Microsoft phishing & impersonation
Tech & Cloudoutlook.com
325
Impersonation sightings
158
Distinct hosts
2026-09-12
Last detected
25
Official domains
ScanMalware watches every scanned site for signs it is impersonating Microsoft — the brand name in the page title or screenshot text, the brand's logo/favicon on a non-official host, and our AI analysis naming the brand. A match on a host outside Microsoft's official domains is recorded below.
Official domains
outlook.comwindows.nets-microsoft.commicrosoftonline.usmcas.mssharepoint.commicrosoftonline.comoffice.commicrosoftmetrics.comlive.commicrosoftonline.cnmcas-gov.usaka.msmicrosoft365.comstatic.microsoftcloud.microsoftmicrosoftonline-p.comusgovcloud.microsoftmicrosoft.usmsauth.netmsftauth.netmcas-gov.msazure.comoffice365.commicrosoft.com
Also known as
outlookonedrivehotmailoffice 365sharepointmicrosoft.comlive.com
Sites impersonating Microsoft
100 of 158 hosts · repeat scans of the same host are grouped
| Site | Verdicts | Last seen | Actions |
|---|---|---|---|
| 116ec3a1ad128d7d.darkwebf.workers.dev SharePoint - Remittance Advice | RulesHigh RiskAIHigh Risk | 2026-09-12 | View scan → |
| secure-server-landing-page--richmanagementt.replit.app Security verification - Microsoft account | RulesHigh RiskAIHigh Risk Credential Phishing on disposable hosting | 2026-09-12 seen 2× | View scan → |
| oznormali.vercel.app Outlook | RulesHigh RiskAIHigh Risk Credential Phishing on disposable hosting | 2026-09-12 seen 5× | View scan → |
| millsiowaslv.vercel.app Microsoft Outlook | RulesMaliciousAIHigh Risk Microsoft Credential Phishing on cloud hosting | 2026-09-11 seen 5× | View scan → |
| crimson-boat-8e3d.doyleglover7430.workers.dev OneDrive | RulesLow RiskAIHigh Risk | 2026-09-11 seen 2× | View scan → |
| promptspark.net Access your file - OneDrive | RulesLow RiskAIHigh Risk | 2026-09-10 seen 2× | View scan → |
| rootsystemsbd.com Microsoft Sharepoint | RulesLow RiskAIModerate Risk | 2026-09-10 | View scan → |
| welkineng.com Iniciar sesión en tu cuenta Microsoft | RulesLow RiskAIModerate Risk | 2026-09-10 | View scan → |
| arif.primehostbd.shop Access your file - OneDrive | RulesLow RiskAIModerate Risk | 2026-09-10 seen 2× | View scan → |
| cfconfiglogin.vercel.app Iniciar | RulesHigh RiskAIHigh Risk Credential Phishing on disposable hosting | 2026-09-10 seen 4× | View scan → |
| mynah.pages.dev Microsoft SharePoint | File Share | RulesLow RiskAIModerate Risk | 2026-09-10 seen 11× | View scan → |
| pub-d44e201c1f3e400586cb81b0f2d48f61.r2.dev Credentials | RulesMaliciousAIHigh Risk | 2026-09-10 | View scan → |
| newww-sooty.vercel.app My Files - OneDrive | RulesHigh RiskAIHigh Risk | 2026-09-10 seen 2× | View scan → |
| onedrive-58x0.vercel.app OneDrive Style UI | RulesHigh RiskAIHigh Risk Credential Phishing on disposable hosting | 2026-09-10 seen 2× | View scan → |
| security-server-landing-page--vinjuntrucking.replit.app Sign in to your account | RulesHigh RiskAIHigh Risk | 2026-09-08 | View scan → |
| eloquent-fenglisu-517598.netlify.app Sign in to your account | RulesMaliciousAIHigh Risk | 2026-09-08 seen 2× | View scan → |
| ubiquitous-barnacles.vercel.app Sign in to your account | RulesHigh RiskAIHigh Risk | 2026-09-08 seen 2× | View scan → |
