china-microsoft[.]com
Resumo das evidências
Analysis indicates that the domain china-microsoft.com is currently active and operates without an SSL certificate. DNS resolution points to IP 156.241.123.170, which is hosted in Hong Kong by CloudFly Net Inc. An HTTP request returns status code 200, suggesting a live web service. The domain was registered on May 24, 2026 through GoDaddy.com, LLC and carries a Gridinsoft trust score of 0 out of 100. It is listed on three public security blocklists and has been flagged by the PhishDestroy, MetaMask, and SEAL filters. VirusTotal reports that 7 of 91 security vendors have marked the domain as malicious. The site is classified as an impersonation scam targeting Microsoft, aligning with the brand_impersonation threat type. No TLS certificate is present, which reduces transport security and may facilitate credential harvesting. The content of the website has not been publicly analyzed, so the exact malicious payload or credential collection mechanisms remain unknown. Defenders should enforce network‑level blocking of the domain and its resolved IP, incorporate the domain into URL filtering policies, and monitor for any outbound connections to the associated IP address. Continuous re‑evaluation is advised as additional intelligence becomes available.
Data Coverage
Pipeline de resposta a ameaças
Cobertura de listas de bloqueio
10 fontes externas monitoradas · instantâneo de 12/08/2026
Inteligência de Domínios
Detalhes técnicosDNS, nomes TLS e datas
ICANN OVERSIGHT
Credenciamento e contexto RAA
Credenciamento e contexto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Análise do VirusTotal
Você foi afetado por este site?
Se você inseriu credenciais de conta, informações pessoais ou de pagamento, ou baixou um arquivo deste domínio, tome medidas imediatas. Abaixo estão os recursos para ajudá-lo a relatar o incidente e se proteger.
Notifique as autoridades locais
Selecione seu país para obter contactos oficiais do cibercrime ou crie um rascunho de reclamação →.
Verificar qualquer domínio
Análise de ameaças usando lista de bloqueio armazenada, WHOIS, DNS e evidências de verificação pública
Digitalize agoraDenunciar phishing
Envie domínios suspeitos para nosso banco de dados de ameaças — proteja a comunidade
DenunciarFeed de ameaças em tempo real
Relatórios recentes de phishing e alterações de disponibilidade observadas
MonitorarMantenha-se informado, mantenha-se seguro
Monitore ameaças em tempo real ou conteste esta listagem caso acredite que se trate de um falso positivo