MalwareMessiagh

Phishing abuses Microsoft Infra

May 29th, 2019
14,216
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 5.63 KB | None | 0 0
  1. Phishing hosted on microsoft infrastructure:
  2. mailofficeveridiers.z33.web.core.windows.net
  3. mysharepoint.z33.web.core.windows.net
  4. hjfgfhfhgghhgfdsdfghjk.z33.web.core.windows.net
  5. user77773783793787333.z11.web.core.windows.net
  6. mailswebhosingsupport.z11.web.core.windows.net
  7. user339398302893092.z19.web.core.windows.net
  8. validate1mjvsl3pt8mgy01.z19.web.core.windows.net
  9. accesebleoutlook.z29.web.core.windows.net
  10. jhgfdsjhgfdsdfkjhgfdkjh.z29.web.core.windows.net
  11. 83287w98349798uids2939.z21.web.core.windows.net
  12. officesecured.z13.web.core.windows.net
  13. user333358862968.z13.web.core.windows.net
  14. user3337787jdkjlkbksoj.z13.web.core.windows.net
  15. p0jnjo0hhinnpn.z13.web.core.windows.net
  16. newlevelofficemail.z16.web.core.windows.net
  17. office365outlookowa.z16.web.core.windows.net
  18. portaloutlook.z9.web.core.windows.net
  19. mneecvndhdnhv33.z13.web.core.windows.net
  20. invoicecentre.z13.web.core.windows.net
  21. globaedu.z13.web.core.windows.net
  22. docx.z13.web.core.windows.net
  23. pitchbookoutlookowa.z29.web.core.windows.net
  24. office365docsgnwrongpass.z13.web.core.windows.net
  25. kvgxdnvxyvzjjtbefsdzyhpw.z13.web.core.windows.net
  26. merrilllynchupdate.z13.web.core.windows.net
  27. doc45.z13.web.core.windows.net
  28. staff777q.z13.web.core.windows.net
  29. microsof.z13.web.core.windows.net
  30. jhgfdsjhgfdsdfkjhgfdkjh.z29.web.core.windows.net
  31. 99384579649549894.z21.web.core.windows.net
  32. 762367783798uijkdhf.z21.web.core.windows.net
  33. outlookloffice365web90co.z19.web.core.windows.net
  34. z2lzpz26pio2i27.z11.web.core.windows.net
  35. user37645328office365.z11.web.core.windows.net
  36. officemails.z14.web.core.windows.net
  37. wealthencryption.z27.web.core.windows.net
  38. asssiii333ssssshhhh.azurewebsites.net
  39. micro234.z19.web.core.windows.net
  40. webmailc7aoxzfx9zuupds7.z19.web.core.windows.net
  41. v8vbvbt8ttjm8u8it9mi.z19.web.core.windows.net
  42. a8mj9ubtvt9mvbjba9.z19.web.core.windows.net
  43. merrilllynchs.z11.web.core.windows.net
  44. office365user333826839.z11.web.core.windows.net
  45. allljhgsshjshsf22222222kkkkkssss.azurewebsites.net
  46. thebossphp.azurewebsites.net
  47. fsssiii333ssssshhhh.azurewebsites.net
  48. techsupport6.azurewebsites.net
  49. techsupport7.azurewebsites.net
  50. techsupport8.azurewebsites.net
  51. techsupport9.azurewebsites.net
  52. techsupport10.azurewebsites.net
  53. secured-online00.azurewebsites.net
  54. onlineservices-21pp.azurewebsites.net
  55. documentsserver45sercure-mails.azurewebsites.net
  56. bitsmail-securedserversices237.azurewebsites.net
  57. outlook-email-office365.azurewebsites.net
  58. 356-mailsetuo-microutlooks-accountsettingsonline.azurewebsites.net
  59. secureoffice365jw3gpfd2gqxwh3m2oclqs2tzkc1.azurewebsites.net
  60. onedrivesmail-documentsignserver56rt.azurewebsites.net
  61. 356-microutlooksetting-account-validationrequestmainpage.azurewebsites.net
  62. 990sssshjklhjkssssss222222.azurewebsites.net
  63. new20vmail3dsecureshare26voicemail3dofficemicroscroppen.azurewebsites.net
  64. oakbrookfinance-fileshare.azurewebsites.net
  65. office365securelinkfiycoybgxu2if93smfq3ynvv9.azurewebsites.net
  66.  
  67. Validators:
  68. https://www.rcreddyiasstudycircle.com/nmbn/nmbn/our/index.php
  69. https://www.rcreddyiasstudycircle.com/mmmr/mnjk/hhhh/index.php
  70. https://www.rcreddyiasstudycircle.com/azew/awre/index.php
  71. https://www.rcreddyiasstudycircle.com/wwz/wwwr/index.php
  72. https://www.rcreddyiasstudycircle.com/llwewa/yetwyw/index.php
  73. https://www.rcreddyiasstudycircle.com/frewt/nbgf/2k19/index.php
  74. https://www.rcreddyiasstudycircle.com/bb/bb/bb/index.php
  75. https://www.rcreddyiasstudycircle.com/zzzx/vcxz/merrill/index.php
  76. https://www.amazingproductclub.com/yyuu/uuuu/index.php
  77. https://www.consultshape.com/wp-includes/mmmnb/ffttttt/index.php
  78. https://www.gpm.org.my/wp-includes/theme-compat/handler.php
  79. https://user73987985h.azurewebsites.net/handler.php
  80. https://justfor7.azurewebsites.net/site/handler.php
  81. https://moxxesd.azurewebsites.net/new/handler.php
  82. https://razire.com/cgi-bin/handler.php
  83. https://thebossphp.azurewebsites.net/handler.php
  84. https://risengollingfriw.ga/RisefriwCb/Portaer/handler.php
  85. https://ennmkj3ahp5emmj.azurewebsites.net/handler.php
  86. https://oneonlinetrue.com/yes/handler.php
  87. https://plangu.online/m1soft/verify.php
  88. https://oneonlinetrue.com/restrict/handler.php
  89. http://ptlonghigroup.us/cloud/popup.php
  90. http://mngrupozelta.com/xtralive/popup.php
  91. http://facesoffreezing.tk/note/note/proposal/verificationAttempt.php
  92. http://livelywebordainedkool.cf/harwoodservices/proposal/verification.php
  93. http://sellcons.com/off365auths.php
  94.  
  95. Landing phishing domains:
  96. 74830839475.cf
  97. 9i4d83ey263.icu
  98. acounstic.cf
  99. aksmusic.ga
  100. alcabla.cf
  101. appdiscr.gq
  102. batrarl.cf
  103. bohemian.ga
  104. buisent.cf
  105. buisent.ga
  106. buisent.gq
  107. buisent.tk
  108. buisset.ga
  109. cartingshop.ga
  110. cartingshop.ml
  111. chickenfight.ga
  112. chickenfight.ml
  113. dofaulter.ml
  114. dornainrnail.ml
  115. drippholdenfrien.ga
  116. evastillgreew.gq
  117. facesoffreezing.tk
  118. feelingsformaillingrl.gq
  119. folktalks.ga
  120. foloble.ga
  121. foloble.gq
  122. foloble.ml
  123. foloble.tk
  124. freezhulkol.ga
  125. fricenerhly.ga
  126. gayoter.ga
  127. gayoter.tk
  128. godokuments365onedrive.com
  129. heatonforeverythingfril.ga
  130. hffriend.gq
  131. hopessy.gq
  132. hopessy.ml
  133. houstonforriserd.ga
  134. htipolyrner.com
  135. i884957ki.ml
  136. infodesillingool.cf
  137. jotuno.com
  138. killsh.xyz
  139. kinemasters.cf
  140. kinemasters.ga
  141. lastoneforthereceiving.ml
  142. leapt.xyz
  143. livelywebordainedkool.cf
  144. loocifer.cf
  145. lossyouself.ga
  146. lyricals.ml
  147. malityl.ga
  148. malityl.ml
  149. malityl.tk
  150. managefoldergrain.ga
  151. managingprism.gq
  152. melfoody.cf
  153. melfoody.tk
  154. muziccomp.ml
  155. novasteill.com
  156. occupyhilderingkool.ga
  157. onedrivebusinesscloud.com
  158. onedrivedocumentshareingfolder.com
  159. outlook365onedrivedocument.com
  160. plangu.online
  161. puspey.online
  162. risengollingfriw.ga
  163. sellcons.com
  164. stopandsearchreistar.ga
  165. wadalisings.cf
  166. wanderful.gq
  167. xenctoy.ga
  168. xenctoy.gq
  169. xenctoy.ml
  170. xenctoy.tk
  171. xraytuoring.com
  172. yeoureb.cf
  173. yeoureb.ga
  174. zeemusicco.ga
  175. zheasor.ga
  176. zheasor.gq
  177. zheasor.tk
  178. zitieth.cf
  179. zitieth.ga
  180. zitieth.ml
  181. zitieth.tk
Add Comment
Please, Sign In to add comment