&gt; Let’s explore.

No detections reported.

Infrastructure & activity

150.171.73.13United States AS8075 MICROSOFT-CORP-MSN-AS-BLOCK

Hosts: 3
Requests: 21
Received: 1.69 MB
Sent: 18.4 KB

Notable observed hosts

http://hs.phynd.co/e3t/Ctc/W5+113/d59c0X04/MVD5r7GjWfrVF_Whr822tKvW13cSCp5SqSKrN3cFw5-3qgz0W7lCdLW6lZ3nlVMgRBd4k5Dx3W2QlkJT13rgc7W1pB6sv2tG7HXW219nRH97krK1N9jT9LnTyw2tV5r04W33_YgNW5RNryj81VgJCW3YD2pp5-8ZN4W5jJwBR2-94M2W7h8Zgp7B176qW3Qpz0156WTmsW5jdGSC1wZYxcW8tGy5r6rplPVW2FdZdg2cMrtZW5yL6yr40yKX2W1mgQLN6D45JSW4pLz6g8l_T42W1YKmF16VnGV0W1xSQ4S4kbhFJW62R3Sk7YgpcNW2Sl_7Q1n09rfW8JzSZM7D3pXcW7hvpJX75RFRVW8qPGN41CYQZYf7xv5QP04

hs.phynd.co

07 Aug 2026 · 19:11 UTC

Captured page Enlarge ↗ PHYND User Survey (Page 1 of 5)

Final URL Different hostname

https://forms.cloud.microsoft/pages/responsepage.aspx?id=Uvw61cwT_0KSGTWxNWCTZOuhWEEF0yZHsk4d1_by2RRUNjc3Q1pIRkFYRFFGNktFS09INUxSRVRXUi4u&utm_campaign=49077855-New+Games&utm_medium=email&_hsenc=p2ANqtz--vEHEJLwS7b0vQLbA9-4o1oZRqnTp8H5tZtLcio29s15PrFhL-mCaNCbuDjYoTSSZjn9iWdrZcozeapq7FRj3UkI1uAS2iphMNDBb6wAxdWFQ71g4&_hsmi=432099861&utm_content=432099861&utm_source=hs_email&route=shorturl

Detection highlights

No detections reported.

Infrastructure & activity

199.60.103.227United States AS209242 Cloudflare London, LLC

Hosts: 6
Requests: 23
Received: 1.66 MB
Sent: 22.4 KB

Notable observed hosts

https://forms.cloud.microsoft/e/Qf2gBENL9v

forms.cloud.microsoft

07 Aug 2026 · 11:18 UTC

Captured page Enlarge ↗ Bestätigung des gewünschten E-Rechnungsformats für STILL GmbH (ab dem 01.01.2027).

Final URL

https://forms.cloud.microsoft/pages/responsepage.aspx?id=4CjHEwy790yOEFsycnnW2Sg4oNr32EZBh52ijDy46LVUME84N1Q2N0sxS0IxMzdCSUg5TFFDR0Q0SS4u&route=shorturl

Detection highlights

No detections reported.

Infrastructure & activity

150.171.73.13United States AS8075 MICROSOFT-CORP-MSN-AS-BLOCK

Hosts: 3
Requests: 19
Received: 1.63 MB
Sent: 15.3 KB

Notable observed hosts

https://forms.cloud.microsoft/r/EeBwZH6NWj

forms.cloud.microsoft

06 Aug 2026 · 22:33 UTC

Captured page Enlarge ↗ Microsoft Forms

Final URL

https://forms.cloud.microsoft/pages/responsepage.aspx?id=sjYoOQff9E2PpvKKQ6eGpmWsAvkRa2ZBr9KW475KyzJUMUpDSURIWTlTNzM3WFVaSFFVOVg5Qk9DRC4u&route=shorturl

Detection highlights

No detections reported.

Infrastructure & activity

150.171.73.13United States AS8075 MICROSOFT-CORP-MSN-AS-BLOCK

Hosts: 3
Requests: 15
Received: 1.58 MB
Sent: 12.1 KB

Notable observed hosts

https://forms.office.com/r/VgugsVAUMe

forms.office.com

06 Aug 2026 · 19:28 UTC

Captured page Enlarge ↗ Client Feedback Survey

Final URL Different hostname

https://forms.cloud.microsoft/pages/responsepage.aspx?id=TmApMpuFlEWFO8ZtFbjdgOUYXloNIcJHpjKXfznsGbxUN1NINkJHRDBITk5LVFQ1UjUwWk1GRkhCTSQlQCN0PWcu&route=shorturl

Detection highlights

No detections reported.

