Security Scan: Cloudflare Workers Playground

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/5e25c5a5-c5a3-4e66-83c6-c027fc65924d Domain and IP registration (RDAP)/api/v1/rdap/5e25c5a5-c5a3-4e66-83c6-c027fc65924d Certificate Transparency/api/v1/ct/js-worker-prod.accountmanagement.workers.dev How often this domain was scanned/api/v1/domain/stats/js-worker-prod.accountmanagement.workers.dev Scan history for this domain/api/v1/domain/history/js-worker-prod.accountmanagement.workers.dev?limit=15

This website contacted 4 IPs in 1 country across 2 domains to perform 5 HTTP transactions. The main domain is workers.dev and was registered 7 years ago.

Submitted URL: https://js-worker-prod.accountmanagement.workers.dev/

AI Security Verdict

Low Risk

Confidence: 60%

Risk Score

A Cloudflare Workers Playground copy on a non-official *.workers.dev subdomain. Brand-styled but with no forms, no credential harvesting, and no Indicators of Compromise, YARA or Safe Browsing hits. Suspicious hosting/naming, moderate risk only.

Risk Factors (4)

Cloudflare-branded content hosted on a third-party/user-controlled workers.dev subdomain rather than an official cloudflare.com endpoint

Subdomain naming ('js-worker-prod.accountmanagement') suggests possible staging for an account/credential-themed campaign

Hosting-platform subdomain with unknown creation date (could be minutes old)

Unranked domain with no reputation history

Safety Factors (6)

No credential, payment, login or other data-collecting form on the page

No Indicators of Compromise, no JavaScript malware (YARA) matches, no known-kit match

No cross-origin credential exfiltration; all scripts served from the page's own origin

Content found is generic Cloudflare Workers playground documentation with no urgency, lure or call to enter personal data

No brand-impersonating login or payment flow — the only third-party reference is to Cloudflare's own account signup

Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 4 to 3

Domain age information unavailable

Details

Page Title

Cloudflare Workers Playground

Scan Type

public

Favicon Hash

MMH3: -1599776336

MD5: 1b474eb1e69eb01dd4a0c13b4b3e3410

Domain Name Analysis

Domain 'js-worker-prod.accountmanagement.workers.dev' uses the developer-focused generic top-level domain (.dev) with subdomain 'js-worker-prod.accountmanagement'. The core label 'workers' covers 7 characters holding 2 vowels versus 5 consonants. Tokenizing the label suggests one word: workers. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

0.65s

Total Load Time

101 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:777 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software66% confidence

Type: static

Method: ml+structural

All Detected Categories

technology software

66%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
2	104.21.5.26Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	104.18.10.121Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	172.67.132.198Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	104.18.11.121Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	4	-	-