Total Intercepted Spoofs
20
Lookalike visits the employee left
Loading…
Loading…
Demonstration feed for lookalike hostnames. Filters and the SIEM export stay in this browser.
20
Lookalike visits the employee left
Microsoft 36564% of attempts
Highest share in this view
80%
Warnings where the employee navigated away
9
Workstations that loaded a lookalike hostname
25 of 25 incidents
| Detected Hostname | Mimicked Target | Threat Class | Device ID | Time | Employee Response |
|---|---|---|---|---|---|
| okta-auth-token.com | okta.com | Keyword | ep_win_14c2 | Oct 25, 10:02 UTC | Safely Evaded |
| login-microsoftonline.com | login.microsoftonline.com | Keyword | ep_win_14c2 | Oct 25, 09:41 UTC | Ignored Alert |
| micr0softonline.com | login.microsoftonline.com | Typo | ep_mac_09af | Oct 25, 09:05 UTC | Safely Evaded |
| xn--micrsoft-9va.com | login.microsoftonline.com | Punycode | ep_win_22b8 | Oct 25, 08:22 UTC | Safely Evaded |
| accounts-google.com | accounts.google.com | Keyword | ep_mac_09af | Oct 25, 07:48 UTC | Safely Evaded |
| slack-workspace-login.com | slack.com | Keyword | ep_mac_55e0 | Oct 25, 07:11 UTC | Safely Evaded |
| microsoft-365-login.com | login.microsoftonline.com | Keyword | ep_lnx_03e1 | Oct 25, 06:36 UTC | Safely Evaded |
| rnicrosoftonline.com | login.microsoftonline.com | Typo | ep_win_22b8 | Oct 24, 18:40 UTC | Safely Evaded |
| office365-secure-login.com | login.microsoftonline.com | Keyword | ep_lnx_03e1 | Oct 24, 17:16 UTC | Ignored Alert |
| 0kta.com | okta.com | Typo | ep_mac_55e0 | Oct 24, 16:02 UTC | Safely Evaded |
| micosoftonline.com | login.microsoftonline.com | Typo | ep_win_77d0 | Oct 24, 15:11 UTC | Safely Evaded |
| microsoftonline-auth.com | login.microsoftonline.com | Keyword | ep_mac_11c4 | Oct 24, 13:47 UTC | Safely Evaded |
| goog1e.com | accounts.google.com | Typo | ep_win_22b8 | Oct 24, 12:20 UTC | Safely Evaded |
| xn--microsoft-3ya.com | login.microsoftonline.com | Punycode | ep_win_77d0 | Oct 24, 11:05 UTC | Safely Evaded |
| xn--okta-e1a.com | okta.com | Punycode | ep_win_88f2 | Oct 24, 09:33 UTC | Ignored Alert |
| microsftonline.com | login.microsoftonline.com | Typo | ep_win_14c2 | Oct 24, 08:14 UTC | Safely Evaded |
| login.microsofton1ine.com | login.microsoftonline.com | Typo | ep_win_41aa | Oct 23, 19:28 UTC | Ignored Alert |
| m365-password-reset.com | login.microsoftonline.com | Keyword | ep_mac_09af | Oct 23, 18:06 UTC | Safely Evaded |
| microsoftonline.co | login.microsoftonline.com | Typo | ep_win_14c2 | Oct 23, 16:42 UTC | Safely Evaded |
| secure-microsoft365.com | login.microsoftonline.com | Keyword | ep_lnx_03e1 | Oct 23, 15:19 UTC | Safely Evaded |
| xn--1ogin-9va.com | login.microsoftonline.com | Punycode | ep_win_88f2 | Oct 23, 14:01 UTC | Safely Evaded |
| slak.com | slack.com | Typo | ep_win_41aa | Oct 23, 12:44 UTC | Safely Evaded |
| microsoft365.co | login.microsoftonline.com | Typo | ep_mac_11c4 | Oct 23, 11:22 UTC | Safely Evaded |
| xn--google-8va.com | accounts.google.com | Punycode | ep_win_77d0 | Oct 23, 10:08 UTC | Ignored Alert |
| okta-sso-verify.com | okta.com | Keyword | ep_lnx_03e1 | Oct 23, 08:51 UTC | Safely Evaded |