Microsoft phishing & impersonation
Tech & Cloudoutlook.com
460
Sites impersonating it
189
New in the last 30 days
0
Campaigns
2026-11-14
Last detected
Official domains
outlook.comwindows.nets-microsoft.commicrosoftonline.usmcas.mssharepoint.commicrosoftonline.comoffice.commicrosoftmetrics.comlive.commicrosoftonline.cnmcas-gov.usaka.msmicrosoft365.comstatic.microsoftcloud.microsoftmicrosoftonline-p.comusgovcloud.microsoftmicrosoft.usmsauth.netmsftauth.netmcas-gov.msazure.comoffice365.commicrosoft.commsn.com
A match on a host outside these domains is recorded as impersonation. We look for the brand name in the address, page title and screenshot, its logo on a non-official site, and our AI analysis naming it.
Also known as
outlookonedrivehotmailoffice 365sharepointmicrosoft.comlive.comwindows securitywindows defendermicrosoft excelmicrosoft outlook / office 365microsoftonline.comoutlook / office 365owaoutlook web appmicrosoft outlook web app (owa)windows update
Sites impersonating Microsoft
50 of 460 sites · newest first · repeat scans of a site are grouped
37 lower-risk copies are not shown: sites that use the Microsoft name or design, but that neither our rule engine nor our AI analysis rates high risk (for example harmless copies of the brand's own pages). Show them
RulesMaliciousAIConfirmed Scam“Microsoft” in the hostnamePage text
RulesMaliciousAIConfirmed Scam“Microsoft” in the page titlePage text
RulesHigh RiskAIHigh RiskIDS: ET PHISHING Phishing Landing via Weebly.com M1 2016-02-02 +1 moreIdentified as Microsoft by our AI analysisAI analysis
RulesHigh RiskAIConfirmed ScamPossible Microsoft Phishing on cloud hosting“Microsoft” in page or screenshot textScreenshot text
RulesMaliciousAIConfirmed Scam“Microsoft” in the page titleScreenshot text
jsqnjzyg.login. microsoftonline-billing-verification-secured-help. 161-35-102-243. cpanel. site Organization Not Found - Project.co2026-10-22RulesLow RiskAIHigh Risk“Microsoft” in the hostnameAI analysis
RulesMedium RiskAIHigh Risk“Microsoft” in the page titleAI analysisPage text
RulesMaliciousAIConfirmed Scam“Microsoft” in the page titleScreenshot textPage text
RulesLow RiskAIHigh RiskIdentified as Microsoft by our AI analysisAI analysis
RulesMaliciousAIConfirmed Scam“Microsoft” in the page titlePage text
RulesHigh RiskAIHigh Risk“Microsoft” in the hostnameAI analysis
RulesLow RiskAIConfirmed Scam“Microsoft” in the hostnameScreenshot text
RulesLow RiskAIConfirmed Scam“Microsoft” in page or screenshot textScreenshot text
RulesMaliciousAIConfirmed Scam“Microsoft” in the hostnamePage text
RulesMaliciousAIConfirmed ScamMicrosoft logo on a non-official hostLogo / favicon
RulesHigh RiskAIHigh RiskDevice-code phishing“Microsoft” in the page titleScreenshot text
RulesHigh RiskAIConfirmed Scam“Microsoft” in the page titlePage text
RulesLow RiskAIConfirmed Scam“Microsoft” in the page titleAI analysisPage text
RulesHigh RiskAIHigh Risk“Microsoft” in the hostnameAI analysis- RulesLow RiskAIHigh RiskIdentified as Microsoft by our AI analysisAI analysis
RulesMaliciousAIConfirmed Scam“Microsoft” in the page titlePage text
RulesMaliciousAIConfirmed Scam“Microsoft” in the page titlePage text
RulesMaliciousAIConfirmed Scam“Microsoft” in the hostnameScreenshot text
RulesLow RiskAIConfirmed ScamMicrosoft logo on a non-official hostLogo / favicon
