Joshua Small on Nostr: <li>Get a phishing URL</li><li>Enter a fake password for a legitimate M365 ...
<li>Get a phishing URL</li><li>Enter a fake password for a legitimate M365 account</li><li>Go look at the logs and see what IP address just tried to logon</li>Congrats, you just unmasked the real phishing host which almost certainly hid behind Cloudflare.
Published at
2024-10-30 22:50:42 UTCEvent JSON
{
"id": "ba569fe62d02da1b1a6d870d86bb03631cbc085d8b13444ebeaaea6cde155a28",
"pubkey": "888238141acb9f8de95d3b47675f0f81b635ccd7e37dfdcb718a7673d64e60f5",
"created_at": 1730328642,
"kind": 1,
"tags": [
[
"proxy",
"https://infosec.exchange/@jsmall/113398817931906197",
"web"
],
[
"proxy",
"https://infosec.exchange/users/jsmall/statuses/113398817931906197",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://infosec.exchange/users/jsmall/statuses/113398817931906197",
"pink.momostr"
],
[
"-"
]
],
"content": "\u003cli\u003eGet a phishing URL\u003c/li\u003e\u003cli\u003eEnter a fake password for a legitimate M365 account\u003c/li\u003e\u003cli\u003eGo look at the logs and see what IP address just tried to logon\u003c/li\u003eCongrats, you just unmasked the real phishing host which almost certainly hid behind Cloudflare.",
"sig": "785be379e26e9ffda3c7f8c43b9814b12264f4989e616ef60c03da58b88bbf59b1cd41614ca5084cdcb7f5f5f9e5f37072450f6adb0b5a1d4766def8d0303227"
}
