Phishing detection: reactivar-microsoft-365.iceiy.com

Microsoft
http://reactivar-microsoft-365.iceiy.com Access site
Screenshot
Screenshot of reactivar-microsoft-365.iceiy.com
Investigate
Domain reactivar-microsoft-365.iceiy.com38 CT hosts on apex
urlscan page.domain VirusTotal Whois
IP 185.27.134.202
urlscan page.ip VirusTotal ipinfo Greynoise
URL http://reactivar-microsoft-365.iceiy.com
urlscan Wayback archive.today
Cert ZeroSSL ECC Domain Secure Site CA
crt.sh Censys Google CT
Phishunt analysis Beta
30 low suspicionheuristic risk score · not a probability
Keyword matchBrand in subdomainLong domain
18 signals fired · detector v2.0.0
AI analysis AIBeta
Credential harvesting

Site impersonates Microsoft 365 using a Spanish-language domain suggesting account reactivation. Hosted in the United Kingdom on an unrelated base domain. Flagged by both OpenPhish and urlscan, likely harvesting Microsoft 365 credentials from Spanish-speaking users.

Brand in subdomainOpenPhishurlscan.io
AI-generated from stored detector signals - the AI never visited the site. · 2026-07-23 · confidence 82%
Domain & Network
Whois
Registrar Porkbun LLC
Network
IP 185.27.134.202
Country United KingdomUnited Kingdom
Hosting Wildcard UK Limited
ASN AS34119
TLS Cert ZeroSSL ECC Domain Secure Site CA
External detection OpenPhish urlscan.io
CleanGoogle Safe Browsing · PhishTank · TweetFeed
Report this phishing
Brand owner Microsoft
phish@office365.microsoft.com Web form
Submit to blocklists
Google Safe Browsing Microsoft SmartScreen APWG PhishTank
Not phishing? Dispute this detection

Tracked from 2026-05-27 13:00 UTC  ·  Last refreshed 2026-08-03 01:30 UTC