Infrastructure & activity

13.107.6.194United States AS8068 MICROSOFT-CORP-MSN-AS-BLOCK

Hosts: 6
Requests: 21
Received: 2.46 MB
Sent: 17.2 KB

Notable observed hosts

https://forms.cloud.microsoft/Pages/ResponsePage.aspx?id=

forms.cloud.microsoft

06 Aug 2026 · 18:38 UTC

Captured page Enlarge ↗ Microsoft Forms

Detection highlights

No detections reported.

Infrastructure & activity

150.171.74.13United States AS8075 MICROSOFT-CORP-MSN-AS-BLOCK

Hosts: 2
Requests: 11
Received: 1.56 MB
Sent: 8.4 KB

Notable observed hosts

https://forms.cloud.microsoft/Pages/ResponsePage.aspx?id=pZFV4AKoMECpJ7BM3zxnZmkHWWplUEVHtONJo-dS2ktUQ0ZFSFFUUFdQSUFRNlpSOTFNUlVKWFY3TC4u

forms.cloud.microsoft

06 Aug 2026 · 16:47 UTC

Captured page Enlarge ↗ Confirm access

Final URL Different hostname

https://techminescapemineralspvtltdgroup.atecfmcwireles.vu/6c8x7vw27

Detection highlights

URLQuery 2IDS 0TDS 1

Infrastructure & activity

150.171.74.13United States AS8075 MICROSOFT-CORP-MSN-AS-BLOCK

Hosts: 4
Requests: 23
Received: 1.64 MB
Sent: 18.1 KB

Notable observed hosts

Report tags

https://eur01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fforms.cloud.microsoft%2Fr%2FSYq2qr5WWV&data=05%7C02%7Cfloerger%40snf.com%7C14ff913f852b457b304708def3b7b19b%7Caf79a815bdf9493285476f6c4403daf0%7C0%7C0%7C639216167516138319%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=VsY%2FY9phBy%2BA5YCG2WOCcnZ0i7xj1rjoDkj%2F4OrSuwc%3D&reserved=0

eur01.safelinks.protection.outlook.com

06 Aug 2026 · 14:20 UTC

Captured page Enlarge ↗ Onboarding confirmation survey

Final URL Different hostname

https://forms.cloud.microsoft/pages/responsepage.aspx?id=EEMoT_SGIEWPMig979D8fXwxWyH1eVRCiFsIo31nbIpUNDFUTEtYOTlLSEk0R081UzdXUzk0OTNCTy4u&route=shorturl

Detection highlights

No detections reported.

Infrastructure & activity

52.102.115.76United States AS8075 MICROSOFT-CORP-MSN-AS-BLOCK

Hosts: 4
Requests: 20
Received: 1.87 MB
Sent: 16.5 KB

Notable observed hosts

https://forms.office.com/Pages/ResponsePage.aspx?id=Usum6tdYzUWL1rHSqOYTEhINxVCZ1-1Lu6dzQGC6YTFURjQxMjZDNkNFTlo5NTBZN0o3WFJWRzhQWiQlQCN0PWcu&fromURI=%2Fhelp%2Flogin

forms.office.com

05 Aug 2026 · 19:40 UTC

Captured page Enlarge ↗ Having Trouble Logging in to the Supplier Portal?

Final URL Different hostname

https://forms.cloud.microsoft/Pages/ResponsePage.aspx?id=Usum6tdYzUWL1rHSqOYTEhINxVCZ1-1Lu6dzQGC6YTFURjQxMjZDNkNFTlo5NTBZN0o3WFJWRzhQWiQlQCN0PWcu&fromURI=%2Fhelp%2Flogin

Detection highlights

No detections reported.

