WEBSITE ANALYSIS REPORT
https://login.microsoft.com//////////////////////////////common/oauth2/v2.0/authorize?state=fghgk,n&scope=openid+profile+https%253A%252F%252Fgraph.microsoft.com%252FUser.Read&prompt=none&client_id=a4f8fea1-ce33-41d4-b2b4-22d8c8c91e43&uri=https%253A%252F%252Fdeveloper.salesforce.com%252Fdashboard%252Fsession%252Fuser%252Fverify%252Fstep1&%255Ca3edq%250C+2e4c%250D%250A%2593bb66f835%2509%258C2979X%25BCint+Builder.Decode%250A%2509Context+%253A%253D+FlowEmail+%255B+OffsetStream+%253A=%2520Token%2509Data%2520%257C%2520Email%257Dfor%2520Stream%253A%253DPayloadBuilder+;+ValueContext+%257D+Trace%250A%2509Decode+.+SignalVector+%257B%2520Offset%257D%250Aa78c998ef06b569e%2597%25E9%252A%25CBa93627d06a07eba872664f4a92c74eae25f60308d1cad09a16e7beef0b79c03d8bd7528c4a7efc8bdb3fc053evar%252BVector-Secret%25250A%252509Decode%252B%25253B%252BBuffer%25250A%252509Encode%252B-%252BSession%25250A%252509Decode%252B%25255D%252BPayload%25250A%252509Offset%252B%25252B%252BBuilder%25250A%252509Builder%252B%252528%252BToken%25250A%252509Encode%252B.%252BKey%25250A%252509Context%252B%25257B%252BToken%25250A%25257D%25250Aelse%252BDecode%25252CBuilder%25250A%252509Stream%252B%25253A%25253D%252BHeader%25250A%252509Vector%252B%252526%252BVector%25250A%252509Payload%252B%25253D%252BBuilder%25250A%252509Value%252B%25257C%252BPayload%25250A%252509Secret%252B%25253D%252BBuffer%25250A%25257D%25250Aswitch%252BPayload%25252CSession%25250A%252509Payload%252B%252529%252BToken%25250A%252509Payload%252B%252526%252BBuilder%25250A%252509Data%252B%25257C%252BDecode%25250A%252509Secret%252B%25255B%252BStream%25250A%25257D%25250Astring%252BBody%252529Session%25250A%252509Session%252B%252528%252BTrace%25250A%252509Buffer%252B%25257B%252BSession%25250A%252509Vector%252B%25252A%252BVector%25250A%252509Context%252B%25253B%252BToken%25250A%252509Value%252B%25252A%252BData%25250A%252509Encode%252B%25253B%252BFlow%25250A%252509Trace%252B%252529%252BTrace%25250A%25257D%25250Aint%252BToken%25257CSignal%25250A%252509Header%252B%25255D%252BFlow%25250A%252509Body%252B.%252BKey%25250A%252509Vector%252B%252528%252BSignal%25250A%252509Session%252B%25252C%252BData%25250A%25257D%25250Ac2FuZGVlcEBmdmNvbS5hZQ==
public
Malicious detection
Review evidence →1 detection · review the detection signals
Indicators
Exact observed values · repeated evidence is grouped by type and value
| Kind | Value | Signals | Copy |
|---|---|---|---|
| IP | 104.21.11.221 | URLQuery 4IDS 0TDS 0 | |
| IP | 20.190.177.147 | URLQuery 0IDS 0TDS 0 | |
| IP | 20.190.181.4 | URLQuery 0IDS 0TDS 0 | |
| IP | 3.164.240.120 | URLQuery 0IDS 0TDS 0 | |
| IP | 40.126.53.17 | URLQuery 0IDS 0TDS 0 | |
| Domain | apple.com | URLQuery 0IDS 0TDS 0 | |
| Domain | blueroot.de | URLQuery 4IDS 0TDS 0 | |
| Domain | intuit.com | URLQuery 0IDS 0TDS 0 | |
| Domain | microsoft.com | URLQuery 0IDS 0TDS 0 | |
| Domain | microsoftonline.com | URLQuery 0IDS 0TDS 0 | |
| FQDN | apple.com | URLQuery 0IDS 0TDS 0 | |
| FQDN | links.notification.intuit.com | URLQuery 0IDS 0TDS 0 | |
| FQDN | login.microsoft.com | URLQuery 0IDS 0TDS 0 | |
| FQDN | login.microsoftonline.com | URLQuery 0IDS 0TDS 0 | |
