 172.234.25.42 (onmicrosoftfolder.sbs resolved to it 2026-11-05 00:46 UTC) are on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours
    Addresses
    172.232.24.161 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    172.232.24.235 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    172.234.25.42 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    Akamai Linode
    Akamai Linode (172.232.24.161, 172.232.24.235, 172.234.25.42): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  27. microsoftprada.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide details for microsoftprada.xyz
    Domain
    microsoftprada.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-07-04 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoftprada.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  28. microsoftcisco.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide details for microsoftcisco.xyz
    Domain
    microsoftcisco.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-07-02 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoftcisco.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  29. microsoftinstagram.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide details for microsoftinstagram.xyz
    Domain
    microsoftinstagram.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-07-02 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoftinstagram.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  30. microsofttencent.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide details for microsofttencent.xyz
    Domain
    microsofttencent.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-07-02 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsofttencent.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  31. hsbc-microsoft.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide details for hsbc-microsoft.xyz
    Domain
    hsbc-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-29 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · hsbc-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  32. ibm-microsoft.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide details for ibm-microsoft.xyz
    Domain
    ibm-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-29 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · ibm-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  33. microsoft-bmw.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide details for microsoft-bmw.xyz
    Domain
    microsoft-bmw.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-29 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-bmw.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  34. microsoft-fedex.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide details for microsoft-fedex.xyz
    Domain
    microsoft-fedex.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-29 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-fedex.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  35. microsoft-nintendo.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide details for microsoft-nintendo.xyz
    Domain
    microsoft-nintendo.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-29 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-nintendo.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  36. microsoft-puma.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide details for microsoft-puma.xyz
    Domain
    microsoft-puma.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-29 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-puma.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  37. microsoft-sap.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide details for microsoft-sap.xyz
    Domain
    microsoft-sap.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-29 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-sap.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  38. microsoft-target.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide details for microsoft-target.xyz
    Domain
    microsoft-target.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-29 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-target.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  39. microsoft-volkswagen.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide details for microsoft-volkswagen.xyz
    Domain
    microsoft-volkswagen.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-29 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-volkswagen.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  40. nintendo-microsoft.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide details for nintendo-microsoft.xyz
    Domain
    nintendo-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-29 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · nintendo-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  41. cisco-microsoft.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide details for cisco-microsoft.xyz
    Domain
    cisco-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-28 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · cisco-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  42. hermes-microsoft.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide details for hermes-microsoft.xyz
    Domain
    hermes-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-28 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · hermes-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  43. kia-microsoft.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide details for kia-microsoft.xyz
    Domain
    kia-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-28 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · kia-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  44. microsoft-amazon.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide details for microsoft-amazon.xyz
    Domain
    microsoft-amazon.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-28 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-amazon.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  45. microsoft-hyundai.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide details for microsoft-hyundai.xyz
    Domain
    microsoft-hyundai.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-28 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-hyundai.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  46. microsoft-nescafe.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide details for microsoft-nescafe.xyz
    Domain
    microsoft-nescafe.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-28 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-nescafe.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  47. microsoft-pepsi.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide details for microsoft-pepsi.xyz
    Domain
