Microsoft this week trumpeted the launch of Microsoft 365 Copilot Search with lofty promises and slick mock-ups, but the domain plastered all over them didn't belong to the corporation.

The tech giant dropped a [1]blog on Wednesday touting Copilot Search's escape from preview and entry into general availability (as long as your org's paid up for a Copilot license, of course), in which it promises that the AI tool will trawl your emails, files, and even third-party apps to spit out context-aware results and handy summaries.

But while Microsoft's marketing was polished, one small detail stood out. As spotted by an eagle-eyed Reg reader, the flashy Copilot mock-ups used in the blog post feature the URL "m365.com" – a domain Microsoft didn't even own.

[2]

The domain is currently up for sale, and a quick WHOIS search showed it's managed by eName Technology Co. Ltd, a Chinese registrar with no known ties to Microsoft. The domain has been active since 2005, according to the listing, long before Microsoft 365 branding was even a thing.

[3]

[4]

In contrast, official Microsoft domains such as "microsoft.com" and "office365.com" are locked down through corporate registrar MarkMonitor, which handles domains for many of the world's largest companies.

[5]Microsoft-owned GitHub: Open source needs funding. Ya think?

[6]50 years ago, Gates and Allen made the deal that launched Microsoft

[7]Nothing to see here: Brave browser blocks privacy-busting Microsoft Recall

[8]Copilot Vision on Windows 11 sends data to Microsoft servers

That made m365.com a curious choice to showcase in official blog materials, especially for a company that's spent years preaching about trust, security, and responsible AI.

So why was Microsoft trotting out mock‑ups with a domain it doesn't own? Perhaps it's an honest mistake, or a placeholder that slipped through approvals. The Register was quick to quiz Microsoft about the domain snafu, but it refused to comment.

We're led to believe it was a design error that has now been corrected.

[9]

m365.com didn't point to anything suspicious when we first looked; it just displayed an empty page offering the URL for sale. However, with Microsoft previously showcasing the domain on its official blog, and with a suggested price of ¥200 (a mere $28), it presented a chance to an opportunistic grifter to step in and give it a more sinister makeover.

Looks like even a trillion-dollar tech behemoth can trip over basic domain hygiene. ®

Get our [10]Tech Resources



[1] https://learn.microsoft.com/en-us/copilot/microsoft-365/microsoft-365-copilot-search

[2] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_onprem/networks&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2aIZNLhQsUo37S8glt1vbvwAAAMY&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0

[3] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_onprem/networks&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44aIZNLhQsUo37S8glt1vbvwAAAMY&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0

[4] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_onprem/networks&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33aIZNLhQsUo37S8glt1vbvwAAAMY&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0

[5] https://www.theregister.com/2025/07/24/microsoftowned_github_says_open_source/

[6] https://www.theregister.com/2025/07/24/50y_of_gates_allen_mits_basic/

[7] https://www.theregister.com/2025/07/23/brave_browse_block_microsoft_recall/

[8] https://www.theregister.com/2025/07/23/microsoft_copilot_vision/

[9] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_onprem/networks&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44aIZNLhQsUo37S8glt1vbvwAAAMY&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0

[10] https://whitepapers.theregister.com/