Security Scan Report: myaol-serv.cwrdl.workers.dev

Redirected to:
https://myaol-serv.cwrdl.workers.dev/
Site favicon
Submitted: Aug 8, 2026, 12:45:01 PMCompleted: Aug 8, 2026, 12:46:08 PMpubliccompleted
Loading additional data...

Summary

This website contacted 3 IPs in 2 countries across 3 domains to perform 4 HTTP transactions. The main domain is myaol-serv.cwrdl.workers.dev and was registered NaN years ago.

Submitted URL: http://myaol-serv.cwrdl.workers.dev/

Effective URL: https://myaol-serv.cwrdl.workers.dev/Redirected

AI Security Verdict

Confirmed Scam

Confidence: 95%

10
Risk Score

The site mimics AOL login on a workers.dev subdomain, collects credentials, and shows multiple high‑risk indicators, confirming a phishing scam.

Risk Factors
Brand impersonation of AOL
Credential harvesting form
Hosted on a generic cloud subdomain (workers.dev) with unknown creation date
High severity IDS alerts indicating script obfuscation
Domain age information unavailable

Details

Page Title

AOL

Scan Type

public

Language

🇺🇸

English

(64% confidence)

Category

social media network

(56%)

Domain Information

You're looking at domain 'myaol-serv.cwrdl.workers.dev' on the developer-focused generic top-level domain (.dev) and includes subdomain 'myaol-serv.cwrdl'. Its registrable label 'workers' stretches across 7 characters split between 2 vowels and five consonants. Tokenizing the label suggests one word: workers. The median word length lands at seven characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://myaol-serv.cwrdl.workers.dev/

Page Load Overview

0.63s
Total Load Time
8
HTTP Requests
3
Domains
1 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:64%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:64%
Script Type:Latin
Text Length:95 chars
Detector Agreement:100%

Website Classification

Primary Category

social media network56% confidence
Type: static
Method: ml+structural

All Detected Categories

social media network
56%
news media journalism
34%
finance banking
28%
technology software
25%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4188.114.97.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2172.67.74.152Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
279.127.216.204Frankfurt am Main, Hesse, Germany
AS60068Datacamp Limited
83--

Page Statistics

8
Requests
3
Unique Domains
172.4 KB
Total Size

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T16723D052691FEF3D8EF46840F9868DCA7E961DD6C293220A4FA47B554BC3316C2C2E71

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:uh52Tzv2ci6KHc9JOyGWJqTAGh52Tzv2ci6KHc9JOyGWJqTAUkEHZF:bTyj6wc9JOyPqsTTyj6wc9JOyPqsqHZF

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:46687:JUhxQaxQa2BAAIEJACAACR0w8JIK+kByAY0GFZCASDgBA0E6QUEIjL3AElxkicwFBc0yrEkpSE0IYoIEgUeAoABHlwTAEBI+

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:7febf9f1fff9ffff
Perceptual Hash:e9cd9692496d9296
Difference Hash:d202121308030400
Wavelet Hash:7f0b0f010b010f0f
Color Hash:#6cb9e0

Other Hashes

Crop Resistant:d202121308030400

Scan History

Scan history not available

Unable to load historical scan data