Report search · URLQuery

forms.cloud.microsoft

https://forms.cloud.microsoft/r/sLgWBpn9Sc

02 Sep 2026 · 04:37 UTC

Captured page Enlarge ↗ Sign in to your account

Final URL Different hostname

https://login.microsoftonline.com/organizations/oauth2/v2.0/authorize?client_id=c9a559d2-7aab-4f13-a6ed-e7e9c52aec87&redirect_uri=https%3A%2F%2Fforms.cloud.microsoft%2Flanding&state=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&response_type=code&scope=openid%20profile&response_mode=form_post&nonce=639239206458928433.ZWUzYmYxZDMtMGU0Ny00MmFkLThlY2EtYTEyYzc4Njg3YTEzZWYzNmM0MTUtMmRkNi00MjA5LWFhNGUtNWJkZWE5OGU5NWU5&msafed=0&x-client-SKU=ID_NET10_0&x-client-ver=8.19.2.0

Detection highlights

URLQuery 0IDS 0TDS 0

No detections reported.

View detections →

Infrastructure & activity

150.171.73.13United States AS8075 MICROSOFT-CORP-MSN-AS-BLOCK

Hosts: 4
Requests: 20
Received: 2.51 MB
Sent: 15.3 KB

Inspect network →

Notable observed hosts

1 more · View hosts →

Open report →

forms.cloud.microsoft

https://forms.cloud.microsoft/Pages/ShareFormPage.aspx?id=YI_KXM2RdUSMBVtTtKkX1TwKktFGbpFGmDFBwnTd4EBUOVBaSzJGTU4zMzJMMEFYM0VDUkZTVU1EMS4u&sharetoken=1Hbs6cJu7viRN3KFza8c

01 Sep 2026 · 18:53 UTC

Captured page Enlarge ↗ Sign in to your account

Final URL Different hostname

https://login.microsoftonline.com/common/oauth2/deviceauth

Detection highlights

URLQuery 2IDS 0TDS 0

Phishing - Ghost Phishing Kit URLQuery high severity Phishing

View detections →

Infrastructure & activity

150.171.74.13United States AS8075 MICROSOFT-CORP-MSN-AS-BLOCK

Hosts: 7
Requests: 38
Received: 10.87 MB
Sent: 28.9 KB

Inspect network →

Notable observed hosts

4 more · View hosts →

Report tags

Open report →

forms.cloud.microsoft

https://forms.cloud.microsoft/Pages/ShareFormPage.aspx?id=YI_KXM2RdUSMBVtTtKkX1TwKktFGbpFGmDFBwnTd4EBUOVBaSzJGTU4zMzJMMEFYM0VDUkZTVU1EMS4u&sharetoken=1Hbs6cJu7viRN3KFza8c

01 Sep 2026 · 18:47 UTC

Captured page Enlarge ↗ PAYMENT ADVICE (Copy)

Detection highlights

URLQuery 0IDS 0TDS 0

No detections reported.

View detections →

Infrastructure & activity

23.103.243.72Norway AS8075 MICROSOFT-CORP-MSN-AS-BLOCK

Hosts: 4
Requests: 22
Received: 10.63 MB
Sent: 19.5 KB

Inspect network →

Notable observed hosts

1 more · View hosts →

Open report →

forms.cloud.microsoft

https://forms.cloud.microsoft/Pages/ShareFormPage.aspx?id=YI_KXM2RdUSMBVtTtKkX1TwKktFGbpFGmDFBwnTd4EBUOVBaSzJGTU4zMzJMMEFYM0VDUkZTVU1EMS4u&sharetoken=1Hbs6cJu7viRN3KFza8c

01 Sep 2026 · 18:15 UTC

Captured page Enlarge ↗ PAYMENT ADVICE (Copy)

Detection highlights

URLQuery 0IDS 0TDS 0

No detections reported.

