http://fallcan.net
Report summary
Submitted and final observations · captured HTTP activity
- Submitted URL
- http://fallcan.net
- Submitted IP / ASN
104.21.44.192 AS13335 · Cloudflare, Inc.
- Final URL
- https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=618dd325-23f6-4b6f-8380-4df78026e39b&redirect_uri=https%3A%2F%2Fadmin.cloud.microsoft%2Flanding&response_type=code%20id_token&scope=openid%20profile&response_mode=form_post&nonce=639266515994848341.NzY3MzY5YzUtNTZmNS00OWE3LWFlMmEtNTdmOWY5ZjIzMmM3YTI5YmY3YjAtMmJiYy00MzAzLTllNTItMDUzYzdhY2FlNWZm&ui_locales=&mkt=&claims=%7B%22id_token%22%3A%7B%22xms_cc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&state=gGzSKVv_Fia7P5Ij-yWNrbJjTIa0ZEsTd15C5RZEJ_TkZRaM1b_jPoNUJ9esWSh8nWX0xFlSGCrqzpv-1eMsfUPgfWQx1FkT7V6rcYA1HEBV9vORpyfiWGa0q2ilQM8uzu69-fvdxuqZEPhpUgndjt2yiNoo6rXUeC4XGq7RjjCfgHJDv7_hJCCqOFW9o0B93GUXFZ0Okagdy-AFYVrszAMJicyGjZK05LukRtRrIIJyCnOZ0WzrLjmTdoJ_7B9AU48guD00tSGJ1ohqrfNkk4ZY-053SEIwHUu8dwdq6sVe90CvXRUawogWnD8rI4DuvviknytX5BU-rMlmjxhVeASpvWHrRrtLKLnaGLnE_ujpMOBlIdjAcoIOYtLpyIroKwZIHyZlju_LeNhww6Cfk2NNQrxdwZraCoMwXQ5gBmk&x-client-SKU=ID_NET8_0&x-client-ver=8.17.0.0
- Final IP / ASN
20.231.128.66 AS8075 · MICROSOFT-CORP-MSN-AS-BLOCK
Final page
- Page title
- Sign in to your account
- Final DOM MIME
- text/html; charset=utf-8
- Final DOM size
- 96.0 KB (98256 bytes)
Detections
Activity
- HTTP requests
- 22
- Observed hosts
- 8
- Script records
- 179
Estimated HTTP data
- Sent
- ~19.3 KB
- Received
- ~1.48 MB
Page capture
Final browser state
available for this report.
Detection signals
URLQuery findings, Threat Detection Systems, and IDS alerts
Absence of findings is not a clean verdict.
Host infrastructure
Observed hosts are context, not independent maliciousness verdicts
| Host | Rank | Registered | First seen | Last seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
| eu-mobile.events.data.microsoft.com | 3935 | 1991-05-02 | 2021-09-30 | 2026-10-01 | 772 B | 611 B |  13.69.116.107 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. Microsoft HTTPAPI:2.0 Web servers Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security. |
| csp.microsoft.com | 4049 | 1991-05-02 | 2021-03-09 | 2026-09-25 | 537 B | 0 B | Not recorded | |
| admin.cloud.microsoft | 212344 | 2015-09-25 | 2024-04-08 | 2026-09-10 | 1.0 KB | 3.2 KB |  150.171.73.13 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| aadcdn.msftauth.net | 5262 | 2018-10-25 | 2018-11-19 | 2026-09-28 | 6.9 KB | 1.40 MB |  2.22.225.18 | |
| fallcan.net | N/A | 2026-07-04 | 2026-10-03 | 2026-10-03 | 480 B | 510 B | 104.21.44.192 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. |
| login.live.com | 179 | 1994-12-28 | 2012-05-21 | 2026-10-02 | 571 B | 4.1 KB | 20.190.147.10 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| admin.microsoft365.com | 659952 | 2010-04-08 | 2018-03-02 | 2026-09-05 | 491 B | 303 B | 150.171.73.13 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| login.microsoftonline.com | 52 | 2002-07-09 | 2017-02-19 | 2026-09-28 | 8.4 KB | 66.6 KB | 20.231.128.66 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |