urlquery.net
Investigate/Report/2da07fea-25cd-4c3f-aec1-8cd902c7ac54
WEBSITE ANALYSIS REPORT

http://salesloft.mineraltree.com/t/9585/sc/7322eba9-eab9-4ca9-99d5-28fe02f9eb6f/NB2HI4DTHIXS633VORWG633LFZXWMZTJMNSS4Y3PNUXWE33PNN3WS5DINVSS65LTMVZC6OBXGMZGMNZVMNSGMZDDGRTDEOBZMVRWMNBZMY4GKZJUHFQTOMDFIBTWY33CMFWHAYLZNVSW45DTFZRW63J7MFXG63TZNVXXK4ZGNFZW243BNRVHGYLVORUGK3TBMJWGKZBGMVYD24DMNFXGW===/GBRWMMZSMRRDGMZZGRRTCODCG44TAMZWHEYDONTCGA3GEYJUHA3DEYZVMIZTANTG/outlook-office-com-bookwithme-user-8732f75cdfdc4f289ecf49f8ee49a70e-globalp

public
Report tags
Submit tags
Request review

JavaScript

Recorded scripts and browser console observations

163 scripts
Observed scripts. Expand a row for metadata, detections, and available captured source.
#URL / sourceIntroduced bySizeFirst seen
1scriptElement5.6 KB
2scriptElement5.1 KB
3scriptElement55.3 KB
4scriptElement2.9 KB
5scriptElement105.3 KB
6scriptElement4.1 KB
7scriptElement13.4 KB
8scriptElement26.0 KB
9scriptElement2.7 KB
10scriptElement69.8 KB
11scriptElement34.0 KB
12scriptElement6.5 KB
13scriptElement7.6 KB
14scriptElement5.2 KB
15scriptElement10.0 KB
16scriptElement14.4 KB
17scriptElement772.1 KB
18scriptElement3.7 KB
19scriptElement818 B
20scriptElement39.6 KB
21scriptElement5.2 KB
22scriptElement18.9 KB
23scriptElement41.5 KB
24scriptElement74.3 KB
25scriptElement956 B
26scriptElement13.3 KB
27scriptElement1.9 KB
28scriptElement80.4 KB
29scriptElement418 B
30scriptElement1.9 KB
31scriptElement14.1 KB
32scriptElement1.6 KB
33scriptElement63.7 KB
34scriptElement19.2 KB
35scriptElement2.2 KB
36scriptElement91.4 KB
37scriptElement7.3 KB
38scriptElement15.7 KB
39scriptElement39.4 KB
40scriptElement6.5 KB
41scriptElement24.0 KB
42scriptElement4.5 KB
43scriptElement77.3 KB
44scriptElement172.2 KB
45scriptElement46.4 KB
46scriptElement28.3 KB
47scriptElement4.6 KB
48scriptElement44.9 KB
49scriptElement45.1 KB
50scriptElement9.6 KB
51scriptElement3.1 KB
52scriptElement39.1 KB
53scriptElement196.4 KB

Script #53

Recorded metadata

URL

https
https://res.public.onecdn.static.microsoft/owamail/20260508010.11/resources/suiteux-shell/js/suiteux.shell.plus.js

IP / ASN

Norway 23.36.76.179

AS20940 · Akamai International B.V.

Resource information

Introduced by
scriptElement
Inline
false
First seen (UTC)
03 Feb 2026 · 15:08:08.993 UTC
Last seen (UTC)
28 May 2026 · 18:11:01.745 UTC
Times seen
277
Size
196.4 KB (201162 bytes)
MD5
4c40d1f9819e89b50972ca25b53c0c13
SHA1
8433137db838359fa86d81fdab8e0169cf777960
SHA256
9f7a8a08d3539a414bbd8914e6dfdd75169813cbeaacfa72aedd8dfeec1680b2

Detections

Detections attached to this script.
DetectionSeverityVerdict
YARAhub by abuse.ch Detect files is `SliverFox` malwaremediummalware

Source

Loading captured source…

54scriptElement7.0 KB
55scriptElement40.7 KB
56scriptElement5.5 KB
57scriptElement2.8 KB
58scriptElement33.4 KB
59scriptElement10.5 KB
60scriptElement2.7 KB
61scriptElement8.5 KB
62scriptElement4.8 KB
63scriptElement319.8 KB
64scriptElement3.0 KB
65scriptElement112.0 KB
66scriptElement23.0 KB
67scriptElement8.7 KB
68scriptElement5.4 KB
69scriptElement6.7 KB
70scriptElement4.0 KB
71scriptElement5.5 KB
72scriptElement22.1 KB
73scriptElement3.5 KB
74scriptElement63.3 KB
75scriptElement3.7 KB
76scriptElement226.0 KB
77scriptElement6.4 KB
78scriptElement42.2 KB
79scriptElement4.4 KB
80scriptElement8.6 KB
81scriptElement4.0 KB
82scriptElement24.7 KB
83scriptElement1.6 KB
84scriptElement1.9 KB
85scriptElement6.0 KB
86scriptElement18.5 KB
87scriptElement105.4 KB
88scriptElement3.1 KB
89scriptElement12.1 KB
90scriptElement62.2 KB
91scriptElement74.6 KB
92scriptElement7.0 KB
93scriptElement24.9 KB
94scriptElement18.5 KB
95scriptElement10.3 KB
96scriptElement122.0 KB
97scriptElement19.7 KB
98scriptElement151.4 KB
99scriptElement4.2 KB
100scriptElement4.7 KB
101scriptElement2.7 KB
102scriptElement44.4 KB
103scriptElement15.6 KB
104scriptElement28.6 KB
105scriptElement409.8 KB
106scriptElement4.3 KB
107scriptElement493.9 KB
108scriptElement1.1 KB
109scriptElement1.7 KB
110scriptElement10.7 KB
111scriptElement5.9 KB
112scriptElement37.0 KB
113scriptElement5.4 KB
114scriptElement4.1 KB
115scriptElement51.4 KB
116scriptElement4.0 KB
117scriptElement32.5 KB
118scriptElement7.0 KB
119scriptElement359.5 KB
120scriptElement72.5 KB
121scriptElement59.1 KB
122scriptElement13.4 KB
123scriptElement18.2 KB
124scriptElement5.7 KB
125scriptElement7.2 KB
126scriptElement40.0 KB
127scriptElement7.9 KB
128scriptElement36.7 KB
129scriptElement218.5 KB
130scriptElement5.4 KB
131scriptElement31.3 KB
132scriptElement5.9 KB
133scriptElement36.6 KB
134scriptElement1.6 KB
135scriptElement14.4 KB
136scriptElement6.3 KB
137scriptElement24.7 KB
138scriptElement6.1 KB
139scriptElement2.1 KB
140scriptElement6.2 KB
141scriptElement4.7 KB
142scriptElement202.6 KB
143scriptElement6.4 KB
144scriptElement4.8 KB
145scriptElement8.6 KB
146scriptElement5.8 KB
147scriptElement9.9 KB
148scriptElement4.3 KB
149scriptElement5.7 KB
150scriptElement10.1 KB
151scriptElement82.0 KB
152scriptElement11.9 KB
153scriptElement598 B
154scriptElement2.0 KB
155scriptElement17.3 KB
156scriptElement10.0 KB
157scriptElement44.3 KB
158scriptElement306.2 KB
159scriptElement1.2 KB
160scriptElement1.2 KB
161scriptElement5.3 KB
162scriptElement6.1 KB
163scriptElement962 B

Console observations

Browser messages in recorded order

0 messages
No console observations in this report.
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close
LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot