WEBSITE ANALYSIS REPORT
https://login.microsoft.com//////////////////////////////common/oauth2/v2.0/authorize?state=YnJ5YW4uZ2VybGFjaEBjb25zb2xpZGF0ZWQuY29t&scope=openid+profile+https%253A%252F%252Fgraph.microsoft.com%252FUser.Read&prompt=none&client_id=32eab658-150b-49af-b205-bb26f5b02fab&uri=https%253A%252F%252Fdeveloper.salesforce.com%252Fdashboard%252Fsession%252Fuser%252Fverify%252Fstep1&%255Ca3edq%250C+2e4c%250D%250A%2593bb66f835%2509%258C2979X%25BCint+Builder.Decode%250A%2509Context+%253A%253D+FlowEmail+%255B+OffsetStream+%253A=%2520Token%2509Data%2520%257C%2520Email%257Dfor%2520Stream%253A%253DPayloadBuilder+;+ValueContext+%257D+Trace%250A%2509Decode+.+SignalVector+%257B%2520Offset%257D%250Aa78c998ef06b569e%2597%25E9%252A%25CBa93627d06a07eba872664f4a92c74eae25f60308d1cad09a16e7beef0b79c03d8bd7528c4a7efc8bdb3fc053evar%252BVector-Secret%25250A%252509Decode%252B%25253B%252BBuffer%25250A%252509Encode%252B-%252BSession%25250A%252509Decode%252B%25255D%252BPayload%25250A%252509Offset%252B%25252B%252BBuilder%25250A%252509Builder%252B%252528%252BToken%25250A%252509Encode%252B.%252BKey%25250A%252509Context%252B%25257B%252BToken%25250A%25257D%25250Aelse%252BDecode%25252CBuilder%25250A%252509Stream%252B%25253A%25253D%252BHeader%25250A%252509Vector%252B%252526%252BVector%25250A%252509Payload%252B%25253D%252BBuilder%25250A%252509Value%252B%25257C%252BPayload%25250A%252509Secret%252B%25253D%252BBuffer%25250A%25257D%25250Aswitch%252BPayload%25252CSession%25250A%252509Payload%252B%252529%252BToken%25250A%252509Payload%252B%252526%252BBuilder%25250A%252509Data%252B%25257C%252BDecode%25250A%252509Secret%252B%25255B%252BStream%25250A%25257D%25250Astring%252BBody%252529Session%25250A%252509Session%252B%252528%252BTrace%25250A%252509Buffer%252B%25257B%252BSession%25250A%252509Vector%252B%25252A%252BVector%25250A%252509Context%252B%25253B%252BToken%25250A%252509Value%252B%25252A%252BData%25250A%252509Encode%252B%25253B%252BFlow%25250A%252509Trace%252B%252529%252BTrace%25250A%25257D%25250Aint%252BToken%25257CSignal%25250A%252509Header%252B%25255D%252BFlow%25250A%252509Body%252B.%252BKey%25250A%252509Vector%252B%252528%252BSignal%25250A%252509Session%252B%25252C%252BData%25250A%25257D%25250Ac2FuZGVlcEBmdmNvbS5hZQ==
public
Malicious detection
Review evidence →1 detection · review the detection signals
Domain graph
Hostnames and connections captured in this scan
Loading domain graph…
Hostnames
- aadcdn.msftauth.net1 captured requests
- app.guideflow.com40 captured requests
- cdn.bfldr.com15 captured requests
- cdn.cookielaw.org1 captured requests
- cdn.jsdelivr.net3 captured requests
- docucdn-a.akamaihd.net10 captured requests
- docusign.com1 captured requests
- edge.api.brightcove.com18 captured requests
- fonts.gstatic.com2 captured requests
- guideflow-api-eu-5cv4uu2lra-ew.a.run.app2 captured requests
- images.ctfassets.net11 captured requests
- login.microsoft.com1 captured requests
- login.microsoftonline.com1 captured requests
- metrics.brightcove.com24 captured requests
- players.brightcove.net8 captured requests
- reconquest472.lincolove.org2 captured requests
- resources.guideflow.com13 captured requests
- vjs.zencdn.net1 captured requests
- www.docusign.com18 captured requests
- www.googletagmanager.com1 captured requests
Connections
- app.guideflow.com → cdn.jsdelivr.netLoads from2 captured connections
- app.guideflow.com → fonts.gstatic.comLoads from2 captured connections
- docusign.com → www.docusign.comRedirects to1 captured connections
- login.microsoft.com → login.microsoftonline.comRedirects to1 captured connections
- login.microsoftonline.com → aadcdn.msftauth.netLoads from1 captured connections
- reconquest472.lincolove.org → docusign.comRedirects to1 captured connections
- reconquest472.lincolove.org → www.docusign.comRedirects to1 captured connections
- www.docusign.com → app.guideflow.com2 captured connections
- www.docusign.com → cdn.cookielaw.orgLoads from1 captured connections
- www.docusign.com → cdn.jsdelivr.netCalls1 captured connections
- www.docusign.com → docucdn-a.akamaihd.netLoads from10 captured connections
- www.docusign.com → edge.api.brightcove.comCalls18 captured connections
- www.docusign.com → guideflow-api-eu-5cv4uu2lra-ew.a.run.appCalls2 captured connections
- www.docusign.com → images.ctfassets.netLoads from5 captured connections
- www.docusign.com → metrics.brightcove.comLoads from24 captured connections
- www.docusign.com → players.brightcove.netLoads from8 captured connections
- www.docusign.com → vjs.zencdn.netLoads from1 captured connections
- www.docusign.com → www.googletagmanager.comLoads from1 captured connections
Network requests
Click any request row to expand it in place. Multiple transactions can remain open.
