WEBSITE ANALYSIS REPORT

https://login.microsoft.com//////////////////////////////common/oauth2/v2.0/authorize?state=YnJ1Y2Uuc2lsdmFAY29uc29saWRhdGVkLmNvbQ==&scope=openid+profile+https%253A%252F%252Fgraph.microsoft.com%252FUser.Read&prompt=none&client_id=4151d471-0135-4afe-a37c-055b3d53e2ce&uri=https%253A%252F%252Fdeveloper.salesforce.com%252Fdashboard%252Fsession%252Fuser%252Fverify%252Fstep1&%255Ca3edq%250C+2e4c%250D%250A%2593bb66f835%2509%258C2979X%25BCint+Builder.Decode%250A%2509Context+%253A%253D+FlowEmail+%255B+OffsetStream+%253A=%2520Token%2509Data%2520%257C%2520Email%257Dfor%2520Stream%253A%253DPayloadBuilder+;+ValueContext+%257D+Trace%250A%2509Decode+.+SignalVector+%257B%2520Offset%257D%250Aa78c998ef06b569e%2597%25E9%252A%25CBa93627d06a07eba872664f4a92c74eae25f60308d1cad09a16e7beef0b79c03d8bd7528c4a7efc8bdb3fc053evar%252BVector-Secret%25250A%252509Decode%252B%25253B%252BBuffer%25250A%252509Encode%252B-%252BSession%25250A%252509Decode%252B%25255D%252BPayload%25250A%252509Offset%252B%25252B%252BBuilder%25250A%252509Builder%252B%252528%252BToken%25250A%252509Encode%252B.%252BKey%25250A%252509Context%252B%25257B%252BToken%25250A%25257D%25250Aelse%252BDecode%25252CBuilder%25250A%252509Stream%252B%25253A%25253D%252BHeader%25250A%252509Vector%252B%252526%252BVector%25250A%252509Payload%252B%25253D%252BBuilder%25250A%252509Value%252B%25257C%252BPayload%25250A%252509Secret%252B%25253D%252BBuffer%25250A%25257D%25250Aswitch%252BPayload%25252CSession%25250A%252509Payload%252B%252529%252BToken%25250A%252509Payload%252B%252526%252BBuilder%25250A%252509Data%252B%25257C%252BDecode%25250A%252509Secret%252B%25255B%252BStream%25250A%25257D%25250Astring%252BBody%252529Session%25250A%252509Session%252B%252528%252BTrace%25250A%252509Buffer%252B%25257B%252BSession%25250A%252509Vector%252B%25252A%252BVector%25250A%252509Context%252B%25253B%252BToken%25250A%252509Value%252B%25252A%252BData%25250A%252509Encode%252B%25253B%252BFlow%25250A%252509Trace%252B%252529%252BTrace%25250A%25257D%25250Aint%252BToken%25257CSignal%25250A%252509Header%252B%25255D%252BFlow%25250A%252509Body%252B.%252BKey%25250A%252509Vector%252B%252528%252BSignal%25250A%252509Session%252B%25252C%252BData%25250A%25257D%25250Ac2FuZGVlcEBmdmNvbS5hZQ

25 Sep 2026 · 19:09:05.000 UTCpublic

Report tags: malicious cloaking browser_fingerprinting anti_analysis
Submit tags

Request review

Malicious detection

2 detections · review the detection signals

Review evidence →

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Captured HTTP requests; click any summary row or use its hostname button to expand transaction details.
Timestamp (UTC)	Method	Status	Type	Size	Duration	Signals
19:08:33.103	GET	302	document	0 B	84 ms	—

