Microsoft phishing & impersonation
Tech & Cloudoutlook.com
460
Sites impersonating it
189
New in the last 30 days
0
Campaigns
2026-11-14
Last detected
Official domains
outlook.comwindows.nets-microsoft.commicrosoftonline.usmcas.mssharepoint.commicrosoftonline.comoffice.commicrosoftmetrics.comlive.commicrosoftonline.cnmcas-gov.usaka.msmicrosoft365.comstatic.microsoftcloud.microsoftmicrosoftonline-p.comusgovcloud.microsoftmicrosoft.usmsauth.netmsftauth.netmcas-gov.msazure.comoffice365.commicrosoft.commsn.com
A match on a host outside these domains is recorded as impersonation. We look for the brand name in the address, page title and screenshot, its logo on a non-official site, and our AI analysis naming it.
Also known as
outlookonedrivehotmailoffice 365sharepointmicrosoft.comlive.comwindows securitywindows defendermicrosoft excelmicrosoft outlook / office 365microsoftonline.comoutlook / office 365owaoutlook web appmicrosoft outlook web app (owa)windows update
Sites impersonating Microsoft
50 of 460 sites · newest first · repeat scans of a site are grouped
37 lower-risk copies are not shown: sites that use the Microsoft name or design, but that neither our rule engine nor our AI analysis rates high risk (for example harmless copies of the brand's own pages). Show them
RulesMaliciousAIConfirmed Scam“Microsoft” in page or screenshot textScreenshot text
test.greigmarshall6suze6474. workers. dev 2026-11-01RulesLow RiskAIHigh RiskMicrosoft logo on a non-official hostLogo / favicon
RulesLow RiskAIHigh RiskIdentified as Microsoft by our AI analysisAI analysis
RulesHigh RiskAIHigh RiskKnown Kit: Self-hosted Turnstile gate kit — five-dot "Just a moment....." cfForm gate (hunting-rule content anchor) (turnstile-gate-kit-202609)Identified as Microsoft by our AI analysisAI analysis
RulesMaliciousAIHigh Risk“Microsoft” in the page titleAI analysisPage text
fls-a2ad49dc-e995-4e79-b405-74a8b7762642.laravel. cloud Security verification - Microsoft account2026-10-31RulesMedium RiskAIConfirmed Scam“Microsoft” in the page titlePage text
RulesMaliciousAIConfirmed Scam“Microsoft” in the page titlePage text
pub-c4e3e67a647a4a2db302d5e06b152e21.r2. dev 2026-10-31 · seen 2×RulesHigh RiskAIHigh RiskKnown Kit: Self-hosted Turnstile gate kit — "Verifying site connection..." sc.php loader (hunting-rule content anchor) (turnstile-gate-kit-202609)Identified as Microsoft by our AI analysisAI analysis
RulesMaliciousAIConfirmed Scam“Microsoft” in the page titlePage text
RulesHigh RiskAIConfirmed ScamCredential Phishing on disposable hosting“Microsoft” in page or screenshot textScreenshot text
RulesHigh RiskAIHigh RiskPossible Microsoft 365 Phishing“Microsoft” in the page titleAI analysis
RulesMaliciousAIConfirmed Scam“Microsoft” in the page titlePage text
RulesHigh RiskAIConfirmed Scam“Microsoft” in page or screenshot textScreenshot text
RulesLow RiskAIHigh Risk“Microsoft” in the page titleAI analysis
RulesLow RiskAIConfirmed Scam“Microsoft” in the page titleIdentical page
RulesLow RiskAIHigh Risk“Microsoft” in the page titleAI analysisPage text
RulesMaliciousAIConfirmed Scam“Microsoft” in the page titlePage text
RulesMaliciousAIHigh RiskIdentified as Microsoft by our AI analysisAI analysis
RulesMaliciousAIConfirmed Scam“Microsoft” in page or screenshot textScreenshot text
