This Google phishing page is a thin client - your keystrokes drive a real browser on the attacker's server. https://intel.threadlinqs.com/threat/TL-2026-3036 #ThreatIntel #Google #SocketIO #diffDOM