Security Scan: Just a moment...

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/108f28fc-fd99-47fa-8f97-5a211cc8537a Domain and IP registration (RDAP)/api/v1/rdap/108f28fc-fd99-47fa-8f97-5a211cc8537a Certificate Transparency/api/v1/ct/fc2617cf.4346164a315335d9f00d2c36.workers.dev How often this domain was scanned/api/v1/domain/stats/fc2617cf.4346164a315335d9f00d2c36.workers.dev Scan history for this domain/api/v1/domain/history/fc2617cf.4346164a315335d9f00d2c36.workers.dev?limit=15

This website contacted 4 IPs in 1 country across 2 domains to perform 8 HTTP transactions. The main domain is fc2617cf.4346164a315335d9f00d2c36.workers.dev and was registered 17 years ago.

Submitted URL: https://fc2617cf.4346164a315335d9f00d2c36.workers.dev/

AI Security Verdict

Confirmed Scam

Confidence: 88%

Risk Score

Self-hosted fake Cloudflare 'Just a moment' gate built with the known Turnstile-gate phishing kit; it mimics Cloudflare to funnel victims to a hidden credential page. Report as scam.

Risk Factors (5)

Known phishing kit (Turnstile gate) confirmed by kit roster and YARA

Impersonation of Cloudflare's security-challenge UI on an unrelated domain

Hidden gate designed to filter out scanners before revealing the credential page

Heavy eval()-based dynamic code execution

Randomized hexadecimal subdomain on free hosting platform, unranked reputation

Domain age information unavailable

Details

Page Title

Just a moment...

Scan Type

public

Favicon Hash

MMH3: 780943526

MD5: 9d18f655b1ae77d6dbe44a41b6c67ebb

Domain Name Analysis

The domain name 'fc2617cf.4346164a315335d9f00d2c36.workers.dev' uses the developer-focused generic top-level domain (.dev) with subdomain 'fc2617cf.4346164a315335d9f00d2c36'. Its registrable label 'workers' stretches across 7 characters holding 2 vowels versus 5 consonants. Breaking it apart gives one word: workers. The median word length lands at seven characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

1.07s

Total Load Time

542 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:200 chars

Detector Agreement:100%

Website Classification

Primary Category

documentation technical67% confidence

Type: static

Method: ml+structural

All Detected Categories

documentation technical

67%

government public service

63%

blog personal website

53%

news media journalism

49%

adult content

36%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
2	188.114.97.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	104.18.95.41Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	188.114.96.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	104.18.94.41Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
8	4	-	-