Phishing sites impersonating Outlook

PhishDestroy has recorded 81 phishing domains impersonating Outlook since 2025-08-09, 5 of them in the last 30 days. The most used registrars are GoDaddy.com and MarkMonitor; the most common TLDs are .com and .io. The official Outlook domain is outlook.com: any other site asking for your login or wallet is not Outlook.

81
Domains, all time
5
Last 30 days
50
Online at last check
13
Confirmed takedowns

New domains in the last 90 days

2026-07-25: 02026-07-26: 02026-07-27: 22026-07-28: 02026-07-29: 02026-07-30: 02026-07-31: 02026-08-01: 12026-08-02: 02026-08-03: 02026-08-04: 02026-08-05: 02026-08-06: 02026-08-07: 32026-08-08: 12026-08-09: 02026-08-10: 02026-08-11: 12026-08-12: 12026-08-13: 02026-08-14: 22026-08-15: 02026-08-16: 02026-08-17: 02026-08-18: 02026-08-19: 02026-08-20: 02026-08-21: 02026-08-22: 02026-08-23: 02026-08-24: 02026-08-25: 02026-08-26: 02026-08-27: 02026-08-28: 02026-08-29: 02026-08-30: 02026-08-31: 02026-09-01: 02026-09-02: 02026-09-03: 12026-09-04: 12026-09-05: 02026-09-06: 02026-09-07: 02026-09-08: 02026-09-09: 12026-09-10: 02026-09-11: 02026-09-12: 02026-09-13: 02026-09-14: 02026-09-15: 02026-09-16: 02026-09-17: 02026-09-18: 02026-09-19: 12026-09-20: 12026-09-21: 12026-09-22: 02026-09-23: 02026-09-24: 02026-09-25: 02026-09-26: 02026-09-27: 02026-09-28: 02026-09-29: 02026-09-30: 02026-10-01: 02026-10-02: 02026-10-03: 02026-10-04: 02026-10-05: 02026-10-06: 02026-10-07: 02026-10-08: 02026-10-09: 02026-10-10: 02026-10-11: 02026-10-12: 02026-10-13: 12026-10-14: 02026-10-15: 02026-10-16: 02026-10-17: 02026-10-18: 02026-10-19: 12026-10-20: 12026-10-21: 12026-10-22: 1
Outlook phishing domains detected per day: 22 from 2026-07-25 to 2026-10-22; peak 3.

How to tell a fake Outlook site

Official domains: outlook.com, live.com.

Words most often added to the brand in reported domains: mail, owa, dege, hanefra, bikiemta, auth, ondigitalocean, tencentcorp, event, degedrop.

  • Type the address yourself or use a bookmark; phishing links for Outlook arrive through ads, search results, direct messages and fake support accounts.
  • Check the full domain before you sign in: look for extra words, hyphens, a different TLD or look-alike letters.
  • Outlook does not ask you to confirm your password or card details through a link in an email or SMS.

Paste a suspicious address into the Homoglyph Checker or check it against the DestroyList.

Latest Outlook phishing domains

The 50 most recently detected domains impersonating Outlook
DomainFirst detectedStatus at last checkRegistrar
aurexo.digital2026-10-22OnlineNETIM
altoactivanza.com2026-10-21OnlineDynadot
algofinlotemax.click2026-10-20OnlineSpaceship
web101.ciasskllc.com2026-10-19OnlineNAMECHEAP
tunishopia.tn2026-10-13OnlineOOREDOO
timeforgoldens.com2026-09-21OnlineBluehost
acces-opalecenter.countmup.site2026-09-20OfflineLigne Web Services dba LWS
wildcard.hanefra7bikiemta.com2026-09-19OnlineWild West Domains
mail-oos.ru2026-09-09OnlineRU-CENTER-RU
aponense.it2026-09-04OnlineRegister S.p.a
hnpwebapp.com2026-09-03OnlineENOM
ithelpdeskwebformnotice.weebly.com2026-08-14OfflineSquare
samratitinstitute.com2026-08-14OnlineNAMECHEAP
xn--valider-lesbotes-auxlettres-outlook-sid.weebly.com2026-08-12OfflineSquare
mail1.aselsan.com.tr2026-08-11Online—
yt2mp3api.ofismall.az2026-08-08Online—
mail.tatenengo.ru2026-08-07OfflineBEGET-RU
docu.motnatelly.xyz2026-08-07OfflineNAMECHEAP
financeglobal.lat2026-08-07OfflineHOSTINGER operations
hgser.closer.website2026-08-01OnlineGoDaddy.com
novatrglobal.com2026-07-27OnlineGlobal Domain
haruirotakamatsu.com2026-07-27OnlineOnamae.com
digiworld.in.net2026-07-22OnlinePublicDomainRegistry.com
altamimitex.com2026-07-17OnlinePublicDomainRegistry.com
ststransportes.com2026-06-03OnlineWingu Networks, de C.V
vote-kirwan.org2026-05-23OnlineNAMECHEAP
sekholia.com2026-05-01OnlineNameCheap
ethosdebureau.com2026-04-28OnlineTrustname.com
buyzopicloneonline4uk.com2026-04-28OnlineTrustname.com
pub-f7076e6b96664daf90ae8357ef8b9110.r2.dev2026-04-22Taken downCloudflare R2
pub-735053a4f94644cb81eb8a9ea49c452f.r2.dev2026-03-27OnlineCloudflare R2
mail.support-outlook.ru2026-03-17OfflineTIMEWEB-RU
transcorpbank.com2026-03-16OnlineNameCheap
waslah.net2026-03-13OnlineeNom
5kvisionhub.com2026-03-11OfflineCloudflare
owasxwheks-mph9pg.fly.dev2026-03-10OfflineFly
new.event-dege.top2026-02-26Offline—
start-dege.io2026-02-26Offline—
degecheck.fun2026-02-26Offline—
vm.rkenergiasolar.com2026-02-26Offline—
storageoptimization.dedyn.io2026-02-26Offline—
degedrop.fun2026-02-26OfflinePublicDomainRegistry.com
degedrop.com2026-02-26OfflineWeb Commerce Communications dba WebNic.c
promo.event-dege.top2026-02-26Offline—
ckrigxui.com2026-02-24OnlineGname.com
mewswap.vip2026-02-19OfflineGname.com
adflow.ltd2026-02-13OnlineNiceNIC
tencentcorp.xyz2026-02-03UnknownNiceNIC
tencentcorp.org2026-02-03UnknownNiceNIC
owa.cordblood.com2026-01-04Taken downMarkMonitor

All 81 Outlook reports

Where they are registered and hosted

Registrars

  1. GoDaddy.com4
  2. MarkMonitor4
  3. PublicDomainRegistry.com4
  4. NAMECHEAP4
  5. Cloudflare3
  6. NameCheap3
  7. NiceNIC3
  8. GitHub Pages2

Top-level domains

  1. .com35
  2. .io5
  3. .app3
  4. .net3
  5. .dev3
  6. .ru3
  7. .vip2
  8. .lat2

Hosting networks

  1. CLOUDFLARENET, US14
  2. Cloudflare, Inc.9
  3. WILDCARD-AS Wildcard UK Limited, GB4
  4. AMAZON-AES, US4
  5. AS-COLOCROSSING, US3
  6. FASTLY, US3
  7. NETWORK-SOLUTIONS-HOSTING, US3
  8. Amazon.com, Inc.3

Related

Data: PhishDestroy domain-report database, built 2026-10-22. Counts cover every reported domain whose stored target brand is Outlook; share of all PhishDestroy reports: 0.04%.