WEBSITE ANALYSIS REPORT

https://login.secure-crossriver.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=639282094264119780.NmQ3MDdlNmUtNWUwZi00ODI1LTkzODUtMzkwOTQ3NjI3NzRiYzhhOTA1MWQtMzQyOC00YjJlLTljOGYtOTE1NzUxYTc5ODBl&ui_locales=en-US&mkt=en-US&client-request-id=0cd1e3cd-2f07-4fc1-a5c2-8eb1a50eb09b&siwa=1&siwg=1&state=m1mfXEzCg3hzxicLCM7D5E-PSkNoSurynt22of31KWg9D7ZYajkMtqGJ1y-Gg5G81THdzPLaO4mVR6q6QLHs-B1GnU3cHvZeHQRzsh7IKzdx8FOfDENB_pWF0PjjHPPqDDwTXEDpSD9zlgcR9IJf-aGa8X7hqovvpFyA3OpOhECR9XG6myhjV5iVWsdxmibKanNy4M5Vf-lp548EpkBqTQKuinsIpSDVaA7uKOctjPyUy2Cig2bDXBC7LkzJ-B9opbLe21TZFFRGCpHuTMERdnpn9xA4-AiyQGIJ8GF8VWxCxMLxd55gTfQVONBwO8BCv9_KCfBtSDNAfEP2nl4i2bgBrkWpmpPBwEjytIsQ05S4oabxhqUeoFfOBiOAzebvOY8KP3NvEwme_CRfDJ55T17mSuS6qhmiLcCcl_EsuiO4NGnt-Knl3nmb3_9-rdaS&x-client-SKU=ID_NET8_0&x-client-ver=8.16.0.0

22 Oct 2026 · 08:31:54.000 UTCpublic

Report tags
Submit tags: openphish

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Captured HTTP requests; click any summary row or use its hostname button to expand transaction details.
Timestamp (UTC)	Method	Status	Type	Size	Duration	Signals
08:31:17.061	GET	200	document	0 B	0 ms	1 alerts

