urlquery.net
Investigate/Report/338564f6-df97-4d28-a7c5-05f7f62a670e
WEBSITE ANALYSIS REPORT

https://forms.cloud.microsoft/Pages/ShareFormPage.aspx?id=X5s1nYZsqkqIsMlCe-Q43k1k_-4IuzdIpK_95bZv9EtUMzg3RURCRzczR0Q1Q1VCUExGMzU1MEFFQiQlQCNjPTEu&sharetoken=fHG9c8oZj312nuJsKTaN

public
Report tags
Submit tags
Request review

Domain graph

Hostnames and connections captured in this scan

CallsLoads fromRedirects toEmbeds
Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds
Reset
Captured HTTP requests; click any summary row or use its hostname button to expand transaction details.
Timestamp (UTC)MethodStatusHost / pathTypeSizeDurationSignals
GET200document41.5 KB772 ms—

Transaction #11

Request / response

URL

Navigation request GET HTTPS
https://forms.cloud.microsoft/Pages/ShareFormPage.aspx?id=X5s1nYZsqkqIsMlCe-Q43k1k_-4IuzdIpK_95bZv9EtUMzg3RURCRzczR0Q1Q1VCUExGMzU1MEFFQiQlQCNjPTEu&sharetoken=fHG9c8oZj312nuJsKTaN

IP / ASN

United States 150.171.74.13

AS8075 · MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
Not recorded

Resource information

File type
HTML document, ASCII text, with very long lines (36777), with CRLF line terminators
MIME type
text/html; charset=utf-8
First seen (UTC)
21 Sep 2026 · 10:45:14.445 UTC
Last seen (UTC)
21 Sep 2026 · 10:45:14.445 UTC
Times seen
1
Size
41.5 KB (42496 bytes)
MD5
a5b44ceea9ad758bfb77d5b29da2555e
SHA1
d53de25e7755a2a9137c8f1c92b86f327fe82954
SHA256
14aa4801089659363ebc03aa06ff9d3aabb9c60e54badd8c958a02c061a5a7fc

Certificate information

Issuer
Microsoft Corporation · Microsoft TLS G2 RSA CA OCSP 02
Subject
forms.cloud.microsoft
Protocol / cipher
TLSv1.3 · TLS_AES_256_GCM_SHA384
SHA1 fingerprint
4B:63:57:71:1F:7F:FA:D4:DD:89:34:76:97:DF:44:36:38:01:58:A6
Valid from
Fri, 28 Aug 2026 10:46:15 GMT
Valid until
Wed, 24 Feb 2027 10:46:15 GMT

Technology fingerprints

  • HSTS (Security)

HTTP headers

Request headers

GET /Pages/ShareFormPage.aspx?id=X5s1nYZsqkqIsMlCe-Q43k1k_-4IuzdIpK_95bZv9EtUMzg3RURCRzczR0Q1Q1VCUExGMzU1MEFFQiQlQCNjPTEu&sharetoken=fHG9c8oZj312nuJsKTaN HTTP/1.1
Host: forms.cloud.microsoft
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-GPC: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Priority: u=0, i
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 200 
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
content-type: text/html; charset=utf-8
content-encoding: br
expires: 0
vary: Accept-Encoding
set-cookie: FormsWebSessionId=54bbac78-6d24-4c2e-8555-e221d6561a8c; max-age=2592000; path=/; secure; samesite=none; httponly
MUID=15E65C8119AD6B2238FA4B5A26CB692F; max-age=33696000; path=/; secure; samesite=none
__RequestVerificationToken=_snCdTVxFbdPWeq103LBEZ1uRuaAsYa_6tUQFqbvPak-EFe5TxMuWQDJ0i6_zPopCFi8MA5MuIUe99jkjbItin-ss2vbafINFewDFLV9aA81; path=/; secure; samesite=none; httponly
strict-transport-security: max-age=2592000; includeSubDomains
x-routingofficecluster: frc-frcprod2.forms.osi.office.net
x-routingofficefe: office-forms-singlebox-867df5d6cb-kmf28
x-routingofficeversion: 16.0.20514.42050
x-routingsessionid: cd91c28e-f702-4201-b712-bbc7664754e8
x-routingcorrelationid: 8a9040fd-1616-4d27-bc50-c01d29d19881
x-correlationid: 8a9040fd-1616-4d27-bc50-c01d29d19881
x-officecluster: frc-frcprod1.forms.osi.office.net
x-officefe: office-forms-singlebox-58b4c7b98d-pfxsb
x-officeversion: 16.0.20514.42050
x-usersessionid: cd91c28e-f702-4201-b712-bbc7664754e8
report-to: { "group": "endpoint-1", "max_age": 108864000, "endpoints": [ { "url": "https://cspv2.core.microsoft/report/d9debafb-bbac-42b5-8e6e-df1f1dd85343/Forms-PROD" }] }
content-security-policy: object-src 'none';script-src 'nonce-a4117d3b-f485-4d54-997b-488f622d92a3' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https:;base-uri 'none';require-trusted-types-for 'script'; report-uri https://cspv2.core.microsoft/report/d9debafb-bbac-42b5-8e6e-df1f1dd85343/Forms-PROD;report-to endpoint-1;
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: B4588E23439F4F468F1C85FD10E547FA Ref B: OSL231050213054 Ref C: 2026-09-21T10:44:39Z
date: Mon, 21 Sep 2026 10:44:38 GMT
X-Firefox-Spdy: h2
GET200stylesheet100.8 KB7 ms—
GET200script499.4 KB6 ms—
GET200script472.8 KB6 ms—
GET200script5.4 KB17 ms—
GET200xhr9.1 KB87 ms—
GET200img7.7 KB5 ms—
GET200xhr65 B32 ms—
GET200script36.6 KB5 ms—
GET200script150.9 KB5 ms—
GET200script29.2 KB5 ms—
GET200script14.4 KB4 ms—
GET200script328.8 KB6 ms—
GET200img110.8 KB2629 ms—
GET200script868 B5 ms—
GET200script17.4 KB5 ms—
GETNo responseimg0 B0 ms—
GET200img258 B4 ms—
GET200img5.8 KB5 ms—
GET200fetch614 B67 ms—
OPTIONS204fetch0 B437 ms—
OPTIONS200xhr0 B2743 ms—
POST200xhr24 B30 ms—
OPTIONS200xhr0 B29 ms—
24 visible / 24 matching / 24 captured
First
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close
LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot