News for hackers. Stuff that matters.

A comment on Scammers are abusing an internal Microsoft account to send spam links. Parent comment

Re:Scammers are abusing an internal Microsoft account to sen... by T-A on Sunday May 24, 2026 @03:47AM (#48255356)
https://github.com/HotCakeX/MicrosoftDomains

...and microsoftonline.com is not among them (unlike microsoftonline.net and other variants). But it seems to have been registered in 2002, and the record looks legit:

https://whois.domaintools.com/microsoftonline.com

[ Parent | on HN ]
Re:Scammers are abusing an internal Microsoft account to sen... by cuteboy19 on Sunday May 24, 2026 @04:05AM (#48255458)
but microsoftgenuinerewardsrc.com is! shameful!
[ Parent | on HN ]
Re:Scammers are abusing an internal Microsoft account to sen... by balakk on Sunday May 24, 2026 @06:37AM (#48256140)
It's definitely a Microsoft owned domain and actively used - for example in Azure Active Directory (Entra).
[ Parent | on HN ]
Re:Scammers are abusing an internal Microsoft account to sen... by KomoD on Sunday May 24, 2026 @07:14AM (#48256340)
microsoftonline.com is in that list.
[ Parent | on HN ]
Re:Scammers are abusing an internal Microsoft account to sen... by T-A on Sunday May 24, 2026 @01:06PM (#48259050)
You're right. I wonder how I managed to miss it. For a moment I thought I must have looked at

https://github.com/HotCakeX/MicrosoftDomains/blob/main/Micro...

but that one doesn't contain any microsoftonline.

[ Parent | on HN ]
Re:Scammers are abusing an internal Microsoft account to sen... by e40 on Sunday May 24, 2026 @08:59AM (#48256934)
I did not expect 645 entries!! That is insane.
[ Parent | on HN ]
Re:Scammers are abusing an internal Microsoft account to sen... by HDBaseT on Sunday May 24, 2026 @08:15PM (#48262326)
1drv.ms always catches me out.
[ Parent | on HN ]