| microsoft-alpha.vercel.app Document | RulesMaliciousAIHigh Risk | 2026-09-06 | View scan → |
| updateserv-owa.vercel.app Outlook | RulesHigh RiskAIConfirmed Scam Credential Phishing on disposable hosting | 2026-09-05 | View scan → |
| swanvalleycoop.vercel.app Microsoft User shared “Business Project Proposal and Payment Supporting Document - August 2026.PDF” with you | RulesHigh RiskAIHigh Risk | 2026-09-04 seen 4× | View scan → |
| albertasportshall.vercel.app Microsoft User shared “Business Project Proposal and Payment Supporting Document - August 2026.PDF” with you | RulesHigh RiskAIHigh Risk | 2026-09-04 seen 3× | View scan → |
| havredufaubourg.vercel.app Microsoft User shared “Business Project Proposal and Payment Supporting Document - August 2026.PDF” with you | RulesHigh RiskAIHigh Risk | 2026-09-04 seen 4× | View scan → |
| php-web-server--antijudas2323.replit.app Iniciar | RulesMedium RiskAIModerate Risk | 2026-09-04 seen 2× | View scan → |
| gbagobar.vercel.app Outlook | RulesHigh RiskAIHigh Risk Credential Phishing on disposable hosting | 2026-09-04 seen 2× | View scan → |
| onedrive-2-zeta.vercel.app OneDrive Style UI | RulesHigh RiskAIHigh Risk Credential Phishing on disposable hosting | 2026-09-03 seen 2× | View scan → |
| loginmicrosoft.fwh.is Iniciar sesión en tu cuenta Microsoft | RulesLow RiskAIConfirmed Scam | 2026-09-03 | View scan → |
| grupoimpaktu.ao Access your file - OneDrive | RulesLow RiskAIConfirmed Scam | 2026-09-02 | View scan → |
| cancelacionoutlook-two.vercel.app Home | RulesMaliciousAIHigh Risk Microsoft Credential Phishing on cloud hosting | 2026-08-31 seen 2× | View scan → |
| login.authorised-support.com Sign in to your Microsoft account | RulesHigh RiskAIHigh Risk | 2026-08-30 seen 2× | View scan → |
| core1-iad.ns-cluster-prod.click Manager Portal | RulesLow RiskAIHigh Risk | 2026-08-30 | View scan → |
| php-web-server--mike9304.replit.app Iniciar sesión en tu cuenta Microsoft | RulesHigh RiskAIHigh Risk Credential Phishing on disposable hosting | 2026-08-29 | View scan → |
| cobig99.github.io Sign in Office365 Excel | RulesHigh RiskAIHigh Risk Credential Phishing on disposable hosting | 2026-08-29 | View scan → |
| php-web-server--unittec.replit.app Iniciar sesión en tu cuenta Microsoft | RulesHigh RiskAIHigh Risk Credential Phishing on disposable hosting | 2026-08-28 seen 5× | View scan → |
| barracudaservicesinc.vercel.app Microsoft User shared “Business Project Proposal and Payment Supporting Document - Sept. 2026.PDF” with you | RulesLow RiskAIHigh Risk | 2026-08-28 seen 2× | View scan → |
| canpoly.vercel.app Microsoft User shared “Business Project Proposal and Payment Supporting Document - Sept. 2026.PDF” with you | RulesLow RiskAIHigh Risk | 2026-08-28 seen 2× | View scan → |
| brantal.vercel.app Microsoft User shared “Business Project Proposal and Payment Supporting Document - Sept. 2026.PDF” with you | RulesLow RiskAIHigh Risk | 2026-08-28 seen 2× | View scan → |
| genpro-portail.vercel.app Microsoft User shared “Business Project Proposal and Payment Supporting Document - Sept. 2026.PDF” with you | RulesLow RiskAIHigh Risk | 2026-08-28 seen 2× | View scan → |