Infrastructure & activity

13.107.6.194United States AS8068 MICROSOFT-CORP-MSN-AS-BLOCK

Hosts: 4
Requests: 18
Received: 1.64 MB
Sent: 15.1 KB

Notable observed hosts

https://url.za.m.mimecastprotect.com/s/lu1qC76JmLf37Y9mT8f3jho9Jbx?domain=forms.office.com

url.za.m.mimecastprotect.com

05 Aug 2026 · 09:52 UTC

Captured page Enlarge ↗ Complaints, Compliments, and Suggestions

Final URL Different hostname

https://forms.cloud.microsoft/pages/responsepage.aspx?id=zX4DtfBmEEKIoSbHQddQGSuvYaTT0QpDlWFsCn7UoWxUNFA4Nk5WTVdEWllLOTg3NktWQU1FMU1BSSQlQCN0PWcu&route=shorturl

Detection highlights

No detections reported.

Infrastructure & activity

41.74.196.103South Africa AS37235 MimecastSA

Hosts: 6
Requests: 29
Received: 2.22 MB
Sent: 26.7 KB

Notable observed hosts

https://url.za.m.mimecastprotect.com/s/lu1qC76JmLf37Y9mT8f3jho9Jbx?domain=forms.office.com

url.za.m.mimecastprotect.com

05 Aug 2026 · 09:50 UTC

Captured page Enlarge ↗ Complaints, Compliments, and Suggestions

Final URL Different hostname

https://forms.cloud.microsoft/pages/responsepage.aspx?id=zX4DtfBmEEKIoSbHQddQGSuvYaTT0QpDlWFsCn7UoWxUNFA4Nk5WTVdEWllLOTg3NktWQU1FMU1BSSQlQCN0PWcu&route=shorturl

Detection highlights

No detections reported.

Infrastructure & activity

41.74.192.103South Africa AS37235 MimecastSA

Hosts: 6
Requests: 28
Received: 2.22 MB
Sent: 25.8 KB

Notable observed hosts

https://url.za.m.mimecastprotect.com/s/lu1qC76JmLf37Y9mT8f3jho9Jbx?domain=forms.office.com

url.za.m.mimecastprotect.com

05 Aug 2026 · 09:48 UTC

Captured page Enlarge ↗ Complaints, Compliments, and Suggestions

Final URL Different hostname

https://forms.cloud.microsoft/pages/responsepage.aspx?id=zX4DtfBmEEKIoSbHQddQGSuvYaTT0QpDlWFsCn7UoWxUNFA4Nk5WTVdEWllLOTg3NktWQU1FMU1BSSQlQCN0PWcu&route=shorturl

Detection highlights

No detections reported.

Infrastructure & activity

41.74.192.103South Africa AS37235 MimecastSA

Hosts: 6
Requests: 28
Received: 2.22 MB
Sent: 25.8 KB

Notable observed hosts

https://forms.office.com/e/D6dAfYckFk

forms.office.com

04 Aug 2026 · 08:38 UTC

Captured page Enlarge ↗ Je souhaite être rappelé par Sherlay RICBOURT spécialiste du financement chez Finvens

Final URL Different hostname

https://forms.cloud.microsoft/pages/responsepage.aspx?id=y-9SQ-xf1U-ODKui0HEnAY-uYqdZ2YdFrdst7M_LJ81UMDFHV0FLQVNXUjBJOEhBVkwwRUNFR1JQUS4u&route=shorturl

Detection highlights

No detections reported.

Infrastructure & activity

13.107.6.194United States AS8068 MICROSOFT-CORP-MSN-AS-BLOCK

Hosts: 4
Requests: 21
Received: 1.63 MB
Sent: 17.5 KB

Notable observed hosts

https://x7msk.mjt.lu/lnk/AMYAAKH_TDkAAAAAAAAAA-9rg14AAAAAPqEAAAAAABcnyABqaHhmBHwD5sglSEyPFzdTAO2WnAAQiC4/0/Hx6lUS2P7AR4uwMYEKckpQ/aHR0cHM6Ly9hcHBzLmNmY2ltLm9yZy9yL3hRcmsvbS81NjMyMDk3?b=3

x7msk.mjt.lu

03 Aug 2026 · 12:30 UTC

Captured page Enlarge ↗ Mission de prospection : BATIMAT 2026

Final URL Different hostname

https://forms.cloud.microsoft/Pages/ResponsePage.aspx?id=GrjlLqFinUmyJ9AWh0YkhOfeFmqyPDJHp5M1-nDWCUhUNU01Q0pOWVRLN1hRTVRISlNLRVFKNDgxQSQlQCNjPTEu&utm_source=Mission+de+prospecti%2E%2E%2E+%28E-mail+Marketing+cr%C3%A9%C3%A9%28es%29+le+2026-07-07%29+%5B6%5D&utm_medium=Email

Detection highlights

No detections reported.