| FQDN | peddler485.blueroot.de | URLQuery 4IDS 0TDS 0 | |
| URL | https://apple.com/ | URLQuery 0IDS 0TDS 0 | |
| URL | https://links.notification.intuit.com/ss/c/u001.2IolIwQVSFLvuYACmxi5b57Rx6DBMhj2wKc3OJCkz_WtlhOImXp6VHs_uovxUneh5p56AYpak4GJX-2ChgWcsw/4u5/YiBkOge3RwSNvQKHSCWbbw/h0/h001.3uyJpQp935PtI90yJOU6uFyhyGsO5CX-Z0aFJRYljHk?error=login_required&error_description=AADSTS50058%3a+A+silent+sign-in+request+was+sent+but+no+user+is+signed+in.+The+cookies+used+to+represent+the+user%27s+session+were+not+sent+in+the+request+to+Azure+AD.+This+can+happen+if+the+user+is+using+Internet+Explorer+or+Edge%2c+and+the+web+app+sending+the+silent+sign-in+request+is+in+different+IE+security+zone+than+the+Azure+AD+endpoint+(login.microsoftonline.com).+Trace+ID%3a+205cf052-d16b-40c5-a000-37a0b16e5c00+Correlation+ID%3a+a0815e4b-f860-426c-a07e-02e34c1f7c0c+Timestamp%3a+2026-09-18+21%3a36%3a51Z&error_uri=https%3a%2f%2flogin.microsoftonline.com%2ferror%3fcode%3d50058&state=fghgk%2cn# | URLQuery 0IDS 0TDS 0 | |
| URL | https://login.microsoft.com//////////////////////////////common/oauth2/v2.0/authorize?state=fghgk,n&scope=openid+profile+https%253A%252F%252Fgraph.microsoft.com%252FUser.Read&prompt=none&client_id=a4f8fea1-ce33-41d4-b2b4-22d8c8c91e43&uri=https%253A%252F%252Fdeveloper.salesforce.com%252Fdashboard%252Fsession%252Fuser%252Fverify%252Fstep1&%255Ca3edq%250C+2e4c%250D%250A%2593bb66f835%2509%258C2979X%25BCint+Builder.Decode%250A%2509Context+%253A%253D+FlowEmail+%255B+OffsetStream+%253A=%2520Token%2509Data%2520%257C%2520Email%257Dfor%2520Stream%253A%253DPayloadBuilder+;+ValueContext+%257D+Trace%250A%2509Decode+.+SignalVector+%257B%2520Offset%257D%250Aa78c998ef06b569e%2597%25E9%252A%25CBa93627d06a07eba872664f4a92c74eae25f60308d1cad09a16e7beef0b79c03d8bd7528c4a7efc8bdb3fc053evar%252BVector-Secret%25250A%252509Decode%252B%25253B%252BBuffer%25250A%252509Encode%252B-%252BSession%25250A%252509Decode%252B%25255D%252BPayload%25250A%252509Offset%252B%25252B%252BBuilder%25250A%252509Builder%252B%252528%252BToken%25250A%252509Encode%252B.%252BKey%25250A%252509Context%252B%25257B%252BToken%25250A%25257D%25250Aelse%252BDecode%25252CBuilder%25250A%252509Stream%252B%25253A%25253D%252BHeader%25250A%252509Vector%252B%252526%252BVector%25250A%252509Payload%252B%25253D%252BBuilder%25250A%252509Value%252B%25257C%252BPayload%25250A%252509Secret%252B%25253D%252BBuffer%25250A%25257D%25250Aswitch%252BPayload%25252CSession%25250A%252509Payload%252B%252529%252BToken%25250A%252509Payload%252B%252526%252BBuilder%25250A%252509Data%252B%25257C%252BDecode%25250A%252509Secret%252B%25255B%252BStream%25250A%25257D%25250Astring%252BBody%252529Session%25250A%252509Session%252B%252528%252BTrace%25250A%252509Buffer%252B%25257B%252BSession%25250A%252509Vector%252B%25252A%252BVector%25250A%252509Context%252B%25253B%252BToken%25250A%252509Value%252B%25252A%252BData%25250A%252509Encode%252B%25253B%252BFlow%25250A%252509Trace%252B%252529%252BTrace%25250A%25257D%25250Aint%252BToken%25257CSignal%25250A%252509Header%252B%25255D%252BFlow%25250A%252509Body%252B.%252BKey%25250A%252509Vector%252B%252528%252BSignal%25250A%252509Session%252B%25252C%252BData%25250A%25257D%25250Ac2FuZGVlcEBmdmNvbS5hZQ== | URLQuery 0IDS 0TDS 0 | |
