officedesknote[.]com

The domain officedesknote.com is currently flagged as a high‑risk generic phishing site. According to the intelligence feed, the domain was registered on 2026‑06‑02 and its status remains active as of the report date 2026‑07‑12. The public page advertises “OfficeDeskNote | Careers & Recruitment”, a branding tactic frequently employed to entice users into credential‑stealing interactions.

Infrastructure analysis shows the domain resolves to the IPv4 address 23.94.170.198, which is geolocated to the United States. Registration details point to Squarespace Domains II LLC as the registrar, and the TLS certificate is issued to officedesknote.com with a “Dis” issuer label. HTTP requests return a 200 status, confirming that the site is serving content without redirection. The domain appears on three independent security blocklists and is actively blocked by PhishDestroy, MetaMask, and SEAL. VirusTotal records a single positive detection out of 95 scanned vendors.

The presence on multiple blocklists and the confirmed 200 response suggest a live phishing infrastructure, yet the low detection rate on VirusTotal indicates limited visibility of the malicious payload or that the phishing components have not yet been captured by scanning engines. The exact credential‑harvesting form, any downstream command‑and‑control endpoints, and the full scope of the phishing campaign remain unknown from the available data.

Defenders should add officedesknote.com to network and endpoint deny lists and enforce TLS inspection to capture any credential submissions. Continuous monitoring of DNS queries for the domain and its resolved IP is advised, as well as periodic re‑scanning on VirusTotal to detect emerging detections. Organizations that use recruitment portals should educate users about unsolicited career‑related communications that reference OfficeDeskNote and encourage verification of any login prompts before providing credentials.