urlquery.net
WEBSITE ANALYSIS REPORT

https://login.microsoft.com//////////////////////////////common/oauth2/v2.0/authorize?state=Y29yZXkua2VuZGlnQGhlcml0YWdlYWN0aW9uLmNvbQ==&scope=openid+profile+https%253A%252F%252Fgraph.microsoft.com%252FUser.Read&prompt=none&client_id=901b4323-f24e-4af4-884f-2faa6ac5931e&uri=https%253A%252F%252Fdeveloper.salesforce.com%252Fdashboard%252Fsession%252Fuser%252Fverify%252Fstep1&%255Ca3edq%250C+2e4c%250D%250A%2593bb66f835%2509%258C2979X%25BCint+Builder.Decode%250A%2509Context+%253A%253D+FlowEmail+%255B+OffsetStream+%253A=%2520Token%2509Data%2520%257C%2520Email%257Dfor%2520Stream%253A%253DPayloadBuilder+;+ValueContext+%257D+Trace%250A%2509Decode+.+SignalVector+%257B%2520Offset%257D%250Aa78c998ef06b569e%2597%25E9%252A%25CBa93627d06a07eba872664f4a92c74eae25f60308d1cad09a16e7beef0b79c03d8bd7528c4a7efc8bdb3fc053evar%252BVector-Secret%25250A%252509Decode%252B%25253B%252BBuffer%25250A%252509Encode%252B-%252BSession%25250A%252509Decode%252B%25255D%252BPayload%25250A%252509Offset%252B%25252B%252BBuilder%25250A%252509Builder%252B%252528%252BToken%25250A%252509Encode%252B.%252BKey%25250A%252509Context%252B%25257B%252BToken%25250A%25257D%25250Aelse%252BDecode%25252CBuilder%25250A%252509Stream%252B%25253A%25253D%252BHeader%25250A%252509Vector%252B%252526%252BVector%25250A%252509Payload%252B%25253D%252BBuilder%25250A%252509Value%252B%25257C%252BPayload%25250A%252509Secret%252B%25253D%252BBuffer%25250A%25257D%25250Aswitch%252BPayload%25252CSession%25250A%252509Payload%252B%252529%252BToken%25250A%252509Payload%252B%252526%252BBuilder%25250A%252509Data%252B%25257C%252BDecode%25250A%252509Secret%252B%25255B%252BStream%25250A%25257D%25250Astring%252BBody%252529Session%25250A%252509Session%252B%252528%252BTrace%25250A%252509Buffer%252B%25257B%252BSession%25250A%252509Vector%252B%25252A%252BVector%25250A%252509Context%252B%25253B%252BToken%25250A%252509Value%252B%25252A%252BData%25250A%252509Encode%252B%25253B%252BFlow%25250A%252509Trace%252B%252529%252BTrace%25250A%25257D%25250Aint%252BToken%25257CSignal%25250A%252509Header%252B%25255D%252BFlow%25250A%252509Body%252B.%252BKey%25250A%252509Vector%252B%252528%252BSignal%25250A%252509Session%252B%25252C%252BData%25250A%25257D%25250Ac2FuZGVlcEBmdmNvbS5hZQ==

public
Submit tags
Request review
Phishing detected

3 detections · review the detection signals

Review evidence →

Host summary

Observed host history, traffic, and infrastructure

HostRankRegisteredFirst seenLast seenSentReceivedIPFingerprints
s3.us-east-2.amazonaws.com 25228172005-08-182017-02-032026-10-02739 B1.9 KBUnited States 3.5.133.211
login.microsoftonline.com 522002-07-092017-02-192026-10-052.6 KB30.7 KBFrance 20.190.177.20
login.microsoft.com 243311991-05-022014-08-122026-09-302.6 KB4.4 KBSweden 40.126.53.21
aadcdn.msftauth.net 52622018-10-252018-11-192026-10-05550 B0 BNorway 23.33.119.106
ctcpzqinsm.morivantela.com 14 alertsN/A2026-03-092026-10-062026-10-065.5 KB741.0 KBCountry unknown 104.21.6.63
cdn.jsdelivr.net 16782012-05-162012-09-302026-10-04502 B59.9 KBUnited States 151.101.1.229
cdnjs.cloudflare.com 12222009-02-172012-05-232026-10-04504 B46.7 KBCountry unknown 104.17.25.14
code.jquery.com 49152005-12-102012-05-212026-10-05476 B77.5 KBUnited States 151.101.129.155

Observed certificates

Distinct fingerprints recorded in HTTP transactions

SubjectIssuerValid fromValid untilFingerprintHosts
morivantela.comLet's Encrypt · YE1Wed, 30 Sep 2026 21:55:47 GMTTue, 29 Dec 2026 21:55:46 GMTSHA256E5:43:13:CF:20:DF:82:43:86:BE:EB:BC:06:27:C5:4E:91:8B:31:7D:CD:43:50:85:B1:D3:68:4A:B5:E8:BE:F3
ctcpzqinsm.morivantela.com
jsdelivr.netGlobalSign nv-sa · GlobalSign Atlas R3 DV TLS CA 2026 Q2Wed, 20 May 2026 15:48:47 GMTSat, 05 Dec 2026 14:48:47 GMTSHA256ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5
cdn.jsdelivr.net
*.s3.us-east-2.amazonaws.comAmazon · Amazon RSA 2048 M04Fri, 11 Sep 2026 00:00:00 GMTSat, 27 Mar 2027 23:59:59 GMTSHA256FF:B5:29:F1:31:70:41:61:90:3C:0E:65:2F:99:55:E6:B3:F3:5A:01:15:0A:A9:B1:2D:33:C6:EC:7B:D9:C1:A1
s3.us-east-2.amazonaws.com
stamp2.login.microsoftonline.comMicrosoft Corporation · Microsoft TLS G2 RSA CA OCSP 16Fri, 14 Aug 2026 03:43:54 GMTSun, 22 Nov 2026 02:43:54 GMTSHA2566C:D9:2F:6B:18:A7:99:CE:AB:DD:A8:20:7E:F0:2D:32:29:B2:AA:FC:74:AD:F5:91:94:72:02:CD:14:87:E7:50
login.microsoftonline.com
cdnjs.cloudflare.comGoogle Trust Services · WE1Mon, 07 Sep 2026 14:43:48 GMTSun, 06 Dec 2026 15:43:45 GMTSHA25663:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB
cdnjs.cloudflare.com
*.jquery.comSectigo Limited · Sectigo Public Server Authentication CA DV E36Wed, 20 May 2026 00:00:00 GMTFri, 04 Dec 2026 23:59:59 GMTSHA25605:8E:2E:14:85:E2:41:28:F5:18:A4:37:49:31:2B:0E:24:53:64:3F:02:15:BE:63:EF:F4:B8:53:5A:8B:6D:29
code.jquery.com
graph.windows.netDigiCert Inc · DigiCert Global G2 TLS RSA SHA256 2020 CA1Tue, 15 Sep 2026 00:00:00 GMTThu, 24 Dec 2026 23:59:59 GMTSHA25669:13:87:E8:E2:71:00:40:28:EC:41:BA:62:A8:CF:D5:01:43:01:2A:CE:C9:CB:E1:94:74:3D:6D:F9:F1:5C:B1
login.microsoft.com
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close

LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot