BUSHIDOTOKEN

O365 Phishing campaigns on Appspot

Oct 4th, 2020 (edited)
296
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. Microsoft Office 365 credential harvesting campaigns:
  2. -> ts.r.appspot.com
  3. -> wl.r.appspot.com
  4. -> df.r.appspot.com
  5. -> uc.r.appspot.com
  6.  
  7. IOCs:
  8.  
  9. Domains:
  10. login-o365secure.ts.r.appspot.com
  11. microsoft-o365-outlook.ts.r.appspot.com
  12. microsoft-outlook-authenticate.ts.r.appspot.com
  13. login-microsoft-quarantine.ts.r.appspot.com
  14. office-outlook365-account.ts.r.appspot.com
  15. office365-authenticate.ts.r.appspot.com
  16. login-microsoftonline-common.ts.r.appspot.com
  17. logln-micr0s0ft-0nline.ts.r.appspot.com
  18.  
  19. 2268519-dot-n-e-w-me-ss-age-po-rt-al.wl.r.appspot.com
  20. 6843505-dot-n-e-w-me-ss-age-po-rt-al.wl.r.appspot.com
  21. 3255394-dot-n-e-w-me-ss-age-po-rt-al.wl.r.appspot.com
  22. 758468-dot-n-e-w-me-ss-age-po-rt-al.wl.r.appspot.com
  23. 9178288-dot-n-e-w-me-ss-age-po-rt-al.wl.r.appspot.com
  24. 8857954-dot-n-e-w-me-ss-age-po-rt-al.wl.r.appspot.com
  25. 6157073-dot-n-e-w-me-ss-age-po-rt-al.wl.r.appspot.com
  26. 2300884-dot-n-e-w-me-ss-age-po-rt-al.wl.r.appspot.com
  27. 8804941-dot-n-e-w-me-ss-age-po-rt-al.wl.r.appspot.com
  28. 4440011-dot-n-e-w-me-ss-age-po-rt-al.wl.r.appspot.com
  29. 4948182-dot-n-e-w-me-ss-age-po-rt-al.wl.r.appspot.com
  30. 659813-dot-n-e-w-me-ss-age-po-rt-al.wl.r.appspot.com
  31. 6823.n-e-w-me-ss-age-po-rt-al.wl.r.appspot.com
  32.  
  33. onedrive-secure.df.r.appspot.com
  34. login-microsoft-authent.df.r.appspot.com
  35. owa-login-outlook-web.df.r.appspot.com
  36.  
  37. office365-parsec-280413.uc.r.appspot.com
  38.  
  39. Tracking:
  40. https://urlscan.io/ip/2a01:111:f100:9001::1761:914f
  41. https://urlscan.io/ip/2a01:111:f100:8000::4134:941b
  42. https://urlscan.io/search/#domain%3Ats.r.appspot.com
  43. https://urlscan.io/search/#domain%3Awl.r.appspot.com
  44.  
  45. IPv4
  46. 152.199.19.160
  47. 152.199.23.37
  48. 158.175.115.202
RAW Paste Data