Security Scan Report: us05we-zoom-us.pages.dev

Site favicon
Submitted: Completed: publiccompleted
This website contacted 4 IPs in 1 country across 5 domains to perform 5 HTTP transactions. The main domain is pages.dev and was registered 6 years ago.

Submitted URL: https://us05we-zoom-us.pages.dev/

Downloads:

AI Security Verdict

Confirmed Scam

Confidence: 90%

9
Risk Score

Fake Zoom meeting page on a pages.dev subdomain impersonating Zoom and pushing a ZoomApp.exe download from an unrelated domain reported as malicious. Do not open the file; report the page.

Risk Factors (5)
Brand impersonation of Zoom on a Cloudflare Pages subdomain that is not Zoom's official domain
Executable (ZoomApp.exe) delivered from a third-party domain unrelated to Zoom and reported as malicious infrastructure
Favicon brand impersonation: Zoom icon served from a non-Zoom host
Single-source threat-intel phishing report against the primary domain
Shared hosting platform subdomain (pages.dev) with unknown page creation date, allowing anonymous instant publishing
Domain age information unavailable

Details

Page Title

Join Zoom Meeting

Scan Type

public

Domain Name Analysis

Domain 'us05we-zoom-us.pages.dev' uses the developer-focused generic top-level domain (.dev) and includes subdomain 'us05we-zoom-us'. The second-level label 'pages' is 5 characters long split between 2 vowels and 3 consonants. Tokenizing the label suggests 1 word: pages. Median word length comes out to five characters. No strong language cues emerged from the frequency lists.

Screenshot

Zoom Your meeting has been launched in the Zoom Workplace app Update your Zoom App By joining a meeting, you agree to our Terms of Service and Privacy Statement. Launch Meeting If Zoom Workplace a...

Page Load Overview

2.10s
Total Load Time
19 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:415 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software55% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
55%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2172.66.47.66Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1170.114.46.1Cloudflare · CDNUnited States
AS209242Cloudflare London, LLC
1104.16.80.73Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1170.114.45.1Cloudflare · CDNUnited States
AS209242Cloudflare London, LLC
54--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T162B1746F19F3000A5E17D1542FFA631D7163850BD809CCA5BDAD0358EF8569899D32CD

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:nz6BirdOz7nF9fe0/8s1aZJfm7CN+AQuOb1IRqcFsNj6uKaQ+:zMird07nFYNFJfKQ+Ayb1IRq6s56X8

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:5525:SEakQABQgAYBEMEFEAAQQEIhAhh8MIIiwxQhAwigQFAqAMCMAGACE0hHkAClKhAAGFACKAiRPICISIFIgACAACKCCyABIICA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:63e7e7dbffffffff
Perceptual Hash:a727278d89899997
Difference Hash:960c0e3244000000
Wavelet Hash:430300000f0f0f0f
Color Hash:N/A

Other Hashes

Crop Resistant:960c0e3244000000

Scan History

Scan history not available

Unable to load historical scan data