microsoft-desk[.]com

This domain, microsoft-desk.com, is actively flagged as a high-risk brand impersonation site targeting Microsoft. Registered on May 19, 2026, through Unstoppable Domains Inc., the domain uses nameservers ns1.unstoppabledomains.com and ns2.unstoppabledomains.com, a common infrastructure for blockchain-based domains. Analysis indicates the domain resolves to 34.42.100.71, hosted on Google Cloud in the US-Central1 region, and currently returns an HTTP 302 redirect status, suggesting it may be part of a larger redirection chain or staging phase for malicious activity. The SSL certificate is issued by Let's Encrypt, a legitimate provider, which does not mitigate the risk given the domain's confirmed presence on three security blocklists, including PhishDestroy, MetaMask, and SEAL. The page title, 'microsoft-desk.com | Unstoppable Domains | Unstoppable Domains,' further confirms the intent to impersonate Microsoft, as it mimics official branding while leveraging Unstoppable Domains' infrastructure. The domain has been detected in one AlienVault OTX threat intelligence pulse, indicating prior recognition by security researchers. While VirusTotal shows only one security vendor flagging the domain, this does not diminish the threat, as brand impersonation domains often evade detection until they become active in campaigns. Infrastructure analysis reveals that the domain is still active as of July 12, 2026, and has not been taken down despite its presence on multiple blocklists. Defenders should treat this domain as malicious and implement blocking measures at the DNS or network level. Organizations should also monitor for any outbound connections to 34.42.100.71 or related Unstoppable Domains infrastructure, as this may indicate compromised endpoints attempting to reach the phishing site. Given the domain's registration details and hosting on a major cloud provider, further investigation into its redirection targets or associated malware is recommended.