I was digging through phishing infrastructure and found some interesting breadcrumbs, including old domains, database paths, and a default Microsoft client ID. Watch the full video: https://youtu.be/NKS8Gbt6qUk?si=9jWYD1O7aiyB_TeZ