Microsoft phishing & impersonation

Tech & Cloudoutlook.com

498

Impersonation sightings

248

Distinct hosts

2026-09-30

Last detected

Official domains

ScanMalware watches every scanned site for signs it is impersonating Microsoft — the brand name in the page title or screenshot text, the brand's logo/favicon on a non-official host, and our AI analysis naming the brand. A match on a host outside Microsoft's official domains is recorded below.

Official domains

outlook.comwindows.nets-microsoft.commicrosoftonline.usmcas.mssharepoint.commicrosoftonline.comoffice.commicrosoftmetrics.comlive.commicrosoftonline.cnmcas-gov.usaka.msmicrosoft365.comstatic.microsoftcloud.microsoftmicrosoftonline-p.comusgovcloud.microsoftmicrosoft.usmsauth.netmsftauth.netmcas-gov.msazure.comoffice365.commicrosoft.com

Also known as

outlookonedrivehotmailoffice 365sharepointmicrosoft.comlive.com

Sites impersonating Microsoft

100 of 248 hosts · repeat scans of the same host are grouped

Site	Verdicts	Why it matched	Last seen	Actions
dndair.com Cloud Share	RulesMaliciousAIConfirmed Scam	“Microsoft” in page or screenshot text Screenshot text	2026-09-30	View scan → Report as wrong
auth.properties Sign in to your Microsoft account	RulesMaliciousAIConfirmed Scam	“Microsoft” in the page title Page text	2026-09-30 seen 4×	View scan → Report as wrong
php-web-server--unitmexi.replit.app Iniciar	RulesMaliciousAIConfirmed Scam	Identified as Microsoft by our AI analysis AI analysis	2026-09-30 seen 2×	View scan → Report as wrong
legendary-octo-lamp-dusky.vercel.app Security verification - Microsoft account	RulesHigh RiskAIConfirmed Scam Credential Phishing on disposable hosting	“Microsoft” in the page title Page text	2026-09-30	View scan → Report as wrong
firebasestorage.googleapis.com Microsoft Teams	RulesLow RiskAIConfirmed Scam	“Microsoft” in the page title AI analysisPage text	2026-09-29 seen 4×	View scan → Report as wrong
zebcoindustrie-portal.vercel.app Microsoft User shared “Business Project & Payment Documentation August 2026–” with you	RulesLow RiskAIHigh Risk	“Microsoft” in the page title Page text	2026-09-29	View scan → Report as wrong
office-365-msn--oficeer.replit.app This app isn't live yet	RulesHigh RiskAIHigh Risk	Identified as Microsoft by our AI analysis AI analysis	2026-09-29	View scan → Report as wrong
pub-259e97a08339410dac74092f0be97904.r2.dev	RulesLow RiskAIModerate Risk	Identical to a page confirmed as Microsoft Identical page	2026-09-29 seen 2×	View scan → Report as wrong
security-server-landing-page--mariodrichard.replit.app Sign in to your account	RulesHigh RiskAIConfirmed Scam	“Microsoft” in page or screenshot text Screenshot text	2026-09-29 seen 2×	View scan → Report as wrong
pub-dc2e59bc37c14990a4ca3fd1a2e63351.r2.dev	RulesLow RiskAIModerate Risk	Identical to a page confirmed as Microsoft Identical page	2026-09-29	View scan → Report as wrong
pub-39eca629cc02445da2c884c54041a70f.r2.dev	RulesLow RiskAIModerate Risk	Identical to a page confirmed as Microsoft Identical page	2026-09-29	View scan → Report as wrong
login.iiwosbuonindussutarrial.com Files	RulesMaliciousAIConfirmed Scam Microsoft Phishing, cloaked from scanners	“Microsoft” in page or screenshot text Screenshot text	2026-09-29 seen 2×	View scan → Report as wrong
microsoft.authorised-support.com Sign in to your Microsoft account	RulesHigh RiskAIConfirmed Scam	“Microsoft” in the hostname Identical page	2026-09-29 seen 7×	View scan → Report as wrong
