Security Scan: Just a moment...

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/405d2061-80f3-4b0c-8224-d48578b3b45f Domain and IP registration (RDAP)/api/v1/rdap/405d2061-80f3-4b0c-8224-d48578b3b45fHow often this domain was scanned/api/v1/domain/stats/642395e2.73634c9b2b1a997bd44876e7.workers.dev Scan history for this domain/api/v1/domain/history/642395e2.73634c9b2b1a997bd44876e7.workers.dev?limit=15

This website contacted 4 IPs in 1 country across 2 domains to perform 8 HTTP transactions. The main domain is workers.dev and was registered 7 years ago.

Submitted URL: https://642395e2.73634c9b2b1a997bd44876e7.workers.dev/

AI Security Verdict

Confirmed Scam

Confidence: 92%

Risk Score

Disposable workers.dev page serving a known Turnstile-gate phishing kit that fakes Cloudflare's 'Just a moment' check; hunting rule plus two critical phishing IDS alerts confirm credential-theft infrastructure.

Risk Factors (5)

Known malicious Turnstile-gate phishing kit identified by analyst-vetted roster (HIGH phishing)

High-severity hunting rule hit for a self-hosted fake Cloudflare challenge (Turnstile_Gate_Kit_cfForm)

Two CRITICAL network IDS phishing alerts indicating a credential phish landing page with explicit Turnstile rendering

Impersonation of Cloudflare's bot-verification interstitial on an unrelated, random-named workers.dev subdomain

Random hex subdomain on a free hosting platform with no attributable registration date — classic disposable phishing infrastructure

Domain age information unavailable

Details

Page Title

Just a moment...other network

Scan Type

public

Favicon Hash

MMH3: 739899919

MD5: 2d8a466ceb1f8d56e3d8d9413c48f523

Domain Name Analysis

The domain name '642395e2.73634c9b2b1a997bd44876e7.workers.dev' uses the developer-focused generic top-level domain (.dev), featuring subdomain '642395e2.73634c9b2b1a997bd44876e7'. The registrable portion 'workers' spans 7 characters containing 2 vowels alongside 5 consonants. Word splitting yields one word: workers. Median word length is seven characters. No strong language cues emerged from the frequency lists.

Screenshot

Just a moment... Please stand by, while we are checking if the site connection is secure Verify you are human eLouofrane Busy bee We need to review the security of your connection before proceeding...

Page Load Overview

0.49s

Total Load Time

846 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:199 chars

Detector Agreement:100%

Website Classification

Primary Category

documentation technical67% confidence

Type: static

Method: ml+structural

All Detected Categories

documentation technical

67%

government public service

66%

blog personal website

55%

news media journalism

52%

adult content

38%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
2	104.21.0.158Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	104.18.94.41Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	104.18.95.41Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	172.67.151.67Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
8	4	-	-