Suspicious

Phishings targeting Microsoft

Suspicious and active websites


Phishings targeting Microsoft

Suspicious and active websites


Active
41
New (7d)
3
Trend (7d)
↓50%
About
AIEnterprise SSO target. A successful Microsoft 365 / Outlook phish unlocks the mailbox plus downstream business apps via OAuth and is a frequent precursor to BEC fraud.
Countries
United StatesUnited States (18) · IrelandIreland (6) · GermanyGermany (5)
TLS certs
R13 (6) · Let's Encrypt (4) · YR2 (3)

Suspicious sites — confidence is not always 100%. Use for Threat Hunting or watchlists.

Last check (UTC) First seen (UTC) URL Screenshot Flags Details
2026-09-12 15:30 2026-09-11 13:02
http://microsoft-advertising-authentification.sgn-1.com/signin/login.…
Screenshot of microsoft-advertising-authentification.sgn-1.com GSB OpenPhish Details
2026-09-12 15:30 2026-09-10 05:25
https://outlook-office365.com
Screenshot of outlook-office365.com Details
2026-09-12 15:30 2026-09-09 13:12
http://login-outlook365.yzz.me
Screenshot of login-outlook365.yzz.me OpenPhish Details
2026-09-12 15:30 2026-09-04 13:03
https://notifications.microsoft-ssl.com
Screenshot of notifications.microsoft-ssl.com OpenPhish Details
2026-09-12 15:30 2026-09-03 01:02
http://microsoft-alpha.vercel.app
Screenshot of microsoft-alpha.vercel.app GSB OpenPhish TweetFeed Details
2026-09-12 15:30 2026-09-02 13:07
http://bmb.adv.br/meetings/microsoft-store.html
Screenshot of bmb.adv.br OpenPhish Details
2026-09-12 15:30 2026-09-02 13:05
https://grupoimpaktu.ao/quotesss/onedrive-verify-obf.html
Screenshot of grupoimpaktu.ao OpenPhish Details
2026-09-12 15:30 2026-09-01 01:02
https://microsoftwordob.blogspot.com
Screenshot of microsoftwordob.blogspot.com OpenPhish Details
2026-09-12 15:30 2026-08-30 13:06
https://login.authorised-support.com/microsoft365/mfa/Y9IinybDOKJ6iJO…
Screenshot of login.authorised-support.com GSB OpenPhish Details
2026-09-12 15:30 2026-08-28 01:02
https://microsoft0117.vercel.app
Screenshot of microsoft0117.vercel.app OpenPhish Details
2026-09-12 15:30 2026-08-10 15:03
https://www-microsoft.com.cn
Screenshot of www-microsoft.com.cn urlscan Details
2026-09-12 15:30 2026-08-09 14:10
https://site.outlookindia.com
Screenshot of site.outlookindia.com urlscan Details
2026-09-12 15:30 2026-08-09 07:58
https://hotmail143.net
Screenshot of hotmail143.net urlscan Details
2026-09-12 15:30 2026-08-09 05:25
https://microsoft.vpn-update.org
Screenshot of microsoft.vpn-update.org GSB Details
2026-09-12 15:30 2026-08-07 17:27
https://plugins.sugar-outlook.com
Screenshot of plugins.sugar-outlook.com GSB Details
2026-09-12 15:30 2026-08-05 13:01
https://proteccion-outlook2026.iceiy.com/?i=1
Screenshot of proteccion-outlook2026.iceiy.com OpenPhish urlscan Details
2026-09-12 15:30 2026-08-02 05:43
https://microsoftuk.co
Screenshot of microsoftuk.co urlscan Details
2026-09-12 15:30 2026-07-31 05:46
https://microsoft-sharepoint.fr
Screenshot of microsoft-sharepoint.fr GSB Details
2026-09-12 15:30 2026-07-29 05:48
https://microsoft365updates.com
Screenshot of microsoft365updates.com GSB Details
2026-09-12 15:30 2026-07-28 18:06
http://outlookmail.social
Screenshot of outlookmail.social TweetFeed Details
2026-09-12 15:30 2026-07-28 18:05
