MALICIOUS — HIGH
Phishing- und Sicherheitsprüfung für microsoft-invoicing.com
microsoft-invoicing[.]
The domain microsoft-invoicing.com is associated with brand impersonation, specifically targeting Microsoft.
- VirusTotal
- 2/94
- Blocklists
- 2 · MetaMask, SEAL
- Verfügbarkeit
- Inhalt nicht verfügbar · HTTP 502
Do not enter credentials, seed phrases, payment details, or personal information on this domain.
Jump to section
microsoft-invoicing.com — Inhalt nicht verfügbar (HTTP 502). Markenidentität: Microsoft; Betrugstyp: Tech Support Scam. Zusammenfassung der Beweislage: VirusTotal 2/94 (Gridinsoft, SOCRadar); 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 66/100. Registrar: One.com A/S.
Die ausführliche Analyse von PhishDestroy AI bleibt auf Englisch, damit der ursprüngliche forensische Bericht unverändert bleibt.
Evidence Analysis
The domain microsoft-invoicing.com is associated with brand impersonation, specifically targeting Microsoft. This domain is classified as a phishing scam, posing an elevated risk to users who may encounter it. Currently, the site has been taken offline, indicating action has been taken against its malicious activities. Users who inquire whether microsoft-invoicing.com is safe or a scam should be aware of its impersonation tactics and the elevated threat it poses.
Technical indicators show that microsoft-invoicing.com was flagged by 2 of 95 security vendors on VirusTotal, including Gridinsoft and SOCRadar. The domain was registered through One.com A/S on March 22, 2026, and resolves to the IP address 46.30.211.38 located in Denmark. It appears on 3 security blocklists: PhishDestroy, MetaMask, and SEAL. The site lacks an SSL certificate, and its nameservers are ns01.one.com and ns02.one.com.
Users who suspect they have interacted with microsoft-invoicing.com should take immediate safety steps. If credentials were potentially compromised, it is advised to change passwords, enable two-factor authentication, and monitor accounts for fraudulent activity. Reporting suspicious activities related to this domain can be done through platforms that track phishing sites, such as PhishDestroy or other security services that have flagged it. Taking these precautions can mitigate the risk of further exposure to phishing scams.
Stored source results
Recorded verdicts and infrastructure observations for this domain.
Datenabdeckung12 recorded checks
Erkenntnisse zur Netzwerksicherheit
Pipeline zur Reaktion auf Sicherheitsbedrohungen
Status der öffentlichen Sperrliste
Gespeicherte Aufnahme
Domain-Intelligenz
Technische DetailsDNS, SSL-SANs, Zeitstempel
ICANN OVERSIGHT
Akkreditierung und RAA-Kontext
Akkreditierung und RAA-Kontext
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
VirusTotal-Analyse
Nachweise und externe BerichteIndependent lookups and source reports
PD-20260320-769626 Recipient: abuse@one.com Victim safety and official reportingImmediate actions and verified reporting channels
Wenn Sie Kontoanmeldeinformationen, persönliche oder Zahlungsinformationen eingegeben oder eine Datei von dieser Domain heruntergeladen haben, ergreifen Sie sofort Maßnahmen. Nachfolgend finden Sie Ressourcen, die Ihnen helfen, den Vorfall zu melden und sich zu schützen.
Melden Sie sich bei Ihren örtlichen Behörden
Wählen Sie Ihr Land aus, um Offizielle Kontakte im Bereich Cyberkriminalität oder einen Beschwerdeentwurf erstellen → zu erhalten.