Phishing abuses Microsoft Infra

Phishing:
voicenote1-secondary.z23.web.core.windows.net
voicenote2-secondary.z23.web.core.windows.net
voicenote3-secondary.z23.web.core.windows.net
voicenote4-secondary.z23.web.core.windows.net
voicenote5-secondary.z23.web.core.windows.net
voicenote6-secondary.z23.web.core.windows.net
voicenote7-secondary.z23.web.core.windows.net
voicenote8-secondary.z23.web.core.windows.net
voicenote9-secondary.z23.web.core.windows.net
voicenote10-secondary.z23.web.core.windows.net
onlineselectmainupdate.blob.core.windows.net
microsofy2yrkqaw4bqje0q.z13.web.core.windows.net
study22.z13.web.core.windows.net
microsof4fnqo0nexgw6guq.z13.web.core.windows.net
687623456ex56789678.z13.web.core.windows.net
macrosoft0nlineoffice365.z13.web.core.windows.net
microsofj9vjgdx1prxdwf0.z13.web.core.windows.net
redcrossx.z13.web.core.windows.net
onedrive95t13tlkz4fj13y.z13.web.core.windows.net
66543exc4560985.azureedge.net
hsderytkjiiuodgetryr.z13.web.core.windows.net
lgll0az.z13.web.core.windows.net
microsftr1r3q15rq35uf.z13.web.core.windows.net
072319.z13.web.core.windows.net
mailhubexpert.z13.web.core.windows.net
polsos.blob.core.windows.net
digavo10digavo10.blob.core.windows.net
srveline9line9.blob.core.windows.net
share015812854.blob.core.windows.net
wwwedxoutlookofficeowa.blob.core.windows.net

Validators and credential harvesting domains:
https://radiadoressaofernando.com.br/wp/css/log/file/admin/php/plan/test/gate.php
https://authconfig.dlipiper.com/validate.php - behind CloudFlare
https://study222.azurewebsites.net/handler.php
https://secureclfile.site/cloudex/popup.php
https://vincenthale01.azurewebsites.net/handler.php
https://suprelogistica.com.br/wp-includes/images/smilies/handler.php
https://purewaterx14qw78r8.azurewebsites.net/handler.php
https://88wqtfqqhuqcc.azurewebsites.net/handler.php
https://apmultiproducts.com/ss/popup.php
https://flexboxmedia.com/zzzas/ddd/ddd/index.php
https://babystagparty.xyz/tv/send.php - behind CloudFlare
https://xeroxprofessionalsbusiness.vip/wp-content/send10.php
https://gastro-power.ch/faster/fast4.php
https://mobat.com.au/newhanger/send.php? - behind CloudFlare