WEBSITE ANALYSIS REPORT
https://login.microsoft.com//////////////////////////////common/oauth2/v2.0/authorize?state=YnJ5YW4uZ2VybGFjaEBjb25zb2xpZGF0ZWQuY29t&scope=openid+profile+https%253A%252F%252Fgraph.microsoft.com%252FUser.Read&prompt=none&client_id=0e6d2340-fc50-40aa-b3ea-48631d7b81ed&uri=https%253A%252F%252Fdeveloper.salesforce.com%252Fdashboard%252Fsession%252Fuser%252Fverify%252Fstep1&%255Ca3edq%250C+2e4c%250D%250A%2593bb66f835%2509%258C2979X%25BCint+Builder.Decode%250A%2509Context+%253A%253D+FlowEmail+%255B+OffsetStream+%253A=%2520Token%2509Data%2520%257C%2520Email%257Dfor%2520Stream%253A%253DPayloadBuilder+;+ValueContext+%257D+Trace%250A%2509Decode+.+SignalVector+%257B%2520Offset%257D%250Aa78c998ef06b569e%2597%25E9%252A%25CBa93627d06a07eba872664f4a92c74eae25f60308d1cad09a16e7beef0b79c03d8bd7528c4a7efc8bdb3fc053evar%252BVector-Secret%25250A%252509Decode%252B%25253B%252BBuffer%25250A%252509Encode%252B-%252BSession%25250A%252509Decode%252B%25255D%252BPayload%25250A%252509Offset%252B%25252B%252BBuilder%25250A%252509Builder%252B%252528%252BToken%25250A%252509Encode%252B.%252BKey%25250A%252509Context%252B%25257B%252BToken%25250A%25257D%25250Aelse%252BDecode%25252CBuilder%25250A%252509Stream%252B%25253A%25253D%252BHeader%25250A%252509Vector%252B%252526%252BVector%25250A%252509Payload%252B%25253D%252BBuilder%25250A%252509Value%252B%25257C%252BPayload%25250A%252509Secret%252B%25253D%252BBuffer%25250A%25257D%25250Aswitch%252BPayload%25252CSession%25250A%252509Payload%252B%252529%252BToken%25250A%252509Payload%252B%252526%252BBuilder%25250A%252509Data%252B%25257C%252BDecode%25250A%252509Secret%252B%25255B%252BStream%25250A%25257D%25250Astring%252BBody%252529Session%25250A%252509Session%252B%252528%252BTrace%25250A%252509Buffer%252B%25257B%252BSession%25250A%252509Vector%252B%25252A%252BVector%25250A%252509Context%252B%25253B%252BToken%25250A%252509Value%252B%25252A%252BData%25250A%252509Encode%252B%25253B%252BFlow%25250A%252509Trace%252B%252529%252BTrace%25250A%25257D%25250Aint%252BToken%25257CSignal%25250A%252509Header%252B%25255D%252BFlow%25250A%252509Body%252B.%252BKey%25250A%252509Vector%252B%252528%252BSignal%25250A%252509Session%252B%25252C%252BData%25250A%25257D%25250Ac2FuZGVlcEBmdmNvbS5hZQ==
public
Malicious detection
Review evidence →2 detections · review the detection signals
Domain graph
Hostnames and connections captured in this scan
Loading domain graph…
Hostnames
- browser.events.data.microsoft.com8 captured requests
- c.s-microsoft.com4 captured requests
- js.monitor.azure.com1 captured requests
- login.microsoft.com1 captured requests
- login.microsoftonline.com1 captured requests
- mem.gfx.ms4 captured requests
- res.cdn.office.net35 captured requests
- uhf.microsoft.com1 captured requests
- unequaled523.hazelihill.com.de4 captured requests
- vf.rpmktn.com1 captured requests
- wcpstatic.microsoft.com1 captured requests
- www.microsoft.com3 captured requests
- www.office.com2 captured requests
Connections
- login.microsoft.com → login.microsoftonline.comRedirects to1 captured connections
- login.microsoftonline.com → vf.rpmktn.comRedirects to1 captured connections
- unequaled523.hazelihill.com.de → www.office.comRedirects to2 captured connections
- vf.rpmktn.com → unequaled523.hazelihill.com.deRedirects to1 captured connections
- www.office.com → browser.events.data.microsoft.comCalls8 captured connections
- www.office.com → c.s-microsoft.comLoads from4 captured connections
- www.office.com → js.monitor.azure.comLoads from1 captured connections
- www.office.com → mem.gfx.ms1 captured connections
- www.office.com → mem.gfx.msLoads from3 captured connections
- www.office.com → res.cdn.office.netLoads from35 captured connections
- www.office.com → uhf.microsoft.comLoads from1 captured connections
- www.office.com → wcpstatic.microsoft.comLoads from1 captured connections
- www.office.com → www.microsoft.comLoads from3 captured connections
Network requests
Click any request row to expand it in place. Multiple transactions can remain open.
