urlquery.net
Investigate/Report/c0370d9a-e42e-4abd-b135-9c6e2d1a3baa
WEBSITE ANALYSIS REPORT

https://forms.cloud.microsoft/Pages/DesignPagev2.aspx

public
Report tags
Submit tags
Request review

Domain graph

Hostnames and connections captured in this scan

CallsLoads fromRedirects toEmbeds
Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds
Reset
Captured HTTP requests; click any summary row or use its hostname button to expand transaction details.
Timestamp (UTC)MethodStatusHost / pathTypeSizeDurationSignals
GET302document0 B819 ms—
GET200document45.9 KB57 ms—
GET200stylesheet364.4 KB6 ms—
GET200script126.7 KB6 ms—
GET200script51.2 KB8 ms—
GET200script89.0 KB7 ms—
GET200script22.4 KB7 ms—
GET200script107.2 KB5 ms—
GET200script403.6 KB5 ms—
GET200script163.3 KB7 ms—
GET302font0 B25 ms—
GET200script4.7 KB4 ms—
GET200script165.5 KB5 ms—
GET200fetch729 B29 ms—
GET200font35.5 KB45 ms—
GET200script133.4 KB5 ms—
GET200subdocument4.0 KB2533 ms—
GET200img7.7 KB4 ms—
GET200subdocument13.2 KB2506 ms—

Transaction #34

Request / response

URL

GET HTTPS
https://login.live.com/Me.srf?wa=wsignin1.0&idpflag=indirect&id=12&wreply=https%3a%2f%2flogin.microsoftonline.com&owreply=https%3a%2f%2fforms.cloud.microsoft%2fcascadeauth%2faccount%2fsignin-oidc

IP / ASN

France 20.190.177.22

AS8075 · MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://login.microsoftonline.com/savedusers?appid=c9a559d2-7aab-4f13-a6ed-e7e9c52aec87&wreply=https%3A%2F%2Fforms.cloud.microsoft%2Fcascadeauth%2Faccount%2Fsignin-oidc&idpflag=proxy&partnerId=officeproducts

Resource information

File type
JavaScript source, ASCII text, with very long lines (9748)
MIME type
text/html; charset=utf-8
First seen (UTC)
22 Oct 2026 · 21:27:47.600 UTC
Last seen (UTC)
22 Oct 2026 · 21:27:47.600 UTC
Times seen
1
Size
13.2 KB (13478 bytes)
MD5
e5345b149b3c4d0ed4773bdb6c188041
SHA1
26680aa20ebb3634ee621f5c962745ca747397a0
SHA256
6d2436b5ffec1b809efd63317beb93234045c39ce73ad63933bffeaccf889d80

Certificate information

Issuer
DigiCert Inc · DigiCert Global G2 TLS RSA SHA256 2020 CA1
Subject
login.live.com
Protocol / cipher
TLSv1.2 · TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
SHA1 fingerprint
DA:29:DA:61:94:6A:8C:6B:64:7A:F9:67:62:51:1D:24:65:6D:81:0A
Valid from
Mon, 28 Sep 2026 00:00:00 GMT
Valid until
Wed, 06 Jan 2027 23:59:59 GMT

Technology fingerprints

  • HSTS (Security)

HTTP headers

Request headers

GET /Me.srf?wa=wsignin1.0&idpflag=indirect&id=12&wreply=https%3a%2f%2flogin.microsoftonline.com&owreply=https%3a%2f%2fforms.cloud.microsoft%2fcascadeauth%2faccount%2fsignin-oidc HTTP/1.1
Host: login.live.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/140.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Referer: https://login.microsoftonline.com/
Sec-Fetch-Storage-Access: none
Sec-GPC: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Priority: u=4
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 200 OK
Cache-Control: no-store, no-cache
Pragma: no-cache
Content-Type: text/html; charset=utf-8
Content-Encoding: gzip
Expires: Thu, 22 Oct 2026 21:25:52 GMT
Vary: Accept-Encoding
P3P: CP="DSP CUR OTPi IND OTRi ONL FIN"
X-DNS-Prefetch-Control: on
Link: <https://logincdn.msauth.net>; rel=preconnect; crossorigin, <https://acctcdn.msauth.net>; rel=preconnect; crossorigin, <https://acctcdn.msftauth.net>; rel=preconnect; crossorigin, <https://acctcdn.msauth.net/>; rel=dns-prefetch, <https://acctcdn.msftauth.net/>; rel=dns-prefetch, <https://acctcdnmsftuswe2.azureedge.net/>; rel=dns-prefetch, <https://logincdn.msauth.net/>; rel=dns-prefetch, <https://logincdn.msftauth.net/>; rel=dns-prefetch, <https://lgincdnmsftuswe2.azureedge.net/>; rel=dns-prefetch
Referrer-Policy: strict-origin-when-cross-origin
x-ms-route-info: C506_SN1
x-ms-request-id: 05b64bfc-c236-4445-9113-696dcdce5e8c
PPServer: PPV: 30 H: SN1PEPF0002F050 V: 0
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000
X-XSS-Protection: 1; mode=block
Set-Cookie: uaid=06feaa8a909549cda4acad6968e101ef; domain=login.live.com; Secure; path=/; SameSite=None; HttpOnly
MSPRequ=id=12&lt=1792704412&co=1; domain=login.live.com; Secure; path=/; SameSite=None; HttpOnly
OParams=11O.DiEk5IwMmRtOOAcNfoPfQhReyUdipj3xpR7kC8MtoOCQo6fL*6*X65MOrYgPQMQwiDcoJ8sKLrzDqvrKjg9Y6te4!4mHOuIHOWralqNjs4aMr7xul!tamD3vTKWsz658PPgffYq6b7k3ZGAhfDhVRUrNrUur2IleFVYZbE6pw3DfGJCPIWlSGUakNTgCuotjupsj1CCI*hHkWEbDP1Rmy2BnB0xNGskRDkpO0mXNqDhBCMXGztcagivMQeF4k3ME8RQsV3n5UxZ8oYO!yzR29AzBR3J1Kg9l86cE!ZgB8ZOKzOxBzLTKddTONM0VEe6Ow1GyJr3CsOD*Dhrkzoj2nOiJE!Q6CLWIM0RSaXy6hNXe; domain=login.live.com; Secure; path=/; SameSite=None; HttpOnly
Date: Thu, 22 Oct 2026 21:26:52 GMT
Content-Length: 5340
GETNo responsescript0 B0 ms—
OPTIONS200xhr0 B2471 ms—
GET302document0 B30 ms—
GET200document60.3 KB2636 ms—
OPTIONS200xhr0 B65 ms—
GET200stylesheet111.7 KB21 ms—
GET200script586.8 KB22 ms—
GET200script60.8 KB22 ms—
GET200script185.7 KB5 ms—
GET200img16.8 KB3 ms—
GET200script399.3 KB67 ms—
GET200script15.4 KB3 ms—
GET200img2.6 KB2 ms—
GET200img3.5 KB3 ms—
GET200img45.5 KB21 ms—
GET200img3.6 KB20 ms—
GET200subdocument3.4 KB2393 ms—
GET200img1.6 KB18 ms—
OPTIONS200xhr0 B2458 ms—
38 visible / 38 matching / 38 captured
First
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close
LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot