https://forms.office.com/Pages/DesignPage.aspx#FormId=mhlclKKDgE6fjFqRvldS3bSXFPfMXb9Doso9SzGLwiJUNTlNWFRTRDNTM1Q0M1pXUEdFNlo2WkFPRy4u&Analysis=true&origin=EmailNotification
Report summary
Submitted and final observations · captured HTTP activity
- Submitted URL
- https://forms.office.com/Pages/DesignPage.aspx#FormId=mhlclKKDgE6fjFqRvldS3bSXFPfMXb9Doso9SzGLwiJUNTlNWFRTRDNTM1Q0M1pXUEdFNlo2WkFPRy4u&Analysis=true&origin=EmailNotification
- Submitted IP / ASN
150.171.73.13 AS8075 · MICROSOFT-CORP-MSN-AS-BLOCK
- Final URL
- https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=c9a559d2-7aab-4f13-a6ed-e7e9c52aec87&redirect_uri=https%3A%2F%2Fforms.cloud.microsoft%2Flanding&state=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&response_type=code&scope=openid%20profile&response_mode=form_post&nonce=639240862262522045.YzBmMzU2YTMtYzlkMC00MmFiLTkwZTAtOTYxMGY3Y2VmYmI5ZDVlZWM1ZWUtOWVjYy00ZDVlLTg0MzEtMmFiYzA5NjBmOGNl&prompt=select_account&x-client-SKU=ID_NET10_0&x-client-ver=8.19.2.0
- Final IP / ASN
40.126.53.19 AS8075 · MICROSOFT-CORP-MSN-AS-BLOCK
Final page
- Page title
- Sign in to your account
- Final DOM MIME
- text/plain; charset=utf-8
- Final DOM size
- 0 B (0 bytes)
Detections
Activity
- HTTP requests
- 50
- Observed hosts
- 9
- Script records
- 214
Estimated HTTP data
- Sent
- ~40.9 KB
- Received
- ~3.23 MB
Page capture
Final browser state
available for this report.
Detection signals
URLQuery findings, Threat Detection Systems, and IDS alerts
Absence of findings is not a clean verdict.
Host infrastructure
Observed hosts are context, not independent maliciousness verdicts
| Host | Rank | Registered | First seen | Last seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
| forms.office.com | 5422 | 1999-04-20 | 2017-01-30 | 2026-09-02 | 506 B | 629 B | 150.171.73.13 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| login.microsoftonline.com | 52 | 2002-07-09 | 2017-02-19 | 2026-08-31 | 2.4 KB | 72.2 KB | 20.190.181.1 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| forms.cloud.microsoft | 22076 | 2015-09-25 | 2023-09-21 | 2026-08-28 | 19.3 KB | 1.70 MB | 150.171.74.13 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. Microsoft ASP.NET Web frameworks ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages. jQuery JavaScript libraries jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax. Underscore.js JavaScript libraries Underscore.js is a JavaScript library which provides utility functions for common programming tasks. It is comparable to features provided by Prototype.js and the Ruby language, but opts for a functional programming design instead of extending object prototypes. |
| eu-mobile.events.data.microsoft.com | 3935 | 1991-05-02 | 2021-09-30 | 2026-09-03 | 3.9 KB | 2.7 KB |  4.207.44.67 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. Microsoft HTTPAPI:2.0 Web servers Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security. |
| login.live.com | 179 | 1994-12-28 | 2012-05-21 | 2026-09-03 | 1.3 KB | 18.8 KB |  20.190.147.11 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| aadcdn.msauth.net | 5248 | 2018-10-25 | 2018-11-19 | 2026-09-02 | 6.8 KB | 1.40 MB | 13.107.246.53 | Azure Front Door Load balancers Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications. Azure PaaS Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers. |
| res-1.cdn.office.net | 990 | 1994-11-14 | 2020-12-08 | 2026-09-02 | 565 B | 36.8 KB |  23.36.76.131 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| static2.sharepointonline.com | 8499 | 2005-03-21 | 2017-01-29 | 2026-08-28 | 583 B | 253 B | 23.49.31.131 | |
| logincdn.msauth.net | 23083 | 2018-10-25 | 2019-04-23 | 2026-09-02 | 500 B | 0 B | Not recorded |