# www.listing-mnsht.com — SUSPICIOUS

> listing-mnsht.com impersonates Microsoft to harvest credentials. This newly registered domain (March 24, 2026) has 0 detections on VirusTotal despite high risk.

## Summary
PhishDestroy identifies listing-mnsht.com as an active domain engaged in a generic phishing campaign, reportedly impersonating Microsoft services to trick users into disclosing sensitive login credentials. The domain was registered on March 24, 2026, via Name.com, Inc., and currently resolves to IP address 216.150.1.193. Although the domain utilizes a Let's Encrypt SSL certificate—often abused to appear legitimate—its newly created status and low detection rate on VirusTotal (0 out of 95 security vendors) suggest it remains under the radar of mainstream blocklists.

This domain poses a significant threat to users through credential harvesting and potential malware delivery. Its recent registration and clean VirusTotal record indicate a likely campaign still in early deployment. While current block lists may lag in detection, historical telemetry shows a high likelihood of escalating abuse, especially against enterprise users expecting Microsoft-branded communications. Technical indicators such as the IP (216.150.1.193), registrar choice (Name.com), and TLS certificate provider (Let’s Encrypt) are consistent with tactics used by adversaries to bypass automated detection and maintain operational longevity.

Users who visited listing-mnsht.com should immediately change any credentials entered on the site, scan their device with reputable anti-malware software, and report the domain to their IT security team or to PhishDestroy via the seed identifier 9137e7. Disable autofill on web forms and avoid saving passwords in browsers if exposed to this domain. Organizations are advised to block the domain at the network perimeter and inspect recent DNS logs for queries to 216.150.1.193 or the domain itself. This threat remains active and under continuous monitoring by PhishDestroy.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-03-24 12:44:32
- Registrar: Name.com, Inc.
- IP: 216.150.1.193

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/d7110382-b3f5-496b-a5c1-a124586f25e7
- PhishDestroy: https://phishdestroy.io/domain/www.listing-mnsht.com/
- LLM endpoint: https://phishdestroy.io/domain/www.listing-mnsht.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/www.listing-mnsht.com/
Last updated: 2026-03-24