WEBSITE ANALYSIS REPORT

https://share.goodday.work/c6c2035b-ab85-455e-879f-9700c9e883b2

06 Oct 2026 · 16:55:14.000 UTCpublic

Report tags: microsoft phishing dkstools aitm
Submit tags

Request review

Phishing detected

4 detections · review the detection signals

Review evidence →

JavaScript

Recorded scripts and browser console observations

Observed scripts. Expand a row for metadata, detections, and available captured source.
#	Introduced by	Size	First seen
1	Function	34 B	11 Apr 202321:16 UTC

2	scriptElement	194.5 KB	02 Sep 202608:31 UTC

3	scriptElement	92.5 KB	02 Sep 202608:31 UTC

4	scriptElement	1.2 KB	06 Oct 202616:55 UTC

5	scriptElement	283 B	06 Oct 202616:55 UTC

6	scriptElement	13.8 KB	02 Sep 202608:31 UTC

7	scriptElement	45.7 KB	02 Mar 202516:22 UTC

8	scriptElement	76.9 KB	22 Jan 202611:09 UTC

9	scriptElement	14.00 MB	02 Sep 202608:31 UTC

10	scriptElement	59.1 KB	14 Sep 202515:45 UTC

11	scriptElement	12.0 KB	06 Oct 202616:51 UTC

12	scriptElement	722.6 KB	01 Oct 202617:02 UTC

Console observations

Browser messages in recorded order

7 messages


map[actor:server1.conn0.watcher14.process9//obj20 class:HTMLImageElement contentDomReference:map[browsingContextId:3 id:0.9850111489421451] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:img nodeType:1] sealed:false type:object]
map[actor:server1.conn0.watcher14.process9//obj21 class:HTMLImageElement contentDomReference:map[browsingContextId:3 id:0.5961611412250154] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:img nodeType:1] sealed:false type:object]
map[actor:server1.conn0.watcher14.process9//obj22 class:HTMLImageElement contentDomReference:map[browsingContextId:3 id:0.028764381704065367] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:img nodeType:1] sealed:false type:object]
map[actor:server1.conn0.watcher14.process9//obj23 class:HTMLImageElement contentDomReference:map[browsingContextId:3 id:0.2975297537323184] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:img nodeType:1] sealed:false type:object]
map[actor:server1.conn0.watcher14.process9//obj24 class:HTMLImageElement contentDomReference:map[browsingContextId:3 id:0.6447337590021222] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:img nodeType:1] sealed:false type:object]
map[actor:server1.conn0.watcher14.process9//obj25 class:HTMLImageElement contentDomReference:map[browsingContextId:3 id:0.8283812998015001] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:img nodeType:1] sealed:false type:object]
map[actor:server1.conn0.watcher14.process9//obj26 class:HTMLImageElement contentDomReference:map[browsingContextId:3 id:0.8769248385923668] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:img nodeType:1] sealed:false type:object]

Browser console observations in recorded order.
#	Level	Message	Recorded source
1	LOG	`map[actor:server1.conn0.watcher14.process9//obj20 class:HTMLImageElement contentDomReference:map[browsingContextId:3 id:0.9850111489421451] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:img nodeType:1] sealed:false type:object]`	https://xqlgvfclks.mavoniretal.com/?email= Line 40 · Column 848
2	LOG	`map[actor:server1.conn0.watcher14.process9//obj21 class:HTMLImageElement contentDomReference:map[browsingContextId:3 id:0.5961611412250154] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:img nodeType:1] sealed:false type:object]`	https://xqlgvfclks.mavoniretal.com/?email= Line 40 · Column 848
3	LOG	`map[actor:server1.conn0.watcher14.process9//obj22 class:HTMLImageElement contentDomReference:map[browsingContextId:3 id:0.028764381704065367] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:img nodeType:1] sealed:false type:object]`	https://xqlgvfclks.mavoniretal.com/?email= Line 40 · Column 848
4	LOG	`map[actor:server1.conn0.watcher14.process9//obj23 class:HTMLImageElement contentDomReference:map[browsingContextId:3 id:0.2975297537323184] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:img nodeType:1] sealed:false type:object]`	https://xqlgvfclks.mavoniretal.com/?email= Line 40 · Column 848
5	LOG	`map[actor:server1.conn0.watcher14.process9//obj24 class:HTMLImageElement contentDomReference:map[browsingContextId:3 id:0.6447337590021222] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:img nodeType:1] sealed:false type:object]`	https://xqlgvfclks.mavoniretal.com/?email= Line 40 · Column 848
6	LOG	`map[actor:server1.conn0.watcher14.process9//obj25 class:HTMLImageElement contentDomReference:map[browsingContextId:3 id:0.8283812998015001] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:img nodeType:1] sealed:false type:object]`	https://xqlgvfclks.mavoniretal.com/?email= Line 40 · Column 848
7	LOG	`map[actor:server1.conn0.watcher14.process9//obj26 class:HTMLImageElement contentDomReference:map[browsingContextId:3 id:0.8769248385923668] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:img nodeType:1] sealed:false type:object]`	https://xqlgvfclks.mavoniretal.com/?email= Line 40 · Column 848

https://share.goodday.work/c6c2035b-ab85-455e-879f-9700c9e883b2

JavaScript

Console observations

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>https://share.goodday.work/c6c2035b-ab85-455e-879f-9700c9e883b2

[JavaScript]

Console observations

https://share.goodday.work/c6c2035b-ab85-455e-879f-9700c9e883b2

JavaScript