https://udemontreal-my.sharepoint.com/:w:/r/personal/lorenzo_munoz_umontreal_ca/Documents/VIP%201.docx?d=w9ddd7e6030ba4707998b46aff0c54131&e=4%3ae26c080854ce4f809fac889812a5aa0c&sharingv2=true&fromShare=true&at=9&CT=1792281949232&OR=OWA-NT-Mail&CID=d966b3fb-fb8a-6b60-7e46-0c375e2b9227&SI=NonSentItems&SLSync=N
Report summary
Submitted and final observations · captured HTTP activity
- Submitted URL
- https://udemontreal-my.sharepoint.com/:w:/r/personal/lorenzo_munoz_umontreal_ca/Documents/VIP%201.docx?d=w9ddd7e6030ba4707998b46aff0c54131&e=4%3ae26c080854ce4f809fac889812a5aa0c&sharingv2=true&fromShare=true&at=9&CT=1792281949232&OR=OWA-NT-Mail&CID=d966b3fb-fb8a-6b60-7e46-0c375e2b9227&SI=NonSentItems&SLSync=N
- Submitted IP / ASN
13.107.136.10 AS8075 · Microsoft Corporation
- Final URL
- https://login.live.com/oauth20_authorize.srf?scope=openid+profile+email+offline_access&response_type=code&client_id=51483342-085c-4d86-bf88-cf50c7252078&response_mode=form_post&redirect_uri=https%3a%2f%2flogin.microsoftonline.com%2fcommon%2ffederation%2foauth2msa&state=rQQIABABBAABBgIAAAADAOz_BQD0_0V2b1N0c0FydGlmYWN0cxgAAAAAAPWvOyQmzOjP31bLdEnTNqOi13_UkWpCh8x2MVuTpDgbtBFiVeylPffPiWbfWHErQ6Zb7YzvFjm3cz16Qf5NHrtAZ-rUkSQ4rPw67qDJJXwHn_VYtM5XJjOBKwj3Fc9WdBmM9Gm_0iaKJ5qVPyXtDRfnQl8gg7S7qGmxujbiCoNdQsYqOUdnZE0jwToevgsgiMEV-052kl3D2DLvGw1yXQwEfHVjox73PG7ervTQHwHnCLdUKOu8M3gt0kgGmTcF4woysGEwcF48XVmzgpTqMm91Z8nFjALuqnMSpt-Vi2MMUxwuScfoHTWZyTqEN_wyM9TxN5WvHodd22mFmcBr-Ta1E2r8KjeCWl02uNeAaEvr58Pi_z4pkYQFh1cVfM4XTwzAJk_H7y3wUjXAuBgOx7GejVW9fdcQDDshq65CXKrFkiV4psZ0bR_agjBW4FEbk8q1sqlyfWqPyhcYR_qPWWiNUF0fuZ_VFdZ6kfR-ePnI-oFfbnA2by0Od_QLku_4Byq7T6DqJiaobnPbH8fGkV_kF-zs9mM3SLh2NtAmQf9yOSw5OAKooeBdrJOYaU_AXdoGK6trnEEMndRuScMECI9K6odsk6F55iKydkwkIZ64be80QoK3CfqOFDtnrmj28aIE0zd3TNX3vd4bRZyvLzf2mJPHfUOO28qrLXUl5WttQzpKhXc34WMu-sCYcvsdpZNBL80-mCwdOXlYBbQaz_r0o_kfUAb1EpkzOH3Gd_M8BAIqI6TdEQxrMmqyywnfKPzU2eCgs7EP26bBoGTlKSw0PwhzgXCYnaaD7RxKqqFkNIS9qTw6mblExEi4mCc9zzu49T5i-4T4saLQgIhGhBxJBYRfUT_vuyBG-47GLoRtIq0QvD8K8kpcAKfqd8MCOg3lgEgRWJYQO3ssTtPV4opbWNbjpJOEPCW27SPdlsCorxeUT-TXZuG4f9SCz7nts9dFz6op6uKfivepjcyu2GKc3Ft08keI4bgSdBy6YEKswoJhSWB0vnNHRb_kRIoZ1bDYriO21bxhzcZLP6MEXYE_XxI9uGFZURN5A4NfEqw4fNTPZhPTVSz7a7JTf_XCF7kQ43JGnlGAeoq_MTJCNsAVUYhaYGtg3ha55ofWzBg-k2TOa7sOeUVkQAOZOB4pBaKQM-QkfmPdm_Hu25sCIjLzA9jtoofq7AvIF7Hrd1iRdhFsLPeLIcTs6PpnuXYzTvvvOU-ViGv5rAP0BYLpVrXdSk90pD8khIPacgXE0qS3g5TI-uCU5XV3L1gn3TIGPsdve3yNTXBV24evnu6zCbvbdZgHX_LVLklrDvLEe5X58OihFSuSWSLVOF4mGVMm1Ihmv8fXk8Be9ZfFQ5PB81p4zxtIXdJGLQ0Z8Ck9qMqwVWiuRfTt66myWUm5JDNmeYJ80PVc3-pV8AcZOXOMaazo9tiLOjbxsMW5gFdV7-tNHJCgv2sOn-JTMUfiOaptEP1AKcVkn-IomZwo7GhzC2syM3PoB0x7iGxK2ugTa_4fzbBmYcB8CFDWw5xHtDeWHEa3tLl3vvcv0BA5l1y3GYUIRv2jYPN_flIn8BdVKR36m6FTGHxgHjkd12RMp8oOcPIvbGrTBQLVXJ9ra2HU6aAQYZkhdyEWPL29gyRdEknKdKRIwJ1-rH1KfRoLA1Awj24chvFc2XBSfA1Vp2OuWBSie0kHl3j9lpTKuI9_aBSL5iEl960olCwMMkR6xB9WKVQnOtMl3LGEBV6REqr9EoKEmUK_Ejn2s7RNzLwAst1fXMchYtotT-orgmCj38VLKpPTTYT1I74raoHmlbLykjk8oVqd9YWg3AP6iV4U1f-E5MI5xhPUebWewD75lO_zi4xO8LnRciM2N33xxDr8CmXiiS453_ikhjjGyivCjcJZJTiGf5oBR7c1QOTOivyxcBwEfPK2aWvqlcZkxgBtdNz3I9Fo3zlbgJ6jLIs1&estsfed=1&uaid=8fec45a2c01af00064d7aa39a1f7741a&cobrandid=11bd8083-87e0-41b5-bb78-0bc43c8a8e8a&fci=00000003-0000-0ff1-ce00-000000000000&wsucxt=1&username=fff%40yahoo.fr&login_hint=fff%40yahoo.fr
- Final IP / ASN
20.190.177.147 AS8075 · MICROSOFT-CORP-MSN-AS-BLOCK
Final page
