# microslop.help — SUSPICIOUS

> PhishDestroy identifies microslop.help as a KreuzerTec-themed tech support scam page. VirusTotal score 0/95. Check the full report.

## Summary
PhishDestroy identifies microslop.help as a live phishing page impersonating KreuzerTec technical support, hosting a deceptive “Kontakt” form to harvest credentials and payment data from unsuspecting victims. The page is delivered via a spoofed tech-support theme that mimics legitimate contact workflows, suggesting the operators are running a drainer kit tailored to mimic KreuzerTec branding. Registrant details remain cloaked behind Spaceship privacy, reinforcing the likelihood of malicious intent.  This domain resolves to IP 15.197.162.184 and was created on March 20, 2026—an unusually recent date that aligns with the observed uptick in tech-support themed phishing campaigns. VirusTotal currently shows 0 detections out of 95 engines, indicating the page is still under the radar. Google Safe Browsing has not yet blacklisted the domain, and it appears on only a single third-party blocklist curated by SEAL. The SSL certificate is valid and issued by Let’s Encrypt, likely to lend superficial legitimacy to the landing page.  The domain is currently active and under investigation by PhishDestroy. Immediate defensive responses include SEAL blocklisting and continued monitoring for payload delivery and additional infrastructure pivots. While VT score remains low, the presence of a spoofed tech-support form and fresh registration date keeps the residual risk classified as active and escalating until decisive takedown actions are completed.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)
- Page title: Kontakt — KreuzerTec

## Domain Intelligence
- Registered: 2026-03-20 18:24:33
- Registrar: Spaceship, Inc.
- IP: 15.197.162.184

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["SEAL"]

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/domains/microslop.help
- PhishDestroy: https://phishdestroy.io/domain/microslop.help/
- LLM endpoint: https://phishdestroy.io/domain/microslop.help/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/microslop.help/
Last updated: 2026-04-02