atlaspros-fr[.]com

PhishDestroy identifies atlaspros-fr.com as a newly active Microsoft 365 phishing domain under investigation for credential theft attempts. The site mimics the official Microsoft login portal to deceive users into submitting their corporate or personal Microsoft 365 credentials. Threat actors frequently leverage lookalike domains and legitimate-looking login pages to harvest credentials that can later be abused for email access, data exfiltration, or further phishing campaigns against the victim’s contacts. Given its recent creation and low detection rate, this domain poses an immediate risk to organizations and individuals using Microsoft 365 services.

This domain was flagged for phishing using exact technical indicators: VirusTotal currently shows 0 out of 95 security vendors detecting the domain as malicious, indicating it remains under the radar. The domain atlaspros-fr.com was created on March 05, 2026, and is registered through Fewmoretaps OU d/b/a Trustname.com, a registrar known for anonymized registrations. It resolves to IP address 145.79.20.1 and uses a valid SSL certificate from Let’s Encrypt, which adds a false sense of legitimacy to the phishing page. These characteristics suggest a hastily deployed campaign with evasion tactics in play.

If you or someone in your organization visited atlaspros-fr.com and entered any credentials, assume compromise immediately. Disconnect affected devices from the network, reset Microsoft 365 passwords using a clean device, and enable multi-factor authentication if not already active. Report the incident to your security team and scan for unauthorized email forwarding rules or suspicious login activity in Microsoft 365 audit logs. Avoid clicking links or downloading attachments from this domain or any related lookalike sites. Consider blocking 145.79.20.1 and atlaspros-fr.com at your network perimeter. Monitor for unusual outbound traffic or lateral movement in your environment.