View detections →

Infrastructure & activity

23.103.243.64Norway AS8075 MICROSOFT-CORP-MSN-AS-BLOCK

Hosts: 4
Requests: 22
Received: 10.63 MB
Sent: 19.5 KB

Inspect network →

Notable observed hosts

1 more · View hosts →

Open report →

forms.cloud.microsoft

https://forms.cloud.microsoft/Pages/ShareFormPage.aspx?id=NEqPXtsrVEi7QrTQx9AkbN-I2lBgHc5OoioWZYqut-pURFAzMUhBRTMwVVRST1ExWU4yTTE1WlpHWC4u&sharetoken=8d80ld3IKGCqVOw3lznS

01 Sep 2026 · 15:27 UTC

Captured page Enlarge ↗ Parent Champion 1-2-1 Support and Supervision

Detection highlights

URLQuery 0IDS 0TDS 0

No detections reported.

View detections →

Infrastructure & activity

150.171.73.13United States AS8075 MICROSOFT-CORP-MSN-AS-BLOCK

Hosts: 3
Requests: 19
Received: 1.70 MB
Sent: 17.0 KB

Inspect network →

Notable observed hosts

View hosts →

Open report →

forms.cloud.microsoft

https://forms.cloud.microsoft/Pages/ShareFormPage.aspx?id=YI_KXM2RdUSMBVtTtKkX1TwKktFGbpFGmDFBwnTd4EBUQkJKQ0VHUVhGUUNWU1oxQTI5OTNCTTk4SC4u&sharetoken=9CkngBLcqWKwZPDkrkDf

01 Sep 2026 · 15:17 UTC

Captured page Enlarge ↗ PAYMENT ADVICE (Copy)

Detection highlights

URLQuery 0IDS 0TDS 0

No detections reported.

View detections →

Infrastructure & activity

150.171.73.13United States AS8075 MICROSOFT-CORP-MSN-AS-BLOCK

Hosts: 4
Requests: 22
Received: 10.63 MB
Sent: 19.5 KB

Inspect network →

Notable observed hosts

1 more · View hosts →

Open report →

forms.cloud.microsoft

https://forms.cloud.microsoft/Pages/ShareFormPage.aspx?id=YI_KXM2RdUSMBVtTtKkX1TwKktFGbpFGmDFBwnTd4EBUQkJKQ0VHUVhGUUNWU1oxQTI5OTNCTTk4SC4u&sharetoken=9CkngBLcqWKwZPDkrkDf

01 Sep 2026 · 15:12 UTC

Captured page Enlarge ↗ FINAL - PAYMENTS (AP Report) - Document Share Verification

Final URL Different hostname

https://irmaoscoelhoacabamentos.com.br/hamptoncountysc/

Detection highlights

URLQuery 2IDS 0TDS 0

Phishing - Ghost Phishing Kit URLQuery high severity Phishing

View detections →

Infrastructure & activity

150.171.73.13United States AS8075 MICROSOFT-CORP-MSN-AS-BLOCK

Hosts: 7
Requests: 34
Received: 10.87 MB
Sent: 26.8 KB

Inspect network →

Notable observed hosts

4 more · View hosts →

Report tags

phishing ghost aitm

Open report →

forms.cloud.microsoft

https://forms.cloud.microsoft/Pages/ShareFormPage.aspx?id=YI_KXM2RdUSMBVtTtKkX1TwKktFGbpFGmDFBwnTd4EBUQkJKQ0VHUVhGUUNWU1oxQTI5OTNCTTk4SC4u&sharetoken=9CkngBLcqWKwZPDkrkDf

01 Sep 2026 · 15:09 UTC

Captured page Enlarge ↗ PAYMENT ADVICE (Copy)

Detection highlights

URLQuery 0IDS 0TDS 0

No detections reported.

View detections →

Infrastructure & activity

150.171.73.13United States AS8075 MICROSOFT-CORP-MSN-AS-BLOCK

Hosts: 4
Requests: 22
Received: 10.63 MB
Sent: 19.5 KB

Inspect network →

Notable observed hosts

1 more · View hosts →

Open report →

forms.cloud.microsoft

https://forms.cloud.microsoft/Pages/ShareFormPage.aspx?id=YI_KXM2RdUSMBVtTtKkX1TwKktFGbpFGmDFBwnTd4EBUQkJKQ0VHUVhGUUNWU1oxQTI5OTNCTTk4SC4u&sharetoken=9CkngBLcqWKwZPDkrkDf

01 Sep 2026 · 14:54 UTC

Captured page Enlarge ↗ PAYMENT ADVICE (Copy)

Detection highlights

URLQuery 0IDS 0TDS 0

No detections reported.

View detections →

Infrastructure & activity

150.171.73.13United States AS8075 MICROSOFT-CORP-MSN-AS-BLOCK

Hosts: 4
Requests: 22
Received: 10.63 MB
Sent: 19.5 KB

Inspect network →

Notable observed hosts

1 more · View hosts →

Open report →

eur03.safelinks.protection.outlook.com

https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fforms.cloud.microsoft%2FPages%2FShareFormPage.aspx%3Fid%3DYI_KXM2RdUSMBVtTtKkX1TwKktFGbpFGmDFBwnTd4EBUQkJKQ0VHUVhGUUNWU1oxQTI5OTNCTTk4SC4u%26sharetoken%3D9CkngBLcqWKwZPDkrkDf&data=05%7C02%7Clisardo.lagares%40camden.gov.uk%7Cd22251df50f441ba901c08df08142a3f%7C5e8f4a342bdb4854bb42b4d0c7d0246c%7C0%7C0%7C639238558658140813%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C40000%7C%7C%7C&sdata=HwORBX4PYYflm08SioNa9bzGPo%2Bujz2zmKqlepnd42w%3D&reserved=0

01 Sep 2026 · 14:53 UTC

Captured page Enlarge ↗ FINAL - PAYMENTS (AP Report) - Document Share Verification

Final URL Different hostname

https://irmaoscoelhoacabamentos.com.br/hamptoncountysc/

Detection highlights

URLQuery 2IDS 0TDS 0

Phishing - Ghost Phishing Kit URLQuery high severity Phishing

View detections →

Infrastructure & activity

52.102.114.130United States AS8075 MICROSOFT-CORP-MSN-AS-BLOCK

Hosts: 8
Requests: 38
Received: 10.87 MB
Sent: 29.3 KB

Inspect network →

Notable observed hosts

5 more · View hosts →

Report tags

phishing ghost aitm

Open report →

forms.cloud.microsoft

https://forms.cloud.microsoft/Pages/ShareFormPage.aspx?id=YI_KXM2RdUSMBVtTtKkX1TwKktFGbpFGmDFBwnTd4EBUQkJKQ0VHUVhGUUNWU1oxQTI5OTNCTTk4SC4u&sharetoken=9CkngBLcqWKwZPDkrkDf

01 Sep 2026 · 14:53 UTC

Captured page Enlarge ↗ FINAL - PAYMENTS (AP Report) - Document Share Verification

Final URL Different hostname

https://irmaoscoelhoacabamentos.com.br/hamptoncountysc/

Detection highlights

URLQuery 2IDS 0TDS 0

Phishing - Ghost Phishing Kit URLQuery high severity Phishing

View detections →

Infrastructure & activity

150.171.74.13United States AS8075 MICROSOFT-CORP-MSN-AS-BLOCK

Hosts: 7
Requests: 35
Received: 10.87 MB
Sent: 27.1 KB

Inspect network →

Notable observed hosts

4 more · View hosts →

Report tags

phishing ghost aitm

Open report →

eur03.safelinks.protection.outlook.com

https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fforms.cloud.microsoft%2FPages%2FShareFormPage.aspx%3Fid%3DYI_KXM2RdUSMBVtTtKkX1TwKktFGbpFGmDFBwnTd4EBUQkJKQ0VHUVhGUUNWU1oxQTI5OTNCTTk4SC4u%26sharetoken%3D9CkngBLcqWKwZPDkrkDf&data=05%7C02%7Clisardo.lagares%40camden.gov.uk%7Cd22251df50f441ba901c08df08142a3f%7C5e8f4a342bdb4854bb42b4d0c7d0246c%7C0%7C0%7C639238558658140813%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C40000%7C%7C%7C&sdata=HwORBX4PYYflm08SioNa9bzGPo%2Bujz2zmKqlepnd42w%3D&reserved=0

01 Sep 2026 · 14:51 UTC

Captured page Enlarge ↗ PAYMENT ADVICE (Copy)

Final URL Different hostname

https://forms.cloud.microsoft/Pages/ShareFormPage.aspx?id=YI_KXM2RdUSMBVtTtKkX1TwKktFGbpFGmDFBwnTd4EBUQkJKQ0VHUVhGUUNWU1oxQTI5OTNCTTk4SC4u&sharetoken=9CkngBLcqWKwZPDkrkDf

Detection highlights

URLQuery 0IDS 0TDS 0

No detections reported.

View detections →

Infrastructure & activity

52.102.115.67United States AS8075 MICROSOFT-CORP-MSN-AS-BLOCK

Hosts: 5
Requests: 23
Received: 10.63 MB
Sent: 20.5 KB

Inspect network →

Notable observed hosts

2 more · View hosts →

Open report →

forms.office.com

https://forms.office.com/e/jM9FshinFF

01 Sep 2026 · 13:48 UTC

Captured page Enlarge ↗ New National Public Order Public Safety Operational Debrief Form

Final URL Different hostname

https://forms.cloud.microsoft/pages/responsepage.aspx?id=mlUzE5pDCkq9wKRs04iC1656IAvh28FDo9-DQ0IM8P1UQUtKUUVNMVdWV0FWSEpRM0cyTEJVN0xXSSQlQCN0PWcu&route=shorturl

Detection highlights

URLQuery 0IDS 0TDS 0

No detections reported.

View detections →

Infrastructure & activity

150.171.73.13United States AS8075 MICROSOFT-CORP-MSN-AS-BLOCK

Hosts: 5
Requests: 20
Received: 1.78 MB
Sent: 16.4 KB

Inspect network →

Notable observed hosts

2 more · View hosts →

Open report →

forms.cloud.microsoft

https://forms.cloud.microsoft/e/jeDJi60Xgg

01 Sep 2026 · 09:26 UTC

Captured page Enlarge ↗ Reckmann GmbH DOCUMENTS

Final URL

https://forms.cloud.microsoft/pages/responsepage.aspx?id=hUxtYRm3xU6isRsM7yMiSLGoDHImpo9AphB36gm7kgxUMzA3OTg4SkNaVFBYNjc4OTVJRVIxRE80NS4u&route=shorturl

Detection highlights

URLQuery 0IDS 0TDS 0

No detections reported.

View detections →

Infrastructure & activity

150.171.74.13United States AS8075 MICROSOFT-CORP-MSN-AS-BLOCK

Hosts: 3
Requests: 19
Received: 1.63 MB
Sent: 15.5 KB

Inspect network →

Notable observed hosts

View hosts →

Open report →

forms.cloud.microsoft

https://forms.cloud.microsoft/e/jeDJi60Xgg

01 Sep 2026 · 09:22 UTC

Captured page Enlarge ↗ Reckmann GmbH DOCUMENTS

Final URL

https://forms.cloud.microsoft/pages/responsepage.aspx?id=hUxtYRm3xU6isRsM7yMiSLGoDHImpo9AphB36gm7kgxUMzA3OTg4SkNaVFBYNjc4OTVJRVIxRE80NS4u&route=shorturl

Detection highlights

URLQuery 0IDS 0TDS 0

No detections reported.

