localmedicalmarijuana[.]com

This domain, localmedicalmarijuana.com, is identified as a high-risk brand impersonation threat specifically targeting Microsoft users. Analysis indicates the site masquerades as an Outlook login portal, likely designed to harvest user credentials through deceptive authentication prompts. The fraudulent infrastructure mimics legitimate Microsoft services, exploiting brand recognition to trick victims into entering sensitive account details, which could lead to unauthorized access, data exfiltration, or further compromise of corporate or personal systems. Technical evidence confirms the malicious nature of this domain. The domain was registered on January 17, 2010, through DYNADOT LLC, and currently resolves to the IP address 144.202.27.166. It holds a Gridinsoft trust score of 0/100 and is flagged by Google Safe Browsing for social engineering. VirusTotal reports 16 out of 95 security vendors detecting this domain as malicious, while it appears on two security blocklists. The SSL certificate is issued by GridPane, and the domain has been actively blocked by PhishDestroy and InversionDNS. The page title explicitly displays 'Outlook,' reinforcing its impersonation of Microsoft's email service. Users who have visited localmedicalmarijuana.com or entered credentials on this site should take immediate action. First, reset passwords for any accounts accessed through the domain, prioritizing Microsoft accounts and any linked services. Enable multi-factor authentication (MFA) where available to mitigate unauthorized access. Scan affected devices for malware using updated security tools, as credential theft sites may deploy additional payloads. Monitor accounts for suspicious activity, such as unauthorized logins or transactions, and report the incident to relevant security teams or fraud reporting platforms. If corporate credentials were exposed, notify internal IT or security personnel to assess potential lateral movement risks within the network.