Scan report · about 2 months agoPublic

zoom.us

170.114.52.2AS209242 · US
Verdict

Be careful — warning signs found

Automated

It asks you to enter a password. This site shows signs commonly seen in scams or impersonation, but we could not confirm it for certain. It may be a real threat, or it may be a legitimate site that simply looks unusual to our automated checks.

What to do

Avoid entering passwords or payment details until you are sure it is genuine. Open the company directly from its known website or app instead of this link. Check the evidence below and escalate to your analyst if unsure.

"Suspicious" is a caution, not a confirmation — it can be a false alarm. The evidence below explains why it was flagged.

Findings

Strongest first
Suspicious fileSuspicious content in the downloaded file
27206ce8-1dd5-44f3-bc36-c7a85bda8a70.html

Our Content Inspection engine downloaded the file this URL serves and analyzed it. The payload shows traits commonly seen in malware. Treat it as unsafe until verified.

Success

SHA-256 b94b33cc810bf0b31fdd6009dc9c039c59a7c2ff0f87fa9802786fbbcf59a579

InfoBrand impersonation detected
Microsoft · low

The page presents itself as a known brand (brand keywords/branding detected).

Analyst noteLow/medium confidence (keyword only) — can be a news article or partner page. Corroborate before acting.

InfoCross-domain scripts injected at runtime
5 script(s)

The page dynamically injected scripts from other domains. This is extremely common on legitimate sites (CDNs, analytics, asset domains) and is shown for context only.

Analyst noteNoisy by itself — a CDN/asset domain (e.g. a brand's own *.githubassets.com) is normal. Only meaningful if the source domain is unrelated/suspicious.

Infrastructure

IP
170.114.52.2CLOUDFLARESPECTRUM - Cloudflare London, LLC, US · AS209242US
TLS
CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US · expires Dec 29, 2026
Redirects
0 hops · /signin → /signin
1 malicious19 suspicious

Hashes & fingerprints

Page capture

Live

Title “Sign In | Zoom” · brand shown: Microsoft (low)

Engines

7 · time to verdict

Page

HTTP
200 · Completed
Title
Sign In | Zoom
Load
3.14 s · 141 requests
Stack · 13CloudflareCloudflare Bot Managementdc.jsGoogle Tag ManagerHSTSHTTP/3