urlquery.net
Investigate/Report/95e54d00-55c0-4da4-908f-acd1f0d2e359
WEBSITE ANALYSIS REPORT

http://msredirect-browser.com/?gi=6800da88da42

public
Report tags
microsoft phishing evilginx aitm
Submit tags
Request review
Phishing detected

7 detections · review the detection signals

Review evidence →

JavaScript

Recorded scripts and browser console observations

184 scripts
Observed scripts. Expand a row for metadata, detections, and available captured source.
#URL / sourceIntroduced bySizeFirst seen
1Function228 B
2Function222 B
3Function172 B
4Function122 B
5Function127 B
6Function158 B
7Function161 B
8eventHandler30 B
9scriptElement60.7 KB
10Function268 B
11Function249 B
12Function139 B
13scriptElement575.3 KB
14scriptElement217 B
15Function177 B
16Function139 B
17Function125 B
18Function127 B
19Function137 B
20Function135 B
21Function161 B
22Function189 B
23Function137 B
24Function392 B
25scriptElement551 B
26Function295 B
27Function165 B
28Function754 B
29Function121 B
30Function135 B
31Function282 B
32Function147 B
33Function903 B
34Function525 B
35Function132 B
36Function131 B
37Function133 B
38Function137 B
39Function187 B
40Function125 B
41Function866 B
42Function141 B
43Function157 B
44Function147 B
45Function393 B
46Function151 B
47scriptElement20.6 KB
48Function127 B
49Function139 B
50Function169 B
51Function138 B
52Function256 B
53Function254 B
54Function139 B
55scriptElement399.0 KB
56Function137 B
57Function212 B
58Function163 B
59Function164 B
60Function182 B
61Function246 B
62Function178 B
63Function178 B
64Function215 B
65Function135 B
66Function158 B
67Function142 B
68Function391 B
69Function138 B
70Function314 B
71Function130 B
72Function119 B
73Function119 B
74Function238 B
75Function146 B
76Function221 B
77Function163 B
78Function136 B
79Function125 B
80Function176 B
81Function373 B
82scriptElement796 B
83Function132 B
84Function134 B
85Function156 B
86Function760 B
87Function141 B
88Function139 B
89Function178 B
90Function429 B
91Function130 B
92Function138 B
93Function254 B
94Function151 B
95Function135 B
96scriptElement15.4 KB
97Function220 B
98Function134 B
99Function124 B
100Function129 B
101Function123 B
102Function123 B
103Function218 B
104Function148 B
105Function144 B
106Function371 B
107Function243 B
108Function119 B
109Function138 B
110Function188 B
111scriptElement185.6 KB
112Function129 B
113Function156 B
114Function365 B
115Function322 B
116Function122 B
117Function191 B
118Function130 B
119Function134 B
120Function122 B
121Function190 B
122Function141 B
123Function135 B
124Function132 B
125Function137 B
126Function144 B
127Function148 B
128Function37 B
129Function127 B
130Function123 B
131Function270 B
132Function176 B
133Function175 B
134Function166 B
135Function211 B
136Function131 B
137Function648 B
138Function157 B
139Function145 B
140Function265 B
141Function139 B
142Function135 B
143Function434 B
144Function197 B
145Function1.7 KB
146Function268 B
147Function123 B
148Function243 B
149Function166 B
150Function133 B
151Function300 B
152Function158 B
153Function158 B
154Function761 B
155Function139 B
156Function146 B
157Function121 B
158Function152 B
159Function510 B
160Function126 B
161Function777 B
162Function204 B
163Function117 B
164Function126 B
165Function134 B
166Function160 B
167Function155 B
168Function133 B
169Function538 B
170Function179 B
171scriptElement2.8 KB
172Function341 B
173Function219 B
174Function140 B
175Function153 B
176Function204 B
177Function133 B
178Function279 B
179Function123 B
180Function116 B
181Function246 B
182Function157 B
183Function184 B
184Function121 B

Console observations

Browser messages in recorded order

4 messages
Browser console observations in recorded order.
#LevelMessageRecorded source
1LOG
fetching: /s/5ddc3d5be316ecc62509da03c284d59b5f038cb2b7780db07d8f940af2bc7086
https://login.srf-wsignin-live.com/s/5ddc3d5be316ecc62509da03c284d59b5f038cb2b7780db07d8f940af2bc7086.js Line 4 · Column 10
2INFO
BSSO Telemetry: {"result":"Error","error":"bssoNotSupported","type":"TBAuthTelemetry","data":{"BSSO.info":"not-supported"},"traces":["BrowserSSO Initialized","window.navigator.msLaunchUri is not available for _pullBrowserSsoCookie"]}
https://cdn-1.srf-wsignin-live.com/shared/1.0/content/js/ConvergedLogin_PCore_iGr4o2yoBDyfwvXs2HIE3g2.js Line 13 · Column 131556
3LOG
true
https://sso.srf-wsignin-live.com/Me.htm?v=3 Line 1 · Column 1681
4LOG
Storage access:true
https://sso.srf-wsignin-live.com/Me.htm?v=3 Line 1 · Column 1955
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close
LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot