https://hayalogistica.de/bzar/
Report summary
Submitted and final observations · captured HTTP activity
- Submitted URL
- https://hayalogistica.de/bzar/
- Submitted IP / ASN
206.209.210.11 AS215674 · Brookplus Limited
- Final URL
- https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=639264469221050789.ZjQ1ODZmOTYtN2E4My00YzgyLWJlNGEtZjU4YWFkMmM2ODk2MWYwZGY4YWEtODM4NS00Y2ZjLTljMWYtMDg5MjUyMzA5ZTg5&ui_locales=en-US&mkt=en-US&client-request-id=f9b81fc1-b6bb-4752-b953-37e4a0f4026a&siwa=1&siwg=1&state=e7yZbrsbA2NdyDaKo6xGKXwZbFpwh4mNJbj9PckdaEppmiYOvFw-iab306gNx4PqIA77AJuI79EITgGvdG4W3F1hu6Q6lca245VENL_PHnkC93preAxcp9Qd1fnDA8tFUaO27UhXBfwhhHpMTpnm92bndX9CZv0bjVBjOTX_5gsCt1-ou-HStTEKQYZ2fiO0rHz1EeiYFXmqvuPKt0PeE4tIaz-zKZCML47BOh7jSQsyDq_L3qZYHSVFJ0d_hjkSvTRGZIxqcbO1SLyHio3gQjj-CysUecbl57wk736VD7Byi4XZXPlKIR-rzlWxDsDU3c6MeXjJQYAt5lDJ7AzuzuVHBYz47YfClAstxrxRyAwT9pvgMfA4xW2ZrEZSBLavIxrt98JP_vO-e7WslYul4jINXwG4x6eRjhWUDyeQCXB2sCE3f4R-PpZsaztKs56_&x-client-SKU=ID_NET8_0&x-client-ver=8.16.0.0
- Final IP / ASN
40.126.53.11 AS8075 · MICROSOFT-CORP-MSN-AS-BLOCK
Final page
- Page title
- Sign in to your account
- Final DOM MIME
- text/html; charset=utf-8
- Final DOM size
- 61.5 KB (62936 bytes)
Detections
Activity
- HTTP requests
- 20
- Observed hosts
- 6
- Script records
- 1
Estimated HTTP data
- Sent
- ~12.7 KB
- Received
- ~757.9 KB
Page capture
Final browser state
available for this report.
Detection signals
URLQuery findings, Threat Detection Systems, and IDS alerts
Absence of findings is not a clean verdict.
Host infrastructure
Observed hosts are context, not independent maliciousness verdicts
| Host | Rank | Registered | First seen | Last seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
| login.microsoft.com | 24331 | 1991-05-02 | 2014-08-12 | 2026-09-30 | 2.0 KB | 3.6 KB |  20.190.177.146 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| www.office.com | 10848 | 1999-04-20 | 2014-02-12 | 2026-09-25 | 1.1 KB | 2.4 KB | Not recorded | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| hayalogistica.de | N/A | N/A | 2026-09-29 | 2026-09-29 | 4.8 KB | 479.4 KB |  206.209.210.11 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. Nginx Web servers, Reverse proxies Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache. |
| cdnjs.cloudflare.com | 1222 | 2009-02-17 | 2012-05-23 | 2026-09-27 | 1.1 KB | 206.1 KB |  104.17.25.14 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| login.microsoftonline.com | 52 | 2002-07-09 | 2017-02-19 | 2026-09-28 | 1.5 KB | 66.5 KB | 40.126.53.11 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| aadcdn.msauth.net | 5248 | 2018-10-25 | 2018-11-19 | 2026-09-30 | 2.2 KB | 0 B | Not recorded |