1-msp.screenconnect.com
15.204.108.50AS16276 · US- Content Inspectionsuspicious
- Browser Analysisclean
- Network & Hostingclean
- Threat Intelligenceclean
- Related Infrastructureclean
- TLS Fingerprintunknown
- Domain Intelligenceunknown
Be careful — warning signs found
AutomatedThis site shows signs commonly seen in scams or impersonation, but we could not confirm it for certain. It may be a real threat, or it may be a legitimate site that simply looks unusual to our automated checks.
What to do
Avoid entering passwords or payment details until you are sure it is genuine. Open the company directly from its known website or app instead of this link. Check the evidence below and escalate to your analyst if unsure.
"Suspicious" is a caution, not a confirmation — it can be a false alarm. The evidence below explains why it was flagged.
Findings
Strongest firstOur Content Inspection engine downloaded the file this URL serves and analyzed it. The payload shows traits commonly seen in malware. Treat it as unsafe until verified.
Success
SHA-256 bf9030bf5a55d0efd5d0eb9f893b88abcf754bcf70bd9c71783545d2f1d2128e
The page dynamically injected scripts from other domains. This is extremely common on legitimate sites (CDNs, analytics, asset domains) and is shown for context only.
Analyst noteNoisy by itself — a CDN/asset domain (e.g. a brand's own *.githubassets.com) is normal. Only meaningful if the source domain is unrelated/suspicious.
Infrastructure
- IP
- 15.204.108.50OVH - OVH SAS, FR · AS16276US
- TLS
- CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US · expires Mar 26, 2027
WHOIS
- Registrar
- eNom, LLC
- Created
- Oct 27, 2004
- Expires
- Oct 27, 2026
- Nameservers
- ns-1043.awsdns-02.orgns-1986.awsdns-56.co.ukns-278.awsdns-34.comns-740.awsdns-28.net
Hashes & fingerprints
Page capture
LiveTitle “ScreenConnect Remote Support Software”
Engines
7 · time to verdictPage
- HTTP
- 200 · Completed
- Title
- ScreenConnect Remote Support Software
- Load
- 4.80 s · 17 requests