microsoftliveupdate[.]online

microsoftliveupdate.online is a phishing domain that impersonates Microsoft. Despite being taken down, it was flagged by 1 out of 91 vendors on VirusTotal and listed on three public blocklists, including PhishDestroy, MetaMask, and SEAL. The domain was registered with GoDaddy.com, LLC and hosted on an Amazon IP address in the US.

The site utilized an SSL certificate from Starfield Technologies, indicating a level of sophistication in its setup. It was first detected by PhishDestroy just two days after its creation on June 19, 2026. The rapid detection highlights the effectiveness of PhishDestroy's early warning systems, which can identify threats before they propagate through antivirus databases.

With a platform risk score of 88 out of 100, the domain posed a significant threat while active. The low abuse score of 14 out of 100 suggests limited reporting activity, possibly due to its short lifespan. This case underscores the importance of timely detection and intervention in mitigating phishing threats, particularly those targeting widely trusted brands like Microsoft.