radassociates[.]dev

The domain radassociates.dev has been identified as a high-risk brand impersonation phishing site, specifically targeting users of Microsoft. As of the latest intelligence, the domain is offline, but while active, it hosted a fraudulent login page titled "Sign in to your account" designed to steal credentials. This kind of threat is commonly used in credential harvesting campaigns, where victims are tricked into entering their Microsoft account usernames and passwords.

Technical indicators reveal that radassociates.dev was registered on December 19, 2025, through Gandi SAS, and resolved to IP address 52.165.230.236. It used an SSL certificate from Let's Encrypt (R12) to appear legitimate. VirusTotal analysis shows that 26 out of 95 security vendors flagged this domain as malicious, and it appears on one security blocklist. Additionally, AlienVault OTX recorded the domain in four threat intelligence pulses, indicating active monitoring by the security community. Google Safe Browsing also flagged the site for phishing, confirming the threat.

Given that the domain is now offline, the immediate risk of credential theft from this specific site is reduced. However, users who may have visited the page should change their Microsoft account passwords immediately and enable two-factor authentication if not already active. PhishDestroy recommends that users always verify the authenticity of login pages by checking the URL and looking for official brand communications. For any suspicious activity, report it to Microsoft and monitor accounts for unauthorized access.