mmicrosoft[.]co

The domain mmicrosoft.co was registered on May 19, 2026 through GoDaddy.com, LLC and is authoritative on NS59.DOMAINCONTROL.COM and NS60.DOMAINCONTROL.COM. DNS resolution points to IP address 76.223.105.230, an AWS Global Accelerator endpoint physically located in the United States. An HTTP request returns status code 200 and the site presents a TLS certificate issued by Starfield Technologies, Inc. under the Starfield Secure Certificate Authority – G2, confirming a valid encryption layer but offering no assurance of legitimacy. VirusTotal records show that 2 of 92 security vendors have flagged the domain, and AlienVault OTX includes it in a single threat‑intelligence pulse. The domain appears on three public blocklists and is actively blocked by PhishDestroy, MetaMask, and SEAL, while Gridinsoft assigns a trust score of 0 out of 100. The page title mirrors the domain name, the brand target is Microsoft, and the activity is classified as credential phishing, yet the specific content of the site has not been publicly disclosed, leaving the exact phishing workflow uncertain. Defenders should add mmicrosoft.co to DNS and web‑proxy blocklists, monitor outbound traffic to 76.223.105.230, and incorporate the domain into URL‑filtering policies. Any credentials submitted to this host should be treated as compromised, prompting immediate password resets and user notification.