Security Scan: Microsoft Teams

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/5c634fbd-d361-4668-af15-f16d562a4273 Domain and IP registration (RDAP)/api/v1/rdap/5c634fbd-d361-4668-af15-f16d562a4273How often this domain was scanned/api/v1/domain/stats/gwkinvestmicrosoftteams.com Scan history for this domain/api/v1/domain/history/gwkinvestmicrosoftteams.com?limit=15

This website contacted 5 IPs in 1 country across 3 domains to perform 19 HTTP transactions. The main domain is gwkinvestmicrosoftteams.com and was registered 1 week ago.

Submitted URL: https://gwkinvestmicrosoftteams.com/

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

Fake Microsoft Teams meeting page on a 9-day-old lookalike domain. It pressures visitors to download and run an installer and to override security warnings; a critical hunting rule stealer rule, blocked DevTools and geolocation callbacks confirm malicious intent. Do not run any download.

Risk Factors (6)

Critical hunting rule stealer/Telegram-exfiltration rule match

Brand impersonation of Microsoft Teams on a non-Microsoft, 9-day-old domain

Installer-download social engineering with instructions to bypass browser/Windows warnings ('Keep and Run anyway')

DevTools and right-click blocking (2 anti-analysis techniques)

Cross-origin geolocation callback to get.geojs.io with HIGH IDS alerts

Unranked domain (not in Cisco Umbrella top 1M) with no legitimate Microsoft infrastructure

Domain age information unavailable

Details

Page Title

Microsoft Teams

Scan Type

public

Favicon Hash

MMH3: 821688656

MD5: 87b99bde8d4830d59c04164989a8dbee

Domain Name Analysis

You're looking at domain 'gwkinvestmicrosoftteams.com' on the commercial generic top-level domain (.com) and has no subdomain. Its registrable label 'gwkinvestmicrosoftteams' stretches across 23 characters containing 7 vowels alongside 16 consonants. It segments into 5 words: gw, k, invest, microsoft, teams. Expect 5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

1.96s

Total Load Time

930 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:4,624 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software77% confidence

Type: static

Method: ml+structural

All Detected Categories

technology software

77%

download file sharing

69%

corporate business

69%

education learning

53%

documentation technical

47%

Detected Features

OG: website

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
7	172.67.171.199Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	142.251.13.95Google · CDN	United States	AS15169Google LLC
3	172.67.70.233Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	104.21.55.173Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	104.26.1.100Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
19	5	-	-