WEBSITE ANALYSIS REPORT
https://nam10.safelinks.protection.outlook.com/?url=https%3A%2F%2Flogin.microsoft.com%2F%2F%2F%2F%2F%2F%2F%2F%2F%2F%2F%2F%2F%2F%2F%2F%2F%2F%2F%2F%2F%2F%2F%2F%2F%2F%2F%2F%2F%2Fcommon%2Foauth2%2Fv2.0%2Fauthorize%3Fstate%3DbGluZHNleS5sZWN1c0B3aXNjb25zaW4uZWR1%26scope%3Dopenid%2Bprofile%2Bhttps%25253A%25252F%25252Fgraph.microsoft.com%25252FUser.Read%26prompt%3Dnone%26client_id%3D32eab658-150b-49af-b205-bb26f5b02fab%26uri%3Dhttps%25253A%25252F%25252Fdeveloper.salesforce.com%25252Fdashboard%25252Fsession%25252Fuser%25252Fverify%25252Fstep1%26%25255Ca3edq%25250C%2B2e4c%25250D%25250A%252593bb66f835%252509%25258C2979X%2525BCint%2BBuilder.Decode%25250A%252509Context%2B%25253A%25253D%2BFlowEmail%2B%25255B%2BOffsetStream%2B%25253A%3D%252520Token%252509Data%252520%25257C%252520Email%25257Dfor%252520Stream%25253A%25253DPayloadBuilder%2B%3B%2BValueContext%2B%25257D%2BTrace%25250A%252509Decode%2B.%2BSignalVector%2B%25257B%252520Offset%25257D%25250Aa78c998ef06b569e%252597%2525E9%25252A%2525CBa93627d06a07eba872664f4a92c74eae25f60308d1cad09a16e7beef0b79c03d8bd7528c4a7efc8bdb3fc053evar%25252BVector-Secret%2525250A%25252509Decode%25252B%2525253B%25252BBuffer%2525250A%25252509Encode%25252B-%25252BSession%2525250A%25252509Decode%25252B%2525255D%25252BPayload%2525250A%25252509Offset%25252B%2525252B%25252BBuilder%2525250A%25252509Builder%25252B%25252528%25252BToken%2525250A%25252509Encode%25252B.%25252BKey%2525250A%25252509Context%25252B%2525257B%25252BToken%2525250A%2525257D%2525250Aelse%25252BDecode%2525252CBuilder%2525250A%25252509Stream%25252B%2525253A%2525253D%25252BHeader%2525250A%25252509Vector%25252B%25252526%25252BVector%2525250A%25252509Payload%25252B%2525253D%25252BBuilder%2525250A%25252509Value%25252B%2525257C%25252BPayload%2525250A%25252509Secret%25252B%2525253D%25252BBuffer%2525250A%2525257D%2525250Aswitch%25252BPayload%2525252CSession%2525250A%25252509Payload%25252B%25252529%25252BToken%2525250A%25252509Payload%25252B%25252526%25252BBuilder%2525250A%25252509Data%25252B%2525257C%25252BDecode%2525250A%25252509Secret%25252B%2525255B%25252BStream%2525250A%2525257D%2525250Astring%25252BBody%25252529Session%2525250A%25252509Session%25252B%25252528%25252BTrace%2525250A%25252509Buffer%25252B%2525257B%25252BSession%2525250A%25252509Vector%25252B%2525252A%25252BVector%2525250A%25252509Context%25252B%2525253B%25252BToken%2525250A%25252509Value%25252B%2525252A%25252BData%2525250A%25252509Encode%25252B%2525253B%25252BFlow%2525250A%25252509Trace%25252B%25252529%25252BTrace%2525250A%2525257D%2525250Aint%25252BToken%2525257CSignal%2525250A%25252509Header%25252B%2525255D%25252BFlow%2525250A%25252509Body%25252B.%25252BKey%2525250A%25252509Vector%25252B%25252528%25252BSignal%2525250A%25252509Session%25252B%2525252C%25252BData%2525250A%2525257D%2525250Ac2FuZGVlcEBmdmNvbS5hZQ%3D%3D&data=05%7C02%7Clindsey.lecus%40wisconsin.edu%7Cd0397a8c03df419d11cc08df182c9c84%7C18b1f8672df046a08ad305c86000c301%7C0%7C0%7C639256252038552984%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=bUxgj5Gu51Dx9b6DonOjuwLriQUqTE3%2BQkS35hS9%2Fjg%3D&reserved=0
public
Malicious detection
Review evidence →2 detections · review the detection signals
Domain graph
Hostnames and connections captured in this scan
Loading domain graph…
Hostnames
- aadcdn.msftauth.net1 captured requests
- app.guideflow.com40 captured requests
- assets.ctfassets.net2 captured requests
- cdn.bfldr.com16 captured requests
- cdn.cookielaw.org11 captured requests
- cdn.jsdelivr.net3 captured requests
- cdn.sift.com1 captured requests
- docucdn-a.akamaihd.net8 captured requests
- docusign.com1 captured requests
- fonts.gstatic.com2 captured requests
- geolocation.onetrust.com1 captured requests
- guideflow-api-eu-5cv4uu2lra-ew.a.run.app2 captured requests
- hexagon-analytics.com1 captured requests
- images.ctfassets.net16 captured requests
- login.microsoft.com1 captured requests
- login.microsoftonline.com1 captured requests
- nam10.safelinks.protection.outlook.com1 captured requests
- privacyportal.onetrust.com1 captured requests
- reconquest472.lincolove.org1 captured requests
- resources.guideflow.com20 captured requests
- www.docusign.com18 captured requests
- www.googletagmanager.com1 captured requests
Connections
- app.guideflow.com → cdn.jsdelivr.netLoads from2 captured connections
- app.guideflow.com → fonts.gstatic.comLoads from2 captured connections
- docusign.com → www.docusign.comRedirects to1 captured connections
- login.microsoft.com → login.microsoftonline.comRedirects to1 captured connections
- login.microsoftonline.com → aadcdn.msftauth.netLoads from1 captured connections
- nam10.safelinks.protection.outlook.com → login.microsoft.comRedirects to1 captured connections
- www.docusign.com → app.guideflow.com2 captured connections
- www.docusign.com → assets.ctfassets.netCalls2 captured connections
- www.docusign.com → cdn.cookielaw.orgCalls6 captured connections
- www.docusign.com → cdn.cookielaw.orgLoads from5 captured connections
- www.docusign.com → cdn.jsdelivr.netCalls1 captured connections
- www.docusign.com → cdn.sift.comLoads from1 captured connections
- www.docusign.com → docucdn-a.akamaihd.netLoads from8 captured connections
- www.docusign.com → geolocation.onetrust.comCalls1 captured connections
- www.docusign.com → guideflow-api-eu-5cv4uu2lra-ew.a.run.appCalls2 captured connections
- www.docusign.com → hexagon-analytics.comLoads from1 captured connections
- www.docusign.com → images.ctfassets.netLoads from10 captured connections
- www.docusign.com → privacyportal.onetrust.comCalls1 captured connections
- www.docusign.com → www.googletagmanager.comLoads from1 captured connections
Network requests
Click any request row to expand it in place. Multiple transactions can remain open.
| Timestamp (UTC) | Method | Status | Host / path | Type | Size | Duration | Signals |
|---|---|---|---|---|---|---|---|
| GET | 302 | document | 0 B | 948 ms | — | ||
| GET | 302 | document | 0 B | 2281 ms | — | ||
| GET | 200 | document | 26.3 KB | 2524 ms | — | ||
| GET | 200 | script | 0 B | 0 ms | — | ||
| POST | 200 | document | 0 B | 0 ms | 2 alerts | ||
| GET | 301 | document | 0 B | 84 ms | — | ||
| GET | 200 | document | 947.0 KB | 128 ms | — | ||
| GET | 200 | font | 31.2 KB | 31 ms | — | ||
| GET | 200 | font | 36.0 KB | 234 ms | — | ||
| GET | 200 | font | 28.8 KB | 233 ms | — | ||
| GET | 200 | font | 30.9 KB | 23 ms | — | ||
| GET | 200 | font | 30.7 KB | 22 ms | — | ||
| GET | 200 | script | 6.3 KB | 582 ms | — | ||
| GET | 200 | script | 185.3 KB | 556 ms | — | ||
| GET | 200 | script | 172.5 KB | 569 ms | — | ||
| GET | 200 | script | 636.4 KB | 573 ms | — | ||
| GET | 200 | script | 331.5 KB | 555 ms | — | ||
| GET | 200 | script | 22.1 KB | 334 ms | — | ||
| GET | 200 | script | 919.0 KB | 530 ms | — | ||
| GET | 200 | script | 29.3 KB | 466 ms | — | ||
| GET | 200 | script | 1.63 MB | 159 ms | — | ||
| GET | 200 | script | 2.1 KB | 113 ms | — | ||
| GET | 200 | script | 1.4 KB | 158 ms | — | ||
| GET | 200 | script | 139 B | 154 ms | — | ||
| GET | 200 | script | 46.9 KB | 1117 ms | — | ||
| GET | 200 | img | 698 B | 70 ms | — | ||
| GET | 200 | img | 45.4 KB | 307 ms | — | ||
| GET | 200 | img | 3.3 KB | 292 ms | — | ||
| GET | 200 | img | 7.9 KB | 279 ms | — | ||
| GET | 200 | img | 3.9 KB | 285 ms | — | ||
| GET | 200 | imageset | 10.3 KB | 282 ms | — | ||
| GET | 200 | imageset | 7.6 KB | 10 ms | — | ||
| GET | 200 | imageset | 11.2 KB | 10 ms | — | ||
| GET | 200 | imageset | 48.8 KB | 18 ms | — | ||
| GET | 200 | subdocument | 93.4 KB | 614 ms | — | ||
| GET | 200 | lazy-imageset | 11.8 KB | 9 ms | — | ||
| GET | 200 | lazy-imageset | 7.8 KB | 9 ms | — | ||
| GET | 200 | lazy-img | 10.3 KB | 47 ms | — | ||
| GET | 200 | lazy-img | 4.9 KB | 278 ms | — | ||
| GET | 200 | lazy-img | 45.4 KB | 273 ms | — | ||
| GET | 200 | lazy-img | 4.0 KB | 273 ms | — | ||
| GET | 200 | lazy-img | 1.2 KB | 271 ms | — | ||
| GET | 200 | lazy-img | 7.9 KB | 16 ms | — | ||
| GET | 200 | lazy-img | 3.3 KB | 66 ms | — | ||
| GET | 200 | lazy-img | 6.8 KB | 14 ms | — | ||
| GET | 200 | lazy-img | 7.2 KB | 32 ms | — | ||
| GET | 200 | lazy-img | 9.0 KB | 36 ms | — | ||
| GET | 200 | lazy-img | 6.7 KB | 28 ms | — | ||
| GET | 200 | lazy-imageset | 32.7 KB | 37 ms | — | ||
| GET | 200 | lazy-imageset | 111.3 KB | 37 ms | — | ||