pub-48ea3caf73af44088808b664244c8a2e.r2.dev	RulesLow RiskAIModerate Risk	Identical to a page confirmed as Microsoft Identical page	2026-09-28	View scan → Report as wrong
pub-00b2ddc67aee44e3bd461fe9ee9c5abe.r2.dev	RulesLow RiskAIModerate Risk	Identical to a page confirmed as Microsoft Identical page	2026-09-28	View scan → Report as wrong
pub-61f37371db1d42afba13f23903b84152.r2.dev	RulesLow RiskAIHigh Risk	Identified as Microsoft by our AI analysis AI analysis	2026-09-28	View scan → Report as wrong
pub-6d805fed521749fbba49267aba5ebb7d.r2.dev	RulesLow RiskAIHigh Risk	Identified as Microsoft by our AI analysis AI analysis	2026-09-28	View scan → Report as wrong
pub-b66dec0cc4eb4cfb824497aaa022db80.r2.dev	RulesLow RiskAIModerate Risk	Identical to a page confirmed as Microsoft Identical page	2026-09-28	View scan → Report as wrong
outlook40394343.web.app Sample Background	RulesLow RiskAIModerate Risk	“Microsoft” in the hostname AI analysis	2026-09-28	View scan → Report as wrong
office365login-1f9d1.firebaseapp.com	RulesLow RiskAIHigh Risk	Identified as Microsoft by our AI analysis AI analysis	2026-09-27	View scan → Report as wrong
meeting-bonus.web.app Sign in to your account	RulesMaliciousAIHigh Risk Microsoft 365 Credential Phishing	Microsoft logo on a non-official host AI analysisLogo / favicon	2026-09-27 seen 2×	View scan → Report as wrong
meeting-bonus.firebaseapp.com Sign in to your account	RulesMaliciousAIHigh Risk Microsoft 365 Credential Phishing	Microsoft logo on a non-official host Logo / favicon	2026-09-27	View scan → Report as wrong
zu7013.craftum.io Four(4) Pending File	RulesHigh RiskAIConfirmed Scam IDS: ET PHISHING Generic Multibrand Ajax XHR CredPost Phishing Landing	“Microsoft” in page or screenshot text Screenshot text	2026-09-27	View scan → Report as wrong
www.theodore3.com Microsoft \| Login	RulesMaliciousAIConfirmed Scam	“Microsoft” in the page title Page text	2026-09-27 seen 2×	View scan → Report as wrong
pub-72d8cc6588b945a8b92bcdfd75f82472.r2.dev Secure Voice Playback	RulesMaliciousAIHigh Risk	Identified as Microsoft by our AI analysis AI analysis	2026-09-27	View scan → Report as wrong
security-server-page--billymorg6.replit.app Security verification - Microsoft account	RulesMaliciousAIConfirmed Scam	“Microsoft” in the page title Page text	2026-09-27	View scan → Report as wrong
ofdocsonliineaws.firebaseapp.com Redirecting...	RulesLow RiskAIHigh Risk	Identified as Microsoft by our AI analysis AI analysis	2026-09-27	View scan → Report as wrong
pub-2a92347ea03e4260a6bb3d381381c037.r2.dev Microsoft Sign-in Redirect	RulesHigh RiskAIHigh Risk	“Microsoft” in the page title Page text	2026-09-27 seen 3×	View scan → Report as wrong
op2-tec-authorized-docwmtm.web.app Discover New Paths	RulesLow RiskAIHigh Risk	Identified as Microsoft by our AI analysis AI analysis	2026-09-27	View scan → Report as wrong
op2-tec-authorized-docwmtm.firebaseapp.com The World Awaits	RulesLow RiskAIHigh Risk	Identified as Microsoft by our AI analysis AI analysis	2026-09-27	View scan → Report as wrong
security-server-landing-page--spencer-hunt1.replit.app Sign in to your account	RulesHigh RiskAIHigh Risk	“Microsoft” in page or screenshot text Screenshot text	2026-09-27 seen 2×	View scan → Report as wrong
security-server-landing-page--lme85959.replit.app Sign in to your account	RulesHigh RiskAIHigh Risk Credential Phishing on disposable hosting	“Microsoft” in page or screenshot text Screenshot text	2026-09-27 seen 2×	View scan → Report as wrong
