support[.]m365-microsoft[.]com

PhishDestroy identifies support.m365-microsoft.com as an active Microsoft 365 brand impersonation domain designed to deceive users into divulging credentials or installing malware under the false pretense of official Microsoft support. This domain poses an elevated risk by mimicking Microsoft’s legitimate support infrastructure. Evidence includes a VirusTotal detection ratio of 6/95 security vendors, registration via Dynadot Inc on July 12, 2023, and resolution to IP 20.50.64.14. The fraudulent site uses a Let's Encrypt SSL certificate to appear legitimate while hosting spoofed login portals tailored to harvest Microsoft 365 credentials. The domain has been flagged by multiple threat intelligence feeds, highlighting its use in phishing campaigns targeting enterprise and consumer Microsoft accounts. Users who visited support.m365-microsoft.com should immediately disconnect from the network, clear browser cache and cookies associated with Microsoft domains, and run a full antivirus scan. Change Microsoft 365 passwords only from a verified URL (login.microsoftonline.com), enable multi-factor authentication, and revoke any sessions initiated from unknown devices. Report the domain to Microsoft via the [Phish Report Tool](https://www.microsoft.com/en-us/wdsi/support/report-unsafe-site) and your organization’s security team if accessed on a corporate device.