http://forms.cloud.microsoft/e/81K4u5MtLs
2 detections · review the detection signals
Host summary
Observed host history, traffic, and infrastructure
| Host | Rank | Registered | First seen | Last seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
| www.evernote.com | 72408 | 2000-01-20 | 2014-10-18 | 2026-09-15 | 510 B | 34.4 KB |  199.232.215.52 | Varnish Caching Varnish is a reverse caching proxy. HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| eu-mobile.events.data.microsoft.com | 3935 | 1991-05-02 | 2021-09-30 | 2026-09-17 | 1.6 KB | 433 B | Not recorded | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. Microsoft HTTPAPI:2.0 Web servers Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security. |
| api.evernote.com | 150473 | 2000-01-20 | 2021-01-14 | 2026-09-15 | 1.2 KB | 1.6 KB | 199.232.215.52 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| fonts.gstatic.com | N/A | 2008-02-11 | 2014-04-02 | 2026-09-20 | 1.1 KB | 96.4 KB | 142.250.178.99 | |
| share.evernote.com 1 alerts | N/A | 2000-01-20 | 2024-09-05 | 2026-09-18 | 554 B | 367 B | 199.232.211.52 | Varnish Caching Varnish is a reverse caching proxy. |
| moripartnerch-365-mso-drive-auth9287364.cloud-storage-id0384723.workers.dev 8 alerts | N/A | N/A | 2026-09-21 | 2026-09-21 | 4.7 KB | 8.7 KB |  172.67.175.49 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. |
| odc.officeapps.live.com | 675 | 1994-12-28 | 2014-11-11 | 2026-09-21 | 1.4 KB | 4.6 KB |  52.110.19.75 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. Microsoft ASP.NET:4.0.30319 Web frameworks ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages. Microsoft HTTPAPI:2.0 Web servers Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security. |
| fonts.googleapis.com | 313 | 2005-01-25 | 2012-05-23 | 2026-09-20 | 1.1 KB | 26.7 KB | 142.250.178.42 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| moripartner.ch | N/A | N/A | 2026-09-21 | 2026-09-21 | 528 B | 61.2 KB | 162.241.244.121 | Endurance Page Cache WordPress plugins, Caching Endurance Page Cache adds basic file-based caching to WordPress. Apache HTTP Server Web servers Apache is a free and open-source cross-platform web server software. Bluehost Hosting Bluehost is a large web host known for its WordPress expertise, variety of “one-stop-shop” services, and bargain prices. |
| accounts.evernote.com | 66846 | 2000-01-20 | 2020-06-17 | 2026-09-18 | 1.6 KB | 6.7 KB | 199.232.215.52 | hCaptcha Security hCaptcha is an anti-bot solution that protects user privacy and rewards websites. HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| rte.svc.www.evernote.com | 191431 | 2000-01-20 | 2023-04-13 | 2026-09-15 | 2.0 KB | 471 B | 34.36.31.173 | Google Cloud CDN CDN Cloud CDN uses Google's global edge network to serve content closer to users. Google Cloud IaaS Google Cloud is a suite of cloud computing services. WebSocket Miscellaneous WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers. |
| forms.cloud.microsoft | 22076 | 2015-09-25 | 2023-09-21 | 2026-09-21 | 12.6 KB | 1.62 MB | 150.171.74.13 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| lite.evernote.com | 938835 | 2000-01-20 | 2024-10-18 | 2026-09-15 | 5.3 KB | 13.58 MB | 199.232.211.52 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| api.pico.bendingspoonsapps.com | 156908 | 2017-08-08 | 2019-04-30 | 2026-09-15 | 2.4 KB | 1.5 KB | Not recorded | Google Cloud CDN CDN Cloud CDN uses Google's global edge network to serve content closer to users. Google Cloud IaaS Google Cloud is a suite of cloud computing services. Envoy Reverse proxies Envoy is an open-source edge and service proxy, designed for cloud-native applications. |
Observed certificates
Distinct fingerprints recorded in HTTP transactions
