Scan report · about 2 months agoPublic

vscode.dev

150.171.109.200AS8075 · US

Verdict

1 of 7 enginesSuspiciousAutomated

Be careful — warning signs found

Automated

This site shows signs commonly seen in scams or impersonation, but we could not confirm it for certain. It may be a real threat, or it may be a legitimate site that simply looks unusual to our automated checks.

What to do

Avoid entering passwords or payment details until you are sure it is genuine. Open the company directly from its known website or app instead of this link. Check the evidence below and escalate to your analyst if unsure.

"Suspicious" is a caution, not a confirmation — it can be a false alarm. The evidence below explains why it was flagged.

Findings

Strongest first

Suspicious fileSuspicious content in the downloaded file

b8254c9c-cb61-47bb-b254-b189172b403e.html

Our Content Inspection engine downloaded the file this URL serves and analyzed it. The payload shows traits commonly seen in malware. Treat it as unsafe until verified.

Success

SHA-256 6908ea89c72d4cb279681c4644f873aaddc1eb3443a23f1c96320a0f0d9ea62d

InfoCross-domain scripts injected at runtime

3 script(s)

The page dynamically injected scripts from other domains. This is extremely common on legitimate sites (CDNs, analytics, asset domains) and is shown for context only.

Analyst noteNoisy by itself — a CDN/asset domain (e.g. a brand's own *.githubassets.com) is normal. Only meaningful if the source domain is unrelated/suspicious.

Infrastructure

IP: 150.171.109.200MICROSOFT-CORP-MSN-AS-BLOCK - Microsoft Corporation, US · AS8075US
TLS: CN=Microsoft TLS G2 RSA CA OCSP 04, O=Microsoft Corporation, C=US · expires Oct 7, 2026

WHOIS

Registrar: MarkMonitor Inc.
Created: Feb 22, 2019
Expires: Feb 22, 2027
Nameservers: ns1-06.azure-dns.comns2-06.azure-dns.netns3-06.azure-dns.orgns4-06.azure-dns.info

4 malicious11 suspicious

Hashes & fingerprints

Page Hash02e4753a94176c05f1d4a027b8b35cc16d7bd8c468530cb9c44d3e10b068b00f Favicon Hash66d800db2c8350179ba1a2d1ec2ab48b0abfcd4fa9e4a761b67fab2865da9e53 DOM Hash87db4a9aa69e395e06a89948f5bf2bc06f64aa2ecfc4aaa88ec84652091219ba Screenshot pHashcfc3c88c33983e3c JARM2ad2ad0002ad2ad00042d42d0000002059a3b916699461c5923779b77cf06b JA4Xa373a9f83c6b_2bab15409345_0f2217ba412e Cert Thumbprint38B7069CD90E8D5CC3CD93FB296FF033D54D5F40 Cert IssuerCN=Microsoft TLS G2 RSA CA OCSP 04, O=Microsoft Corporation, C=US

Page capture

Live

Title “Welcome - Workspace - Visual Studio Code”

Visit Site

Engines

7 · time to verdict