Supply Chain Attack

We had a simple one yesterday and I’m investigating and reporting for stakeholders. I’ve tried a few urlscanners; they showed the domain clean. It’s xoxtds.lovelycarrot.com.
Any recommendations on how to safely explore what the delivery and payload is and how it works? Much appreciated.

attack com cybersecurity delivery domain payload recommendations reporting simple stakeholders supply supply chain supply chain attack