office[.]motor-ed[.]com

The domain office.motor-ed.com has been identified as a brand impersonation threat specifically targeting Microsoft. As of the latest analysis, the domain is currently offline. It was primarily used to impersonate Microsoft's Office 365, as indicated by the page title found during investigations.

This domain was flagged by 20 out of 95 security vendors on VirusTotal, highlighting a significant detection rate. Registered through Tucows Domains Inc., the domain was created on July 23, 2008, and resolved to the IP address 190.180.145.98, located in Ireland under AS40092 HostPapa. The domain appears on two security blocklists, namely PhishDestroy and PhishingDB. Additionally, the SSL certificate issued was a Let's Encrypt R12, which is commonly used in phishing sites due to its ease of access.

Given the domain status is currently offline, it poses no immediate threat. However, continuous monitoring of similar domains is recommended. Organizations are advised to update their blocklists and use comprehensive security measures to detect and prevent access to similar sites. Ensuring user awareness through training about identifying phishing attempts, especially those impersonating known brands like Microsoft, remains crucial in mitigating such threats.