https://login.microsoft.com//////////////////////////////common/oauth2/v2.0/authorize?state=Y29yZXkua2VuZGlnQGhlcml0YWdlYWN0aW9uLmNvbQ==&scope=openid+profile+https%253A%252F%252Fgraph.microsoft.com%252FUser.Read&prompt=none&client_id=901b4323-f24e-4af4-884f-2faa6ac5931e&uri=https%253A%252F%252Fdeveloper.salesforce.com%252Fdashboard%252Fsession%252Fuser%252Fverify%252Fstep1&%255Ca3edq%250C+2e4c%250D%250A%2593bb66f835%2509%258C2979X%25BCint+Builder.Decode%250A%2509Context+%253A%253D+FlowEmail+%255B+OffsetStream+%253A=%2520Token%2509Data%2520%257C%2520Email%257Dfor%2520Stream%253A%253DPayloadBuilder+;+ValueContext+%257D+Trace%250A%2509Decode+.+SignalVector+%257B%2520Offset%257D%250Aa78c998ef06b569e%2597%25E9%252A%25CBa93627d06a07eba872664f4a92c74eae25f60308d1cad09a16e7beef0b79c03d8bd7528c4a7efc8bdb3fc053evar%252BVector-Secret%25250A%252509Decode%252B%25253B%252BBuffer%25250A%252509Encode%252B-%252BSession%25250A%252509Decode%252B%25255D%252BPayload%25250A%252509Offset%252B%25252B%252BBuilder%25250A%252509Builder%252B%252528%252BToken%25250A%252509Encode%252B.%252BKey%25250A%252509Context%252B%25257B%252BToken%25250A%25257D%25250Aelse%252BDecode%25252CBuilder%25250A%252509Stream%252B%25253A%25253D%252BHeader%25250A%252509Vector%252B%252526%252BVector%25250A%252509Payload%252B%25253D%252BBuilder%25250A%252509Value%252B%25257C%252BPayload%25250A%252509Secret%252B%25253D%252BBuffer%25250A%25257D%25250Aswitch%252BPayload%25252CSession%25250A%252509Payload%252B%252529%252BToken%25250A%252509Payload%252B%252526%252BBuilder%25250A%252509Data%252B%25257C%252BDecode%25250A%252509Secret%252B%25255B%252BStream%25250A%25257D%25250Astring%252BBody%252529Session%25250A%252509Session%252B%252528%252BTrace%25250A%252509Buffer%252B%25257B%252BSession%25250A%252509Vector%252B%25252A%252BVector%25250A%252509Context%252B%25253B%252BToken%25250A%252509Value%252B%25252A%252BData%25250A%252509Encode%252B%25253B%252BFlow%25250A%252509Trace%252B%252529%252BTrace%25250A%25257D%25250Aint%252BToken%25257CSignal%25250A%252509Header%252B%25255D%252BFlow%25250A%252509Body%252B.%252BKey%25250A%252509Vector%252B%252528%252BSignal%25250A%252509Session%252B%25252C%252BData%25250A%25257D%25250Ac2FuZGVlcEBmdmNvbS5hZQ==
3 detections · review the detection signals
Host summary
Observed host history, traffic, and infrastructure
| Host | Rank | Registered | First seen | Last seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
| s3.us-east-2.amazonaws.com | 2522817 | 2005-08-18 | 2017-02-03 | 2026-10-02 | 739 B | 1.9 KB | Cloudflare Browser Insights Analytics, RUM Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users. Amazon Web Services PaaS Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality. Amazon S3 CDN Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface. | |
| login.microsoftonline.com | 52 | 2002-07-09 | 2017-02-19 | 2026-10-05 | 2.6 KB | 30.7 KB | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. | |
| login.microsoft.com | 24331 | 1991-05-02 | 2014-08-12 | 2026-09-30 | 2.6 KB | 4.4 KB | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. | |
| aadcdn.msftauth.net | 5262 | 2018-10-25 | 2018-11-19 | 2026-10-05 | 550 B | 0 B | ||