08:31:17.688	GET	301	document	0 B	30 ms	—

08:31:17.727	GET	200	document	13.9 KB	21 ms	—

08:31:18.143	GET	200	script	212.1 KB	48 ms	—

08:31:18.147	GET	200	script	409.2 KB	77 ms	—

08:31:18.150	GET	200	stylesheet	1.24 MB	73 ms	—

08:31:18.153	GET	200	stylesheet	272.8 KB	70 ms	—

08:31:18.155	GET	200	stylesheet	126.4 KB	64 ms	—

08:31:18.157	GET	200	script	2.80 MB	63 ms	—

08:31:18.161	GET	200	script	46.5 KB	8 ms	—

08:31:18.164	GET	200	script	2.34 MB	39 ms	—

08:31:18.166	GET	200	script	248.8 KB	35 ms	—

08:31:18.168	GET	200	script	6.0 KB	34 ms	—

08:31:18.170	GET	200	script	28.3 KB	35 ms	—

08:31:18.218	GET	200	lazy-img	3.1 KB	9 ms	—

08:31:18.522	GET	200	script	248.8 KB	6 ms	—

08:31:18.523	GET	200	script	6.0 KB	5 ms	—

08:31:18.526	GET	200	script	46.5 KB	6 ms	—

08:31:18.527	GET	200	script	28.3 KB	4 ms	—

08:31:18.549	GET	200	img	15.1 KB	5 ms	—

08:31:18.551	GET	200	img	9.4 KB	6 ms	—

08:31:18.620	GET	302	subdocument	0 B	0 ms	—

08:31:18.692	GET	200	script	184.9 KB	5 ms	—

08:31:20.869	GET	200	subdocument	0 B	0 ms	—

08:31:21.038	GET	200	document	55.3 KB	2331 ms	—

08:31:23.429	GET	200	stylesheet	111.5 KB	54 ms	—

08:31:23.433	GET	200	script	586.8 KB	50 ms	—

08:31:23.434	GET	200	script	60.8 KB	78 ms	—

08:31:23.569	GET	200	script	185.7 KB	30 ms	—

08:31:23.604	GET	200	img	16.8 KB	4 ms	—

08:31:23.678	GET	200	script	399.3 KB	8 ms	—

08:31:23.909	GET	200	script	15.4 KB	13 ms	—

08:31:23.914	GET	200	img	2.6 KB	7 ms	—

08:31:23.915	GET	200	img	3.5 KB	7 ms	—

08:31:23.988	GET	200	img	45.5 KB	3 ms	—

08:31:23.990	GET	200	img	3.6 KB	3 ms	—

08:31:24.037	GET	200	subdocument	3.4 KB	2906 ms	—
Transaction #26 Request / response URL GET HTTPS https://login.live.com/Me.htm?v=3 IP / ASN 20.190.147.2 AS8075 · MICROSOFT-CORP-MSN-AS-BLOCK Transaction actions#26 Investigate Download resource3.4 KB (3447 bytes) Resource unavailableThe captured bytes cannot be retrieved. External sources Requested by https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=9199bf20-a13f-4107-85dc-02114787ef48&scope=https%3A%2F%2Foutlook.office.com%2F.default%20openid%20profile%20offline_access&redirect_uri=https%3A%2F%2Foutlook.office.com%2Fmail%2F&client-request-id=c81d4c94-570c-35fc-0dd9-e067f32c169c&response_mode=fragment&client_info=1&clidata=1&prompt=select_account&nonce=01a162bc-77ad-7e8f-bcce-db259ae1fa4c&state=eyJpZCI6IjAxYTE2MmJjLTc3YWMtN2VlZS1hMDE4LTMyOTY4N2IwYTQxMCIsIm1ldGEiOnsiaW50ZXJhY3Rpb25UeXBlIjoicmVkaXJlY3QifX0%3D%7CaHR0cHM6Ly9vdXRsb29rLm9mZmljZS5jb20vbWFpbC8&claims=%7B%22access_token%22%3A%7B%22xms_cc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&x-client-SKU=msal.js.browser&x-client-VER=5.12.0&response_type=code&code_challenge=UpFx0HdHYHsxrJso_lUkUIlWfQGSnt4W0q-WqmHDT2U&code_challenge_method=S256 Resource information File type JavaScript source, ASCII text, with very long lines (3445), with CRLF line terminators MIME type text/html; charset=utf-8 First seen (UTC) 31 Jan 2025 · 11:24:57.763 UTC Last seen (UTC) 22 Oct 2026 · 21:27:47.597 UTC Times seen 7677 Size 3.4 KB (3447 bytes) MD5 acdec8dad3164fba20e86d50f1b979f1 SHA1 0c5fd1cca5becdb0080d20e6a90ccd91bc0d5894 SHA256 1d2cde2e778a731cbd158758f735e1bcc2508a8252720d261d94068aff45aacc Certificate information Issuer DigiCert Inc · DigiCert Global G2 TLS RSA SHA256 2020 CA1 Subject login.live.com Protocol / cipher TLSv1.2 · TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 SHA1 fingerprint DA:29:DA:61:94:6A:8C:6B:64:7A:F9:67:62:51:1D:24:65:6D:81:0A Valid from Mon, 28 Sep 2026 00:00:00 GMT Valid until Wed, 06 Jan 2027 23:59:59 GMT Technology fingerprints HSTS (Security) HTTP headers Request headers GET /Me.htm?v=3 HTTP/1.1 Host: login.live.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.9 Accept-Encoding: gzip, deflate, br, zstd Referer: https://login.microsoftonline.com/ Sec-Fetch-Storage-Access: none Sec-GPC: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: iframe Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Priority: u=4 Pragma: no-cache Cache-Control: no-cache Response headers HTTP/1.1 200 OK Cache-Control: max-age=315360000 Content-Type: text/html; charset=utf-8 Content-Encoding: gzip Expires: Sun, 19 Oct 2036 08:31:26 GMT Vary: Accept-Encoding P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C543_SN1 x-ms-request-id: f53081a4-9992-4ab7-94c8-19f3a2b70083 PPServer: PPV: 30 H: SN1PEPF000B0223 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Set-Cookie: uaid=3a8019d6bf314e5da1ff0fc29693fa61; domain=login.live.com; Secure; path=/; SameSite=None; HttpOnly MSPRequ=id=N&lt=1792657886&co=1; domain=login.live.com; Secure; path=/; SameSite=None; HttpOnly Date: Thu, 22 Oct 2026 08:31:26 GMT Content-Length: 1393
08:31:27.453	GET	200	img	1.6 KB	5 ms	—

08:31:29.097	OPTIONS	200	xhr	0 B	2504 ms	—

Domain graph

Hostnames

Connections

Network requests

Transaction #26

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #26

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

HTTP headers

Request headers

Response headers

Domain graph

Network requests