I did some testing. You can type in any domain in front of that domain and it will show you the page in question. Visiting the main page just shows a sad looking page — not very professional if it is legit.
I checked the whois data for that domain and it also looks phishy. It is using a Dynamic DNS service and the registrant address is “One Microsoft Way”. So either its a scam or Microsoft has gotten really sloppy about their proxy service.
I use OpenDNS but they had not yet blocked this domain. I attempted to report it to them and they referred me to phishtank.com who had no record of the domain.
On OpenDNS I was able to block the domain so my home is protected. Consider this a warning.
This could be nasty if the bad domain were entered in the Search Domains field of your networking setup.
The results count for today is only 143,000 hits in Google.
Some of the top hits are “the official website of the Government of the District of Columbia”, “Tennessee Department of Human Services”, Photobucket, and Facebook.
Am I the only one who sees a problem with this?