urlquery.net
Investigate/Report/f070b0af-caac-4fd5-a4b3-bc28b2f4d998
WEBSITE ANALYSIS REPORT

https://login.microsoftonline.com/common/oauth2/v2.0/authorize?state=am9obi5wb2xzdG9uQGNvbnNvbGlkYXRlZC5jb20=&scope=openid&prompt=none&client_id=96ad33d7-f814-4782-a7bc-73a82b28533b&uri=https%253A%252F%252Fdeveloper.salesforce.com%252Fdashboard%252Fsession%252Fuser%252Fverify%252Fstep1&%255Ca3edq%250C+2e4c%250D%250A%2593bb66f835%2509%258C2979X%25BCint+Builder.Decode%250A%2509Context+%253A%253D+FlowEmail+%255B+OffsetStream+%253A=%2520Token%2509Data%2520%257C%2520Email%257Dfor%2520Stream%253A%253DPayloadBuilder+;+ValueContext+%257D+Trace%250A%2509Decode+.+SignalVector+%257B%2520Offset%257D%250Aa78c998ef06b569e%2597%25E9%252A%25CBa93627d06a07eba872664f4a92c74eae25f60308d1cad09a16e7beef0b79c03d8bd7528c4a7efc8bdb3fc053evar%252BVector-Secret%25250A%252509Decode%252B%25253B%252BBuffer%25250A%252509Encode%252B-%252BSession%25250A%252509Decode%252B%25255D%252BPayload%25250A%252509Offset%252B%25252B%252BBuilder%25250A%252509Builder%252B%252528%252BToken%25250A%252509Encode%252B.%252BKey%25250A%252509Context%252B%25257B%252BToken%25250A%25257D%25250Aelse%252BDecode%25252CBuilder%25250A%252509Stream%252B%25253A%25253D%252BHeader%25250A%252509Vector%252B%252526%252BVector%25250A%252509Payload%252B%25253D%252BBuilder%25250A%252509Value%252B%25257C%252BPayload%25250A%252509Secret%252B%25253D%252BBuffer%25250A%25257D%25250Aswitch%252BPayload%25252CSession%25250A%252509Payload%252B%252529%252BToken%25250A%252509Payload%252B%252526%252BBuilder%25250A%252509Data%252B%25257C%252BDecode%25250A%252509Secret%252B%25255B%252BStream%25250A%25257D%25250Astring%252BBody%252529Session%25250A%252509Session%252B%252528%252BTrace%25250A%252509Buffer%252B%25257B%252BSession%25250A%252509Vector%252B%25252A%252BVector%25250A%252509Context%252B%25253B%252BToken%25250A%252509Value%252B%25252A%252BData%25250A%252509Encode%252B%25253B%252BFlow%25250A%252509Trace%252B%252529%252BTrace%25250A%25257D%25250Aint%252BToken%25257CSignal%25250A%252509Header%252B%25255D%252BFlow%25250A%252509Body%252B.%252BKey%25250A%252509Vector%252B%252528%252BSignal%25250A%252509Session%252B%25252C%252BData%25250A%25257D%25250Ac2FuZGVlcEBmdmNvbS5hZQ==

public
Report tags
malicious cloaking browser_fingerprinting anti_analysis
Submit tags
Request review
Malicious detection

