https://forms.office.com/Pages/DesignPage.aspx?origin=EmailNotification
Report summary
Submitted and final observations · captured HTTP activity
- Submitted URL
- https://forms.office.com/Pages/DesignPage.aspx?origin=EmailNotification
- Submitted IP / ASN
150.171.74.13 AS8075 · Microsoft Corporation
- Final URL
- https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=c9a559d2-7aab-4f13-a6ed-e7e9c52aec87&redirect_uri=https%3A%2F%2Fforms.cloud.microsoft%2Flanding&state=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&response_type=code&scope=openid%20profile&response_mode=form_post&nonce=639251840824823400.NjJhNWFkZjctNTZkMC00MWJiLTk1ZGItZWNiMWE1YmVlOGQ4NjBlYjMzYzEtMTcxOS00MDRmLWEyNTEtY2YyNjk4MzExN2Y3&prompt=select_account&x-client-SKU=ID_NET10_0&x-client-ver=8.19.2.0
- Final IP / ASN
40.126.53.6 AS8075 · MICROSOFT-CORP-MSN-AS-BLOCK
Final page
- Page title
- Sign in to your account
- Final DOM MIME
- text/plain; charset=utf-8
- Final DOM size
- 0 B (0 bytes)
Detections
Activity
- HTTP requests
- 39
- Observed hosts
- 9
- Script records
- 205
Estimated HTTP data
- Sent
- ~26.0 KB
- Received
- ~3.19 MB
Page capture
Final browser state
available for this report.
Detection signals
URLQuery findings, Threat Detection Systems, and IDS alerts
Absence of findings is not a clean verdict.
Host infrastructure
Observed hosts are context, not independent maliciousness verdicts
| Host | Rank | Registered | First seen | Last seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
| forms.office.com | 5422 | 1999-04-20 | 2017-01-30 | 2026-09-09 | 531 B | 654 B | 150.171.74.13 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| aadcdn.msauth.net | 5248 | 2018-10-25 | 2018-11-19 | 2026-09-09 | 6.8 KB | 1.40 MB | 13.107.246.53 | Azure PaaS Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers. Azure Front Door Load balancers Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications. |
| static2.sharepointonline.com | 8499 | 2005-03-21 | 2017-01-29 | 2026-09-16 | 583 B | 253 B |  23.49.31.131 | |
| login.microsoftonline.com | 52 | 2002-07-09 | 2017-02-19 | 2026-09-14 | 2.3 KB | 70.2 KB | 20.190.181.2 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| login.live.com | 179 | 1994-12-28 | 2012-05-21 | 2026-09-10 | 1.3 KB | 18.8 KB |  20.190.147.2 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| eu-mobile.events.data.microsoft.com | 3935 | 1991-05-02 | 2021-09-30 | 2026-09-10 | 2.2 KB | 1.8 KB | 13.69.109.131 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. Microsoft HTTPAPI:2.0 Web servers Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security. |
| res-1.cdn.office.net | 990 | 1994-11-14 | 2020-12-08 | 2026-09-16 | 565 B | 36.8 KB | 23.36.76.91 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| logincdn.msauth.net | 23083 | 2018-10-25 | 2019-04-23 | 2026-09-16 | 500 B | 0 B | Not recorded | |
| forms.cloud.microsoft | 22076 | 2015-09-25 | 2023-09-21 | 2026-09-14 | 11.2 KB | 1.66 MB | 150.171.74.13 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. Underscore.js JavaScript libraries Underscore.js is a JavaScript library which provides utility functions for common programming tasks. It is comparable to features provided by Prototype.js and the Ruby language, but opts for a functional programming design instead of extending object prototypes. jQuery JavaScript libraries jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax. Microsoft ASP.NET Web frameworks ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages. |