You might have come across a link to epx-enterpriseproxy-1.d03-048.ic3-calling-enterpriseproxy.01-westeurope-prod.cosmic.office.net and wondered if it's safe. Based on our analysis, this is not a typical consumer website. It looks like a misconfigured internal proxy endpoint for Microsoft's Teams infrastructure. The SSL certificate is invalid for this address, the site is unreachable, and the server returns a 404 error. There is no content, no contact information, and no history of the site. For these reasons, we classify it as Dangerous. If you encountered this link in an email or message, treat it with caution — it could be a misdirected internal link, but it's not a functional website you should interact with. There are no reviews or Trustpilot profiles because this is not a business. Our advice: avoid visiting this URL entirely.
No — epx-enterpriseproxy-1.d03-048.ic3-calling-enterpriseproxy.01-westeurope-prod.cosmic.office.net doesn't look safe
In plain English
This site is not functional and poses a security risk. The SSL certificate is invalid, the connection fails, and the page returns a 404 error. There is no reason to visit or trust this endpoint — it appears to be a broken internal Microsoft proxy, not a legitimate website.
What you should do now
Don't panic. These steps limit the damage, and the sooner you take them the better.
Don't enter any details
No passwords, card numbers or personal information — even if the site looks professional.
Close the tab
Especially if you got here from an email, text message or social media ad.
Already paid? Call your bank
Contact your bank or card provider right away. They can often stop or reverse a recent payment.
Warn others
Report the site and share this check with anyone who sent you the link.
Where the score comes from
The SSL certificate is invalid for this subdomain, and the site is unreachable. This is a critical failure that makes the site unusable and unsafe to connect to.
The subdomain sits under office.net, which is owned by Microsoft, but the specific endpoint has no clear ownership or WHOIS record. That's normal for a subdomain, but the lack of valid certificate undermines identity assurance.
No blacklist hits and no malware flags, but the site has no archive history and is not ranked. This is neutral for a new or internal endpoint.
No contact or about page is expected for an infrastructure proxy endpoint. It's not a consumer-facing service, so transparency requirements don't apply.
Missing legal pages are normal for a non-commercial backend service. No compliance obligations are triggered here.
DNS resolves, but the site returns a 404 and has no security headers or DNSSEC. For a proxy endpoint, this is a poor setup, but not unusual for a misconfigured internal host.
What we checked
Think this verdict is wrong?
Site owners can request a fresh scan. Scores update automatically as signals change.