Is joinmsteamsession.bubbleapps.io safe?
http://joinmsteamsession.bubbleapps.io/
Checked on
How we checked
Coverage: partial · 4 of 5 applicable core capabilities
- Antivirus · not available: did not fully complete
- Google Safe Browsing: completed
- page reading: completed
- page capture: completed
- domain records · not run: did not fully complete
- web research: completed
A "join Microsoft Teams session" address that is really a generic no-code app page and bounces visitors to an unrelated Wikimedia site
The address joinmsteamsession.bubbleapps.io is built to read like a Microsoft Teams meeting-join link, but it sits on Bubble's shared no-code app hosting and the captured page carried only Bubble's generic platform title with no Microsoft branding, meeting form or operator identity. Loading it sent the browser straight to wikiversity.org, an unrelated Wikimedia education site, and the screenshot confirms the visitor ends up there with no Teams content, login field or contact details anywhere on screen. A Stack Exchange reply about the same kind of Teams-themed mail describes it as spam and predicts a fake login screen to capture credentials. Nothing malicious was detected technically, but the mismatch between the name and what the page actually does is the finding, so the score sits in the High Risk band.
Where this site sits
- Dangerous1–20
- High Risk21–44
- Moderate Risk45–69
- Low Risk70–84
- Safe85–100
The score combines saved evidence strength and analysis quality. Coverage is reported separately.
Why 38/100
High Risk covers scores 21–44. 4 findings pulled the score down; 2 pushed it up.
What pulled the score down
- StrongThe page automatically sent the browser to an unrelated external site.-19 pts
- ModerateOne customer complaint on a public forum: "I received the same mail, it's certainly spam and I highly recommend not to click on any of the links. I am sure, they will present you a fake log-in screen…"-7 pts
- MinorThe page automatically sent the browser to wikiversity.org, an unrelated Wikimedia site, instead of any Teams meeting content.
- MinorThe host name imitates a Microsoft Teams meeting-join link while the page is a generic Bubble no-code app shell with no Microsoft branding or meeting form.
What pushed the score up
- SupportsThe browser threat feed returned no threat warning for the address.
- SupportsThe saved TLS check found a valid encrypted connection.
Points come from the saved evidence ledger: it lowered the score from 64 to 38 and split those 26 points between the findings that show points; the others carry no points in the ledger.
Lost money or shared details on joinmsteamsession.bubbleapps.io? Do this now
Act quickly: the first hours matter most for a chargeback.
- Call your bank or card issuer now
Ask them to dispute the charge or open a chargeback; the sooner you act, the better your odds. Card payments can often be reversed. Bank transfers and gift cards are harder, but report them to your bank too. Crypto payments usually cannot be reversed: report the wallet address and transaction ID to the exchange you sent from.
- Change any password you entered
If you entered a password on joinmsteamsession.bubbleapps.io, change it there and anywhere you reused it, and turn on two-factor authentication. Keep screenshots, order confirmations and messages as evidence.
- Report the site
Reports help get scam sites taken down faster and warn other people.
- Report the domain to its registrar
The registrar is the company that sold this domain. ICANN's lookup shows the registrar's abuse contact.
- Ignore anyone offering to recover your money
"Recovery" services or agents who contact you, or ask for a fee up front, are almost always a second scam aimed at victims. Your bank's dispute process and the official reporting services never charge a fee in advance.
Full answers about refunds and reporting are in the Safety FAQ below.
01 · Investigation Brief
Investigation Brief
The address joinmsteamsession.bubbleapps.io is built to read like a Microsoft Teams meeting-join link, but it sits on Bubble's shared no-code app hosting and the captured page carried only Bubble's generic platform title with no Microsoft branding, meeting form or operator identity. Loading it sent the browser straight to wikiversity.org, an unrelated Wikimedia education site, and the screenshot confirms the visitor ends up there with no Teams content, login field or contact details anywhere on screen. A Stack Exchange reply about the same kind of Teams-themed mail describes it as spam and predicts a fake login screen to capture credentials. Nothing malicious was detected technically, but the mismatch between the name and what the page actually does is the finding, so the score sits in the High Risk band.
The name promises a Teams meeting; the page delivers a redirect
Opening the address automatically navigated the browser away to https://www.wikiversity.org/, a Wikimedia learning site with no connection to Microsoft or to any meeting. The captured screenshot shows that Wikiversity homepage with its language links and search box, and no Teams branding, meeting-join form, login field, price or order button is visible anywhere in it.
The host name is the only thing that suggests Microsoft: "joinmsteamsession" on Bubble's shared app-hosting subdomain. The served page carried Bubble's own generic title and description rather than any business or meeting page, and no operator name, registration number, email, phone or address was found on it. The site's contact details were not reviewed in full, so this is an absence of disclosure rather than proof of who is behind it.
Independent research turned up a Stack Exchange reply from someone who received the same kind of Teams-themed mail, calling it spam and warning that the links lead to a fake login screen built to capture credentials. That is one person's account of a related lure, not a confirmed report about this exact address, and no fake login form was detected in the captured page content.
