eclipseehrcloud[.]net

The domain eclipseehrcloud.net is a confirmed phishing site engaged in brand impersonation targeting Microsoft. It was designed to deceive users into believing they were interacting with a legitimate Microsoft service, likely for tech-support scam purposes, though no crypto drainer kit was detected. As of the latest verification, eclipseehrcloud.net has been taken offline and is no longer accessible.

Technical analysis shows eclipseehrcloud.net was flagged by 1 of 95 VirusTotal security vendors, including SOCRadar, and appeared on 1 security blocklist (PhishDestroy). The domain was registered through GoDaddy.com, LLC on December 26, 2022, and resolved to the IP address 20.119.8.38, hosted on Microsoft Corporation’s infrastructure (AS8075). The SSL certificate was issued by Microsoft Corporation via Microsoft Azure RSA TLS Issuing CA 08, and the observed page title was 'Microsoft Azure Web App - Error 404'. MX records pointed to eclipseehrcloud-net.mail.protection.outlook.com, and nameservers were ns67.domaincontrol.com and ns68.domaincontrol.com.

Users who may have interacted with eclipseehrcloud.net should immediately change any passwords entered on the site, enable multi-factor authentication on their Microsoft and other critical accounts, and monitor for unauthorized access or fraudulent activity. The domain can be reported to Microsoft’s security team via their abuse portal, as well as to the registrar (GoDaddy) and blocklist providers like PhishDestroy. If financial or crypto assets were involved, contact the relevant platform’s support team for further assistance.