rnicrosofonline-356service[.]iceiy[.]com

Analysis of the domain rnicrosofonline-356service.iceiy.com indicates active Microsoft-themed phishing infrastructure as of August 03, 2026. The domain is hosted under iceiy.com, a subdomain provider that has previously been associated with credential harvesting campaigns. It appears on one security blocklist, specifically PhishDestroy, and is flagged by 7 of 91 security vendors on VirusTotal, suggesting detection of malicious or deceptive content. No additional details regarding the hosting provider, autonomous system number (ASN), or SSL certificate issuer are currently available in the supplied intelligence.

The domain name itself contains the substring 'rnicrosoftonline,' a typographical variation of 'Microsoft Online,' which is consistent with phishing tactics designed to deceive users into believing the site is affiliated with Microsoft services. The appended '356service' further implies targeting of Microsoft 365 users, though the exact content of the site has not been analyzed. No page title, brand classification, or phishing kit details were provided in the available data, limiting further attribution of the specific scam type or targeted service. Defenders should treat this domain as an elevated-risk resource.

Given its presence on a security blocklist and detection by multiple antivirus engines, organizations are advised to block traffic to rnicrosofonline-356service.iceiy.com at the network perimeter and monitor for related subdomains under iceiy.com that may emerge. If internal logs indicate user interaction with this domain, credentials or session tokens should be considered compromised and revoked. Further investigation into the hosting infrastructure and registration details may reveal additional linked domains or campaigns.