Microsoft phishing & impersonation
Tech & Cloudoutlook.com
407
Impersonation sightings
201
Distinct hosts
2026-09-22
Last detected
25
Official domains
ScanMalware watches every scanned site for signs it is impersonating Microsoft — the brand name in the page title or screenshot text, the brand's logo/favicon on a non-official host, and our AI analysis naming the brand. A match on a host outside Microsoft's official domains is recorded below.
Official domains
outlook.comwindows.nets-microsoft.commicrosoftonline.usmcas.mssharepoint.commicrosoftonline.comoffice.commicrosoftmetrics.comlive.commicrosoftonline.cnmcas-gov.usaka.msmicrosoft365.comstatic.microsoftcloud.microsoftmicrosoftonline-p.comusgovcloud.microsoftmicrosoft.usmsauth.netmsftauth.netmcas-gov.msazure.comoffice365.commicrosoft.com
Also known as
outlookonedrivehotmailoffice 365sharepointmicrosoft.comlive.com
Sites impersonating Microsoft
58 of 201 hosts · repeat scans of the same host are grouped
| Site | Verdicts | Last seen | Actions |
|---|---|---|---|
| server-docs--emmamarshall910.replit.app Security verification - Microsoft account | RulesMaliciousAIHigh Risk | 2026-08-05 | View scan → |
| access-form-82h6.p-srkphq9l.workers.dev SharePoint - Shared Document | RulesMaliciousAIHigh Risk | 2026-08-05 | View scan → |
| auth0-ms-doc.netlify.app Sign in to your Microsoft account | RulesMaliciousAIHigh Risk | 2026-08-03 | View scan → |
| php-web-server--mexicoeducation.replit.app Iniciar sesión en tu cuenta Microsoft | RulesMaliciousAIHigh Risk | 2026-08-02 seen 2× | View scan → |
| rhsmithumdedu.netlify.app Sign in to your Microsoft account | RulesMaliciousAIHigh Risk | 2026-08-02 | View scan → |
| compliance.it-communications.workers.dev Sign in to your account | RulesMaliciousAIHigh Risk Microsoft 365 Credential Phishing | 2026-08-02 | View scan → |
| bs-deliver-e817.61d8f0e6ac62c139abd08ba5.workers.dev Microsoft SharePoint Online - Verified | RulesHigh RiskAIHigh Risk | 2026-08-01 | View scan → |
| www.cytheraonline.com Microsoft - Cythera Device Management | RulesMaliciousAIConfirmed Scam | 2026-08-01 | View scan → |
| cytheraonline.com Microsoft - Cythera Device Management | RulesMaliciousAIConfirmed Scam | 2026-08-01 | View scan → |
| 2fe35958.mscfildoc.pages.dev | RulesHigh RiskAIConfirmed Scam IDS: ET PHISHING Generic Multibrand Ajax XHR CredPost Phishing Landing +1 more | 2026-07-30 seen 2× | View scan → |
| secure-page-editor--createforlife.replit.app Enter your password | RulesMaliciousAIHigh Risk | 2026-07-29 seen 2× | View scan → |
| itwosite.se-mtwo.cloud Login: PMImp@ct | RulesLow RiskAIHigh Risk | 2026-07-27 | View scan → |
| login-murex-sigma.vercel.app Sign in to your Microsoft account | RulesMaliciousAIHigh Risk | 2026-07-27 | View scan → |
| inicioinusual365.webcindario.com Iniciar sesión en tu cuenta Microsoft | RulesMaliciousAIConfirmed Scam | 2026-07-25 seen 3× | View scan → |
| inicioinusual003.webcindario.com Iniciar sesión en tu cuenta Microsoft | RulesMaliciousAIHigh Risk | 2026-07-25 seen 3× | View scan → |
| verifasoli.webcindario.com Iniciar sesión en tu cuenta Microsoft | RulesMaliciousAIConfirmed Scam | 2026-07-24 seen 3× | View scan → |
| htyd.vercel.app Sign in to your account | RulesHigh RiskAIHigh Risk Possible Microsoft 365 Phishing | 2026-07-24 seen 22× | View scan → |
| xwsjl-jjhs-t5dl.p-436szmjv.workers.dev Microsoft User shared a document with you | RulesMedium RiskAIHigh Risk | 2026-07-23 | View scan → |
| secure-page-builder--joanpressy.replit.app Security verification - Microsoft account | RulesLow RiskAIHigh Risk | 2026-07-23 seen 3× | View scan → |
| sharepointonedriveaaqkada0yja1yji5l.jamejampaintingservice.com.au Microsoft 365 - Protected Content Access | RulesLow RiskAIModerate Risk | 2026-07-23 | View scan → |
| secure-static-page--clarewemyss.replit.app Sign in to your account | RulesMaliciousAIHigh Risk | 2026-07-22 seen 2× | View scan → |
| php-web-server--unitech2factor.replit.app Iniciar sesión en tu cuenta Microsoft | RulesMaliciousAIHigh Risk | 2026-07-22 | View scan → |
| secure-index-edit--mlcrawford.replit.app Sign in to Outlook | RulesMaliciousAIHigh Risk | 2026-07-22 seen 2× | View scan → |
| secure-page-editor--ruckerrs54.replit.app Sign in to Outlook | RulesHigh RiskAIHigh Risk Possible Microsoft Phishing on cloud hosting | 2026-07-21 seen 3× | View scan → |
| buzonincio365ltg.iceiy.com Iniciar sesión en tu cuenta Microsoft | RulesLow RiskAIHigh Risk | 2026-07-21 | View scan → |
