https://forms.cloud.microsoft/Pages/DesignPagev2.aspx
Report summary
Submitted and final observations · captured HTTP activity
- Submitted URL
- https://forms.cloud.microsoft/Pages/DesignPagev2.aspx
- Submitted IP / ASN
150.171.74.13 AS8075 · Microsoft Corporation
- Final URL
- https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=c9a559d2-7aab-4f13-a6ed-e7e9c52aec87&redirect_uri=https%3A%2F%2Fforms.cloud.microsoft%2Flanding&state=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&response_type=code&scope=openid%20profile&response_mode=form_post&nonce=639283012206477367.ZjhmNDgzNTctZjYwNC00YmE5LWIwNGQtYzhjNzJmYmU0NzhiNGZhZjY0ZWMtOWM1ZC00NWMwLWFhNjQtNmJlMzAwYThkMGQx&prompt=select_account&x-client-SKU=ID_NET10_0&x-client-ver=8.22.0.0
- Final IP / ASN
20.190.147.3 AS8075 · MICROSOFT-CORP-MSN-AS-BLOCK
Final page
- Page title
- Sign in to your account
- Final DOM MIME
- text/plain; charset=utf-8
- Final DOM size
- 0 B (0 bytes)
Detections
Activity
- HTTP requests
- 38
- Observed hosts
- 8
- Script records
- 199
Estimated HTTP data
- Sent
- ~25.0 KB
- Received
- ~3.19 MB
Page capture
Final browser state
available for this report.
Detection signals
URLQuery findings, Threat Detection Systems, and IDS alerts
Absence of findings is not a clean verdict.
Host infrastructure
Observed hosts are context, not independent maliciousness verdicts
| Host | Rank | Registered | First seen | Last seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
| static2.sharepointonline.com | 8499 | 2005-03-21 | 2017-01-29 | 2026-10-17 | 583 B | 253 B |  23.49.31.131 | |
| res-1.cdn.office.net | 990 | 1994-11-14 | 2020-12-08 | 2026-10-15 | 565 B | 36.8 KB | 23.36.76.131 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| login.live.com | 179 | 1994-12-28 | 2012-05-21 | 2026-10-16 | 1.3 KB | 19.0 KB |  40.126.53.18 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| login.microsoftonline.com | 52 | 2002-07-09 | 2017-02-19 | 2026-10-19 | 2.3 KB | 71.1 KB | 20.190.177.83 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| logincdn.msauth.net | 23083 | 2018-10-25 | 2019-04-23 | 2026-10-19 | 500 B | 0 B | Not recorded | |
| aadcdn.msftauth.net | 5262 | 2018-10-25 | 2018-11-19 | 2026-10-19 | 6.9 KB | 1.41 MB | 2.22.225.8 | |
| eu-mobile.events.data.microsoft.com | 3935 | 1991-05-02 | 2021-09-30 | 2026-10-22 | 2.2 KB | 1.8 KB | 52.178.17.3 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. Microsoft HTTPAPI:2.0 Web servers Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security. |
| forms.cloud.microsoft | 22076 | 2015-09-25 | 2023-09-21 | 2026-10-21 | 10.7 KB | 1.66 MB | 150.171.73.13 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. Microsoft ASP.NET Web frameworks ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages. jQuery JavaScript libraries jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax. Underscore.js JavaScript libraries Underscore.js is a JavaScript library which provides utility functions for common programming tasks. It is comparable to features provided by Prototype.js and the Ruby language, but opts for a functional programming design instead of extending object prototypes. |