&gt; Let’s explore.

Captured page Enlarge ↗ Monika Küttel-Marti | Kreisschule Seedorf

08 Sep 2026 · 02:19 UTC

Final URL Different hostname

https://lite.evernote.com/note/8b0a2ca2-a18c-0f91-e8ac-30f98fdcb0e1

Detection highlights

URLQuery 0IDS 0TDS 1

Sinkholed DNS4EU medium severity Malicious

Infrastructure & activity

23.103.243.70Norway AS8075 MICROSOFT-CORP-MSN-AS-BLOCK

Hosts: 14
Requests: 48
Received: 15.40 MB
Sent: 32.6 KB

Notable observed hosts

11 more · View hosts →

forms.cloud.microsoft

Captured page Enlarge ↗ Kreisschule Seedorf

08 Sep 2026 · 02:19 UTC

Final URL

https://forms.cloud.microsoft/pages/responsepage.aspx?id=Q_rFOR0Mb0KL9ZpiF5lKBFODuySLgZ1Es1J4XacOZINUNUdXTE1VQjIwR1BVNllZRUtJQVg4M0lVNC4u&route=shorturl

Detection highlights

No detections reported.

Infrastructure & activity

150.171.73.13United States AS8075 MICROSOFT-CORP-MSN-AS-BLOCK

Hosts: 3
Requests: 18
Received: 1.63 MB
Sent: 14.6 KB

Notable observed hosts

forms.cloud.microsoft

Captured page Enlarge ↗ kreisschuleseedorf.blob.core.windows.net/kreisschuleseedorf/Kreisschuleseedorf.html

08 Sep 2026 · 00:11 UTC

Final URL Different hostname

https://kreisschuleseedorf.blob.core.windows.net/kreisschuleseedorf/Kreisschuleseedorf.html

Detection highlights

URLQuery 1IDS 0TDS 2

Infrastructure & activity

150.171.73.13United States AS8075 MICROSOFT-CORP-MSN-AS-BLOCK

Hosts: 25
Requests: 68
Received: 16.22 MB
Sent: 43.9 KB

Notable observed hosts

22 more · View hosts →

Report tags

forms.cloud.microsoft

Captured page Enlarge ↗ kreisschuleseedorf.blob.core.windows.net/kreisschuleseedorf/Kreisschuleseedorf.html

07 Sep 2026 · 22:12 UTC

Final URL Different hostname

https://kreisschuleseedorf.blob.core.windows.net/kreisschuleseedorf/Kreisschuleseedorf.html

Detection highlights

URLQuery 0IDS 0TDS 2

Infrastructure & activity

150.171.74.13United States AS8075 MICROSOFT-CORP-MSN-AS-BLOCK

Hosts: 21
Requests: 59
Received: 15.76 MB
Sent: 39.7 KB

Notable observed hosts

18 more · View hosts →

forms.cloud.microsoft

Captured page Enlarge ↗ Kreisschule Seedorf

07 Sep 2026 · 22:02 UTC

Final URL

https://forms.cloud.microsoft/pages/responsepage.aspx?id=Q_rFOR0Mb0KL9ZpiF5lKBFODuySLgZ1Es1J4XacOZINUNUdXTE1VQjIwR1BVNllZRUtJQVg4M0lVNC4u&route=shorturl

Detection highlights

No detections reported.

Infrastructure & activity

150.171.73.13United States AS8075 MICROSOFT-CORP-MSN-AS-BLOCK

Hosts: 3
Requests: 18
Received: 1.63 MB
Sent: 14.6 KB

Notable observed hosts

https://forms.cloud.microsoft/Pages/ShareFormPage.aspx?id=9zq4BusF50mSVrQy7vCbjqqTCjkESChDlVrCFSAQgqxUQUJZUEdXQUxORE9HT1U0RTA0TVgwUzQyOS4u&sharetoken=VDTM6hkMyut5T1Vj9KJp

forms.cloud.microsoft

07 Sep 2026 · 10:09 UTC

Captured page Enlarge ↗ Reversed Payment and Operational Direction.pdf

Detection highlights

No detections reported.