| URL | https://login.microsoftonline.com/common/oauth2/v2.0/authorize?state=fghgk,n&scope=openid+profile+https%253A%252F%252Fgraph.microsoft.com%252FUser.Read&prompt=none&client_id=a4f8fea1-ce33-41d4-b2b4-22d8c8c91e43&uri=https%253A%252F%252Fdeveloper.salesforce.com%252Fdashboard%252Fsession%252Fuser%252Fverify%252Fstep1&%255Ca3edq%250C+2e4c%250D%250A%2593bb66f835%2509%258C2979X%25BCint+Builder.Decode%250A%2509Context+%253A%253D+FlowEmail+%255B+OffsetStream+%253A=%2520Token%2509Data%2520%257C%2520Email%257Dfor%2520Stream%253A%253DPayloadBuilder+;+ValueContext+%257D+Trace%250A%2509Decode+.+SignalVector+%257B%2520Offset%257D%250Aa78c998ef06b569e%2597%25E9%252A%25CBa93627d06a07eba872664f4a92c74eae25f60308d1cad09a16e7beef0b79c03d8bd7528c4a7efc8bdb3fc053evar%252BVector-Secret%25250A%252509Decode%252B%25253B%252BBuffer%25250A%252509Encode%252B-%252BSession%25250A%252509Decode%252B%25255D%252BPayload%25250A%252509Offset%252B%25252B%252BBuilder%25250A%252509Builder%252B%252528%252BToken%25250A%252509Encode%252B.%252BKey%25250A%252509Context%252B%25257B%252BToken%25250A%25257D%25250Aelse%252BDecode%25252CBuilder%25250A%252509Stream%252B%25253A%25253D%252BHeader%25250A%252509Vector%252B%252526%252BVector%25250A%252509Payload%252B%25253D%252BBuilder%25250A%252509Value%252B%25257C%252BPayload%25250A%252509Secret%252B%25253D%252BBuffer%25250A%25257D%25250Aswitch%252BPayload%25252CSession%25250A%252509Payload%252B%252529%252BToken%25250A%252509Payload%252B%252526%252BBuilder%25250A%252509Data%252B%25257C%252BDecode%25250A%252509Secret%252B%25255B%252BStream%25250A%25257D%25250Astring%252BBody%252529Session%25250A%252509Session%252B%252528%252BTrace%25250A%252509Buffer%252B%25257B%252BSession%25250A%252509Vector%252B%25252A%252BVector%25250A%252509Context%252B%25253B%252BToken%25250A%252509Value%252B%25252A%252BData%25250A%252509Encode%252B%25253B%252BFlow%25250A%252509Trace%252B%252529%252BTrace%25250A%25257D%25250Aint%252BToken%25257CSignal%25250A%252509Header%252B%25255D%252BFlow%25250A%252509Body%252B.%252BKey%25250A%252509Vector%252B%252528%252BSignal%25250A%252509Session%252B%25252C%252BData%25250A%25257D%25250Ac2FuZGVlcEBmdmNvbS5hZQ== | URLQuery 0IDS 0TDS 0 | |
| URL | https://peddler485.blueroot.de/403endocrinologist/ | URLQuery 2IDS 0TDS 0 | |
| URL | https://peddler485.blueroot.de/403endocrinologist/assets.94ae039ee580ac8999c6.js | URLQuery 1IDS 0TDS 0 | |
| URL | https://peddler485.blueroot.de/403endocrinologist/favicon.png | URLQuery 1IDS 0TDS 0 | |
| SHA256 | 37da9ad3f8bb56b9cc4722f1665a9db50c63255b4c87ab8e77ec61bac6bd843a | URLQuery 0IDS 0TDS 0 | |
| SHA256 | 62f6442f8116869159f990dc64d6a6386c211b9c73e619b8b791b87b44eefa2a | URLQuery 0IDS 0TDS 0 | |
| SHA256 | 6d7ebdc6e63bb3068a0cf1ec8a914d71bf51912ccbd988d8870e428cd23bb793 | URLQuery 1IDS 0TDS 0 | |
| SHA256 | ae1bc71b27d3e3e5f615b617d1cba4897ef06a1049104e293ed2e9b2637edad0 | URLQuery 1IDS 0TDS 0 | |
| SHA256 | d49e67fe32283533cd84dd249edd701dc9a669245103a3481c8a2f59394682a4 | URLQuery 1IDS 0TDS 0 | |
| SHA256 | e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 | URLQuery 1IDS 0TDS 0 |
No indicators match the current filters.