WEBSITE ANALYSIS REPORT
https://login.microsoft.com//////////////////////////////common/oauth2/v2.0/authorize?state=YnJ1Y2Uuc2lsdmFAY29uc29saWRhdGVkLmNvbQ==&scope=openid+profile+https%253A%252F%252Fgraph.microsoft.com%252FUser.Read&prompt=none&client_id=4151d471-0135-4afe-a37c-055b3d53e2ce&uri=https%253A%252F%252Fdeveloper.salesforce.com%252Fdashboard%252Fsession%252Fuser%252Fverify%252Fstep1&%255Ca3edq%250C+2e4c%250D%250A%2593bb66f835%2509%258C2979X%25BCint+Builder.Decode%250A%2509Context+%253A%253D+FlowEmail+%255B+OffsetStream+%253A=%2520Token%2509Data%2520%257C%2520Email%257Dfor%2520Stream%253A%253DPayloadBuilder+;+ValueContext+%257D+Trace%250A%2509Decode+.+SignalVector+%257B%2520Offset%257D%250Aa78c998ef06b569e%2597%25E9%252A%25CBa93627d06a07eba872664f4a92c74eae25f60308d1cad09a16e7beef0b79c03d8bd7528c4a7efc8bdb3fc053evar%252BVector-Secret%25250A%252509Decode%252B%25253B%252BBuffer%25250A%252509Encode%252B-%252BSession%25250A%252509Decode%252B%25255D%252BPayload%25250A%252509Offset%252B%25252B%252BBuilder%25250A%252509Builder%252B%252528%252BToken%25250A%252509Encode%252B.%252BKey%25250A%252509Context%252B%25257B%252BToken%25250A%25257D%25250Aelse%252BDecode%25252CBuilder%25250A%252509Stream%252B%25253A%25253D%252BHeader%25250A%252509Vector%252B%252526%252BVector%25250A%252509Payload%252B%25253D%252BBuilder%25250A%252509Value%252B%25257C%252BPayload%25250A%252509Secret%252B%25253D%252BBuffer%25250A%25257D%25250Aswitch%252BPayload%25252CSession%25250A%252509Payload%252B%252529%252BToken%25250A%252509Payload%252B%252526%252BBuilder%25250A%252509Data%252B%25257C%252BDecode%25250A%252509Secret%252B%25255B%252BStream%25250A%25257D%25250Astring%252BBody%252529Session%25250A%252509Session%252B%252528%252BTrace%25250A%252509Buffer%252B%25257B%252BSession%25250A%252509Vector%252B%25252A%252BVector%25250A%252509Context%252B%25253B%252BToken%25250A%252509Value%252B%25252A%252BData%25250A%252509Encode%252B%25253B%252BFlow%25250A%252509Trace%252B%252529%252BTrace%25250A%25257D%25250Aint%252BToken%25257CSignal%25250A%252509Header%252B%25255D%252BFlow%25250A%252509Body%252B.%252BKey%25250A%252509Vector%252B%252528%252BSignal%25250A%252509Session%252B%25252C%252BData%25250A%25257D%25250Ac2FuZGVlcEBmdmNvbS5hZQ
public
Malicious detection
Review evidence →2 detections · review the detection signals
Host summary
Observed host history, traffic, and infrastructure
| Host | Rank | Registered | First seen | Last seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
| login.microsoftonline.com | 52 | 2002-07-09 | 2017-02-19 | 2026-09-21 | 2.6 KB | 30.6 KB |  20.190.181.5 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| www.apple.com | 743 | 1987-02-19 | 2012-05-21 | 2026-09-21 | 24.8 KB | 3.40 MB |  96.6.16.249 | Apple MapKit JS Maps Apple MapKit JS lets you embed interactive maps directly into your websites across platforms and operating systems, including iOS and Android. HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| login.microsoft.com | 24331 | 1991-05-02 | 2014-08-12 | 2026-09-22 | 2.6 KB | 4.3 KB | 20.231.128.66 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| aadcdn.msftauth.net | 5262 | 2018-10-25 | 2018-11-19 | 2026-09-21 | 550 B | 0 B |  2.22.225.66 | |
| securemetrics.apple.com | 151201 | 1987-02-19 | 2012-08-27 | 2026-09-19 | 2.3 KB | 2.1 KB |  17.8.130.102 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| apple.com | 5 | 1987-02-19 | 2015-02-09 | 2026-09-25 | 519 B | 381 B | 17.253.144.10 | |
| 827aeration.sharppine.de 2 alerts | N/A | N/A | N/A | N/A | 758 B | 1.1 KB |  172.67.219.109 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
Observed certificates
Distinct fingerprints recorded in HTTP transactions
| Subject | Issuer | Valid from | Valid until | Fingerprint | Hosts |
|---|---|---|---|---|---|
| stamp2.login.microsoftonline.com | DigiCert Inc · DigiCert Global G2 TLS RSA SHA256 2020 CA1 | Tue, 08 Sep 2026 00:00:00 GMT | Thu, 17 Dec 2026 23:59:59 GMT | SHA256B3:9D:2D:C0:56:4A:1E:70:87:0F:5C:8D:D8:A0:28:8E:CB:32:87:C0:CE:3D:3E:CB:89:0A:B7:7B:5C:18:93:72 | login.microsoftonline.com |
| www.apple.com | Apple Inc. · Apple Public EV Server RSA CA 1 - G1 | Thu, 02 Jul 2026 22:11:57 GMT | Wed, 16 Dec 2026 18:31:25 GMT | SHA256CD:56:3F:57:16:C2:54:CC:1A:57:4C:B9:F1:01:A9:23:CA:50:B2:82:2C:94:C7:C8:55:75:FF:F4:B8:09:E7:60 | www.apple.com |
| graph.windows.net | DigiCert Inc · DigiCert Global G2 TLS RSA SHA256 2020 CA1 | Tue, 15 Sep 2026 00:00:00 GMT | Thu, 24 Dec 2026 23:59:59 GMT | SHA25669:13:87:E8:E2:71:00:40:28:EC:41:BA:62:A8:CF:D5:01:43:01:2A:CE:C9:CB:E1:94:74:3D:6D:F9:F1:5C:B1 | login.microsoft.com |
| securemetrics.apple.com | Apple Inc. · Apple Public Server ECC CA 1 - G1 | Tue, 22 Sep 2026 21:06:27 GMT | Tue, 15 Dec 2026 19:38:15 GMT | SHA256BC:7E:65:1B:7F:37:4B:F4:E1:F9:D3:2E:A3:2B:9D:AA:D2:4C:D7:3A:E1:7B:A4:94:75:88:01:18:AE:23:67:49 | securemetrics.apple.com |
| apple.com | Apple Inc. · Apple Public EV Server ECC CA 1 - G1 | Thu, 13 Aug 2026 16:20:01 GMT | Thu, 05 Nov 2026 20:55:13 GMT | SHA25679:86:9C:A7:08:3D:B9:D0:A3:13:26:35:D2:11:5D:A4:F7:CA:B6:1A:29:C0:E0:90:63:E6:D5:E5:ED:9F:0B:3B | apple.com |