Clean technical checks do not explain away the mismatch
The browser threat feed returned no threat warning, the saved TLS check found a valid encrypted connection, and the hosting IP carries an abuse confidence score of 0 out of 100 across zero saved reports. Those results mean no blocklist or certificate problem was recorded at the time of the check; they say nothing about who runs the app or what it shows a real visitor.
The research results that mention Bubble describe the no-code platform itself, including a wiki page about a Bubble app that links Teams with a Dutch school system and an independent review platform's rating of 1.6 out of 5 for bubble.io. Those describe the hosting platform, not this particular app, and they neither vouch for nor condemn the operator behind this address.
Why the score is 38
The page automatically sent the browser to an unrelated external site.
02 · Security Evidence
Security evidence
Security Scans
Checked against the browser threat feeds available to this scan — no hit.
What we observed
Visual context from the captured page
The rendered screenshot shows the Wikiversity homepage ("Wikiversity — Free learning resources") with language links such as English, Français, Deutsch, Español, Italiano, 中文, Slovenščina, 日本語 and العربية, a search box, and footer links to Commons, Wikivoyage, Wiktionary, Wikipedia, Wikidata and Wikibooks — not the target host. The screenshot confirms the browser ended on an unrelated Wikimedia education site rather than any Microsoft Teams meeting-join page, consistent with the logged automatic external navigation. No Microsoft Teams branding, meeting-join form, login field, price, order button or operator contact details are visible in the captured screenshot.
What the captured page showed
3 observations- 01
The rendered screenshot shows the Wikiversity homepage ("Wikiversity — Free learning resources") with language links such as English, Français, Deutsch, Español, Italiano, 中文, Slovenščina, 日本語 and العربية, a search box, and footer links to Commons, Wikivoyage, Wiktionary, Wikipedia, Wikidata and Wikibooks — not the target host.
- 02
The screenshot confirms the browser ended on an unrelated Wikimedia education site rather than any Microsoft Teams meeting-join page, consistent with the logged automatic external navigation.
- 03
No Microsoft Teams branding, meeting-join form, login field, price, order button or operator contact details are visible in the captured screenshot.
What the page says about itself
Quoted from the pages we read: the site's own words, not our findings.
- Page title
Bubble | No-code apps
- Meta description
Bubble introduces a new way to build a web application. It’s a no-code point-and-click programming tool. Bubble hosts all applications on its cloud platform.
Pages we read
- Main page/Read
03 · Investigation Story
Investigation story
What the site claims
Bubble | No-code apps
What we observed
Saved browser evidence recorded forced redirects.
What independent research found
4 external findings were saved and compared with the page evidence.
What remains unverified
1 of the 5 applicable core capabilities did not complete, so those gaps remain visible in the coverage ledger.
What kind of site and risk is this?
Threat category
Phishing & Impersonation
Service and business model
Unknown
Observed behavior
Evidence behind this classification
- 01The page automatically sent the browser to an unrelated external site.
- 02The host name imitates a Microsoft Teams meeting-join link while the page is a generic Bubble no-code app shell with no Microsoft branding or meeting form.
- 03The browser threat feed returned no threat warning for the address.
If this is a scam — what it means for you
What happens when someone clicks the link
A person who receives a Teams-style invitation and clicks this address is taken off the site immediately to wikiversity.org, an unrelated education site, instead of to any meeting or sign-in page. The screenshot confirms that is where the visit ends.
If this is a scam, how it works
The evidence-backed path
Each stage below is preserved from the grounded analysis and linked to saved evidence.
Because the destination is unrelated to the Teams name and the page discloses no operator, the link cannot be verified as a legitimate meeting invitation. A related account of the same Teams-themed mail describes a fake login screen as the next step, which is the risk a visitor should assume until the sender is confirmed through a separate channel.
Do not open this link from an email or message. If you were expecting a Teams meeting, get the join link from the organiser through a channel you already trust, or from your own Teams calendar, and treat any "joinmsteamsession" address on a bubbleapps.io subdomain as unverified.
Web research findings
Independent findings for joinmsteamsession.bubbleapps.io, including public complaints, named review sources, registration records, and look-alike-domain evidence.
- Web Applications Stack Exchangeopen
"I received the same mail, it's certainly spam and I highly recommend not to click on any of the links. I am sure, they will present you a fake log-in screen and voilà, they have your log-in credentials."
Reputation Sources
How this domain rates across independent threat-intelligence and blocklist providers.
04 · Domain & Infrastructure
Domain & infrastructure
The plumbing behind the site — who registered it, how it’s encrypted, where it’s hosted, and where it links out. A valid certificate or a calm server doesn’t mean the business is honest — scam sites pass these checks too.
Infrastructure map
- Domainjoinmsteamsession.bubbleapps.io
- Redirects tojoinmsteamsession.bubbleapps.io
- Hosted byCloudflare, Inc.
