site235744746[.]fo[.]team

This domain, site235744746.fo.team, poses a brand impersonation threat specifically targeting Microsoft Outlook users. The site presents a fraudulent Outlook Web App interface designed to harvest credentials from unsuspecting victims. Analysis indicates the page title explicitly mimics legitimate Outlook services, increasing the likelihood of successful deception against enterprise and personal users attempting to access their email accounts. Evidence supporting this assessment includes detection by 18 out of 95 security vendors on VirusTotal, registration through NameCheap, Inc. on April 30, 2021, and presence on two security blocklists (PhishDestroy and PhishingDB). The domain resolved to IP address 91.200.28.220, hosted on autonomous system AS43776 (Relsoft Communications Ltd.) in Russia. The SSL certificate was issued by Let's Encrypt (R13), providing a false sense of security to potential victims. Users who accessed this domain should immediately reset any credentials entered on the site, particularly Outlook or Microsoft account passwords. Monitor associated accounts for unauthorized activity and enable multi-factor authentication where available. Organizations should update their web filtering solutions to block this domain and its associated IP address. The domain's current offline status does not eliminate risk, as infrastructure may be reactivated under different identifiers.