terzor-io-staart[.]pages[.]dev

PhishDestroy analysts flagged terzor-io-staart.pages.dev as an active Microsoft Outlook credential phishing domain. This fraudulent site attempts to trick users into entering their Microsoft account credentials by mimicking the official Outlook login portal. Attackers often leverage stolen credentials to access sensitive emails, documents, or even hijack linked accounts. The domain’s design closely resembles Microsoft’s branding, increasing the risk of successful deception. Users should remain vigilant and avoid entering any login details on untrusted sites.

This domain was flagged after VirusTotal analysis returned zero detections out of 95 security engines, indicating it has not yet been widely recognized as malicious. The site was registered through Cloudflare, Inc. on an unspecified date, and it resolves to IP address 188.114.97.3, which is associated with Cloudflare’s infrastructure. The SSL certificate is issued by Google Trust Services, a legitimate provider, which may further mislead users into trusting the site. Despite its current low detection rate, the domain’s intent remains malicious, as evidenced by its phishing content and impersonation of a major brand.

If you visited terzor-io-staart.pages.dev and entered any credentials, act immediately to secure your Microsoft account. Change your password and enable multi-factor authentication (MFA) if not already configured. Review your account for any unauthorized activity, such as unfamiliar login attempts or email forwarding rules. Consider revoking access for any unfamiliar third-party applications linked to your account. Additionally, scan your device for malware using a reputable antivirus tool, as phishing pages are often part of broader attack chains. Report the domain to Microsoft’s phishing reporting service and your organization’s security team if applicable.