Phishing detection: office365-reactivation-email0.iceiy.com

Microsoft
http://office365-reactivation-email0.iceiy.com Access site
Screenshot
Screenshot of office365-reactivation-email0.iceiy.com
Investigate
Domain office365-reactivation-email0.iceiy.com39 CT hosts on apex
urlscan page.domain VirusTotal Whois
IP 185.27.134.165
urlscan page.ip VirusTotal ipinfo Greynoise
URL http://office365-reactivation-email0.iceiy.com
urlscan Wayback archive.today
Cert ZeroSSL ECC DV SSL CA 2
crt.sh Censys Google CT
Phishunt analysis Beta
30 low suspicionheuristic risk score · not a probability
Keyword matchLong domainPaaS host
20 signals fired · detector v2.0.0
AI analysis AIBeta
Credential harvesting

Impersonates Microsoft Office 365 with a fake account reactivation lure on a PaaS-hosted domain in the UK. The page presents a password input form to harvest credentials and contains login-themed keywords. Flagged by OpenPhish.

Password fieldOpenPhishLogin text in screenshot
AI-generated from stored detector signals - the AI never visited the site. · 2026-08-21 · confidence 82%
Domain & Network
Whois
Registrar Porkbun LLC
Network
IP 185.27.134.165
Country United KingdomUnited Kingdom
Hosting Wildcard UK Limited
ASN AS34119
TLS Cert ZeroSSL ECC DV SSL CA 2
External detection OpenPhish
CleanGoogle Safe Browsing · PhishTank · TweetFeed · urlscan.io
Report this phishing
Brand owner Microsoft
phish@office365.microsoft.com Web form
Submit to blocklists
Google Safe Browsing Microsoft SmartScreen APWG PhishTank
Not phishing? Dispute this detection

Tracked from 2026-08-21 01:03 UTC  ·  Last refreshed 2026-08-21 01:30 UTC