Security Report: quiet-glade-0b38.gingerbeaulieu0785.workers.dev - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/08dba14d-08de-4bd2-a791-6e0bdf7c1fde Domain and IP registration (RDAP)/api/v1/rdap/08dba14d-08de-4bd2-a791-6e0bdf7c1fdeHow often this domain was scanned/api/v1/domain/stats/quiet-glade-0b38.gingerbeaulieu0785.workers.dev Scan history for this domain/api/v1/domain/history/quiet-glade-0b38.gingerbeaulieu0785.workers.dev?limit=15

This website contacted 4 IPs in 1 country across 2 domains to perform 4 HTTP transactions. The main domain is workers.dev and was registered 7 years ago.

Submitted URL: https://quiet-glade-0b38.gingerbeaulieu0785.workers.dev/

AI Security Verdict

Confirmed Scam

Confidence: 92%

Risk Score

Fake DocuSign page on a free workers.dev subdomain that pushes a Microsoft device-code 'verification' to steal sign-in sessions, and beacons fingerprint data to the unrelated host mlspolicies.help. Not DocuSign; do not enter any code or sign in.

Risk Factors (6)

Brand impersonation of DocuSign on a non-DocuSign domain

Second-brand impersonation: instructs users to sign in with their 'Microsoft account' from a third-party page

Device-code / 9-character code phishing flow designed to capture an authentication session or token

Cross-origin exfiltration of browser fingerprint data to mlspolicies.help, an unrelated unranked host

Anonymous, unranked free-hosting subdomain with no verifiable ownership; DNS/TLS alerts for the workers.dev platform confirm the hosting pattern

Manufactured urgency ('This code will expire in 15 minutes')

Domain age information unavailable

Details

Page Title

DocuSign - Verify Your Identity

Scan Type

public

Domain Name Analysis

Domain 'quiet-glade-0b38.gingerbeaulieu0785.workers.dev' uses the developer-focused generic top-level domain (.dev) and includes subdomain 'quiet-glade-0b38.gingerbeaulieu0785'. Count 7 characters in 'workers' with two vowels and 5 consonants. Word splitting yields one word: workers. Average segment length settles at seven characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

0.26s

Total Load Time

38 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:896 chars

Detector Agreement:100%

Website Classification

Primary Category

corporate50% confidence

Type: static

Method: structural

All Detected Categories

corporate

50%

Detected Features

OG: website

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
1	188.114.97.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	188.114.96.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	172.67.150.90Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	104.21.79.249Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	4	-	-