← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
Microsoft Phishing Collection
WHITE noladefense 2023-01-25 Modified: 2026-04-19
82
IOCs
HIGH VOLUME
This page stores Microsoft phishing page IOCs. Legitimate website for the brand is https://microsoft.com NOLA defense is tracking newly observed phishing websites. Follow us on twitter https://twitter.com/noladefense
urlsphishingscammicrosoft
Indicators of Compromise (82)
All URL hostname domain
TYPEINDICATORDESCRIPTIONCREATED
URL https://onedrive.tooziya.workers.dev/?sso_reload=true — 2023-02-03
hostname onedrive.tooziya.workers.dev — 2023-02-03
URL https://server-microsoft.sahesij433.workers.dev/ — 2023-02-03
hostname server-microsoft.sahesij433.workers.dev — 2023-02-03
URL http://www.photosandpoets.gq/scc/ — 2023-02-21
hostname www.photosandpoets.gq — 2023-02-21
URL https://173.201.253.141/ — 2023-02-27
URL https://40.90.22.191/ — 2023-04-15
URL https://bafybeiautuzv7dn6rk33yb4dsr7t3o3752fdgqnwxbktyeheucsnuuywra.ipfs.dweb.link/ — 2023-04-21
hostname bafybeiautuzv7dn6rk33yb4dsr7t3o3752fdgqnwxbktyeheucsnuuywra.ipfs.dweb.link — 2023-04-21
URL https://bafybeigbywaah3iux3pe7mlkcpcofk7vvwlcangxznp2343r7kjg3l6iim.ipfs.dweb.link/index.htm?email=@ — 2023-05-08
hostname verilog94d004.eu5.net — 2024-01-05
hostname azlort.pages.dev — 2024-01-08
domain dmakalik.top — 2024-01-26
hostname hotlivemsnot.hotoutlook.dns.navy — 2024-01-31
domain thearlekin.com — 2024-02-16
domain terroshealthcare.org — 2024-03-13
domain terroshealthcare.org — 2024-03-13
hostname hghgdnmikhgstdh-nuwytfgfdwghgsbnsi.pages.dev — 2024-03-26
domain tnls.biz — 2024-04-01
hostname vigilant-journeyvdgsvrstfigilant-journey.pages.dev — 2024-04-07
hostname vigilant-journeyvdgsvrstfigilant-journey.pages.dev — 2024-04-07
hostname vigilant-journeyvdgsvrstfigilant-journey.pages.dev — 2024-04-07
domain gsf.org.pk — 2024-04-23
domain agelbam.ru — 2024-05-18
hostname laspeyresia-breviger-a4ce5aa289ebd1-1ad91a704f4d2-27ee72e8.pages.dev — 2024-07-24
hostname srotr.pages.dev — 2024-07-26
hostname rupestral-streyne-bee0a248e-d05c910b6eddb5e99-b5e99be7a548.pages.dev — 2024-07-29
hostname pub-6043082778cb4874bcdfb625f29c1abd.r2.dev — 2024-07-29
hostname www.supportin.it — 2024-07-29
hostname www.securembly.com — 2024-07-30
hostname www.securembly.com — 2024-07-30
hostname pub-58c5ae6ff5994a2abf06230dc0fa77b7.r2.dev — 2024-07-31
hostname tigrean-refluxing-d301f4b305d8acecd-acecd64193c7-c505d625.pages.dev — 2024-08-01
hostname www.shareholds.com — 2024-08-01
hostname outlookacces.hstn.me — 2024-08-06
domain diamondtrackonlline.net — 2024-08-09
hostname flinger-mythopoeic-0380e347c090e4f2-0e4f28d7f2c-245c8da.pages.dev — 2024-08-20
hostname preemptions-batholithic-894bdcbd5a3f3af439b2-a3f3af439.pages.dev — 2024-08-23
hostname n7ka2xiiswii61mzlm-o1zbo49djpo-klyut43emaxi-ue43x3sy36pt2ckcy7k.glitch.me — 2024-08-23
domain e34xps.com — 2024-09-03
hostname www.hardwarecheck.net — 2024-09-05
hostname dyw6578oijkfdtyx789keiojhdhkl.pages.dev — 2024-09-12
hostname pinions-epidictic-6ee3674ef91927ae0a0-08e607faecbe2f7e0.pages.dev — 2024-09-14
domain siriuscoms.com — 2024-09-19
hostname trabacolo-recomplication-0b839a70ae2b-1e7f3a9d786ce765a4-7.pages.dev — 2024-09-22
hostname larviposition-untainting-73e92f07-2bca77c6f1f0d0be0-0d0be.pages.dev — 2024-09-23
hostname qpdb.ru.com — 2024-09-23
hostname remaindermen-chaplainship-f6392a22e-d6f7a02bd2-67154f35038.pages.dev — 2024-09-25
hostname login-onedrivernicrrosottfserrvee.tiiny.site — 2024-10-07
domain 56-ytgfjsdfghjkn.icu — 2024-10-11
domain onedrive.company — 2024-11-05
hostname login.dutchworkzgroep.nl — 2024-11-22
domain jbglobaltrade.vip — 2024-12-20
domain aceitesvailejo.com — 2025-01-07
domain acotton.com.br — 2025-02-12
hostname asm.inexalaw.co.uk — 2025-02-24
hostname msw.vsqmarketing.com — 2025-03-13
hostname dev.servidorsaj.com.br — 2025-03-13
hostname fdr.l1der.com.br — 2025-03-17
hostname jhsk.jazakallahtech.com — 2025-03-17
hostname bxs.montanarealestateclasses.com — 2025-03-17
domain unlcompany.it — 2025-03-28
URL https://pub-0eeaa1c9474148f8a3f1e9899e1dbf37.r2.dev/load.html?email=bWF0dGhldy — 2025-05-11
URL https://melted-bumpy-art.glitch.me/ — 2025-05-11
hostname melted-bumpy-art.glitch.me — 2025-05-11
domain digitalteams.net — 2025-05-16
hostname ccacea7a1502a5d097440ad89705a0536f872a4184c042f15b45b543ed.pages.dev — 2025-05-22
hostname microsoft.sharpoint365.com — 2025-06-06
domain edconeet.com — 2025-07-15
URL https://security.finsyncsolutions.com/?_mac=E9C376FCC643D688DF55296C&id=134934 — 2025-09-07
hostname security.finsyncsolutions.com — 2025-09-07
domain beversetc.be — 2025-09-27
domain tesccsw.cz — 2026-01-29
hostname initiative.professional-reviews.workers.dev — 2026-01-30
URL https://proposed-silver-kuhtv4ziq5-bcko68t1de.edgeone.app/ — 2026-03-07
hostname proposed-silver-kuhtv4ziq5-bcko68t1de.edgeone.app — 2026-03-07
hostname j4dbqo3efkoabmw23x3kzrh4mxvbpyk2vguikx2adl3lx6wedt3a.arweave.net — 2026-03-22
URL https://microsoft-helmo.be/ — 2026-04-06
domain microsoft-helmo.be — 2026-04-06
URL https://microsoft-109120-10517799.weeblysite.com/ — 2026-04-19
hostname microsoft-109120-10517799.weeblysite.com — 2026-04-19
References (1)
↗ https://www.virustotal.com/gui/collection/fedac4f0929e27b30f53bd1f7fa05779c32f0eb57c009d04158a2d0181c3ed70