Infrastructure & activity

150.171.74.13United States AS8075 MICROSOFT-CORP-MSN-AS-BLOCK

Hosts: 3
Requests: 20
Received: 1.69 MB
Sent: 17.7 KB

Notable observed hosts

https://forms.cloud.microsoft/Pages/ShareFormPage.aspx?id=9zq4BusF50mSVrQy7vCbjqqTCjkESChDlVrCFSAQgqxUQUJZUEdXQUxORE9HT1U0RTA0TVgwUzQyOS4u&sharetoken=VDTM6hkMyut5T1Vj9KJp

forms.cloud.microsoft

07 Sep 2026 · 10:06 UTC

Captured page Enlarge ↗ BunnyCDN Node NO1-830

Final URL Different hostname

https://gwac-assist-bwopaymentdocspdf.b-cdn.net/app/index(5).html

Detection highlights

URLQuery 0IDS 0TDS 1

Sinkholed DNS4EU medium severity Malicious

Infrastructure & activity

150.171.74.13United States AS8075 MICROSOFT-CORP-MSN-AS-BLOCK

Hosts: 8
Requests: 32
Received: 1.80 MB
Sent: 24.5 KB

Notable observed hosts

5 more · View hosts →

https://forms.office.com/r/7ab2pCe0r5

forms.office.com

07 Sep 2026 · 06:32 UTC

Captured page Enlarge ↗ Victorian Government Library Service (VGLS) - quick feedback (Page 1 of 3)

Final URL Different hostname

https://forms.cloud.microsoft/pages/responsepage.aspx?id=vqAuchw-EUutb5QB1oVuJHKfP6o2J6NCr-v5McIkkBtUREFUUkhCNlhDVFI4MFRXOVdDRkFPVkVVQSQlQCN0PWcu&route=shorturl

Detection highlights

No detections reported.

Infrastructure & activity

23.103.243.65Norway AS8075 MICROSOFT-CORP-MSN-AS-BLOCK

Hosts: 5
Requests: 21
Received: 2.32 MB
Sent: 16.7 KB

Notable observed hosts

https://forms.cloud.microsoft/Pages/ShareFormPage.aspx?id=YI_KXM2RdUSMBVtTtKkX1TwKktFGbpFGmDFBwnTd4EBUOVBaSzJGTU4zMzJMMEFYM0VDUkZTVU1EMS4u&sharetoken=1Hbs6cJu7viRN3KFza8c

forms.cloud.microsoft

04 Sep 2026 · 17:55 UTC

Captured page Enlarge ↗ PAYMENT ADVICE (Copy)

Detection highlights

No detections reported.

Infrastructure & activity

150.171.74.13United States AS8075 MICROSOFT-CORP-MSN-AS-BLOCK

Hosts: 4
Requests: 22
Received: 10.63 MB
Sent: 19.5 KB

Notable observed hosts

https://forms.office.com/e/rbL6qrvdwdj

forms.office.com

04 Sep 2026 · 10:01 UTC

Captured page Enlarge ↗ Weather-Health Alerting system update registration details form

Final URL Different hostname

https://forms.cloud.microsoft/pages/responsepage.aspx?id=mRRO7jVKLkutR188-d6GZn06Ss-xPLpCuYeyOZ-eFiFUNlM3TzlLWlBZV1dLVEJPVUxSVkVYVVNBViQlQCN0PWcu&route=shorturl

Detection highlights

No detections reported.

Infrastructure & activity

150.171.73.13United States AS8075 MICROSOFT-CORP-MSN-AS-BLOCK

Hosts: 5
Requests: 23
Received: 1.65 MB
Sent: 18.5 KB

Notable observed hosts

https://forms.office.com/r/Nzezi23XW4

forms.office.com

04 Sep 2026 · 07:42 UTC

Captured page Enlarge ↗ MELDESCHEIN

Final URL Different hostname

https://forms.cloud.microsoft/pages/responsepage.aspx?id=DQSIkWdsW0yxEjajBLZtrQAAAAAAAAAAAAO__rCg35xUM0pITUk3VTJIWE9CQ0JVTzBOUjUyWEFBWi4u&route=shorturl

Detection highlights

No detections reported.

