This domain is actively used to impersonate Microsoft login services to harvest user credentials through obfuscated redirect chains.
- Specialization
- Credential Phishing
- Registered
- Apr 24, 2026
Domain Age
1 Month
Tranco Rank
Unranked
Hosting Provider
Hostinger Internat…
Threat History
Issues Found
This domain is actively used to impersonate Microsoft login services to harvest user credentials through obfuscated redirect chains.
URLert analyzed recent scan activity for starfieldsw.com and found 1 result.
| Status | Target URL | Type | Time |
|---|---|---|---|
| Suspicious | https://login.starfieldsw.com/common/oauth2/v2.0/authoriz... | 1d ago |
Historical and current IP address mappings for this domain.
| IP Address / Hosting | Status | Subdomains | Last Seen |
|---|---|---|---|
Hosted by: Hostinger International Limited (AS47583) | Active | login.starfieldsw.com starfieldsw.com | 1 day ago |
Received a suspicious link? Paste the full link to investigate.
Access this classification data programmatically via our API.
{
"domain": "starfieldsw.com",
"confidence": "high",
"category": {
"purpose": "potentially_malicious",
"specialization": "Credential Phishing"
},
"identity": {
"headline": "Deceptive Microsoft credential harvesting site",
"summary": "This domain is actively used to impersonate Microsoft login services to harvest user credentials through obfuscated redirect chains.",
"operator": null,
"parent_entity": null,
"topics": [
"phishing",
"credential-theft",
"impersonation",
"malicious-redirects"
]
},
"functions": {
"is_ugc_platform": false,
"is_file_host": false,
"is_url_shortener": false,
"is_public_idp": false,
"is_crypto_platform": false,
"allows_user_subdomains": false,
"is_form_builder": false,
"is_document_host": false
},
"facts": {
"registered_date": "2026-04-24T18:59:03Z",
"rank": null,
"hosting_provider": "Hostinger International Limited"
}
}