http://office365licensingsupport.com
Screenshot of office365licensingsupport.com TweetFeed urlscan Details
2026-09-12 15:30 2026-07-27 16:03
http://microsoft365businessbasic.com
Screenshot of microsoft365businessbasic.com TweetFeed Details
2026-09-12 15:30 2026-07-23 01:01
http://emailnotifications.m365-microsoft.com/i/a3ce2879ab8b04bd4a96ea…
Screenshot of emailnotifications.m365-microsoft.com OpenPhish Details
2026-09-12 15:30 2026-07-14 21:00
http://microsoft.updata.net.cn
Screenshot of microsoft.updata.net.cn TweetFeed Details
2026-09-12 15:30 2026-07-12 15:41
https://click6.microsoftsupportcenter.digital
Screenshot of click6.microsoftsupportcenter.digital GSB Details
2026-09-12 15:30 2026-07-12 15:41
https://click5.microsoftsupportcenter.digital
Screenshot of click5.microsoftsupportcenter.digital GSB Details
2026-09-12 15:30 2026-06-27 01:01
http://ctia-outlook-2026.s1.yapla.com/en/visitors
Screenshot of ctia-outlook-2026.s1.yapla.com OpenPhish Details
2026-09-12 15:30 2026-06-26 01:01
https://onedrive.at-us.therelayservice.com/matpwp#/main?type=onedrive…
Screenshot of onedrive.at-us.therelayservice.com OpenPhish urlscan Details
2026-09-12 15:30 2026-06-25 13:01
https://outlook.verifytoken.com/s/63bzgfsvbwsfcdx7y9/584dd8/90eab167-…
Screenshot of outlook.verifytoken.com OpenPhish Details
2026-09-12 15:30 2026-06-25 13:01
http://microsoft-login-securitylogin.jimdofree.com
Screenshot of microsoft-login-securitylogin.jimdofree.com OpenPhish Details
2026-09-12 15:30 2026-06-25 05:54
https://microsoftjk.eu.org
Screenshot of microsoftjk.eu.org urlscan Details
2026-09-12 15:30 2026-06-17 01:06
https://office365.rricrosoft-offices.org/i/df3667320560f4a8a9918ef9f3…
Screenshot of office365.rricrosoft-offices.org OpenPhish Details
2026-09-12 15:30 2026-06-08 13:01
https://programme-hup.m365-microsoft.com/i/d721e212eb3094bfd99c9d047a…
Screenshot of programme-hup.m365-microsoft.com OpenPhish urlscan Details
2026-09-12 15:30 2026-06-06 01:02
http://security.m365-microsoft.com/i/d51ee024a6cb3468996ec7c9307051d1d
Screenshot of security.m365-microsoft.com OpenPhish urlscan Details
2026-09-12 15:30 2026-05-15 13:01
https://microsoft.authorised-support.com/new-account/eozafbyj1bjlmguf…
Screenshot of microsoft.authorised-support.com GSB OpenPhish urlscan Details
2026-09-12 15:30 2026-05-10 09:44
https://microsoft-se.us
Screenshot of microsoft-se.us urlscan Details
2026-09-12 15:30 2026-05-05 13:02
https://outlook.webaccess-alert.com/s/63bzgfsvbwsfcdx7y9/584dd8/90eab…
Screenshot of outlook.webaccess-alert.com OpenPhish urlscan Details
2026-09-12 15:30 2026-04-20 01:01
http://reactivar-microsoft-live.iceiy.com
Screenshot of reactivar-microsoft-live.iceiy.com OpenPhish Details
2026-09-12 15:30 2026-03-30 13:01
https://security.email-microsoft.com/diyc_smavt1av3ltaq
Screenshot of security.email-microsoft.com GSB OpenPhish urlscan Details
2026-09-12 15:30 2026-03-28 13:01
http://support.m365-microsoft.com/i/ab041e84e499243eca3e98fb328201632
Screenshot of support.m365-microsoft.com OpenPhish Details
2026-09-12 15:30 2026-03-28 01:01
https://office365.internal-alerts.com/i/d5b9af0d256f14c03ab8396a78d36…
Screenshot of office365.internal-alerts.com OpenPhish urlscan Details

