urlquery.net
Investigate/Report/5bd76e4c-91bc-42ca-a9b7-008ad57fee79
WEBSITE ANALYSIS REPORT

https://login.microsoft.com//////////////////////////////common/oauth2/v2.0/authorize?state=YnJ1Y2Uuc2lsdmFAY29uc29saWRhdGVkLmNvbQ==&scope=openid+profile+https%253A%252F%252Fgraph.microsoft.com%252FUser.Read&prompt=none&client_id=11f62054-625f-4209-a073-f9494bd83920&uri=https%253A%252F%252Fdeveloper.salesforce.com%252Fdashboard%252Fsession%252Fuser%252Fverify%252Fstep1&%255Ca3edq%250C+2e4c%250D%250A%2593bb66f835%2509%258C2979X%25BCint+Builder.Decode%250A%2509Context+%253A%253D+FlowEmail+%255B+OffsetStream+%253A=%2520Token%2509Data%2520%257C%2520Email%257Dfor%2520Stream%253A%253DPayloadBuilder+;+ValueContext+%257D+Trace%250A%2509Decode+.+SignalVector+%257B%2520Offset%257D%250Aa78c998ef06b569e%2597%25E9%252A%25CBa93627d06a07eba872664f4a92c74eae25f60308d1cad09a16e7beef0b79c03d8bd7528c4a7efc8bdb3fc053evar%252BVector-Secret%25250A%252509Decode%252B%25253B%252BBuffer%25250A%252509Encode%252B-%252BSession%25250A%252509Decode%252B%25255D%252BPayload%25250A%252509Offset%252B%25252B%252BBuilder%25250A%252509Builder%252B%252528%252BToken%25250A%252509Encode%252B.%252BKey%25250A%252509Context%252B%25257B%252BToken%25250A%25257D%25250Aelse%252BDecode%25252CBuilder%25250A%252509Stream%252B%25253A%25253D%252BHeader%25250A%252509Vector%252B%252526%252BVector%25250A%252509Payload%252B%25253D%252BBuilder%25250A%252509Value%252B%25257C%252BPayload%25250A%252509Secret%252B%25253D%252BBuffer%25250A%25257D%25250Aswitch%252BPayload%25252CSession%25250A%252509Payload%252B%252529%252BToken%25250A%252509Payload%252B%252526%252BBuilder%25250A%252509Data%252B%25257C%252BDecode%25250A%252509Secret%252B%25255B%252BStream%25250A%25257D%25250Astring%252BBody%252529Session%25250A%252509Session%252B%252528%252BTrace%25250A%252509Buffer%252B%25257B%252BSession%25250A%252509Vector%252B%25252A%252BVector%25250A%252509Context%252B%25253B%252BToken%25250A%252509Value%252B%25252A%252BData%25250A%252509Encode%252B%25253B%252BFlow%25250A%252509Trace%252B%252529%252BTrace%25250A%25257D%25250Aint%252BToken%25257CSignal%25250A%252509Header%252B%25255D%252BFlow%25250A%252509Body%252B.%252BKey%25250A%252509Vector%252B%252528%252BSignal%25250A%252509Session%252B%25252C%252BData%25250A%25257D%25250Ac2FuZGVlcEBmdmNvbS5hZQ==

public
Report tags
malicious cloaking browser_fingerprinting anti_analysis
Submit tags
Request review
Malicious detection

4 detections · review the detection signals

Review evidence →

JavaScript

Recorded scripts and browser console observations

81 scripts
Observed scripts. Expand a row for metadata, detections, and available captured source.
#URL / sourceIntroduced bySizeFirst seen
1scriptElement1.4 KB
2scriptElement532 B
3scriptElement5.1 KB
4scriptElement17.2 KB
5scriptElement20.3 KB
6Not recorded1.0 KB
7scriptElement409.8 KB
8scriptElement12.9 KB
9scriptElement9.5 KB
10scriptElement10.8 KB
11scriptElement4.9 KB
12scriptElement1.5 KB
13scriptElement297 B
14importedModule159.8 KB
15importedModule454 B
16Not recorded1004 B
17importedModule26.6 KB
18scriptElement799 B
19scriptElement543.6 KB
20scriptElement38.4 KB
21scriptElement9.2 KB
22scriptElement3.0 KB
23scriptElement843 B
24scriptElement5.1 KB
25scriptElement3.3 KB
26scriptElement90.8 KB
27scriptElement9.2 KB
28scriptElement175 B
29scriptElement2.4 KB
30scriptElement418 B
31scriptElement1.4 KB
32eventHandler33 B
33importedModule4.4 KB
34scriptElement1.7 KB
35scriptElement136.3 KB
36scriptElement1.96 MB
37scriptElement1.7 KB
38scriptElement250 B
39scriptElement212.3 KB
40scriptElement657 B
41scriptElement276.4 KB
42scriptElement162 B
43scriptElement20 B
44importedModule20.2 KB
45eventHandler21 B
46scriptElement211.8 KB
47scriptElement71.1 KB
48scriptElement136.3 KB
49importedModule61.6 KB
50scriptElement10.9 KB
51scriptElement2.34 MB
52scriptElement28.4 KB
53scriptElement9.1 KB
54scriptElement4.3 KB
55scriptElement45.8 KB
56scriptElement296 B
57scriptElement17.4 KB
58scriptElement4.9 KB
59importedModule6.9 KB
60scriptElement231.6 KB
61scriptElement120.8 KB
62scriptElement1.5 KB
63scriptElement1.9 KB
64scriptElement42.6 KB
65scriptElement9.5 KB
66scriptElement1.23 MB
67scriptElement146 B
68scriptElement166.0 KB
69Not recorded1.2 KB
70scriptElement3.5 KB
71scriptElement103.8 KB
72scriptElement18.6 KB
73scriptElement407.3 KB
74scriptElement6.0 KB
75scriptElement3.5 KB
76scriptElement1.4 KB
77scriptElement84.1 KB
78scriptElement316.8 KB
79scriptElement3.0 KB
80scriptElement6.3 KB
81scriptElement3.9 KB

Console observations

Browser messages in recorded order

20 messages
Browser console observations in recorded order.
#LevelMessageRecorded source
1LOG
true
https://login.live.com/Me.htm?v=3 Line 1 · Column 1681
2LOG
Storage access:false
https://login.live.com/Me.htm?v=3 Line 1 · Column 1955
3INFO
navigator.clipboard.read() has been overridden with a no-op. See https://bugzilla.mozilla.org/show_bug.cgi?id=1815733#c13 for details.
<anonymous code> Line 22 · Column 11
4INFO
navigator.clipboard.read() has been overridden with a no-op. See https://bugzilla.mozilla.org/show_bug.cgi?id=1815733#c13 for details.
<anonymous code> Line 22 · Column 11
5WARN
Firefox calls the Storage Access API on behalf of the site. See https://bugzilla.mozilla.org/show_bug.cgi?id=1728111 for details.
moz-extension://9a310967-e580-48bf-b3e8-4eafebbc122d/shims/microsoftAccountIcon.js Line 8 · Column 9
6INFO
A simulated click is issued on search suggestions when enter is pressed on them for compatibility reasons. See https://bugzilla.mozilla.org/show_bug.cgi?id=1846742 for details.
<anonymous code> Line 21 · Column 11
7LOG
1DS Initialized..
https://www.microsoft.com/golf/etc.clientlibs/microsoft/components/structure/page/clientlibs/custom-oneds.ACSHASH2b7224aac4ea4007cb4436ebcdc8cec8.min.js Line 1 · Column 181401
8INFO
[WC Visibility Fix] None of the target tags were found in the DOM.
https://www.microsoft.com/msonecloudapi/assets/msocbody.js Line 735 · Column 2292
9LOG
MWF v2.8.1
https://www.microsoft.com/golf/etc.clientlibs/onecloud/clientlibs/clientlib-mwf-new/main-light.ACSHASHfe9d5283cc0a38f995b64bf0f39192eb.min.js Line 13155 · Column 23
10WARN
[OCR][ProductPricingManager] creation error: [OCR][ProductPricingManager] Invalid pricing component element. Missing data-ocr-pricing-identifier or data-ocr-sku-request attribute.
https://www.microsoft.com/etc.clientlibs/onecloud/clientlibs/clientlib-product-pricing.ACSHASHf9c4f2ed4e61ec88e9a455f543919e32.min.js Line 3046 · Column 33
11WARN
[OCR][ProductPricingManager] creation error: [OCR][ProductPricingManager] Invalid pricing component element. Missing data-ocr-pricing-identifier or data-ocr-sku-request attribute.
https://www.microsoft.com/etc.clientlibs/onecloud/clientlibs/clientlib-product-pricing.ACSHASHf9c4f2ed4e61ec88e9a455f543919e32.min.js Line 3046 · Column 33
12LOG
GPC opt-out
https://www.microsoft.com/golf/etc.clientlibs/microsoft/clientlibs/cookie-compliance-manager.ACSHASHdec0d75e509be6ebf6b36ff24c516111.min.js Line 5 · Column 445
13LOG
Clarity opt-out set
https://www.microsoft.com/golf/etc.clientlibs/microsoft/clientlibs/cookie-compliance-manager.ACSHASHdec0d75e509be6ebf6b36ff24c516111.min.js Line 4 · Column 13
14LOG
Clarity not loaded due to lack of user consent
https://www.microsoft.com/msonecloudapi/assets/msocbody.js Line 707 · Column 3821
15LOG
sendToVortex Call
https://www.microsoft.com/golf/etc.clientlibs/microsoft/clientlibs/exp-analytics/v1.ACSHASHbf7b336dbb370c984e1bf59b1a980d86.min.js Line 1 · Column 303
16DEBUG
[MeControl] TypeScript module loading...
https://www.microsoft.com/golf/etc.clientlibs/microsoft/components/content/universalheader/v1/universalheader/clientlibs/site.ACSHASHd9c9fd98fe2a540a7662eb6492aa9c30.min.js Line 18 · Column 359
17DEBUG
[MeControl] Found meControl-configInfo elements:1
https://www.microsoft.com/golf/etc.clientlibs/microsoft/components/content/universalheader/v1/universalheader/clientlibs/site.ACSHASHd9c9fd98fe2a540a7662eb6492aa9c30.min.js Line 18 · Column 359
18DEBUG
[MeControl] MeControl config loaded:map[actor:server1.conn0.watcher17.process12//obj177 class:Object extensible:true frozen:false isError:false ownPropertyLength:13 preview:map[kind:Object ownProperties:map[apiGeneration:map[configurable:true enumerable:true value:GEN2 writable:true] appCallbackUrl:map[configurable:true enumerable:true value:https://www.microsoft.com/cascadeauth/account/signin-oidc writable:true] appCallbackUrlSpa:map[configurable:true enumerable:true value:map[type:undefined] writable:true] appId:map[configurable:true enumerable:true value:10fa57ef-4895-4ab2-872c-8c3613d4f7fb writable:true] baseUrl:map[configurable:true enumerable:true value:/cascadeauth/microsoft-365/account writable:true] enabled:map[configurable:true enumerable:true value:true writable:true] isConvergedStack:map[configurable:true enumerable:true value:true writable:true] isPublisher:map[configurable:true enumerable:true value:true writable:true] silentAuthAction:map[configurable:true enumerable:true value:aadfirst writable:true] silentAuthRequireReload:map[configurable:true enumerable:true value:false writable:true]] ownPropertiesLength:13] sealed:false type:object]
https://www.microsoft.com/golf/etc.clientlibs/microsoft/components/content/universalheader/v1/universalheader/clientlibs/site.ACSHASHd9c9fd98fe2a540a7662eb6492aa9c30.min.js Line 18 · Column 359
19DEBUG
[MeControl] CascadeAuthSDK not available
https://www.microsoft.com/golf/etc.clientlibs/microsoft/components/content/universalheader/v1/universalheader/clientlibs/site.ACSHASHd9c9fd98fe2a540a7662eb6492aa9c30.min.js Line 18 · Column 359
20LOG
Clarity opt-out set
https://www.microsoft.com/golf/etc.clientlibs/microsoft/clientlibs/cookie-compliance-manager.ACSHASHdec0d75e509be6ebf6b36ff24c516111.min.js Line 4 · Column 13
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close
LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot