Phishing Analysis

🔬 Threat Analysis Report

• Threat: Microsoft login page phishing
• Target: Users attempting to log into Microsoft accounts
• Method: Fake sign-in page prompting for credentials
• Exfil: Data potentially sent to attacker-controlled server via Javascript form submission
• Indicators: Unrelated domain on r2.dev, obfuscated JavaScript, generic security check message
• Risk: HIGH - Credentials could be stolen

🔒 Obfuscation Detected

• atob
• eval
• fromCharCode
• unicode_escape
• base64_strings

📡 API Calls Detected

• ${TW}