https://planner.cloud.microsoft/webui/v1/premiumplan/f6821b42-33cc-4863-9560-f5c457eace51/org/a0af1702-20b5-4184-9272-e86a0fc5c8eb/view/grid/task/cb771f4a-3eb5-4c3f-9089-968e132b790b?tid=5e8f4a34-2bdb-4854-bb42-b4d0c7d0246c
Report summary
Submitted and final observations · captured HTTP activity
- Submitted URL
- https://planner.cloud.microsoft/webui/v1/premiumplan/f6821b42-33cc-4863-9560-f5c457eace51/org/a0af1702-20b5-4184-9272-e86a0fc5c8eb/view/grid/task/cb771f4a-3eb5-4c3f-9089-968e132b790b?tid=5e8f4a34-2bdb-4854-bb42-b4d0c7d0246c
- Submitted IP / ASN
13.107.6.200 AS8068 · Microsoft Corporation
- Final URL
- https://login.microsoftonline.com/5e8f4a34-2bdb-4854-bb42-b4d0c7d0246c/oauth2/v2.0/authorize?client_id=75f31797-37c9-498e-8dc9-53c16a36afca&scope=openid%20profile%2075f31797-37c9-498e-8dc9-53c16a36afca%2F.default%20offline_access&redirect_uri=https%3A%2F%2Fplanner.cloud.microsoft%2Fui%2Fweb%2Fredirectbridge&client-request-id=01a11646-d4d4-7059-aa02-2659eb89b68b&response_mode=fragment&client_info=1&clidata=1&prompt=login&nonce=01a11646-d4d5-72f3-9cd4-9380088b8718&state=eyJpZCI6IjAxYTExNjQ2LWQ0ZDUtN2RjZS1hNjQ1LWUxNTQ5MzI2ZDVjNiIsIm1ldGEiOnsiaW50ZXJhY3Rpb25UeXBlIjoicmVkaXJlY3QifX0%3D&claims=%7B%22access_token%22%3A%7B%22xms_cc%22%3A%7B%22values%22%3A%5B%22cp1%22%5D%7D%7D%7D&x-client-SKU=msal.js.browser&x-client-VER=5.6.2&response_type=code&code_challenge=g7Xfr7MVJ9dyWXsHtNJRes_HKDpDdTPb_kIdMzdQpE8&code_challenge_method=S256
- Final IP / ASN
20.190.147.9 AS8075 · MICROSOFT-CORP-MSN-AS-BLOCK
Final page
- Page title
- Sign in to your account
- Final DOM MIME
- text/html; charset=utf-8
- Final DOM size
- 85.6 KB (87622 bytes)
Detections
Activity
- HTTP requests
- 45
- Observed hosts
- 7
- Script records
- 171
Estimated HTTP data
- Sent
- ~92.8 KB
- Received
- ~6.99 MB
Page capture
Final browser state
available for this report.
Detection signals
URLQuery findings, Threat Detection Systems, and IDS alerts
Absence of findings is not a clean verdict.
Host infrastructure
Observed hosts are context, not independent maliciousness verdicts
| Host | Rank | Registered | First seen | Last seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
| browser.events.data.microsoft.com | 380 | 1991-05-02 | 2018-05-25 | 2026-10-02 | 3.9 KB | 2.7 KB | Not recorded | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. Microsoft HTTPAPI:2.0 Web servers Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security. |
| res.cdn.office.net | 686 | 1994-11-14 | 2021-09-30 | 2026-10-01 | 521 B | 4.0 KB |  23.36.76.98 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| eu-mobile.events.data.microsoft.com | 3935 | 1991-05-02 | 2021-09-30 | 2026-10-01 | 772 B | 611 B |  51.116.253.171 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. Microsoft HTTPAPI:2.0 Web servers Microsoft HTTPAPI is a kernel-mode HTTP driver in the Windows operating system responsible for handling HTTP requests and responses with efficiency, scalability, and security. |
| planner.cloud.microsoft | 171165 | 2015-09-25 | 2024-06-25 | 2026-10-01 | 2.8 KB | 132.5 KB | 13.107.6.200 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| res.public.onecdn.static.microsoft | 930 | 2023-05-05 | 2024-03-21 | 2026-10-05 | 13.0 KB | 5.41 MB |  104.18.19.203 | Cloudflare Bot Management Security Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots. Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| aadcdn.msftauth.net | 5262 | 2018-10-25 | 2018-11-19 | 2026-10-05 | 5.1 KB | 1.38 MB | 23.33.119.81 | |
| login.microsoftonline.com | 52 | 2002-07-09 | 2017-02-19 | 2026-10-05 | 2.6 KB | 58.8 KB |  20.190.181.23 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |