www.microsoft.com - URL scan, 23 Aug 2026
MalwareAnalyzer by Cyble scanned www.microsoft.com and returned a benign verdict (score 0). The page resolved to 2.18.110.94. The domain was registered 12897 days ago through MarkMonitor Inc.. 29 domains and 3 IPs were contacted, over 4 HTTP requests. 1 malware sample communicates with this URL (HUILoader). The request followed 3 redirects before landing. This is a point-in-time observation from 23 Aug 2026; the page may have changed since.
Scan result
- Verdict: benign (score 0) · Confidence 12%
- Scanned URL:
http://www.microsoft.co.jp/ - Domain: www.microsoft.com · IP: 2.18.110.94
- Server: AkamaiNetStorage
- Page title: Your request has been blocked. This could be due to several reasons.
- HTTP status: 200 · text/html
- Registrar: MarkMonitor Inc. · domain age 12897 days · created 1991-05-02
- TLS issuer: C=US, O=Microsoft Corporation, CN=Microsoft TLS G2 RSA CA OCSP 04 · valid to Jan 17 19: · subject C=US, ST=WA, L=Redmond, O=Microsoft Corporation, CN=www.microsoft.com
- Evidenced operator: Microsoft Corporation
- HTTP requests captured: 4
- Scan tier: fast · observed 2026-08-23 15:22:28 UTC
Redirect chain
http://www.microsoft.co.jp/http://www.microsoft.com/japanhttps://casoneroutegold-prod-bggfgca0dkaag8a8.b01.azurefd.net/japanhttps://www.microsoft.com/ja-jp
Malware communicating with this URL (1)
These samples were observed contacting or being served from www.microsoft.com. Each links to its full analysis.
- HUILoader - contacted ·
25429c8146dd1bf0f808ac3f6816a2f8· first seen 2026-08-23
Antivirus & YARA (0 of 48 engines)
No engine flagged this page's content.
Why this verdict
- Valid TLS, no impersonation or off-origin credential post
- Cross-host redirect chain
Detected technologies
- jQuery
Contacted infrastructure
- 2.18.110.94 - AS16625 Akamai Technologies (United States)
- 20.112.250.133 - AS8075 Microsoft Corporation (United States)
- 150.171.109.25 - AS8075 Microsoft Corporation (United States)
Observed indicators
- www.microsoft.com
- assets.onestore.ms
- statics-marketingsites-wcus-ms-com.akamaized.net
- ajax.aspnetcdn.com
- img-prod-cms-rt-microsoft-com.akamaized.net
- copilot.microsoft.com
- www.xbox.com
- support.microsoft.com
- products.office.com
- onedrive.live.com
- outlook.live.com
- www.skype.com
- www.onenote.com
- azure.microsoft.com
- go.microsoft.com
- visualstudio.microsoft.com
- developer.microsoft.com
- docs.microsoft.com
- account.microsoft.com
- learn.microsoft.com
Other scans of www.microsoft.com (10)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 24 Aug 2026 - unknown ·
https://www.avira.com/ - 23 Aug 2026 - unknown ·
https://dotnet.microsoft.com/en-us/download/dotnet?cid=getdotnetcore - 23 Aug 2026 - suspicious ·
https://www.bing.com/ - 23 Aug 2026 - unknown ·
https://www.avira.com/ - 23 Aug 2026 - benign ·
https://www.microsoft.com/nl-nl/ - 23 Aug 2026 - benign
- 23 Aug 2026 - unknown ·
https://www.avira.com/ - 23 Aug 2026 - unknown ·
https://elicopter-de-inchiriat.ro/wp-content/plugins/formcraft/file-upload/server/content/files/1613 - 23 Aug 2026 - suspicious ·
https://www.bing.com/ - 23 Aug 2026 - unknown ·
https://learn.microsoft.com/en-us/sysinternals/
Questions about www.microsoft.com
- Is www.microsoft.com safe?
- The scan of www.microsoft.com on 23 Aug 2026 found no evidence of harm. That is the absence of a finding at one point in time, not a guarantee: a page can change, and a scan only sees what it was served.
- What malware is associated with www.microsoft.com?
- 1 analysed samples communicate with this URL, including HUILoader.
- How was www.microsoft.com checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of www.microsoft.com
Scanned on MalwareAnalyzer by Cyble · Open interactive scan