authsusngwd0c34748dhbdr673hndy73if5revssharepoint[.]cscllccmo[.]com

The domain authsusngwd0c34748dhbdr673hndy73if5revssharepoint.cscllccmo.com was registered on May 19, 2026 through Wild West Domains, LLC and is currently active. DNS resolution points to the IPv4 address 185.15.59.224, and the authoritative name servers are ns1.bdm.microsoftonline.com and ns2.bdm.microsoftonline.com, indicating the use of Microsoft‑owned DNS infrastructure. Google Safe Browsing has flagged the domain for social engineering, and VirusTotal reports that 22 of 91 scanned security vendors classify the host as malicious, confirming a consensus of threat detection across multiple engines.

The domain is listed on at least one public blocklist and has been blocked by the PhishDestroy service, further evidencing its recognition as a phishing vector. Evidence from the supplied intelligence does not include SSL certificate details, HTTP response codes, page titles, or any observed content, leaving the exact lure and credential‑harvesting technique uncertain. Defenders should immediately block outbound connections to 185.15.59.224 and add the full domain to internal DNS deny lists.

Network monitoring should be configured to alert on any DNS queries for *.cscllccmo.com, and email gateways should be updated with the domain as a known malicious sender. Because the domain leverages Microsoft DNS nameservers, additional scrutiny of any internal Microsoft‑related traffic is advisable to detect potential abuse of trusted infrastructure. Continuous re‑evaluation is recommended as further analysis (e.g., page content, SSL fingerprinting) becomes available.