# Phishing sites impersonating Outlook

PhishDestroy has recorded 81 phishing domains impersonating Outlook since 2025-08-09, 5 of them in the last 30 days. The most used registrars are GoDaddy.com and MarkMonitor; the most common TLDs are .com and .io. The official Outlook domain is outlook.com: any other site asking for your login or wallet is not Outlook.

81Domains, all time

5Last 30 days

50Online at last check

13Confirmed takedowns

## New domains in the last 90 days

Outlook phishing domains detected per day: 22 from 2026-07-25 to 2026-10-22; peak 3.

## How to tell a fake Outlook site

Official domains: outlook.com, live.com.

Words most often added to the brand in reported domains: mail, owa, dege, hanefra, bikiemta, auth, ondigitalocean, tencentcorp, event, degedrop.
- Type the address yourself or use a bookmark; phishing links for Outlook arrive through ads, search results, direct messages and fake support accounts.
- Check the full domain before you sign in: look for extra words, hyphens, a different TLD or look-alike letters.
- Outlook does not ask you to confirm your password or card details through a link in an email or SMS.

Paste a suspicious address into the [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker) or check it against the [DestroyList](https://phishdestroy.io/developer-tools/destroylist-check).

## Latest Outlook phishing domains

The 50 most recently detected domains impersonating Outlook
Domain | First detected | Status at last check | Registrar | 
[aurexo.digital](https://phishdestroy.io/domain/aurexo.digital/) | 2026-10-22 | Online | NETIM | 
[altoactivanza.com](https://phishdestroy.io/domain/altoactivanza.com/) | 2026-10-21 | Online | Dynadot | 
[algofinlotemax.click](https://phishdestroy.io/domain/algofinlotemax.click/) | 2026-10-20 | Online | Spaceship | 
[web101.ciasskllc.com](https://phishdestroy.io/domain/web101.ciasskllc.com/) | 2026-10-19 | Online | NAMECHEAP | 
[tunishopia.tn](https://phishdestroy.io/domain/tunishopia.tn/) | 2026-10-13 | Online | OOREDOO | 
[timeforgoldens.com](https://phishdestroy.io/domain/timeforgoldens.com/) | 2026-09-21 | Online | Bluehost | 
[acces-opalecenter.countmup.site](https://phishdestroy.io/domain/acces-opalecenter.countmup.site/) | 2026-09-20 | Offline | Ligne Web Services dba LWS | 
[wildcard.hanefra7bikiemta.com](https://phishdestroy.io/domain/wildcard.hanefra7bikiemta.com/) | 2026-09-19 | Online | Wild West Domains | 
[mail-oos.ru](https://phishdestroy.io/domain/mail-oos.ru/) | 2026-09-09 | Online | RU-CENTER-RU | 
[aponense.it](https://phishdestroy.io/domain/aponense.it/) | 2026-09-04 | Online | Register S.p.a | 
[hnpwebapp.com](https://phishdestroy.io/domain/hnpwebapp.com/) | 2026-09-03 | Online | ENOM | 
[ithelpdeskwebformnotice.weebly.com](https://phishdestroy.io/domain/ithelpdeskwebformnotice.weebly.com/) | 2026-08-14 | Offline | Square | 
[samratitinstitute.com](https://phishdestroy.io/domain/samratitinstitute.com/) | 2026-08-14 | Online | NAMECHEAP | 
[xn--valider-lesbotes-auxlettres-outlook-sid.weebly.com](https://phishdestroy.io/domain/xn--valider-lesbotes-auxlettres-outlook-sid.weebly.com/) | 2026-08-12 | Offline | Square | 
[mail1.aselsan.com.tr](https://phishdestroy.io/domain/mail1.aselsan.com.tr/) | 2026-08-11 | Online | — | 
[yt2mp3api.ofismall.az](https://phishdestroy.io/domain/yt2mp3api.ofismall.az/) | 2026-08-08 | Online | — | 
[mail.tatenengo.ru](https://phishdestroy.io/domain/mail.tatenengo.ru/) | 2026-08-07 | Offline | BEGET-RU | 
[docu.motnatelly.xyz](https://phishdestroy.io/domain/docu.motnatelly.xyz/) | 2026-08-07 | Offline | NAMECHEAP | 
[financeglobal.lat](https://phishdestroy.io/domain/financeglobal.lat/) | 2026-08-07 | Offline | HOSTINGER operations | 
[hgser.closer.website](https://phishdestroy.io/domain/hgser.closer.website/) | 2026-08-01 | Online | GoDaddy.com | 
[novatrglobal.com](https://phishdestroy.io/domain/novatrglobal.com/) | 2026-07-27 | Online | Global Domain | 
[haruirotakamatsu.com](https://phishdestroy.io/domain/haruirotakamatsu.com/) | 2026-07-27 | Online | Onamae.com | 
[digiworld.in.net](https://phishdestroy.io/domain/digiworld.in.net/) | 2026-07-22 | Online | PublicDomainRegistry.com | 
[altamimitex.com](https://phishdestroy.io/domain/altamimitex.com/) | 2026-07-17 | Online | PublicDomainRegistry.com | 
[ststransportes.com](https://phishdestroy.io/domain/ststransportes.com/) | 2026-06-03 | Online | Wingu Networks, de C.V | 
[vote-kirwan.org](https://phishdestroy.io/domain/vote-kirwan.org/) | 2026-05-23 | Online | NAMECHEAP | 
[sekholia.com](https://phishdestroy.io/domain/sekholia.com/) | 2026-05-01 | Online | NameCheap | 
[ethosdebureau.com](https://phishdestroy.io/domain/ethosdebureau.com/) | 2026-04-28 | Online | Trustname.com | 
[buyzopicloneonline4uk.com](https://phishdestroy.io/domain/buyzopicloneonline4uk.com/) | 2026-04-28 | Online | Trustname.com | 
[pub-f7076e6b96664daf90ae8357ef8b9110.r2.dev](https://phishdestroy.io/domain/pub-f7076e6b96664daf90ae8357ef8b9110.r2.dev/) | 2026-04-22 | Taken down | Cloudflare R2 | 
[pub-735053a4f94644cb81eb8a9ea49c452f.r2.dev](https://phishdestroy.io/domain/pub-735053a4f94644cb81eb8a9ea49c452f.r2.dev/) | 2026-03-27 | Online | Cloudflare R2 | 
[mail.support-outlook.ru](https://phishdestroy.io/domain/mail.support-outlook.ru/) | 2026-03-17 | Offline | TIMEWEB-RU | 
[transcorpbank.com](https://phishdestroy.io/domain/transcorpbank.com/) | 2026-03-16 | Online | NameCheap | 
[waslah.net](https://phishdestroy.io/domain/waslah.net/) | 2026-03-13 | Online | eNom | 
[5kvisionhub.com](https://phishdestroy.io/domain/5kvisionhub.com/) | 2026-03-11 | Offline | Cloudflare | 
[owasxwheks-mph9pg.fly.dev](https://phishdestroy.io/domain/owasxwheks-mph9pg.fly.dev/) | 2026-03-10 | Offline | Fly | 
[new.event-dege.top](https://phishdestroy.io/domain/new.event-dege.top/) | 2026-02-26 | Offline | — | 
[start-dege.io](https://phishdestroy.io/domain/start-dege.io/) | 2026-02-26 | Offline | — | 
[degecheck.fun](https://phishdestroy.io/domain/degecheck.fun/) | 2026-02-26 | Offline | — | 
[vm.rkenergiasolar.com](https://phishdestroy.io/domain/vm.rkenergiasolar.com/) | 2026-02-26 | Offline | — | 
[storageoptimization.dedyn.io](https://phishdestroy.io/domain/storageoptimization.dedyn.io/) | 2026-02-26 | Offline | — | 
[degedrop.fun](https://phishdestroy.io/domain/degedrop.fun/) | 2026-02-26 | Offline | PublicDomainRegistry.com | 
[degedrop.com](https://phishdestroy.io/domain/degedrop.com/) | 2026-02-26 | Offline | Web Commerce Communications dba WebNic.c | 
[promo.event-dege.top](https://phishdestroy.io/domain/promo.event-dege.top/) | 2026-02-26 | Offline | — | 
[ckrigxui.com](https://phishdestroy.io/domain/ckrigxui.com/) | 2026-02-24 | Online | Gname.com | 
[mewswap.vip](https://phishdestroy.io/domain/mewswap.vip/) | 2026-02-19 | Offline | Gname.com | 
[adflow.ltd](https://phishdestroy.io/domain/adflow.ltd/) | 2026-02-13 | Online | NiceNIC | 
[tencentcorp.xyz](https://phishdestroy.io/domain/tencentcorp.xyz/) | 2026-02-03 | Unknown | NiceNIC | 
[tencentcorp.org](https://phishdestroy.io/domain/tencentcorp.org/) | 2026-02-03 | Unknown | NiceNIC | 
[owa.cordblood.com](https://phishdestroy.io/domain/owa.cordblood.com/) | 2026-01-04 | Taken down | MarkMonitor | 

