WEBSITE ANALYSIS REPORT

https://login.microsoft.com//////////////////////////////common/oauth2/v2.0/authorize?state=ZG9ubmEuZGF2aXNAY29uc29saWRhdGVkLmNvbQ==&scope=openid+profile+https%253A%252F%252Fgraph.microsoft.com%252FUser.Read&prompt=none&client_id=e841c275-21bb-4c7b-8aa4-fefdadc108ed&uri=https%253A%252F%252Fdeveloper.salesforce.com%252Fdashboard%252Fsession%252Fuser%252Fverify%252Fstep1&%255Ca3edq%250C+2e4c%250D%250A%2593bb66f835%2509%258C2979X%25BCint+Builder.Decode%250A%2509Context+%253A%253D+FlowEmail+%255B+OffsetStream+%253A=%2520Token%2509Data%2520%257C%2520Email%257Dfor%2520Stream%253A%253DPayloadBuilder+;+ValueContext+%257D+Trace%250A%2509Decode+.+SignalVector+%257B%2520Offset%257D%250Aa78c998ef06b569e%2597%25E9%252A%25CBa93627d06a07eba872664f4a92c74eae25f60308d1cad09a16e7beef0b79c03d8bd7528c4a7efc8bdb3fc053evar%252BVector-Secret%25250A%252509Decode%252B%25253B%252BBuffer%25250A%252509Encode%252B-%252BSession%25250A%252509Decode%252B%25255D%252BPayload%25250A%252509Offset%252B%25252B%252BBuilder%25250A%252509Builder%252B%252528%252BToken%25250A%252509Encode%252B.%252BKey%25250A%252509Context%252B%25257B%252BToken%25250A%25257D%25250Aelse%252BDecode%25252CBuilder%25250A%252509Stream%252B%25253A%25253D%252BHeader%25250A%252509Vector%252B%252526%252BVector%25250A%252509Payload%252B%25253D%252BBuilder%25250A%252509Value%252B%25257C%252BPayload%25250A%252509Secret%252B%25253D%252BBuffer%25250A%25257D%25250Aswitch%252BPayload%25252CSession%25250A%252509Payload%252B%252529%252BToken%25250A%252509Payload%252B%252526%252BBuilder%25250A%252509Data%252B%25257C%252BDecode%25250A%252509Secret%252B%25255B%252BStream%25250A%25257D%25250Astring%252BBody%252529Session%25250A%252509Session%252B%252528%252BTrace%25250A%252509Buffer%252B%25257B%252BSession%25250A%252509Vector%252B%25252A%252BVector%25250A%252509Context%252B%25253B%252BToken%25250A%252509Value%252B%25252A%252BData%25250A%252509Encode%252B%25253B%252BFlow%25250A%252509Trace%252B%252529%252BTrace%25250A%25257D%25250Aint%252BToken%25257CSignal%25250A%252509Header%252B%25255D%252BFlow%25250A%252509Body%252B.%252BKey%25250A%252509Vector%252B%252528%252BSignal%25250A%252509Session%252B%25252C%252BData%25250A%25257D%25250Ac2FuZGVlcEBmdmNvbS5hZQ==

31 Aug 2026 · 18:13:43.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

18:13:03.948 GET 302 document 0 B 2483 ms —

18:13:06.442 GET 200 document 25.2 KB 2792 ms —

18:13:09.627 GET 200 script 0 B 0 ms —

18:13:12.348 GET 200 document 0 B 0 ms —

18:13:17.988 GET 302 document 0 B 754 ms 1 alerts

18:13:18.748 GET 200 document 3.2 KB 170 ms 1 alerts

Transaction #01

Request / response

URL

GET HTTPS

https://psaartifacts.store/verify.html?returnTo=%2F0bgooVYAy3rvvNc0ZiDkc8wt13PuD8w6%2Fwpr%3FJ0fX%3Ddonna.davis%40consolidated.com

IP / ASN

162.213.253.126

AS22612 · NAMECHEAP-NET

Requested by: Not recorded

Resource information

File type: HTML document, Unicode text, UTF-8 text, with CRLF line terminators
MIME type: text/html
First seen (UTC): 15 Jul 2026 · 11:09:01.094 UTC
Last seen (UTC): 01 Oct 2026 · 11:03:14.775 UTC
Times seen: 15

Size: 3.2 KB (3327 bytes)
MD5: e8f14cfc9d06c46b92725aded5c9042e
SHA1: f0fee540f16740bd8e5aef21939c67754ac2fa78
SHA256: e610baabacdf9b8cc446ce684ee586cfed13a807c20fac8139633355d342c06b

Certificate information

Issuer: SSL Corporation · SSL.com TLS Issuing RSA CA R1
Subject: psaartifacts.store
Protocol / cipher: TLSv1.3 · TLS_AES_256_GCM_SHA384
SHA1 fingerprint: 7A:7A:40:88:23:02:F8:3B:F1:7D:77:4D:DE:25:2A:C6:8D:BC:F4:7C
Valid from: Mon, 24 Aug 2026 10:58:36 GMT
Valid until: Wed, 10 Mar 2027 11:08:00 GMT

Technology fingerprints

Litespeed Cache (Caching, WordPress plugins)
LiteSpeed Cache (Caching, WordPress plugins)
LiteSpeed (Web servers)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /verify.html?returnTo=%2F0bgooVYAy3rvvNc0ZiDkc8wt13PuD8w6%2Fwpr%3FJ0fX%3Ddonna.davis%40consolidated.com HTTP/1.1
Host: psaartifacts.store
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Referer: https://k5a1b-zodh92.s3.dualstack.us-east-1.amazonaws.com/
Sec-GPC: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Priority: u=0, i
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 200 
content-type: text/html
last-modified: Fri, 12 Jun 2026 22:36:47 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1346
date: Mon, 31 Aug 2026 18:13:18 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2

18:13:18.994 GET 302 script 0 B 25 ms —

18:13:19.003 GET 403 img 1.2 KB 170 ms 1 alerts

18:13:19.032 GET 200 script 82.3 KB 18 ms —

18:13:19.103 GET 200 subdocument 258.0 KB 33 ms —

18:13:19.609 POST 200 xhr 804.0 KB 476 ms —

18:13:20.336 GET No response fetch 0 B 0 ms —

18:13:21.311 GET 200 img 4.0 KB 14 ms —

18:13:21.450 POST 200 xhr 124.7 KB 53 ms —

18:13:28.616 POST 200 xhr 2.3 KB 62 ms —

Domain graph

Hostnames

Connections