- Page title
- Get a code to sign in
- Final DOM MIME
- text/html; charset=utf-8
- Final DOM size
- 56.2 KB (57547 bytes)
Detections
Activity
- HTTP requests
- 41
- Observed hosts
- 11
- Script records
- 201
Estimated HTTP data
- Sent
- ~45.9 KB
- Received
- ~4.66 MB
Page capture
Final browser state
Detection signals
URLQuery findings, Threat Detection Systems, and IDS alerts
Absence of findings is not a clean verdict.
Host infrastructure
Observed hosts are context, not independent maliciousness verdicts
| Host | Rank | Registered | First seen | Last seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
| aadcdn.msftauthimages.net | 23121 | 2018-11-12 | 2019-08-14 | 2026-10-12 | 655 B | 0 B | Not recorded | |
| df.cfp.microsoft.com | 83785 | 1991-05-02 | 2025-02-06 | 2026-10-15 | 738 B | 2.1 KB |  20.86.88.94 | |
| udemontreal-my.sharepoint.com | N/A | 1998-08-10 | 2026-06-08 | 2026-06-08 | 3.1 KB | 9.4 KB | 13.107.136.10 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. Microsoft ASP.NET:4.0.30319 Web frameworks ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages. Microsoft SharePoint:16.0.0.27807 CMS SharePoint is a cloud-based collaborative platform to manage and share content. Microsoft ASP.NET Web frameworks ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages. |
| login.microsoftonline.com | 52 | 2002-07-09 | 2017-02-19 | 2026-10-12 | 7.8 KB | 68.8 KB |  40.126.53.16 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| browser.events.data.microsoft.com | 380 | 1991-05-02 | 2018-05-25 | 2026-10-17 | 3.7 KB | 3.0 KB | 52.178.17.3 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. Microsoft HTTPAPI:2.0 Web servers Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security. |
| login.live.com | 179 | 1994-12-28 | 2012-05-21 | 2026-10-16 | 8.9 KB | 42.3 KB | 20.190.177.147 | Azure Monitor Analytics, Performance Azure Monitor collects monitoring telemetry from a variety of on-premises and Azure sources. Azure Monitor helps you maximise the availability and performance of your applications and services. Azure PaaS Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers. HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. Azure Edge Network Miscellaneous Azure Edge Network is a global network infrastructure provided by Microsoft Azure. It is designed to deliver content, applications, and services to end-users with low latency and high performance. The Azure Edge Network consists of a combination of Azure Content Delivery Network (CDN), Azure Front Door, and Azure Traffic Manager. |
| fpt.live.com | 78827 | 1994-12-28 | 2017-01-31 | 2026-10-15 | 3.1 KB | 24.1 KB | 20.86.88.94 | |
| ms-sso.copilot.com | N/A | 1995-09-16 | 2026-02-18 | 2026-10-15 | 882 B | 3.4 KB | 20.190.177.147 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| aadcdn.msftauth.net | 5262 | 2018-10-25 | 2018-11-19 | 2026-10-12 | 8.1 KB | 1.43 MB |  23.33.119.81 | |
| logincdn.msauth.net | 23083 | 2018-10-25 | 2019-04-23 | 2026-10-12 | 3.6 KB | 3.08 MB | 13.107.246.53 | Azure PaaS Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers. Azure Front Door Load balancers Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications. |
| ms-sso.copilot.microsoft.com | N/A | 1991-05-02 | 2026-04-17 | 2026-10-15 | 902 B | 3.4 KB | 20.190.181.1 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |