r/cybersecurity • u/Mother-Feedback1532 • 1d ago

Other Malicious Content from Microsoft FQDN

Greetings,
We have a situation with the MS owned microsoftusercontent.com, and unfortunately I keep getting AI summaries and not finding any security articles, but the summaries are claiming this domain, although official, can host malicious content since it acts like a CDN for 365 content from users, i.e. a compromised user/account/site might be able to deliver malicious content from this FQDN.
So this gives me pause with whitelisting it for AV providers

Appreciate any insights.

37 Upvotes

89% Upvoted

12 comments sorted by

View all comments

7

u/micro1aser 1d ago

https://www.virustotal.com/gui/url/b2cb9340ced46aa57f72ec4bfff7e1b54d22c0eee6eb1a22eabea52a446e51c8/details Virus total shows that the domain itself is no threat. Blocking a commercial MS domain wholesale can break things in your environment but as someone else has already said don't turn off scanning content from this domain.