Posture summary
Email authentication
SPF ✓ DMARC reject DKIM ✓ DNSSEC ✗TLS / certificate
TLS TLSv1.3 145d to expiryInternet exposure
2 open ports 0 KEVBreach metadata
0 public breachesDomain & hosting
82 public hostnames registered 1991 AS8075 · MICROSOFT-CORP-MSN-AS-BLOCK - Microsoft Corporation no blocklist hitsPublic attack surface (82 hostnames in Certificate Transparency)
Hostnames this organization published in public TLS certificates. Passive OSINT — nothing was scanned; a wildcard certificate is in use, so the real footprint may be larger.
Lookalike domains (74 registered of 90 checked)
Registered permutations of this domain. Existence is a fact, not an accusation — ownership and intent are not assessed. Those able to receive mail are the ones usable for invoice fraud and phishing.
| Domain | Type | Mail-capable |
|---|---|---|
| imcrosoft.com | transposition | yes |
| login-microsoft.com | prefix | yes |
| loginmicrosoft.com | prefix | yes |
| m1crosoft.com | homoglyph | yes |
| mi-crosoft.com | hyphen | yes |
| micfosoft.com | keyboard | yes |
| micorsoft.com | transposition | yes |
| micrlsoft.com | keyboard | yes |
| micro5oft.com | homoglyph | yes |
| microosft.com | transposition | yes |
| micros-oft.com | hyphen | yes |
| microslft.com | keyboard | yes |
| microsoft.eu | tld | yes |
| microsofy.com | keyboard | yes |
| microsogt.com | keyboard | yes |
| microsort.com | keyboard | yes |
| microsovt.com | keyboard | yes |
| microwoft.com | keyboard | yes |
| micrpsoft.com | keyboard | yes |
| micrsooft.com | transposition | yes |
| mictosoft.com | keyboard | yes |
| midrosoft.com | keyboard | yes |
| mivrosoft.com | keyboard | yes |
| mkcrosoft.com | keyboard | yes |
| my-microsoft.com | prefix | yes |
| portalmicrosoft.com | prefix | yes |
| securemicrosoft.com | prefix | yes |
| www-microsoft.com | prefix | yes |
| icrosoft.com | omission | no |
| kicrosoft.com | keyboard | no |
| mailmicrosoft.com | prefix | no |
| miccrosoft.com | repetition | no |
| miceosoft.com | keyboard | no |
| micr0soft.com | homoglyph | no |
| micro-soft.com | hyphen | no |
| microaoft.com | keyboard | no |
| microdoft.com | keyboard | no |
| microoft.com | omission | no |
| microosoft.com | repetition | no |
| microsfot.com | transposition | no |
| microsft.com | omission | no |
| microsift.com | keyboard | no |
| microsodt.com | keyboard | no |
| microsof.com | omission | no |
| microsofft.com | repetition | no |
| microsofr.com | keyboard | no |
| microsoft.app | tld | no |
| microsoft.co | tld | no |
| microsoft.info | tld | no |
| microsoft.io | tld | no |
| microsoft.net | tld | no |
| microsoft.online | tld | no |
| microsoft.org | tld | no |
| microsoft.site | tld | no |
| microsoft.xyz | tld | no |
| microsoftt.com | repetition | no |
| microsooft.com | repetition | no |
| microsot.com | omission | no |
| microsotf.com | transposition | no |
| microspft.com | keyboard | no |
| microssoft.com | repetition | no |
| microxoft.com | keyboard | no |
| micrrosoft.com | repetition | no |
| micrsoft.com | omission | no |
| miicrosoft.com | repetition | no |
| mircosoft.com | transposition | no |
| mirosoft.com | omission | no |
| mmicrosoft.com | repetition | no |
| mocrosoft.com | keyboard | no |
| mucrosoft.com | keyboard | no |
| mymicrosoft.com | prefix | no |
| nicrosoft.com | keyboard | no |
| secure-microsoft.com | prefix | no |
| wwwmicrosoft.com | prefix | no |
Recommendations
-
mediumEnable DNSSEC
DNSSEC signing was not detected for this domain.
-
highMonitor lookalike domains
28 registered lookalike domain(s) can receive mail, which is what makes them usable for invoice fraud and credential phishing. Monitor them and consider defensive registrations.
-
mediumReview the public subdomain footprint
82 hostnames for this domain appear in public Certificate Transparency logs. Retire forgotten hosts — stale subdomains are a common entry point and a takeover risk.
Refresh this report
Re-run a live analysis or generate a full downloadable audit.
Open live reportAll information is aggregated from public sources for awareness only and does not constitute an accusation or a security assessment. No personal data or credentials are published.