contact-support-microsoft[.]net

contact-support-microsoft.net was registered through Squarespace Domains II LLC on 11 June 2026. The domain resolves to the IPv4 address 198.185.159.144, an address that currently lacks publicly known association with legitimate services. Within three reputable blocklists—PhishDestroy, MetaMask, and SEAL—the domain is listed as malicious, indicating that multiple security vendors have observed abusive activity.

VirusTotal analysis shows that four of ninety‑one scanners flagged the domain, reinforcing the suspicion of malicious intent. The limited public metadata does not include a retrieved page title, SSL certificate details, or HTTP response codes, so the exact content served by the site remains unverified. However, the combination of a recent registration date, hosting on a single IP address, and inclusion on multiple phishing‑focused blocklists aligns with typical infrastructure patterns used for credential‑harvesting campaigns targeting Microsoft users.

Because the domain is actively listed as a phishing source, defenders should add the fully qualified domain name and its resolving IP to network‑level deny lists, enforce DNS filtering that blocks the identified blocklist entries, and monitor outbound traffic for connections to 198.185.159.144. Continuous re‑scanning with updated VirusTotal engines and periodic WHOIS checks are advised to capture any changes in classification. Until further forensic analysis of the site’s payload is available, the domain should be treated as high‑confidence phishing infrastructure.