Security Scan Report: juraq-tkyr-saep.c-m4uro6ql.workers.dev

Site favicon
Submitted: Jul 16, 2026, 1:45:01 AMCompleted: Jul 16, 2026, 1:46:25 AMpubliccompleted

This website contacted 1 IP in 1 country across 1 domain to perform 2 HTTP transactions. The main domain is juraq-tkyr-saep.c-m4uro6ql.workers.dev and was registered 7 years ago.

Submitted URL: https://juraq-tkyr-saep.c-m4uro6ql.workers.dev/lp/Az4FhPtP_O4?X-Amz-Invocation-Type=DryRun&X-Amz-Log-Type=Tail&X-Amz-Client-Context=8ODgEX0u7tbAgaJBLWu3Fs6jYxsDJprG+4Uqw9JjyPw&FunctionName=arn:aws:lambda:us-east-1:949944465049:function:60txpc29t8at&Qualifier=$LATEST&RequestId=7003c52b-62b0-d91e-1b5e-7e84369e5e28&ExecutedVersion=90&StatusCode=200&LogResult=OEOT+9wQhmu/a0kIN2XeECw/K+9hxjlu$LATEST&RequestId=7003c52b-62b0-d91e-1b5e-7e84369e5e28&ExecutedVersion=90&StatusCode=200&LogResult=OEOT+9wQhmu/a0kIN2XeECw/K+9hxjlu/xlnzkj4i/

AI Security Verdict

High Risk

Confidence: 78%

7
Risk Score

The site mimics Microsoft OneDrive but lacks credential forms; brand impersonation on an unknown‑age workers.dev subdomain warrants moderate risk.

Risk Factors
Brand impersonation on unranked, unknown‑age subdomain
Use of a cloud‑hosting platform subdomain (workers.dev) that can be created instantly
Lack of legitimate Microsoft domain or TLS certificate details
Domain age information unavailable

Details

Page Title

Microsoft User shared a document with you

Scan Type

public

Domain Name Analysis

The domain name 'juraq-tkyr-saep.c-m4uro6ql.workers.dev' uses the developer-focused generic top-level domain (.dev); it also runs on subdomain 'juraq-tkyr-saep.c-m4uro6ql'. The second-level label 'workers' is 7 characters long containing two vowels alongside five consonants. Breaking it apart gives one word: workers. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://juraq-tkyr-saep.c-m4uro6ql.workers.dev/lp/Az4FhPtP_O4?X-Amz-Invocation-Type=DryRun&X-Amz-Log-Type=Tail&X-Amz-Client-Context=8ODgEX0u7tbAgaJBLWu3Fs6jYxsDJprG+4Uqw9JjyPw&FunctionName=arn:aws:lambda:us-east-1:949944465049:function:60txpc29t8at&Qualifier=$LATEST&RequestId=7003c52b-62b0-d91e-1b5e-7e84369e5e28&ExecutedVersion=90&StatusCode=200&LogResult=OEOT+9wQhmu/a0kIN2XeECw/K+9hxjlu$LATEST&RequestId=7003c52b-62b0-d91e-1b5e-7e84369e5e28&ExecutedVersion=90&StatusCode=200&LogResult=OEOT+9wQhmu/a0kIN2XeECw/K+9hxjlu/xlnzkj4i/

Page Load Overview

3.20s
Total Load Time
9 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:386 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software40% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
40%
documentation technical
29%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2188.114.97.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
21--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T14A724A5EB5D8063AB313B293DC522385B4214ED7FB2AFE81858D909801C9BFDC3B7958

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:37LTqCbp+ue7nSdKIypdr0NbqPixuGbPcFej1mQs17sxGI:37LOCbp+u+n4CW9yguGbPcFejO17sx7

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:15996:BIXQhxu4NABYAQAAWDQRUCEABTW0CEcBCMMJtLCUVJUGQgBIQRINkM6LlsVEqaAQJYZkBIkRcQAqIIqycTkYgAJIRLAIIKBA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00ffffffffffffff
Perceptual Hash:9919596766666666
Difference Hash:1012382000000000
Wavelet Hash:00fcfcc0f0f0f0f0
Color Hash:#bf4073

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data