pub-1e1e5882cdef4467b149e1bfab4eb3e6.r2.dev Microsoft Sign-in Redirect	RulesHigh RiskAIHigh Risk	“Microsoft” in the page title AI analysisPage text	2026-09-27 seen 4×	View scan → Report as wrong
auroraesi.web.app Secure Document Access	RulesHigh RiskAIHigh Risk	Identified as Microsoft by our AI analysis AI analysis	2026-09-27	View scan → Report as wrong
newww-sooty.vercel.app My Files - OneDrive	RulesHigh RiskAIConfirmed Scam Credential Phishing on disposable hosting	“Microsoft” in the page title Page text	2026-09-27 seen 3×	View scan → Report as wrong
pub-e66b4b88b1d24aeeaf754f0ecee122c7.r2.dev Microsoft Sign-in Redirect	RulesHigh RiskAIHigh Risk	“Microsoft” in the page title Page text	2026-09-26 seen 3×	View scan → Report as wrong
security-server-page--delta2rolspan.replit.app Security verification - Microsoft account	RulesHigh RiskAIConfirmed Scam Credential Phishing on disposable hosting	“Microsoft” in the page title Page text	2026-09-26 seen 2×	View scan → Report as wrong
dwaniqueautosales.com Download Transcript \| Microsoft Teams	RulesLow RiskAIHigh Risk	“Microsoft” in the page title AI analysis	2026-09-26	View scan → Report as wrong
csbim-connect.firebaseapp.com CONNECT \| Login	RulesHigh RiskAIModerate Risk Credential Phishing on disposable hosting	“Microsoft” in page or screenshot text Screenshot text	2026-09-26	View scan → Report as wrong
csbim-connect.web.app CONNECT \| Login	RulesHigh RiskAIModerate Risk Credential Phishing on disposable hosting	“Microsoft” in page or screenshot text Screenshot text	2026-09-26	View scan → Report as wrong
creyt.cl Access your file - OneDrive	RulesMaliciousAIConfirmed Scam	“Microsoft” in the page title Screenshot text	2026-09-26	View scan → Report as wrong
pub-4e92eaba6dd84e8185d3624a8f50b701.r2.dev Webmail Portal Access \| Digital Secured Platform	RulesHigh RiskAIConfirmed Scam Credential Phishing on object storage	“Microsoft” in page or screenshot text Screenshot text	2026-09-26	View scan → Report as wrong
reactivar-microsoft-live.iceiy.com DNS Resolution Error - Domain Not Found, Or Domain not added to hosting account	RulesLow RiskAIHigh Risk	“Microsoft” in the hostname AI analysis	2026-09-26	View scan → Report as wrong
microsoft-1ogin.duckdns.org 404: NOT_FOUND	RulesHigh RiskAIHigh Risk	“Microsoft” in the hostname AI analysis	2026-09-25	View scan → Report as wrong
htyd.vercel.app Sign in to your account	RulesHigh RiskAIConfirmed Scam	Microsoft logo on a non-official host AI analysisLogo / faviconPage text	2026-09-25 seen 25×	View scan → Report as wrong
saranshgupta-dev.github.io Document	RulesHigh RiskAIHigh Risk	Identified as Microsoft by our AI analysis AI analysis	2026-09-25	View scan → Report as wrong
editable-static-website--laboratorium13.replit.app Sign in to your Microsoft account	RulesHigh RiskAIConfirmed Scam Credential Phishing on disposable hosting	“Microsoft” in the page title Page text	2026-09-24	View scan → Report as wrong
security-server-page--servarog.replit.app Security verification - Microsoft account	RulesHigh RiskAIConfirmed Scam Possible Microsoft Phishing on cloud hosting	“Microsoft” in the page title Page text	2026-09-24	View scan → Report as wrong
jimcooks211.github.io Microsoft Personal Account	RulesHigh RiskAIConfirmed Scam Credential Phishing on disposable hosting	“Microsoft” in the page title Page text	2026-09-24 seen 9×	View scan → Report as wrong
