cloudminestar[.]com

cloudminestar.com is a recently activated Microsoft 365 phishing domain designed to steal corporate or personal login credentials. The site mimics a familiar cloud-login interface to trick users into entering their Microsoft 365 username and password, which are then harvested by the attackers. Once credentials are captured, threat actors can access email accounts, sensitive documents, and other connected services, leading to data theft, financial fraud, or follow-on attacks against colleagues or contacts. PhishDestroy’s investigation reveals this domain was registered on September 25, 2024, through Dynadot Inc. and resolves to IP address 163.61.188.7. VirusTotal shows only 1 out of 95 security vendors currently flags the domain, indicating low detection despite active abuse. The domain uses a valid Let’s Encrypt SSL certificate, which may increase trust perception and reduce suspicion among users. The combination of a recent registration, low detection rate, and legitimate SSL infrastructure suggests this is part of a fast-moving phishing campaign targeting Microsoft cloud users. If you visited cloudminestar.com or entered any login details: change your Microsoft 365 password immediately using a known-safe device and network. Enable multi-factor authentication (MFA) if not already active. Scan your device for malware with trusted security software. Report the incident to your IT or security team and warn colleagues to avoid the domain. Never reuse the same password across services and monitor your accounts for unusual activity.