Infrastructure & activity

150.171.73.13United States AS8075 MICROSOFT-CORP-MSN-AS-BLOCK

Hosts: 5
Requests: 24
Received: 1.87 MB
Sent: 19.6 KB

Notable observed hosts

https://forms.office.com/Pages/DesignPage.aspx#FormId=mhlclKKDgE6fjFqRvldS3bSXFPfMXb9Doso9SzGLwiJUNTlNWFRTRDNTM1Q0M1pXUEdFNlo2WkFPRy4u&Analysis=true&origin=EmailNotification

forms.office.com

04 Sep 2026 · 02:37 UTC

Captured page Enlarge ↗ Sign in to your account

Final URL Different hostname

https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=c9a559d2-7aab-4f13-a6ed-e7e9c52aec87&redirect_uri=https%3A%2F%2Fforms.cloud.microsoft%2Flanding&state=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&response_type=code&scope=openid%20profile&response_mode=form_post&nonce=639240862262522045.YzBmMzU2YTMtYzlkMC00MmFiLTkwZTAtOTYxMGY3Y2VmYmI5ZDVlZWM1ZWUtOWVjYy00ZDVlLTg0MzEtMmFiYzA5NjBmOGNl&prompt=select_account&x-client-SKU=ID_NET10_0&x-client-ver=8.19.2.0

Detection highlights

No detections reported.

Infrastructure & activity

150.171.73.13United States AS8075 MICROSOFT-CORP-MSN-AS-BLOCK

Hosts: 9
Requests: 50
Received: 3.23 MB
Sent: 35.9 KB

Notable observed hosts

6 more · View hosts →

https://forms.cloud.microsoft/e/X7ySdsGWtU

forms.cloud.microsoft

03 Sep 2026 · 22:15 UTC

Captured page Enlarge ↗ Careers Fair Participation Questionnaire - 2026

Final URL

https://forms.cloud.microsoft/pages/responsepage.aspx?id=IlOSlu1cK0ClRDcb_Ol3tk9AObxu6j5Do-H4QKUm3vdUMUVMN0hSWFIwVVFDMVhYSDBDWFRSUjdKTS4u&route=shorturl

Detection highlights

No detections reported.

Infrastructure & activity

150.171.74.13United States AS8075 MICROSOFT-CORP-MSN-AS-BLOCK

Hosts: 3
Requests: 22
Received: 2.31 MB
Sent: 18.3 KB

Notable observed hosts

https://url.avanan.click/v2/r01/___https://forms.cloud.microsoft/Pages/ResponseP%20age.aspx?id=t0bqsQtJYUalvuU7mkXl1EtiogbBU0JIrPmUnLSP3vlUM1ZIOEk4SzAyNEFYN0szMDF FTlNNRk9PSS4u___.YXAzOmJsZGk6YTpvOjUxODI1NjU1MzBiZmRiNjcxODE1N2U4OTBjZTJlNzRkOj c6ODI5NjphZjUxYjNkZTI2NjEzODEyZTdjN2MxNWQwNjA0MGFkN2E4OGY2MmM1ZjRiNjQ1NzZjM2EzM Dk5YWJjYjkzNTYwOmg6RjpG

url.avanan.click

03 Sep 2026 · 19:19 UTC

Captured page Enlarge ↗ Event RSVP for BLDI Ribbon Cutting + Open House

Final URL Different hostname

https://forms.cloud.microsoft/Pages/ResponsePage.aspx?id=t0bqsQtJYUalvuU7mkXl1EtiogbBU0JIrPmUnLSP3vlUM1ZIOEk4SzAyNEFYN0szMDFFTlNNRk9PSS4u

Detection highlights

No detections reported.

Infrastructure & activity

13.249.8.120United States AS16509 AMAZON-02

Hosts: 5
Requests: 19
Received: 1.65 MB
Sent: 15.4 KB

Notable observed hosts

https://forms.office.com/Pages/ResponsePage.aspx?id=v4j5cvGGr0GRqy180BHbR3C9XjiHUVxLhDY4Jhbh4V1UM0I5QTNBV0ZIQzg4VFhVWFpVQ1RBTlVWUS4u

forms.office.com

03 Sep 2026 · 18:24 UTC

Captured page Enlarge ↗ Manage PowerApps and Flows Subscription List

Final URL Different hostname

https://forms.cloud.microsoft/Pages/ResponsePage.aspx?id=v4j5cvGGr0GRqy180BHbR3C9XjiHUVxLhDY4Jhbh4V1UM0I5QTNBV0ZIQzg4VFhVWFpVQ1RBTlVWUS4u

Detection highlights

No detections reported.

