WEBSITE ANALYSIS REPORT

https://login.microsoft.com//////////////////////////////common/oauth2/v2.0/authorize?state=YnJ1Y2Uuc2lsdmFAY29uc29saWRhdGVkLmNvbQ==&scope=openid+profile+https%253A%252F%252Fgraph.microsoft.com%252FUser.Read&prompt=none&client_id=4151d471-0135-4afe-a37c-055b3d53e2ce&uri=https%253A%252F%252Fdeveloper.salesforce.com%252Fdashboard%252Fsession%252Fuser%252Fverify%252Fstep1&%255Ca3edq%250C+2e4c%250D%250A%2593bb66f835%2509%258C2979X%25BCint+Builder.Decode%250A%2509Context+%253A%253D+FlowEmail+%255B+OffsetStream+%253A=%2520Token%2509Data%2520%257C%2520Email%257Dfor%2520Stream%253A%253DPayloadBuilder+;+ValueContext+%257D+Trace%250A%2509Decode+.+SignalVector+%257B%2520Offset%257D%250Aa78c998ef06b569e%2597%25E9%252A%25CBa93627d06a07eba872664f4a92c74eae25f60308d1cad09a16e7beef0b79c03d8bd7528c4a7efc8bdb3fc053evar%252BVector-Secret%25250A%252509Decode%252B%25253B%252BBuffer%25250A%252509Encode%252B-%252BSession%25250A%252509Decode%252B%25255D%252BPayload%25250A%252509Offset%252B%25252B%252BBuilder%25250A%252509Builder%252B%252528%252BToken%25250A%252509Encode%252B.%252BKey%25250A%252509Context%252B%25257B%252BToken%25250A%25257D%25250Aelse%252BDecode%25252CBuilder%25250A%252509Stream%252B%25253A%25253D%252BHeader%25250A%252509Vector%252B%252526%252BVector%25250A%252509Payload%252B%25253D%252BBuilder%25250A%252509Value%252B%25257C%252BPayload%25250A%252509Secret%252B%25253D%252BBuffer%25250A%25257D%25250Aswitch%252BPayload%25252CSession%25250A%252509Payload%252B%252529%252BToken%25250A%252509Payload%252B%252526%252BBuilder%25250A%252509Data%252B%25257C%252BDecode%25250A%252509Secret%252B%25255B%252BStream%25250A%25257D%25250Astring%252BBody%252529Session%25250A%252509Session%252B%252528%252BTrace%25250A%252509Buffer%252B%25257B%252BSession%25250A%252509Vector%252B%25252A%252BVector%25250A%252509Context%252B%25253B%252BToken%25250A%252509Value%252B%25252A%252BData%25250A%252509Encode%252B%25253B%252BFlow%25250A%252509Trace%252B%252529%252BTrace%25250A%25257D%25250Aint%252BToken%25257CSignal%25250A%252509Header%252B%25255D%252BFlow%25250A%252509Body%252B.%252BKey%25250A%252509Vector%252B%252528%252BSignal%25250A%252509Session%252B%25252C%252BData%25250A%25257D%25250Ac2FuZGVlcEBmdmNvbS5hZQ

25 Sep 2026 · 19:09:05.000 UTCpublic

Report tags: malicious cloaking browser_fingerprinting anti_analysis
Submit tags

Request review

Malicious detection

2 detections · review the detection signals

Review evidence →

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Captured HTTP requests; click any summary row or use its hostname button to expand transaction details.
Timestamp (UTC)	Method	Status	Type	Size	Duration	Signals
19:08:33.103	GET	302	document	0 B	84 ms	—