statement-of-account-alpha.vercel.app Sign in to your account	RulesMaliciousAIConfirmed Scam	Microsoft logo on a non-official host Logo / faviconScreenshot text	2026-09-24 seen 3×	View scan → Report as wrong
login.joavinlinconindustrlias.com Files	RulesMaliciousAIConfirmed Scam Microsoft Phishing, cloaked from scanners	“Microsoft” in page or screenshot text Screenshot text	2026-09-24 seen 2×	View scan → Report as wrong
wildlands.acltci.com Sign in to your account	RulesMaliciousAIConfirmed Scam Microsoft 365 Credential Phishing	“Microsoft” in page or screenshot text Screenshot text	2026-09-24 seen 3×	View scan → Report as wrong
accessvalidoutlo.netlify.app Iniciar sesión - Microsoft	RulesHigh RiskAIConfirmed Scam Credential Phishing on disposable hosting	“Microsoft” in the page title Page text	2026-09-24 seen 2×	View scan → Report as wrong
security-server-landing-page--carbodyshop.replit.app Security verification - Microsoft account	RulesMaliciousAIConfirmed Scam	“Microsoft” in the page title Page text	2026-09-24	View scan → Report as wrong
paymentsecurelink.vercel.app Microsoft \| Login	RulesMaliciousAIConfirmed Scam	“Microsoft” in the page title Logo / faviconPage text	2026-09-24 seen 5×	View scan → Report as wrong
security-server-landing-page--kerriemommah1.replit.app Security verification - Microsoft account	RulesMaliciousAIConfirmed Scam	“Microsoft” in the page title Page text	2026-09-24	View scan → Report as wrong
mynah.pages.dev Microsoft SharePoint \| File Share	RulesLow RiskAIHigh Risk	“Microsoft” in the page title AI analysisPage text	2026-09-24 seen 15×	View scan → Report as wrong
pub-9204f20e06e047fc844db30aa53e5d5c.r2.dev	RulesLow RiskAIModerate Risk	Identical to a page confirmed as Microsoft Identical page	2026-09-24	View scan → Report as wrong
effortless-macaron-6afef2.netlify.app PORTAL - hotmail.com Mail Authentication	RulesHigh RiskAIConfirmed Scam Credential Phishing on disposable hosting	“Microsoft” in the page title Page text	2026-09-23	View scan → Report as wrong
ronikop.com Sign in to your account	RulesMaliciousAIConfirmed Scam IDS: ET PHISHING ODx Exfil Activity M2	“Microsoft” in page or screenshot text Screenshot text	2026-09-22	View scan → Report as wrong
marketclerk.com MSFT, MICROSOFT CORP stock: insiders, Congress, funds, financials \| Market Clerk	RulesMedium RiskAILow Risk	“Microsoft” in the page title Page text	2026-09-22	View scan → Report as wrong
docu-sign.creativaplanning.com 502 Bad Gateway	RulesHigh RiskAIHigh Risk	Identified as Microsoft by our AI analysis AI analysis	2026-09-22 seen 2×	View scan → Report as wrong
microsoft-0r.github.io Sign in to your account	RulesMaliciousAIConfirmed Scam	“Microsoft” in the hostname Logo / faviconScreenshot text	2026-09-22 seen 3×	View scan → Report as wrong
security-server-landing-page--hahwjjjaugwa.replit.app Sign in to your account	RulesHigh RiskAIConfirmed Scam	“Microsoft” in page or screenshot text Screenshot text	2026-09-22 seen 2×	View scan → Report as wrong
security-server-landing-page--ikramkhan83.replit.app Security verification - Microsoft account	RulesHigh RiskAIHigh Risk Possible Microsoft Phishing on cloud hosting	“Microsoft” in the page title Page text	2026-09-22 seen 2×	View scan → Report as wrong
security-server-page--copydada27.replit.app Sign in to your account	RulesHigh RiskAIHigh Risk Credential Phishing on disposable hosting	“Microsoft” in page or screenshot text Screenshot text	2026-09-22 seen 2×	View scan → Report as wrong