[All 81 Outlook reports](https://phishdestroy.io/domain/?brand=Outlook)

## Where they are registered and hosted

### Registrars

- [GoDaddy.com](https://phishdestroy.io/registrar/godaddy/)4
- [MarkMonitor](https://phishdestroy.io/registrar/markmonitor/)4
- [PublicDomainRegistry.com](https://phishdestroy.io/registrar/publicdomainregistry-pdr/)4
- [NAMECHEAP](https://phishdestroy.io/registrar/namecheap/)4
- Cloudflare3
- [NameCheap](https://phishdestroy.io/registrar/namecheap/)3
- [NiceNIC](https://phishdestroy.io/registrar/nicenic/)3
- GitHub Pages2

### Top-level domains

- [.com](https://phishdestroy.io/tld/com/)35
- [.io](https://phishdestroy.io/tld/io/)5
- [.app](https://phishdestroy.io/tld/app/)3
- [.net](https://phishdestroy.io/tld/net/)3
- [.dev](https://phishdestroy.io/tld/dev/)3
- [.ru](https://phishdestroy.io/tld/ru/)3
- [.vip](https://phishdestroy.io/tld/vip/)2
- [.lat](https://phishdestroy.io/tld/lat/)2

### Hosting networks

- CLOUDFLARENET, US14
- Cloudflare, Inc.9
- WILDCARD-AS Wildcard UK Limited, GB4
- AMAZON-AES, US4
- AS-COLOCROSSING, US3
- FASTLY, US3
- NETWORK-SOLUTIONS-HOSTING, US3
- Amazon.com, Inc.3

## Related

- [Typosquatting](https://phishdestroy.io/glossary/typosquatting/)
- [Homoglyph](https://phishdestroy.io/glossary/homoglyph/)
- [Phishing kit](https://phishdestroy.io/glossary/phishing-kit/)
- [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker)
- [Abuse Report Generator](https://phishdestroy.io/developer-tools/abuse-report-generator)
- [If you already used a fake site: emergency guide](https://phishdestroy.io/critical-action)
- [All impersonated brands](https://phishdestroy.io/brand/)

Data: PhishDestroy domain-report database, built 2026-10-22. Counts cover every reported domain whose stored target brand is Outlook; share of all PhishDestroy reports: 0.04%.

Canonical: https://phishdestroy.io/brand/outlook/