Security Scan Report: teamapp.pages.dev

Site favicon
Submitted: Completed: publiccompleted
This website contacted 3 IPs in 2 countries across 2 domains to perform 3 HTTP transactions. The main domain is pages.dev and was registered 6 years ago.

Submitted URL: https://teamapp.pages.dev

AI Security Verdict

Confirmed Scam

Confidence: 92%

9
Risk Score

Fake Microsoft Teams voicemail page on a Cloudflare Pages subdomain that hosts a malicious .exe; multi-source threat intel confirms malware distribution via brand impersonation.

Risk Factors (5)
Brand impersonation of Microsoft Teams on a third-party Cloudflare Pages subdomain
Malware (unknown .exe) hosted and distributed from this domain per threat intelligence
Clipboard hijacking / social-engineering delivery tactic
Unranked domain with no reputation, hosted on a free instant-publish platform where age is unverifiable
Language-typo lure text ('capied') typical of low-quality phishing/malware lures
Domain age information unavailable

Details

Page Title

Microsoft Teams Voicemail

Scan Type

public

Domain Name Analysis

The domain name 'teamapp.pages.dev' uses the developer-focused generic top-level domain (.dev); it also runs on subdomain 'teamapp'. The core label 'pages' covers 5 characters with two vowels and 3 consonants. Splitting it apart reveals 1 word: pages. Median word length comes out to 5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Microsoft Teams Voicemail You have a new voicemail message in Microsoft Teams. Play Voicent This voicemail was sent from Microsoft Teams. The link has been capied to your clipboard for easy access....

Page Load Overview

2.60s
Total Load Time
26 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:353 chars
Detector Agreement:67%

Website Classification

Primary Category

entertainment media61% confidence
Type: static
Method: ml+structural+ocr_tiebreaker

All Detected Categories

entertainment media
61%
adult content
42%
technology software
39%
documentation technical
35%
news media journalism
33%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1172.66.47.173Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
195.100.248.150Berlin, State of Berlin, Germany
AS20940Akamai International B.V.
123.194.190.135Frankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
33--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T13891219A9BB70142A59760762BE797053270C043D90ADE243FAD5388CFC77A8A8A7348

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:TBrml1Ts7QkwcS9PZ5Px0vcjX8UqtWH58ZDoR4ARohCaN1gkvlG+Oc3sDAqeWJMj:Vr2dMQkwcS9PXPCkjXVqtWZGot2hp1V/

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:4443:AiAcGEAAAAIQJAhKQEQEBQQAGkAqBgQSASAAQQCaCAhCgAELgA6ooA5ABRDCiowEAgAQAiIAIAVAMDCAQAAWIQAQkIGICAoI

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffa5e7ffffffffff
Perceptual Hash:e666269999999966
Difference Hash:304d4c3008000000
Wavelet Hash:e4e4e4f400000000
Color Hash:N/A

Other Hashes

Crop Resistant:304d4c3008000000

Scan History

Scan history not available

Unable to load historical scan data