WEBSITE ANALYSIS REPORT

https://login.microsoft.com//////////////////////////////common/oauth2/v2.0/authorize?state=ZG9ubmEuZGF2aXNAY29uc29saWRhdGVkLmNvbQ==&scope=openid+profile+https%253A%252F%252Fgraph.microsoft.com%252FUser.Read&prompt=none&client_id=e841c275-21bb-4c7b-8aa4-fefdadc108ed&uri=https%253A%252F%252Fdeveloper.salesforce.com%252Fdashboard%252Fsession%252Fuser%252Fverify%252Fstep1&%255Ca3edq%250C+2e4c%250D%250A%2593bb66f835%2509%258C2979X%25BCint+Builder.Decode%250A%2509Context+%253A%253D+FlowEmail+%255B+OffsetStream+%253A=%2520Token%2509Data%2520%257C%2520Email%257Dfor%2520Stream%253A%253DPayloadBuilder+;+ValueContext+%257D+Trace%250A%2509Decode+.+SignalVector+%257B%2520Offset%257D%250Aa78c998ef06b569e%2597%25E9%252A%25CBa93627d06a07eba872664f4a92c74eae25f60308d1cad09a16e7beef0b79c03d8bd7528c4a7efc8bdb3fc053evar%252BVector-Secret%25250A%252509Decode%252B%25253B%252BBuffer%25250A%252509Encode%252B-%252BSession%25250A%252509Decode%252B%25255D%252BPayload%25250A%252509Offset%252B%25252B%252BBuilder%25250A%252509Builder%252B%252528%252BToken%25250A%252509Encode%252B.%252BKey%25250A%252509Context%252B%25257B%252BToken%25250A%25257D%25250Aelse%252BDecode%25252CBuilder%25250A%252509Stream%252B%25253A%25253D%252BHeader%25250A%252509Vector%252B%252526%252BVector%25250A%252509Payload%252B%25253D%252BBuilder%25250A%252509Value%252B%25257C%252BPayload%25250A%252509Secret%252B%25253D%252BBuffer%25250A%25257D%25250Aswitch%252BPayload%25252CSession%25250A%252509Payload%252B%252529%252BToken%25250A%252509Payload%252B%252526%252BBuilder%25250A%252509Data%252B%25257C%252BDecode%25250A%252509Secret%252B%25255B%252BStream%25250A%25257D%25250Astring%252BBody%252529Session%25250A%252509Session%252B%252528%252BTrace%25250A%252509Buffer%252B%25257B%252BSession%25250A%252509Vector%252B%25252A%252BVector%25250A%252509Context%252B%25253B%252BToken%25250A%252509Value%252B%25252A%252BData%25250A%252509Encode%252B%25253B%252BFlow%25250A%252509Trace%252B%252529%252BTrace%25250A%25257D%25250Aint%252BToken%25257CSignal%25250A%252509Header%252B%25255D%252BFlow%25250A%252509Body%252B.%252BKey%25250A%252509Vector%252B%252528%252BSignal%25250A%252509Session%252B%25252C%252BData%25250A%25257D%25250Ac2FuZGVlcEBmdmNvbS5hZQ==

31 Aug 2026 · 18:13:43.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

18:13:03.948 GET 302 document 0 B 2483 ms —

18:13:06.442 GET 200 document 25.2 KB 2792 ms —

18:13:09.627 GET 200 script 0 B 0 ms —

18:13:12.348 GET 200 document 0 B 0 ms —

18:13:17.988 GET 302 document 0 B 754 ms 1 alerts

18:13:18.748 GET 200 document 3.2 KB 170 ms 1 alerts

18:13:18.994 GET 302 script 0 B 25 ms —

18:13:19.003 GET 403 img 1.2 KB 170 ms 1 alerts

Transaction #07

Request / response

URL

GET HTTPS

https://psaartifacts.store/favicon.ico

IP / ASN

162.213.253.126

AS22612 · NAMECHEAP-NET

Requested by: https://psaartifacts.store/verify.html?returnTo=%2F0bgooVYAy3rvvNc0ZiDkc8wt13PuD8w6%2Fwpr%3FJ0fX%3Ddonna.davis%40consolidated.com

Resource information

File type: HTML document, ASCII text, with CRLF, LF line terminators
MIME type: text/html
First seen (UTC): 20 Feb 2024 · 08:09:53.000 UTC
Last seen (UTC): 24 Oct 2026 · 09:22:56.533 UTC
Times seen: 3254

Size: 1.2 KB (1242 bytes)
MD5: c6a5abb575f4c14729b299058539998f
SHA1: 90a8e0cfc7695944c9d28f3cf908ecbeb3367d0c
SHA256: 7271dd5c11fb9a1052a5e91a09afbe7d148fd3388dc51c338df62a0a16f06739

Certificate information

Issuer: SSL Corporation · SSL.com TLS Issuing RSA CA R1
Subject: psaartifacts.store
Protocol / cipher: TLSv1.3 · TLS_AES_256_GCM_SHA384
SHA1 fingerprint: 7A:7A:40:88:23:02:F8:3B:F1:7D:77:4D:DE:25:2A:C6:8D:BC:F4:7C
Valid from: Mon, 24 Aug 2026 10:58:36 GMT
Valid until: Wed, 10 Mar 2027 11:08:00 GMT

Technology fingerprints

LiteSpeed (Web servers)
Litespeed Cache (Caching, WordPress plugins)
LiteSpeed Cache (Caching, WordPress plugins)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /favicon.ico HTTP/1.1
Host: psaartifacts.store
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-GPC: 1
Connection: keep-alive
Referer: https://psaartifacts.store/verify.html?returnTo=%2F0bgooVYAy3rvvNc0ZiDkc8wt13PuD8w6%2Fwpr%3FJ0fX%3Ddonna.davis%40consolidated.com
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Priority: u=6
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 403 
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-type: text/html
content-length: 1242
date: Mon, 31 Aug 2026 18:13:19 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2

18:13:19.032 GET 200 script 82.3 KB 18 ms —

18:13:19.103 GET 200 subdocument 258.0 KB 33 ms —

18:13:19.609 POST 200 xhr 804.0 KB 476 ms —

18:13:20.336 GET No response fetch 0 B 0 ms —

18:13:21.311 GET 200 img 4.0 KB 14 ms —

18:13:21.450 POST 200 xhr 124.7 KB 53 ms —

18:13:28.616 POST 200 xhr 2.3 KB 62 ms —

Domain graph

Hostnames

Connections