ms-tray[.]top

The domain ms-tray.top has been flagged as a high-risk phishing site, potentially involved in fake login attempts. The threat level associated with this domain is notably high due to its classification as generic phishing, which could involve brand impersonation or harvesting user credentials. This domain was created on June 26, 2026, which suggests it is relatively new and could be part of a broader phishing campaign.

Technical analysis of ms-tray.top reveals significant indicators of malicious activity. The domain is flagged by 11 out of 95 security vendors on a prominent threat intelligence platform. Additionally, it is registered through GMO Internet Inc, a known registrar. The domain resolves to the IP address 160.16.200.77 and is included in four threat intelligence pulses on AlienVault OTX. Furthermore, the SSL certificate for this domain is a sinkhole, indicating potential interception of traffic or evidence of past malicious activity. At this time, the domain's status on Google's Safe Browsing (GSB) and its presence on other blocklists are not provided.

As of the current assessment, ms-tray.top remains active. This ongoing status suggests an urgent need for response actions such as blocking the domain at network perimeters and informing affected users to remain vigilant against potential phishing attempts. Monitoring should continue to assess emerging threats related to this domain. Users and organizations are advised to employ security best practices, including multi-factor authentication and regular training on identifying phishing threats, to mitigate any remaining risks associated with ms-tray.top.