loginmicrosoft.fwh.is
Classification: Suspicious
loginmicrosoft.fwh.is is a suspicious hostname. Reported by 1 threat source, last seen 2026-09-03. IoC context and downloadable threat intel on Maltiverse.
Current activity
- Online — resolving/reachable. Last checked 2026-09-03 00:08:23.
- Phishing — Hosts a phishing site and is intrinsically malicious.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Phishing | OpenPhish | 2026-09-03 00:05:16 | 2026-09-03 00:05:16 | malicious-activity phishing | T1566 Phishing |
Tags
phishingIP addresses resolved by this hostname
- 185.27.134.179 (2026-09-03 00:08:23)
Whois information
- Domain
- fwh.is
- TLD
- is
- DNSSEC
- ['unsigned delegation']
- Nameservers
- ns1.byet.org, ns2.byet.org, ns3.byet.org, ns4.byet.org
- Address
- Kwikstaartlaan 42, Unit G1517, Zeist, Utrecht 3704GS, NL, 4600 East Washington Street, Suite 305, Phoenix, AZ 85034, US
- Domain created
- 2019-03-21 00:00:00
- Domain expires
- 2026-11-01 00:00:00
- First indexed
- 2026-09-03 00:05:16
- Last updated
- 2026-09-03 00:08:26