Security Scan: Join Meeting

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/d063ba08-36d4-4b33-9bb5-72ca521664f9 Domain and IP registration (RDAP)/api/v1/rdap/d063ba08-36d4-4b33-9bb5-72ca521664f9How often this domain was scanned/api/v1/domain/stats/web-exmeet2381.pages.dev Scan history for this domain/api/v1/domain/history/web-exmeet2381.pages.dev?limit=15

This website contacted 4 IPs in 2 countries across 3 domains to perform 6 HTTP transactions. The main domain is pages.dev and was registered 6 years ago.

Submitted URL: https://web-exmeet2381.pages.dev/

Downloads:

AI Security Verdict

Confirmed Scam

Confidence: 95%

Risk Score

Fake 'Join Meeting' page on a free pages.dev subdomain pushes an .exe installer while coaching users past SmartScreen, and the page contains critical stealer code with Telegram exfiltration. Do not download or run the file.

Risk Factors (6)

Critical-severity hunting rule stealer signature with Telegram credential exfiltration on the page

Delivery of a Windows executable (.exe) installer from a free hosting subdomain

Instructions coaching the visitor to override OS security warnings (SmartScreen bypass)

Code fragments capturing visitor IP address and location and posting them to a Telegram chat

Free pages.dev subdomain with no ranking and no attributable age, hosting a 'meeting' download page

Threat-intelligence report of fakeapp malware on the primary domain

Domain age information unavailable

Details

Page Title

Join Meeting

Scan Type

public

Favicon Hash

MMH3: -1263886546

MD5: 22214ce905c7861cc3cacfd38ab05d34

Domain Name Analysis

The domain 'web-exmeet2381.pages.dev' uses the developer-focused generic top-level domain (.dev) with subdomain 'web-exmeet2381'. The registrable portion 'pages' spans 5 characters split between 2 vowels and 3 consonants. Tokenizing the label suggests one word: pages. Median word length comes out to 5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

0.62s

Total Load Time

148 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:1,875 chars

Detector Agreement:100%

Website Classification

Primary Category

documentation technical44% confidence

Type: static

Method: ml+structural

All Detected Categories

documentation technical

44%

technology software

34%

adult content

33%

social media network

25%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
3	172.66.47.56Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	172.66.44.200Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	140.82.121.3	Frankfurt am Main, Hesse, Germany	AS36459GitHub, Inc.
1	185.199.108.133Fastly · CDN	United States	AS54113Fastly, Inc.
6	4	-	-