| Subject | Issuer | Valid from | Valid until | Fingerprint | Hosts |
|---|---|---|---|---|---|
| forms.cloud.microsoft | Microsoft Corporation · Microsoft TLS G2 RSA CA OCSP 02 | Fri, 28 Aug 2026 10:46:15 GMT | Wed, 24 Feb 2027 10:46:15 GMT | SHA256EC:3E:2F:B6:7A:84:66:13:B4:1E:95:54:7B:88:0B:7F:E4:75:33:FB:4A:07:80:27:D7:A2:30:CD:13:F9:42:8A | forms.cloud.microsoft |
| lite.evernote.com | Certainly · Certainly Intermediate R1 | Mon, 07 Sep 2026 23:52:06 GMT | Wed, 07 Oct 2026 23:52:05 GMT | SHA256F8:91:9C:DB:50:0D:11:B9:27:06:BC:93:3C:BB:F4:1A:7A:8C:AE:CA:80:90:DD:73:F9:1A:A2:9C:2C:E5:62:24 | lite.evernote.com |
| api.pico.bendingspoonsapps.com | Google Trust Services · WR3 | Sun, 02 Aug 2026 07:41:28 GMT | Sat, 31 Oct 2026 08:37:23 GMT | SHA2567C:96:A6:FE:84:6D:C0:83:2A:7F:57:CF:05:9F:8A:F0:62:FA:59:FA:C5:F3:DA:02:26:12:96:BD:B1:63:08:6E | api.pico.bendingspoonsapps.com |
| metrics.evernote.com | Certainly · Certainly Intermediate R1 | Sun, 20 Sep 2026 21:47:16 GMT | Tue, 20 Oct 2026 21:47:15 GMT | SHA256FC:B8:72:CE:63:BB:1E:9A:CD:97:77:28:3F:74:F6:1A:90:70:87:50:F8:AD:FA:17:3B:98:3E:84:4A:FE:AA:B5 | www.evernote.com |
| api.evernote.com | Certainly · Certainly Intermediate R1 | Sun, 06 Sep 2026 16:18:09 GMT | Tue, 06 Oct 2026 16:18:08 GMT | SHA256FA:B8:AA:AD:8A:BB:EC:88:C8:3C:6C:E0:7B:0C:02:2C:C0:1B:BC:6A:E0:E1:8A:F9:15:36:2B:4E:7D:9E:C6:1D | api.evernote.com |
| cloud-storage-id0384723.workers.dev | Let's Encrypt · YE2 | Mon, 14 Sep 2026 09:41:09 GMT | Sun, 13 Dec 2026 09:41:08 GMT | SHA25686:9C:E5:5A:83:8D:E0:DF:04:E2:DD:4D:4D:5E:4B:59:C5:C5:AC:82:C3:F2:74:15:DC:8C:4E:2E:B6:80:D9:A1 | moripartnerch-365-mso-drive-auth9287364.cloud-storage-id0384723.workers.dev |
| odc.officeapps.live.com | Microsoft Corporation · Microsoft TLS G2 RSA CA OCSP 04 | Sat, 18 Jul 2026 18:14:50 GMT | Mon, 01 Feb 2027 18:14:50 GMT | SHA256ED:6A:B8:08:58:1B:5C:91:E3:E7:BD:C0:08:95:AE:50:0F:04:C6:9D:E6:55:8D:F1:93:FA:86:06:2C:48:3F:E4 | odc.officeapps.live.com |
| upload.video.google.com | Google Trust Services · WE2 | Fri, 04 Sep 2026 08:06:15 GMT | Fri, 27 Nov 2026 08:06:14 GMT | SHA25627:EB:1A:85:AA:03:02:5C:92:96:B5:9A:18:1B:65:94:2D:6C:B8:A3:56:3D:E9:F8:5F:E3:62:83:5C:A8:C0:59 | fonts.googleapis.com |
| *.gstatic.com | Google Trust Services · WE2 | Fri, 04 Sep 2026 08:06:14 GMT | Fri, 27 Nov 2026 08:06:13 GMT | SHA25644:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85 | fonts.gstatic.com |
| webdisk.moripartner.ch | Let's Encrypt · YR1 | Tue, 04 Aug 2026 23:26:33 GMT | Mon, 02 Nov 2026 23:26:32 GMT | SHA25616:7C:23:7C:35:9C:33:E8:A7:64:04:C5:BA:87:52:AD:25:44:0B:E9:CF:79:22:2F:6E:5D:46:62:76:BB:93:10 | moripartner.ch |
| accounts.evernote.com | Certainly · Certainly Intermediate R1 | Fri, 04 Sep 2026 13:17:37 GMT | Sun, 04 Oct 2026 13:17:36 GMT | SHA2562E:F4:6C:43:98:7D:05:C2:CE:71:6B:51:9E:E6:EF:C2:A5:C3:9C:48:40:B6:90:8F:F4:41:3A:88:A2:32:C9:A5 | accounts.evernote.com |
| share.evernote.com | Certainly · Certainly Intermediate R1 | Mon, 14 Sep 2026 03:27:08 GMT | Wed, 14 Oct 2026 03:27:07 GMT | SHA256AC:C0:85:F2:2E:0E:40:70:E1:C6:B5:B1:52:6D:57:08:9A:7D:C7:AE:FA:20:30:E0:9B:7F:60:33:4D:09:F6:2E | share.evernote.com |
| rte.svc.www.evernote.com | Google Trust Services · WR3 | Wed, 26 Aug 2026 20:55:21 GMT | Tue, 24 Nov 2026 21:51:16 GMT | SHA2564F:55:F2:F1:B7:FF:72:0A:57:BB:DC:6D:AE:62:BE:9F:68:1D:75:99:07:BF:CA:81:85:07:69:75:E9:5B:E8:F4 | rte.svc.www.evernote.com |
| *.events.data.microsoft.com | Microsoft Corporation · Microsoft TLS G2 RSA CA OCSP 16 | Fri, 28 Aug 2026 15:35:35 GMT | Wed, 24 Feb 2027 15:35:35 GMT | SHA256DA:C0:C8:B1:30:D8:1B:A7:C3:CB:D7:50:1F:9B:69:E9:E5:52:C7:13:68:69:76:D7:96:A0:39:6F:8E:ED:8F:9F | eu-mobile.events.data.microsoft.com |