Infrastructure & activity

23.103.243.66Norway AS8075 MICROSOFT-CORP-MSN-AS-BLOCK

Hosts: 4
Requests: 19
Received: 1.63 MB
Sent: 15.3 KB

Notable observed hosts

https://forms.cloud.microsoft/e/jeDJi60Xgg

forms.cloud.microsoft

03 Sep 2026 · 14:14 UTC

Captured page Enlarge ↗ Reckmann GmbH DOCUMENTS

Final URL

https://forms.cloud.microsoft/pages/responsepage.aspx?id=hUxtYRm3xU6isRsM7yMiSLGoDHImpo9AphB36gm7kgxUMzA3OTg4SkNaVFBYNjc4OTVJRVIxRE80NS4u&route=shorturl

Detection highlights

No detections reported.

Infrastructure & activity

150.171.73.13United States AS8075 MICROSOFT-CORP-MSN-AS-BLOCK

Hosts: 3
Requests: 18
Received: 1.63 MB
Sent: 14.7 KB

Notable observed hosts

https://forms.cloud.microsoft/Pages/ShareFormPage.aspx?id=YI_KXM2RdUSMBVtTtKkX1TwKktFGbpFGmDFBwnTd4EBUNjRPUlJURU9HMEhKMVNDTkRQSzJMMDgwTC4u&sharetoken=sqk517kHKv0UVFphtyT9

forms.cloud.microsoft

03 Sep 2026 · 13:40 UTC

Captured page Enlarge ↗ Problem loading page

Final URL

about://about:neterror?e=dnsNotFound&u=https%3A//laurenscountysc.killeentexas-gov.com/&c=UTF-8&d=We%20can%E2%80%99t%20connect%20to%20the%20server%20at%20laurenscountysc.killeentexas-gov.com.&a=

Detection highlights

No detections reported.

Infrastructure & activity

150.171.73.13United States AS8075 MICROSOFT-CORP-MSN-AS-BLOCK

Hosts: 5
Requests: 28
Received: 10.48 MB
Sent: 22.3 KB

Notable observed hosts

https://forms.cloud.microsoft/Pages/ShareFormPage.aspx?id=YI_KXM2RdUSMBVtTtKkX1TwKktFGbpFGmDFBwnTd4EBUNjRPUlJURU9HMEhKMVNDTkRQSzJMMDgwTC4u&sharetoken=sqk517kHKv0UVFphtyT9

forms.cloud.microsoft

03 Sep 2026 · 13:39 UTC

Captured page Enlarge ↗ Problem loading page

Final URL

about://about:neterror?e=dnsNotFound&u=https%3A//laurenscountysc.killeentexas-gov.com/&c=UTF-8&d=We%20can%E2%80%99t%20connect%20to%20the%20server%20at%20laurenscountysc.killeentexas-gov.com.&a=

Detection highlights

No detections reported.

Infrastructure & activity

23.103.243.65Norway AS8075 MICROSOFT-CORP-MSN-AS-BLOCK

Hosts: 5
Requests: 31
Received: 10.63 MB
Sent: 24.4 KB

Notable observed hosts

https://forms.cloud.microsoft/e/jeDJi60Xgg

forms.cloud.microsoft

03 Sep 2026 · 10:05 UTC

Captured page Enlarge ↗ Reckmann GmbH DOCUMENTS

Final URL

https://forms.cloud.microsoft/pages/responsepage.aspx?id=hUxtYRm3xU6isRsM7yMiSLGoDHImpo9AphB36gm7kgxUMzA3OTg4SkNaVFBYNjc4OTVJRVIxRE80NS4u&route=shorturl

Detection highlights

No detections reported.

Infrastructure & activity

23.103.243.76Norway AS8075 MICROSOFT-CORP-MSN-AS-BLOCK

Hosts: 3
Requests: 19
Received: 1.63 MB
Sent: 15.3 KB

Notable observed hosts

https://forms.cloud.microsoft/e/jeDJi60Xgg

forms.cloud.microsoft

03 Sep 2026 · 10:01 UTC

Captured page Enlarge ↗ Reckmann GmbH DOCUMENTS

Final URL

https://forms.cloud.microsoft/pages/responsepage.aspx?id=hUxtYRm3xU6isRsM7yMiSLGoDHImpo9AphB36gm7kgxUMzA3OTg4SkNaVFBYNjc4OTVJRVIxRE80NS4u&route=shorturl

Detection highlights

No detections reported.

