urlquery.net
Investigate/Report/f401de93-6ef6-49e8-9a62-17476e6b3494
WEBSITE ANALYSIS REPORT

https://login.microsoftonline.com/common/oauth2/v2.0/authorize?state=dG9tY29ubm9yc0BhbWVyaWNhbnRyYWluaW5naW5jLmNvbQ==&scope=openid+profile+https%253A%252F%252Fgraph.microsoft.com%252FUser.Read&prompt=none&client_id=44e94fb9-0917-4b50-8eb7-83e98b865615&uri=https%253A%252F%252Fdeveloper.salesforce.com%252Fdashboard%252Fsession%252Fuser%252Fverify%252Fstep1&%255Ca3edq%250C+2e4c%250D%250A%2593bb66f835%2509%258C2979X%25BCint+Builder.Decode%250A%2509Context+%253A%253D+FlowEmail+%255B+OffsetStream+%253A=%2520Token%2509Data%2520%257C%2520Email%257Dfor%2520Stream%253A%253DPayloadBuilder+;+ValueContext+%257D+Trace%250A%2509Decode+.+SignalVector+%257B%2520Offset%257D%250Aa78c998ef06b569e%2597%25E9%252A%25CBa93627d06a07eba872664f4a92c74eae25f60308d1cad09a16e7beef0b79c03d8bd7528c4a7efc8bdb3fc053evar%252BVector-Secret%25250A%252509Decode%252B%25253B%252BBuffer%25250A%252509Encode%252B-%252BSession%25250A%252509Decode%252B%25255D%252BPayload%25250A%252509Offset%252B%25252B%252BBuilder%25250A%252509Builder%252B%252528%252BToken%25250A%252509Encode%252B.%252BKey%25250A%252509Context%252B%25257B%252BToken%25250A%25257D%25250Aelse%252BDecode%25252CBuilder%25250A%252509Stream%252B%25253A%25253D%252BHeader%25250A%252509Vector%252B%252526%252BVector%25250A%252509Payload%252B%25253D%252BBuilder%25250A%252509Value%252B%25257C%252BPayload%25250A%252509Secret%252B%25253D%252BBuffer%25250A%25257D%25250Aswitch%252BPayload%25252CSession%25250A%252509Payload%252B%252529%252BToken%25250A%252509Payload%252B%252526%252BBuilder%25250A%252509Data%252B%25257C%252BDecode%25250A%252509Secret%252B%25255B%252BStream%25250A%25257D%25250Astring%252BBody%252529Session%25250A%252509Session%252B%252528%252BTrace%25250A%252509Buffer%252B%25257B%252BSession%25250A%252509Vector%252B%25252A%252BVector%25250A%252509Context%252B%25253B%252BToken%25250A%252509Value%252B%25252A%252BData%25250A%252509Encode%252B%25253B%252BFlow%25250A%252509Trace%252B%252529%252BTrace%25250A%25257D%25250Aint%252BToken%25257CSignal%25250A%252509Header%252B%25255D%252BFlow%25250A%252509Body%252B.%252BKey%25250A%252509Vector%252B%252528%252BSignal%25250A%252509Session%252B%25252C%252BData%25250A%25257D%25250Ac2FuZGVlcEBmdmNvbS5hZQ==

public
Report tags
malicious cloaking browser_fingerprinting anti_analysis
Submit tags
Request review
Malicious detection