19:08:33.198	GET	200	document	26.5 KB	299 ms	—

19:08:33.887	GET	200	script	0 B	0 ms	—

19:08:38.613	POST	200	document	0 B	0 ms	2 alerts

19:08:40.057	GET	301	document	0 B	70 ms	—

19:08:40.132	GET	200	document	249.4 KB	49 ms	—
Transaction #41 Request / response URL Navigation request GET HTTPS https://www.apple.com/?email=bruce.silva@consolidated.com IP / ASN 96.6.16.249 AS16625 · AKAMAI-AS Transaction actions#41 Investigate Download resource249.4 KB (255432 bytes) Resource unavailableThe captured bytes cannot be retrieved. External sources Requested by Not recorded Resource information File type HTML document, ASCII text, with very long lines (19284) MIME type text/html; charset=utf-8 First seen (UTC) 25 Sep 2026 · 06:32:51.287 UTC Last seen (UTC) 26 Sep 2026 · 04:33:33.335 UTC Times seen 7 Size 249.4 KB (255432 bytes) MD5 803aaa52fc683988c8c37ce0d8e22c31 SHA1 f964339793fff66e042967a6137c1440ecd9a81b SHA256 79fc5d6490401ab9d2f5cfdb9d1112169bfcef6d94151ab1f8396625b3cfb6b8 Certificate information Issuer Apple Inc. · Apple Public EV Server RSA CA 1 - G1 Subject www.apple.com Protocol / cipher TLSv1.3 · TLS_AES_256_GCM_SHA384 SHA1 fingerprint 8C:5A:35:0E:5B:7D:1D:54:57:3F:24:17:CF:14:EC:E8:9F:5E:8E:22 Valid from Thu, 02 Jul 2026 22:11:57 GMT Valid until Wed, 16 Dec 2026 18:31:25 GMT Technology fingerprints Apple MapKit JS (Maps) HSTS (Security) HTTP headers Request headers GET /?email=bruce.silva@consolidated.com HTTP/1.1 Host: www.apple.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.9 Accept-Encoding: gzip, deflate, br, zstd Sec-GPC: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Priority: u=0, i Pragma: no-cache Cache-Control: no-cache Response headers HTTP/2 200 server: Apple content-type: text/html; charset=utf-8 set-cookie: geo=NO; path=/; domain=.apple.com x-frame-options: SAMEORIGIN vary: Accept-Encoding content-security-policy: default-src 'self' blob: data: .akamaized.net .apple.com .apple-mapkit.com .cdn-apple.com .organicfruitapps.com; child-src blob: mailto: embed.music.apple.com embed.podcasts.apple.com https://recyclingprogram.apple.com https://smb.apple.com https://nova.apple.com swdlp.apple.com www.apple.com www.instagram.com platform.twitter.com www.youtube-nocookie.com; img-src 'unsafe-inline' blob: data: .apple.com .apple-mapkit.com .cdn-apple.com .mzstatic.com; script-src 'unsafe-inline' 'unsafe-eval' blob: .apple.com .apple-mapkit.com www.instagram.com platform.twitter.com; style-src 'unsafe-inline' .apple.com referrer-policy: no-referrer-when-downgrade strict-transport-security: max-age=31536000; includeSubdomains; preload x-content-type-options: nosniff x-xss-protection: 1; mode=block content-encoding: gzip cache-control: max-age=221 expires: Fri, 25 Sep 2026 19:12:21 GMT date: Fri, 25 Sep 2026 19:08:40 GMT X-Firefox-Spdy: h2
19:08:40.263	GET	200	stylesheet	166.3 KB	27 ms	—

19:08:40.267	GET	200	stylesheet	62.4 KB	11 ms	—

19:08:40.268	GET	200	stylesheet	79.5 KB	15 ms	—

19:08:40.269	GET	200	stylesheet	16.6 KB	5 ms	—

19:08:40.270	GET	200	stylesheet	124.9 KB	4 ms	—

19:08:40.272	GET	200	stylesheet	31.9 KB	6 ms	—

19:08:40.273	GET	200	stylesheet	171.9 KB	20 ms	—

19:08:40.274	GET	200	stylesheet	12.2 KB	2 ms	—

19:08:40.276	GET	200	stylesheet	11.6 KB	8 ms	—

19:08:40.277	GET	200	script	6.6 KB	4 ms	—

19:08:40.278	GET	200	script	162.4 KB	14 ms	—

19:08:40.280	GET	200	script	455.1 KB	62 ms	—

19:08:40.281	GET	200	script	111 B	5 ms	—

19:08:40.293	GET	200	imageset	66.3 KB	9 ms	—

19:08:40.302	GET	200	script	9.5 KB	20 ms	—

19:08:40.303	GET	200	script	186.9 KB	34 ms	—

19:08:40.304	GET	200	script	153.6 KB	37 ms	—

19:08:40.305	GET	200	script	6.6 KB	3 ms	—

19:08:40.306	GET	200	script	88.7 KB	2 ms	—

19:08:40.308	GET	200	script	2.2 KB	5 ms	—

19:08:40.309	GET	200	script	16.8 KB	14 ms	—

19:08:40.310	GET	200	script	197 B	8 ms	—

19:08:40.369	GET	200	script	4.3 KB	2 ms	—

19:08:40.370	GET	200	script	823 B	22 ms	—

19:08:40.371	GET	200	script	983 B	2 ms	—

19:08:40.372	GET	200	script	635 B	4 ms	—

19:08:40.373	GET	200	script	1.9 KB	7 ms	—

19:08:40.381	GET	200	font	215.4 KB	6 ms	—

19:08:40.398	GET	200	font	228.8 KB	21 ms	—

19:08:40.399	GET	200	font	126.4 KB	21 ms	—

19:08:40.402	GET	200	script	258 B	18 ms	—

19:08:40.544	GET	200	xhr	1.6 KB	3 ms	—

19:08:40.597	GET	200	font	13.8 KB	8 ms	—

19:08:40.598	GET	200	font	114.3 KB	5 ms	—

19:08:40.599	GET	200	font	124.9 KB	6 ms	—

19:08:40.646	GET	200	img	21.9 KB	4 ms	—

19:08:40.656	GET	200	stylesheet	38.9 KB	13 ms	—

19:08:40.749	GET	200	font	13.9 KB	3 ms	—

19:08:40.750	GET	200	font	219.9 KB	7 ms	—

19:08:40.793	GET	200	fetch	44.4 KB	7 ms	—

19:08:40.796	GET	200	fetch	500 B	5 ms	—

19:08:40.807	GET	200	xhr	137 B	3 ms	—

19:08:40.818	GET	302	img	0 B	209 ms	—

19:08:41.034	GET	200	img	43 B	83 ms	—

Domain graph

Hostnames

Connections

Network requests

Transaction #41

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #41

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

HTTP headers

Request headers

Response headers

Domain graph

Network requests