So I got this nice email early this morning - https://imgur.com/a/HdTVeNv
The link to the phishing scam is this - https://sdqwesadsd.usa.cc/kekeke/Sign%20in%20to%20your%20Microsoft%20account.html
But the funny thing is that you can view his index which happens to contain a .zip of the site files (H.zip) - https://sdqwesadsd.usa.cc/kekeke/
From what I see he is sending the info to his gmail account which is - [email protected]
Have fun fucking with him!