What are the subjects of the phishing (domains, URLs or IPs)?
https://esarathi.in/secure/https://redirect-url.email/?link=https%3A%2F%2Fesarathi.in%2Fsecure%2Fhttps://secured.distinctivedigitalidentity.de/Azk1e/
What are the impersonated domains?
https://onedrive.live.com/
Where or how did you discover this phishing?
We were targeted from a hacked o365 tenant via mail.
Do you have a screenshot?
Screenshot
Mail:
Related external source
No response
Additional Information or Context
Redirection service + captcha like page before the redirect to the third and final site is done...
What are the subjects of the phishing (domains, URLs or IPs)?
https://esarathi.in/secure/https://redirect-url.email/?link=https%3A%2F%2Fesarathi.in%2Fsecure%2Fhttps://secured.distinctivedigitalidentity.de/Azk1e/What are the impersonated domains?
https://onedrive.live.com/Where or how did you discover this phishing?
We were targeted from a hacked o365 tenant via mail.
Do you have a screenshot?
Screenshot
Mail:Related external source
No response
Additional Information or Context
Redirection service + captcha like page before the redirect to the third and final site is done...