3659euro[.]cc

This domain is flagged as a high-risk phishing site designed to harvest Microsoft 365 credentials. The page displays a Chinese-language title '验证' (translation: 'Verification'), suggesting a fraudulent login prompt intended to deceive users into submitting their account details. The site mimics legitimate Microsoft authentication flows, increasing the likelihood of successful credential theft for corporate or personal accounts. Analysis indicates the domain was registered on June 14, 2024, through DYNADOT LLC, a registrar frequently abused for malicious infrastructure. It currently resolves to IP address 20.24.107.179, hosted on a cloud provider known for transient phishing campaigns. VirusTotal detection shows 18 out of 95 security vendors have flagged this domain as malicious, with classifications including 'phishing' and 'credential theft.' The SSL certificate issued by Let's Encrypt provides HTTPS encryption, further lending false legitimacy to the site. If a user has visited 3659euro.cc or entered credentials on this domain, immediate action is required. First, revoke any active sessions on the affected Microsoft 365 account and reset the password using a separate, trusted device. Enable multi-factor authentication if not already active. Scan the device used to access the site for malware, as phishing pages may deploy additional payloads. Report the incident to internal security teams or the appropriate IT support channel. Monitor the account for unauthorized access or suspicious activity, including unusual login locations or unexpected password reset emails.