WEBSITE ANALYSIS REPORT
http://office.covestrodfghjbcdfgh.top/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=639221258837599711.ZGEwMWE3N2MtMGRlYS00Mjg0LTg4ODYtOWJjM2QzNmMxMTU3YWUyYzQ5OTktZmEwNy00MzhmLWExMmUtYzU4MmI5NTc1Njdi&ui_locales=en-US&mkt=en-US&client-request-id=a573c9cd-2d60-443e-99d2-4eba7b64b78b&state=Rbet7nrZFNxup3-_O7gVApsV5NGxU6MT2FTSngie5Ug0-zCBW1hZIB6lWNJ8d9jo0bHcqaUC_NNfzHNJc3InZ1SQfNmAHnoVx4AZcIfUon_p4H0zw5pM3C0w0KrSJTjCHntX-kI4PVaJtgSGHI6aAhCSVNm-JFEetzP_PfugA8w1uo6iVZPDhQmuFVWzHCVFTQuTOzWGejU5HvNX_2F7ZL39nvj7PYBs6hz2t5Rk12irS35UeCaeAksDRCw22Kp4WgHt8p-mudZF5ZeSfd9oSHD3SP1TEj4fMjiyccv2haTvyrCjj33afM_5OcVNfxTFfNkLJKl6RssW2m98r85YGZc0HfWpIiZ_fDQOWqdKZVS9oU7qYLXMPTCWDkai6Li_84b6TdnkqVg6WgjaNUQaOQRi6fqAFLbg3FmjWXaQksE&x-client-SKU=ID_NET8_0&x-client-ver=8.16.0.0
public
Phishing detected
Review evidence →2 detections · review the detection signals
Domain graph
Hostnames and connections captured in this scan
Loading domain graph…
Hostnames
- cdn-1.covestrodfghjbcdfgh.top12 captured requests
- ebqprupn.covestrodfghjbcdfgh.top4 captured requests
- office.covestrodfghjbcdfgh.top4 captured requests
Connections
- office.covestrodfghjbcdfgh.top → cdn-1.covestrodfghjbcdfgh.topLoads from12 captured connections
- office.covestrodfghjbcdfgh.top → ebqprupn.covestrodfghjbcdfgh.top1 captured connections
- office.covestrodfghjbcdfgh.top → ebqprupn.covestrodfghjbcdfgh.topRedirects to1 captured connections
Network requests
Click any request row to expand it in place. Multiple transactions can remain open.
| Timestamp (UTC) | Method | Status | Host / path | Type | Size | Duration | Signals |
|---|---|---|---|---|---|---|---|
| GET | 200 | document | 53.7 KB | 2125 ms | 1 alerts | ||
| GET | 200 | stylesheet | 111.5 KB | 1615 ms | 1 alerts | ||
| GET | 200 | script | 575.2 KB | 2077 ms | 1 alerts | ||
| GET | 200 | script | 60.8 KB | 1382 ms | 1 alerts | ||
| GET | 200 | script | 185.6 KB | 1882 ms | 1 alerts | ||
| GET | 200 | img | 16.8 KB | 1062 ms | 1 alerts | ||
| GET | 200 | script | 398.6 KB | 1599 ms | 1 alerts | ||
| GET | 200 | script | 15.4 KB | 529 ms | 1 alerts | ||
| GET | 200 | img | 2.6 KB | 1077 ms | 1 alerts | ||
| GET | 200 | img | 3.5 KB | 1102 ms | 1 alerts | ||
| GET | 200 | img | 45.5 KB | 986 ms | 1 alerts | ||
| GET | 200 | img | 3.6 KB | 766 ms | 1 alerts | ||
| GET | 200 | subdocument | 3.4 KB | 1510 ms | 1 alerts | ||
| GET | 200 | img | 1.6 KB | 1071 ms | 1 alerts | ||
| POST | 200 | xhr | 24.5 KB | 1544 ms | 1 alerts | ||
| POST | 200 | xhr | 706 B | 729 ms | 1 alerts | ||
| POST | 200 | xhr | 24.5 KB | 1518 ms | 1 alerts | ||
| GET | 200 | document | 3.5 KB | 1525 ms | 1 alerts | ||
| GET | 200 | img | 2.7 KB | 749 ms | 1 alerts | ||
| GET | 404 | img | 0 B | 1259 ms | 1 alerts | ||