https://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgoodwinlaw.viglobalcloud.com%2FviUtilize%2Flogin.aspx%3FUtlID%3D2%26Open%3DUpdateForm%26ID%3D191ec009-2b63-45b7-9b43-0b9a2361f614&data=05%7C02%7CELiu%40goodwinlaw.com%7C020ae908b5c14510e5b608df30031bbb%7C8bf42f52d7ea4174b5e02e86079c56b8%7C1%7C0%7C639282462089780196%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=2PK5gi8cndgoC7RDA8X9wLdB9duOrK819NxOcXHBjkU%3D&reserved=0
Report summary
Submitted and final observations · captured HTTP activity
- Submitted URL
- https://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgoodwinlaw.viglobalcloud.com%2FviUtilize%2Flogin.aspx%3FUtlID%3D2%26Open%3DUpdateForm%26ID%3D191ec009-2b63-45b7-9b43-0b9a2361f614&data=05%7C02%7CELiu%40goodwinlaw.com%7C020ae908b5c14510e5b608df30031bbb%7C8bf42f52d7ea4174b5e02e86079c56b8%7C1%7C0%7C639282462089780196%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=2PK5gi8cndgoC7RDA8X9wLdB9duOrK819NxOcXHBjkU%3D&reserved=0
- Submitted IP / ASN
52.102.115.70 AS8075 · Microsoft Corporation
- Final URL
- https://login.microsoftonline.com/8bf42f52-d7ea-4174-b5e0-2e86079c56b8/saml2?SAMLRequest=jZJPj9MwEMW%2FSuS782%2BTNLHaSqUVotIC0aZw4IIcZ9K15NjB47TLt8dJd2E5sOLo0bx5vzfjNfJBjWw3uUf9AD8mQBccDxvyPa8gr%2B6KkiZdy2mWpXe0bXlB47zqCpH1RdnHJPgKFqXRG5KG%2FnVEnOCo0XHtfClOC5rENE1PccGSkmVpWJXfSHDwJlJztwgfnRuRRZEyZ6nDQQpr0PTOaCU1hMIMUdn2WdrnKe1W4EmSVUbbHPxcKIt4VYm8aMtojpGS4L2xApYwG9JzhTBD1RxRXuB3pbbGGWHUO6k7qc8bMlnNDEeJTPMBkDnBmt3He%2BZDsfbWhOzD6VTT%2BnNzIsEOEeyMvzcapwFsA%2FYiBXx5uP8T6GxMd5Va8Wt4kWdlWq6EMlO3ZGo87rMo2u2bkOP4RIKnQWlky0XehhqfE5Dteu5my%2BLtK%2F3bcv7CT7b%2FQ7uOXpncHEf2yU89HmqjpPg5r33g7t%2BmSZgsFdnRfmllk8YRhOwldH6fSpnr3gJ3%2FkjOTv5G0fbm%2BvfX3P4C&RelayState=%2FviUtilize%2Flogin.aspx%3FUtlID%3D2%26Open%3DUpdateForm%26ID%3D191ec009-2b63-45b7-9b43-0b9a2361f614&SigAlg=http%3A%2F%2Fwww.w3.org%2F2001%2F04%2Fxmldsig-more%23rsa-sha256&Signature=X1U4jt5ZADAy8zxkh6Ttlim7cJ9jB%2BUI5FmuwmcTinPd9CKm7C6pL7armAUa6%2BTdWsO7i7eFECShHKwwGGaw47A%2BXOkXN%2BdbuOlCIpOUy9U4F2iHNAYHvOGCMSEDHaxTdmXOdwQKBNv1yAp1yOCo1c9Ut5FcNeM3WWsBhXxsIk1lJceIzFdG3OfKhHTKkLjUbg5e%2Bm6u34SKrhFLKkJvjGV1mgnvQcKR57ZZ2o9SyU210f6Y5jCtgeZ5%2BqSH08CLEk%2FQRTRaeII6Sk73v85raAJBgaNK0ZLBRDoreZif49sSS0r2IBPRT%2B54iCLCXJUkKJ1xauXM22eew%2BsyptIlGw%3D%3D
- Final IP / ASN
40.126.53.7 AS8075 · MICROSOFT-CORP-MSN-AS-BLOCK
Final page
- Page title
- Sign in to your account
- Final DOM MIME
- text/html; charset=utf-8
- Final DOM size
- 47.4 KB (48543 bytes)
Detections
Activity
- HTTP requests
- 8
- Observed hosts
- 4
- Script records
- 0
Estimated HTTP data
- Sent
- ~6.3 KB
- Received
- ~58.3 KB
Page capture
Final browser state
available for this report.
Detection signals
URLQuery findings, Threat Detection Systems, and IDS alerts
Absence of findings is not a clean verdict.
Host infrastructure
Observed hosts are context, not independent maliciousness verdicts
| Host | Rank | Registered | First seen | Last seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
| login.microsoftonline.com | 52 | 2002-07-09 | 2017-02-19 | 2026-10-19 | 1.6 KB | 52.9 KB | 40.126.53.7 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| aadcdn.msauth.net | 5248 | 2018-10-25 | 2018-11-19 | 2026-10-22 | 2.2 KB | 0 B | Not recorded | |
| nam12.safelinks.protection.outlook.com | 20260 | 1994-08-18 | 2019-08-15 | 2026-10-15 | 985 B | 1.1 KB |  52.102.116.84 | Microsoft HTTPAPI:2.0 Web servers Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security. Microsoft ASP.NET:4.0.30319 Web frameworks ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages. HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| goodwinlaw.viglobalcloud.com | N/A | 2017-11-29 | 2026-10-22 | 2026-10-22 | 1.5 KB | 4.3 KB |  104.18.3.211 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. Cloudflare Bot Management Security Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots. Microsoft ASP.NET Web frameworks ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages. |