Phishing Analysis

🔬 Threat Analysis Report

• Threat: Redirect phishing using Microsoft branding.
• Target: Users attempting to access Microsoft services.
• Method: Deceptive redirect to a fake security check page.
• Exfil: Unknown, likely redirects to a credential harvesting page after security check.
• Indicators: Unofficial domain (r2.dev), Microsoft branding, vague "security check" request.
• Risk: HIGH - Potential redirection to credential theft.

🔒 Obfuscation Detected

• atob
• eval
• fromCharCode
• unicode_escape
• base64_strings

📡 API Calls Detected

• ${TW}