Security Scan: Webmail Login

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/3ae00119-a8fd-4799-8f4f-c43a4ebf749c Domain and IP registration (RDAP)/api/v1/rdap/3ae00119-a8fd-4799-8f4f-c43a4ebf749cHow often this domain was scanned/api/v1/domain/stats/w2-geiuhsewhoictwuhetiuhwie.cloudd1.workers.dev Scan history for this domain/api/v1/domain/history/w2-geiuhsewhoictwuhetiuhwie.cloudd1.workers.dev?limit=15

This website contacted 2 IPs in 2 countries across 2 domains to perform 10 HTTP transactions. The main domain is workers.dev and was registered 7 years ago.

Submitted URL: https://w2-geiuhsewhoictwuhetiuhwie.cloudd1.workers.dev

AI Security Verdict

Confirmed Scam

Confidence: 92%

Risk Score

Fake 'Webmail Login' (cPanel mimic) on a random Cloudflare Workers subdomain that secretly posts your email and password to an unrelated WordPress site (airofreshintl.com/wp-admin/user/cc.php). Classic credential phishing — do not enter any credentials.

Risk Factors (5)

Cross-origin submission of password and email to a third-party domain hosting a WordPress cc.php script unrelated to the page

Hidden/invisible password field used to capture a credential the user cannot see

Impersonation of a cPanel webmail login on a look-alike Cloudflare Workers subdomain

Obfuscatory random-character subdomain with no brand relationship

No legitimate business identity behind the page; no threat-intel matches and no domain reputation

Domain age information unavailable

Details

Page Title

Webmail Login

Scan Type

public

Favicon Hash

MMH3: 428589171

MD5: 31eccd8848662931aa949469697b1f11

Domain Name Analysis

The domain 'w2-geiuhsewhoictwuhetiuhwie.cloudd1.workers.dev' uses the developer-focused generic top-level domain (.dev); it also runs on subdomain 'w2-geiuhsewhoictwuhetiuhwie.cloudd1'. The second-level label 'workers' is 7 characters long split between two vowels and 5 consonants. Splitting it apart reveals 1 word: workers. Median word length is seven characters. No strong language cues emerged from the frequency lists.