19:08:33.198	GET	200	document	26.5 KB	299 ms	—

19:08:33.887	GET	200	script	0 B	0 ms	—

19:08:38.613	POST	200	document	0 B	0 ms	2 alerts

19:08:40.057	GET	301	document	0 B	70 ms	—

19:08:40.132	GET	200	document	249.4 KB	49 ms	—

19:08:40.263	GET	200	stylesheet	166.3 KB	27 ms	—

19:08:40.267	GET	200	stylesheet	62.4 KB	11 ms	—

19:08:40.268	GET	200	stylesheet	79.5 KB	15 ms	—

19:08:40.269	GET	200	stylesheet	16.6 KB	5 ms	—

19:08:40.270	GET	200	stylesheet	124.9 KB	4 ms	—

19:08:40.272	GET	200	stylesheet	31.9 KB	6 ms	—

19:08:40.273	GET	200	stylesheet	171.9 KB	20 ms	—

19:08:40.274	GET	200	stylesheet	12.2 KB	2 ms	—

19:08:40.276	GET	200	stylesheet	11.6 KB	8 ms	—

19:08:40.277	GET	200	script	6.6 KB	4 ms	—

19:08:40.278	GET	200	script	162.4 KB	14 ms	—

19:08:40.280	GET	200	script	455.1 KB	62 ms	—

19:08:40.281	GET	200	script	111 B	5 ms	—

19:08:40.293	GET	200	imageset	66.3 KB	9 ms	—

19:08:40.302	GET	200	script	9.5 KB	20 ms	—

19:08:40.303	GET	200	script	186.9 KB	34 ms	—

19:08:40.304	GET	200	script	153.6 KB	37 ms	—

19:08:40.305	GET	200	script	6.6 KB	3 ms	—

19:08:40.306	GET	200	script	88.7 KB	2 ms	—

19:08:40.308	GET	200	script	2.2 KB	5 ms	—

19:08:40.309	GET	200	script	16.8 KB	14 ms	—

19:08:40.310	GET	200	script	197 B	8 ms	—

19:08:40.369	GET	200	script	4.3 KB	2 ms	—

19:08:40.370	GET	200	script	823 B	22 ms	—

19:08:40.371	GET	200	script	983 B	2 ms	—

19:08:40.372	GET	200	script	635 B	4 ms	—

19:08:40.373	GET	200	script	1.9 KB	7 ms	—

19:08:40.381	GET	200	font	215.4 KB	6 ms	—

19:08:40.398	GET	200	font	228.8 KB	21 ms	—

19:08:40.399	GET	200	font	126.4 KB	21 ms	—

19:08:40.402	GET	200	script	258 B	18 ms	—

19:08:40.544	GET	200	xhr	1.6 KB	3 ms	—

19:08:40.597	GET	200	font	13.8 KB	8 ms	—

19:08:40.598	GET	200	font	114.3 KB	5 ms	—

19:08:40.599	GET	200	font	124.9 KB	6 ms	—

19:08:40.646	GET	200	img	21.9 KB	4 ms	—

19:08:40.656	GET	200	stylesheet	38.9 KB	13 ms	—

19:08:40.749	GET	200	font	13.9 KB	3 ms	—

19:08:40.750	GET	200	font	219.9 KB	7 ms	—

19:08:40.793	GET	200	fetch	44.4 KB	7 ms	—

19:08:40.796	GET	200	fetch	500 B	5 ms	—

19:08:40.807	GET	200	xhr	137 B	3 ms	—

19:08:40.818	GET	302	img	0 B	209 ms	—

19:08:41.034	GET	200	img	43 B	83 ms	—
Transaction #42 Request / response URL GET HTTPS https://securemetrics.apple.com/b/ss/applestoreww/1/JS-2.23.0/s41340163764385?AQB=1&pccr=true&vidn=355B635C1697A820-600007C8A412ABE1&ndh=1&pf=1&t=25%2F8%2F2026%2019%3A8%3A40%205%200&fid=5825692B5AA37807-0A9405702C7EEE70&ce=UTF-8&cdp=2&cl=1800&pageName=apple%20-%20index%2Ftab%20%28us%29&g=https%3A%2F%2Fwww.apple.com%2F%3Femail%3D%2A%2A%2A%2A%2A%2A&cc=USD&ch=www.us.homepage&server=ac-2.30.0&h1=www.us.homepage&v3=aos%3A%20us&l3=D%3Das_tex&c4=https%3A%2F%2Fwww.apple.com%2F&v4=D%3DpageName&v14=en-us&c20=aos%3A%20us&v54=D%3Dg&v97=s.t-p&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=1024&AQE=1 IP / ASN 17.8.130.102 AS714 · APPLE-ENGINEERING Transaction actions#42 Investigate Download resource43 B (43 bytes) Captured resources may contain malicious code. Sign in to download Raw file and protected ZIP