ms-call.online

The domain appears on three security blocklists, including PhishDestroy, MetaMask, and SEAL, which classify it as malicious. These listings provide concrete evidence of suspicious activity, though the specific phishing kit or targeted brand remains unconfirmed in available data. The domain name itself suggests an attempt to impersonate Microsoft support channels, a tactic frequently used to deceive users into disclosing credentials or installing malware. No SSL certificate details, HTTP response codes, or page content analysis are currently available, limiting further assessment of its operational status or technical sophistication.

Defenders should treat ms-call.online as an active threat. Network-level blocking is recommended based on its presence in multiple blocklists and its recent registration, which aligns with patterns observed in short-lived phishing campaigns. Organizations using Microsoft services should monitor for references to this domain in logs or user reports, as it may be leveraged in credential harvesting or tech-support scams. Given its high-risk classification and ongoing activity, continued vigilance and proactive mitigation are advised.