Security Scan: Example.Com Verifying...

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/31b454d9-5d7e-4ce1-bb17-aa1ff07f607c Domain and IP registration (RDAP)/api/v1/rdap/31b454d9-5d7e-4ce1-bb17-aa1ff07f607c Certificate Transparency/api/v1/ct/flat-base-63d9.fr1ilt.workers.dev How often this domain was scanned/api/v1/domain/stats/flat-base-63d9.fr1ilt.workers.dev Scan history for this domain/api/v1/domain/history/flat-base-63d9.fr1ilt.workers.dev?limit=15

This website contacted 4 IPs in 1 country across 3 domains to perform 17 HTTP transactions. The main domain is flat-base-63d9.fr1ilt.workers.dev and was registered 3 years 11 months ago.

Submitted URL: https://flat-base-63d9.fr1ilt.workers.dev/jtFQ3exWXBuZqo1IPc2z/DZR9jteug0/ioYRaffOe0authgen/0zBY7n7/jtFQ3exWXBuZqo1IPc2z/victim/GkwlZ9/example.com/jtFQ3exWXBuZqo1IPc2zDZR9jteug0

AI Security Verdict

High Risk

Confidence: 90%

Risk Score

Known Turnstile-gate phishing kit on a workers.dev subdomain: a fake Cloudflare 'Just a moment' check that hides the real phishing page behind a self-hosted cfForm gate. Avoid.

Risk Factors (5)

Known malicious phishing kit identified via content-anchored YARA rule (roster ground truth)

Fake Cloudflare Turnstile verification gate used to cloak the downstream credential page

Content served from a free workers.dev shared-hosting subdomain with unknown creation date

Deceptive 'verifying' progress screen (7%) designed to look like a legitimate security check

Unranked domain posing with a security-vendor challenge UI it does not own

Domain age information unavailable

Details

Page Title

Example.Com Verifying...

Scan Type

public

Domain Name Analysis

Domain 'flat-base-63d9.fr1ilt.workers.dev' uses the developer-focused generic top-level domain (.dev); it also runs on subdomain 'flat-base-63d9.fr1ilt'. The registrable portion 'workers' spans 7 characters with two vowels and 5 consonants. Segmentation suggests 1 word: workers. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

8.55s

Total Load Time

1.9 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:92 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software62% confidence

Type: static

Method: ml+structural

All Detected Categories

technology software

62%

e-commerce shopping

54%

entertainment media

43%

government public service

43%

news media journalism

38%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
5	172.67.213.8Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	104.18.95.41Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	18.245.46.89Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
4	104.18.94.41Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
17	4	-	-