Office 365 phishing email asks for captchas to remain undetected

that's not only to make itself look more legit to humans, but to evade detection by security tools, web proxies, email gateways, etc. aka 'bots'. The irony of it.