Security Scan Report: gl.1038742935.workers.dev

Site favicon
Submitted: Sep 17, 2026, 12:54:02 PMCompleted: Sep 17, 2026, 12:54:24 PMpubliccompleted

AI Security Verdict

High Risk

Confidence: 78%

7
Risk Score

Non-Google workers.dev page impersonates Google — serving Google's favicon and replicating its login/consent interstitial on an unranked, unknown-age subdomain. Strong brand-impersonation phishing pattern; avoid.

Risk Factors (5)
Brand impersonation of Google on a non-Google domain
Google favicon served from a non-Google host (favicon brand impersonation)
Instant/anon hosting subdomain (workers.dev) with no reputation
Unranked domain pretending to be a top-tier global brand
Replica of Google's cookie-consent interstitial including sign-in navigation
Domain age information unavailable

Details

Page Title

Google

Scan Type

public

Domain Name Analysis

Within the developer-focused generic top-level domain (.dev), 'gl.1038742935.workers.dev' is registered, featuring subdomain 'gl.1038742935'. The core label 'workers' covers 7 characters containing two vowels alongside 5 consonants. Word splitting yields one word: workers. The median word length lands at 7 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://gl.1038742935.workers.dev/

Page Load Overview

2.20s
Total Load Time
964 KB
Total Size

Language Analysis

Primary Language

🇧🇬BG
Code: bg
Confidence:80%
Script:Unknown
Direction:ltr

Detection Details

HTML Lang Attribute:bg
Text Length:3,367 chars
Detector Agreement:100%

Website Classification

Primary Category

corporate business48% confidence
Type: spa
Method: ml+structural

All Detected Categories

corporate business
48%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
11188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6142.251.20.110Google · CDNUnited States
AS15169Google LLC
6172.217.208.110Google · CDNUnited States
AS15169Google LLC
6188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6142.251.110.95Google · CDNUnited States
AS15169Google LLC
6142.251.110.100Google · CDNUnited States
AS15169Google LLC
416--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1ABE219BB771178375A63EAF1916F640A3C336467A54CC458B488C4F07CB0D4A8692FFA

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:z1oc4WV/4ad1C6XczPqXyBjvwl/K7xySYP87xaTsLaTso:houV9YAK7jazL

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:33439:isINAUVIACnGUoIEmeBBjTHISWAdxIIHAAxYgEcgQcQhEsAgInIDIxVRcnEUIAiAQAxvZgA6NTQFGgbEMAgy7KQAiCLBAzoh

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:183c3c3c3c3c3c18
Perceptual Hash:9bd96464657334d1
Difference Hash:6069697969696969
Wavelet Hash:3c3c3c3c3c3c3c3c
Color Hash:#2d8659

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data