External sources Requested by https://www.apple.com/?email=bruce.silva@consolidated.com Resource information File type GIF image data, version 89a, 2 x 2 MIME type image/gif; charset=utf-8 First seen (UTC) 05 Apr 2023 · 02:54:08.000 UTC Last seen (UTC) 24 Oct 2026 · 08:46:12.784 UTC Times seen 33873 Size 43 B (43 bytes) MD5 ad480fd0732d0f6f1a8b06359e3a42bb SHA1 a544538683a2dfe574eeb2e358ac8fcc78289d50 SHA256 a1ecbaed793a1f564c49c671f2dd0ce36f858534ef6d26b55783a06b884cc506 Certificate information Issuer Apple Inc. · Apple Public Server ECC CA 1 - G1 Subject securemetrics.apple.com Protocol / cipher TLSv1.3 · TLS_AES_256_GCM_SHA384 SHA1 fingerprint 4F:2D:22:31:1D:1B:72:44:94:E7:A1:93:06:A5:0B:B8:ED:A5:03:88 Valid from Tue, 22 Sep 2026 21:06:27 GMT Valid until Tue, 15 Dec 2026 19:38:15 GMT Technology fingerprints HSTS (Security) HTTP headers Request headers GET /b/ss/applestoreww/1/JS-2.23.0/s41340163764385?AQB=1&pccr=true&vidn=355B635C1697A820-600007C8A412ABE1&ndh=1&pf=1&t=25%2F8%2F2026%2019%3A8%3A40%205%200&fid=5825692B5AA37807-0A9405702C7EEE70&ce=UTF-8&cdp=2&cl=1800&pageName=apple%20-%20index%2Ftab%20%28us%29&g=https%3A%2F%2Fwww.apple.com%2F%3Femail%3D%2A%2A%2A%2A%2A%2A&cc=USD&ch=www.us.homepage&server=ac-2.30.0&h1=www.us.homepage&v3=aos%3A%20us&l3=D%3Das_tex&c4=https%3A%2F%2Fwww.apple.com%2F&v4=D%3DpageName&v14=en-us&c20=aos%3A%20us&v54=D%3Dg&v97=s.t-p&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=1024&AQE=1 HTTP/1.1 Host: securemetrics.apple.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: image/avif,image/webp,image/png,image/svg+xml,image/;q=0.8,/;q=0.5 Accept-Language: en-US,en;q=0.9 Accept-Encoding: gzip, deflate, br, zstd Referer: https://www.apple.com/?email=bruce.silva@consolidated.com Sec-GPC: 1 Connection: keep-alive Cookie: geo=NO; s_fid=5825692B5AA37807-0A9405702C7EEE70; s_cc=true; mk_epub=%7B%22btuid%22%3A%221haxfsr%22%2C%22prop57%22%3A%22www.us.homepage%22%7D; s_vi=[CS]v1\|355B635C1697A820-600007C8A412ABE1[CE] Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-site Priority: u=5, i Pragma: no-cache Cache-Control: no-cache Response headers HTTP/2 200 server: Apple date: Fri, 25 Sep 2026 19:08:41 GMT content-type: image/gif;charset=utf-8 content-length: 43 strict-transport-security: max-age=31536000; includeSubdomains access-control-allow-origin: expires: Thu, 24 Sep 2026 19:08:41 GMT last-modified: Sat, 26 Sep 2026 19:08:41 GMT pragma: no-cache p3p: CP="This is not a P3P policy" set-cookie: s_vi=[CS]v1\|355B635C1697A820-600007C8A412ABE1[CE]; Path=/; Domain=apple.com; Max-Age=1800; Expires=Fri, 25 Sep 2026 19:38:38 GMT; SameSite=None; Secure etag: 3844775957891940352-4613798780027986082 vary: * cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff x-frame-options: SAMEORIGIN X-Firefox-Spdy: h2

Domain graph

Hostnames

Connections

Network requests

Transaction #42

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #42

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

HTTP headers

Request headers

Response headers

Domain graph

Network requests