Active #Phishing page hosted on @OracleCloud. Pulls the domain out of the fragment and fetches a favicon to rebrand the page. Data submitted to a compromised wordpress site. Finding an abuse contact for @Oracle is much harder than it should be https://twitter.com/bentasker/status/1381518828664918017/photo/1