Known benign platformlowbenign
Microsoft Attack Simulation Training
family: microsoft-attack-simulator
Microsoft Defender for O365 "Attack simulation training" — Microsoft-owned decoy domains serving Microsoft-branded login pages for phishing-awareness testing. Benign; tracked for inventory only. Whole fleet shares one TLS cert (issuer Microsoft Corporation, CN www.attemplate.com, 131 SANs). Forward-collected via the tls_certificates trigger + security-analyzer cert classifier.
Anchors
SMQL queryrun
url:*/login?id=* AND nameserver:*azure-dns*Provenance
Sightings (59)
| Host | Scan | Script | Match | When |
|---|---|---|---|---|
| houstonparksboard.azurewebsites.net | 2c8ec98a… | — | cert | 2026-09-12 18:18 |
| peatsorbng.azurewebsites.net | 4f76c152… | — | cert | 2026-09-12 18:16 |
| denimology.azurewebsites.net | c0e739b7… | — | cert | 2026-09-12 15:39 |
| excel-addin-prd.azurewebsites.net | eb61fa86… | — | cert | 2026-09-08 22:03 |
| sps-bugbounty-test-webapp.azurewebsites.net | b3191dab… | — | cert | 2026-09-06 13:37 |
| vm31-proxy-appproxy-eus-bl2p-1.connector.msappproxy.net | d8919ed2… | — | cert | 2026-09-06 09:15 |
| prod-spo01-059-nam-centralus-api.cosmic.1drv.com | 3d0af33f… | — | cert | 2026-09-02 00:53 |
| b48ddc28-4675-4d48-a41b-ff79460b1c17.bootstrap.msappproxy.net | 58edc5d5… | — | cert | 2026-09-01 06:55 |
| vm63-proxy-appproxy-weur-ams01p-3.connector.msappproxy.net | 86e2e375… | — | cert | 2026-09-01 03:10 |
| bpos-storageservice.azurewebsites.net | 6af7daee… | — | cert | 2026-08-30 22:56 |
| offlinedatacollector.azurewebsites.net | 4d362cea… | — | cert | 2026-08-29 13:13 |
| geoip-prod-b-app.azurewebsites.net | 1889d51d… | — | cert | 2026-08-28 17:59 |
| geoip-prod-b-app.azurewebsites.net | 8a4a4276… | — | cert | 2026-08-28 11:12 |
| 1drv.ms | 6a29b806… | — | cert | 2026-08-28 09:19 |
| codepush-character.azurewebsites.net | 38421198… | — | cert | 2026-08-28 03:24 |
| sharepinpointlicenses.azurewebsites.net | 15e8909a… | — | cert | 2026-08-27 12:34 |
| vm45-proxy-appproxy-eus-mnz01p-3.connector.msappproxy.net | a2fc9fa6… | — | cert | 2026-08-26 23:28 |
| sjc04pcor001-com.be.1drv.com | dfb1f859… | — | cert | 2026-08-25 00:41 |
| vm62-proxy-appproxy-cus-dm2p-4.connector.msappproxy.net | b4b167a9… | — | cert | 2026-08-24 18:01 |
| agpsservice-prod-neu.azurewebsites.net | 9c7f7fe2… | — | cert | 2026-08-24 13:11 |
| ft-app-prod-signalr.azurewebsites.net | e7755ec0… | — | cert | 2026-08-22 05:06 |
| officeci.azurewebsites.net | d615499f… | — | cert | 2026-08-21 11:43 |
| app-claims-portal-saml--preprod-01-d8c8awfndadgdxd2.eastus-01.azurewebsites.net | e6064631… | — | cert | 2026-08-20 00:24 |
| vm2-proxy-appproxy-frc-par03p-3.connector.msappproxy.net | f1c0bb11… | — | cert | 2026-08-18 21:13 |
| recipekeeper.azurewebsites.net | 5fb87f9a… | — | cert | 2026-08-17 13:09 |
| appvercop.yammer.com | 938dded7… | — | cert | 2026-08-16 23:46 |
| awx-app-raine-prd.azurewebsites.net | f40ad1a2… | — | cert | 2026-08-15 23:59 |
| pfbx-api-logging-euw-prod-linux.azurewebsites.net | 8c7af5a1… | — | cert | 2026-08-14 19:55 |
| ctlottery-v2.azurewebsites.net | 52ca2593… | — | cert | 2026-08-11 10:33 |
| vm35-proxy-appproxy-eus-mnz01p-3.connector.msappproxy.net | e1032769… | — | cert | 2026-08-10 18:21 |
| vm137-proxy-appproxy-eus-bl2p-1.connector.msappproxy.net | 9f33fb47… | — | cert | 2026-08-10 03:47 |
| vm153-proxy-appproxy-eus-bl2p-1.connector.msappproxy.net | e1aef156… | — | cert | 2026-08-09 13:04 |
| vm6-proxy-appproxy-eus-bl2p-1.connector.msappproxy.net | 32faa68a… | — | cert | 2026-08-09 10:04 |
| 1-68287258625-675557515265-206.rt.yammer.com | 4927e39c… | — | cert | 2026-08-08 15:00 |
| hosts.gardyn-prod-fa-fleet-monitoring.azurewebsites.net | 74e6aa44… | — | cert | 2026-08-08 11:46 |
| tennisraptor.azurewebsites.net | aa6961b9… | — | cert | 2026-08-06 16:47 |
| dirigo-wp-signalr.azurewebsites.net | 48566c9c… | — | cert | 2026-08-04 21:27 |
| chattm.azurewebsites.net | 388e5df9… | — | cert | 2026-08-03 19:41 |
| raktasmart.azurewebsites.net | c8d166bd… | — | cert | 2026-07-30 08:16 |
| recast-uphealth.msappproxy.net | 1122a791… | — | cert | 2026-07-27 03:20 |
| cde-prod-eastus.azurewebsites.net | bb87bf08… | — | cert | 2026-07-25 23:46 |
| geoip-prod-b-app.azurewebsites.net | 8c940e54… | — | cert | 2026-07-24 02:33 |
| mdnotificationservice.azurewebsites.net | e0314a12… | — | cert | 2026-07-19 20:32 |
| commerce.bing.com | a545bf5a… | — | cert | 2026-07-18 04:38 |
| cwap-nam1-runtime.routing.msappproxy.net | a58af59a… | — | cert | 2026-07-13 19:47 |
| documentationportal.azurewebsites.net | df04b45d… | — | cert | 2026-07-09 22:19 |
| 1-6848451-6116700217344-576.rt.yammer.com | 9e4a1871… | — | cert | 2026-07-09 19:04 |
| trackingpixelprod.azurewebsites.net | fc8c9efd… | — | cert | 2026-07-09 14:56 |
| pwmgr-gateway-cohfl.msappproxy.net | f6011318… | — | cert | 2026-07-09 06:32 |
| bfsintranetlive01.azurewebsites.net | 969079eb… | — | cert | 2026-07-08 16:19 |
| ingress.eastus.arcdataservices.com | 0141e0d1… | — | cert | 2026-07-05 10:24 |
| api.yammer.com | 725f7916… | — | cert | 2026-07-03 06:39 |
| vm56-proxy-appproxy-cus-dsm02p-6.connector.msappproxy.net | 2ddfd31c… | — | cert | 2026-07-02 02:13 |
| 1-255619-1569808606-388.rt.yammer.com | c39d859e… | — | cert | 2026-06-27 08:45 |
| vm36-proxy-appproxy-eus-mnz01p-3.connector.msappproxy.net | c458ff1c… | — | cert | 2026-06-26 16:00 |
| vm94-proxy-appproxy-eus-mnz01p-3.connector.msappproxy.net | fa3d9cb5… | — | cert | 2026-06-25 23:00 |
| attemplate.com | 58f80acd… | — | cert | 2026-06-25 07:59 |
| docstoreinternal.com | aeadd13b… | — | query | 2026-06-24 21:12 |
| resetts.it | 494709a5… | — | query | 2026-06-24 21:12 |