| Timestamp (UTC) | Method | Status | Host / path | Type | Size | Duration | Signals |
|---|---|---|---|---|---|---|---|
| GET | 302 | document | 0 B | 0 ms | — | ||
| GET | 302 | document | 0 B | 0 ms | — | ||
| GET | 200 | document | 0 B | 0 ms | 1 alerts | ||
| GET | 200 | document | 1.3 KB | 458 ms | 1 alerts | ||
| GET | 200 | script | 4.3 KB | 225 ms | 1 alerts | ||
| GET | 200 | img | 134 B | 235 ms | 1 alerts | ||
| POST | 200 | document | 0 B | 0 ms | 1 alerts | ||
| GET | 302 | document | 0 B | 84 ms | — | ||
| GET | 200 | document | 231.3 KB | 27 ms | — | ||
| GET | 200 | stylesheet | 236.7 KB | 34 ms | — | ||
| GET | 200 | stylesheet | 1.6 KB | 21 ms | — | ||
| GET | 200 | font | 10.3 KB | 19 ms | — | ||
| GET | 200 | font | 10.8 KB | 19 ms | — | ||
| GET | 200 | font | 11.1 KB | 19 ms | — | ||
| GET | 200 | font | 11.9 KB | 18 ms | — | ||
| GET | 200 | stylesheet | 167.8 KB | 40 ms | — | ||
| GET | 200 | script | 106.8 KB | 10 ms | — | ||
| GET | 200 | script | 51.9 KB | 7 ms | — | ||
| GET | 200 | script | 145.7 KB | 8 ms | — | ||
| GET | 200 | script | 115.5 KB | 6 ms | — | ||
| GET | 200 | script | 276.4 KB | 411 ms | — | ||
| GET | 200 | script | 139.3 KB | 36 ms | — | ||
| GET | 200 | script | 30.1 KB | 56 ms | — | ||
| GET | 200 | img | 4.0 KB | 34 ms | — | ||
| GET | 200 | img | 83.5 KB | 4 ms | — | ||
| GET | 200 | img | 787.9 KB | 244 ms | — | ||
| GET | 200 | img | 145.2 KB | 44 ms | — | ||
| GET | 200 | img | 294.0 KB | 67 ms | — | ||
| GET | 200 | img | 275.1 KB | 74 ms | — | ||
| GET | 200 | img | 363.7 KB | 77 ms | — | ||
| GET | 200 | img | 788.0 KB | 307 ms | — | ||
| GET | 200 | img | 323.9 KB | 81 ms | — | ||
| GET | 200 | img | 281.5 KB | 65 ms | — | ||
| GET | 200 | img | 121.9 KB | 36 ms | — | ||
| GET | 200 | img | 88.3 KB | 37 ms | — | ||
| GET | 200 | img | 91.3 KB | 22 ms | — | ||
| GET | 200 | img | 720.4 KB | 89 ms | — | ||
| GET | 200 | img | 499.4 KB | 88 ms | — | ||
| GET | 200 | img | 223.9 KB | 57 ms | — | ||
| GET | 200 | img | 80.1 KB | 35 ms | — | ||
| GET | 200 | img | 150.1 KB | 38 ms | — | ||
| GET | 200 | img | 199.4 KB | 48 ms | — | ||
| GET | 200 | img | 741.5 KB | 73 ms | — | ||
| GET | 200 | img | 6.9 KB | 23 ms | — | ||
| GET | 200 | img | 3.9 KB | 24 ms | — | ||
| GET | 200 | font | 33.3 KB | 17 ms | — | ||
| GET | 200 | font | 28.7 KB | 10 ms | — | ||
| GET | 200 | font | 25.7 KB | 18 ms | — | ||
| GET | 200 | font | 29.4 KB | 4 ms | — | ||
| GET | 200 | script | 89.7 KB | 74 ms | — | ||