microsoftxnxnxn[.]framer[.]wiki

The website microsoftxnxnxn.framer.wiki was designed to impersonate the Microsoft brand as a tech support scam. The page title was set to "Microsoft," but the site is a fraudulent operation posing as official technical support. This type of threat aims to trick users into believing they are contacting legitimate Microsoft support, potentially leading to unauthorized remote access, credential theft, or payment for unnecessary services.

Technical analysis reveals that the site was flagged by 19 out of 95 VirusTotal vendors, indicating broad detection as malicious. It was identified by security vendors ADMINUSLabs, alphaMountain.ai, Cluster25, CRDF, and CyRadar, and appeared on one blocklist. The domain was registered through CSC Corporate Domains, Inc. and created on 2026-02-21, hosted on IP address 52.223.52.2 in the United States, assigned to AS16509 Amazon.com, Inc. The site used an SSL certificate from Let's Encrypt (type E8) and nameservers from Amazon Web Services (ns-1185.awsdns-20.org, ns-1827.awsdns-36.co.uk, ns-423.awsdns-52.com, ns-772.awsdns).

As of the latest check, the site is offline, reducing the immediate threat to users. However, the domain remains registered and could be reactivated. The risk level is high due to the impersonation of a major brand and the confirmed malicious detections. Users should avoid visiting the domain and report any related phishing attempts.