Microsoft phishing & impersonation
Tech & Cloudoutlook.com
460
Sites impersonating it
189
New in the last 30 days
0
Campaigns
2026-11-14
Last detected
Official domains
outlook.comwindows.nets-microsoft.commicrosoftonline.usmcas.mssharepoint.commicrosoftonline.comoffice.commicrosoftmetrics.comlive.commicrosoftonline.cnmcas-gov.usaka.msmicrosoft365.comstatic.microsoftcloud.microsoftmicrosoftonline-p.comusgovcloud.microsoftmicrosoft.usmsauth.netmsftauth.netmcas-gov.msazure.comoffice365.commicrosoft.commsn.com
A match on a host outside these domains is recorded as impersonation. We look for the brand name in the address, page title and screenshot, its logo on a non-official site, and our AI analysis naming it.
Also known as
outlookonedrivehotmailoffice 365sharepointmicrosoft.comlive.comwindows securitywindows defendermicrosoft excelmicrosoft outlook / office 365microsoftonline.comoutlook / office 365owaoutlook web appmicrosoft outlook web app (owa)windows update
Sites impersonating Microsoft
50 of 460 sites · newest first · repeat scans of a site are grouped
37 lower-risk copies are not shown: sites that use the Microsoft name or design, but that neither our rule engine nor our AI analysis rates high risk (for example harmless copies of the brand's own pages). Show them
pub-6d805fed521749fbba49267aba5ebb7d.r2. dev 2026-11-10 · seen 6×RulesLow RiskAIHigh RiskIdentified as Microsoft by our AI analysisAI analysis
RulesMedium RiskAIHigh Risk“Microsoft” in the page titleAI analysisPage text
RulesMaliciousAIConfirmed Scam“Microsoft” in the page titlePage text
RulesMedium RiskAIHigh RiskMicrosoft logo on a non-official hostAI analysisLogo / favicon
RulesHigh RiskAIHigh Risk“Microsoft” in the hostnameAI analysis
RulesHigh RiskAIHigh Risk“Microsoft” in the hostnameAI analysisIdentical page
pub-75b86b03ae0744b3add6b3596d00beea.r2. dev 2026-11-09 · seen 3×RulesHigh RiskAIHigh RiskKnown Kit: Self-hosted Turnstile gate kit — "Verifying site connection..." sc.php loader (hunting-rule content anchor) (turnstile-gate-kit-202609)Identified as Microsoft by our AI analysisAI analysis
customerservoces-agreement-renewal-2026-uubswjau10aoq.us-sea-1. linodeobjects. com Outlook Web App2026-11-09 · seen 2×RulesMaliciousAIConfirmed ScamCredential Phishing on object storage“Microsoft” in the page titleIdentical pagePage text
pub-9b384c2395364e819f6dabaee77443bc.r2. dev 2026-11-09 · seen 8×RulesMedium RiskAIHigh RiskMicrosoft logo on a non-official hostAI analysisLogo / favicon
RulesLow RiskAIHigh RiskIdentified as Microsoft by our AI analysisAI analysis
RulesLow RiskAIHigh RiskIdentified as Microsoft by our AI analysisAI analysis
RulesMaliciousAIConfirmed ScamIDS: ET PHISHING Tycoon Landing Page +3 more“Microsoft” in page or screenshot textScreenshot text
RulesMaliciousAIConfirmed ScamMicrosoft Credential Phishing on cloud hosting“Microsoft” in page or screenshot textScreenshot text
RulesMaliciousAIHigh RiskMicrosoft 365 Credential PhishingMicrosoft logo on a non-official hostAI analysisLogo / favicon
RulesLow RiskAIHigh Risk“Microsoft” in the page titleAI analysis
RulesMaliciousAIConfirmed ScamIdentified as Microsoft by our AI analysisAI analysis
RulesHigh RiskAIConfirmed ScamIdentified as Microsoft by our AI analysisAI analysis
RulesHigh RiskAIHigh RiskIdentified as Microsoft by our AI analysisAI analysis
RulesMaliciousAIHigh Risk“Microsoft” in the page titleAI analysisPage text
RulesMaliciousAIConfirmed Scam“Microsoft” in the page titlePage text
