microsoft-com.mail.protection.outlook.com
Classification: Whitelisted
microsoft-com.mail.protection.outlook.com is a whitelisted (trusted) hostname. Reported by 4 threat sources, last seen 2025-05-17.
Current activity
- Offline — no longer resolving. Last online 2025-05-17 20:42:03.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Top Popularity Site | Cisco Umbrella | 2022-07-18 22:31:32 | 2025-05-17 20:42:02 | benign | |
| Trojan.Mint.Zamg | Hybrid-Analysis | 2020-11-24 02:30:16 | 2022-01-07 02:00:10 | ||
| Trojan.Tofsee | Hybrid-Analysis | 2021-11-25 07:45:28 | 2021-11-25 07:45:28 | ||
| Backdoor.Spammy | Hybrid-Analysis | 2021-10-10 09:15:21 | 2021-10-10 09:15:21 | ||
| Kryptik.GIQQ | Hybrid-Analysis | 2021-07-19 00:15:28 | 2021-07-19 00:15:28 | ||
| Backdoor.Tofsee | Hybrid-Analysis | 2019-05-13 10:02:36 | 2021-07-14 09:00:55 | ||
| Safe site | Maltiverse Research Team | 2021-02-01 18:29:06 | 2021-02-01 18:29:06 | ||
| Dropper.Dorifel | Hybrid-Analysis | 2021-01-25 19:00:18 | 2021-01-25 19:00:18 | ||
| Trojan.Ramnit | Hybrid-Analysis | 2021-01-05 00:18:12 | 2021-01-14 19:00:22 | ||
| Trojan.Agent | Hybrid-Analysis | 2020-12-01 01:45:30 | 2021-01-14 18:45:36 | ||
| Backdoor.Poison | Hybrid-Analysis | 2020-11-24 02:30:25 | 2021-01-14 18:45:28 | ||
| Trojan.Crypt.Agent | Hybrid-Analysis | 2021-01-12 20:45:20 | 2021-01-12 20:45:20 | ||
| Trojan.Dropper | Hybrid-Analysis | 2020-12-01 01:45:20 | 2021-01-12 20:15:44 | ||
| Trojan.Generic | Hybrid-Analysis | 2018-08-24 10:30:36 | 2021-01-06 19:00:35 | ||
| Tofsee.T | Hybrid-Analysis | 2020-12-22 18:18:25 | 2020-12-22 18:18:25 | ||
| Tofsee.2bf8ac70 | Hybrid-Analysis | 2020-12-22 18:18:13 | 2020-12-22 18:18:13 | ||
| Trojan.Buzus | Hybrid-Analysis | 2020-12-16 08:30:19 | 2020-12-16 08:30:19 | ||
| Generic.Malware | Hybrid-Analysis | 2018-04-26 17:00:19 | 2020-12-01 02:17:14 | ||
| Gen:Variant.Graftor | Hybrid-Analysis | 2020-06-24 05:45:17 | 2020-06-24 06:30:16 | ||
| Trojan.Zamg | Hybrid-Analysis | 2020-06-24 06:15:44 | 2020-06-24 06:30:14 | ||
| Dropped:Generic.Nymaim.C | Hybrid-Analysis | 2018-09-05 16:30:15 | 2018-09-05 16:30:15 | ||
| banker,retefe | Maltiverse | 2018-01-21 22:55:43 | 2018-01-21 22:55:43 | ||
| cerber,ransomware | Maltiverse | 2018-01-19 01:40:10 | 2018-01-19 01:40:10 |
Tags
cerber ransomware unreliable subdomainIP addresses resolved by this hostname
- 23.103.156.42 (2018-01-19 01:40:11)
- 132.245.1.139 (2013-10-17 00:00:00)
- 132.245.1.155 (2013-10-16 00:00:00)
- 132.245.1.187 (2013-10-15 00:00:00)
- 132.245.1.203 (2013-10-13 00:00:00)
- 132.245.113.194 (2014-12-05 00:00:00)
- 132.245.12.203 (2014-01-24 00:00:00)
- 132.245.13.210 (2014-12-05 00:00:00)
- 132.245.17.34 (2014-11-21 00:00:00)
- 132.245.2.11 (2013-10-16 00:00:00)
- 132.245.2.27 (2013-10-17 00:00:00)
- 132.245.2.59 (2013-10-17 00:00:00)
- 132.245.2.75 (2013-10-17 00:00:00)
- 132.245.21.82 (2014-12-04 00:00:00)
- 132.245.23.242 (2014-12-04 00:00:00)
- 132.245.3.187 (2014-02-12 00:00:00)
