acesorvirtual-365--segoffice365[.]replit[.]app

This domain is assessed as high risk for credential theft phishing. The site impersonates Microsoft Office 365 login pages to harvest user credentials, targeting individuals and businesses. The threat type is credential theft phishing, a common vector for account takeover and data breaches.

Technical indicators confirm the threat: VirusTotal reports 20 out of 95 security vendors flagging the domain as malicious. The domain is registered through Replit, a hosting platform often abused for phishing. It resolves to IP address 34.117.33.233. The SSL certificate is issued by Google Trust Services (WR3), which lends a false sense of legitimacy. The domain remains active at the time of analysis. No blocklist data is available in this report, but the high VT detection rate suggests widespread blacklisting.

Mitigation steps: Users should avoid visiting the domain entirely. Organizations using Office 365 should enforce multi-factor authentication and monitor for suspicious login attempts. IT teams should add the domain to web filtering blocklists and conduct user awareness training on credential theft indicators. If credentials were entered, they must be changed immediately and accounts checked for unauthorized access.