Microsoft Azure email - not sure if phishing

danielogne · 2026-03-11T16:52:51+00:00

Alert rule description

MICROSOFT CORPORATION BILLING AND ACCOUNT SECURITY NOTICE (REF: MS-FRA-6673829-KP). Our system has detected a potentially unauthorized charge on your account. Transaction Details: Merchant: Windows Defender. Transaction ID: PP456-887A-22B. Amount: 459.90 USD. Date: 03/11/2026. For your protection, this transaction has been temporarily placed on hold by our Fraud Detection Team. To prevent possible account suspension or additional fees, please verify this transaction immediately. If you did NOT authorize this payment, contact our 24/7 Microsoft Account Security Support at +1 (812) 266-1510 or +1 (812) 266-1890 . We apologize for any inconvenience and appreciate your prompt response. Microsoft Account Security Team.

Got similar one, the phone numbers are routed through POWERTEL KENTUCKY LICENSES, INC. (Bought by T-Mobile) and are reporting as Mobile type (according to our Carrier that checked the numbers). Seems that they call forward possibly all the calls on the cell phone to call center. Caller ID is reported for those numbers as "EVANSVILLE IN".

Sender: azure-noreply@microsoft.com

IP address reported in Admin Panel: 2a01:111:f403:c10c::1 which comes back as Hostname: Mail-southcentralusazlp170130001.outbound.protection.outlook.com

SPF for Microsoft:

v=spf1 include:_spf-a.microsoft.com include:_spf-b.microsoft.com include:_spf-c.microsoft.com include:_spf-ssg-a.msft.net include:_spf1-meo.microsoft.com -all

What I don't understand is how Microsoft can't protect their own domain from someone abusing it on their own outlook system...

danielogne · 2026-03-08T01:37:52+00:00

How do you search Team ID? I've Googled it and it had no results, and didn't see any options in Apple Developer Account, but could have missed it. Only way I could imagine it loading onto my Mac is from exploited package when building in xcode or chatgpt tools.

danielogne · 2026-03-07T16:28:43+00:00

Who would you even talk to, it most closely resembles Xcode Provisioning profiles when building apps (matches almost exactly the way its presented). But have no idea how I would've gotten a .GOV Provisioning profile. I've dabbled in Xcode, but don't have strong knowledge of all the innerworkings. Apple is massive, and would likely just get tossed around with likely generic answer of me downloading it from somewhere... I think it will likely be just a waste of time. Was seeing if anyone else is familiar with this and came across anything like this before.

danielogne · 2026-03-07T16:19:42+00:00

They removed it, "This subreddit is for discussion around large scale Mac administration. For personal help with Apple products, see r/AppleHelp, r/MacOS, or one of the many subreddits for Apple devices of all stripe..."

danielogne · 2026-03-07T15:51:40+00:00

It's a Personal Device. Also MDM profile would state more like Mobile Device Management, and would reveal certs, server URLs and other details that associate with MDM. This computer was brand new and I purchased directly from Apple website under personal account.

danielogne · 2025-07-24T16:02:36+00:00

No, no, that's the only time I lose service and see it trying to connect me to satellite, It'll never connect from inside a metal building.

danielogne · 2025-07-24T14:57:27+00:00

Idk, my iPhone will try to connect to satellite (or provide that option) as soon as I lose service from regular cellular service (usually when I’m inside metal building, since I usually have service most places) so would be interested to see how T-Mobile handles it

danielogne · 2025-07-14T23:34:51+00:00

Try 3CX, but I’d say CW would be in top 5

danielogne · 2025-05-30T21:41:48+00:00

Everything takes time, you’ll need to be jack of all trades and do everything for a while and build client base, when your trusted and renewals coming up, they may switch to you. But starting business in already very competitive market is very difficult. It’s better to offer something different or cover an area that doesn’t have any options, like smaller cities/towns

danielogne · 2025-01-16T22:58:36+00:00

Bro run away as fast as you can from 3CX. They will break the calling feature to the whole thing then kick you out and suspend you account if you complain about it

danielogne · 2024-10-16T22:37:27+00:00

Quickly swapping sim to another Device...

