icy-mud-0f8137210[.]7[.]azurestaticapps[.]net

This domain, icy-mud-0f8137210.7.azurestaticapps.net, is actively hosting a generic phishing page designed to trick users into entering sensitive information, such as login credentials. The site masquerades as a legitimate Microsoft-branded login portal, likely to harvest usernames and passwords. The threat level is high because the domain remains active and is hosted on Azure Static Web Apps, which can bypass some traditional security filters due to its association with a trusted cloud provider.

Technical analysis confirms the phishing nature of this site. VirusTotal reports that 3 out of 95 security vendors flagged the domain as malicious, indicating moderate but credible detection. The domain resolves to IP 9.163.40.246, and its SSL certificate is issued to Microsoft Corporation, which is a common tactic to appear legitimate. The domain was created recently and is registered under Microsoft's corporate registrar, but this does not guarantee authenticity—attackers frequently abuse Azure services for hosting phishing kits.

If you visited this site, do not enter any information. Immediately change passwords for any accounts you may have used and enable two-factor authentication where available. Run a full antivirus scan on your device to check for any downloaded payloads. Monitor your accounts for unauthorized activity and report the domain to your cybersecurity team or relevant authorities. Avoid interacting with similar URLs containing random strings in the Azure static apps subdomain.