public company · US

Microsoft

MICROSOFT CORP

Software, cloud and productivity services; among the most frequently impersonated brands in phishing reports.

Primary official domain
microsoft.com
Reviewed official domains
10 (directory review; organization has not verified)
Directory source
BreachScout directory · Suggest a correction
Matching domains, 30 days
111
registrable domains containing the brand; source date or last feed observation
First source-reported, 30 days
1
domains first source-reported within 30 days
First observed, 30 days
137
domains first observed by DomainSpoof in feeds
Email policy (primary domain)
Not checked
No email-policy check yet

What we watch for

Hostnames in phishing feeds and certificate logs are matched on these brand tokens; feed target labels are matched on the aliases. Generated spellings (typos, lure words, look-alike characters, other top-level domains) are derived from the official domains and tokens and checked against feeds, certificate logs and DNS.

Brand tokens
hotmaillinkedinmicrosoftoffice365onedriveoutlooksharepoint
Label aliases
Hotmail · LinkedIn · Microsoft · Office 365 · OneDrive · Outlook · SharePoint
Official domains
microsoft.com · hotmail.com · licdn.com · linkedin.com · live.com · lnkd.in · microsoftonline.com · office.com · +2 more (all)
Generated spellings
400 tracked · 1 observed somewhere · 399 not observed (all)

Matching domains with source reports or listings

Source claims are shown separately from our company matches. Default scope: brand in hostname. Choose “All associations” to include source-labelled matches on other sites.

Domain / hostnameSource claimCompany match (DomainSpoof)Date (mixed basis)Latest DNSSources / recordsFinding details
invreceiptslinkedin[.]com
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Not checkedNot checked
1 source · 1 recordDetails
eaea4a850d44f00be8cad1d70ea72bcc-my-sharepoint[.]isomerlcindustries[.]com
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Not checkedNot checked
1 source · 1 recordDetails
sharepointonedriveaaqkada0yja1yji5l[.]jamejampaintingservice[.]com[.]au
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Not checkedNot checked
1 source · 1 recordDetails
onedrivedoccloud[.]kesug[.]com
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Not checkedNot checked
1 source · 1 recordDetails
hotmail-session-5vwfq9rf-ns1oada3v-----hzlj11wwvw[.]kharwadejewellers[.]com15 hostnames under kharwadejewellers.com
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Not checkedNot checked
1 source · 1 recordDetails
hotmail-session-930rm60k-oopgk7ofo-----lvl86pwhnk[.]kharwadejewellers[.]com
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Not checkedNot checked
1 source · 1 recordDetails
hotmail-session-cfxhu1zy-q3r4h6kbm-----s7env87rmi[.]kharwadejewellers[.]com
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Not checkedNot checked
1 source · 1 recordDetails
hotmail-session-ftmew3sm-2fexofgrs-----bzalpryr2e[.]kharwadejewellers[.]com
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Not checkedNot checked
1 source · 1 recordDetails
hotmail-session-g1cuv5vh-nuqr0r6it-----58jwkqdswq[.]kharwadejewellers[.]com
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Not checkedNot checked
1 source · 1 recordDetails
hotmail-session-l3wkgga8-npg2twp1l-----3p0yff1rmr[.]kharwadejewellers[.]com
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Not checkedNot checked
1 source · 1 recordDetails
hotmail-session-npxtxkjz-74ectpfbf-----4sdlycfflk[.]kharwadejewellers[.]com
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Not checkedNot checked
1 source · 1 recordDetails
hotmail-session-ounq3ia7-pwis80v7w-----9dynnasaox[.]kharwadejewellers[.]com
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Not checkedNot checked
1 source · 1 recordDetails
hotmail-session-qqqzdhtq-rodhq4viq-----9tf8armjoz[.]kharwadejewellers[.]com
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Not checkedNot checked
1 source · 1 recordDetails
hotmail-session-rofq8w6e-wbbtjgmhe-----lgqad25m2l[.]kharwadejewellers[.]com
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Not checkedNot checked
1 source · 1 recordDetails
hotmail-session-tebgrf0u-gr1rby7fl-----5to8rvgn1k[.]kharwadejewellers[.]com
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Not checkedNot checked
1 source · 1 recordDetails
hotmail-session-twmgxsyd-4hleuexj1-----z5imb2ponk[.]kharwadejewellers[.]com
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Not checkedNot checked
1 source · 1 recordDetails
hotmail-session-vqyza9su-px3tuhhnx-----tqs6gzixtq[.]kharwadejewellers[.]com
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Not checkedNot checked
1 source · 1 recordDetails
hotmail-session-xb5des4o-ifjxjtqro-----86vcpikiw6[.]kharwadejewellers[.]com
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Not checkedNot checked
1 source · 1 recordDetails
hotmail-session-y4hmdh7g-zsmcogkvt-----uppj0pqihh[.]kharwadejewellers[.]com
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Not checkedNot checked
1 source · 1 recordDetails
linkedin[.]rent
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Not checkedNot checked
1 source · 1 recordDetails
live-hotmail[.]com
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Not checkedNot checked
1 source · 1 recordDetails
login-faxplus-outlook[.]com
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Not checkedNot checked
1 source · 1 recordDetails
login-microsoftonline[.]pl
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Not checkedNot checked
1 source · 1 recordDetails
loginmicrosoft[.]com
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Not checkedNot checked
1 source · 1 recordDetails
login[.]loginmicrosoftonline[.]uk
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Not checkedNot checked
1 source · 1 recordDetails
ww547[.]loutlook[.]com
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Not checkedNot checked
1 source · 1 recordDetails
emailnotifications[.]m365-microsoft[.]com4 hostnames under m365-microsoft.com
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Not checkedNot checked
1 source · 1 recordDetails
programme-hup[.]m365-microsoft[.]com
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Not checkedNot checked
1 source · 1 recordDetails
security[.]m365-microsoft[.]com
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Not checkedNot checked
1 source · 1 recordDetails
support[.]m365-microsoft[.]com
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Not checkedNot checked
1 source · 1 recordDetails
manychatforlinkedin[.]com
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Not checkedNot checked
1 source · 1 recordDetails
microsofonedrive[.]com
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Not checkedNot checked
1 source · 1 recordDetails
microsoft-certification[.]com
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Not checkedNot checked
1 source · 1 recordDetails
microsoft-desk[.]com
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Not checkedNot checked
1 source · 1 recordDetails
microsoft-login[.]it
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Not checkedNot checked
1 source · 1 recordDetails
watco[.]microsoft-notifcation[.]com
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Not checkedNot checked
1 source · 1 recordDetails
microsoft-o365[.]com
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Not checkedNot checked
1 source · 1 recordDetails
microsoft-office-setup[.]com
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Not checkedNot checked
1 source · 1 recordDetails
microsoft-office356[.]com
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Not checkedNot checked
1 source · 1 recordDetails
microsoft-office365[.]cloud
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Not checkedNot checked
1 source · 1 recordDetails
microsoft-office365[.]site
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Not checkedNot checked
1 source · 1 recordDetails
microsoft-se[.]us
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Not checkedNot checked
1 source · 1 recordDetails

A feed listing or DNS answer alone cannot confirm current phishing. Removal from a feed does not confirm resolution.