| ctcpzqinsm.morivantela.com 14 alerts | N/A | 2026-03-09 | 2026-10-06 | 2026-10-06 | 5.5 KB | 741.0 KB | PHP Programming languages PHP is a general-purpose scripting language used for web development. Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. cdnjs CDN cdnjs is a free distributed JS library delivery service. Node.js Programming languages Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser. jQuery:4.0.0 JavaScript libraries jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax. Socket.io JavaScript frameworks Not recorded jsDelivr CDN JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration. Bootstrap:5.3.8 UI frameworks Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components. jQuery CDN CDN jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder. PHP:8.3.31 Programming languages PHP is a general-purpose scripting language used for web development. | |
| cdn.jsdelivr.net | 1678 | 2012-05-16 | 2012-09-30 | 2026-10-04 | 502 B | 59.9 KB | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. | |
| cdnjs.cloudflare.com | 1222 | 2009-02-17 | 2012-05-23 | 2026-10-04 | 504 B | 46.7 KB | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. | |
| code.jquery.com | 4915 | 2005-12-10 | 2012-05-21 | 2026-10-05 | 476 B | 77.5 KB | Varnish Caching Varnish is a reverse caching proxy. Nginx Web servers, Reverse proxies Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache. |
Observed certificates
Distinct fingerprints recorded in HTTP transactions
| Subject | Issuer | Valid from | Valid until | Fingerprint | Hosts |
|---|---|---|---|---|---|
| morivantela.com | Let's Encrypt · YE1 | Wed, 30 Sep 2026 21:55:47 GMT | Tue, 29 Dec 2026 21:55:46 GMT | SHA256E5:43:13:CF:20:DF:82:43:86:BE:EB:BC:06:27:C5:4E:91:8B:31:7D:CD:43:50:85:B1:D3:68:4A:B5:E8:BE:F3 | ctcpzqinsm.morivantela.com |
| jsdelivr.net | GlobalSign nv-sa · GlobalSign Atlas R3 DV TLS CA 2026 Q2 | Wed, 20 May 2026 15:48:47 GMT | Sat, 05 Dec 2026 14:48:47 GMT | SHA256ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5 | cdn.jsdelivr.net |
| *.s3.us-east-2.amazonaws.com | Amazon · Amazon RSA 2048 M04 | Fri, 11 Sep 2026 00:00:00 GMT | Sat, 27 Mar 2027 23:59:59 GMT | SHA256FF:B5:29:F1:31:70:41:61:90:3C:0E:65:2F:99:55:E6:B3:F3:5A:01:15:0A:A9:B1:2D:33:C6:EC:7B:D9:C1:A1 | s3.us-east-2.amazonaws.com |
| stamp2.login.microsoftonline.com | Microsoft Corporation · Microsoft TLS G2 RSA CA OCSP 16 | Fri, 14 Aug 2026 03:43:54 GMT | Sun, 22 Nov 2026 02:43:54 GMT | SHA2566C:D9:2F:6B:18:A7:99:CE:AB:DD:A8:20:7E:F0:2D:32:29:B2:AA:FC:74:AD:F5:91:94:72:02:CD:14:87:E7:50 | login.microsoftonline.com |
| cdnjs.cloudflare.com | Google Trust Services · WE1 | Mon, 07 Sep 2026 14:43:48 GMT | Sun, 06 Dec 2026 15:43:45 GMT | SHA25663:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB | cdnjs.cloudflare.com |
| *.jquery.com | Sectigo Limited · Sectigo Public Server Authentication CA DV E36 | Wed, 20 May 2026 00:00:00 GMT | Fri, 04 Dec 2026 23:59:59 GMT | SHA25605:8E:2E:14:85:E2:41:28:F5:18:A4:37:49:31:2B:0E:24:53:64:3F:02:15:BE:63:EF:F4:B8:53:5A:8B:6D:29 | code.jquery.com |
| graph.windows.net | DigiCert Inc · DigiCert Global G2 TLS RSA SHA256 2020 CA1 | Tue, 15 Sep 2026 00:00:00 GMT | Thu, 24 Dec 2026 23:59:59 GMT | SHA25669:13:87:E8:E2:71:00:40:28:EC:41:BA:62:A8:CF:D5:01:43:01:2A:CE:C9:CB:E1:94:74:3D:6D:F9:F1:5C:B1 | login.microsoft.com |