job[.]thebunionhill[.]com

As of July 12, 2026, the domain job.thebunionhill.com is identified as a high-risk brand impersonation threat targeting Microsoft. The domain was created on August 18, 2025, and is still active, as indicated by the HTTP status code 403 (Forbidden) when accessed. This suggests that the site is either under maintenance, deliberately blocking certain visitors, or has been taken down manually but remains accessible in a restricted manner. The Gridinsoft trust score for this domain is 0 out of 100, which is a strong indicator of malicious intent. Additionally, 16 out of 95 security vendors on VirusTotal have flagged this domain as malicious, and it appears on two security blocklists: PhishDestroy and PhishingDB. These factors collectively underscore the domain's high risk level and its potential for tech support scams, which are known to exploit brand trust to manipulate users into divulging sensitive information or making unauthorized payments. The domain is registered through Wild West Domains, LLC, and resolves to the IP address 212.85.29.32, which is located in the United States and is associated with AS47583 Hostinger International Limited. The nameservers listed for this domain, ns1.bdm.microsoftonline.com and ns2.bdm.microsoftonline.com, are not typically associated with the registration of such domains, which may indicate an attempt to create further legitimacy by mimicking Microsoft's infrastructure. Defenders should block access to this domain and monitor network traffic for any attempts to communicate with it. Users should be educated to recognize and avoid tech support scams, especially those impersonating reputable brands like Microsoft. Further investigation into the content and activities of the domain is recommended to identify specific vectors of attack and to enhance defensive measures.