https://login.windows-ppe.net/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.officeppe.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.officeppe.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=637772588009816054.OTkzZmUzMDctNTcxOS00N2Y3LTgwZDctYmM2MzZhNDliN2Q2OTI1NGYyYzEtYTlkNy00ZmY0LTg4MGUtODZiZWFkMDdmNDYy&ui_locales=en-US&mkt=en-US&state=f-50YqIgEdV_t3l7zptGjbGNd-4oasUz9hdbEK6eLUPojsD7m4MjU0EKf9IwiSoTcpN-jgwCK9nY2w0kZyfr6vqUKKm0_V1wdQRROxSWEU2ZWZ5mE1xEV2CV9R2_AyIQSSlwlhpphx4LH6BTxRQZGfy4EFjFqDN8khseqBO3w704r4B99780CtxN-VEV2seRNKjS0PDz6tEAyQgfcAsC1TzywDn7gi4DXb49Pc7KxW7lv8lZ9byDGaBJDnZbwKVd15laDheEG_GZd-reTOhQjQ&x-client-SKU=ID_NETSTANDARD2_0&x-client-ver=6.12.1.0

Classification: Malicious

https://login.windows-ppe.net/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.officeppe.com%2Fland…

Current activity

  • Offline — no longer resolving. Last online 2026-04-18 11:15:38.
  • Phishing — Hosts a phishing site and is intrinsically malicious.

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Phishing Maltiverse 2022-01-09 00:40:26 2022-01-09 23:40:34 compromised

Tags

phishing

URL information

Hostname
login.windows-ppe.net
Domain
windows-ppe.net
TLD
net
SHA-256
845edd10d167441b6b27cb6b954cc37cad9d19376ce90a8565839c1d9ecdac66
First indexed
2022-01-09 00:40:26
Last updated
2026-04-18 11:15:40
Last online
2026-04-18 11:15:38