microsoft-passkey[.]com

microsoft-passkey.com is an active brand impersonation site that pretends to be a Microsoft passkey service in order to trick users into entering their credentials or passkeys. The domain specifically targets Microsoft users by using the term 'passkey,' a legitimate feature Microsoft promotes for passwordless authentication. By leveraging Microsoft’s trusted brand, attackers aim to harvest sensitive login information or passkey tokens, which could then be used to hijack accounts, access personal data, or perform further malicious actions on behalf of the victim. This operation is ongoing and represents an elevated risk to users who encounter it.

PhishDestroy identifies this domain as a confirmed phishing scam based on multiple independent security indicators. This domain was flagged by 2 out of 95 security vendors on VirusTotal, indicating limited but meaningful detection. It was created on April 27, 2026, and is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar known for hosting high volumes of low-trust domains. Additionally, the domain resolves to IP address 104.251.180.208, which is linked to suspicious hosting activity and has been blocked by SEAL and MetaMask security systems. These technical markers, combined with its deceptive branding, confirm malicious intent.

If you visited microsoft-passkey.com or entered any credentials or passkeys, immediately change your Microsoft account password and revoke any active sessions or tokens associated with the account from a known-safe device. Use Microsoft’s official account security portal to review recent sign-ins and remove unrecognized sessions. Enable multi-factor authentication (MFA) using an authenticator app or hardware key, not SMS. If you re-used the same password elsewhere, update those accounts immediately with strong, unique passwords. Scan your device with updated antivirus software to check for malware. Report the site to Microsoft via their abuse portal and warn others. Avoid visiting or clicking links from unsolicited emails, messages, or ads claiming to offer Microsoft passkeys or login portals.