https://forms.cloud.microsoft/e/zDDuNnkUMD
3 detections · review the detection signals
Host summary
Observed host history, traffic, and infrastructure
| Host | Rank | Registered | First seen | Last seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
| fmagneta.blob.core.windows.net 2 alerts | N/A | 1995-08-10 | 2026-09-10 | 2026-09-10 | 1.1 KB | 10.2 KB |  20.60.109.225 | Microsoft HTTPAPI:2.0 Web servers Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security. Azure PaaS Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers. |
| hive.forms.usercontent.microsoft | 132172 | 2023-01-13 | 2025-03-20 | 2026-09-08 | 696 B | 0 B | Not recorded | |
| lite.evernote.com | 938835 | 2000-01-20 | 2024-10-18 | 2026-09-03 | 5.3 KB | 13.58 MB |  199.232.211.52 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| api.evernote.com | 150473 | 2000-01-20 | 2021-01-14 | 2026-09-03 | 3.6 KB | 2.8 KB | 199.232.215.52 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. Express Web frameworks, Web servers Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs. Node.js Programming languages Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser. |
| api.pico.bendingspoonsapps.com | 156908 | 2017-08-08 | 2019-04-30 | 2026-09-03 | 1.2 KB | 1.1 KB | 34.36.49.68 | Google Cloud IaaS Google Cloud is a suite of cloud computing services. Envoy Reverse proxies Envoy is an open-source edge and service proxy, designed for cloud-native applications. Google Cloud CDN CDN Cloud CDN uses Google's global edge network to serve content closer to users. |
| rte.svc.www.evernote.com | 191431 | 2000-01-20 | 2023-04-13 | 2026-09-03 | 2.0 KB | 471 B | 34.36.31.173 | WebSocket Miscellaneous WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers. Google Cloud CDN CDN Cloud CDN uses Google's global edge network to serve content closer to users. Google Cloud IaaS Google Cloud is a suite of cloud computing services. |
| hmqv.weathersensei.xyz 6 alerts | N/A | 2026-07-14 | 2026-09-10 | 2026-09-10 | 3.0 KB | 4.2 KB |  104.21.92.46 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. |
| fonts.gstatic.com | N/A | 2008-02-11 | 2014-04-02 | 2026-09-06 | 1.1 KB | 96.4 KB | 142.250.178.99 | |
| fonts.googleapis.com | 313 | 2005-01-25 | 2012-05-23 | 2026-09-06 | 1.1 KB | 26.7 KB | 142.250.178.42 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| eu-mobile.events.data.microsoft.com | 3935 | 1991-05-02 | 2021-09-30 | 2026-09-03 | 1.6 KB | 432 B |  40.79.150.121 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. Microsoft HTTPAPI:2.0 Web servers Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security. |
| forms.cloud.microsoft | 22076 | 2015-09-25 | 2023-09-21 | 2026-09-04 | 12.6 KB | 1.62 MB | 150.171.73.13 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| accounts.evernote.com | 66846 | 2000-01-20 | 2020-06-17 | 2026-09-03 | 1.6 KB | 6.7 KB | 199.232.215.52 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. hCaptcha Security hCaptcha is an anti-bot solution that protects user privacy and rewards websites. |
| share.evernote.com 1 alerts | N/A | 2000-01-20 | 2024-09-05 | 2026-09-03 | 554 B | 367 B | 199.232.211.52 | Varnish Caching Varnish is a reverse caching proxy. |
| odc.officeapps.live.com | 675 | 1994-12-28 | 2014-11-11 | 2026-09-04 | 1.4 KB | 4.6 KB |  52.110.19.65 | Microsoft ASP.NET:4.0.30319 Web frameworks ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages. HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. Microsoft HTTPAPI:2.0 Web servers Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security. |
| www.evernote.com | 72408 | 2000-01-20 | 2014-10-18 | 2026-09-03 | 510 B | 34.4 KB | 199.232.215.52 | Varnish Caching Varnish is a reverse caching proxy. HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