| Timestamp (UTC) | Method | Status | Host / path | Type | Size | Duration | Signals |
|---|---|---|---|---|---|---|---|
| GET | 302 | document | 0 B | 2538 ms | — | ||
| GET | 200 | document | 26.3 KB | 2546 ms | — | ||
| GET | 200 | script | 0 B | 0 ms | — | ||
| POST | 200 | document | 0 B | 0 ms | 1 alerts | ||
| GET | 301 | document | 0 B | 78 ms | — | ||
| GET | 200 | document | 948.4 KB | 124 ms | — | ||
| GET | No response | img | 0 B | 0 ms | 1 alerts | ||
| GET | 200 | font | 31.2 KB | 31 ms | — | ||
| GET | 200 | font | 36.0 KB | 235 ms | — | ||
| GET | 200 | font | 28.8 KB | 25 ms | — | ||
| GET | 200 | font | 30.9 KB | 23 ms | — | ||
| GET | 200 | font | 30.7 KB | 25 ms | — | ||
| GET | 200 | script | 6.3 KB | 164 ms | — | ||
| GET | 200 | script | 185.3 KB | 158 ms | — | ||
| GET | 200 | script | 172.5 KB | 137 ms | — | ||
| GET | 200 | script | 636.4 KB | 190 ms | — | ||
| GET | 200 | script | 331.5 KB | 164 ms | — | ||
| GET | 200 | script | 22.1 KB | 137 ms | — | ||
| GET | 200 | script | 919.0 KB | 164 ms | — | ||
| GET | 200 | script | 29.3 KB | 119 ms | — | ||
| GET | 200 | script | 1.63 MB | 184 ms | — | ||
| GET | 200 | script | 2.1 KB | 159 ms | — | ||
| GET | 200 | script | 1.4 KB | 172 ms | — | ||
| GET | 200 | script | 139 B | 156 ms | — | ||
| GET | 200 | img | 698 B | 270 ms | — | ||
| GET | 200 | img | 45.4 KB | 41 ms | — | ||
| GET | 200 | img | 3.3 KB | 270 ms | — | ||
| GET | 200 | img | 7.9 KB | 39 ms | — | ||
| GET | 200 | img | 3.9 KB | 37 ms | — | ||
| GET | 200 | script | 46.9 KB | 286 ms | — | ||
| GET | 200 | imageset | 11.2 KB | 17 ms | — | ||
| GET | 200 | imageset | 3.1 KB | 18 ms | — | ||
| GET | 200 | imageset | 10.0 KB | 16 ms | — | ||
| GET | 200 | imageset | 48.8 KB | 21 ms | — | ||
| GET | 200 | subdocument | 93.4 KB | 717 ms | — | ||
| GET | 200 | font | 28.8 KB | 3 ms | — | ||
| GET | 200 | lazy-imageset | 11.8 KB | 12 ms | — | ||
| GET | 200 | lazy-imageset | 7.8 KB | 12 ms | — | ||
| GET | 200 | lazy-img | 10.3 KB | 393 ms | — | ||
| GET | 200 | lazy-img | 4.9 KB | 268 ms | — | ||
| GET | 200 | lazy-img | 45.4 KB | 45 ms | — | ||
| GET | 200 | lazy-img | 4.0 KB | 272 ms | — | ||
| GET | 200 | lazy-img | 1.2 KB | 272 ms | — | ||
| GET | 200 | lazy-img | 7.9 KB | 56 ms | — | ||
| GET | 200 | lazy-img | 3.3 KB | 26 ms | — | ||
| GET | 200 | lazy-img | 6.8 KB | 24 ms | — | ||
| GET | 200 | lazy-img | 7.2 KB | 49 ms | — | ||
| GET | 200 | lazy-img | 9.0 KB | 49 ms | — | ||
| GET | 200 | lazy-img | 6.7 KB | 47 ms | — | ||
| GET | 200 | lazy-imageset | 32.7 KB | 36 ms | — | ||