https://login.microsoftonline.com/common/oauth2/v2.0/authorize?state=YmlsbGllam8uc2Nod2llcmpvaGFubkBjb25zb2xpZGF0ZWQuY29t&scope=openid&prompt=none&client_id=96ad33d7-f814-4782-a7bc-73a82b28533b&uri=https%253A%252F%252Fdeveloper.salesforce.com%252Fdashboard%252Fsession%252Fuser%252Fverify%252Fstep1&%255Ca3edq%250C+2e4c%250D%250A%2593bb66f835%2509%258C2979X%25BCint+Builder.Decode%250A%2509Context+%253A%253D+FlowEmail+%255B+OffsetStream+%253A=%2520Token%2509Data%2520%257C%2520Email%257Dfor%2520Stream%253A%253DPayloadBuilder+;+ValueContext+%257D+Trace%250A%2509Decode+.+SignalVector+%257B%2520Offset%257D%250Aa78c998ef06b569e%2597%25E9%252A%25CBa93627d06a07eba872664f4a92c74eae25f60308d1cad09a16e7beef0b79c03d8bd7528c4a7efc8bdb3fc053evar%252BVector-Secret%25250A%252509Decode%252B%25253B%252BBuffer%25250A%252509Encode%252B-%252BSession%25250A%252509Decode%252B%25255D%252BPayload%25250A%252509Offset%252B%25252B%252BBuilder%25250A%252509Builder%252B%252528%252BToken%25250A%252509Encode%252B.%252BKey%25250A%252509Context%252B%25257B%252BToken%25250A%25257D%25250Aelse%252BDecode%25252CBuilder%25250A%252509Stream%252B%25253A%25253D%252BHeader%25250A%252509Vector%252B%252526%252BVector%25250A%252509Payload%252B%25253D%252BBuilder%25250A%252509Value%252B%25257C%252BPayload%25250A%252509Secret%252B%25253D%252BBuffer%25250A%25257D%25250Aswitch%252BPayload%25252CSession%25250A%252509Payload%252B%252529%252BToken%25250A%252509Payload%252B%252526%252BBuilder%25250A%252509Data%252B%25257C%252BDecode%25250A%252509Secret%252B%25255B%252BStream%25250A%25257D%25250Astring%252BBody%252529Session%25250A%252509Session%252B%252528%252BTrace%25250A%252509Buffer%252B%25257B%252BSession%25250A%252509Vector%252B%25252A%252BVector%25250A%252509Context%252B%25253B%252BToken%25250A%252509Value%252B%25252A%252BData%25250A%252509Encode%252B%25253B%252BFlow%25250A%252509Trace%252B%252529%252BTrace%25250A%25257D%25250Aint%252BToken%25257CSignal%25250A%252509Header%252B%25255D%252BFlow%25250A%252509Body%252B.%252BKey%25250A%252509Vector%252B%252528%252BSignal%25250A%252509Session%252B%25252C%252BData%25250A%25257D%25250Ac2FuZGVlcEBmdmNvbS5hZQ
2 detections · review the detection signals
Host summary
Observed host history, traffic, and infrastructure
| Host | Rank | Registered | First seen | Last seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
| www.microsoft.com | 812 | 1991-05-02 | 2012-05-21 | 2026-09-14 | 2.3 KB | 336.3 KB |  2.18.174.85 | Azure Front Door Load balancers Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications. Azure PaaS Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers. HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| m365.cloud.microsoft | 3263 | 2015-09-25 | 2022-12-01 | 2026-09-14 | 541 B | 309.5 KB |  13.107.6.156 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. Azure Monitor Analytics, Performance Azure Monitor collects monitoring telemetry from a variety of on-premises and Azure sources. Azure Monitor helps you maximise the availability and performance of your applications and services. Azure PaaS Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers. |
| 619noncritical.nobleridge.com.de 8 alerts | N/A | N/A | 2026-09-17 | 2026-09-17 | 2.5 KB | 10.4 KB |  104.21.37.33 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| login.microsoftonline.com | 52 | 2002-07-09 | 2017-02-19 | 2026-09-14 | 2.5 KB | 3.0 KB |  20.190.181.3 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| res.cdn.office.net | 686 | 1994-11-14 | 2021-09-30 | 2026-09-17 | 17.3 KB | 3.40 MB | 23.214.96.134 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| www.clarity.ms | 4064 | 2017-04-03 | 2018-08-22 | 2026-09-11 | 464 B | 0 B | Not recorded | |
| dkcp.ao | N/A | N/A | 2026-09-17 | 2026-09-17 | 1.2 KB | 382 B |  95.216.172.45 | PHP:8.1.34 Programming languages PHP is a general-purpose scripting language used for web development. |
| c.s-microsoft.com | 46140 | 2012-02-07 | 2013-11-06 | 2026-09-14 | 3.2 KB | 184.9 KB | 2.18.174.85 | |
| mem.gfx.ms | 38230 | 2012-09-07 | 2015-02-13 | 2026-09-15 | 489 B | 0 B | Not recorded | |
| uhf.microsoft.com | 46576 | 1991-05-02 | 2017-02-01 | 2026-09-17 | 564 B | 4.4 KB | 23.49.24.19 | Azure Front Door Load balancers Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications. Azure PaaS Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers. |
| wcpstatic.microsoft.com | 37815 | 1991-05-02 | 2020-09-15 | 2026-09-15 | 485 B | 0 B | Not recorded | |
| www.office.com | 10848 | 1999-04-20 | 2014-02-12 | 2026-09-15 | 535 B | 333 B | 13.107.6.156 |
Observed certificates
Distinct fingerprints recorded in HTTP transactions
| Subject | Issuer | Valid from | Valid until | Fingerprint | Hosts |
|---|---|---|---|---|---|
| *.public.cdn.office.net | Microsoft Corporation · Microsoft TLS G2 ECC CA OCSP 02 | Thu, 10 Sep 2026 03:26:09 GMT | Sat, 27 Mar 2027 03:26:09 GMT | SHA2566B:68:77:DF:35:F7:F3:9E:AA:39:2D:EE:D1:04:30:B9:9D:08:48:5A:FE:F5:87:A7:C3:E6:CC:0D:46:8E:54:32 | res.cdn.office.net |
| m365.cloud.microsoft | Microsoft Corporation · Microsoft TLS G2 RSA CA OCSP 16 | Fri, 28 Aug 2026 14:46:03 GMT | Wed, 24 Feb 2027 14:46:03 GMT | SHA25610:A4:FE:6A:AA:69:FA:2E:E2:10:C4:2D:EF:3D:A1:B6:EE:44:5F:C6:A7:16:B2:47:BB:5C:8F:B9:00:23:0B:5F | www.office.com m365.cloud.microsoft |
| www.microsoft.com | Microsoft Corporation · Microsoft TLS G2 RSA CA OCSP 04 | Thu, 22 Jan 2026 19:55:21 GMT | Sun, 17 Jan 2027 19:55:21 GMT | SHA2569F:17:B5:48:F7:D2:4F:30:9D:BC:AA:B5:71:57:6C:0C:A7:3B:80:55:9C:E6:9F:27:FE:29:5F:64:08:CC:57:BF | www.microsoft.com c.s-microsoft.com |
| nobleridge.com.de | Let's Encrypt · YE1 | Fri, 11 Sep 2026 09:22:44 GMT | Thu, 10 Dec 2026 09:22:43 GMT | SHA256C7:9A:26:C0:3E:9C:49:2E:61:3D:24:BE:E2:2E:A8:11:DA:D2:AC:7F:E8:87:8E:1E:85:A0:1A:E9:F9:AB:AC:CC | 619noncritical.nobleridge.com.de |
| unistore.www.microsoft.com | Microsoft Corporation · Microsoft TLS G2 RSA CA OCSP 10 | Thu, 22 Jan 2026 20:16:44 GMT | Sun, 17 Jan 2027 20:16:44 GMT | SHA25600:DD:15:88:01:D2:B9:31:E6:BF:76:E1:9B:4E:AC:87:05:AC:47:A0:F0:F6:19:A1:40:67:E8:49:42:74:6E:4D | uhf.microsoft.com |