
- Microsoft routed example.com email traffic to servers operated by Sumitomo Electric
- A test-only domain was treated as a real email provider inside Microsoft systems
- Outlook autodiscover returned valid IMAP and SMTP servers for fake accounts
In January 2026, network researchers noticed unusual behavior inside Microsoft’s infrastructure involving example.com.