haulonlineshopgroup[.]vip

The domain haulonlineshopgroup.vip has been identified as a brand impersonation phishing site specifically targeting Office 365 users. Despite its page title displaying 'Shopee,' the underlying threat is directed at harvesting Office 365 credentials, making it a deceptive and dangerous platform for unsuspecting users. The domain was registered through Gname.com Pte. Ltd. and resolves to IP address 172.67.212.183, which is associated with Cloudflare infrastructure. Created on March 11, 2025, this domain quickly drew attention from security vendors, with VirusTotal reporting that 13 out of 95 security vendors flagged it as malicious. Additionally, AlienVault OTX identified it in one threat intelligence pulse, and it appears on one security blocklist. No SSL certificate was detected, indicating a lack of basic security measures. The domain is now offline, likely taken down following security interventions. However, users should remain vigilant as similar domains may emerge. PhishDestroy recommends that anyone who may have interacted with this domain change their Office 365 passwords immediately and enable multi-factor authentication to mitigate potential compromise. Avoid clicking on unsolicited links and always verify the legitimacy of login pages before entering credentials.