View detections →

Infrastructure & activity

150.171.74.13United States AS8075 MICROSOFT-CORP-MSN-AS-BLOCK

Hosts: 3
Requests: 18
Received: 1.63 MB
Sent: 14.6 KB

Inspect network →

Notable observed hosts

View hosts →

Open report →

forms.cloud.microsoft

http://forms.cloud.microsoft/r/YVtW6C3vkw?origin=lprLink

01 Sep 2026 · 00:46 UTC

Captured page Enlarge ↗ Psg Furniture

Final URL

https://forms.cloud.microsoft/pages/responsepage.aspx?id=cea2K-B4bkSYh6vzK0ZaoYjzHGCZiahEi90GkWzeAdlUOE5CQ0wwVEw2OTVWM1lQR0k3TjlGTjRBRS4u&origin=lprLink&route=shorturl

Detection highlights

URLQuery 0IDS 0TDS 0

No detections reported.

View detections →

Infrastructure & activity

150.171.74.13United States AS8075 MICROSOFT-CORP-MSN-AS-BLOCK

Hosts: 4
Requests: 23
Received: 1.98 MB
Sent: 18.8 KB

Inspect network →

Notable observed hosts

1 more · View hosts →

Open report →

forms.cloud.microsoft

https://forms.cloud.microsoft/Pages/ResponsePage.aspx?id=wzpzDYjh4Uud-ffJH55bPehvLJgNklBPltqP0dDkew9URDY2MVNJTklaMzRFOVdGOEMzMkM0QkdTVC4u&origin=Invitation&channel=0

31 Aug 2026 · 18:13 UTC

Captured page Enlarge ↗ Sign in to your account

Final URL Different hostname

https://login.microsoftonline.com/organizations/oauth2/v2.0/authorize?client_id=c9a559d2-7aab-4f13-a6ed-e7e9c52aec87&redirect_uri=https%3A%2F%2Fforms.cloud.microsoft%2Flanding&state=eyJ2ZXJzaW9uIjoxLCJkYXRhIjp7IklkZW50aXR5UHJvdmlkZXIiOiJBY0RwcmMxNWllSkdrMnJiRkwyWXhMek1ScWFIbURseEY5ejdtLThHREhWUjZ2SFlCYUJmNzBnRjRSZkI0bWMwWTlHekgzVkVoMEF6b1Y3TTVZZU02dkkiLCIucmVkaXJlY3QiOiJodHRwczovL2Zvcm1zLmNsb3VkLm1pY3Jvc29mdC9QYWdlcy9SZXNwb25zZVBhZ2UuYXNweD9pZD13enB6RFlqaDRVdWQtZmZKSDU1YlBlaHZMSmdOa2xCUGx0cVAwZERrZXc5VVJEWTJNVk5KVGtsYU16UkZPVmRHT0VNek1rTTBRa2RUVkM0dSZvcmlnaW49SW52aXRhdGlvbiZjaGFubmVsPTAmc2lkPTA4NmQyMjVjLTMyMWYtNGE2OS1iMjlmLTgwYWYxZTJhZGM5YyIsIi54c3JmIjoiQWNTdmJvYjNmYl8tU1ZqRk45cDZHRkhEdVh2b1lZLUI2RDRmU0dOMDZvQVVJZ2tWMTdoQlpoSHhGNkJiRFlHd0JCZHpmRVg0ZHZsYWlkVHJsaGRRVzMxcWtTWnVLZjNWc1pWQU9kZDI3R0lhdmxIaGJ4VkRqU1VSaVZ1c3g5VEI5QSIsIk9wZW5JZENvbm5lY3QuQ29kZS5SZWRpcmVjdFVyaSI6IkFaMFJxLVA5SVhVaklIMk5BTnEzeDF0Um4zLTdEQlIzR1YxZVFtc29hSTFjNGpfSU94WFZqQWJJUzdIS21IV3phcmhqbHVsVXdDaDNoQ3RWZlVST2g1YWg5bHpHV0xzWDdHblNqRjFsMnBjMW82RUhGNWw4blV5YmJSTFlvQUpBT1EifX0&response_type=code&scope=openid%20profile&response_mode=form_post&nonce=639237967705476845.YTkxNmYzMjMtNWEyZi00NDg2LTg2YzctOTdjZmU4Mzk5NDg2NThkYjU1NTgtMzRlMC00ZGFjLTg4ODQtMzQ2YWU1Y2ZlYzJl&msafed=0&x-client-SKU=ID_NET10_0&x-client-ver=8.19.2.0

Detection highlights

URLQuery 0IDS 0TDS 0

No detections reported.