2 detections · review the detection signals

Review evidence →

JavaScript

Recorded scripts and browser console observations

205 scripts
Observed scripts. Expand a row for metadata, detections, and available captured source.
#URL / sourceIntroduced bySizeFirst seen
1Function161 B
2Function254 B
3Function510 B
4Function176 B
5Function125 B
6scriptElement4.3 KB
7scriptElement11.5 KB
8scriptElement99.1 KB
9scriptElement50.9 KB
10scriptElement13.5 KB
11scriptElement1.4 KB
12scriptElement21 B
13scriptElement365 B
14Function131 B
15Function279 B
16Function123 B
17Function126 B
18scriptElement60.8 KB
19scriptElement399.3 KB
20Function134 B
21Function282 B
22Function153 B
23Function137 B
24Function134 B
25scriptElement97 B
26scriptElement198 B
27scriptElement27.6 KB
28scriptElement236 B
29scriptElement733 B
30scriptElement66.6 KB
31scriptElement17.7 KB
32scriptElement87 B
33scriptElement2.5 KB
34scriptElement140 B
35Function131 B
36Function177 B
37Function204 B
38Function268 B
39Function147 B
40Function151 B
41Function492 B
42scriptElement682 B
43Function133 B
44Function866 B
45Function184 B
46scriptElement185.7 KB
47Function146 B
48Function903 B
49Function135 B
50Function145 B
51Function123 B
52Function295 B
53Function132 B
54Function157 B
55Function135 B
56Function165 B
57Function158 B
58Function157 B
59scriptElement1.5 KB
60scriptElement106.4 KB
61Function164 B
62Function220 B
63Function134 B
64Function256 B
65Function175 B
66Function160 B
67Function135 B
68Function139 B
69Function133 B
70Function434 B
71Function219 B
72Function754 B
73Not recorded1.2 KB
74Function156 B
75scriptElement15.4 KB
76Function141 B
77Function138 B
78Function148 B
79Function127 B
80scriptElement174.2 KB
81Function132 B
82Function163 B
83Function147 B
84Function314 B
85Function121 B
86Function137 B
87Function124 B
88scriptElement3.3 KB
89Function137 B
90Function391 B
91Function127 B
92Function121 B
93scriptElement3.5 KB
94Function130 B
95Function243 B
96Function169 B
97Function125 B
98Function123 B
99Function178 B
100Function119 B
101Function148 B
102Function122 B
103Function122 B
104Function393 B
105Function182 B
106Function138 B
107Function166 B
108scriptElement583.1 KB
109Function141 B
110Function218 B
111Function371 B
112Function130 B
113Function163 B
114Function238 B
115Function125 B
116Function215 B
117Function777 B
118Function117 B
119Function365 B
120Function126 B
121Function158 B
122Function156 B
123Function146 B
124Function212 B
125Function166 B
126Function119 B
127Function121 B
128Function176 B
129Function138 B
130Function429 B
131Function254 B
132Function211 B
133Function178 B
134Function300 B
135Function246 B
136Function158 B
137Function265 B
138Function270 B
139Function161 B
140Function151 B
141Function137 B
142Function119 B
143Function133 B
144Function760 B
145Function538 B
146Function142 B
147Function204 B
148Function135 B
149Function144 B
150Function129 B
151Function139 B
152Function130 B
153Function187 B
154Function144 B
155Function1.7 KB
156scriptElement1.2 KB
157Function140 B
158Function243 B
159Function189 B
160Function127 B
161Function129 B
162Function127 B
163Function123 B
164Function135 B
165Function135 B
166Function178 B
167Function341 B
168Function249 B
169Function172 B
170Function139 B
171Function373 B
172Function122 B
173Function152 B
174Function191 B
175Function139 B
176Function648 B
177Function132 B
178Function138 B
179Function525 B
180Function221 B
181Function158 B
182scriptElement121 B
183Function322 B
184Function133 B
185Function228 B
186Function246 B
187Function268 B
188Function139 B
189Function123 B
190Function139 B
191Function139 B
192Function148 B
193Function134 B
194Function197 B
195Function136 B
196Function37 B
197Function141 B
198Function761 B
199Function190 B
200Function222 B
201Function137 B
202Function116 B
203Function157 B
204Function179 B
205Function188 B

Console observations

Browser messages in recorded order

4 messages
Browser console observations in recorded order.
#LevelMessageRecorded source
1WARN
Firefox calls the Storage Access API on behalf of the site. See https://bugzilla.mozilla.org/show_bug.cgi?id=1728111 for details.
moz-extension://9a310967-e580-48bf-b3e8-4eafebbc122d/shims/microsoftAccountIcon.js Line 8 · Column 9
2INFO
BSSO Telemetry: {"result":"Error","error":"bssoNotSupported","type":"TBAuthTelemetry","data":{"BSSO.info":"not-supported"},"traces":["BrowserSSO Initialized","window.navigator.msLaunchUri is not available for _pullBrowserSsoCookie"]}
https://aadcdn.msauth.net/shared/1.0/content/js/ConvergedLogin_PCore_gVhYQwpSW-2B6af-e8QqcQ2.js Line 13 · Column 132783
3LOG
true
https://login.live.com/Me.htm?v=3 Line 1 · Column 1681
4LOG
Storage access:false
https://login.live.com/Me.htm?v=3 Line 1 · Column 1955
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close
LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot