urlquery.net
Investigate/Report/aefbbab1-cfc5-420e-b842-53861e2479e0
WEBSITE ANALYSIS REPORT

https://login.microsoft.com//////////////////////////////common/oauth2/v2.0/authorize?state=bWF1cmVlbi5taXRjaGVsbEBiYXJicmkuY29t&scope=openid+profile+https%253A%252F%252Fgraph.microsoft.com%252FUser.Read&prompt=none&client_id=adaf94a0-39d5-4076-8422-14be883d38df&uri=https%253A%252F%252Fdeveloper.salesforce.com%252Fdashboard%252Fsession%252Fuser%252Fverify%252Fstep1&%255Ca3edq%250C+2e4c%250D%250A%2593bb66f835%2509%258C2979X%25BCint+Builder.Decode%250A%2509Context+%253A%253D+FlowEmail+%255B+OffsetStream+%253A=%2520Token%2509Data%2520%257C%2520Email%257Dfor%2520Stream%253A%253DPayloadBuilder+;+ValueContext+%257D+Trace%250A%2509Decode+.+SignalVector+%257B%2520Offset%257D%250Aa78c998ef06b569e%2597%25E9%252A%25CBa93627d06a07eba872664f4a92c74eae25f60308d1cad09a16e7beef0b79c03d8bd7528c4a7efc8bdb3fc053evar%252BVector-Secret%25250A%252509Decode%252B%25253B%252BBuffer%25250A%252509Encode%252B-%252BSession%25250A%252509Decode%252B%25255D%252BPayload%25250A%252509Offset%252B%25252B%252BBuilder%25250A%252509Builder%252B%252528%252BToken%25250A%252509Encode%252B.%252BKey%25250A%252509Context%252B%25257B%252BToken%25250A%25257D%25250Aelse%252BDecode%25252CBuilder%25250A%252509Stream%252B%25253A%25253D%252BHeader%25250A%252509Vector%252B%252526%252BVector%25250A%252509Payload%252B%25253D%252BBuilder%25250A%252509Value%252B%25257C%252BPayload%25250A%252509Secret%252B%25253D%252BBuffer%25250A%25257D%25250Aswitch%252BPayload%25252CSession%25250A%252509Payload%252B%252529%252BToken%25250A%252509Payload%252B%252526%252BBuilder%25250A%252509Data%252B%25257C%252BDecode%25250A%252509Secret%252B%25255B%252BStream%25250A%25257D%25250Astring%252BBody%252529Session%25250A%252509Session%252B%252528%252BTrace%25250A%252509Buffer%252B%25257B%252BSession%25250A%252509Vector%252B%25252A%252BVector%25250A%252509Context%252B%25253B%252BToken%25250A%252509Value%252B%25252A%252BData%25250A%252509Encode%252B%25253B%252BFlow%25250A%252509Trace%252B%252529%252BTrace%25250A%25257D%25250Aint%252BToken%25257CSignal%25250A%252509Header%252B%25255D%252BFlow%

public
Report tags
phishing dkstools aitm
Submit tags
Request review
Phishing detected

1 detection · review the detection signals

Review evidence →

JavaScript

Recorded scripts and browser console observations

Observed scripts. Expand a row for metadata, detections, and available captured source.
#URL / sourceIntroduced bySizeFirst seen
No script observations in this report.

