msolbox[.]pro

PhishDestroy identifies msolbox.pro as a credential-stealing website masquerading as a Microsoft 365 login portal. This domain poses an immediate risk of username and password harvesting. If victims enter their Microsoft 365 credentials, attackers can take over email accounts, steal sensitive files, and launch follow-on phishing campaigns from the compromised inbox. The site’s primary goal is account takeover, which can lead to data breaches, financial loss, or identity theft. We know this site is actively malicious because only 1 out of 95 VirusTotal security vendors detected it at the time of analysis on January 9 2025. The domain uses a Google Trust Services SSL certificate to appear legitimate, and its short operational history suggests it was registered recently to evade long-term reputation filtering. If you visited msolbox.pro, immediately change the password for any Microsoft 365 account you may have entered, enable multi-factor authentication if it is not already active, and scan your device with an updated antivirus tool. Report the domain to your organization’s security team or to Microsoft’s phishing-reporting portal. Do not re-enter credentials on that page. Consider revoking any saved sessions from your Microsoft 365 security dashboard and reviewing recent sign-in logs for suspicious activity.