Security Report: quiet-lab-c44b.b29e185437704fe0a494f89f.workers.dev - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/400ed573-46d5-4ee5-8500-d675800842c8 Domain and IP registration (RDAP)/api/v1/rdap/400ed573-46d5-4ee5-8500-d675800842c8 Certificate Transparency/api/v1/ct/quiet-lab-c44b.b29e185437704fe0a494f89f.workers.dev How often this domain was scanned/api/v1/domain/stats/quiet-lab-c44b.b29e185437704fe0a494f89f.workers.dev Scan history for this domain/api/v1/domain/history/quiet-lab-c44b.b29e185437704fe0a494f89f.workers.dev?limit=15

This website contacted 3 IPs in 1 country across 2 domains to perform 10 HTTP transactions. The main domain is quiet-lab-c44b.b29e185437704fe0a494f89f.workers.dev and was registered 1 month ago.

Submitted URL: https://quiet-lab-c44b.b29e185437704fe0a494f89f.workers.dev/verify?link_id=lnk_ec15884083bc963c

AI Security Verdict

High Risk

Confidence: 97%

Risk Score

Confirmed DocuSign/Microsoft device-code phishing on a workers.dev subdomain, exfiltrating user credentials to panel.bcarl24.icu. Do not enter any codes or credentials.

Risk Factors (5)

Brand impersonation of DocuSign and Microsoft on a mismatched free-hosted subdomain

Credential exfiltration to external attacker-controlled .icu panel

Abuse of Microsoft device-login (device code phishing) to capture account access

Free instant-provision hosting (workers.dev) — page creation date unknown

No reputation / unranked domain

Domain age information unavailable

Details

Page Title

DocuSign - Verify Your Identity

Scan Type

public

Favicon Hash

MMH3: 2094705771

MD5: 31bdc1d1e5e149c0737fc711af896ef3

Domain Name Analysis

Domain 'quiet-lab-c44b.b29e185437704fe0a494f89f.workers.dev' uses the developer-focused generic top-level domain (.dev) with subdomain 'quiet-lab-c44b.b29e185437704fe0a494f89f'. The registrable portion 'workers' spans 7 characters containing 2 vowels alongside 5 consonants. Breaking it apart gives one word: workers. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

2.09s

Total Load Time

72 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:30%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:fr

Text Length:1,141 chars

Detector Agreement:75%

Language mismatch: Declared as fr but detected as en

Website Classification

Primary Category

corporate50% confidence

Type: dynamic

Method: structural

All Detected Categories

corporate

50%

Detected Features

OG: website

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
4	104.21.84.162Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	185.215.151.18	New York, New York, United States	AS135392MillenialHost Limited
3	172.67.195.58Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
10	3	-	-