We've just pushed a major update to
@cybaa.io's free malicious domain checker - it will now check URLs against Google's Web Risk service! Even better - we've updated the API to do the same, so you can integrate it straight in to your own security processes or for research! Go check it out now!

Of the approx 100,000 unique hosts we've scanned so far, are almost 40,000 have Entra tenants, here's a quick view of the regions they're hosted in. The vast majority are in the EU and North America, pretty evenly split with Asia coming in a distant third.

Depending on how you read their latest statement, you could infer partial card data and hashed passwords were taken too. The use and placing of "usable" leaves more open questions.

Thoughts go out to everyone under pressure to bring everything back online safely - always an awful position to be in!