Connection to adversary-in-the-middle (AiTM) phishing site - sropq.com

Hello all, I have a strange Defender alert.   User is opening SharePoint/OneDrive on a terminal server (RDP connection) with Mozilla Firefox and the event below appears. Mozilla Firefox is stock ...