https://forms.office.com/r/2kKCEkE8ua
Report summary
Submitted and final observations · captured HTTP activity
- Submitted URL
- https://forms.office.com/r/2kKCEkE8ua
- Submitted IP / ASN
150.171.74.13 AS8075 · MICROSOFT-CORP-MSN-AS-BLOCK
- Final URL
- https://login.microsoftonline.com/organizations/oauth2/v2.0/authorize?client_id=c9a559d2-7aab-4f13-a6ed-e7e9c52aec87&redirect_uri=https%3A%2F%2Fforms.cloud.microsoft%2Flanding&state=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&response_type=code&scope=openid%20profile&response_mode=form_post&nonce=639234048396457255.NmJiNTFjYWMtODcwNS00NGM1LTgwZTEtYTllOGEyODVhMmNlOGYxZjVkOWQtN2JiNS00NjE3LWE5MWMtNDllMDA1NjZlYmZk&msafed=0&x-client-SKU=ID_NET10_0&x-client-ver=8.19.2.0
- Final IP / ASN
20.190.177.21 AS8075 · MICROSOFT-CORP-MSN-AS-BLOCK
Final page
- Page title
- Sign in to your account
- Final DOM MIME
- text/html; charset=utf-8
- Final DOM size
- 90.3 KB (92427 bytes)
Detections
Activity
- HTTP requests
- 25
- Observed hosts
- 5
- Script records
- 168
Estimated HTTP data
- Sent
- ~24.6 KB
- Received
- ~2.52 MB
Page capture
Final browser state
available for this report.
Detection signals
URLQuery findings, Threat Detection Systems, and IDS alerts
Absence of findings is not a clean verdict.
Host infrastructure
Observed hosts are context, not independent maliciousness verdicts
| Host | Rank | Registered | First seen | Last seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
| eu-mobile.events.data.microsoft.com | 3935 | 1991-05-02 | 2021-09-30 | 2026-08-20 | 1.5 KB | 1.2 KB |  13.69.116.104 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. Microsoft HTTPAPI:2.0 Web servers Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security. |
| forms.office.com | 5422 | 1999-04-20 | 2017-01-30 | 2026-08-25 | 1.1 KB | 1.3 KB | 150.171.74.13 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| forms.cloud.microsoft | 22076 | 2015-09-25 | 2023-09-21 | 2026-08-20 | 7.2 KB | 1.08 MB | 150.171.73.13 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. Microsoft ASP.NET Web frameworks ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages. |
| aadcdn.msftauth.net | 5262 | 2018-10-25 | 2018-11-19 | 2026-08-24 | 6.3 KB | 1.38 MB | 2.22.225.18 | |
| login.microsoftonline.com | 52 | 2002-07-09 | 2017-02-19 | 2026-08-24 | 5.4 KB | 62.6 KB | 20.190.177.21 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |