Security Scan Report: onboardme-staging.zaid-stream-demo.workers.dev

Redirected to:
https://onboardme-staging.zaid-stream-demo.workers.dev//app#6df8ac54fd...
Submitted: Completed: publiccompleted
This website contacted 17 IPs in 1 country across 10 domains to perform 27 HTTP transactions. The main domain is workers.dev and was registered 7 years ago.

Submitted URL: http://onboardme-staging.zaid-stream-demo.workers.dev/

Effective URL:
https://onboardme-staging.zaid-stream-demo.workers.dev//app#6df8ac54fd...
Redirected

AI Security Verdict

Moderate Risk

Confidence: 70%

5
Risk Score

The page impersonates Cloudflare without collecting credentials; moderate risk due to brand misuse and unknown subdomain age.

Risk Factors (3)
Brand impersonation of a well‑known company
Unranked / low‑reputation domain
Hosted on a shared‑hosting subdomain with unknown creation date
Domain age information unavailable

Details

Page Title

Cloudflare Onboardingfrom scan record

Scan Type

public

Domain Name Analysis

You're looking at domain 'onboardme-staging.zaid-stream-demo.workers.dev' on the developer-focused generic top-level domain (.dev), featuring subdomain 'onboardme-staging.zaid-stream-demo'. Its registrable label 'workers' stretches across 7 characters with 2 vowels and five consonants. Tokenizing the label suggests one word: workers. No strong language cues emerged from the frequency lists.

Screenshot

f2> Onboarding Unboxing Laptop CLOUDFLARE’ You are logged in as zald@cloudflare.com For help email it@acmecorp.com 1* Unboxing Laptop 2. Laptop Setup 3. Okta > <i>A</i>ctivate 4. Okta > NFC Key 5....

Page Load Overview

2.61s
Total Load Time
575 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:649 chars
Detector Agreement:50%

Website Classification

Primary Category

technology software78% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
78%
documentation technical
54%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
11172.67.179.26Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.17.207.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.18.3.36Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.18.1.22Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.16.199.35Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1142.250.154.95Google · CDNUnited States
AS15169Google LLC
1142.250.154.94Google · CDNUnited States
AS15169Google LLC
1104.16.95.114Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.16.200.35Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.21.35.200Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2717--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T119E0C0AF48E0505A1190DBA118DAF03CCD96164B6600DCA0F9D611591EE8BCB86F7C9C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6:h4hqIYZLKT62dOCZIq/4aKXI4+OFwY03RfAbpli7vHvjmNwNVuB9d:hRMdnIqQaKXRTiOy7fLieVG

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:1:0:2826dcc2cd0b5e7fc89f4242722f9f3f

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff0707c7ffffffff
Perceptual Hash:b230cdcdccf0cc8d
Difference Hash:b29c8c8c9cc0c8c0
Wavelet Hash:5e060606073f3f3f
Color Hash:N/A

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data