WEBSITE ANALYSIS REPORT
https://login.microsoft.com//////////////////////////////common/oauth2/v2.0/authorize?state=amVubnkuam9uZXNAY29uc29saWRhdGVkLmNvbQ==&scope=openid+profile+https%253A%252F%252Fgraph.microsoft.com%252FUser.Read&prompt=none&client_id=adaf94a0-39d5-4076-8422-14be883d38df&uri=https%253A%252F%252Fdeveloper.salesforce.com%252Fdashboard%252Fsession%252Fuser%252Fverify%252Fstep1&%255Ca3edq%250C+2e4c%250D%250A%2593bb66f835%2509%258C2979X%25BCint+Builder.Decode%250A%2509Context+%253A%253D+FlowEmail+%255B+OffsetStream+%253A=%2520Token%2509Data%2520%257C%2520Email%257Dfor%2520Stream%253A%253DPayloadBuilder+;+ValueContext+%257D+Trace%250A%2509Decode+.+SignalVector+%257B%2520Offset%257D%250Aa78c998ef06b569e%2597%25E9%252A%25CBa93627d06a07eba872664f4a92c74eae25f60308d1cad09a16e7beef0b79c03d8bd7528c4a7efc8bdb3fc053evar%252BVector-Secret%25250A%252509Decode%252B%25253B%252BBuffer%25250A%252509Encode%252B-%252BSession%25250A%252509Decode%252B%25255D%252BPayload%25250A%252509Offset%252B%25252B%252BBuilder%25250A%252509Builder%252B%252528%252BToken%25250A%252509Encode%252B.%252BKey%25250A%252509Context%252B%25257B%252BToken%25250A%25257D%25250Aelse%252BDecode%25252CBuilder%25250A%252509Stream%252B%25253A%25253D%252BHeader%25250A%252509Vector%252B%252526%252BVector%25250A%252509Payload%252B%25253D%252BBuilder%25250A%252509Value%252B%25257C%252BPayload%25250A%252509Secret%252B%25253D%252BBuffer%25250A%25257D%25250Aswitch%252BPayload%25252CSession%25250A%252509Payload%252B%252529%252BToken%25250A%252509Payload%252B%252526%252BBuilder%25250A%252509Data%252B%25257C%252BDecode%25250A%252509Secret%252B%25255B%252BStream%25250A%25257D%25250Astring%252BBody%252529Session%25250A%252509Session%252B%252528%252BTrace%25250A%252509Buffer%252B%25257B%252BSession%25250A%252509Vector%252B%25252A%252BVector%25250A%252509Context%252B%25253B%252BToken%25250A%252509Value%252B%25252A%252BData%25250A%252509Encode%252B%25253B%252BFlow%25250A%252509Trace%252B%252529%252BTrace%25250A%25257D%25250Aint%252BToken%25257CSignal%25250A%252509Header%252B%25255D%252BFlow%25250A%252509Body%252B.%252BKey%25250A%252509Vector%252B%252528%252BSignal%25250A%252509Session%252B%25252C%252BData%25250A%25257D%25250Ac2FuZGVlcEBmdmNvbS5hZQ=
public
Phishing detected
Review evidence →3 detections · review the detection signals
Indicators
Exact observed values · repeated evidence is grouped by type and value
| Kind | Value | Signals | Copy |
|---|---|---|---|
| IP | 104.17.25.14 | URLQuery 0IDS 0TDS 0 | |
| IP | 104.21.88.236 | URLQuery 14IDS 0TDS 0 | |
| IP | 151.101.129.155 | URLQuery 0IDS 0TDS 0 | |
| IP | 151.101.129.229 | URLQuery 0IDS 0TDS 0 | |
| IP | 20.190.177.148 | URLQuery 0IDS 0TDS 0 | |
| IP | 20.190.181.3 | URLQuery 0IDS 0TDS 0 | |
| IP | 23.33.119.99 | URLQuery 0IDS 0TDS 0 | |
| IP | 40.126.53.18 | URLQuery 0IDS 0TDS 0 | |
| Domain | bralunovex.com | URLQuery 14IDS 0TDS 0 | |
| Domain | cloudflare.com | URLQuery 0IDS 0TDS 0 | |
| Domain | jquery.com | URLQuery 0IDS 0TDS 0 | |
| Domain | jsdelivr.net | URLQuery 0IDS 0TDS 0 | |
| Domain | microsoft.com | URLQuery 0IDS 0TDS 0 | |
| Domain | microsoftonline.com | URLQuery 0IDS 0TDS 0 | |
| Domain | msftauth.net | URLQuery 0IDS 0TDS 0 | |
| FQDN | aadcdn.msftauth.net | URLQuery 0IDS 0TDS 0 | |
| FQDN | cdn.jsdelivr.net | URLQuery 0IDS 0TDS 0 | |
| FQDN | cdnjs.cloudflare.com | URLQuery 0IDS 0TDS 0 | |
| FQDN | code.jquery.com | URLQuery 0IDS 0TDS 0 | |
| FQDN | login.microsoft.com | URLQuery 0IDS 0TDS 0 | |