Suspicious sites — confidence is not always 100%. Use for Threat Hunting or watchlists.

URL Screenshot Details
http://microsoft-advertising-…
GSB OpenPhish
Screenshot of microsoft-advertising-authentification.sgn-1.com Details
https://outlook-office365.com
Screenshot of outlook-office365.com Details
http://login-outlook365.yzz.me
OpenPhish
Screenshot of login-outlook365.yzz.me Details
https://notifications.microso…
OpenPhish
Screenshot of notifications.microsoft-ssl.com Details
http://microsoft-alpha.vercel…
GSB OpenPhish TweetFeed
Screenshot of microsoft-alpha.vercel.app Details
http://bmb.adv.br/meetings/mi…
OpenPhish
Screenshot of bmb.adv.br Details
https://grupoimpaktu.ao/quote…
OpenPhish
Screenshot of grupoimpaktu.ao Details
https://microsoftwordob.blogs…
OpenPhish
Screenshot of microsoftwordob.blogspot.com Details
https://login.authorised-supp…
GSB OpenPhish
Screenshot of login.authorised-support.com Details
https://microsoft0117.vercel.…
OpenPhish
Screenshot of microsoft0117.vercel.app Details
https://www-microsoft.com.cn
urlscan
Screenshot of www-microsoft.com.cn Details
https://site.outlookindia.com
urlscan
Screenshot of site.outlookindia.com Details
https://hotmail143.net
urlscan
Screenshot of hotmail143.net Details
https://microsoft.vpn-update.…
GSB
Screenshot of microsoft.vpn-update.org Details
https://plugins.sugar-outlook…
GSB
Screenshot of plugins.sugar-outlook.com Details
https://proteccion-outlook202…
OpenPhish urlscan
Screenshot of proteccion-outlook2026.iceiy.com Details
https://microsoftuk.co
urlscan
Screenshot of microsoftuk.co Details
https://microsoft-sharepoint.…
GSB
Screenshot of microsoft-sharepoint.fr Details
https://microsoft365updates.c…
GSB
Screenshot of microsoft365updates.com Details
http://outlookmail.social
TweetFeed
Screenshot of outlookmail.social Details
http://office365licensingsupp…
TweetFeed urlscan
Screenshot of office365licensingsupport.com Details
http://microsoft365businessba…
TweetFeed
Screenshot of microsoft365businessbasic.com Details
http://emailnotifications.m36…
OpenPhish
Screenshot of emailnotifications.m365-microsoft.com Details
http://microsoft.updata.net.cn
TweetFeed
Screenshot of microsoft.updata.net.cn Details
https://click6.microsoftsuppo…
GSB
Screenshot of click6.microsoftsupportcenter.digital Details
https://click5.microsoftsuppo…
GSB
Screenshot of click5.microsoftsupportcenter.digital Details
http://ctia-outlook-2026.s1.y…
OpenPhish
Screenshot of ctia-outlook-2026.s1.yapla.com Details
https://onedrive.at-us.therel…
OpenPhish urlscan
Screenshot of onedrive.at-us.therelayservice.com Details
https://outlook.verifytoken.c…
OpenPhish
Screenshot of outlook.verifytoken.com Details
http://microsoft-login-securi…
OpenPhish
Screenshot of microsoft-login-securitylogin.jimdofree.com Details
https://microsoftjk.eu.org
urlscan
Screenshot of microsoftjk.eu.org Details
https://office365.rricrosoft-…
OpenPhish
Screenshot of office365.rricrosoft-offices.org Details
https://programme-hup.m365-mi…
OpenPhish urlscan
Screenshot of programme-hup.m365-microsoft.com Details
http://security.m365-microsof…
OpenPhish urlscan
Screenshot of security.m365-microsoft.com Details
https://microsoft.authorised-…
GSB OpenPhish urlscan
Screenshot of microsoft.authorised-support.com Details
https://microsoft-se.us
urlscan
Screenshot of microsoft-se.us Details
https://outlook.webaccess-ale…
OpenPhish urlscan
Screenshot of outlook.webaccess-alert.com Details
http://reactivar-microsoft-li…
OpenPhish
Screenshot of reactivar-microsoft-live.iceiy.com Details
https://security.email-micros…
GSB OpenPhish urlscan
Screenshot of security.email-microsoft.com Details
http://support.m365-microsoft…
OpenPhish
Screenshot of support.m365-microsoft.com Details
https://office365.internal-al…
OpenPhish urlscan
Screenshot of office365.internal-alerts.com Details

AIHow to verify a real Microsoft URL

  • Legitimate Microsoft URLs always end in microsoft.com (e.g. www.microsoft.com, account.microsoft.com). Anything else — including look-alike typosquats, hyphenated variations, or unfamiliar TLDs like .xyz / .top / .vip — is not Microsoft.
  • The padlock icon proves TLS is active, not that the site is safe. Free DV certificates are issued to attackers in minutes; every active site listed above has a valid TLS certificate.
  • If you got the link from email, SMS, or social media, do not click it. Open microsoft.com from your browser bookmark or type the domain manually.
  • Real Microsoft pages almost never ask for credentials immediately after clicking from a message — treat any such redirect as a phishing attempt until the domain is verified.