Infrastructure & activity

23.103.243.74Norway AS8075 MICROSOFT-CORP-MSN-AS-BLOCK

Hosts: 3
Requests: 18
Received: 1.63 MB
Sent: 14.6 KB

Notable observed hosts

https://forms.office.com/r/6ZhWy8LgwE

forms.office.com

03 Sep 2026 · 08:17 UTC

Captured page Enlarge ↗ Feedback for Clarity weekly email

Final URL Different hostname

https://forms.cloud.microsoft/pages/responsepage.aspx?id=v4j5cvGGr0GRqy180BHbR8wdRcW1GKNLt-_egj8JU0xUMFhVR01FQ0JXUVNNMUxMVERGNkVKS1pHSi4u&route=shorturl

Detection highlights

No detections reported.

Infrastructure & activity

150.171.74.13United States AS8075 MICROSOFT-CORP-MSN-AS-BLOCK

Hosts: 4
Requests: 22
Received: 2.06 MB
Sent: 17.8 KB

Notable observed hosts

https://forms.office.com/r/6ZhWy8LgwE

forms.office.com

03 Sep 2026 · 08:16 UTC

Captured page Enlarge ↗ Feedback for Clarity weekly email

Final URL Different hostname

https://forms.cloud.microsoft/pages/responsepage.aspx?id=v4j5cvGGr0GRqy180BHbR8wdRcW1GKNLt-_egj8JU0xUMFhVR01FQ0JXUVNNMUxMVERGNkVKS1pHSi4u&route=shorturl

Detection highlights

No detections reported.

Infrastructure & activity

150.171.74.13United States AS8075 MICROSOFT-CORP-MSN-AS-BLOCK

Hosts: 4
Requests: 22
Received: 2.06 MB
Sent: 17.8 KB

Notable observed hosts

https://forms.cloud.microsoft/Pages/ResponsePage.aspx?id=QrkuoFAzGE2VdJ3i83WUXJlWwTShv_5FhrqIva68cwFUNExNNlJLRVhCMjNXWktTRFVDU1ZXMzkyQy4u

forms.cloud.microsoft

02 Sep 2026 · 18:32 UTC

Captured page Enlarge ↗ NEW ITEM RECEIVED

Detection highlights

No detections reported.

Infrastructure & activity

150.171.74.13United States AS8075 MICROSOFT-CORP-MSN-AS-BLOCK

Hosts: 3
Requests: 18
Received: 1.63 MB
Sent: 14.8 KB

Notable observed hosts

https://forms.cloud.microsoft/Pages/ResponsePage.aspx?id=5apsWxvC70yZGeklXLA9nkzZGIaieAdKrSGq_fVuRZ1URjVKMkFNM1kyM0ZXU0pDOTVSRlFKSjNXMS4u&rcc9f58585467440a9e179101161d76f2=Bei%20Fragen%20oder%20Anliegen%20steht%20Ihnen%20Herr%20Ricky%20Gr%C3%B6ger%20gerne%20zur%20Verf%C3%BCgung.%0A%0ADirektwahl%3A%20%2B41%2062%20745%2084%2089%20%20%20%20%20Mobil%3A%20%2B41%2079%20619%2042%2080%0A%0AE-Mail%3A%20Ricky.Gr%C3%B6ger%40estermann.ch%0A%0AObjekt%3A%20Hochhaus%20und%20Querbau%20Baufeld%20G%20Regensdorf%20Hochbau%0A%0AAusf%C3%BChrungsjahr%3A%202026%0A

forms.cloud.microsoft

02 Sep 2026 · 14:44 UTC

Captured page Enlarge ↗ Kundenbefragung

Final URL

https://forms.cloud.microsoft/Pages/ResponsePage.aspx?id=5apsWxvC70yZGeklXLA9nkzZGIaieAdKrSGq_fVuRZ1URjVKMkFNM1kyM0ZXU0pDOTVSRlFKSjNXMS4u

Detection highlights

No detections reported.

Infrastructure & activity

150.171.74.13United States AS8075 MICROSOFT-CORP-MSN-AS-BLOCK

Hosts: 4
Requests: 23
Received: 3.00 MB
Sent: 23.8 KB

Notable observed hosts