estatex[.]link

Analysis of estatex.link indicates a fraudulent domain impersonating Microsoft, classified as a fake airdrop scam. The domain was registered on June 12, 2025, through Web Commerce Communications Limited and resolved to IP address 198.54.132.28, hosted by tzulo, inc. (AS11878) in Canada. Infrastructure review reveals a single nameserver configuration and the absence of an SSL certificate, both atypical for legitimate corporate domains.

The page title '1 new message' suggests an attempt to lure victims with fabricated notifications, a common tactic in phishing campaigns targeting brand users. As of July 24, 2026, the domain is offline, though its prior activity is confirmed by two security blocklists (PhishDestroy and ScamSniffer) and a detection by three of 95 security vendors on VirusTotal. The domain holds a Gridinsoft trust score of 0/100, reinforcing its malicious classification.

While the exact content of the site remains unanalyzed, the available indicators—registration details, hosting provider, blocklist status, and vendor detections—collectively point to a deliberate impersonation scheme. Defenders should treat estatex.link as a confirmed phishing domain, block its resolution at network and endpoint levels, and monitor for related infrastructure reuse under new domains. No evidence suggests this domain is affiliated with Microsoft or authorized to distribute airdrops or notifications.