https://52.168.116.128
Report summary
Submitted and final observations · captured HTTP activity
- Submitted URL
- https://52.168.116.128
- Submitted IP / ASN
52.168.116.128 AS8075 · Microsoft Corporation
- Final URL
- https://login.live.com/oauth20_authorize.srf?scope=openid+profile+email+offline_access&response_type=code&client_id=51483342-085c-4d86-bf88-cf50c7252078&response_mode=form_post&redirect_uri=https%3a%2f%2flogin.microsoftonline.com%2fcommon%2ffederation%2foauth2msa&state=rQQIABABBAABBgIAAAADAOz_BQD0_0V2b1N0c0FydGlmYWN0cxgAAAAAAGWO3ZNXnP5hKUIkldwwvx-6LmvgBNtyy1oLCVkbLNWQK7TMQU0OXN75rIdzKv1dHLlCH46oqBmtpFfgbikKKHH8RzqSMyP6qP6BNwlA2F49_BIwpSd6LbWraSyvNNS73CBYsh89xO8Uob5NX1cDfZGzs0359btibjzAYS64eisidkjJAa9UhOAWgdAXuddA62Sn3ZAtlieBGgSLg8OYENOpSdNPerC8Sp7aIXW6UHZ1dREVZTyzSKyIiHTodoSpvhY8k0jXrKgoPpFeRW-Eu29Lpy1kP62gsAaAshE9hcJKiDAl5w9h84hqj0Hbj-bOkgfIncY8nuFxKoW-kMI7XJILqK7ETUcO58f7ukNC3zRWHzYZeVfBH8vSt23kSEHPzKNS_NrIthv2VwCnBmeD7lmLOWd7AISwmMf1J5cwb3GWd7-gWwtUaF2L8DOSmgKkLyNQ-C1r11aZ4rynIqr1UKAbxJ_P-q5Au7hNRaVeyHjgUaeb7c7dOFMazciPSZNT7qDHae68seocD28820-alHWM-ts7Eyzi-0q5awpKy0Ww_K5zvqh210xSIo_PtXjUc6BK6zh2xbLYZjr4Bn-KcHqld3CNA8llGMSe-TGVuWoBnjaTG-rXSW2IRVh3ff5ak4-azL6r5Bl4jyeYPhHRIqKPSAyCiiqf-W3F9MRTmCNyow3RZKU0ZMxV8NTqgXzKZGRjS1ukzMrXhUMXUD8pdr5HaxYYFJPIWT5sSk4e80reEqOHIr-5sC0Kvy9FpGUlY5dtC9825-btYcKbrS3cQyjdA67MISnltSlLaSMBiA1rCQ7HlPMn-XnzsNz6yItZHd8c6MpmJO3vv8bqcz-hKVkD2_T7EAKonCzod6n0c9BhKQgKNebxwsH6syy0LBl5zPxbN535p9ZUkoc_mVU98w70cX8i9NS3kToizO1GlDPyiQOj17Nvy3ZHoqBDVJUOnHHUKX0g13Q_cuiZIoUmOKv_Ng4vYPyWODDexGw0bOn36Uzujcf62ZMz53Tbv4R7Wbk4tX2IZk5xOiBWVyVwMmtIS9WU2AKCrCa_tw2&estsfed=1&uaid=01a1636dcc4274f79a0a4a4d28bfb19c&cobrandid=ed5d1924-9524-4e70-8f68-5ee5e35afbef&fci=c44b4083-3bb0-49c1-b47d-974e53cbdf3c&username=fadfadf&login_hint=fadfadf
- Final IP / ASN
20.190.177.149 AS8075 · MICROSOFT-CORP-MSN-AS-BLOCK
Final page
- Page title
- Sign in to Microsoft Azure
- Final DOM MIME
- text/html; charset=utf-8
- Final DOM size
- 34.7 KB (35555 bytes)
Detections
Activity
- HTTP requests
- 29
- Observed hosts
- 9
- Script records
- 174
Estimated HTTP data
- Sent
- ~25.4 KB
- Received
- ~3.52 MB
Page capture
Final browser state
Detection signals
URLQuery findings, Threat Detection Systems, and IDS alerts
Absence of findings is not a clean verdict.
Host infrastructure
Observed hosts are context, not independent maliciousness verdicts
| Host | Rank | Registered | First seen | Last seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
| aadcdn.msftauth.net | 5262 | 2018-10-25 | 2018-11-19 | 2026-10-19 | 7.5 KB | 1.40 MB | 2.22.225.8 | |
| login.microsoftonline.com | 52 | 2002-07-09 | 2017-02-19 | 2026-10-19 | 6.2 KB | 59.7 KB |  20.190.181.6 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| logincdn.msauth.net | 23083 | 2018-10-25 | 2019-04-23 | 2026-10-19 | 2.5 KB | 1.95 MB | Not recorded | Azure Front Door Load balancers Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications. Azure PaaS Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers. |
| intune.microsoft.com | 152771 | 1991-05-02 | 2022-10-18 | 2026-10-22 | 1018 B | 79.3 KB | 150.171.84.34 | Azure Front Door Load balancers Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications. Azure PaaS Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers. HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| browser.events.data.microsoft.com | 380 | 1991-05-02 | 2018-05-25 | 2026-10-17 | 700 B | 0 B | Not recorded | |
| portal.azure.com | 59479 | 1994-10-25 | 2014-04-07 | 2026-10-12 | 571 B | 1.8 KB | 150.171.84.34 | Azure Front Door Load balancers Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications. Azure PaaS Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers. HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| eu-mobile.events.data.microsoft.com | 3935 | 1991-05-02 | 2021-09-30 | 2026-10-15 | 772 B | 0 B | Not recorded | |
| 52.168.116.128 | N/A | N/A | N/A | N/A | 1.5 KB | 544 B | 52.168.116.128 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| login.live.com | 179 | 1994-12-28 | 2012-05-21 | 2026-10-16 | 2.0 KB | 39.7 KB | 20.190.177.149 | Azure Edge Network Miscellaneous Azure Edge Network is a global network infrastructure provided by Microsoft Azure. It is designed to deliver content, applications, and services to end-users with low latency and high performance. The Azure Edge Network consists of a combination of Azure Content Delivery Network (CDN), Azure Front Door, and Azure Traffic Manager. Azure Monitor Analytics, Performance Azure Monitor collects monitoring telemetry from a variety of on-premises and Azure sources. Azure Monitor helps you maximise the availability and performance of your applications and services. Azure PaaS Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers. HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |