{
  "website": "*.azurewebsites.net",
  "tags": [
    "Phishing",
    "Download",
    "Exfiltration",
    "C&C"
  ],
  "service_provider": "Microsoft",
  "phishing": "Azure web applications allows users to create a customized subdomain on azurewebsites.net. Attackers abuse this functionality by hosting phishing websites using the azurewebsites.net domain.",
  "command_and_control": "Malware such as Almaq have used Azure web applications as their C&C servers.",
  "exfiltration": "Attackers can create web applications with upload functionalities hosted on *.azurewebsites.net and exfiltrate data on there.",
  "download": "Attackers can host malicious tools on applications hosted on *.azurewebsites.net and download them when needed.",
  "sample_url": "https://www.joesandbox.com/analysis/426500/0/html",
  "created": "2021-11-10",
  "last_update": "2021-11-10",
  "credits": "mr.d0x",
  "detail_path": "/site/2a2e617a75726577656273697465732e6e6574",
  "detail_slug": "2a2e617a75726577656273697465732e6e6574",
  "detail_url": "https://lots-project.com/site/2a2e617a75726577656273697465732e6e6574",
  "scraped_at": "2026-06-16T11:57:37Z"
}