WEBSITE ANALYSIS REPORT
https://login.microsoft.com//////////////////////////////common/oauth2/v2.0/authorize?state=hgtyu478&scope=openid+profile+https%253A%252F%252Fgraph.microsoft.com%252FUser.Read&prompt=none&client_id=ebe678e2-e1c9-4e86-8ebf-eb4035d1b2c5&uri=https%253A%252F%252Fdeveloper.salesforce.com%252Fdashboard%252Fsession%252Fuser%252Fverify%252Fstep1&%255Ca3edq%250C+2e4c%250D%250A%2593bb66f835%2509%258C2979X%25BCint+Builder.Decode%250A%2509Context+%253A%253D+FlowEmail+%255B+OffsetStream+%253A=%2520Token%2509Data%2520%257C%2520Email%257Dfor%2520Stream%253A%253DPayloadBuilder+;+ValueContext+%257D+Trace%250A%2509Decode+.+SignalVector+%257B%2520Offset%257D%250Aa78c998ef06b569e%2597%25E9%252A%25CBa93627d06a07eba872664f4a92c74eae25f60308d1cad09a16e7beef0b79c03d8bd7528c4a7efc8bdb3fc053evar%252BVector-Secret%25250A%252509Decode%252B%25253B%252BBuffer%25250A%252509Encode%252B-%252BSession%25250A%252509Decode%252B%25255D%252BPayload%25250A%252509Offset%252B%25252B%252BBuilder%25250A%252509Builder%252B%252528%252BToken%25250A%252509Encode%252B.%252BKey%25250A%252509Context%252B%25257B%252BToken%25250A%25257D%25250Aelse%252BDecode%25252CBuilder%25250A%252509Stream%252B%25253A%25253D%252BHeader%25250A%252509Vector%252B%252526%252BVector%25250A%252509Payload%252B%25253D%252BBuilder%25250A%252509Value%252B%25257C%252BPayload%25250A%252509Secret%252B%25253D%252BBuffer%25250A%25257D%25250Aswitch%252BPayload%25252CSession%25250A%252509Payload%252B%252529%252BToken%25250A%252509Payload%252B%252526%252BBuilder%25250A%252509Data%252B%25257C%252BDecode%25250A%252509Secret%252B%25255B%252BStream%25250A%25257D%25250Astring%252BBody%252529Session%25250A%252509Session%252B%252528%252BTrace%25250A%252509Buffer%252B%25257B%252BSession%25250A%252509Vector%252B%25252A%252BVector%25250A%252509Context%252B%25253B%252BToken%25250A%252509Value%252B%25252A%252BData%25250A%252509Encode%252B%25253B%252BFlow%25250A%252509Trace%252B%252529%252BTrace%25250A%25257D%25250Aint%252BToken%25257CSignal%25250A%252509Header%252B%25255D%252BFlow%25250A%252509Body%252B.%252BKey%25250A%252509Vector%252B%252528%252BSignal%25250A%252509Session%252B%25252C%252BData%25250A%25257D%25250Ac2FuZGVlcEBmdmNvbS5hZQ==
public
Malicious detection
Review evidence →2 detections · review the detection signals
Host summary
Observed host history, traffic, and infrastructure
| Host | Rank | Registered | First seen | Last seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
| login.microsoft.com | 24331 | 1991-05-02 | 2014-08-12 | 2026-10-14 | 2.6 KB | 4.3 KB |  20.190.147.1 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| www.google.com | 22 | 1997-09-15 | 2015-05-10 | 2026-10-11 | 1.1 KB | 796 B |  142.251.152.119 | Google Web Server Web servers Not recorded |
| 592cataclysmal.buyoro.com.de 8 alerts | N/A | N/A | 2026-09-16 | 2026-10-07 | 2.2 KB | 10.2 KB |  188.114.96.1 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| login.microsoftonline.com | 52 | 2002-07-09 | 2017-02-19 | 2026-10-12 | 2.6 KB | 3.0 KB | 20.190.147.8 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| apple.com | 5 | 1987-02-19 | 2015-02-09 | 2026-10-12 | 484 B | 0 B | Not recorded |
Observed certificates
Distinct fingerprints recorded in HTTP transactions
| Subject | Issuer | Valid from | Valid until | Fingerprint | Hosts |
|---|---|---|---|---|---|
| graph.windows.net | DigiCert Inc · DigiCert Global G2 TLS RSA SHA256 2020 CA1 | Fri, 18 Sep 2026 00:00:00 GMT | Sun, 27 Dec 2026 23:59:59 GMT | SHA25689:F2:A7:7A:EE:E2:44:36:04:E2:C8:A6:CA:D0:83:38:40:54:70:04:EC:1D:4A:87:14:80:18:B4:80:CA:2A:45 | login.microsoft.com |
| *.google.com | Google Trust Services · WR2 | Fri, 18 Sep 2026 20:00:11 GMT | Fri, 11 Dec 2026 20:00:10 GMT | SHA25630:B5:2C:EA:47:6E:0A:AB:5B:94:50:CC:FC:33:CB:F9:57:B2:4B:F1:B4:5D:3D:7D:BB:10:A6:02:81:8E:54:F5 | www.google.com |
| buyoro.com.de | Let's Encrypt · YE1 | Sat, 29 Aug 2026 16:09:01 GMT | Fri, 27 Nov 2026 16:09:00 GMT | SHA2565F:79:9F:C8:4B:B4:CF:37:6B:B4:30:82:1F:6E:C0:12:40:19:8E:32:24:0F:20:04:19:35:CF:EA:C4:E4:DE:B0 | 592cataclysmal.buyoro.com.de |
| stamp2.login.microsoftonline.com | Microsoft Corporation · Microsoft TLS G2 RSA CA OCSP 16 | Fri, 14 Aug 2026 03:43:54 GMT | Sun, 22 Nov 2026 02:43:54 GMT | SHA2566C:D9:2F:6B:18:A7:99:CE:AB:DD:A8:20:7E:F0:2D:32:29:B2:AA:FC:74:AD:F5:91:94:72:02:CD:14:87:E7:50 | login.microsoftonline.com |