Phishing detection: helpsecurity-microsoft.com

Microsoft
http://helpsecurity-microsoft.com Access site
Screenshot
Screenshot of helpsecurity-microsoft.com
Investigate
Domain helpsecurity-microsoft.com0 CT hosts on apex
urlscan page.domain VirusTotal Whois
IP 198.185.159.144
urlscan page.ip VirusTotal ipinfo Greynoise
URL http://helpsecurity-microsoft.com
urlscan Wayback archive.today
Cert -
crt.sh Censys Google CT
Phishunt analysis Beta
24 low suspicionheuristic risk score · not a probability
Keyword matchHigh entropyTweetFeed
17 signals fired · detector v2.0.0
AI analysis AIBeta
Tech support scam

Impersonates Microsoft support using a domain combining help, security, and the brand name. Hosted on Squarespace and flagged by TweetFeed, with no outlinks to legitimate Microsoft content, indicating a tech support scam or credential harvesting page.

TweetFeedKeyword matchNo brand links
AI-generated from stored detector signals - the AI never visited the site. · 2026-07-28 · confidence 68%
Domain & Network
Whois
Registrar Squarespace Domains II LLC
Network
IP 198.185.159.144
Country United StatesUnited States
Hosting Squarespace, Inc.
ASN AS53831
TLS Cert -
External detection TweetFeed
CleanGoogle Safe Browsing · OpenPhish · PhishTank · urlscan.io
Related infrastructure Betasuspected links from shared infrastructure, not attribution
Suspected cluster #412 · 4 indicators · confidence Medium · targets: Coinbase, Microsoft
securityhelp-microsoft.com 62 same nameservers similar name registered together same registrar same favicon same screenshot
active 2026-07-27
securedsupport-coinbase.com 46 same IP same registrar same favicon same screenshot
active 2026-07-07
security-help-microsoft.com 40 registered together same registrar same favicon same screenshot
active 2026-07-27
xfinitywindowfilms.com 29 same IP same favicon
active 2026-08-13
help--coinbase.com 29 same registrar same favicon same screenshot
active 2026-05-29
Top 5 of 8 related · rebuilt daily · corr-1.2.0 · related infrastructure API
Campaign
This detection belongs to suspected cluster 1dedcfa35d5a (4 members total)
Report this phishing
Network / ASN Squarespace, Inc.
abuse@squarespace.com
Registrar Squarespace Domains II LLC
registrar-abuse@squarespace.com
Brand owner Microsoft
phish@office365.microsoft.com Web form
Submit to blocklists
Google Safe Browsing Microsoft SmartScreen APWG PhishTank
Not phishing? Dispute this detection

Tracked from 2026-07-27 16:03 UTC  ·  Last refreshed 2026-08-21 01:30 UTC