Infrastructure & activity

35.241.186.140Belgium AS396982 GOOGLE-CLOUD-PLATFORM

Hosts: 6
Requests: 25
Received: 1.78 MB
Sent: 23.1 KB

Notable observed hosts

https://forms.cloud.microsoft/Pages/ResponsePage.aspx?id=NMn7QOId1kGTMMBterBaa7VDldfff9RLlTg2Qhi_SnlUOUM5UlJDNDVSVTNTTlNWUzY5VjlNNkhJVC4u&origin=Invitation&channel=0

forms.cloud.microsoft

03 Aug 2026 · 07:59 UTC

https://pgmcsceylk.munyanpianting.com/deer6_ocean4_fox1_cliff4_ship4_apple3_fox5_car10_fish6_plane2_bridge8

Final URL Different hostname

Detection highlights

URLQuery 3IDS 0TDS 1

Infrastructure & activity

150.171.74.13United States AS8075 MICROSOFT-CORP-MSN-AS-BLOCK

Hosts: 9
Requests: 40
Received: 4.25 MB
Sent: 31.3 KB

Notable observed hosts

6 more · View hosts →

Report tags

microsoft phishing dkstools aitm

https://urldefense.com/v3/__https://forms.office.com/Pages/DesignPage.aspx*FormId=S3UcKgr7xk2JQHh2KEiP1nV93FKB7j9PnUms-hyqbP9UMEozMllDSlUzQjA1QTFJRkNER0FKRVNVVCQlQCN0PWcu&Analysis=true&origin=EmailNotification__;Iw!!Nzr058k!KG12oKf5n6pulr-eh8fSSy223WU9gC54Ju1UTZVH6oC3BSm_JE2_jqActxykQjJa8klYfWgPb3RgauIN-76D96B8B_xpVjqq$

urldefense.com

31 Jul 2026 · 15:25 UTC

https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=c9a559d2-7aab-4f13-a6ed-e7e9c52aec87&redirect_uri=https%3A%2F%2Fforms.cloud.microsoft%2Flanding&state=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&response_type=code&scope=openid%20profile&response_mode=form_post&nonce=639211082827376512.NTAxMmZmNDktN2M1My00ZjE1LTllZGUtYjdkMmM0Y2I3YWI3MDMyN2M0OGMtMTY1Mi00ODdhLTgzMTYtNTRjYjA4YzRlNzA2&prompt=select_account&x-client-SKU=ID_NET10_0&x-client-ver=8.19.2.0

Final URL Different hostname

Detection highlights

No detections reported.

Infrastructure & activity

52.71.28.102United States AS14618 AMAZON-AES

Hosts: 10
Requests: 51
Received: 3.22 MB
Sent: 36.2 KB

Notable observed hosts

7 more · View hosts →

https://forms.cloud.microsoft/Pages/ResponsePage.aspx?id=EdvRGz0keUmj0-_XSJMruYYLFI-PmD5BtNwHEFxRy4dUNkJMS084VVpDWldSNk01UFhMNTBGWU5IVC4u

forms.cloud.microsoft

31 Jul 2026 · 13:43 UTC

https://login.microsoftonline.com/organizations/oauth2/v2.0/authorize?client_id=c9a559d2-7aab-4f13-a6ed-e7e9c52aec87&redirect_uri=https%3A%2F%2Fforms.cloud.microsoft%2Flanding&state=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&response_type=code&scope=openid%20profile&response_mode=form_post&nonce=639211022142580401.ZjU2YjBhNTQtNDNhMC00OTFmLTg0YjQtNzhlZmFkMjNhOWI2ZmE1Mzk3NTAtNTQyNi00NWJjLTllNjktZTRkYmZhNzQ1YTIw&msafed=0&x-client-SKU=ID_NET10_0&x-client-ver=8.19.2.0

Final URL Different hostname

Detection highlights

No detections reported.