| FQDN | login.microsoftonline.com | URLQuery 0IDS 0TDS 0 | |
| FQDN | ygbwmqnxiv.bralunovex.com | URLQuery 14IDS 0TDS 0 | |
| URL | https://aadcdn.msftauth.net/shared/1.0/content/js/FetchSessions_Core_H5IgszKn6xuaSfUqCqn3HQ2.js | URLQuery 0IDS 0TDS 0 | |
| URL | https://cdn.jsdelivr.net/npm/bootstrap@5.3.8/dist/js/bootstrap.min.js | URLQuery 0IDS 0TDS 0 | |
| URL | https://cdnjs.cloudflare.com/ajax/libs/socket.io/4.8.1/socket.io.min.js | URLQuery 0IDS 0TDS 0 | |
| URL | https://code.jquery.com/jquery-4.0.0.min.js | URLQuery 0IDS 0TDS 0 | |
| URL | https://login.microsoft.com//////////////////////////////common/oauth2/v2.0/authorize?state=amVubnkuam9uZXNAY29uc29saWRhdGVkLmNvbQ==&scope=openid+profile+https%253A%252F%252Fgraph.microsoft.com%252FUser.Read&prompt=none&client_id=adaf94a0-39d5-4076-8422-14be883d38df&uri=https%253A%252F%252Fdeveloper.salesforce.com%252Fdashboard%252Fsession%252Fuser%252Fverify%252Fstep1&%255Ca3edq%250C+2e4c%250D%250A%2593bb66f835%2509%258C2979X%25BCint+Builder.Decode%250A%2509Context+%253A%253D+FlowEmail+%255B+OffsetStream+%253A=%2520Token%2509Data%2520%257C%2520Email%257Dfor%2520Stream%253A%253DPayloadBuilder+;+ValueContext+%257D+Trace%250A%2509Decode+.+SignalVector+%257B%2520Offset%257D%250Aa78c998ef06b569e%2597%25E9%252A%25CBa93627d06a07eba872664f4a92c74eae25f60308d1cad09a16e7beef0b79c03d8bd7528c4a7efc8bdb3fc053evar%252BVector-Secret%25250A%252509Decode%252B%25253B%252BBuffer%25250A%252509Encode%252B-%252BSession%25250A%252509Decode%252B%25255D%252BPayload%25250A%252509Offset%252B%25252B%252BBuilder%25250A%252509Builder%252B%252528%252BToken%25250A%252509Encode%252B.%252BKey%25250A%252509Context%252B%25257B%252BToken%25250A%25257D%25250Aelse%252BDecode%25252CBuilder%25250A%252509Stream%252B%25253A%25253D%252BHeader%25250A%252509Vector%252B%252526%252BVector%25250A%252509Payload%252B%25253D%252BBuilder%25250A%252509Value%252B%25257C%252BPayload%25250A%252509Secret%252B%25253D%252BBuffer%25250A%25257D%25250Aswitch%252BPayload%25252CSession%25250A%252509Payload%252B%252529%252BToken%25250A%252509Payload%252B%252526%252BBuilder%25250A%252509Data%252B%25257C%252BDecode%25250A%252509Secret%252B%25255B%252BStream%25250A%25257D%25250Astring%252BBody%252529Session%25250A%252509Session%252B%252528%252BTrace%25250A%252509Buffer%252B%25257B%252BSession%25250A%252509Vector%252B%25252A%252BVector%25250A%252509Context%252B%25253B%252BToken%25250A%252509Value%252B%25252A%252BData%25250A%252509Encode%252B%25253B%252BFlow%25250A%252509Trace%252B%252529%252BTrace%25250A%25257D%25250Aint%252BToken%25257CSignal%25250A%252509Header%252B%25255D%252BFlow%25250A%252509Body%252B.%252BKey%25250A%252509Vector%252B%252528%252BSignal%25250A%252509Session%252B%25252C%252BData%25250A%25257D%25250Ac2FuZGVlcEBmdmNvbS5hZQ= | URLQuery 0IDS 0TDS 0 | |
| URL | https://login.microsoftonline.com/common/oauth2/v2.0/authorize?state=amVubnkuam9uZXNAY29uc29saWRhdGVkLmNvbQ==&scope=openid+profile+https%253A%252F%252Fgraph.microsoft.com%252FUser.Read&prompt=none&client_id=adaf94a0-39d5-4076-8422-14be883d38df&uri=https%253A%252F%252Fdeveloper.salesforce.com%252Fdashboard%252Fsession%252Fuser%252Fverify%252Fstep1&%255Ca3edq%250C+2e4c%250D%250A%2593bb66f835%2509%258C2979X%25BCint+Builder.Decode%250A%2509Context+%253A%253D+FlowEmail+%255B+OffsetStream+%253A=%2520Token%2509Data%2520%257C%2520Email%257Dfor%2520Stream%253A%253DPayloadBuilder+;+ValueContext+%257D+Trace%250A%2509Decode+.