Security Scan: iCloud

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/1289a47c-b8d2-44e9-9253-39524d8ed306 Domain and IP registration (RDAP)/api/v1/rdap/1289a47c-b8d2-44e9-9253-39524d8ed306How often this domain was scanned/api/v1/domain/stats/7937591907436652.2903619204708293180779359237393uqwge3603.workers.dev Scan history for this domain/api/v1/domain/history/7937591907436652.2903619204708293180779359237393uqwge3603.workers.dev?limit=15

This website contacted 2 IPs in 1 country across 1 domain to perform 7 HTTP transactions. The main domain is workers.dev and was registered 7 years ago.

Submitted URL: https://7937591907436652.2903619204708293180779359237393uqwge3603.workers.dev/6193410b-2643-4092-802f-4f86ec52f2d8

Effective URL:

blob:https://7937591907436652.2903619204708293180779359237393uqwge3603...

Redirected

AI Security Verdict

High Risk

Confidence: 88%

Risk Score

Non-Apple workers.dev subdomain titled 'iCloud' with Apple copyright, a fake CAPTCHA 'Security Check' and filler multilingual text, flagged by a HIGH IDS iCloud-phishing alert — brand impersonation phishing landing page.

Risk Factors (5)

Brand impersonation of Apple iCloud on a non-Apple, instantly-publishable *.workers.dev subdomain

HIGH-severity IDS phishing alert for iCloud phishing landing on a non-SSL-titled page

Fabricated 'Security Check' / CAPTCHA gate designed to draw users into an interaction flow

Multilingual nonsensical filler text consistent with an auto-generated phishing template

Anti-analysis behavior (right-click blocked)

Domain age information unavailable

Details

Page Title

iCloud

Scan Type

public

Domain Name Analysis

Domain '7937591907436652.2903619204708293180779359237393uqwge3603.workers.dev' uses the developer-focused generic top-level domain (.dev) and includes subdomain '7937591907436652.2903619204708293180779359237393uqwge3603'. Count 7 characters in 'workers' with 2 vowels and five consonants. Segmentation suggests one word: workers. Median word length comes out to 7 characters. No strong language cues emerged from the frequency lists.

Screenshot

system Status Privacy Policy Terms & Conditions Security Check ay I'm not a robot ‘ reCA PTCHA Copyright © 2024 Apple Inc. All rights reserved.

Page Load Overview

0.20s

Total Load Time

44 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:185,416 chars

Detector Agreement:100%

Website Classification

Primary Category

download file sharing62% confidence

Type: static

Method: ml+structural

All Detected Categories

download file sharing

62%

technology software

61%

documentation technical

58%

adult content

57%

government public service

57%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
4	172.67.131.105Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	104.21.4.3Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
7	2	-	-

Detected Technologies3

HTTP/3

40%

Cloudflare Bot Management

40%

Cloudflare

40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1E1A44E23F3C032764936860CEA9BB7BEAD3E8819B3175E3CB157773803454CB569A964

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:kmwGO4t/qMY0js50O0gBq0OMTc5PSztU2BP0X0JBnzSe2P3IwpNWO:7wGO4NIKWO

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:469656:CQCIIICMPImaFAc3ikhiiSAYQux2hAk0DTATwSAAHsBM4SADQAtQoQTiqCSASgFMIkBnYxgSgBIAlEIIG38AISmeblSBxBJx

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:7fe7e7e7e7ffff7e

Perceptual Hash:a62399890dab13fd

Difference Hash:800c0a0e0e1400c0

Wavelet Hash:42c3c0c0c3c3ff3c

Color Hash:N/A

Other Hashes

Crop Resistant:800c0a0e0e1400c0

Scan History

Scan history not available

Unable to load historical scan data

Security Scan Report: 7937591907436652.2903619204708293180779359237393uqwge3603.workers.dev