Skip to main content
Sandfish

Sign in to your account

https://outlookredirect029838272.realitysedge.sbs/IKyjz…

WACZ
Groupfadbeedb-54f7-4a71-913c-71c600649b67submitted urlMember 1

Case summary

The target, observed result, and important findings.

Status
Current evaluation

Limited evidence: interaction stalled

Findings
8Critical
Impersonated brand
MicrosoftOther cases impersonating Microsoft Search for this value.
Submitted URL
https://login.microsoftonline.com/common/oauth2/v2.0/authorize?state=Y2xpZW50Y2FyZS5mbEBibHVlcGVhcmx2ZXQuY29t&scope=openid&prompt=none&client_id=ddab2a6c-5d0f-4c87-bc90-78cfb125769d&uri=https%3A%2F%2Fdeveloper.salesforce.com%2Fdashboard%2Fsession%2Fuser%2Fverify%2Fstep1&%5Ca3edq%0C%202e4c%0D%0A%93bb66f835%09%8C2979X%BCint%20Builder.Decode%0A%09Context%20%3A%3D%20FlowEmail%20%5B%20OffsetStream%20%3A=%20Token%09Data%20%7C%20Email%7Dfor%20Stream%3A%3DPayloadBuilder%20;%20ValueContext%20%7D%20Trace%0A%09Decode%20.%20SignalVector%20%7B%20Offset%7D%0Aa78c998ef06b569e%97%E9%2A%CBa93627d06a07eba872664f4a92c74eae25f60308d1cad09a16e7beef0b79c03d8bd7528c4a7efc8bdb3fc053evar%2BVector-Secret%250A%2509Decode%2B%253B%2BBuffer%250A%2509Encode%2B-%2BSession%250A%2509Decode%2B%255D%2BPayload%250A%2509Offset%2B%252B%2BBuilder%250A%2509Builder%2B%2528%2BToken%250A%2509Encode%2B.%2BKey%250A%2509Context%2B%257B%2BToken%250A%257D%250Aelse%2BDecode%252CBuilder%250A%2509Stream%2B%253A%253D%2BHeader%250A%2509Vector%2B%2526%2BVector%250A%2509Payload%2B%253D%2BBuilder%250A%2509Value%2B%257C%2BPayload%250A%2509Secret%2B%253D%2BBuffer%250A%257D%250Aswitch%2BPayload%252CSession%250A%2509Payload%2B%2529%2BToken%250A%2509Payload%2B%2526%2BBuilder%250A%2509Data%2B%257C%2BDecode%250A%2509Secret%2B%255B%2BStream%250A%257D%250Astring%2BBody%2529Session%250A%2509Session%2B%2528%2BTrace%250A%2509Buffer%2B%257B%2BSession%250A%2509Vector%2B%252A%2BVector%250A%2509Context%2B%253B%2BToken%250A%2509Value%2B%252A%2BData%250A%2509Encode%2B%253B%2BFlow%250A%2509Trace%2B%2529%2BTrace%250A%257D%250Aint%2BToken%257CSignal%250A%2509Header%2B%255D%2BFlow%250A%2509Body%2B.%2BKey%250A%2509Vector%2B%2528%2BSignal%250A%2509Session%2B%252C%2BData%250A%257D%250Ac2FuZGVlcEBmdmNvbS5hZQ== Search for this value.0
Effective URL
https://outlookredirect029838272.realitysedge.sbs/IKyjz/index.php?key=QTksjJcgRl&[email protected] Search for this value.
Domain registration
microsoftonline.comMore than 90 days oldRegistered 2002-07-09 · Registrar MarkMonitor Inc.
Language
Detecting...
Network
28 requests across 14 hosts
Cookies
50 observed
Infrastructure
Loading...
Behavior
0 recorded events
Interaction
3 actions · 1 submission · stopped: repeated state · download stage: no payload control
  1. 1. clicksucceededVerification gate control: ib4ced6cc cf097652f
  2. 2. fillsucceededpassword | pr | | Password
  3. 3. submitsucceededSign in

Analysis metadata

How and when the analysis ran.

Input kind
url
Execution kind
capture
Duration
43.0s
Navigation
8 navigations
Engine version
0.4.1
Created
2026-11-05 17:21:18Z
Started
2026-11-05 17:21:19Z
Finished
2026-11-05 17:22:02Z
Archive
1.5 MB
Analysis ID
69f874ad-68ab...

Signals by severity

Detected findings grouped by risk

Request activity

Network requests grouped by resource type

Behavior

Recorded actions grouped by type

Network contacts

Requests to the most active hosts

Request ownership

First-party and third-party requests

Response MIME types

Network responses grouped by MIME type