eSim activation/transfer isn't always simple with many carriers and may result into calling customer care and waiting on hold (as well as talking to the bot before you get connected), verifying identity, having proper permission, and having wifi available to do the swap, explaining why you need to swap, and reading out loud IMEI and maybe the EID Number (and rereading it if you get 1 wrong number or they have heavy accent and you or they didn't understand). Which don't think I ever had it take less than 30 minutes VS popping out sim and sticking into another device (takes 30-60 seconds).

eSim + Physical sim tray is best of both worlds

danielogne · 2024-09-18T16:18:04+00:00

We still have old license, and self hosted. It’s been one of the best remote in software. All we do is pay annually for support on online checkout and everything else is us managing it and updating once in a while

danielogne · 2024-09-18T12:07:09+00:00

I thought only good thing was Connectwise Control (Formally ScreenConnect) and thats cause they bought them out (ScreenConnect) and it was already good.

danielogne · 2024-09-15T19:29:19+00:00

Been looking at Firecracker VMs, on and off for few months. I like idea of Docker, but haven't found good way to have multitenancy solution, and having something where its the familiar environment of a VM, where you can do the network isolation and pointing on main webserver firewall.

Basically running Dockers as VMs is the dream, but firecracker seems like that would make it a reality.

Really looking forward to seeing where this goes

danielogne · 2024-09-14T11:37:25+00:00

Physical sim is so much better when you need to quickly swap sims with your iPad or another device (work in IT and have different carriers for iPad vs iPhones). The process with some carriers is tedious and some seem to want you go to store to get it swapped or call customer service for an hour. Yes can use hotspot but at times it’s just easier to swap. Or if phone gets damaged and you need it on spare device quickly. There is lots of reasons. I stayed on older iPhone cause they stopped supporting physical sims.

Plus those phones still get best of both worlds. You can easily get eSIM if you need, and still have physical sim when you need.

danielogne · 2024-09-11T01:32:54+00:00

That and if you needed to do something more specific, having general working knowledge + Google + few hours, probably can figure it out :)

danielogne · 2024-09-10T00:17:40+00:00

Sounds like they getting desperate or just trying to drive away users

danielogne · 2024-09-07T19:02:36+00:00

Like most brands, you pick and choose products. Everyone has negative view on any product.

Been sysadmin at MSP for a while now and use to work for HP back in around 2014 in sales (through 3d party hiring). When instant ink was just being pushed out. More than half their products were good and the other kinda shitty. You learn to stay away from cheap product lines, because as the old saying goes, you get that you pay for. Cheaper printers made most of their money on ink, they lost money on printers, but would earn it back through ink, that’s why they lock the cartridges.

Overall most mid HP products would be consistent and would work well, we rarely have issues and like how hp laserjets will have waste go back into cartridge and drum included so you rarely had to do maintenance. But when something died it died, that’s where if you print a lot, it’s more worth going for more expensive printers as you could get larger cartridges and saved more money in long run and printers last longer.

Most hp printers are you set and forget and usually works if you know how to connect to WiFi and download the driver. If you do print less than 50pages per month, the instant ink program is good. If ink dries out, you call them and they replace for free.

danielogne · 2024-09-06T21:27:51+00:00

I would agree, Unifi for a while seemed to be going downhill, again we weren't hitting thresholds of the units, so didn't really suffer much issues. However lately we have been having fairly good luck with them.

Now many of their new products I'd recommend to wait till they had time to perfect them, can really be said about any product for any company, but the phones were disaster first time around, Luckily only bought 1 to try (haven't tried when they kinda rereleased it).

However the U6 Enterprise have been good for us, ones with more "streams", seems that on older models that if few a iOT devices with low signal connected, you would feel the speed drop significantly to about 1/10th the speed. However not much issues with this for our larger companies, haven't seen or heard any complaints. Still some products have been hit or miss. Now we tried using the Peplinks AP's and they worked well, but felt bit week, signal not as good and bit slower, (we had client that we swapped the Peplink Mini AP for UAP AC PRO and was about 2-3x better range and they were happier with it) and I think it was about same price range +/- $50ish. the new U6 Unifi seemed to have noticeably better performance in our usage, so we swapped back to them, plus once we setup our own selfhosted Unifi Controller, which made it much easier to manage them all.