Infrastructure & activity

150.171.73.13United States AS8075 MICROSOFT-CORP-MSN-AS-BLOCK

Hosts: 4
Requests: 24
Received: 2.52 MB
Sent: 23.7 KB

Notable observed hosts

https://forms.cloud.microsoft/Pages/ResponsePage.aspx?id=p1-RzK7V0EC_lCDcyVmq_XkdNGl8oJJAvvgba3jh401UQ1c5SU00MVAxQUdXQkFLUzhGVlFSNlRTNS4u

forms.cloud.microsoft

31 Jul 2026 · 11:59 UTC

Captured page Enlarge ↗ bbits x Love Clean Streets Office Hours Call Feedback

Detection highlights

No detections reported.

Infrastructure & activity

150.171.73.13United States AS8075 MICROSOFT-CORP-MSN-AS-BLOCK

Hosts: 3
Requests: 17
Received: 1.63 MB
Sent: 14.0 KB

Notable observed hosts

https://forms.cloud.microsoft/r/GZ0RHVyhVu

forms.cloud.microsoft

30 Jul 2026 · 17:19 UTC

https://login.microsoftonline.com/organizations/oauth2/v2.0/authorize?client_id=c9a559d2-7aab-4f13-a6ed-e7e9c52aec87&redirect_uri=https%3A%2F%2Fforms.cloud.microsoft%2Flanding&state=eyJ2ZXJzaW9uIjoxLCJkYXRhIjp7IklkZW50aXR5UHJvdmlkZXIiOiJBUmNCWlFSOEQxYjFuemlYemgxdUVlSjZDaHRvbUpLd0NLbW45Tnd3eEpoa1JfNHFBUDdLY1lha1pLZWo4YU5xRkdfUzRKcjg1RDZMV1l4Z09jQksxVkUiLCIucmVkaXJlY3QiOiJodHRwczovL2Zvcm1zLmNsb3VkLm1pY3Jvc29mdC9wYWdlcy9yZXNwb25zZXBhZ2UuYXNweD9pZD1YUXdNRm1zbGZVYWpOU1dGcnM0OVlzZTZveGN4aTV4RHU2NnpPR2dmUHBKVU16RkxOemxQU1RrMVNVa3dTa3czTURaUFFWUkpUMVF6VEM0dSZyb3V0ZT1zaG9ydHVybCZzaWQ9NTllNmY1MDgtODBjZC00N2JhLTk2NGEtNTBiYjE4MjEwMTFkIiwiLnhzcmYiOiJBVGtDUWFvSnpZNTdwOGk5Q2FwNEVoWjFJb3h0OTJGWVpZR1MtNDNQTERtbnJMODN4U1BrTEpqRHVkRmVyZkQ0X2FzWG1zSU5zMmV5dzNPVi1rbFhVOTZ1LXk5azdOYy1ldl80RjZ4NmQ1aGYwcktXUHozZDR1T01PazBLRW9UN0ZBIiwiT3BlbklkQ29ubmVjdC5Db2RlLlJlZGlyZWN0VXJpIjoiQVhXdkR4TUZ4WVJUeURFRUJVNTJ2Vm8xbmVnS1lUUFRWZTdWRWI3U3VSZEZmdTVzeFdhM0NER0l4OF94MFV1RnRvVjhQLXBzUWJMXzlyYkdqOEJmWFFwZ2dwdmd0NzhCaVFndnNHbi1qZjZWU01VVHRPWDRlVUY1aEszMlpkQWQydyJ9fQ&response_type=code&scope=openid%20profile&response_mode=form_post&nonce=639210287548487824.ZTkwNjQ0ZjItM2VhMy00YzA3LTkyM2YtOTc0ZGM1NzE0NDMwZGRlZjI1NGYtNjUxNC00MTA4LWIzNzYtYmZjZDI3MzZkNWVh&msafed=0&x-client-SKU=ID_NET10_0&x-client-ver=8.19.2.0

Final URL Different hostname

Detection highlights

No detections reported.

