"Validate your account" countdown timer

This phishing kit (reported on by Cofense in 2022, but first seen on urlscan.io in 2018) has a live countdown until a user's email is supposedly "deleted from our server".

References

IOK Rule (edit)

title: '"Validate your account" countdown timer'
description: |
  This phishing kit (reported on by Cofense in 2022, but first seen on urlscan.io in 2018) has a live countdown
  until a user's email is supposedly "deleted from our server".
references:
  - https://cofense.com/blog/countdown-timer-ransomware-themed-phishing-attack

detection:
  scareText:
    html|contains|all:
      - <span style="color:gold; font-size:35px;"><span id="timer">
      - <span style="color:gold;">seconds</span> to validate your account (
      - ) else it will be deleted from our server

  condition: scareText

tags:
  - kit
  - target.generic-email