outlook[.]userverifylogin[.]com

Analysis indicates that outlook.userverifylogin.com is an active brand impersonation domain designed to mimic Microsoft account authentication pages. The page title 'Sign in to your Microsoft account' is used to deceive users into believing they are accessing a legitimate login portal. The absence of SSL encryption further increases the risk of credential interception, as any submitted data may be transmitted without secure protection.

Technical indicators confirm malicious classification. The domain is flagged by 24 of 95 VirusTotal security vendors and appears on 1 security blocklist. Registration records show creation on December 09, 2025, and the domain is registered through GoDaddy.com, LLC. It resolves to IP address 44.222.203.160, hosted within infrastructure attributed to Amazon.com, Inc. (AS14618). The domain is currently offline, but prior activity and historical infrastructure evidence remain relevant for threat tracking and attribution.

Users who interacted with this domain should assume any entered credentials were compromised. Immediate actions include resetting affected Microsoft account passwords, enabling multi-factor authentication, reviewing recent login activity, and invalidating active sessions. Security teams should investigate logs for authentication attempts originating from 44.222.203.160 and block associated indicators where applicable. Despite being taken offline, residual risk persists due to potential credential reuse and session hijacking attempts following exposure.