Console observations

Browser messages in recorded order

24 messages
Browser console observations in recorded order.
#LevelMessageRecorded source
1LOG
true
https://login.live.com/Me.htm?v=3 Line 1 · Column 1681
2LOG
Storage access:false
https://login.live.com/Me.htm?v=3 Line 1 · Column 1955
3LOG
map[actor:server1.conn0.watcher16.process10//obj20 class:HTMLImageElement contentDomReference:map[browsingContextId:3 id:0.6234958342115665] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:img nodeType:1] sealed:false type:object]
https://ygbwmqnxiv.bralunovex.com/?email=maureen.mitchell@barbri.com Line 40 · Column 851
4LOG
map[actor:server1.conn0.watcher16.process10//obj21 class:HTMLImageElement contentDomReference:map[browsingContextId:3 id:0.1662731232518595] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:img nodeType:1] sealed:false type:object]
https://ygbwmqnxiv.bralunovex.com/?email=maureen.mitchell@barbri.com Line 40 · Column 851
5LOG
map[actor:server1.conn0.watcher16.process10//obj22 class:HTMLImageElement contentDomReference:map[browsingContextId:3 id:0.5889121698037829] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:img nodeType:1] sealed:false type:object]
https://ygbwmqnxiv.bralunovex.com/?email=maureen.mitchell@barbri.com Line 40 · Column 851
6LOG
map[actor:server1.conn0.watcher16.process10//obj23 class:HTMLImageElement contentDomReference:map[browsingContextId:3 id:0.49364746285434746] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:img nodeType:1] sealed:false type:object]
https://ygbwmqnxiv.bralunovex.com/?email=maureen.mitchell@barbri.com Line 40 · Column 851
7LOG
map[actor:server1.conn0.watcher16.process10//obj24 class:HTMLImageElement contentDomReference:map[browsingContextId:3 id:0.6214845512444288] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:img nodeType:1] sealed:false type:object]
https://ygbwmqnxiv.bralunovex.com/?email=maureen.mitchell@barbri.com Line 40 · Column 851
8LOG
map[actor:server1.conn0.watcher16.process10//obj25 class:HTMLImageElement contentDomReference:map[browsingContextId:3 id:0.09191390015707579] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:img nodeType:1] sealed:false type:object]
https://ygbwmqnxiv.bralunovex.com/?email=maureen.mitchell@barbri.com Line 40 · Column 851
9LOG
map[actor:server1.conn0.watcher16.process10//obj26 class:HTMLImageElement contentDomReference:map[browsingContextId:3 id:0.27509237863895697] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:img nodeType:1] sealed:false type:object]
https://ygbwmqnxiv.bralunovex.com/?email=maureen.mitchell@barbri.com Line 40 · Column 851
10LOG
map[actor:server1.conn0.watcher16.process10//obj27 class:HTMLImageElement contentDomReference:map[browsingContextId:3 id:0.9739315716168003] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:img nodeType:1] sealed:false type:object]
https://ygbwmqnxiv.bralunovex.com/?email=maureen.mitchell@barbri.com Line 40 · Column 851
11LOG
map[actor:server1.conn0.watcher16.process10//obj28 class:HTMLImageElement contentDomReference:map[browsingContextId:3 id:0.5713405432899427] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:img nodeType:1] sealed:false type:object]
https://ygbwmqnxiv.bralunovex.com/?email=maureen.mitchell@barbri.com Line 40 · Column 851
12LOG
map[actor:server1.conn0.watcher16.process10//obj29 class:HTMLImageElement contentDomReference:map[browsingContextId:3 id:0.4018729481210458] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:img nodeType:1] sealed:false type:object]
https://ygbwmqnxiv.bralunovex.com/?email=maureen.mitchell@barbri.com Line 40 · Column 851
13LOG
map[actor:server1.conn0.watcher16.process10//obj30 class:HTMLImageElement contentDomReference:map[browsingContextId:3 id:0.6628112927047721] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:img nodeType:1] sealed:false type:object]
https://ygbwmqnxiv.bralunovex.com/?email=maureen.mitchell@barbri.com Line 40 · Column 851
14LOG
map[actor:server1.conn0.watcher16.process10//obj31 class:HTMLImageElement contentDomReference:map[browsingContextId:3 id:0.8631173342635773] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:img nodeType:1] sealed:false type:object]
https://ygbwmqnxiv.bralunovex.com/?email=maureen.mitchell@barbri.com Line 40 · Column 851
15LOG
map[actor:server1.conn0.watcher16.process10//obj32 class:HTMLImageElement contentDomReference:map[browsingContextId:3 id:0.3227186199314164] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:img nodeType:1] sealed:false type:object]
https://ygbwmqnxiv.bralunovex.com/?email=maureen.mitchell@barbri.com Line 40 · Column 851
16LOG
map[actor:server1.conn0.watcher16.process10//obj33 class:HTMLImageElement contentDomReference:map[browsingContextId:3 id:0.4431916290352129] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:img nodeType:1] sealed:false type:object]
https://ygbwmqnxiv.bralunovex.com/?email=maureen.mitchell@barbri.com Line 40 · Column 851
17LOG
map[actor:server1.conn0.watcher16.process10//obj34 class:HTMLImageElement contentDomReference:map[browsingContextId:3 id:0.12123427824090771] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:img nodeType:1] sealed:false type:object]
https://ygbwmqnxiv.bralunovex.com/?email=maureen.mitchell@barbri.com Line 40 · Column 851
18LOG
map[actor:server1.conn0.watcher16.process10//obj35 class:HTMLImageElement contentDomReference:map[browsingContextId:3 id:0.5758047444230577] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:img nodeType:1] sealed:false type:object]
https://ygbwmqnxiv.bralunovex.com/?email=maureen.mitchell@barbri.com Line 40 · Column 851
19LOG
map[actor:server1.conn0.watcher16.process10//obj36 class:HTMLImageElement contentDomReference:map[browsingContextId:3 id:0.601290399750165] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:img nodeType:1] sealed:false type:object]
https://ygbwmqnxiv.bralunovex.com/?email=maureen.mitchell@barbri.com Line 40 · Column 851
20LOG
map[actor:server1.conn0.watcher16.process10//obj37 class:HTMLImageElement contentDomReference:map[browsingContextId:3 id:0.8192520581904784] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:img nodeType:1] sealed:false type:object]
https://ygbwmqnxiv.bralunovex.com/?email=maureen.mitchell@barbri.com Line 40 · Column 851
21LOG
map[actor:server1.conn0.watcher16.process10//obj38 class:HTMLImageElement contentDomReference:map[browsingContextId:3 id:0.742661717936076] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:img nodeType:1] sealed:false type:object]
https://ygbwmqnxiv.bralunovex.com/?email=maureen.mitchell@barbri.com Line 40 · Column 851
22LOG
map[actor:server1.conn0.watcher16.process10//obj39 class:HTMLImageElement contentDomReference:map[browsingContextId:3 id:0.04658834794497624] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:img nodeType:1] sealed:false type:object]
https://ygbwmqnxiv.bralunovex.com/?email=maureen.mitchell@barbri.com Line 40 · Column 851
23LOG
map[actor:server1.conn0.watcher16.process10//obj40 class:HTMLImageElement contentDomReference:map[browsingContextId:3 id:0.2638879702306025] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:img nodeType:1] sealed:false type:object]
https://ygbwmqnxiv.bralunovex.com/?email=maureen.mitchell@barbri.com Line 40 · Column 851
24LOG
map[actor:server1.conn0.watcher16.process10//obj41 class:HTMLImageElement contentDomReference:map[browsingContextId:3 id:0.6040328671418588] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:img nodeType:1] sealed:false type:object]
https://ygbwmqnxiv.bralunovex.com/?email=maureen.mitchell@barbri.com Line 40 · Column 851
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close
LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot