Security Scan Report: orbsolicitorsie.weupdaa.workers.dev

Submitted: Completed: publiccompleted
This website contacted 3 IPs in 1 country across 3 domains to perform 12 HTTP transactions. The main domain is workers.dev and was registered 7 years ago.

Submitted URL: https://orbsolicitorsie.weupdaa.workers.dev/

AI Security Verdict

High Risk

Confidence: 82%

8
Risk Score

Microsoft Outlook-branded mailbox check hosted on a random workers.dev subdomain, gated by a captcha interstitial. Brand impersonation on throwaway hosting — treat as a phishing lure; do not enter credentials.

Risk Factors (4)
Impersonation of Microsoft Outlook brand on a non-Microsoft, shared free-hosting subdomain
Captcha/'verify you are human' interstitial used as a gate ahead of the claimed mailbox — a common pattern for filtering out scanners before showing phishing content
Deceptive hostname unrelated to the impersonated brand
Scanner-evasion framing: the page presents itself as a mailbox check while hosted on a throwaway-style workers.dev namespace
Domain age information unavailable

Details

Page Title

Outlook

Scan Type

public

Domain Name Analysis

The domain 'orbsolicitorsie.weupdaa.workers.dev' uses the developer-focused generic top-level domain (.dev) with subdomain 'orbsolicitorsie.weupdaa'. Its registrable label 'workers' stretches across 7 characters containing two vowels alongside five consonants. Splitting it apart reveals 1 word: workers. The median word length lands at 7 characters. No strong language cues emerged from the frequency lists.

Screenshot

One moment — confirming it's you Complete the check below to continue 2 Verify you are human —_eovortane Brvacy = Hele HE Microsoft

Page Load Overview

0.40s
Total Load Time
1.9 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:182 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software40% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

technology software
40%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4172.67.163.216Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4104.18.95.41Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4142.251.14.95Google · CDNUnited States
AS15169Google LLC
123--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1A843BEAEA9F710261553523A93FB67083A31C007594ECC90BD9C13999F847CBCAA7BDC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:LRGHg5SzVFjeHv4MA6gkvCzQXWRh2LLY8pbfvbISMv0VBC3H5FNxTdyYVvIugUO:LRmuyeHvzmkaGWRh2/NfDIS8HyYlsUO

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:55682:zAZQHMSJSsAIEoRAE0gkFeFwAyFEgULFKhGFMQNysYuEQMTZAwUBQIYIgIAEWAE5AjRxvEgABwpEoJyIMhQAAmAggWeY2CbG

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffe7e5e7e7ffe7
Perceptual Hash:e63299cc663336cc
Difference Hash:0800080c0c080008
Wavelet Hash:f0f0e0e0243c3c24
Color Hash:07000000180

Other Hashes

Crop Resistant:0800080c0c080008

Scan History

Scan history not available

Unable to load historical scan data