netwirkmypico[.]iceiy[.]com

This domain, netwirkmypico.iceiy.com, is identified as a confirmed credential phishing site designed to impersonate Microsoft account login portals. Analysis of the page title, 'Iniciar sesión en tu cuenta Microsoft,' confirms the intent to deceive users into submitting sensitive credentials by mimicking legitimate Microsoft authentication pages. The infrastructure exhibits classic traits of brand impersonation, with no evidence of cryptocurrency drainer functionality but a clear focus on harvesting login details for subsequent unauthorized access or identity theft. Infrastructure analysis reveals multiple technical indicators corroborating the malicious classification. The domain resolves to the IP address 185.27.134.209, hosted in Great Britain under I FastNet LTD, and was registered on December 06, 2020, through Porkbun LLC. Security vendor detections on VirusTotal stand at 20 out of 95, indicating a moderate but consistent level of consensus regarding its malicious nature. The domain appears on one security blocklist and was previously blocked by PhishDestroy. The SSL certificate is issued by ZeroSSL, specifically the ZeroSSL ECC Domain Secure Site CA, which, while providing encryption, does not mitigate the inherent risk of the phishing content. As of the latest assessment, netwirkmypico.iceiy.com has been taken offline, reducing immediate exposure to end users. However, the elevated risk level persists due to the domain's historical activity and the potential for re-emergence under similar infrastructure or registrar arrangements. Organizations and individuals are advised to monitor for residual DNS caching, implement strict blocklisting of the domain and associated IP, and conduct retrospective log analysis to identify prior interaction. Users who may have entered credentials on this site should immediately reset passwords and enable multi-factor authentication on all associated accounts to mitigate potential compromise.