microsoft-clone[.]vercel[.]app

This domain, microsoft-clone.vercel.app, poses a high-risk credential harvesting threat by impersonating Microsoft's official branding. The site displays a fraudulent login interface designed to trick users into submitting their Microsoft account credentials, which are then captured by threat actors for unauthorized access, financial fraud, or further phishing campaigns. The page title explicitly reads 'Microsoft Official Homepage,' reinforcing the deception through visual and textual mimicry of legitimate Microsoft properties. Analysis indicates this domain was registered through Tucows Domains Inc. on February 21, 2026, and is currently hosted on IP address 216.198.79.195 under Amazon.com, Inc.'s AS16509. The SSL certificate is issued by Google Trust Services, providing a false sense of security. Detection engines on VirusTotal flag this domain as malicious, with 19 out of 95 security vendors identifying it as a phishing threat. Additionally, the domain appears on one security blocklist, though it remains active and unmitigated at the time of this report. Users who have visited microsoft-clone.vercel.app should immediately cease all interaction with the site. If credentials were entered, reset Microsoft account passwords using a trusted device and enable multi-factor authentication. Review recent account activity for unauthorized access or transactions. Monitor linked accounts, such as email or financial services, for suspicious behavior. Report the incident to relevant security teams and consider notifying contacts to prevent secondary phishing attempts. Avoid clicking on links from unverified sources and verify domain authenticity before entering sensitive information.