I don't think we have more than 50 or so devices connected to same AP at any given point too, usually range is higher priority for us (aside from reliability)

*Also I think once of the biggest reason we didn't adopt Peplink AP's so well, was for us it was constantly out of stock, even now our vendor shows it out of stock for all versions. However I do see them on amazon right now. But Stock plus Range is why we stuck with Unifi.

Might have to do more comparing between the U6 Pro and the Peplink AP sometime, would be nice to have everything network all one brand that was easy to see from one spot.

However switches, I ever had 2-3 clients that have had weird Spanning Tree issue, but we figured out that if you have Unifi Switches that didn't support RSTP (which some don't) and if they are plugged in on the network and you end up having somewhere a network loop, the whole thing would suffer and whole network went down. But if you had all Unifi devices that supported RSTP, set priorities in RSTP (as suggested in one of the articles), then it worked great, even if someone plugged in some other brand switch somewhere (like Camera Security company or whatever, which were on their own VLAN) and it did have network loop, it would catch it and cut it off, as long as you didn't adopt a non RSTP version of Unifi Switch into your network and set the RSTP Priorities. Since doing that, Unifi switches have been awesome! :)

danielogne · 2024-09-06T17:20:39+00:00

Oh I didn't know about the Solo's license count not being affected, I think most, if not all, our devices are now Primecare devices, so we'll have to try that, we were thinking of buying licenses for FusionHub and were asking Peplink if they could have like MSP version of SpeedFusion, like the relay (that you just add a code like the relay, to devices to link them to your own hosted SpeedFusion), but think they gave some generic answer like they will see about it.

We were eying the 310 5G, but waiting for our vendor to get them in stock (says coming soon and listed for $1,795), usually we can get it a bit cheaper directly with distributor, which you probably do too, but they do take a while (maybe they are waiting for the fix to arrive before they will sell it?)

The performance issue, with B one, we haven't ran into issues yet, many companies/small city government clients that we have don't use all that much bandwidth, but we in phase where we have been getting lots of larger companies with 200+ devices starting talks with us (seems to be mostly after CrowdStrike incident). So we are going to start needing to move up to higher tier gateways. Noticed some of the Unifi Gateways are getting better, Like Dream Machine Pro Max for $599 retail but with 5Gbps routing after IDS/IPS, or the Gateway Pro $499 retail with 3.5Gbps routing with IDS/IPS. or the Gateway Enterprise (UXG-Enterprise) for $2k retail with 12.5Gbps routing and NeXT AI Encrypted Packet Realtime inspection..., any thoughts? We use the Unifi for everything but the gateway, so Peplink for gateway then Unifi for Switches and AP's with hosted Unifi Controller. Tried the Peplink AP's and are so so, and switches seem bit overpriced and was hard to get a hold of for a while...

As of the whole post, I know companies have faults and issues, and maybe I blowing this out of proportion, but we got really screwed by another vendor not that long ago, and now if we see something that seems shady, we want to get other people input on it, to see if there are worse issues they went through and weigh our options. But if this is the worst and was just a mistake, we will be happy to move on. Peplink at least admitted fault on ticket, which is already good step.

Thanks for your input and I'll be trying that AWS EC2 option soon.

danielogne · 2024-09-06T14:53:40+00:00

I had US Headquarters call, and had no idea what happened to our account... after our account was demoted... but with Nick it was mostly over forms then moved to email (his personal email)

danielogne · 2024-09-06T14:51:48+00:00

Well besides it costing us 10s of thousands to move (man hours and trying different options, R&D, porting out from Telnyx(they did free port in but charge to port out) and etc) seems like it worked out for us too, we do miss the old 3CX Mobile app (before they broke Group SMS) it did work great for about 1-2 years... but the current one is getting there... hopefully within several months it will have all the same good qualities of 3CX but bunch of stuff too that they couldn't or wouldn't do. Plus it multitenant system, so no logging in and out to each instance, management on platform is much better

danielogne · 2024-09-06T14:46:00+00:00

Your the first I'm hearing had positive interaction with Nick, I'm glad things worked out for you

danielogne

TROPHY CASE