https://forms.cloud.microsoft/r/sLgWBpn9Sc
Report summary
Submitted and final observations · captured HTTP activity
- Submitted URL
- https://forms.cloud.microsoft/r/sLgWBpn9Sc
- Submitted IP / ASN
150.171.73.13 AS8075 · MICROSOFT-CORP-MSN-AS-BLOCK
- Final URL
- https://login.microsoftonline.com/organizations/oauth2/v2.0/authorize?client_id=c9a559d2-7aab-4f13-a6ed-e7e9c52aec87&redirect_uri=https%3A%2F%2Fforms.cloud.microsoft%2Flanding&state=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&response_type=code&scope=openid%20profile&response_mode=form_post&nonce=639239206458928433.ZWUzYmYxZDMtMGU0Ny00MmFkLThlY2EtYTEyYzc4Njg3YTEzZWYzNmM0MTUtMmRkNi00MjA5LWFhNGUtNWJkZWE5OGU5NWU5&msafed=0&x-client-SKU=ID_NET10_0&x-client-ver=8.19.2.0
- Final IP / ASN
20.190.147.1 AS8075 · MICROSOFT-CORP-MSN-AS-BLOCK
Final page
- Page title
- Sign in to your account
- Final DOM MIME
- text/html; charset=utf-8
- Final DOM size
- 89.6 KB (91776 bytes)
Detections
Activity
- HTTP requests
- 20
- Observed hosts
- 4
- Script records
- 162
Estimated HTTP data
- Sent
- ~15.3 KB
- Received
- ~2.51 MB
Page capture
Final browser state
available for this report.
Detection signals
URLQuery findings, Threat Detection Systems, and IDS alerts
Absence of findings is not a clean verdict.
Host infrastructure
Observed hosts are context, not independent maliciousness verdicts
| Host | Rank | Registered | First seen | Last seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
| aadcdn.msftauth.net | 5262 | 2018-10-25 | 2018-11-19 | 2026-08-31 | 5.1 KB | 1.37 MB | 2.22.225.35 | |
| login.microsoftonline.com | 52 | 2002-07-09 | 2017-02-19 | 2026-08-31 | 1.8 KB | 58.6 KB | 20.190.147.1 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| eu-mobile.events.data.microsoft.com | 3935 | 1991-05-02 | 2021-09-30 | 2026-08-27 | 772 B | 611 B |  20.50.201.200 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. Microsoft HTTPAPI:2.0 Web servers Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security. |
| forms.cloud.microsoft | 22076 | 2015-09-25 | 2023-09-21 | 2026-08-28 | 7.6 KB | 1.08 MB | 150.171.73.13 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. Microsoft ASP.NET Web frameworks ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages. |