Thread by @malwrhunterteam, Outlook phishing page hosted by Microsoft: https://sharepointmxrecordpos1.z13.web.core\.windows.net/And even "sharepoint" is in the [...]

Outlook phishing page hosted by Microsoft: https://sharepointmxrecordpos1.z13.web.core\\.windows.net/
And even "sharepoint" is in the subdomain...
Clear example of how much MS dgaf about not only "random" phishing pages they host, but even ones likes this...
cc @SwiftOnSecurity

$Outlook phishing page hosted by Microsoft: https://sharepointmxrecordpos1.z13.web.core\\.windows.net/And even "sharepoint" is in the subdomain...Clear example of how much MS dgaf about not only "random" phishing pages they host, but even ones likes this...cc @SwiftOnSecurity$

After entering the credentials, the victim will get redirected to this file: https://whitehouse.gov/wp-content/uploads/2020/02/2020-Economic-Report-of-the-President-WHCEA.pdf

The entered credentials are sent to: https://zankouchlcken[.]com/img/new/pos1/process.php
Just go one level up...
Hey @Namecheap, what about finally nuking this?
cc @olihough86