security-server-landing-page--wesselg1.replit.app Security verification - Microsoft account	RulesHigh RiskAIConfirmed Scam Possible Microsoft Phishing on cloud hosting	“Microsoft” in the page title Page text	2026-09-22 seen 2×	View scan → Report as wrong
nk2184.craftum.io Microsoft Excel 2026 // Document Access	RulesLow RiskAIConfirmed Scam	“Microsoft” in the page title Page text	2026-09-22	View scan → Report as wrong
security-server-page--emekemine206.replit.app Security verification - Microsoft account	RulesHigh RiskAIConfirmed Scam Possible Microsoft Phishing on cloud hosting	“Microsoft” in the page title Page text	2026-09-22	View scan → Report as wrong
adi-panwar.github.io Microsoft	RulesLow RiskAIHigh Risk	“Microsoft” in the page title AI analysisPage text	2026-09-22 seen 2×	View scan → Report as wrong
multi-factor.link Sign in to your Microsoft account	RulesMedium RiskAIHigh Risk	“Microsoft” in the page title Page text	2026-09-22 seen 2×	View scan → Report as wrong
background-check-status.com Microsoft Login Page	RulesLow RiskAIConfirmed Scam	“Microsoft” in the page title Page text	2026-09-21	View scan → Report as wrong
server-docs--sofdudefunds.replit.app Security verification - Microsoft account	RulesHigh RiskAIHigh Risk Credential Phishing on disposable hosting	“Microsoft” in the page title Page text	2026-09-21 seen 2×	View scan → Report as wrong
security-server-page--chisomotf.replit.app Sign in to your account	RulesHigh RiskAIConfirmed Scam	Microsoft logo on a non-official host Logo / favicon	2026-09-21 seen 2×	View scan → Report as wrong
madhur139.github.io Microsoft	RulesLow RiskAIModerate Risk	“Microsoft” in the page title AI analysisPage text	2026-09-21 seen 2×	View scan → Report as wrong
dawn-king-9608.baxterburrows8073.workers.dev OneDrive	RulesLow RiskAIConfirmed Scam	“Microsoft” in the page title Page text	2026-09-21	View scan → Report as wrong
valihotwhat2026.z13.web.core.windows.net Iniciar sesión en tu cuenta Microsoft	RulesMaliciousAIConfirmed Scam	“Microsoft” in the page title Page text	2026-09-21	View scan → Report as wrong
connectezvousamicrosoftoutlook.weebly.com Connectez-vous à votre compte	RulesHigh RiskAIConfirmed Scam IDS: ET PHISHING Phishing Landing via Weebly.com M1 2016-02-02 +1 more	“Microsoft” in the hostname Screenshot text	2026-09-21 seen 2×	View scan → Report as wrong
server-security-landing-page--docu-sign.replit.app Security verification - Microsoft account	RulesMaliciousAIConfirmed Scam	“Microsoft” in the page title Page text	2026-09-20	View scan → Report as wrong
security-server-landing-page--microsoftdou.replit.app Sign in to your account	RulesHigh RiskAIConfirmed Scam Credential Phishing on disposable hosting	“Microsoft” in the hostname Screenshot text	2026-09-20	View scan → Report as wrong
microsoftword.programgridsoft.com Microsoft Word	RulesHigh RiskAIHigh Risk	“Microsoft” in the hostname AI analysis	2026-09-19	View scan → Report as wrong
mail-drive-oj1g.p-2f66mze8.workers.dev Microsoft User shared a document with you	RulesMaliciousAIConfirmed Scam	“Microsoft” in the page title Page text	2026-09-19	View scan → Report as wrong
login.authorised-support.com Sign in to your Microsoft account	RulesHigh RiskAIHigh Risk	“Microsoft” in the page title Page text	2026-09-19 seen 5×	View scan → Report as wrong