3 detections · review the detection signals

Review evidence →

JavaScript

Recorded scripts and browser console observations

140 scripts
Observed scripts. Expand a row for metadata, detections, and available captured source.
#URL / sourceIntroduced bySizeFirst seen
1scriptElement1.8 KB
2scriptElement1.7 KB
3importedModule1015 B
4scriptElement892 B
5scriptElement2.0 KB
6scriptElement1.6 KB
7scriptElement1.4 KB
8scriptElement2.4 KB
9scriptElement1.3 KB
10scriptElement1.5 KB
11scriptElement5.9 KB
12scriptElement1.6 KB
13scriptElement4.8 KB
14scriptElement1.8 KB
15scriptElement1.6 KB
16scriptElement1.6 KB
17scriptElement3.0 KB
18scriptElement1.3 KB
19scriptElement2.2 KB
20scriptElement1.3 KB
21scriptElement19.7 KB
22scriptElement12.9 KB
23scriptElement1.5 KB
24scriptElement2.0 KB
25scriptElement2.2 KB
26scriptElement4.3 KB
27scriptElement1.5 KB
28scriptElement1.3 KB
29scriptElement1.3 KB
30scriptElement1.7 KB
31scriptElement1.7 KB
32scriptElement4.2 KB
33scriptElement1.9 KB
34scriptElement120 B
35scriptElement646.8 KB
36scriptElement2.8 KB
37scriptElement1.3 KB
38scriptElement1.5 KB
39scriptElement6.7 KB
40scriptElement2.4 KB
41scriptElement3.0 KB
42scriptElement1.5 KB
43importedModule1.4 KB
44scriptElement2.2 KB
45scriptElement1.6 KB
46scriptElement1.5 KB
47importedModule1.05 MB
48scriptElement22.7 KB
49scriptElement1.5 KB
50scriptElement1.6 KB
51scriptElement1.3 KB
52scriptElement1.6 KB
53scriptElement2.7 KB
54scriptElement3.3 KB
55scriptElement2.3 KB
56scriptElement63.2 KB
57scriptElement1.6 KB
58scriptElement1.3 KB
59importedModule4.0 KB
60scriptElement1.7 KB
61scriptElement2.0 KB
62scriptElement1.5 KB
63scriptElement6.2 KB
64scriptElement13.4 KB
65scriptElement1.8 KB
66scriptElement7.6 KB
67scriptElement1.3 KB
68scriptElement1.4 KB
69scriptElement4.6 KB
70scriptElement2.2 KB
71scriptElement268.8 KB
72scriptElement9.8 KB
73scriptElement2.5 KB
74scriptElement1.5 KB
75scriptElement1.4 KB
76scriptElement1.9 KB
77scriptElement1.7 KB
78scriptElement1.4 KB
79scriptElement1.5 KB
80scriptElement1.4 KB
81scriptElement1.5 KB
82scriptElement1.9 KB
83scriptElement1.8 KB
84scriptElement1.6 KB
85scriptElement2.2 KB
86scriptElement127.5 KB
87scriptElement540 B
88importedModule23.5 KB
89scriptElement50.9 KB
90scriptElement1.8 KB
91scriptElement2.0 KB
92scriptElement3.0 KB
93scriptElement1.3 KB
94scriptElement1.1 KB
95scriptElement1.4 KB
96scriptElement1.4 KB
97scriptElement1.5 KB
98scriptElement1.5 KB
99scriptElement1.4 KB
100scriptElement127.5 KB
101importedModule549.1 KB
102importedModule27.7 KB
103scriptElement2.1 KB
104scriptElement1.0 KB
105scriptElement1.5 KB
106scriptElement803.0 KB
107scriptElement1.3 KB
108scriptElement1.6 KB
109scriptElement2.2 KB
110scriptElement1.8 KB
111scriptElement1.4 KB
112scriptElement3.1 KB
113scriptElement1.5 KB
114scriptElement4.2 KB
115scriptElement1.6 KB
116importedModule1.8 KB
117importedModule1.6 KB
118scriptElement1.3 KB
119scriptElement2.8 KB
120scriptElement1.4 KB
121scriptElement1.4 KB
122scriptElement2.3 KB
123scriptElement1.4 KB
124scriptElement1.5 KB
125scriptElement1.4 KB
126scriptElement8.5 KB
127scriptElement1.6 KB
128scriptElement1.6 KB
129scriptElement29.7 KB
130scriptElement888 B
131scriptElement3.1 KB
132scriptElement1.5 KB
133scriptElement1.4 KB
134scriptElement1.5 KB
135scriptElement1.6 KB
136importedModule1.24 MB
137scriptElement1.8 KB
138scriptElement21.7 KB
139scriptElement1.3 KB
140scriptElement41.9 KB

Console observations

Browser messages in recorded order

3 messages
Browser console observations in recorded order.
#LevelMessageRecorded source
1LOG
true
https://login.live.com/Me.htm?v=3 Line 1 · Column 1681
2LOG
Storage access:false
https://login.live.com/Me.htm?v=3 Line 1 · Column 1955
3DEBUG
Not recorded
https://abs.twimg.com/x-web/x-web/assets/startup-vendor-BC4IyjMz.js Line 5 · Column 9081
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close
LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot