oytlook[.]vercel[.]app

PhishDestroy identifies oytlook.vercel.app as a high-risk credential theft phishing domain currently active in the wild. This domain specifically impersonates Microsoft Outlook to harvest user credentials, posing a severe risk to enterprise and personal Microsoft accounts. This domain was flagged by 19 out of 95 security vendors on VirusTotal, indicating widespread detection of its malicious intent. It resolves to IP address 216.198.79.195 and leverages a Google Trust Services SSL certificate for deceptive legitimacy. Registered through Vercel Inc., the domain appears on 1 public security blocklist, including OpenPhish. Despite these red flags, the site remains operationally active, demonstrating the ongoing threat of typosquatting campaigns targeting Microsoft services. Users must immediately avoid interacting with oytlook.vercel.app and report it to their security teams. Enterprises should block this domain at the firewall and DNS level, while individuals should verify email sender addresses before clicking links. If credentials were entered, users must reset passwords immediately and enable multi-factor authentication. Forward any suspicious emails to Microsoft’s phishing reporting address at phish@office365.com.