View detections →

Infrastructure & activity

23.103.243.78Norway AS8075 MICROSOFT-CORP-MSN-AS-BLOCK

Hosts: 3
Requests: 13
Received: 1.20 MB
Sent: 11.3 KB

Inspect network →

Notable observed hosts

View hosts →

Open report →

forms.cloud.microsoft

https://forms.cloud.microsoft/Pages/ResponsePage.aspx?id=wzpzDYjh4Uud-ffJH55bPehvLJgNklBPltqP0dDkew9URDY2MVNJTklaMzRFOVdGOEMzMkM0QkdTVC4u&origin=Invitation&channel=0

31 Aug 2026 · 15:54 UTC

Captured page Enlarge ↗ Sign in to your account

Final URL Different hostname

https://login.microsoftonline.com/organizations/oauth2/v2.0/authorize?client_id=c9a559d2-7aab-4f13-a6ed-e7e9c52aec87&redirect_uri=https%3A%2F%2Fforms.cloud.microsoft%2Flanding&state=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&response_type=code&scope=openid%20profile&response_mode=form_post&nonce=639237884363953080.ZWVjZjExMDEtNmY1My00MWE3LWE1NzYtOGEwOWUwMzEyMGIzZTIyNDRjYzQtMjkzNC00YmFlLThlMzYtYTg2MmFmMzNmNmQ0&msafed=0&x-client-SKU=ID_NET10_0&x-client-ver=8.19.2.0

Detection highlights

URLQuery 0IDS 0TDS 0

No detections reported.

View detections →

Infrastructure & activity

150.171.73.13United States AS8075 MICROSOFT-CORP-MSN-AS-BLOCK

Hosts: 3
Requests: 13
Received: 1.14 MB
Sent: 11.3 KB

Inspect network →

Notable observed hosts

View hosts →

Open report →

forms.cloud.microsoft

https://forms.cloud.microsoft/Pages/ResponsePage.aspx?id=wzpzDYjh4Uud-ffJH55bPehvLJgNklBPltqP0dDkew9URDY2MVNJTklaMzRFOVdGOEMzMkM0QkdTVC4u&origin=Invitation&channel=0

31 Aug 2026 · 15:53 UTC

Captured page Enlarge ↗ Sign in to your account

Final URL Different hostname

https://login.microsoftonline.com/organizations/oauth2/v2.0/authorize?client_id=c9a559d2-7aab-4f13-a6ed-e7e9c52aec87&redirect_uri=https%3A%2F%2Fforms.cloud.microsoft%2Flanding&state=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&response_type=code&scope=openid%20profile&response_mode=form_post&nonce=639237883958622724.YzZlMGU0NTQtNzBmMC00ZmU2LTgwMTAtMjJmNDExYTc1MTg4NWEwMDllOTQtMjJlMi00ODcyLTg4ZjYtNzA3OThkNTEyNmZl&msafed=0&x-client-SKU=ID_NET10_0&x-client-ver=8.19.2.0

Detection highlights

URLQuery 0IDS 0TDS 0

No detections reported.