RulesLow RiskAIHigh Risk“Microsoft” in the page titleLogo / favicon
reactivar-microsoft-live.iceiy. com DNS Resolution Error - Domain Not Found, Or Domain not added to hosting account2026-10-17 · seen 5×RulesLow RiskAIHigh Risk“Microsoft” in the hostnameAI analysis
RulesMaliciousAIConfirmed Scam“Microsoft” in the page titlePage text
RulesHigh RiskAIConfirmed ScamCredential Phishing on disposable hosting“Microsoft” in page or screenshot textScreenshot text
RulesMaliciousAIConfirmed Scam“Microsoft” in the hostnameAI analysis
RulesMaliciousAIHigh Risk“Microsoft” in page or screenshot textAI analysisScreenshot text
RulesHigh RiskAIHigh RiskKnown Kit: Microsoft-styled 'Document Access Required' email gate — page content (doc-access-email-gate-2026-09)Identified as Microsoft by our AI analysisAI analysis
RulesMedium RiskAIHigh Risk“Microsoft” in the page titleAI analysisPage text
RulesLow RiskAIHigh Risk“Microsoft” in the page titleAI analysis
RulesMaliciousAIConfirmed ScamMicrosoft Credential Phishing on cloud hosting“Microsoft” in the page titlePage text
RulesMaliciousAIConfirmed ScamKnown Kit: OPTA / Nova Panel: device-code phishing pages that hand a Microsoft sign-in code to an operator panel (opta-nova-device-code-2026-11)“Microsoft” in the page titleAI analysis
RulesMaliciousAIConfirmed Scam“Microsoft” in the page titlePage text
RulesHigh RiskAIHigh RiskCredential Phishing on disposable hosting“Microsoft” in the page titlePage text
RulesHigh RiskAIConfirmed ScamPossible Microsoft Phishing on cloud hosting“Microsoft” in the page titlePage text- RulesHigh RiskAIHigh RiskKnown Kit: Self-hosted Turnstile gate kit — "Verifying site connection..." sc.php loader (hunting-rule content anchor) (turnstile-gate-kit-202609)Identified as Microsoft by our AI analysisAI analysis
RulesMaliciousAIConfirmed Scam“Microsoft” in page or screenshot textScreenshot text
RulesHigh RiskAIHigh RiskIDS: ET PHISHING Phishing Landing via Weebly.com M1 2016-02-02 +1 more“Microsoft” in the hostnameAI analysis
RulesMaliciousAIHigh RiskIdentified as Microsoft by our AI analysisAI analysis
RulesHigh RiskAIConfirmed ScamCredential Phishing on disposable hosting“Microsoft” in the page titlePage text
RulesMaliciousAIConfirmed ScamMicrosoft logo on a non-official hostLogo / faviconScreenshot text
RulesMaliciousAIConfirmed ScamAdobe Phishing, cloaked from scanners“Microsoft” in page or screenshot textScreenshot text
RulesHigh RiskAIConfirmed ScamPossible Microsoft Phishing on cloud hosting“Microsoft” in the hostnamePage text
RulesHigh RiskAIConfirmed ScamCredential Phishing on disposable hosting“Microsoft” in the hostnamePage text
RulesHigh RiskAIConfirmed Scam“Microsoft” in page or screenshot textScreenshot text- RulesHigh RiskAIHigh RiskKnown Kit: Self-hosted Turnstile gate kit — "Verifying site connection..." sc.php loader (hunting-rule content anchor) (turnstile-gate-kit-202609)Identified as Microsoft by our AI analysisAI analysis
site.com-microsoftonline-ondrive. ca 2026-10-10RulesMaliciousAIHigh Risk“Microsoft” in the hostnameAI analysis
101 further sites are not listed at all: the Microsoft name appeared on them, but we judged them not to be impersonation (both our rule engine and our AI analysis rated the page harmless, the page only mentions the brand, or it is a copy of another public website).