| hannoush.vercel.app Microsoft User shared “Business Project Proposal and Payment Supporting Document - Sept. 2026.PDF” with you | RulesLow RiskAIHigh Risk | 2026-08-28 seen 3× | View scan → |
| campoequipment.vercel.app Microsoft User shared “Business Project Proposal and Payment Supporting Document - Sept. 2026.PDF” with you | RulesLow RiskAIHigh Risk | 2026-08-28 seen 3× | View scan → |
| orin-portail.vercel.app Microsoft User shared “Business Project Proposal and Payment Supporting Document - Sept. 2026.PDF” with you | RulesLow RiskAIHigh Risk | 2026-08-28 seen 2× | View scan → |
| nufloorspenticton.vercel.app Microsoft User shared “Business Project Proposal and Payment Supporting Document - Sept. 2026.PDF” with you | RulesLow RiskAInot assessed | 2026-08-28 seen 2× | View scan → |
| shewenterprise.vercel.app Microsoft User shared “Business Project Proposal and Payment Supporting Document - Sept. 2026.PDF” with you | RulesLow RiskAIHigh Risk | 2026-08-28 seen 2× | View scan → |
| seniorscouncil.vercel.app Microsoft User shared “Business Project Proposal and Payment Supporting Document - Sept. 2026.PDF” with you | RulesLow RiskAInot assessed | 2026-08-28 seen 2× | View scan → |
| outlookmailwww.webcindario.com Iniciar sesión en tu cuenta Microsoft | RulesMaliciousAIConfirmed Scam | 2026-08-28 seen 6× | View scan → |
| sdfcvtgfhwewre.netlify.app Iniciar sesión en tu cuenta de Microsoft | RulesLow RiskAIHigh Risk | 2026-08-28 | View scan → |
| gjgyrtybvccg.netlify.app Iniciar sesión en tu cuenta de Microsoft | RulesLow RiskAIHigh Risk | 2026-08-28 | View scan → |
| accessvalidoutlo.netlify.app Iniciar sesión - Microsoft | RulesMaliciousAIHigh Risk | 2026-08-28 | View scan → |
| pub-de59803496c8489585895b6917266e7c.r2.dev Files | OneDrive | RulesHigh RiskAIHigh Risk Credential Phishing on object storage | 2026-08-27 seen 10× | View scan → |
| login-microsoft-online.no-reply-highflyer-awardco-com.workers.dev Sign in to your account | RulesMaliciousAInot assessed Microsoft 365 Credential Phishing | 2026-08-27 | View scan → |
| kmhujj.pages.dev Your request has been blocked. This could be due to several reasons. | RulesLow RiskAIHigh Risk | 2026-08-26 | View scan → |
| check0preventivo.webcindario.com Iniciar sesión - Microsoft | RulesMaliciousAIConfirmed Scam | 2026-08-26 seen 3× | View scan → |
| webverifitl.webcindario.com Iniciar sesión en tu cuenta Microsoft | RulesMaliciousAIHigh Risk | 2026-08-26 seen 6× | View scan → |
| mikegm19.github.io Sign in to your Microsoft account | RulesMaliciousAIConfirmed Scam | 2026-08-25 | View scan → |
| security-server-page--wisdomenweliku.replit.app Sign in to your account | RulesHigh RiskAIHigh Risk Credential Phishing on disposable hosting | 2026-08-24 | View scan → |
| secure-site-manager--type4life.replit.app Sign in to your account | RulesHigh RiskAIHigh Risk Credential Phishing on disposable hosting | 2026-08-24 | View scan → |
| security-server-page--hollywoodcoache.replit.app Sign in to your account | RulesHigh RiskAIHigh Risk Credential Phishing on disposable hosting | 2026-08-24 | View scan → |
| secure-static-site--dgtoney.replit.app Sign in to your account | RulesMaliciousAIHigh Risk | 2026-08-24 | View scan → |
