Scan report · about 2 months agoPublic

microsoftteams.com

20.76.201.171AS8075 · US

Submittedhttps://microsoftteams.com/

Landed onhttps://www.microsoft.com/en-us/microsoft-teams/group-chat-software?ms.url=microsoftteamscom· 2 redirects

Verdict

1 of 7 enginesMaliciousAutomated

Own this site?

Dangerous — confirmed threat

Automated

It is listed on external threat-intelligence feeds. We found strong evidence that this site is malicious — for example a phishing page, a scam, or hostile code. Treat anything it asked for (passwords, card details, codes) as exposed.

What to do

Do not enter any information or download anything. If you already did, change those passwords now and contact your bank if payment details were involved. Block or report the link to your team.

This reflects the evidence found at the time of the scan. If you believe it is a mistake, you can escalate it for analyst review.

Findings

Strongest first

InfoCross-domain scripts injected at runtime

1 script(s)

The page dynamically injected scripts from other domains. This is extremely common on legitimate sites (CDNs, analytics, asset domains) and is shown for context only.

Analyst noteNoisy by itself — a CDN/asset domain (e.g. a brand's own *.githubassets.com) is normal. Only meaningful if the source domain is unrelated/suspicious.

File

Stored by the engine

What you download may be live malware. Open it only in an isolated environment, and do not double-click it.

The ZIP is encrypted. Password:infected

Inside the ZIP the file carries a name the engine generated, not the one the page used.

Downloaded fileCleanThe engine stored it under a generated name

SHA-2565965b2c5472aaca1cd66ea5b0d07a971b961fee72fc27eb1f6c760042084b21b

Fromhxxps://www[.]microsoft[.]com/en-us/microsoft-teams/group-chat-software?ms[.]url=microsoftteamscom

Infrastructure

IP: 20.76.201.171MICROSOFT-CORP-MSN-AS-BLOCK - Microsoft Corporation, US · AS8075US
TLS: CN=Microsoft TLS G2 RSA CA OCSP 04, O=Microsoft Corporation, C=US · expires Nov 4, 2026
Redirects: 2 hops · / → /en-us/microsoft-teams/group…re?ms.url=microsoftteamscom

WHOIS

Registrar: MarkMonitor Inc.
Created: Sep 6, 2016
Expires: Sep 6, 2027
Nameservers: ns1-01.azure-dns.comns2-01.azure-dns.netns3-01.azure-dns.orgns4-01.azure-dns.info

1 malicious12 suspicious

Hashes & fingerprints

Page Hash8a6ea8505c2d25b7d182a85e692cce0a20a2781bdd0839d79167e2fca5529692 Favicon Hash90cdaf487716184e4034000935c605d1633926d348116d198f355a98b8c6cd21 DOM Hash1077e5f3686fd5b3c23f2407830bba1e04aafbef6c10f4ecc23540ad78b9e75e Screenshot pHash807e00bd03fdfd83 JARM2ad2ad00000000000041d41d00000009f1eb1749b1a3453b336be3e9d73739 JA4Xa373a9f83c6b_2bab15409345_0f2217ba412e Cert Thumbprint45040322AE75C4D385A9662C8D4350728A6F7A62 Cert IssuerCN=Microsoft TLS G2 RSA CA OCSP 04, O=Microsoft Corporation, C=US

Page capture

Live

Title “Video Conferencing, Meetings, Calling | Microsoft Teams”

Visit Site

Engines

7 · time to verdict