OK, totally new topic here. Everyone ready?
A colleague just forwarded me a phishing e-mail that used a shitty lure, but interesting landing page. It's the M365 login under a throwaway domain, but personalized for each victim, and it seems to load M365 customizations as well as evade debugging (with Web Developer Extension enabled). Which phishing toolkit uses URL parts like tree10_keyboard3_flower3_sugar2_sky4_ etc.?