| ritendragour.github.io Microsoft login page | RulesLow RiskAIModerate Risk | 2026-08-24 | View scan → |
| kapilrathod1.github.io Microsoft official website | RulesLow RiskAIModerate Risk | 2026-08-24 | View scan → |
| secure-page-editor--isaniecka.replit.app Sign in to your account | RulesHigh RiskAIHigh Risk Credential Phishing on disposable hosting | 2026-08-24 | View scan → |
| secure-site-maker--castlevaleservi.replit.app Sign in to your account | RulesHigh RiskAIHigh Risk Credential Phishing on disposable hosting | 2026-08-24 | View scan → |
| secure-page-builder--blaizingsure.replit.app Sign in to your account | RulesMaliciousAIConfirmed Scam | 2026-08-24 | View scan → |
| secure-server-index--dolangroupllc.replit.app Sign in to your account | RulesMaliciousAIHigh Risk | 2026-08-24 | View scan → |
| secure-site-manager--natalypaint75.replit.app Sign in to your account | RulesHigh RiskAIHigh Risk | 2026-08-23 seen 2× | View scan → |
| security-page-builder--omnia6.replit.app Security verification - Microsoft account | RulesHigh RiskAIHigh Risk Possible Microsoft Phishing on cloud hosting | 2026-08-23 | View scan → |
| security-server-landing-page--tketterhh.replit.app Security verification - Microsoft account | RulesHigh RiskAIHigh Risk Possible Microsoft Phishing on cloud hosting | 2026-08-23 | View scan → |
| secure-index-page--pugetsoundsurll.replit.app Security verification - Microsoft account | RulesHigh RiskAIHigh Risk Credential Phishing on disposable hosting | 2026-08-23 | View scan → |
| secure-page-builder--g-swalley.replit.app Sign in to your account | RulesMaliciousAIHigh Risk | 2026-08-23 | View scan → |
| simple-security-page--aphroditesaless.replit.app Security verification - Microsoft account | RulesHigh RiskAIHigh Risk Credential Phishing on disposable hosting | 2026-08-22 | View scan → |
| server-indexer--themtnman.replit.app Security verification - Microsoft account | RulesHigh RiskAIHigh Risk Credential Phishing on disposable hosting | 2026-08-22 | View scan → |
| secure-page-creator--ccnew.replit.app Security verification - Microsoft account | RulesHigh RiskAIHigh Risk Credential Phishing on disposable hosting | 2026-08-22 | View scan → |
| server-docs--grangevalleyarn.replit.app Security verification - Microsoft account | RulesMaliciousAIHigh Risk | 2026-08-22 | View scan → |
| servernotice645.wixsite.com HOME | Onenote | RulesMaliciousAIConfirmed Scam Microsoft Credential Phishing on cloud hosting | 2026-08-22 | View scan → |
| evelyne10.wixsite.com Se connecter à son compte Microsoft | BUSINESS NAME | RulesMaliciousAIConfirmed Scam Microsoft Credential Phishing on cloud hosting | 2026-08-22 | View scan → |
| minecraftpe.games Tải Minecraft PE 26.1 / 1.26.1 APK, Tiếng Việt, Miễn Phí | RulesLow RiskAIHigh Risk | 2026-08-21 | View scan → |
| sidel-agility4-0.appspot.com Sign in to your account | RulesMaliciousAIHigh Risk Microsoft 365 Credential Phishing | 2026-08-21 | View scan → |
| 35g.cc3.mytemp.website Confirm your credentials | RulesLow RiskAIHigh Risk | 2026-08-21 | View scan → |
| etytu.pages.dev Your request has been blocked. This could be due to several reasons. | RulesLow RiskAIHigh Risk | 2026-08-21 | View scan → |
