xetyuiomnxcewat[.]vercel[.]app

This domain is flagged as a high-risk credential harvesting phishing site specifically designed to impersonate Microsoft login portals. Analysis indicates the infrastructure is actively targeting users with fraudulent authentication pages to capture sensitive account credentials, including usernames, passwords, and multi-factor authentication tokens. Infrastructure analysis reveals the domain xetyuiomnxcewat.vercel.app was registered on June 08, 2026, through Vercel’s hosting platform. The domain is currently active and has been detected by 21 out of 95 security vendors on VirusTotal, with additional flags from Google Safe Browsing and one security blocklist. The domain is also blocked by PhishDestroy, confirming its malicious classification. No legitimate SSL certificates or historical WHOIS records provide credibility, and the domain lacks any association with Microsoft’s official infrastructure. Mitigation requires immediate blocking of the domain at the network perimeter and endpoint levels. Security teams should deploy URL filtering rules to prevent access and configure email security gateways to quarantine any messages containing this domain. Users who may have interacted with the site should be instructed to reset their credentials via Microsoft’s official password recovery portal and enable phishing-resistant multi-factor authentication. Monitoring for anomalous authentication attempts from the same IP ranges associated with this domain is recommended to detect potential account takeovers.