WEBSITE ANALYSIS REPORT
https://login.microsoftonline.com/common/oauth2/v2.0/authorize?state=1523151332262911239131152934191315319013112414152591172634913322&scope=openid+profile+https%3A%2F%2Fgraph.microsoft.com%2FUser.Read&prompt=none&uri=https%3A%2F%2Fwww.github.com%2Fworkflow%2Finitialize%2Fcloud%2Fonboard&client_id=b740187e-824d-4474-a6b1-c058aa081117&%5Crange%2BBuilder%252BBody%250A%2509Session%2B-%2BContext%250A%2509Header%2B%253D%2BBody%250A%2509Offset%2B.%2BResult%250A%2509Body%2B%2526%2BData%250A%257D%250Areturn%2BHeader%252CData%250A%2509Secret%2B%2526%2BContext%250A%2509Email%2B%253B%2BOffset%250A%2509Value%2B%257B%2BOffset%250A%257D%250Arange%2BOffset%252BResult%250A%2509Vector%2B-%2BPayload%250A%2509Buffer%2B%253B%2BValue%250A%2509Value%2B%255B%2BFlow%250A%2509Email%2B%255B%2BTrace%250A%2509Builder%2B%252C%2BSignal%250A%257D%250AF%09%0A18da%0D%0A%0C%D6p%89tint+S%EBs%14ion%3D%1Fey%0A%BEResu%0Alt%2B%28%2BVecto%05%0A%F4Vector%0E%2C%20Trac%21%0A%0A%2509Flow%2B-+Payloa%0Ad%0A%09T%86%9CHe+%0C%2528%2BleQ9d%CF%0A%2509Si%2Ana%10%20%7D%B1%0AP%0Cayload%2509Value%1F%7B%20Sec~%09et%0A%7D%250Av%CEr%20%91esult%257DKey%0C%09%0D%0ARe%B9ult%20%20%F5%20ConteE%09t%0D%0A%C1Signal%0D%0A%20-%E5B%5Cf%0Cfer%257Ds%A8ring%20O%0D%0A%93%0Cf%7D%D2t-Trac%C6%0A%09Ses%B2%F4on%20%3B%20Va%0Alue%250AStrzam%20-+Con%09text%2509%1Fey%2B%2A+%CEma%20Dlv%B7%0Cranae%2BOff%A4e%5C%09)Enco%92e%09St%ACeam%2BZ%20S.ream%250A%21aclo%09adr%99+Buffer%C4%09%20T%DF%09ace%2B+%2BEma%9Cl%0A%B9%0AContext%40%3D%20%20B%0C%ECf%B2er%1A%09V%0Cecto%20r%20%0D%0A%7D+Context%25%0Aby8%24%95Ses%0As%18on%2528Decode%09Em%ADib%20,%2BToken%250AH%94ader%20.%20%BA%7Fssion%0C8%2509%3Fqdy%0D%0A%2B]%20Header%0A%2509S%09tr_a%8C%20%0D%0A%3B%20Va%9E%0Cu%FF%2509Token%60=%2B%84%0Aess%14om%257D%0A
public
Phishing detected
Review evidence →5 detections · review the detection signals
Domain graph
Hostnames and connections captured in this scan
Loading domain graph…
Hostnames
- aadcdn.msftauth.net1 captured requests
- abilitomority.com20 captured requests
- autologon.microsoftazuread-sso.com1 captured requests
- challenges.cloudflare.com9 captured requests
- login.microsoftonline.com1 captured requests
- portal.microsoftonline.com1 captured requests
- res.public.onecdn.static.microsoft1 captured requests
- wispy-waterfall-b1a9.mohokob423.workers.dev2 captured requests
Connections
- abilitomority.com → autologon.microsoftazuread-sso.com1 captured connections
- abilitomority.com → challenges.cloudflare.com1 captured connections
- abilitomority.com → challenges.cloudflare.comLoads from2 captured connections
- abilitomority.com → portal.microsoftonline.com1 captured connections
- abilitomority.com → res.public.onecdn.static.microsoftLoads from1 captured connections
- login.microsoftonline.com → aadcdn.msftauth.netLoads from1 captured connections
- login.microsoftonline.com → wispy-waterfall-b1a9.mohokob423.workers.devRedirects to1 captured connections
- wispy-waterfall-b1a9.mohokob423.workers.dev → abilitomority.comRedirects to1 captured connections
Network requests
Click any request row to expand it in place. Multiple transactions can remain open.
| Timestamp (UTC) | Method | Status | Host / path | Type | Size | Duration | Signals |
|---|---|---|---|---|---|---|---|
| GET | 200 | document | 22.2 KB | 241 ms | — | ||
| GET | 200 | script | 146.9 KB | 206 ms | — | ||
| GET | 200 | document | 4.3 KB | 129 ms | 1 alerts | ||
| GET | 404 | img | 0 B | 15 ms | 1 alerts | ||
| GET | 200 | document | 2.2 KB | 446 ms | 2 alerts | ||
| GET | 302 | script | 49.3 KB | 53 ms | — | ||
| GET | 200 | script | 49.3 KB | 13 ms | — | ||
| GET | 200 | img | 156 B | 508 ms | 2 alerts | ||
| GET | 200 | subdocument | 210.7 KB | 15 ms | — | ||
| GET | 200 | img | 86 B | 12 ms | — | ||
| POST | 200 | xhr | 203.2 KB | 54 ms | — | ||
| GET | 200 | img | 335 B | 8 ms | — | ||
| GET | 401 | fetch | 1 B | 29 ms | — | ||
| POST | 200 | xhr | 29.3 KB | 44 ms | — | ||
| POST | 200 | xhr | 4.8 KB | 52 ms | — | ||
| POST | 200 | document | 3.5 KB | 844 ms | 2 alerts | ||
| GET | 200 | img | 3.1 KB | 259 ms | — | ||
| GET | No response | img | 0 B | 0 ms | 2 alerts | ||
| GET | 302 | document | 42.6 KB | 1274 ms | 2 alerts | ||
| GET | 200 | document | 42.6 KB | 1206 ms | 2 alerts | ||
| GET | 200 | stylesheet | 111.5 KB | 626 ms | 2 alerts | ||
| GET | 200 | script | 453.2 KB | 1313 ms | 2 alerts | ||
| GET | 200 | script | 60.2 KB | 560 ms | 2 alerts | ||
| GET | 200 | script | 2 B | 536 ms | 2 alerts | ||
| GET | 200 | script | 185.7 KB | 616 ms | 2 alerts | ||
| GET | 200 | img | 16.8 KB | 573 ms | 2 alerts | ||
| GET | 200 | script | 397.9 KB | 719 ms | 2 alerts | ||
| GET | 404 | subdocument | 1.2 KB | 815 ms | — | ||
| GET | 200 | script | 15.4 KB | 574 ms | 2 alerts | ||
| GET | 200 | img | 2.6 KB | 523 ms | 2 alerts | ||
| GET | 200 | img | 3.5 KB | 520 ms | 2 alerts | ||
| GET | 200 | img | 45.5 KB | 563 ms | 2 alerts | ||
| GET | 200 | img | 3.6 KB | 545 ms | 2 alerts | ||
| GET | 200 | subdocument | 17.7 KB | 115 ms | — | ||
| POST | 200 | xhr | 265 B | 609 ms | 2 alerts | ||
| GET | 200 | script | 26.7 KB | 497 ms | 2 alerts | ||