Security Report: quiet-lab-c44b.b29e185437704fe0a494f89f.workers.dev - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/400ed573-46d5-4ee5-8500-d675800842c8 Domain and IP registration (RDAP)/api/v1/rdap/400ed573-46d5-4ee5-8500-d675800842c8How often this domain was scanned/api/v1/domain/stats/quiet-lab-c44b.b29e185437704fe0a494f89f.workers.dev Scan history for this domain/api/v1/domain/history/quiet-lab-c44b.b29e185437704fe0a494f89f.workers.dev?limit=15

This website contacted 3 IPs in 1 country across 2 domains to perform 10 HTTP transactions. The main domain is workers.dev and was registered 7 years ago.

Submitted URL: https://quiet-lab-c44b.b29e185437704fe0a494f89f.workers.dev/verify?link_id=lnk_ec15884083bc963c

AI Security Verdict

High Risk

Confidence: 97%

Risk Score

Confirmed DocuSign/Microsoft device-code phishing on a workers.dev subdomain, exfiltrating user credentials to panel.bcarl24.icu. Do not enter any codes or credentials.

Risk Factors (5)

Brand impersonation of DocuSign and Microsoft on a mismatched free-hosted subdomain

Credential exfiltration to external attacker-controlled .icu panel

Abuse of Microsoft device-login (device code phishing) to capture account access

Free instant-provision hosting (workers.dev) — page creation date unknown

No reputation / unranked domain

Domain age information unavailable

Details

Page Title

DocuSign - Verify Your Identity

Scan Type

public

Favicon Hash

MMH3: 2094705771

MD5: 31bdc1d1e5e149c0737fc711af896ef3

Domain Name Analysis

Domain 'quiet-lab-c44b.b29e185437704fe0a494f89f.workers.dev' uses the developer-focused generic top-level domain (.dev) with subdomain 'quiet-lab-c44b.b29e185437704fe0a494f89f'. The registrable portion 'workers' spans 7 characters containing 2 vowels alongside 5 consonants. Breaking it apart gives one word: workers. No strong language cues emerged from the frequency lists.

Screenshot

docusign. Verify your identity to view the document This document is protected by DocuSign. Sign in with your Microsoft account to access it securely. 1. Cliquez sur le code pour le copier et our l...

Page Load Overview

2.09s

Total Load Time

72 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:30%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:fr

Text Length:1,141 chars

Detector Agreement:75%

Language mismatch: Declared as fr but detected as en

Website Classification

Primary Category

corporate50% confidence

Type: dynamic

Method: structural

All Detected Categories

corporate

50%

Detected Features

OG: website

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
4	104.21.84.162Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	185.215.151.18	New York, New York, United States	AS135392MillenialHost Limited
3	172.67.195.58Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
10	3	-	-