+SignalVector+%257B%2520Offset%257D%250Aa78c998ef06b569e%2597%25E9%252A%25CBa93627d06a07eba872664f4a92c74eae25f60308d1cad09a16e7beef0b79c03d8bd7528c4a7efc8bdb3fc053evar%252BVector-Secret%25250A%252509Decode%252B%25253B%252BBuffer%25250A%252509Encode%252B-%252BSession%25250A%252509Decode%252B%25255D%252BPayload%25250A%252509Offset%252B%25252B%252BBuilder%25250A%252509Builder%252B%252528%252BToken%25250A%252509Encode%252B.%252BKey%25250A%252509Context%252B%25257B%252BToken%25250A%25257D%25250Aelse%252BDecode%25252CBuilder%25250A%252509Stream%252B%25253A%25253D%252BHeader%25250A%252509Vector%252B%252526%252BVector%25250A%252509Payload%252B%25253D%252BBuilder%25250A%252509Value%252B%25257C%252BPayload%25250A%252509Secret%252B%25253D%252BBuffer%25250A%25257D%25250Aswitch%252BPayload%25252CSession%25250A%252509Payload%252B%252529%252BToken%25250A%252509Payload%252B%252526%252BBuilder%25250A%252509Data%252B%25257C%252BDecode%25250A%252509Secret%252B%25255B%252BStream%25250A%25257D%25250Astring%252BBody%252529Session%25250A%252509Session%252B%252528%252BTrace%25250A%252509Buffer%252B%25257B%252BSession%25250A%252509Vector%252B%25252A%252BVector%25250A%252509Context%252B%25253B%252BToken%25250A%252509Value%252B%25252A%252BData%25250A%252509Encode%252B%25253B%252BFlow%25250A%252509Trace%252B%252529%252BTrace%25250A%25257D%25250Aint%252BToken%25257CSignal%25250A%252509Header%252B%25255D%252BFlow%25250A%252509Body%252B.%252BKey%25250A%252509Vector%252B%252528%252BSignal%25250A%252509Session%252B%25252C%252BData%25250A%25257D%25250Ac2FuZGVlcEBmdmNvbS5hZQ= | URLQuery 0IDS 0TDS 0 | |
| URL | https://ygbwmqnxiv.bralunovex.com/ | URLQuery 2IDS 0TDS 0 | |
| URL | https://ygbwmqnxiv.bralunovex.com/?email=jenny.jones@consolidated.com | URLQuery 4IDS 0TDS 0 | |
| URL | https://ygbwmqnxiv.bralunovex.com/b/bhvqhkuetjwsuwazsczdnwtll | URLQuery 2IDS 0TDS 0 | |
| URL | https://ygbwmqnxiv.bralunovex.com/favicon.ico | URLQuery 2IDS 0TDS 0 | |
| URL | https://ygbwmqnxiv.bralunovex.com/jp/qwoioerdppmhkpvwttcvymull | URLQuery 2IDS 0TDS 0 | |
| URL | https://ygbwmqnxiv.bralunovex.com/milk8_sand4_screen6_snow10_bridge5_keyboard7_cloud7_turtle3_city5_evening7_town5_sky1_paper2_cliff1_fire4_lion5 | URLQuery 2IDS 0TDS 0 | |
| SHA256 | 0eeab739b1a646aa1aeb5bb2f07b3f2993955d89c6cb8525df1882166454116d | URLQuery 0IDS 0TDS 0 | |
| SHA256 | 39a546ea9ad97f8bfaf5d3e0e8f8556adb415e470e59007ada9759dce472adaa | URLQuery 0IDS 0TDS 0 | |
| SHA256 | 4062edaf750fb8074e7e83e0c9028c94e32468a8b6f1614774328ef045150f93 | URLQuery 2IDS 0TDS 0 | |
| SHA256 | 619e7815b5b54cf3df3cc72e99345393d3b45cc382ba438f9e9351f4578d47d3 | URLQuery 0IDS 0TDS 0 | |
| SHA256 | 6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35 | URLQuery 0IDS 0TDS 0 | |
| SHA256 | 6ccc133a5bddf9c226ca2d1249d1d1e3c9e2833a3102c6034c1ffe208358f33d | URLQuery 2IDS 0TDS 0 | |
| SHA256 | 7b0f14895d69247fd88e93840489cfd47c55bd3fd27eb0a6c12a14cc5f492207 | URLQuery 0IDS 0TDS 0 | |
| SHA256 | 7e93e1abd63784aa0dd1c56491f20a2a9a8f6b048969de226cdbbfe906049c82 | URLQuery 2IDS 0TDS 0 | |
| SHA256 | b0e735814f8dcfecd6cdb8a7ce95a297a7e1e5f2727a29e6f5901801d52fa0c5 | URLQuery 0IDS 0TDS 0 | |
| SHA256 | e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 | URLQuery 6IDS 0TDS 0 | |
| SHA256 | ed5032efc3a4d499be410dcb6972309bb48e9cef1bde3971db4eb03e0b8ecc16 | URLQuery 2IDS 0TDS 0 | |
| SHA256 | ee761551d4ee10e7cd5aaa0fbb6b6075d0d33f7f3bbd7b2f907fb496d7e711f6 | URLQuery 0IDS 0TDS 0 |
No indicators match the current filters.