Security Report: sparkling-pond-4eab.bp7565357.workers.dev - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/0a6341a8-9a66-4173-88d0-a1ec8e9a8425 Domain and IP registration (RDAP)/api/v1/rdap/0a6341a8-9a66-4173-88d0-a1ec8e9a8425 Certificate Transparency/api/v1/ct/sparkling-pond-4eab.bp7565357.workers.dev How often this domain was scanned/api/v1/domain/stats/sparkling-pond-4eab.bp7565357.workers.dev Scan history for this domain/api/v1/domain/history/sparkling-pond-4eab.bp7565357.workers.dev?limit=15

This website contacted 2 IPs in 1 country across 1 domain to perform 5 HTTP transactions. The main domain is sparkling-pond-4eab.bp7565357.workers.dev and was registered 7 years ago.

Submitted URL: https://sparkling-pond-4eab.bp7565357.workers.dev/?app_vl=aHx3j29laIeVoL2twK2XgndfpsKj1Zqerphfpn1xkGiTqaOZl3yPsg&dd=UiEnNzAlayQ1IS4iPzooNi5-ODw1Ow&e=info%2540andreasamstutz.ch&sui=%7Bsui%7D&fn=ANDREAS+AMSTUTZ&ln=&p=&z=CH-NEWPARTNER-2309-CON06

AI Security Verdict

Confirmed Scam

Confidence: 92%

Risk Score

FedEx phishing page on a workers.dev subdomain flagged by Google Safe Browsing for social engineering; uses fake failed-delivery lure and victim's personal data to harvest information.

Risk Factors

FedEx brand impersonation on a non-FedEx domain

Google Safe Browsing Social Engineering (phishing) detection

Untrusted free hosting platform subdomain with unknown age and no reputation

Targeted personalized victim data (name, e-mail) embedded in the URL

Fake 'delivery failed - update your data' urgency pressure

Domain age information unavailable

Details

Page Title

Sendung verfolgen | Schweiz

Scan Type

public

Domain Name Analysis

Within the developer-focused generic top-level domain (.dev), 'sparkling-pond-4eab.bp7565357.workers.dev' is registered and includes subdomain 'sparkling-pond-4eab.bp7565357'. The core label 'workers' covers 7 characters split between two vowels and 5 consonants. It segments into 1 word: workers. Average segment length settles at 7 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

0.53s

Total Load Time

58 KB

Total Size

Language Analysis

Primary Language

🇩🇪German

Code: de

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:de-CH

Text Length:1,382 chars

Detector Agreement:100%

Website Classification

Primary Category

government public service61% confidence

Type: static

Method: ml+structural+ocr_tiebreaker

All Detected Categories

government public service

61%

e-commerce shopping

57%

documentation technical

48%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
3	172.67.178.208Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	104.21.48.56Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	2	-	-

Detected Technologies3

HTTP/3

40%

Cloudflare Bot Management

40%

Cloudflare

40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1EDD1DD91C0F05532449783C27AE42F1B2FE8D61BCA4A11A1B3AD9F954FE3D82DD7B11A

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

48:/SahsVFHMB6sY4G40koXdxrL0Cgh1vN6huRwI6X9zJff/GkDxJrwj4mVTiY9eCiR:/SahsXGFY5kcdJgTv4hhh9eCrO0YDiR

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:6622:ICDNJJCEIaQCEBaQJyBCFvcJICADKCNMCQAgJAAAHBSmBSkQIBAADqkBdQMEChsEAAAMBwCaMGQoGkk0CUsIARMsKE8AAgD8

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:000000ffffffffff

Perceptual Hash:cc4d1bb3e4e43313

Difference Hash:3470b226cc4cd428

Wavelet Hash:000000f3ffe7ffc3

Color Hash:#e07f6c

Other Hashes

Crop Resistant:2666c84cccd44002,0834341670713032

Scan History

Scan history not available

Unable to load historical scan data

Security Scan Report: sparkling-pond-4eab.bp7565357.workers.dev