Escalation request for unresolved phishing case SIR24655613 – Azure-hosted phishing URLs still active

Hello Microsoft Q&A Team,

We are following up regarding SIR24655613, which concerns multiple phishing URLs hosted on Microsoft Azure infrastructure.

The case has already been reported through the official Microsoft abuse/security channels. However, the reported phishing resources remain active, and we have not yet been able to obtain a resolution through the standard reporting process.

We are not posting the full list of phishing URLs publicly for security reasons, but we can provide all affected URLs, screenshots, evidence of impersonation, and any additional technical information privately to the appropriate Microsoft team.

At this point, we would appreciate guidance on the following:

1. Is there an alternative escalation path available for SIR24655613 when the reported phishing content remains active after being submitted through the official abuse channel?
2. Can a Microsoft moderator or representative help escalate this case internally to the appropriate Azure Security / Abuse team?
3. Is there any additional information or evidence that we should provide to help accelerate the review and suspension process?
4. Should we continue updating the existing SIR case, or is there another Microsoft channel specifically intended for unresolved or delayed Azure phishing cases?

The reported resources are being used for phishing against financial institutions, so we would appreciate any assistance in ensuring the case reaches the correct team for review.

We can provide the complete list of affected URLs and supporting evidence privately upon request.

Thank you in advance for your assistance.

Kind regards,