Security Scan Report: forms.office.com

Redirected to:
https://forms.cloud.microsoft/pages/responsepage.aspx?id=ezgm5ec-H0yHy...
Site favicon
Submitted: Completed: publiccompleted
This website contacted 5 IPs in 3 countries across 5 domains to perform 21 HTTP transactions. The main domain is office.com and was registered 27 years ago.

Submitted URL: https://forms.office.com/e/XqFzgAhTnM

Effective URL:
https://forms.cloud.microsoft/pages/responsepage.aspx?id=ezgm5ec-H0yHy...
Redirected

The Cisco Umbrella rank of the primary domain is #6 of the top 1 million websitesTop 100 Site

AI Security Verdict

Safe Website

Confidence: 92%

1
Risk Score

Microsoft Forms page on Microsoft's own domains showing its official 'form blocked for phishing' notice. No forms or credential fields, no malware, IoC, or impersonation signals — legitimate service page.

Safety Factors (4)
Hosted on Microsoft's own official infrastructure with self-branding matching the domain
No forms, no credential fields, no payment fields on the page
No threat-intel, hunting rule, IDS, or Safe Browsing hits
Page content is an official blocked-form notice describing a blocked third-party form
Domain age information unavailable

Details

Page Title

Microsoft Forms

Scan Type

public

Domain Name Analysis

The domain 'forms.office.com' uses the commercial generic top-level domain (.com); it also runs on subdomain 'forms'. The core label 'office' covers 6 characters containing three vowels alongside three consonants. Tokenizing the label suggests 1 word: office. Median word length is six characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://forms.office.com/e/XqFzgAhTnM

Page Load Overview

0.56s
Total Load Time
725 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-us
Text Length:214 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical98% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

documentation technical
98%
phishing scam
84%
technology software
84%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
5150.171.73.13Azure · CLOUDUnited States
AS8075Microsoft Corporation
4150.171.74.13Azure · CLOUDUnited States
AS8075Microsoft Corporation
452.110.17.43Office365 · CLOUDFrankfurt am Main, Hesse, Germany
AS8075Microsoft Corporation
44.207.44.65Azure · CLOUDDublin, Leinster, Ireland
AS8075Microsoft Corporation
452.110.20.86Office365 · CLOUDBerlin, State of Berlin, Germany
AS8075Microsoft Corporation
215--

Detected Technologies3

JQueryv3.6.0
100%
Bootstrapv3.4.1
100%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T10563B81C0A042F3FD7664DD9FD66750957F8299B30290A32F06DD2547F38BAE832BA06

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:5ggJbM9m8qzOfjNwOzslOQO5ana2nlOjOPabOuaqa0aOOCOOOqOFOMOlO7OpOFal:515MqOszKwtl42erH5LpzpsXgm+miH3r

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:72428:JgYBoBR0IQFgiiBJiCchGAcAijCAozQDYBMENgYowA7AQFO0FA2wBRNi5BxjAMCyJgIAIIRHUlwJAkAJaHACwBVBwgBNBhUM

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffe7e7e7e7e7ffff
Perceptual Hash:b3cccd33cc8833cc
Difference Hash:0008080c0c0c0008
Wavelet Hash:3f27272727030f0f
Color Hash:#3a785b

Other Hashes

Crop Resistant:0008080c0c0c0008

Scan History

Scan history not available

Unable to load historical scan data