- References7f52a95d27e3870ee4f68a2fcaf23f62.cdn.bubble.io
Contact Verification
Saved contact details can help identify the operator. Their presence supports traceability; it does not prove the business is trustworthy.
Domain & Encryption
Certificate issued for bubbleapps.io.
A shared Cloudflare address answers for many sites, so it is not the site's own server and says nothing about who runs it.
Payment providers the page loads
None seen among the outside domains we saved.
Read from the first 20 outside domains the page loads and the shop platform it uses; the web server and platform rows are under Hosting & Technology. A payment script on the page does not prove the shop accepts that method at checkout, or that you are protected.
Redirect Chain
- 1301http://joinmsteamsession.bubbleapps.io/
- 2200https://joinmsteamsession.bubbleapps.io/
Server Reputation
Referenced Domains
Outbound domains this page links to or loads resources from. Each links to its own security scan.
05 · Evidence Ledger
Evidence ledger
- Antivirusunavailable
- Browser threat feedcomplete
- Page contentcomplete
- Analysiscomplete
- Visual evidencecomplete
The conclusion is supported by the evidence saved with this report.
Technical threat
unknownMalware, phishing, credential theft and hostile infrastructure.
The page automatically sent the browser to wikiversity.org, an unrelated Wikimedia site, instead of any Teams meeting content. · The host name imitates a Microsoft Teams meeting-join link while the page is a generic Bubble no-code app shell with no Microsoft branding or meeting form.
Operator / customer risk
suspiciousComplaints, withdrawals, business conduct and commercial traps.
The page automatically sent the browser to an unrelated external site. · One customer complaint on a public forum: "I received the same mail, it's certainly spam and I highly recommend not to click on any of the links. I am sure, they will present you a fake log-in screen…"
Source coverage and freshness
Status shows whether usable evidence was saved; finding shows what that evidence observed.
| Source | Result | Completion | Finding | Freshness |
|---|---|---|---|---|
| Antivirus | No usable engine result was saved | Unavailable | No saved finding | Not available |
| Browser protection | No browser threat-list match | Completed | No adverse finding | this scan · Nov 7, 2026 |
| Page content | Page fetched · HTTP 200 | Completed | No adverse finding | this scan · Nov 7, 2026 |
| Visual evidence | 3 visible observations saved with the page capture | Completed | No adverse finding | this scan · Nov 7, 2026 |
| Independent research | 4 independent findings were saved | Completed | Adverse | this scan · Nov 7, 2026 |
- Antivirus
- ResultNo usable engine result was saved
- CompletionUnavailableFindingNo saved finding
- FreshnessNot available
- Browser protection
- ResultNo browser threat-list match
- CompletionCompletedFindingNo adverse finding
- Freshnessthis scan · Nov 7, 2026
- Page content
- ResultPage fetched · HTTP 200
- CompletionCompletedFindingNo adverse finding
- Freshnessthis scan · Nov 7, 2026
- Visual evidence
- Result3 visible observations saved with the page capture
- CompletionCompletedFindingNo adverse finding
- Freshnessthis scan · Nov 7, 2026
- Independent research
- Result4 independent findings were saved
- CompletionCompletedFindingAdverse
- Freshnessthis scan · Nov 7, 2026
07 · Safety FAQ
Safety FAQ
Answered from the saved verdict and evidence in this report.
Is joinmsteamsession.bubbleapps.io a scam or a legit website?
Is joinmsteamsession.bubbleapps.io safe to use?
I already paid or entered my details on joinmsteamsession.bubbleapps.io — what should I do?
Can I get my money back from joinmsteamsession.bubbleapps.io?
Did joinmsteamsession.bubbleapps.io steal my password or personal information?
How do I report joinmsteamsession.bubbleapps.io?
joinmsteamsession.bubbleapps.io looks professional — how can it still be a scam?
Is joinmsteamsession.bubbleapps.io on any phishing or malware blacklists?
How old is the joinmsteamsession.bubbleapps.io domain?
Does joinmsteamsession.bubbleapps.io have a valid SSL certificate?
Where is joinmsteamsession.bubbleapps.io hosted?
How often is the joinmsteamsession.bubbleapps.io report updated?
08 · Final Verdict
Final verdict
A "join Microsoft Teams session" address that is really a generic no-code app page and bounces visitors to an unrelated Wikimedia site
The address joinmsteamsession.bubbleapps.io is built to read like a Microsoft Teams meeting-join link, but it sits on Bubble's shared no-code app hosting and the captured page carried only Bubble's generic platform title with no Microsoft branding, meeting form or operator identity. Loading it sent the browser straight to wikiversity.org, an unrelated Wikimedia education site, and the screenshot confirms the visitor ends up there with no Teams content, login field or contact details anywhere on screen. A Stack Exchange reply about the same kind of Teams-themed mail describes it as spam and predicts a fake login screen to capture credentials. Nothing malicious was detected technically, but the mismatch between the name and what the page actually does is the finding, so the score sits in the High Risk band.
09 · Community
Community
Are you the owner of joinmsteamsession.bubbleapps.io?Verify and reply