noticeofpleadings.net This website domain has been seized by Microsoft	RulesMaliciousAIHigh Risk IDS: ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (eaglekl .digital) +1 more	“Microsoft” in the page title AI analysisIdentical page	2026-09-18 seen 13×	View scan → Report as wrong
login.coachjosuecosta.com Files	RulesMaliciousAIConfirmed Scam Microsoft Phishing, cloaked from scanners	“Microsoft” in page or screenshot text Screenshot text	2026-09-18 seen 2×	View scan → Report as wrong
xbu55.vercel.app Files	RulesMaliciousAIConfirmed Scam	Microsoft logo on a non-official host Logo / favicon	2026-09-18 seen 2×	View scan → Report as wrong
www.grupoimpaktu.ao Access your file - OneDrive	RulesMedium RiskAIConfirmed Scam	“Microsoft” in the page title Screenshot text	2026-09-18	View scan → Report as wrong
rft28.vercel.app Files	RulesMaliciousAIConfirmed Scam Microsoft Credential Phishing	Microsoft logo on a non-official host Logo / favicon	2026-09-17	View scan → Report as wrong
microsoft-alpha.vercel.app Document	RulesMaliciousAIConfirmed Scam	“Microsoft” in the hostname AI analysisScreenshot textPage text	2026-09-17 seen 3×	View scan → Report as wrong
docusignfile-review-security-page--newstoolin.replit.app Security verification - Microsoft account	RulesHigh RiskAIHigh Risk Credential Phishing on disposable hosting	“Microsoft” in the page title Page text	2026-09-17	View scan → Report as wrong
office365mail.com OneDrive	RulesMedium RiskAIHigh Risk	“Microsoft” in the page title AI analysis	2026-09-17	View scan → Report as wrong
smmrgv.vercel.app My Files - OneDrive	RulesLow RiskAIModerate Risk	“Microsoft” in the page title AI analysisPage text	2026-09-17 seen 4×	View scan → Report as wrong
comunidad--comunidadunitec.replit.app Iniciar	RulesHigh RiskAIHigh Risk Credential Phishing on disposable hosting	“Microsoft” in page or screenshot text AI analysisScreenshot text	2026-09-16 seen 2×	View scan → Report as wrong
wlp66.vercel.app Files	RulesMaliciousAIConfirmed Scam	Microsoft logo on a non-official host Logo / favicon	2026-09-16	View scan → Report as wrong
security-server-landing-page--vinjuntrucking.replit.app Sign in to your account	RulesHigh RiskAIConfirmed Scam	“Microsoft” in page or screenshot text Screenshot textPage text	2026-09-15 seen 2×	View scan → Report as wrong
ka-importexportmicroframework.vercel.app My Files - OneDrive	RulesHigh RiskAIConfirmed Scam Credential Phishing on disposable hosting	“Microsoft” in the page title Screenshot text	2026-09-15 seen 2×	View scan → Report as wrong
security-server-page--jhalskov68.replit.app Sign in to your account	RulesHigh RiskAIConfirmed Scam	“Microsoft” in page or screenshot text Screenshot text	2026-09-14	View scan → Report as wrong
security-server-landing-page--sapphirepaving1.replit.app Sign in to your account	RulesMaliciousAIConfirmed Scam	“Microsoft” in page or screenshot text Screenshot text	2026-09-14	View scan → Report as wrong
rnicrosoftaccount.com rn.identity — Microsoft Identity Lifecycle Automation	RulesLow RiskAIHigh Risk	“Microsoft” in the page title AI analysisPage text	2026-09-13 seen 2×	View scan → Report as wrong
teamapp.pages.dev Microsoft Teams Voicemail	RulesLow RiskAIConfirmed Scam	“Microsoft” in the page title Page text	2026-09-12	View scan → Report as wrong

44 further hosts are not listed: the Microsoft name appeared on them, but both our rule engine and our AI analysis rated the page harmless, so we do not publish them as impersonation.

← All monitored brands Download as CSV