login[.]0365admin[.]me

The domain login.0365admin.me is currently classified as a high‑risk credential‑phishing infrastructure and remains active as of 12 July 2026. Intelligence associates the site with a credential‑phishing campaign, and the threat level is rated high based on the aggregation of observed indicators.

Infrastructure analysis shows that the domain was registered on 26 August 2021 through NameCheap, Inc. It resolves to the IPv4 address 167.235.77.79, which is hosted by Hetzner Online GmbH (AS24940) in Germany. The server presents a Let’s Encrypt certificate (R12) and responds with HTTP status code 200, delivering a page whose title is reported as "Error Page." The domain appears on a single security blocklist and has been explicitly blocked by PhishDestroy.

Detection signals reinforce the malicious assessment. VirusTotal scans have flagged the domain with 14 out of 95 security vendors, indicating a notable detection rate across independent scanners. The Gridinsoft trust score of 31 / 100 further suggests low confidence in the site's legitimacy. No additional contextual information about the page content is available beyond the generic error title, leaving the precise phishing vector unverified.

Defenders should prioritize immediate containment of traffic to this host. Recommended actions include adding the domain and its resolved IP to outbound deny lists, configuring DNS sinkholing for the name, and monitoring for any related credential‑theft activity targeting users. Continuous re‑evaluation is advised, as threat actors may modify the site’s payload or infrastructure without notice.