Infrastructure & activity

150.171.74.13United States AS8075 MICROSOFT-CORP-MSN-AS-BLOCK

Hosts: 4
Requests: 20
Received: 2.51 MB
Sent: 15.3 KB

Notable observed hosts

https://forms.cloud.microsoft/Pages/ShareFormPage.aspx?id=1GVJsD20EEqeHiZHp9hJ_-2BExzbXmtPoDklg1wLPj1UOUw3SUVXRzg3NkQ4VExCT0dWU1Y5MlJSVy4u&sharetoken=HdNjpRB1pDWXEa3mlDcE

forms.cloud.microsoft

30 Jul 2026 · 08:08 UTC

Captured page Enlarge ↗ PAYMENT ADVICE (Copy)

Detection highlights

No detections reported.

Infrastructure & activity

150.171.73.13United States AS8075 MICROSOFT-CORP-MSN-AS-BLOCK

Hosts: 3
Requests: 21
Received: 2.02 MB
Sent: 18.6 KB

Notable observed hosts

https://forms.cloud.microsoft/Pages/DesignPagev2.aspx?subpage=creationv2

forms.cloud.microsoft

30 Jul 2026 · 04:39 UTC

https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=c9a559d2-7aab-4f13-a6ed-e7e9c52aec87&redirect_uri=https%3A%2F%2Fforms.cloud.microsoft%2Flanding&state=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&response_type=code&scope=openid%20profile&response_mode=form_post&nonce=639209831154850951.MjI2MTJlNmEtY2VhZS00NTczLWEwNWEtZjQzYzY0ZWU3MjVmYzI4MjI2YzQtYTBiNi00NmI1LWJjMGYtYTVjZDFiZmQwMzc2&prompt=select_account&x-client-SKU=ID_NET10_0&x-client-ver=8.19.2.0

Final URL Different hostname

Detection highlights

No detections reported.

Infrastructure & activity

150.171.73.13United States AS8075 MICROSOFT-CORP-MSN-AS-BLOCK

Hosts: 8
Requests: 37
Received: 3.17 MB
Sent: 24.6 KB

Notable observed hosts

5 more · View hosts →

https://forms.cloud.microsoft/Pages/ResponsePage.aspx?id=5VA2YbubU0Sfvyb1kAW4Si0077f31qpEp2r5jZu8ZvZUNFM4OE0wVzI3Q0JETlE5VkFKODAzQUhQVS4u

forms.cloud.microsoft

28 Jul 2026 · 15:27 UTC

Captured page Enlarge ↗ Document review portal

Detection highlights

No detections reported.

Infrastructure & activity

150.171.74.13United States AS8075 MICROSOFT-CORP-MSN-AS-BLOCK

Hosts: 3
Requests: 17
Received: 1.62 MB
Sent: 14.0 KB

Notable observed hosts

https://forms.cloud.microsoft/Pages/ShareFormPage.aspx?id=1GVJsD20EEqeHiZHp9hJ_-2BExzbXmtPoDklg1wLPj1URDkwMlkxNjI0VlNKSzhTUlA4U1JZTVhaSi4u&sharetoken=vJJucaE76ohbcvrDqYpD

forms.cloud.microsoft

28 Jul 2026 · 12:16 UTC

Captured page Enlarge ↗ PAYMENT ADVICE (Copy)

Detection highlights

URLQuery 0IDS 0TDS 1

Sinkholed DNS4EU medium severity Malicious

Infrastructure & activity

150.171.74.13United States AS8075 MICROSOFT-CORP-MSN-AS-BLOCK

Hosts: 6
Requests: 31
Received: 11.78 MB
Sent: 25.4 KB

Notable observed hosts

https://forms.cloud.microsoft/Pages/ResponsePage.aspx?id=IXPgMb6O1ESsFBxrquXauSwo0BOxSdpMrYfr_H2o_hlUQTlGNUtOQjVZUUs4SlZOTjlYWThQREdROS4u&origin=Invitation&channel=0

forms.cloud.microsoft

28 Jul 2026 · 11:41 UTC

Captured page Enlarge ↗ Please wait...

Final URL Different hostname

https://fxdqmpa01g.tyllui.shop/

Detection highlights

URLQuery 2IDS 0TDS 1

Infrastructure & activity

150.171.73.13United States AS8075 MICROSOFT-CORP-MSN-AS-BLOCK

Hosts: 6
Requests: 33
Received: 4.14 MB
Sent: 30.5 KB

Notable observed hosts

Report tags

phishing dkstools aitm