ScanMalware.com

Security Scan Report: join.microsoft-teams-meetup.workers.dev

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/5845261f-a2cc-4549-9b46-b8d9f3c26d59Domain and IP registration (RDAP)/api/v1/rdap/5845261f-a2cc-4549-9b46-b8d9f3c26d59How often this domain was scanned/api/v1/domain/stats/join.microsoft-teams-meetup.workers.devScan history for this domain/api/v1/domain/history/join.microsoft-teams-meetup.workers.dev?limit=15
This website contacted 4 IPs in 1 country across 4 domains to perform 5 HTTP transactions. The main domain is workers.dev and was registered 7 years ago.

Submitted URL: https://join.microsoft-teams-meetup.workers.dev/

AI Security Verdict

High Risk

Confidence: 72%

7
Risk Score

workers.dev page posing as a Microsoft Teams meeting invitation using the Microsoft brand on a non-Microsoft domain; no form fields captured, but brand impersonation and a deceptive hostname make it unsafe to use.

Risk Factors (5)
Brand impersonation of Microsoft Teams on a non-Microsoft domain
Deceptive subdomain crafted to look like an official Microsoft Teams meeting link
Hosted on a shared workers.dev subdomain whose real creation date cannot be verified
Cross-origin XMLHttpRequest to an unranked CORS-proxy host (corsanywhere.run-on-cloud.com)
Unranked / no domain reputation for a page claiming a major brand
Domain age information unavailable

Details

Page Title

Microsoft Teams Meeting Invitation

Scan Type

public

Domain Name Analysis

The domain name 'join.microsoft-teams-meetup.workers.dev' uses the developer-focused generic top-level domain (.dev) and includes subdomain 'join.microsoft-teams-meetup'. Count 7 characters in 'workers' split between 2 vowels and 5 consonants. Word splitting yields 1 word: workers. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://join.microsoft-teams-meetup.workers.dev/

Page Load Overview

0.56s
Total Load Time
36 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:269 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software34% confidence
Type: static
Method: ml+structural+ocr_tiebreaker

All Detected Categories

technology software
34%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2172.67.194.120Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1172.67.187.19Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1142.251.20.95Google · CDNUnited States
AS15169Google LLC
1104.21.92.58Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
54--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1DF51316BE9D70202AA5360C02FF3E7483199D107C205CE687FAC57589F866E9E9A3348

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:ThmMrsc+wk9t05VcxMELZOYlEhZRusPEHcrw0gL:NVrsc+wkgrce1on

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:3075:WQCBEBACAIIAUAAAAQBCgQBAAAADAQAAACAAAAAACEAQpAIBgBICQDgIACBEAAIAChEgAEAFiKgEAAUYBAAAAYBAAEJAEAIB

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffe7e70000000000
Perceptual Hash:e6e6e64c1c989993
Difference Hash:8c8ecc1000000000
Wavelet Hash:ffe7ff3000000000
Color Hash:#40bf51

Other Hashes

Crop Resistant:8c8ecc1000000000

Scan History

Scan history not available

Unable to load historical scan data