RulesHigh RiskAIConfirmed ScamPossible Microsoft 365 PhishingMicrosoft logo on a non-official hostLogo / favicon
RulesHigh RiskAIHigh RiskIdentified as Microsoft by our AI analysisAI analysis
RulesMaliciousAIConfirmed Scam“Microsoft” in the page titlePage text
RulesHigh RiskAIHigh Risk“Microsoft” in the page titleAI analysisPage text
RulesHigh RiskAIHigh RiskIdentified as Microsoft by our AI analysisAI analysis
RulesLow RiskAIHigh RiskIdentified as Microsoft by our AI analysisAI analysis
RulesMaliciousAIConfirmed Scam“Microsoft” in page or screenshot textScreenshot text
RulesMaliciousAIConfirmed ScamMicrosoft 365 Credential PhishingMicrosoft logo on a non-official hostAI analysisLogo / favicon
RulesHigh RiskAIHigh RiskIDS: ET PHISHING Possible OWA Mail Phishing Landing - Title over non SSL +1 more“Microsoft” in the page titlePage text
RulesMaliciousAIConfirmed Scam“Microsoft” in the page titlePage text
RulesMaliciousAIConfirmed Scam“Microsoft” in the page titlePage text
RulesHigh RiskAIHigh Risk“Microsoft” in the hostnameIdentical page
RulesMaliciousAIConfirmed Scam“Microsoft” in the page titlePage text
RulesHigh RiskAIConfirmed Scam“Microsoft” in the page titleAI analysisIdentical pagePage text
RulesMaliciousAIConfirmed Scam“Microsoft” in the page titleAI analysisPage text
RulesHigh RiskAIHigh RiskPossible Microsoft 365 Phishing“Microsoft” in the page titleAI analysis
RulesLow RiskAIHigh RiskIdentified as Microsoft by our AI analysisAI analysis
RulesHigh RiskAIConfirmed ScamCredential Phishing on disposable hosting“Microsoft” in the page titlePage text
RulesLow RiskAIHigh Risk“Microsoft” in the page titleAI analysis
RulesMaliciousAIConfirmed ScamKnown Kit: Fake Microsoft account code page that relays the victim's one-time code to the operator's server (ms-account-otp-relay-2026-11)“Microsoft” in page or screenshot textScreenshot text
RulesLow RiskAIHigh RiskIdentified as Microsoft by our AI analysisAI analysis
pub-4e92eaba6dd84e8185d3624a8f50b701.r2. dev Webmail Portal Access | Digital Secured Platform2026-11-07 · seen 5×RulesHigh RiskAIConfirmed ScamCredential Phishing on object storage“Microsoft” in page or screenshot textScreenshot text
RulesHigh RiskAIHigh RiskIDS: ET PHISHING Possible OWA Mail Phishing Landing - Title over non SSL“Microsoft” in the page titleIdentical page
RulesHigh RiskAIHigh RiskPage sends data to a Telegram bot from disposable hosting“Microsoft” in the page titleAI analysis
RulesMaliciousAIConfirmed ScamKnown Kit: Tech-support scam: fake security alert that locks the browser and asks you to call 'support' (tech-support-browser-locker-2026-10)“Microsoft” in page or screenshot textScreenshot text
live-wemustcollectdemwith-onlline.vercel. app Security verification - Microsoft account2026-11-07 · seen 2×RulesHigh RiskAIConfirmed ScamCredential Phishing on disposable hosting“Microsoft” in the page titlePage text
RulesHigh RiskAIHigh RiskDevice-code phishingIdentified as Microsoft by our AI analysisAI analysis
eyyubbtpim.singuius. de 2026-11-06RulesLow RiskAIHigh RiskIdentified as Microsoft by our AI analysisAI analysis
RulesLow RiskAIHigh Risk“Microsoft” in the hostnameAI analysis
RulesMaliciousAIConfirmed Scam“Microsoft” in the page titleLogo / faviconPage text
101 further sites are not listed at all: the Microsoft name appeared on them, but we judged them not to be impersonation (both our rule engine and our AI analysis rated the page harmless, the page only mentions the brand, or it is a copy of another public website).