| php-web-server--franz1095.replit.app Iniciar sesión en tu cuenta Microsoft | RulesMaliciousAIHigh Risk | 2026-08-21 | View scan → |
| office365-reactivation-email0.iceiy.com Iniciar sesión en tu cuenta Microsoft | RulesLow RiskAIHigh Risk | 2026-08-21 | View scan → |
| aouth.rnicosoft-uid.surge.sh Microsoft | Login | RulesMaliciousAIHigh Risk | 2026-08-20 | View scan → |
| originalmeeting.pages.dev Microsoft SharePoint | Sign in to download | RulesHigh RiskAIHigh Risk | 2026-08-20 seen 4× | View scan → |
| security-server-page--aj5582185.replit.app Security verification - Microsoft account | RulesMaliciousAIHigh Risk | 2026-08-19 | View scan → |
| mari-tim.pages.dev SharePoint – Dokument freigegeben | RulesLow RiskAIModerate Risk | 2026-08-18 | View scan → |
| office365order.github.io Sign in to your Microsoft account | RulesMaliciousAInot assessed | 2026-08-17 seen 2× | View scan → |
| simple-security-page--weekkiol.replit.app Security verification - Microsoft account | RulesHigh RiskAIConfirmed Scam Credential Phishing on disposable hosting | 2026-08-17 seen 2× | View scan → |
| server-static-page--optimumcarasls2.replit.app Security verification - Microsoft account | RulesMaliciousAIConfirmed Scam | 2026-08-17 seen 2× | View scan → |
| secure-static-page--andrewkhan89.replit.app Security verification - Microsoft account | RulesHigh RiskAIConfirmed Scam Credential Phishing on disposable hosting | 2026-08-17 seen 5× | View scan → |
| protectedcloud-message.merlekw.workers.dev Microsoft Verification | RulesMedium RiskAIHigh Risk | 2026-08-16 | View scan → |
| test1.sougoucloud.workers.dev Suspected Phishing | Cloudflare | RulesMaliciousAIConfirmed Scam | 2026-08-16 seen 2× | View scan → |
| variousoffers.xyz Access your file - OneDrive | RulesLow RiskAIModerate Risk | 2026-08-15 | View scan → |
| jimcooks211.github.io Microsoft Personal Account | RulesHigh RiskAIHigh Risk Credential Phishing on disposable hosting | 2026-08-13 seen 8× | View scan → |
| open-portal-8hjs.p-srkphq9l.workers.dev SharePoint - Shared Document | RulesMedium RiskAIHigh Risk | 2026-08-12 | View scan → |
| learn.ucem.ac.uk Log in to the site | My VLE | RulesLow RiskAIModerate Risk | 2026-08-10 | View scan → |
| qualitybh.art.br Share Point Online | RulesMaliciousAIConfirmed Scam | 2026-08-09 seen 3× | View scan → |
| outconfiadd.webcindario.com Iniciar sesión en tu cuenta Microsoft | RulesMaliciousAIHigh Risk | 2026-08-07 seen 6× | View scan → |
| busy-apricot-rh2zba1f.edgeone.dev Sign in to your account | RulesHigh RiskAIConfirmed Scam Possible Microsoft Phishing on cloud hosting | 2026-08-07 | View scan → |
| sfahad-developer.github.io Microsoft | RulesLow RiskAIModerate Risk | 2026-08-06 | View scan → |
| secure-server-page--microsoftteam0.replit.app Sign in to your Microsoft account | RulesHigh RiskAIConfirmed Scam Possible Google Phishing on cloud hosting | 2026-08-05 seen 3× | View scan → |
| security-server-docs--govmentdded.replit.app Sign in to Outlook | RulesMaliciousAIConfirmed Scam | 2026-08-05 seen 2× | View scan → |
24 further hosts are not listed: the Microsoft name appeared on them, but both our rule engine and our AI analysis rated the page harmless, so we do not publish them as impersonation.