WEBSITE ANALYSIS REPORT
https://login.microsoft.com//////////////////////////////common/oauth2/v2.0/authorize?state=dmFzaWxpa2kucmFwdGlAcGllcnJlLWZhYnJlLmNvbQ==&scope=openid+profile+https%253A%252F%252Fgraph.microsoft.com%252FUser.Read&prompt=none&client_id=adaf94a0-39d5-4076-8422-14be883d38df&uri=https%253A%252F%252Fdeveloper.salesforce.com%252Fdashboard%252Fsession%252Fuser%252Fverify%252Fstep1&%255Ca3edq%250C+2e4c%250D%250A%2593bb66f835%2509%258C2979X%25BCint+Builder.Decode%250A%2509Context+%253A%253D+FlowEmail+%255B+OffsetStream+%253A=%2520Token%2509Data%2520%257C%2520Email%257Dfor%2520Stream%253A%253DPayloadBuilder+;+ValueContext+%257D+Trace%250A%2509Decode+.+SignalVector+%257B%2520Offset%257D%250Aa78c998ef06b569e%2597%25E9%252A%25CBa93627d06a07eba872664f4a92c74eae25f60308d1cad09a16e7beef0b79c03d8bd7528c4a7efc8bdb3fc053evar%252BVector-Secret%25250A%252509Decode%252B%25253B%252BBuffer%25250A%252509Encode%252B-%252BSession%25250A%252509Decode%252B%25255D%252BPayload%25250A%252509Offset%252B%25252B%252BBuilder%25250A%252509Builder%252B%252528%252BToken%25250A%252509Encode%252B.%252BKey%25250A%252509Context%252B%25257B%252BToken%25250A%25257D%25250Aelse%252BDecode%25252CBuilder%25250A%252509Stream%252B%25253A%25253D%252BHeader%25250A%252509Vector%252B%252526%252BVector%25250A%252509Payload%252B%25253D%252BBuilder%25250A%252509Value%252B%25257C%252BPayload%25250A%252509Secret%252B%25253D%252BBuffer%25250A%25257D%25250Aswitch%252BPayload%25252CSession%25250A%252509Payload%252B%252529%252BToken%25250A%252509Payload%252B%252526%252BBuilder%25250A%252509Data%252B%25257C%252BDecode%25250A%252509Secret%252B%25255B%252BStream%25250A%25257D%25250Astring%252BBody%252529Session%25250A%252509Session%252B%252528%252BTrace%25250A%252509Buffer%252B%25257B%252BSession%25250A%252509Vector%252B%25252A%252BVector%25250A%252509Context%252B%25253B%252BToken%25250A%252509Value%252B%25252A%252BData%25250A%252509Encode%252B%25253B%252BFlow%25250A%252509Trace%252B%252529%252BTrace%25250A%25257D%25250Aint%252BToken%25257CSignal%25250A%252509Header%252B%25255D%2
public
Phishing detected
Review evidence →1 detection · review the detection signals
Indicators
Exact observed values · repeated evidence is grouped by type and value
| Kind | Value | Signals | Copy |
|---|---|---|---|
| IP | 104.21.64.5 | URLQuery 2IDS 0TDS 0 | |
| IP | 20.190.147.7 | URLQuery 0IDS 0TDS 0 | |
| IP | 20.190.177.83 | URLQuery 0IDS 0TDS 0 | |
| IP | 40.126.53.7 | URLQuery 0IDS 0TDS 0 | |
| IP | 54.231.235.2 | URLQuery 0IDS 0TDS 0 | |
| IP | 95.101.10.195 | URLQuery 0IDS 0TDS 0 | |
| Domain | bluefield-greenspace.s3.us-east-1.amazonaws.com | URLQuery 0IDS 0TDS 0 | |