- 132.245.6.123 (2014-01-28 00:00:00)
- 132.245.6.139 (2014-01-27 00:00:00)
- 132.245.6.235 (2014-01-31 00:00:00)
- 132.245.81.130 (2014-11-19 00:00:00)
- 132.245.89.139 (2014-01-26 00:00:00)
- 132.245.89.171 (2014-03-02 00:00:00)
- 132.245.92.194 (2014-11-19 00:00:00)
- 157.56.233.251 (2014-02-08 00:00:00)
- 157.56.236.118 (2013-04-01 00:00:00)
- 157.56.237.102 (2013-04-01 00:00:00)
- 157.56.237.242 (2014-10-30 00:00:00)
- 157.56.237.251 (2013-10-17 00:00:00)
- 157.56.238.11 (2013-10-16 00:00:00)
- 157.56.238.43 (2013-10-13 00:00:00)
- 157.56.238.59 (2013-10-16 00:00:00)
- 157.56.242.123 (2014-01-29 00:00:00)
- 157.56.242.187 (2013-10-16 00:00:00)
- 157.56.242.203 (2013-10-17 00:00:00)
- 157.56.242.235 (2013-10-16 00:00:00)
- 157.56.242.251 (2013-10-13 00:00:00)
- 157.56.242.98 (2014-11-21 00:00:00)
- 157.56.243.11 (2014-03-11 00:00:00)
- 192.64.147.142 (2020-10-17 12:58:21)
- 217.26.52.22 (2020-08-02 12:16:55)
- 40.96.32.50 (2016-11-17 00:00:00)
- 40.97.113.210 (2016-11-22 00:00:00)
- 40.97.113.34 (2016-11-21 00:00:00)
- 40.97.116.82 (2020-04-12 22:20:51)
- 40.97.128.194 (2020-04-18 10:37:15)
- 40.97.148.226 (2019-12-13 09:08:15)
- 40.97.153.146 (2020-04-17 18:12:52)
- 40.97.155.26 (2016-11-30 00:00:00)
- 40.97.156.114 (2019-12-13 09:08:16)
- 40.97.160.2 (2020-04-17 18:07:40)
- 40.97.161.50 (2020-04-17 10:50:43)
- 40.97.164.146 (2020-03-23 23:23:06)
- 40.97.166.138 (2016-11-30 00:00:00)
- 40.97.170.154 (2016-11-25 00:00:00)
- 46.183.138.100 (2020-09-09 13:25:15)
- 66.96.149.27 (2020-10-30 12:53:38)
- 52.101.40.26 (2025-03-02 05:29:40)
- 52.101.42.0 (2025-03-02 05:29:40)
- 52.101.11.0 (2025-03-02 05:29:40)
- 52.101.8.49 (2025-03-02 05:29:40)
- 2a01:111:f403:f804::1 (2025-05-10 19:12:30)
- 2a01:111:f403:c92c::3 (2025-05-10 19:12:30)
- 52.101.10.12 (2025-05-10 19:12:30)
- 2a01:111:f403:c902::7 (2025-05-10 19:12:30)
- 2a01:111:f403:c946::3 (2025-05-10 19:12:30)
- 52.101.9.11 (2025-05-10 19:12:30)
- 52.101.194.19 (2025-05-10 19:12:30)
- 52.101.11.13 (2025-05-10 19:12:30)
Whois information
- AS name
- AS8075 Microsoft Corporation
- Domain
- outlook.com
- TLD
- com
- DNSSEC
- ['unsigned']
- Nameservers
- NS1-05.AZURE-DNS.COM, NS2-05.AZURE-DNS.NET, NS3-05.AZURE-DNS.ORG, NS4-05.AZURE-DNS.INFO, ns1-05.azure-dns.com, ns4-05.azure-dns.info, ns2-05.azure-dns.net, ns3-05.azure-dns.org, NS1.MSFT.NET, NS1A.O365FILTERING.COM, NS2.MSFT.NET, NS2A.O365FILTERING.COM, NS3.MSFT.NET, NS4.MSFT.NET, NS4A.O365FILTERING.COM, ns2.msft.net, ns3.msft.net, ns4a.o365filtering.com, ns4.msft.net, ns1.msft.net, ns1a.o365filtering.com, ns2a.o365filtering.com
- Whois server
- whois.markmonitor.com
- Registrant
- MarkMonitor, Inc.
- Address
- One Microsoft Way,
- City
- Redmond
- State
- WA
- Country
- US — United States 🇺🇸
- Contact email
- [email protected], [email protected], [email protected], [email protected]
- Domain created
- 1994-08-18 04:00:00
- Domain expires
- 2025-08-17 04:00:00
- First indexed
- 2018-01-19 01:40:10
- Last updated
- 2025-05-17 20:42:03