ScanMalware.com

Security Scan Report: msteamsbooking.top

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/0406c942-ce39-4bac-8671-b6690481af0fDomain and IP registration (RDAP)/api/v1/rdap/0406c942-ce39-4bac-8671-b6690481af0fHow often this domain was scanned/api/v1/domain/stats/msteamsbooking.topScan history for this domain/api/v1/domain/history/msteamsbooking.top?limit=15
This website contacted 2 IPs in 1 country across 1 domain to perform 5 HTTP transactions. The main domain is msteamsbooking.top and was registered 1 month ago.

Submitted URL: https://msteamsbooking.top/

AI Security Verdict

Moderate Risk

Confidence: 75%

5
Risk Score

Brand-new .top domain wearing the Microsoft Teams name behind a Cloudflare human-verification wall; page content is hidden from scanning. Strong impersonation indicators — avoid entering any credentials.

Risk Factors (5)
Impersonation of a different entity's brand (Microsoft Teams) on a non-official .top domain
Domain registered ≤1 day ago and unranked
Bot-protection challenge hides the actual page content and any credential/payment forms from inspection
HIGH-severity IDS alerts flagging the .top domain as likely hostile
.top TLD is heavily abused for phishing campaigns
Safety Factors (5)
No JavaScript malware patterns detected
No Indicators of Compromise matches against the page or its loaded resources
All JavaScript originated from the site's own domain; no cross-origin credential exfiltration observed
No cross-origin form submissions detected (though content evidence is unavailable due to the challenge wall)
Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 8 to 5
Domain age information unavailable

Details

Page Title

Verify you are humanother network

Scan Type

public

Domain Name Analysis

Within the .top top-level domain, 'msteamsbooking.top' is registered without a subdomain. Count 14 characters in 'msteamsbooking' holding five vowels versus 9 consonants. Breaking it apart gives 3 words: ms, teams, booking. The median word length lands at 5 characters. No strong language cues emerged from the frequency lists.

Screenshot

2. msteamsbooking.top Verify you are human by completing the action below. Verify you are human cvcuntinet Prva» Terms msteamsbocking.top needs to review the security of your connection before proc...

Page Load Overview

3.69s
Total Load Time
369 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:69 chars
Detector Agreement:50%

Website Classification

Primary Category

technology software63% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
63%
documentation technical
39%
healthcare medical
35%
news media journalism
32%
government public service
29%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3104.21.94.222Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2172.67.140.140Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
52--

Detected Technologies3

HTTP/3
40%
Cloudflare Bot Management
40%
Cloudflare
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1C9B48851DD0A371EB3714C1FE78E29EE3B9A42AC942991CFBF5D31D8930D4658A70CA8

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:suBJOky61j+N0KI711N6YsmTYP9HqRG/cIlKNOXmsyjMvyAWqJbyjMvyAWqgi:Pp1iN0/51R49KI/cJc4olJGolgi

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:505463:EAoglhhCxgQSQxACCKQUUAjShQ6YKIA44AlCIEASCCKICCBBAEQoagXBU4CAQMgwAUBIngpyTCAVACBZhIgCJIQoBFEICaAQ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff9f8f87ffffffe7
Perceptual Hash:be1c66c0e3c3e3c1
Difference Hash:003038180000000c
Wavelet Hash:f0809c843f3f3f03
Color Hash:N/A

Other Hashes

Crop Resistant:003038180000000c

Scan History

Scan history not available

Unable to load historical scan data