mail[.]col-sopportcloud[.]top

Analysis indicates that mail.col-sopportcloud.top is an active phishing domain targeting users of Microsoft 365 services. The domain was registered on May 19, 2026, through NameSilo, LLC, and currently resolves to the IP address 207.174.212.196. Infrastructure analysis reveals the domain uses nameservers ns1.md-7.webhostbox.net and ns2.md-7.webhostbox.net, which are associated with hosting environments frequently exploited for phishing campaigns. As of July 29, 2026, the domain appears on one security blocklist and is actively blocked by PhishDestroy.

VirusTotal reports that 17 out of 91 security vendors flag this domain as malicious, though the specific detection logic and targeted brand are not uniformly labeled across all engines. The domain's naming convention, incorporating 'mail' and 'supportcloud,' suggests an intent to mimic legitimate Microsoft cloud services, though the exact content of the phishing page has not been fully analyzed. No SSL certificate details or HTTP response codes are provided in the available intelligence, limiting assessment of encryption or server behavior.

Defenders should treat this domain as elevated risk and implement blocking at the DNS or network level. Organizations using Microsoft 365 are advised to monitor for credential submission attempts linked to this domain and review logs for connections to 207.174.212.196. Further investigation into the hosting provider and nameserver relationships may reveal additional linked infrastructure.