public company · US
Microsoft
MICROSOFT CORP
Software, cloud and productivity services; among the most frequently impersonated brands in phishing reports.
- Primary official domain
- microsoft.com
- Reviewed official domains
- 10 (directory review; organization has not verified)
- Directory source
- BreachScout directory · Suggest a correction
Matching domains, 30 days
111
registrable domains containing the brand; source date or last feed observation
First source-reported, 30 days
1
domains first source-reported within 30 days
First observed, 30 days
137
domains first observed by DomainSpoof in feeds
Email policy (primary domain)
DMARC reject
SPF -all · 7/10 lookups · Mail: Receives mail (1 MX host) · checked 2026-10-19 · published policy
What we watch for
Hostnames in phishing feeds and certificate logs are matched on these brand tokens; feed target labels are matched on the aliases. Generated spellings (typos, lure words, look-alike characters, other top-level domains) are derived from the official domains and tokens and checked against feeds, certificate logs and DNS.
- Brand tokens
- hotmaillinkedinmicrosoftoffice365onedriveoutlooksharepoint
- Label aliases
- Hotmail · LinkedIn · Microsoft · Office 365 · OneDrive · Outlook · SharePoint
- Official domains
- microsoft.com · hotmail.com · licdn.com · linkedin.com · live.com · lnkd.in · microsoftonline.com · office.com · +2 more (all)
- Generated spellings
- 400 tracked · 168 observed somewhere · 232 not observed (all)
Matching domains with source reports or listings
Source claims are shown separately from our company matches. Default scope: brand in hostname. Choose “All associations” to include source-labelled matches on other sites.
| Domain / hostname | Source claim | Company match (DomainSpoof) | Date (mixed basis) | Latest DNS | Sources / records | Finding details |
|---|---|---|---|---|---|---|
microsoft-sharepoint[.]frMail: MXSPF · via ovh.net · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive46.105.253.201checked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
notifications[.]microsoft-ssl[.]comMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive44.231.0.19854.68.10.71checked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
microsoft-teams-co[.]inMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive121.127.233.63checked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
cpanel[.]microsoft365-techsupport[.]comMail: DMARC · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive208.109.172.212checked 2026-10-19 04:49 UTC | 1 source · 1 record | Details |
microsoft365-verify[.]comMail: MX · via microsoft365-verify.com · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive77.90.51.62checked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
microsoft365auth[.]liveMail: DMARC · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive13.248.243.576.223.105.230checked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
microsoft365businessbasic[.]comMail: MXSPFDMARC · via ionos.com · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive74.208.236.852607:f1c0:100f:f000::200checked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
microsoft365updates[.]comMail: MXSPFDMARC · via msv1.invalid · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive104.21.10.231172.67.146.2452606:4700:3032::6815:ae72606:4700:3035::ac43:92f5checked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
microsoftalerts365[.]comMail: SPFDMARC · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive13.237.119.225checked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
microsoftauthenticatorappdownload[.]comMail: DMARC · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive13.248.243.576.223.105.230checked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
microsoftcom[.]liveMail: DMARC · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive13.248.243.576.223.105.230checked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
login[.]polcu[.]microsoftenline[.]comMail: MXSPFDMARC · via secureserver.net · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive34.19.207.32checked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
microsoftlauncher[.]appMail: DMARC · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive15.197.148.333.33.130.190checked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
microsoftoffice[.]helpMail: DMARC · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive20.112.250.13320.231.239.24620.236.44.16220.70.246.2020.76.201.171checked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
microsoftofficial[.]supportMail: DMARC · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive34.111.179.208checked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
microsoftonilne[.]ruMail: MXSPF · via mailgun.org · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive87.242.79.60checked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
microsoftonlimes[.]comMail: MXSPFDMARC · via outlook.com · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive108.175.5.157checked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
microsoftonline-auth[.]usMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive104.21.79.250172.67.172.82606:4700:3032::ac43:ac082606:4700:3035::6815:4ffachecked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
microsoftonlineonedrive[.]comMail: SPFDMARC · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive157.245.182.226checked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
microsoftscloud[.]comMail: DMARC · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive13.248.243.576.223.105.230checked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
microsoftsolutions[.]infoMail: SPF · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive13.248.169.4876.223.54.146checked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
microsoftstudio1[.]comMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive104.26.6.77104.26.7.77172.67.73.352606:4700:20::681a:64d2606:4700:20::681a:74d2606:4700:20::ac43:4923checked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
click5[.]microsoftsupportcenter[.]digitalMail: MXSPF · via eye-mail.net · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive172.237.129.108172.237.129.242172.237.129.236checked 2026-10-19 04:48 UTC | 1 source · 1 record | Details |
microsoftteams-101[.]comMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive91.195.240.123checked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
microsoftteamservice[.]orgMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive75.2.60.5checked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
111 registrable domains · 138 hostnames · page 3 of 5← PreviousNext →
A feed listing or DNS answer alone cannot confirm current phishing. Removal from a feed does not confirm resolution.