m365-owa[.]com

Analysis on m365-owa.com indicates that the domain was registered on July 20, 2026 through PDR Ltd. d/b/a PublicDomainRegistry.com. Within days of creation it appeared on a security blocklist and has been actively blocked by PhishDestroy, confirming its operational status as of the report date (August 04, 2026). VirusTotal scans show that 23 of 91 security vendors have flagged the domain, reflecting a moderate detection rate consistent with a newly observed phishing infrastructure. The elevated risk rating aligns with the observed detections and the domain’s inclusion on a blocklist.

No additional infrastructure details such as hosting IP, ASN, or SSL certificate information have been disclosed, leaving the hosting environment uncharacterized. The page title, brand target, and specific phishing kit have not been publicly released, so the exact content and impersonated service remain unknown. Defenders should continue to block m365-owa.com at perimeter filters, DNS sinks, and endpoint protection solutions.

Monitoring of the registrar and any future passive DNS records is advised to detect potential pivot points or related domains. Given the active status and elevated risk, security teams should treat any traffic to this domain as malicious and enforce user awareness messaging about unsolicited email that may reference the domain. Ongoing intelligence gathering should focus on capturing HTTP responses, TLS certificates, and any observed phishing lure content to refine detection signatures.