| mabosi-otoku.com SharePoint Online | RulesMaliciousAIConfirmed Scam | 2026-07-20 seen 3× | View scan → |
| vishalls24.github.io Microsoft Clone | RulesMaliciousAIHigh Risk | 2026-07-20 | View scan → |
| server-index-page--gutpunchedac.replit.app Sign in to Outlook | RulesHigh RiskAIHigh Risk Possible Microsoft Phishing on cloud hosting | 2026-07-18 seen 2× | View scan → |
| server-docs--aero-hold.replit.app Sign in to your account | RulesMaliciousAIHigh Risk | 2026-07-18 | View scan → |
| onedrive-cdn.res.taibai.icu Sign in to your account | RulesMaliciousAIConfirmed Scam Microsoft 365 Credential Phishing | 2026-07-18 seen 2× | View scan → |
| mailprocessing.netlify.app Outlook Web App | RulesMaliciousAIConfirmed Scam | 2026-07-18 seen 2× | View scan → |
| php-web-server--enlinea0212.replit.app Iniciar sesión en tu cuenta Microsoft | RulesMaliciousAIHigh Risk | 2026-07-18 | View scan → |
| z3hgtr.pages.dev Your request has been blocked. This could be due to several reasons. | RulesLow RiskAIHigh Risk | 2026-07-17 | View scan → |
| security-docs-sign--microsoft-login.replit.app Enter your password | RulesMaliciousAIConfirmed Scam | 2026-07-17 | View scan → |
| secure-page-builder--lucasas22.replit.app Sign in to your account | RulesHigh RiskAIHigh Risk Possible Microsoft Phishing on cloud hosting | 2026-07-16 seen 3× | View scan → |
| security-indexer--adamlee160686.replit.app Sign in to your account | RulesMaliciousAIHigh Risk | 2026-07-16 seen 3× | View scan → |
| secure-static-site--maddykennard.replit.app Sign in to your account | RulesHigh RiskAIHigh Risk Possible Microsoft Phishing on cloud hosting | 2026-07-16 seen 3× | View scan → |
| secure-site-editor--osinachifresh55.replit.app Sign in to your account | RulesMaliciousAIConfirmed Scam | 2026-07-16 seen 2× | View scan → |
| juraq-tkyr-saep.c-m4uro6ql.workers.dev Microsoft User shared a document with you | RulesMedium RiskAIHigh Risk | 2026-07-16 | View scan → |
| secure-page-builder--scsantiques.replit.app Sign in to your account | RulesHigh RiskAIHigh Risk Possible Microsoft Phishing on cloud hosting | 2026-07-15 | View scan → |
| server-security-page--redarazoukitv.replit.app Sign in to your account | RulesMaliciousAIHigh Risk | 2026-07-14 seen 2× | View scan → |
| z10mjhy.pages.dev Your request has been blocked. This could be due to several reasons. | RulesLow RiskAIHigh Risk | 2026-07-14 | View scan → |
| pub-1e1e5882cdef4467b149e1bfab4eb3e6.r2.dev Microsoft Sign-in Redirect | RulesLow RiskAIModerate Risk | 2026-07-14 seen 2× | View scan → |
| debak.ciamlogin.com Sign in to your account | RulesMaliciousAILow Risk Microsoft 365 Credential Phishing | 2026-07-14 seen 2× | View scan → |
| unitechvn.com.vn Sign in to your account | RulesHigh RiskAIHigh Risk Possible Microsoft 365 Phishing | 2026-07-14 | View scan → |
| pub-e66b4b88b1d24aeeaf754f0ecee122c7.r2.dev Microsoft Sign-in Redirect | RulesMaliciousAIHigh Risk | 2026-07-13 seen 2× | View scan → |
| adityab9990.github.io Microsoft Store | RulesLow RiskAIModerate Risk | 2026-07-13 | View scan → |
| 861ytfjok.vercel.app fgjvhmbjh | RulesMaliciousAIConfirmed Scam | 2026-07-13 seen 2× | View scan → |
| ayushcoder894.github.io Sign in to your Microsoft account | RulesMaliciousAIConfirmed Scam | 2026-07-12 seen 2× | View scan → |
| onlinelogin-link.com Sign in - Microsoft account | RulesMaliciousAIHigh Risk | 2026-07-11 | View scan → |
| office.soundsightonlines.com Sign in to your account | RulesMaliciousAIHigh Risk Microsoft 365 Credential Phishing | 2026-07-11 | View scan → |
| lb.frdzqh6.club Citrix Cloud | RulesMedium RiskAILow Risk | 2026-07-10 | View scan → |
| pub-a05052f21b2c4d8da177bc97c77fa992.r2.dev Microsoft Sign-in Redirect | RulesMedium RiskAILow Risk | 2026-07-10 | View scan → |
| atozsurgcialhouse.store Furniture – atozsurgcialhouse.store | RulesMedium RiskAIHigh Risk | 2026-07-09 seen 4× | View scan → |
| pub-2a92347ea03e4260a6bb3d381381c037.r2.dev Microsoft Sign-in Redirect | RulesMaliciousAIHigh Risk | 2026-07-09 seen 2× | View scan → |
| proztecindia.com SharePoint Online | RulesMaliciousAIHigh Risk | 2026-07-07 seen 2× | View scan → |
| fancy-cedar-526.allcompredirectportalshare.workers.dev Microsoft Verification | RulesMedium RiskAIModerate Risk | 2026-07-02 | View scan → |
| order-request-a-654532.vercel.app My Files - Sharepoint | RulesMaliciousAIHigh Risk | 2026-07-02 | View scan → |
31 further hosts are not listed: the Microsoft name appeared on them, but both our rule engine and our AI analysis rated the page harmless, so we do not publish them as impersonation.