View detections →

Infrastructure & activity

150.171.73.13United States AS8075 MICROSOFT-CORP-MSN-AS-BLOCK

Hosts: 4
Requests: 19
Received: 2.51 MB
Sent: 14.9 KB

Inspect network →

Notable observed hosts

1 more · View hosts →

Open report →

forms.cloud.microsoft

https://forms.cloud.microsoft/Pages/ResponsePage.aspx?id=wzpzDYjh4Uud-ffJH55bPehvLJgNklBPltqP0dDkew9URDY2MVNJTklaMzRFOVdGOEMzMkM0QkdTVC4u&origin=Invitation&channel=0

31 Aug 2026 · 15:53 UTC

Captured page Enlarge ↗ Sign in to your account

Final URL Different hostname

https://login.microsoftonline.com/organizations/oauth2/v2.0/authorize?client_id=c9a559d2-7aab-4f13-a6ed-e7e9c52aec87&redirect_uri=https%3A%2F%2Fforms.cloud.microsoft%2Flanding&state=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&response_type=code&scope=openid%20profile&response_mode=form_post&nonce=639237883660233738.NWNhYmY1ODktMDcyNy00YzhlLWI4ZWItMTYzN2FmMDY2NmVhNjdhOWI5OGQtMzBhZi00Y2UyLTg3NDMtMjk5NGRkYzI5N2Vj&msafed=0&x-client-SKU=ID_NET10_0&x-client-ver=8.19.2.0

Detection highlights

URLQuery 0IDS 0TDS 0

No detections reported.

View detections →

Infrastructure & activity

150.171.73.13United States AS8075 MICROSOFT-CORP-MSN-AS-BLOCK

Hosts: 3
Requests: 13
Received: 1.14 MB
Sent: 11.3 KB

Inspect network →

Notable observed hosts

View hosts →

Open report →

forms.cloud.microsoft

https://forms.cloud.microsoft/Pages/ResponsePage.aspx?id=xPyz4I6fsUCZWS17lH6LQRoOylLdvtpKmFQOHcRgJVVUMjVNNERYOFdYT0ZNRTRIWUhISDBMSU5TTC4u&origin=Invitation&channel=0

28 Aug 2026 · 14:55 UTC

Captured page Enlarge ↗ Annual Enrollment 2027 Empyrean Carrier Questionnaire FINAL

Detection highlights

URLQuery 0IDS 0TDS 0

No detections reported.

View detections →

Infrastructure & activity

150.171.74.13United States AS8075 MICROSOFT-CORP-MSN-AS-BLOCK

Hosts: 3
Requests: 18
Received: 1.95 MB
Sent: 15.2 KB

Inspect network →

Notable observed hosts

View hosts →

Open report →

nam02.safelinks.protection.outlook.com

https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fforms.cloud.microsoft%2Fe%2FX7ySdsGWtU&data=05%7C02%7Cabigail.burton%40fadv.com%7C94357f0b82ea4868cf7508df0429d4e1%7C6c4b33465ad44991b51ebb35a33065b0%7C1%7C0%7C639234250341983178%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=WqBqAW0GCDcFKLibZ3L7GI7CVLiSYPAfN2ngJa4YPUA%3D&reserved=0

28 Aug 2026 · 12:44 UTC

Captured page Enlarge ↗ Careers Fair Participation Questionnaire - 2026

Final URL Different hostname

https://forms.cloud.microsoft/pages/responsepage.aspx?id=IlOSlu1cK0ClRDcb_Ol3tk9AObxu6j5Do-H4QKUm3vdUMUVMN0hSWFIwVVFDMVhYSDBDWFRSUjdKTS4u&route=shorturl

Detection highlights

URLQuery 0IDS 0TDS 0

No detections reported.

View detections →

Infrastructure & activity

52.102.115.67United States AS8075 MICROSOFT-CORP-MSN-AS-BLOCK

Hosts: 4
Requests: 23
Received: 2.31 MB
Sent: 19.2 KB

Inspect network →

Notable observed hosts

1 more · View hosts →

Open report →

trail.urbansoccer.fr

https://trail.urbansoccer.fr/api/t/c/usr_92wYPzvZBtQEDYyAo/tsk_boxcJ5jonSR2ssypH/enc_U2FsdGVkX18iup0Jd-tWGk0mMUk-b08Dt2WnP9uPBxbR4jTB12_l-vqapjVxyMtEBITZ-sxHUJqV0M5RcuXNfds7XL6aaUB8DT7RdgSF7kYrOTFYoKGhdiJq_ZNb-Uv_

