cvprojectsharedocs[.]top

This domain, cvprojectsharedocs.top, is identified as a brand impersonation threat targeting Microsoft. The page title, 'Microsoft Security Verification,' suggests an attempt to deceive users into believing the site is an official Microsoft security portal. No specific drainer kit or cryptocurrency-related payload was confirmed, but the domain aligns with phishing campaigns designed to harvest credentials or propagate malware under the guise of legitimate Microsoft services.

Technical indicators confirm elevated risk: the domain is flagged by 19 out of 95 security vendors on VirusTotal, appears on one security blocklist, and was registered through NameSilo, LLC on April 9, 2026. It resolves to IP address 80.77.25.133, hosted by servinga GmbH in Estonia. The SSL certificate is issued by Let's Encrypt (R13), a common tactic to lend false legitimacy. Despite its creation date being in the future (April 2026), this is likely a data entry anomaly; domain registration records typically reflect current or past dates. No Google Safe Browsing (GSB) entries were reported at the time of analysis.

As of the latest assessment, cvprojectsharedocs.top has been taken offline, reducing immediate exposure. However, residual risk remains due to potential re-registration or migration of the phishing infrastructure to new domains. Organizations are advised to block the domain and associated IP (80.77.25.133) at the perimeter, monitor for credential reuse attempts, and educate users on recognizing brand impersonation tactics. Security teams should review logs for prior connections to the domain and investigate any correlated authentication anomalies.