Is m365.cloud.microsoft safe?

No. MalwareAnalyzer scanned m365.cloud.microsoft on 20 Jul 2026 and returned a suspicious verdict with a score of 43 out of 100, categorised as phishing. Treat it as hostile until it is re-checked.

How was m365.cloud.microsoft checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

m365.cloud.microsoft - suspicious URL scan, 20 Jul 2026

MalwareAnalyzer by Cyble scanned m365.cloud.microsoft and returned a suspicious verdict (score 43), categorised as phishing. The page resolved to 13.107.6.156. 48 domains and 12 IPs were contacted, over 59 HTTP requests. This is a point-in-time observation from 20 Jul 2026; the page may have changed since.

Scan result

Verdict: suspicious (score 43) · Confidence 49%
Scanned URL: https://m365.cloud.microsoft/
Domain: m365.cloud.microsoft · IP: 13.107.6.156
Page title: Microsoft 365 Copilot - Sign in
HTTP status: 200 · text/html; charset=utf-8
TLS issuer: C=US, O=Microsoft Corporation, CN=Microsoft TLS G2 RSA CA OCSP 10 · valid to Nov 29 23: · subject C=US, ST=WA, L=Redmond, O=Microsoft Corporation, CN=m365.cloud.microsoft
Evidenced operator: Microsoft Corporation
HTTP requests captured: 59 · cookies set: 5 · outgoing links: 181
Scan tier: standard · observed 2026-07-20 18:22:48 UTC

Why this verdict

Domain impersonates icloud (typosquat)
Matches phishing-kit family "Microsoft 365 AiTM Panel"

Observed indicators

m365.cloud.microsoft
res.cdn.office.net
www.microsoft.com
portal.office.com
outlook.office.com
login.microsoftonline.com
shell.cdn.office.net
appsforoffice.microsoft.com
ocws.officeapps.live.com
graph.microsoft.com
substrate.office.com
arc.msn.com
uhf.microsoft.com
copilot.cloud.microsoft
azure.microsoft.com
copilot.microsoft.com
www.xbox.com
support.microsoft.com
apps.microsoft.com
developer.microsoft.com

Other scans of m365.cloud.microsoft (2)

This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.

20 Aug 2026 - malicious · https://m365.cloud.microsoft/
20 Jul 2026 - benign · https://www.office.com/

Questions about m365.cloud.microsoft

Is m365.cloud.microsoft safe?: No. MalwareAnalyzer scanned m365.cloud.microsoft on 20 Jul 2026 and returned a suspicious verdict with a score of 43 out of 100, categorised as phishing. Treat it as hostile until it is re-checked.
How was m365.cloud.microsoft checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the standard tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of m365.cloud.microsoft

Scanned on MalwareAnalyzer by Cyble · Open interactive scan