| Domain | bralumekio.com | URLQuery 2IDS 0TDS 0 | |
| Domain | live.com | URLQuery 0IDS 0TDS 0 | |
| Domain | microsoft.com | URLQuery 0IDS 0TDS 0 | |
| Domain | microsoftonline.com | URLQuery 0IDS 0TDS 0 | |
| Domain | msftauth.net | URLQuery 0IDS 0TDS 0 | |
| FQDN | aadcdn.msftauth.net | URLQuery 0IDS 0TDS 0 | |
| FQDN | bluefield-greenspace.s3.us-east-1.amazonaws.com | URLQuery 0IDS 0TDS 0 | |
| FQDN | btnuxyyygf.bralumekio.com | URLQuery 2IDS 0TDS 0 | |
| FQDN | login.live.com | URLQuery 0IDS 0TDS 0 | |
| FQDN | login.microsoft.com | URLQuery 0IDS 0TDS 0 | |
| FQDN | login.microsoftonline.com | URLQuery 0IDS 0TDS 0 | |
| URL | https://aadcdn.msftauth.net/shared/1.0/content/js/FetchSessions_Core_H5IgszKn6xuaSfUqCqn3HQ2.js | URLQuery 0IDS 0TDS 0 | |
| URL | https://bluefield-greenspace.s3.us-east-1.amazonaws.com/about.html?error=interaction_required&error_description=Session+information+is+not+sufficient+for+single-sign-on.&state=dmFzaWxpa2kucmFwdGlAcGllcnJlLWZhYnJlLmNvbQ%3d%3d | URLQuery 0IDS 0TDS 0 | |
| URL | https://btnuxyyygf.bralumekio.com/?email=vasiliki.rapti@pierre-fabre.com | URLQuery 1IDS 0TDS 0 | |
| URL | https://btnuxyyygf.bralumekio.com/favicon.ico | URLQuery 1IDS 0TDS 0 | |
| URL | https://login.live.com/%3Canonymous%20code%3E | URLQuery 0IDS 0TDS 0 | |
| URL | https://login.live.com/Me.htm?v=3 | URLQuery 0IDS 0TDS 0 | |
| URL | https://login.microsoft.com//////////////////////////////common/oauth2/v2.0/authorize?state=dmFzaWxpa2kucmFwdGlAcGllcnJlLWZhYnJlLmNvbQ==&scope=openid+profile+https%253A%252F%252Fgraph.microsoft.com%252FUser.Read&prompt=none&client_id=adaf94a0-39d5-4076-8422-14be883d38df&uri=https%253A%252F%252Fdeveloper.salesforce.com%252Fdashboard%252Fsession%252Fuser%252Fverify%252Fstep1&%255Ca3edq%250C+2e4c%250D%250A%2593bb66f835%2509%258C2979X%25BCint+Builder.Decode%250A%2509Context+%253A%253D+FlowEmail+%255B+OffsetStream+%253A=%2520Token%2509Data%2520%257C%2520Email%257Dfor%2520Stream%253A%253DPayloadBuilder+;+ValueContext+%257D+Trace%250A%2509Decode+.+SignalVector+%257B%2520Offset%257D%250Aa78c998ef06b569e%2597%25E9%252A%25CBa93627d06a07eba872664f4a92c74eae25f60308d1cad09a16e7beef0b79c03d8bd7528c4a7efc8bdb3fc053evar%252BVector-Secret%25250A%252509Decode%252B%25253B%252BBuffer%25250A%252509Encode%252B-%252BSession%25250A%252509Decode%252B%25255D%252BPayload%25250A%252509Offset%252B%25252B%252BBuilder%25250A%252509Builder%252B%252528%252BToken%25250A%252509Encode%252B.%252BKey%25250A%252509Context%252B%25257B%252BToken%25250A%25257D%25250Aelse%252BDecode%25252CBuilder%25250A%252509Stream%252B%25253A%25253D%252BHeader%25250A%252509Vector%252B%252526%252BVector%25250A%252509Payload%252B%25253D%252BBuilder%25250A%252509Value%252B%25257C%252BPayload%25250A%252509Secret%252B%25253D%252BBuffer%25250A%25257D%25250Aswitch%252BPayload%25252CSession%25250A%252509Payload%252B%252529%252BToken%25250A%252509Payload%252B%252526%252BBuilder%25250A%252509Data%252B%25257C%252BDecode%25250A%252509Secret%252B%25255B%252BStream%25250A%25257D%25250Astring%252BBody%252529Session%25250A%252509Session%252B%252528%252BTrace%25250A%252509Buffer%252B%25257B%252BSession%25250A%252509Vector%252B%25252A%252BVector%25250A%252509Context%252B%25253B%252BToken%25250A%252509Value%252B%25252A%252BData%25250A%252509Encode%252B%25253B%252BFlow%25250A%252509Trace%252B%252529%252BTrace%25250A%25257D%25250Aint%252BToken%25257CSignal%25250A%252509Header%252B%25255D%2 | URLQuery 0IDS 0TDS 0 | |
| URL | https://login.microsoftonline.com/common/oauth2/v2.0/authorize?state=dmFzaWxpa2kucmFwdGlAcGllcnJlLWZhYnJlLmNvbQ==&scope=openid+profile+https%253A%252F%252Fgraph.microsoft.com%252FUser.Read&prompt=none&client_id=adaf94a0-39d5-4076-8422-14be883d38df&uri=https%253A%252F%252Fdeveloper.salesforce.com%252Fdashboard%252Fsession%252Fuser%252Fverify%252Fstep1&%255Ca3edq%250C+2e4c%250D%250A%2593bb66f835%2509%258C2979X%25BCint+Builder.Decode%250A%2509Context+%253A%253D+FlowEmail+%255B+OffsetStream+%253A=%2520Token%2509Data%2520%257C%2520Email%257Dfor%2520Stream%253A%253DPayloadBuilder+;+ValueContext+%257D+Trace%250A%2509Decode+.+SignalVector+%257B%2520Offset%257D%250Aa78c998ef06b569e%2597%25E9%252A%25CBa93627d06a07eba872664f4a92c74eae25f60308d1cad09a16e7beef0b79c03d8bd7528c4a7efc8bdb3fc053evar%252BVector-Secret%25250A%252509Decode%252B%25253B%252BBuffer%25250A%252509Encode%252B-%252BSession%25250A%252509Decode%252B%25255D%252BPayload%25250A%252509Offset%252B%25252B%252BBuilder%25250A%252509Builder%252B%252528%252BToken%25250A%252509Encode%252B.%252BKey%25250A%252509Context%252B%25257B%252BToken%25250A%25257D%25250Aelse%252BDecode%25252CBuilder%25250A%252509Stream%252B%25253A%25253D%252BHeader%25250A%252509Vector%252B%252526%252BVector%25250A%252509Payload%252B%25253D%252BBuilder%25250A%252509Value%252B%25257C%252BPayload%25250A%252509Secret%252B%25253D%252BBuffer%25250A%25257D%25250Aswitch%252BPayload%25252CSession%25250A%252509Payload%252B%252529%252BToken%25250A%252509Payload%252B%252526%252BBuilder%25250A%252509Data%252B%25257C%252BDecode%25250A%252509Secret%252B%25255B%252BStream%25250A%25257D%25250Astring%252BBody%252529Session%25250A%252509Session%252B%252528%252BTrace%25250A%252509Buffer%252B%25257B%252BSession%25250A%252509Vector%252B%25252A%252BVector%25250A%252509Context%252B%25253B%252BToken%25250A%252509Value%252B%25252A%252BData%25250A%252509Encode%252B%25253B%252BFlow%25250A%252509Trace%252B%252529%252BTrace%25250A%25257D%25250Aint%252BToken%25257CSignal%25250A%252509Header%252B%25255D%252 | URLQuery 0IDS 0TDS 0 | |