    microsoft-pepsi.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-28 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-pepsi.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  48. microsoft-starbucks.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide details for microsoft-starbucks.xyz
    Domain
    microsoft-starbucks.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-28 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-starbucks.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  49. microsoft-zara.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide details for microsoft-zara.xyz
    Domain
    microsoft-zara.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-28 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-zara.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  50. paypal-microsoft.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide details for paypal-microsoft.xyz
    Domain
    paypal-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-28 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · paypal-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  51. prada-microsoft.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide details for prada-microsoft.xyz
    Domain
    prada-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-28 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · prada-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  52. gillette-microsoft.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide details for gillette-microsoft.xyz
    Domain
    gillette-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-27 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · gillette-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  53. microsoft-netflix.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide details for microsoft-netflix.xyz
    Domain
    microsoft-netflix.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-27 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-netflix.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  54. tencent-microsoft.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide details for tencent-microsoft.xyz
    Domain
    tencent-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-27 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · tencent-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  55. totalenergies-microsoft.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide details for totalenergies-microsoft.xyz
    Domain
    totalenergies-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-27 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · totalenergies-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  56. sap-microsoft.xyz DE · AS24940 · HETZNER-AS Hetzner Online G…Contains “microsoft”
    Address on DomainSpoof’s phishing-host listHetzner
    DetailsHide details for sap-microsoft.xyz
    Domain
    sap-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-26 · NicNames, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    135.181.41.169 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · sap-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    135.181.41.169 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    Hetzner
    Hetzner (135.181.41.169): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  57. sharepoint.tips DE · AS212317 · HETZNER-CLOUD3-AS Hetzner O…14 addressesContains “sharepoint”
    5 addresses on DomainSpoof’s phishing-host listHetzner +1
    DetailsHide details for sharepoint.tips
    Domain
    sharepoint.tips
    Match
    A domain containing “sharepoint”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .tips zone file, already registered
    Registered
    2026-06-15 · Domain Science Kutatási Szolgáltató Korlátolt Felelősségű Társaság
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    5 addresses on DomainSpoof’s phishing-host list
    195.201.128.179 (sharepoint.tips resolved to it 2026-11-05 00:46 UTC), 46.62.237.138 (sharepoint.tips resolved to it 2026-11-05 00:46 UTC), 5.161.230.87 (sharepoint.tips resolved to it 2026-11-05 00:46 UTC), 5.161.47.86 (sharepoint.tips resolved to it 2026-11-05 00:46 UTC), 5.78.156.59 (sharepoint.tips resolved to it 2026-11-05 00:46 UTC) are on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours
    Addresses
    5.78.156.59 · Germany · AS212317 HETZNER-CLOUD3-AS Hetzner Online GmbH
    5.161.47.86 · Germany · AS213230 HETZNER-CLOUD2-AS Hetzner Online GmbH
    5.161.230.87 · Germany · AS213230 HETZNER-CLOUD2-AS Hetzner Online GmbH
    46.62.237.138 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    76.223.91.20 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    195.201.128.179 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    2406:da1e:214:c901:49:871:e9e1:eb92
    2600:1f1c:6db:8801:ca20:5f5a:5f45:48d0
    2a05:d014:179b:c400:b5e:feaf:a6dc:b508
    2a05:d014:179b:c400:2dc9:16fd:7cbd:e255
    2a05:d014:179b:c400:5ed8:1db0:4443:ca25
    2a05:d014:179b:c400:a327:40ee:24cc:6180
    2a05:d014:179b:c400:aa99:a226:6c94:e72
    2a05:d014:179b:c400:adda:f567:8e83:5e24
    Hetzner +1
    Hetzner (46.62.237.138, 195.201.128.179): a cloud provider. It rents servers and addresses to its customers. Amazon Web Services (76.223.91.20): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  58. microsoft-ai-claude.top DE · AS47846 · SEDO-AS SEDO GmbHContains “microsoft”
    Listed by MetaMaskParking page · Sedo
    DetailsHide details for microsoft-ai-claude.top
    Domain
    microsoft-ai-claude.top
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-03 · the day we first found it in the .top zone file, already registered
    Registered
    2026-05-29 · NameSilo,LLC
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Listed by MetaMask
    Listed by MetaMask · microsoft-ai-claude.top · in the feed since 2026-10-27 05:34 UTC
    Addresses
    91.195.240.123 · Germany · AS47846 SEDO-AS SEDO GmbH · Sedo (parking page)
    Parking page · Sedo
    Sedo (91.195.240.123): a parking service. It answers for names that are typically for sale or unused.
    Daily check
    Ended 2026-11-04 22:41 UTC
  59. microsoft-google.top DE · AS47846 · SEDO-AS SEDO GmbHContains “microsoft”
    Listed by MetaMaskParking page · Sedo
    DetailsHide details for microsoft-google.top
    Domain
    microsoft-google.top
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-03 · the day we first found it in the .top zone file, already registered
    Registered
    2026-05-29 · NameSilo,LLC
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Listed by MetaMask
    Listed by MetaMask · microsoft-google.top · in the feed since 2026-10-27 05:34 UTC
    Addresses
    91.195.240.123 · Germany · AS47846 SEDO-AS SEDO GmbH · Sedo (parking page)
    Parking page · Sedo
    Sedo (91.195.240.123): a parking service. It answers for names that are typically for sale or unused.
    Daily check
    Ended 2026-11-04 22:41 UTC
  60. microsoftcom.live US · AS16509 · Amazon.com, Inc.2 addressesContains “microsoft”
    Listed by MetaMaskReported by PhishDestroyRegistry lookup queuedAmazon Web Services
    DetailsHide details for microsoftcom.live
    Domain
    microsoftcom.live
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .live zone file, already registered
    Registered
    2026-05-29 · GoDaddy.com, LLC
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Listed by MetaMask
    Listed by MetaMask · microsoftcom.live · in the feed since 2026-10-27 05:34 UTC
    Reported by PhishDestroy
    Reported by PhishDestroy · microsoftcom.live · in the feed since 2026-10-25 23:31 UTC
    Addresses
    13.248.243.5 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    76.223.105.230 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (13.248.243.5, 76.223.105.230): a cloud provider. It rents servers and addresses to its customers.
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  61. evaservi-hotmail.online DE · AS8560 · IONOS-AS IONOS SEContains “hotmail”
    Address on DomainSpoof’s phishing-host listIONOSMX present
    DetailsHide details for evaservi-hotmail.online
    Domain
    evaservi-hotmail.online
    Match
    A domain containing “hotmail”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .online zone file, already registered
    Registered
    2026-05-24 · IONOS SE
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    217.76.128.47 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · evaservi-hotmail.online resolved to it 2026-11-05 00:46 UTC
    Addresses
    217.76.128.47 · Germany · AS8560 IONOS-AS IONOS SE · IONOS (shared hosting)
    IONOS
    IONOS (217.76.128.47): shared web hosting and domain registration. One address typically serves many customer sites.
    MX
    mx.serviciodecorreo.es
    Daily check
    Ended 2026-11-04 22:41 UTC
  62. outlook-mail.site CY · AS47583 · AS-HOSTINGER Hostinger Inte…Contains “outlook”
    Address on DomainSpoof’s phishing-host listHostinger
    DetailsHide details for outlook-mail.site
    Domain
    outlook-mail.site
    Match
    A registered domain containing “outlook”, one of the names we match for Microsoft
    Zone file copy
    2026-10-31 · the day of the .site zone file copy it was found in
    Registered
    2026-04-24 · HOSTINGER operations, UAB
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · outlook-mail.site resolved to it 2026-11-05 00:46 UTC
    Addresses
    2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
    Daily check
    Ended 2026-11-04 22:41 UTC
  63. entra-id-platform.online JP · AS7506 · GMO Internet, Inc.Contains “entra-id”
    Address on DomainSpoof’s phishing-host list
    DetailsHide details for entra-id-platform.online
    Domain
    entra-id-platform.online
    Match
    A domain containing “entra-id”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .online zone file, already registered
    Registered
    2026-04-19 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · entra-id-platform.online resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  64. azure-microsoft.top JP · AS9370 · SAKURA Internet Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide details for azure-microsoft.top
    Domain
    azure-microsoft.top
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-03 · the day we first found it in the .top zone file, already registered
    Registered
    2026-04-09 · GMO Internet, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    160.16.200.77 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · azure-microsoft.top resolved to it 2026-11-05 00:46 UTC
    Addresses
    160.16.200.77 · Japan · AS9370 SAKURA-B - SAKURA Internet Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  65. team-microsoft.top JP · AS9370 · SAKURA Internet Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide details for team-microsoft.top
    Domain
    team-microsoft.top
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-03 · the day we first found it in the .top zone file, already registered
    Registered
    2026-04-09 · GMO Internet, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    160.16.200.77 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · team-microsoft.top resolved to it 2026-11-05 00:46 UTC
    Addresses
    160.16.200.77 · Japan · AS9370 SAKURA-B - SAKURA Internet Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  66. microsoft-office365.cloud DE · AS8560 · IONOS-AS IONOS SE2 addressesContains “microsoft”
    Reported by PhishDestroyAddress on DomainSpoof’s phishing-host listIONOSMX present
    DetailsHide details for microsoft-office365.cloud
    Domain
    microsoft-office365.cloud
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .cloud zone file, already registered
    Registered
    2026-03-18 · IONOS SE
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Reported by PhishDestroy
    Reported by PhishDestroy · microsoft-office365.cloud · in the feed since 2026-10-25 23:31 UTC
    Address on DomainSpoof’s phishing-host list
    217.160.0.235 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · microsoft-office365.cloud resolved to it 2026-11-05 00:46 UTC
    Addresses
    217.160.0.235 · Germany · AS8560 IONOS-AS IONOS SE · IONOS (shared hosting)
    2001:8d8:100f:f000::200
    IONOS
    IONOS (217.160.0.235): shared web hosting and domain registration. One address typically serves many customer sites.
    MX
    mx00.ionos.de
    mx01.ionos.de
    Daily check
    Ended 2026-11-04 22:41 UTC
  67. office365online.live CY · AS47583 · AS-HOSTINGER Hostinger Inte…Contains “office365”
    Address on DomainSpoof’s phishing-host listHostingerMX present
    DetailsHide details for office365online.live
    Domain
    office365online.live
    Match
    A domain containing “office365”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .live zone file, already registered
    Registered
    2026-03-15 · HOSTINGER operations, UAB
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · office365online.live resolved to it 2026-11-05 00:46 UTC
    Addresses
    2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
    MX
    mx1.hostinger.com
    mx2.hostinger.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  68. hotmails.sbs CY · AS47583 · AS-HOSTINGER Hostinger Inte…Contains “hotmail”
    Address on DomainSpoof’s phishing-host listHostingerMX present
    DetailsHide details for hotmails.sbs
    Domain
    hotmails.sbs
    Match
    A registered domain containing “hotmail”, one of the names we match for Microsoft
    Zone file copy
    2026-10-31 · the day of the .sbs zone file copy it was found in
    Registered
    2026-01-05 · HOSTINGER operations, UAB
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · hotmails.sbs resolved to it 2026-11-05 00:46 UTC
    Addresses
    2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
    MX
    mx1.hostinger.com
    mx2.hostinger.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  69. secret-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide details for secret-microsoft.xyz
    Domain
    secret-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-25 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · secret-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  70. session-microsoft-trello.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide details for session-microsoft-trello.xyz
    Domain
    session-microsoft-trello.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-25 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · session-microsoft-trello.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  71. short-authority-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide details for short-authority-microsoft.xyz
    Domain
    short-authority-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-25 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · short-authority-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  72. shortcut-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide details for shortcut-microsoft.xyz
    Domain
    shortcut-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-25 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · shortcut-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  73. simulink-microsoft-class.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide details for simulink-microsoft-class.xyz
    Domain
    simulink-microsoft-class.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-25 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · simulink-microsoft-class.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  74. simulink-priority-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide details for simulink-priority-microsoft.xyz
    Domain
    simulink-priority-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-25 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · simulink-priority-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  75. smartsheet-microsoft-rest.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide details for smartsheet-microsoft-rest.xyz
    Domain
    smartsheet-microsoft-rest.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-25 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · smartsheet-microsoft-rest.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  76. smartsheet-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide details for smartsheet-microsoft.xyz
    Domain
    smartsheet-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-25 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · smartsheet-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  77. smartsheet-seaborn-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide details for smartsheet-seaborn-microsoft.xyz
    Domain
    smartsheet-seaborn-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-25 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · smartsheet-seaborn-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  78. snapshot-microsoft-circleci.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide details for snapshot-microsoft-circleci.xyz
    Domain
    snapshot-microsoft-circleci.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-25 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · snapshot-microsoft-circleci.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  79. soap-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide details for soap-microsoft.xyz
    Domain
    soap-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-25 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · soap-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  80. solidworks-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide details for solidworks-microsoft.xyz
    Domain
    solidworks-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-25 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · solidworks-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  81. utilization-follower-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide details for utilization-follower-microsoft.xyz
    Domain
    utilization-follower-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · utilization-follower-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  82. variable-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide details for variable-microsoft.xyz
    Domain
    variable-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · variable-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  83. verilog-microsoft-tablet.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide details for verilog-microsoft-tablet.xyz
    Domain
    verilog-microsoft-tablet.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · verilog-microsoft-tablet.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  84. vhdl-microsoft-partition.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide details for vhdl-microsoft-partition.xyz
    Domain
    vhdl-microsoft-partition.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · vhdl-microsoft-partition.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  85. wasm-microsoft-bootstrap.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide details for wasm-microsoft-bootstrap.xyz
    Domain
    wasm-microsoft-bootstrap.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · wasm-microsoft-bootstrap.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  86. wasm-wrike-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide details for wasm-wrike-microsoft.xyz
    Domain
    wasm-wrike-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · wasm-wrike-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  87. wave-confluence-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide details for wave-confluence-microsoft.xyz
    Domain
    wave-confluence-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · wave-confluence-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  88. waypoint-microsoft-store.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide details for waypoint-microsoft-store.xyz
    Domain
    waypoint-microsoft-store.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · waypoint-microsoft-store.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  89. while-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide details for while-microsoft.xyz
    Domain
    while-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · while-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  90. whom-microsoft-connect.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide details for whom-microsoft-connect.xyz
    Domain
    whom-microsoft-connect.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · whom-microsoft-connect.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  91. yaml-microsoft-vector.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide details for yaml-microsoft-vector.xyz
    Domain
    yaml-microsoft-vector.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-24 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · yaml-microsoft-vector.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  92. office365-sec.xyz TR · AS51557 · TR-ISIMTESCIL-20201202 Isim…Contains “office365”
    Address on DomainSpoof’s phishing-host list
    DetailsHide details for office365-sec.xyz
    Domain
    office365-sec.xyz
    Match
    A registered domain containing “office365”, one of the names we match for Microsoft
    Zone file copy
    2026-10-31 · the day of the .xyz zone file copy it was found in
    Registered
    2025-12-24 · İsimtescil Bilişim A.Ş.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    93.89.226.17 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · office365-sec.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    93.89.226.17 · Türkiye · AS51557 TR-ISIMTESCIL-20201202 Isimtescil Bilisim A.S.
    Daily check
    Ended 2026-11-04 22:41 UTC
  93. onedrive365.live US · AS214036 · ULTAHOST-AS Ultahost, Inc.Contains “onedrive”
    Address on DomainSpoof’s phishing-host listMX present
    DetailsHide details for onedrive365.live
    Domain
    onedrive365.live
    Match
    A registered domain containing “onedrive”, one of the names we match for Microsoft
    Zone file copy
    2026-10-31 · the day of the .live zone file copy it was found in
    Registered
    2025-12-18 · Ultahost, Inc
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    79.133.41.61 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · onedrive365.live resolved to it 2026-11-05 00:46 UTC
    Addresses
    79.133.41.61 · United States · AS214036 ULTAHOST-AS Ultahost, Inc.
    MX
    onedrive365.live
    Daily check
    Ended 2026-11-04 22:41 UTC
  94. hotmailbr.store CY · AS47583 · AS-HOSTINGER Hostinger Inte…Contains “hotmail”
    Address on DomainSpoof’s phishing-host listHostinger
    DetailsHide details for hotmailbr.store
    Domain
    hotmailbr.store
    Match
    A registered domain containing “hotmail”, one of the names we match for Microsoft
    Zone file copy
    2026-10-31 · the day of the .store zone file copy it was found in
    Registered
    2025-12-15 · HOSTINGER operations, UAB
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · hotmailbr.store resolved to it 2026-11-05 00:46 UTC
    Addresses
    2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
    Daily check
    Ended 2026-11-04 22:41 UTC
  95. instagram-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide details for instagram-microsoft.xyz
    Domain
    instagram-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · instagram-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  96. instagram-when-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide details for instagram-when-microsoft.xyz
    Domain
    instagram-when-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · instagram-when-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  97. instance-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide details for instance-microsoft.xyz
    Domain
    instance-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · instance-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  98. jetty-microsoft-drone.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide details for jetty-microsoft-drone.xyz
    Domain
    jetty-microsoft-drone.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · jetty-microsoft-drone.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  99. jetty-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide details for jetty-microsoft.xyz
    Domain
    jetty-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · jetty-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  100. jetty-opengl-microsoft.xyz JP · AS7506 · GMO Internet, Inc.Contains “microsoft”
    Address on DomainSpoof’s phishing-host list
    DetailsHide details for jetty-opengl-microsoft.xyz
    Domain
    jetty-opengl-microsoft.xyz
    Match
    A domain containing “microsoft”, one of the names we match for Microsoft
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-10 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 12:06 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · jetty-opengl-microsoft.xyz resolved to it 2026-11-05 00:46 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC

More brands in Software & cloud

All brands →