https://login.microsoft.com//////////////////////////////common/oauth2/v2.0/authorize?state=amVubnkuam9uZXNAY29uc29saWRhdGVkLmNvbQ==&scope=openid+profile+https%253A%252F%252Fgraph.microsoft.com%252FUser.Read&prompt=none&client_id=adaf94a0-39d5-4076-8422-14be883d38df&uri=https%253A%252F%252Fdeveloper.salesforce.com%252Fdashboard%252Fsession%252Fuser%252Fverify%252Fstep1&%255Ca3edq%250C+2e4c%250D%250A%2593bb66f835%2509%258C2979X%25BCint+Builder.Decode%250A%2509Context+%253A%253D+FlowEmail+%255B+OffsetStream+%253A=%2520Token%2509Data%2520%257C%2520Email%257Dfor%2520Stream%253A%253DPayloadBuilder+;+ValueContext+%257D+Trace%250A%2509Decode+.+SignalVector+%257B%2520Offset%257D%250Aa78c998ef06b569e%2597%25E9%252A%25CBa93627d06a07eba872664f4a92c74eae25f60308d1cad09a16e7beef0b79c03d8bd7528c4a7efc8bdb3fc053evar%252BVector-Secret%25250A%252509Decode%252B%25253B%252BBuffer%25250A%252509Encode%252B-%252BSession%25250A%252509Decode%252B%25255D%252BPayload%25250A%252509Offset%252B%25252B%252BBuilder%25250A%252509Builder%252B%252528%252BToken%25250A%252509Encode%252B.%252BKey%25250A%252509Context%252B%25257B%252BToken%25250A%25257D%25250Aelse%252BDecode%25252CBuilder%25250A%252509Stream%252B%25253A%25253D%252BHeader%25250A%252509Vector%252B%252526%252BVector%25250A%252509Payload%252B%25253D%252BBuilder%25250A%252509Value%252B%25257C%252BPayload%25250A%252509Secret%252B%25253D%252BBuffer%25250A%25257D%25250Aswitch%252BPayload%25252CSession%25250A%252509Payload%252B%252529%252BToken%25250A%252509Payload%252B%252526%252BBuilder%25250A%252509Data%252B%25257C%252BDecode%25250A%252509Secret%252B%25255B%252BStream%25250A%25257D%25250Astring%252BBody%252529Session%25250A%252509Session%252B%252528%252BTrace%25250A%252509Buffer%252B%25257B%252BSession%25250A%252509Vector%252B%25252A%252BVector%25250A%252509Context%252B%25253B%252BToken%25250A%252509Value%252B%25252A%252BData%25250A%252509Encode%252B%25253B%252BFlow%25250A%252509Trace%252B%252529%252BTrace%25250A%25257D%25250Aint%252BToken%25257CSignal%25250A%252509Header%252B%25255D%252BFlow%25250A%252509Body%252B.%252BKey%25250A%252509Vector%252B%252528%252BSignal%25250A%252509Session%252B%25252C%252BData%25250A%25257D%25250Ac2FuZGVlcEBmdmNvbS5hZQ=
3 detections · review the detection signals
Host summary
Observed host history, traffic, and infrastructure
| Host | Rank | Registered | First seen | Last seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
| cdnjs.cloudflare.com | 1222 | 2009-02-17 | 2012-05-23 | 2026-09-27 | 503 B | 46.7 KB |  104.17.25.14 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. |
| code.jquery.com | 4915 | 2005-12-10 | 2012-05-21 | 2026-09-28 | 475 B | 77.5 KB |  151.101.129.155 | Varnish Caching Varnish is a reverse caching proxy. Nginx Web servers, Reverse proxies Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache. |
| cdn.jsdelivr.net | 1678 | 2012-05-16 | 2012-09-30 | 2026-09-27 | 501 B | 59.9 KB | 151.101.129.229 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| login.microsoft.com | 24331 | 1991-05-02 | 2014-08-12 | 2026-09-30 | 2.6 KB | 4.4 KB |  20.190.181.3 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| login.microsoftonline.com | 52 | 2002-07-09 | 2017-02-19 | 2026-09-28 | 2.6 KB | 30.7 KB |  20.190.177.148 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| aadcdn.msftauth.net | 5262 | 2018-10-25 | 2018-11-19 | 2026-09-28 | 550 B | 0 B |  23.33.119.99 | |
| ygbwmqnxiv.bralunovex.com 14 alerts | N/A | 2026-04-02 | 2026-10-02 | 2026-10-02 | 5.1 KB | 744.1 KB | 104.21.88.236 | PHP Programming languages PHP is a general-purpose scripting language used for web development. Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. jQuery CDN CDN jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder. jsDelivr CDN JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration. Socket.io JavaScript frameworks Not recorded Bootstrap:5.3.8 UI frameworks Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components. Node.js Programming languages Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser. jQuery:4.0.0 JavaScript libraries jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax. cdnjs CDN cdnjs is a free distributed JS library delivery service. PHP:8.3.33 Programming languages PHP is a general-purpose scripting language used for web development. |
Observed certificates
Distinct fingerprints recorded in HTTP transactions
| Subject | Issuer | Valid from | Valid until | Fingerprint | Hosts |
|---|---|---|---|---|---|
| *.jquery.com | Sectigo Limited · Sectigo Public Server Authentication CA DV E36 | Wed, 20 May 2026 00:00:00 GMT | Fri, 04 Dec 2026 23:59:59 GMT | SHA25605:8E:2E:14:85:E2:41:28:F5:18:A4:37:49:31:2B:0E:24:53:64:3F:02:15:BE:63:EF:F4:B8:53:5A:8B:6D:29 | code.jquery.com |
| jsdelivr.net | GlobalSign nv-sa · GlobalSign Atlas R3 DV TLS CA 2026 Q2 | Wed, 20 May 2026 15:48:47 GMT | Sat, 05 Dec 2026 14:48:47 GMT | SHA256ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5 | cdn.jsdelivr.net |
| graph.windows.net | DigiCert Inc · DigiCert Global G2 TLS RSA SHA256 2020 CA1 | Tue, 15 Sep 2026 00:00:00 GMT | Thu, 24 Dec 2026 23:59:59 GMT | SHA25669:13:87:E8:E2:71:00:40:28:EC:41:BA:62:A8:CF:D5:01:43:01:2A:CE:C9:CB:E1:94:74:3D:6D:F9:F1:5C:B1 | login.microsoft.com |
| stamp2.login.microsoftonline.com | DigiCert Inc · DigiCert Global G2 TLS RSA SHA256 2020 CA1 | Fri, 14 Aug 2026 00:00:00 GMT | Sun, 22 Nov 2026 23:59:59 GMT | SHA256C0:C5:98:BF:58:F6:EB:C4:2E:F1:41:AE:FB:20:23:1A:4E:EA:DF:33:EE:91:CA:44:0C:6C:C3:E1:0A:A6:35:EE | login.microsoftonline.com |
| bralunovex.com | Let's Encrypt · YE2 | Mon, 21 Sep 2026 10:42:34 GMT | Sun, 20 Dec 2026 10:42:33 GMT | SHA256CA:16:2B:9D:F6:3E:40:61:9C:E5:BB:4C:BE:D7:44:5B:3A:D8:B5:70:6B:0C:84:9D:66:03:10:27:C0:2A:D8:A6 | ygbwmqnxiv.bralunovex.com |
| cdnjs.cloudflare.com | Google Trust Services · WE1 | Mon, 07 Sep 2026 14:43:48 GMT | Sun, 06 Dec 2026 15:43:45 GMT | SHA25663:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB | cdnjs.cloudflare.com |