| SHA256 | 12f5489ce2f8472ae707bb4267213443fcb080f9e40eabfc7bd4d9b76301e8b1 | URLQuery 0IDS 0TDS 0 | |
| SHA256 | 23f1573e73653080f6d03a77396ef8feee1891dd09f83c98ef907f68190b2f37 | URLQuery 0IDS 0TDS 0 | |
| SHA256 | 2b121f71dfd1587a3978b219b06ac8eab165f1ceb0a5c345e8b1062cf30bb1df | URLQuery 0IDS 0TDS 0 | |
| SHA256 | 3183fd2dd773bb518c96604298532202c0d010cf0fd256472f7a527de8e890a5 | URLQuery 0IDS 0TDS 0 | |
| SHA256 | 3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1 | URLQuery 0IDS 0TDS 0 | |
| SHA256 | 4db734f2d95c9beb2133c971c8f5292484bde470da7895c7b986d3841b15b433 | URLQuery 0IDS 0TDS 0 | |
| SHA256 | 4e79c4c8390323d14f69c56b862214f1571ef0d3f71bdf1ada060357f855b182 | URLQuery 0IDS 0TDS 0 | |
| SHA256 | 570942a42286a32298d75560d62ff5d4c8c2fe5d9def6076642de2d941ce7bf6 | URLQuery 0IDS 0TDS 0 | |
| SHA256 | 61e6d4f07f8ed6e5788ea66931a14ffaa013f7ef411c1788ab0cdc92d039b352 | URLQuery 0IDS 0TDS 0 | |
| SHA256 | 6cd2489759bf9ca793e4393ae08973a49ee343db4936fba164c4c3c602aa39ca | URLQuery 1IDS 0TDS 0 | |
| SHA256 | 76275a8f4e0fe843b36b35e2286d8aadf19adb7b222fbd5ad3b76aa73ddb4f02 | URLQuery 0IDS 0TDS 0 | |
| SHA256 | 7951cfa7c79101bd18273fc112f283b989a0b87b7dd762c983ec4b6b59acb281 | URLQuery 0IDS 0TDS 0 | |
| SHA256 | 7e74c6a290717a22ae8cfea810ac7686648cb6278929f2e787277cdfd48b0622 | URLQuery 0IDS 0TDS 0 | |
| SHA256 | 8816db77bfe4d98a62b3a9461fe3d2aa69d45e0b1eeb55ba7b9e04d6b3c14110 | URLQuery 0IDS 0TDS 0 | |
| SHA256 | 932098dd17ebf611e85a14f5ea9f9ea3e8482137113346e2ac79169f668e969b | URLQuery 0IDS 0TDS 0 | |
| SHA256 | 9ab5016d573d7545f0123b598888c8c8ca542515b2df5ffa543f195d3e7fc175 | URLQuery 0IDS 0TDS 0 | |
| SHA256 | 9aee824af9dcf82139a3622c3419fe8cfef5a05555e57c2c2cf820b8a9a28b54 | URLQuery 0IDS 0TDS 0 | |
| SHA256 | a078c49c9f3231538ed7fcf956e188a70617053e23616894b58d954a992487bc | URLQuery 0IDS 0TDS 0 | |
| SHA256 | ac70434f0c8d5eecdc8a5700d9a79cec6ed9398ec5c0860097cd588f64df1a47 | URLQuery 0IDS 0TDS 0 | |
| SHA256 | b9809b8ff5a5bf421610ecc630a903c14d6f736e9c1a3633ff74058c6a4a10f8 | URLQuery 0IDS 0TDS 0 | |
| SHA256 | ce3b2634b7c86e88b2048f67b775eeb9055e2399d992cc8998bfba48338f52e9 | URLQuery 0IDS 0TDS 0 | |
| SHA256 | d8cd6ca33bd54572858b71b1c592921f68e1423a5ddf7ed436f9829a4d7ddb3d | URLQuery 0IDS 0TDS 0 | |
| SHA256 | e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 | URLQuery 1IDS 0TDS 0 | |
| SHA256 | e621b1d4b7053e6f44c907d80196c377c04059f68f242ffda0a96dec58d613f7 | URLQuery 0IDS 0TDS 0 |
No indicators match the current filters.