msdgroup[.]com[.]au

The domain msdgroup.com.au has been identified as a brand impersonation site specifically designed to mimic Rackspace's webmail login page. Currently offline, this domain posed a significant threat by attempting to harvest credentials from unsuspecting users. The site's page title, 'Rackspace Webmail: Hosted Email for Business', was a clear attempt to deceive visitors into believing they were accessing a legitimate Rackspace service.

Further investigation reveals that msdgroup.com.au was flagged by 18 of 95 VirusTotal security vendors, indicating broad recognition of its malicious nature. The domain was registered through Web Address Registration Pty Ltd and resolved to IP address 203.170.84.9. Created on February 21, 2026, it appeared on one security blocklist and utilized an SSL certificate issued by Let's Encrypt (R12), which is commonly abused by malicious actors due to its free and automated issuance. Risk assessment places this domain at an elevated level due to its targeted impersonation of a well-known brand and its potential to cause credential theft.

Despite being taken offline, users should remain vigilant against similar threats. PhishDestroy recommends verifying the authenticity of any unexpected login prompts, especially those requesting credentials for email or cloud services. Always navigate directly to the official website by typing the URL into the browser rather than clicking links in emails. If you have already entered credentials on this or similar sites, change your passwords immediately and enable multi-factor authentication. Report any suspicious domains to relevant authorities or security teams to help prevent future attacks.