27 Aug 2026 · 14:56 UTC

Captured page Enlarge ↗ Joué-les-Tours | Tournoi par Secteur d'activité

Final URL Different hostname

https://forms.cloud.microsoft/pages/responsepage.aspx?id=26AAzObhykS8qoDlqDOqkCN1QCaftR9EkYpQKy_WnJVUQVVVTzIyRFE4NU5WS1oxVFY4VFFTUDlRWS4u&route=shorturl

Detection highlights

URLQuery 0IDS 0TDS 0

No detections reported.

View detections →

Infrastructure & activity

188.165.50.182United Kingdom AS16276 OVH SAS

Hosts: 5
Requests: 24
Received: 2.67 MB
Sent: 20.1 KB

Inspect network →

Notable observed hosts

2 more · View hosts →

Open report →

forms.office.com

https://forms.office.com/r/2kKCEkE8ua

27 Aug 2026 · 13:35 UTC

Captured page Enlarge ↗ Sign in to your account

Final URL Different hostname

https://login.microsoftonline.com/organizations/oauth2/v2.0/authorize?client_id=c9a559d2-7aab-4f13-a6ed-e7e9c52aec87&redirect_uri=https%3A%2F%2Fforms.cloud.microsoft%2Flanding&state=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&response_type=code&scope=openid%20profile&response_mode=form_post&nonce=639234344758447461.MDBkNGRlZTctMDkwMS00YjAzLWE0MDQtZjQ5NmQ5NjBkNjNhYzI0ZWY5ZWEtOTliNi00NDAzLWEyMTgtY2Y2OTY1NmZjNDVl&msafed=0&x-client-SKU=ID_NET10_0&x-client-ver=8.19.2.0

Detection highlights

URLQuery 0IDS 0TDS 0

No detections reported.

View detections →

Infrastructure & activity

150.171.74.13United States AS8075 MICROSOFT-CORP-MSN-AS-BLOCK

Hosts: 4
Requests: 15
Received: 1.14 MB
Sent: 12.3 KB

Inspect network →

Notable observed hosts

1 more · View hosts →

Open report →

>Let’s explore.

[QUERY RESULTS·: REPORTS]

Detection highlights

Infrastructure & activity

Notable observed hosts

Detection highlights

Infrastructure & activity

Notable observed hosts

Detection highlights

Infrastructure & activity

Notable observed hosts

Detection highlights

Infrastructure & activity

Notable observed hosts

Detection highlights

Infrastructure & activity

Notable observed hosts

Detection highlights

Infrastructure & activity

Notable observed hosts

Detection highlights

Infrastructure & activity

Notable observed hosts

Detection highlights

Infrastructure & activity

Notable observed hosts

Detection highlights

Infrastructure & activity

Notable observed hosts

Detection highlights

Infrastructure & activity

Notable observed hosts

Detection highlights

Infrastructure & activity

Notable observed hosts

Detection highlights

Infrastructure & activity

Notable observed hosts

Detection highlights

Infrastructure & activity

Notable observed hosts

Detection highlights

Infrastructure & activity

Notable observed hosts

Detection highlights

Infrastructure & activity

Notable observed hosts

Detection highlights

Infrastructure & activity

Notable observed hosts

Detection highlights

Infrastructure & activity

Notable observed hosts

Detection highlights

Infrastructure & activity

Notable observed hosts

Detection highlights

Infrastructure & activity

Notable observed hosts

Detection highlights

Infrastructure & activity

Notable observed hosts

Detection highlights

Infrastructure & activity

Notable observed hosts

Detection highlights

Infrastructure & activity

Notable observed hosts

Detection highlights

Infrastructure & activity

Notable observed hosts

Detection highlights

Infrastructure & activity

Notable observed hosts

Let’s explore.

QUERY RESULTS: REPORTS