Report - forms.office.com/Pages/ResponsePage.aspx?id=NW271YKKKUO0mlAwvWSXq4hC8ljn7BxBiT3RV8LdWRVUMzJYSkFHWTJONFpMMFdCNEVTVVhKV0I5Vi4u

Report Overview

Submitted URL
forms.office.com/Pages/ResponsePage.aspx?id=NW271YKKKUO0mlAwvWSXq4hC8ljn7BxBiT3RV8LdWRVUMzJYSkFHWTJONFpMMFdCNEVTVVhKV0I5Vi4u
IP
13.107.6.194
ASN
#8068 MICROSOFT-CORP-MSN-AS-BLOCK
Submitted
2024-03-28 13:42:20
Access
public
Website Title
Microsoft
Final URL
forms.office.com/Pages/ResponsePage.aspx?id=NW271YKKKUO0mlAwvWSXq4hC8ljn7BxBiT3RV8LdWRVUMzJYSkFHWTJONFpMMFdCNEVTVVhKV0I5Vi4u
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
forms.office.com	6784	1999-04-20	2017-01-30	2024-03-26	944 B	6.3 kB	13.107.6.194

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (1)

	URL	Size	First Seen	Last Seen
	moz-extension://dd2ceb24-9a5a-481a-a4f4-0bd0450fd8db/injections/js/bug1731825-office365-email-handling-prompt-autohide.js	995 B	2023-04-11	2024-04-28
Pretty URL moz-extension://dd2ceb24-9a5a-481a-a4f4-0bd0450fd8db/injections/js/bug1731825-office365-email-handling-prompt-autohide.js IP 0.0.0.0 ASN #0 Introduced by Embedded in HTML false Observations First Seen2023-04-11 22:15:44 Last Seen2024-04-28 01:21:13 Times Seen44610 Hash 7c873167b5d35fd9f6690071701d4669 f897afe9818a00a80e98bdbc67e7f67343f89378 014e00e9c71f02f5892cda29da8fd08058817ebd57a12cfee75236874f4e889a Loading...

HTTP Transactions (2)

	URL	IP	Response	Size
	forms.office.com/favicon.ico	13.107.6.194	403 Forbidden	1.4 kB
URL GET HTTP/1.1 forms.office.com/favicon.ico IP 13.107.6.194:80 ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK Requested by http://forms.office.com/Pages/ResponsePage.aspx?id=NW271YKKKUO0mlAwvWSXq4hC8ljn7BxBiT3RV8LdWRVUMzJYSkFHWTJONFpMMFdCNEVTVVhKV0I5Vi4u File type data Size 1.4 kB (1376 bytes) Hash 6172ef161f40a6a4cceba521f3dfd1ff 2b5ae803c25d9a0049d3ba61d8484e091d40fc0b 7fd9b60328ad2239ddf67bb780a583e695f67c7d89a7ee0d36e006164f674ea0 HTTP Headers `GET /favicon.ico HTTP/1.1 Host: forms.office.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://forms.office.com/Pages/ResponsePage.aspx?id=NW271YKKKUO0mlAwvWSXq4hC8ljn7BxBiT3RV8LdWRVUMzJYSkFHWTJONFpMMFdCNEVTVVhKV0I5Vi4u Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 403 Forbidden X-MSEdge-Ref: Ref A: B455B6EF4C5B42079CFEFB5388CA4068 Ref B: SVG20EDGE0311 Ref C: 2024-03-28T13:41:55Z Date: Thu, 28 Mar 2024 13:41:55 GMT Connection: close`

	forms.office.com/Pages/ResponsePage.aspx?id=NW271YKKKUO0mlAwvWSXq4hC8ljn7BxBiT3RV8LdWRVUMzJYSkFHWTJONFpMMFdCNEVTVVhKV0I5Vi4u	13.107.6.194	403 Forbidden	4.5 kB
URL User Request GET HTTP/2 forms.office.com/Pages/ResponsePage.aspx?id=NW271YKKKUO0mlAwvWSXq4hC8ljn7BxBiT3RV8LdWRVUMzJYSkFHWTJONFpMMFdCNEVTVVhKV0I5Vi4u IP 13.107.6.194:443 ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK Certificate IssuerMicrosoft Corporation Subjectforms.cloud.microsoft FingerprintAE:8B:9B:7B:FD:AE:8D:D3:54:6E:98:44:8C:EF:9F:D0:FE:C2:7A:76 ValidityTue, 02 Jan 2024 00:26:57 GMT - Fri, 27 Dec 2024 00:26:57 GMT File type data Size 4.5 kB (4527 bytes) Hash ab9fe705d8ec67c18a77ac01940e3414 388bc45be1ec827e02456fbfc808014548b8fb13 ec7c3ace6b0f279c226536aae8d391cd8c954bf4f79a522620478dc7c1f42755 HTTP Headers `GET /Pages/ResponsePage.aspx?id=NW271YKKKUO0mlAwvWSXq4hC8ljn7BxBiT3RV8LdWRVUMzJYSkFHWTJONFpMMFdCNEVTVVhKV0I5Vi4u HTTP/1.1 Host: forms.office.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 403 Forbidden X-MSEdge-Ref: Ref A: E67D383C312E41FD8C96A814D3C90CB7 Ref B: SVG20EDGE0306 Ref C: 2024-03-28T13:41:55Z Date: Thu, 28 Mar 2024 13:41:54 GMT Connection: close`