https://forms.cloud.microsoft/e/ZCZaR5gC5z?origin=lprLink
Report summary
Submitted and final observations · captured HTTP activity
- Submitted URL
- https://forms.cloud.microsoft/e/ZCZaR5gC5z?origin=lprLink
- Submitted IP / ASN
150.171.73.13 AS8075 · Microsoft Corporation
- Final URL
- https://login.microsoftonline.com/organizations/oauth2/v2.0/authorize?client_id=c9a559d2-7aab-4f13-a6ed-e7e9c52aec87&redirect_uri=https%3A%2F%2Fforms.cloud.microsoft%2Flanding&state=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&response_type=code&scope=openid%20profile&response_mode=form_post&nonce=639256881482655400.NzBlNjI1NGMtMjMyMC00YjY0LWIyNGEtYTIwMTc3MjkwNGVlNWM2NmE3ZDMtOWE2My00ZjE2LThhMTItNWEyZGFiMTgwN2Nm&msafed=0&x-client-SKU=ID_NET10_0&x-client-ver=8.22.0.0
- Final IP / ASN
20.190.177.19 AS8075 · MICROSOFT-CORP-MSN-AS-BLOCK
Final page
- Page title
- Sign in to your account
- Final DOM MIME
- text/html; charset=utf-8
- Final DOM size
- 91.3 KB (93516 bytes)
Detections
Activity
- HTTP requests
- 20
- Observed hosts
- 4
- Script records
- 163
Estimated HTTP data
- Sent
- ~15.5 KB
- Received
- ~2.52 MB
Page capture
Final browser state
available for this report.
Detection signals
URLQuery findings, Threat Detection Systems, and IDS alerts
Absence of findings is not a clean verdict.
Host infrastructure
Observed hosts are context, not independent maliciousness verdicts
| Host | Rank | Registered | First seen | Last seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
| forms.cloud.microsoft | 22076 | 2015-09-25 | 2023-09-21 | 2026-09-21 | 7.9 KB | 1.08 MB |  23.103.243.67 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. Microsoft HTTPAPI:2.0 Web servers Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security. Microsoft ASP.NET Web frameworks ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages. |
| aadcdn.msftauth.net | 5262 | 2018-10-25 | 2018-11-19 | 2026-09-21 | 5.1 KB | 1.38 MB | 2.22.225.49 | |
| login.microsoftonline.com | 52 | 2002-07-09 | 2017-02-19 | 2026-09-21 | 1.8 KB | 60.5 KB | 20.190.177.19 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| eu-mobile.events.data.microsoft.com | 3935 | 1991-05-02 | 2021-09-30 | 2026-09-17 | 772 B | 611 B |  20.50.201.206 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. Microsoft HTTPAPI:2.0 Web servers Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security. |