public company · US
Microsoft
MICROSOFT CORP
Software, cloud and productivity services; among the most frequently impersonated brands in phishing reports.
- Primary official domain
- microsoft.com
- Reviewed official domains
- 10 (directory review; organization has not verified)
- Directory source
- BreachScout directory · Suggest a correction
What we watch for
Hostnames in phishing feeds and certificate logs are matched on these brand tokens; feed target labels are matched on the aliases. Generated spellings (typos, lure words, look-alike characters, other top-level domains) are derived from the official domains and tokens and checked against feeds, certificate logs and DNS.
- Brand tokens
- hotmaillinkedinmicrosoftoffice365onedriveoutlooksharepoint
- Label aliases
- Hotmail · LinkedIn · Microsoft · Office 365 · OneDrive · Outlook · SharePoint
- Official domains
- microsoft.com · hotmail.com · licdn.com · linkedin.com · live.com · lnkd.in · microsoftonline.com · office.com · +2 more (all)
- Generated spellings
- 400 tracked · 1 observed somewhere · 399 not observed (all)
Official domains and email policies
Domains reviewed as belonging to Microsoft. DMARC helps receivers check the From domain; lookalike domains remain possible. Published policies cannot confirm actual mail configuration or receiver behavior.
| Domain | Relationship | Evidence | DMARC policy | Policy source | SPF | Reporting | DKIM | MTA-STS | Last check | |
|---|---|---|---|---|---|---|---|---|---|---|
| microsoft.com | primaryReviewed — | Portfolio directory (wikidata_cik+financedb_ticker) | Not checked | Not checked | Not checked | Not checked | Not checked | Not checked | Not checked | Not checked |
| hotmail.com | subsidiaryReviewed 2026-10-18 | DomainSpoof directory (curated) | Not checked | Not checked | Not checked | Not checked | Not checked | Not checked | Not checked | Not checked |
| licdn.com | subsidiaryReviewed 2026-10-18 | DomainSpoof directory (curated) | Not checked | Not checked | Not checked | Not checked | Not checked | Not checked | Not checked | Not checked |
| linkedin.com | subsidiaryReviewed 2026-10-18 | DomainSpoof directory (curated) | Not checked | Not checked | Not checked | Not checked | Not checked | Not checked | Not checked | Not checked |
| live.com | subsidiaryReviewed 2026-10-18 | DomainSpoof directory (seed) | Not checked | Not checked | Not checked | Not checked | Not checked | Not checked | Not checked | Not checked |
| lnkd.in | subsidiaryReviewed 2026-10-18 | DomainSpoof directory (curated) | Not checked | Not checked | Not checked | Not checked | Not checked | Not checked | Not checked | Not checked |
| microsoftonline.com | subsidiaryReviewed 2026-10-18 | DomainSpoof directory (seed) | Not checked | Not checked | Not checked | Not checked | Not checked | Not checked | Not checked | Not checked |
| office.com | subsidiaryReviewed 2026-10-18 | DomainSpoof directory (seed) | Not checked | Not checked | Not checked | Not checked | Not checked | Not checked | Not checked | Not checked |
| outlook.com | subsidiaryReviewed 2026-10-18 | DomainSpoof directory (seed) | Not checked | Not checked | Not checked | Not checked | Not checked | Not checked | Not checked | Not checked |
| sharepoint.com | subsidiaryReviewed 2026-10-18 | DomainSpoof directory (seed) | Not checked | Not checked | Not checked | Not checked | Not checked | Not checked | Not checked | Not checked |
“Not checked”: no check yet (mail, DKIM and MTA-STS facts were added later, so older checks show “Not checked” for them). “Lookup failed”: DNS result unknown. DKIM is probed at a fixed list of common selectors only. Report mailbox names are redacted.
Reports on official domains appear under “Official assets with reports” on the Reported matches tab.