Observed certificates
Distinct fingerprints recorded in HTTP transactions
| Subject | Issuer | Valid from | Valid until | Fingerprint | Hosts |
|---|---|---|---|---|---|
| *.events.data.microsoft.com | Microsoft Corporation · Microsoft TLS G2 RSA CA OCSP 16 | Fri, 28 Aug 2026 15:35:35 GMT | Wed, 24 Feb 2027 15:35:35 GMT | SHA256DA:C0:C8:B1:30:D8:1B:A7:C3:CB:D7:50:1F:9B:69:E9:E5:52:C7:13:68:69:76:D7:96:A0:39:6F:8E:ED:8F:9F | eu-mobile.events.data.microsoft.com |
| weathersensei.xyz | Google Trust Services · WE1 | Tue, 14 Jul 2026 11:51:13 GMT | Mon, 12 Oct 2026 12:49:39 GMT | SHA256EB:12:3D:89:16:FA:A0:DD:02:DB:52:73:D1:A4:9B:F2:78:32:8E:D1:50:0C:54:61:2C:7A:1C:96:F1:0C:85:DB | hmqv.weathersensei.xyz |
| forms.cloud.microsoft | Microsoft Corporation · Microsoft TLS G2 RSA CA OCSP 02 | Fri, 28 Aug 2026 10:46:15 GMT | Wed, 24 Feb 2027 10:46:15 GMT | SHA256EC:3E:2F:B6:7A:84:66:13:B4:1E:95:54:7B:88:0B:7F:E4:75:33:FB:4A:07:80:27:D7:A2:30:CD:13:F9:42:8A | forms.cloud.microsoft |
| lite.evernote.com | Certainly · Certainly Intermediate R1 | Mon, 07 Sep 2026 23:52:06 GMT | Wed, 07 Oct 2026 23:52:05 GMT | SHA256F8:91:9C:DB:50:0D:11:B9:27:06:BC:93:3C:BB:F4:1A:7A:8C:AE:CA:80:90:DD:73:F9:1A:A2:9C:2C:E5:62:24 | lite.evernote.com |
| *.gstatic.com | Google Trust Services · WE2 | Mon, 10 Aug 2026 08:39:10 GMT | Mon, 02 Nov 2026 08:39:09 GMT | SHA25661:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5 | fonts.gstatic.com |
| upload.video.google.com | Google Trust Services · WE2 | Mon, 10 Aug 2026 08:39:11 GMT | Mon, 02 Nov 2026 08:39:10 GMT | SHA25604:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F | fonts.googleapis.com |
| accounts.evernote.com | Certainly · Certainly Intermediate R1 | Fri, 04 Sep 2026 13:17:37 GMT | Sun, 04 Oct 2026 13:17:36 GMT | SHA2562E:F4:6C:43:98:7D:05:C2:CE:71:6B:51:9E:E6:EF:C2:A5:C3:9C:48:40:B6:90:8F:F4:41:3A:88:A2:32:C9:A5 | accounts.evernote.com |
| api.evernote.com | Certainly · Certainly Intermediate R1 | Sun, 06 Sep 2026 16:18:09 GMT | Tue, 06 Oct 2026 16:18:08 GMT | SHA256FA:B8:AA:AD:8A:BB:EC:88:C8:3C:6C:E0:7B:0C:02:2C:C0:1B:BC:6A:E0:E1:8A:F9:15:36:2B:4E:7D:9E:C6:1D | api.evernote.com |
| share.evernote.com | Certainly · Certainly Intermediate R1 | Tue, 25 Aug 2026 04:22:44 GMT | Thu, 24 Sep 2026 04:22:43 GMT | SHA25617:5F:2B:66:85:AB:54:09:3D:BF:A9:2C:38:41:CE:12:97:60:18:A1:CD:5D:58:E8:E8:D3:DC:7E:A7:72:F6:DE | share.evernote.com |
| api.pico.bendingspoonsapps.com | Google Trust Services · WR3 | Sun, 02 Aug 2026 07:41:28 GMT | Sat, 31 Oct 2026 08:37:23 GMT | SHA2567C:96:A6:FE:84:6D:C0:83:2A:7F:57:CF:05:9F:8A:F0:62:FA:59:FA:C5:F3:DA:02:26:12:96:BD:B1:63:08:6E | api.pico.bendingspoonsapps.com |
| odc.officeapps.live.com | Microsoft Corporation · Microsoft TLS G2 RSA CA OCSP 04 | Sat, 18 Jul 2026 18:14:50 GMT | Mon, 01 Feb 2027 18:14:50 GMT | SHA256ED:6A:B8:08:58:1B:5C:91:E3:E7:BD:C0:08:95:AE:50:0F:04:C6:9D:E6:55:8D:F1:93:FA:86:06:2C:48:3F:E4 | odc.officeapps.live.com |
| metrics.evernote.com | Certainly · Certainly Intermediate R1 | Mon, 31 Aug 2026 22:43:18 GMT | Wed, 30 Sep 2026 22:43:17 GMT | SHA256A9:CE:4B:BE:8B:6A:DA:CD:F1:E5:C3:C0:38:53:0B:87:EF:D2:3B:BD:9A:2F:2C:02:A4:40:51:7D:84:BA:7F:29 | www.evernote.com |
| *.blob.core.windows.net | Microsoft Corporation · Microsoft TLS G2 RSA CA OCSP 10 | Tue, 28 Jul 2026 13:33:39 GMT | Sun, 24 Jan 2027 13:33:39 GMT | SHA25661:F9:1D:77:7C:13:92:E7:B4:D6:4D:8D:09:CA:6E:E0:64:9B:B3:E2:9D:BC:EC:11:12:82:CF:40:12:00:89:41 | fmagneta.blob.core.windows.net |
| rte.svc.www.evernote.com | Google Trust Services · WR3 | Wed, 26 Aug 2026 20:55:21 GMT | Tue, 24 Nov 2026 21:51:16 GMT | SHA2564F:55:F2:F1:B7:FF:72:0A:57:BB:DC:6D:AE:62:BE:9F:68:1D:75:99:07:BF:CA:81:85:07:69:75:E9:5B:E8:F4 | rte.svc.www.evernote.com |