If you've stumbled across gc4-excel-collab.gov.online.office365.us, you're probably wondering what it is. The URL suggests it's part of a Microsoft Office 365 collaboration setup, possibly for a government entity. The site is hosted on Microsoft's own servers and uses a certificate issued by Microsoft — both signs that point to a legitimate Microsoft tenant. However, the page itself returns a 404 error, meaning there's nothing to see. There's no contact information, no about page, no privacy policy, and no record of the domain in the Wayback Machine. For a service that's supposed to be a working collaboration tool, that's very unusual. Most legitimate Microsoft 365 tenants have login pages, support documentation, or at least a redirect. Here, the complete lack of transparency and the hidden domain registration make it hard to rule out that this could be a misconfigured or abandoned setup. If you received this link in an email or message, don't click further or provide any credentials. Your safest bet is to confirm the link directly with the organization that supposedly sent it. For now, the data says: use caution, and don't assume it's safe just because it's on Microsoft's network.
Not sure — double-check gc4-excel-collab.gov.online.office365.us first
In plain English
This site is a mixed bag: it's hosted on Microsoft's infrastructure with a Microsoft-issued certificate, which suggests it may be a legitimate Office 365 service endpoint. But the domain returns a 404 error, has no WHOIS data, no contact info, and no web history. That makes it impossible to confirm who owns it or what it's supposed to do. If you came across this link, treat it as a dead end — don't enter any personal information or try to interact with it until you can verify the source through official channels.
Where the score comes from
Solid SSL setup with a Microsoft-issued certificate and modern TLS. The site is not serving malicious content, and no blacklists or Safe Browsing flags are present.
The domain's WHOIS data is completely hidden, and the site is very new with no archive history. While the certificate and hosting point to Microsoft, the ownership remains opaque.
No blacklists or external threats, but the site has no web presence, no reviews, and no Wayback Machine history. It's essentially invisible to the internet.
The homepage returns a 404 error, and there is no contact info, about page, or social media links. The site gives visitors no way to verify who runs it.
No privacy policy, terms of service, or legal disclosures are present. For a site that appears to be a service endpoint, this is a notable gap, though the site is inactive.
Hosted on Microsoft's own network with fast load times and a valid certificate, but the site lacks basic security headers and DNSSEC. The infrastructure is reputable but minimally configured.
What we checked
Run this site? Show your score.
Add a trust badge so visitors can see your live score for themselves.
Get your badge →