RulesHigh RiskAIConfirmed Scam“Microsoft” in the page titlePage text
RulesHigh RiskAIConfirmed ScamDevice-code phishing“Microsoft” in the page titleScreenshot text
RulesMaliciousAIConfirmed Scamhunting rule: Okta_Phishing_Kit_Telegram_Exfil - stealer“Microsoft” in page or screenshot textScreenshot text
RulesHigh RiskAIConfirmed Scam“Microsoft” in the page titlePage text
RulesLow RiskAIHigh Risk“Microsoft” in the page titleAI analysis
RulesLow RiskAIHigh RiskIdentified as Microsoft by our AI analysisAI analysis
RulesLow RiskAIHigh RiskIdentified as Microsoft by our AI analysisAI analysis
RulesLow RiskAIHigh RiskIdentified as Microsoft by our AI analysisAI analysis
RulesMaliciousAIConfirmed Scam“Microsoft” in the page titleScreenshot textPage text
RulesHigh RiskAIConfirmed ScamIDS: ET PHISHING Possible OWA Mail Phishing Landing - Title over non SSL“Microsoft” in the page titlePage text
RulesMaliciousAIHigh Risk“Microsoft” in the hostnameAI analysis
RulesHigh RiskAIHigh RiskIdentified as Microsoft by our AI analysisAI analysis
RulesMaliciousAIHigh Risk“Microsoft” in the hostnameAI analysis
RulesHigh RiskAIHigh RiskIdentified as Microsoft by our AI analysisAI analysis
RulesHigh RiskAIConfirmed ScamIDS: ET PHISHING Suspicious HTML Decimal Obfuscated Title - Possible Phishing Landing Apr 19 2017“Microsoft” in page or screenshot textScreenshot text
RulesMaliciousAIConfirmed ScamMicrosoft Phishing, cloaked from scanners“Microsoft” in the page titlePage text
RulesHigh RiskAIConfirmed ScamCredential Phishing on disposable hosting“Microsoft” in the hostnamePage text
RulesMedium RiskAIHigh RiskIdentified as Microsoft by our AI analysisAI analysis- RulesHigh RiskAIHigh RiskKnown Kit: Self-hosted Turnstile gate kit — "Verifying site connection..." sc.php loader (hunting-rule content anchor) (turnstile-gate-kit-202609)Identified as Microsoft by our AI analysisAI analysis
RulesHigh RiskAIHigh RiskIdentified as Microsoft by our AI analysisAI analysis
RulesLow RiskAIHigh RiskIdentified as Microsoft by our AI analysisAI analysis
RulesHigh RiskAIConfirmed ScamCredential Phishing on disposable hosting“Microsoft” in the hostnameScreenshot text
RulesHigh RiskAIHigh RiskPage sends data to a Telegram bot from disposable hostingIdentified as Microsoft by our AI analysisAI analysis
RulesMaliciousAIConfirmed Scam“Microsoft” in the hostnameScreenshot text
RulesMaliciousAIConfirmed Scam“Microsoft” in page or screenshot textScreenshot text
RulesHigh RiskAIConfirmed Scam“Microsoft” in page or screenshot textScreenshot text
RulesMaliciousAIConfirmed ScamMicrosoft 365 Credential Phishing“Microsoft” in page or screenshot textAI analysisScreenshot text
RulesHigh RiskAIConfirmed ScamCredential Phishing on disposable hosting“Microsoft” in the hostnameScreenshot text
RulesLow RiskAIHigh Risk“Microsoft” in the page titleAI analysisIdentical page
RulesHigh RiskAIConfirmed ScamCredential Phishing on disposable hosting“Microsoft” in page or screenshot textScreenshot text
RulesMaliciousAIConfirmed Scam“Microsoft” in the page titleScreenshot text
101 further sites are not listed at all: the Microsoft name appeared on them, but we judged them not to be impersonation (both our rule engine and our AI analysis rated the page harmless, the page only mentions the brand, or it is a copy of another public website).