microsoft-clone-five[.]vercel[.]app

The domain microsoft-clone-five.vercel.app is actively hosting a brand‑impersonation site that claims to be the Microsoft Official Homepage. The site was registered on March 04, 2026 through Vercel Inc. and resolves to IP 64.29.17.195, an address owned by AS16509 Amazon.com, Inc. in the United States. Technical fingerprints show the use of Vercel hosting and HTTP Strict Transport Security (HSTS); the TLS certificate is issued by Google Trust Services under the WR1 label. The page title returned by the server is "Microsoft Official Homepage," matching the declared brand target of Microsoft and the reported scam type of a tech‑support scam. Threat intelligence sources indicate the domain is blocked by PhishDestroy and appears on one security blocklist. VirusTotal analysis shows that 20 of 94 scanned security vendors flagged the domain, while reputational services assign a Scamadviser trust score of 1/100 and a Gridinsoft score of 0/100, confirming a high likelihood of malicious intent. The infrastructure is currently live (HTTP 200) and remains active as of the report date. Defenders should add the domain and its resolving IP to network and endpoint blocklists, enforce outbound filtering for connections to the host, and educate users about unsolicited Microsoft‑related tech‑support calls. Continuous monitoring of the domain’s DNS and any related subdomains is advised, as the adversary may pivot to additional infrastructure.