Security Scan: Webmail Login

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/788e818c-9d7a-4f13-8d12-0c4138002abc Domain and IP registration (RDAP)/api/v1/rdap/788e818c-9d7a-4f13-8d12-0c4138002abcHow often this domain was scanned/api/v1/domain/stats/w22-fghkdjgkvdfhgvdfkgss.joy-hughes.workers.dev Scan history for this domain/api/v1/domain/history/w22-fghkdjgkvdfhgvdfkgss.joy-hughes.workers.dev?limit=15

This website contacted 2 IPs in 2 countries across 2 domains to perform 10 HTTP transactions. The main domain is workers.dev and was registered 7 years ago.

Submitted URL: https://w22-fghkdjgkvdfhgvdfkgss.joy-hughes.workers.dev

AI Security Verdict

Confirmed Scam

Confidence: 94%

Risk Score

Fake cPanel Webmail login on a disposable workers.dev subdomain that posts entered email and password to an unrelated hacked WordPress site — a textbook credential-phishing kit. Do not enter credentials.

Risk Factors (5)

Cross-origin password + email submission to an unrelated third-party domain (airofreshintl.com), i.e. credential exfiltration to attacker-controlled WordPress path

Brand impersonation of cPanel Webmail on a non-official, unranked workers.dev subdomain

Randomized hosting subdomain with unknown creation date; identity of the operator unverifiable

Injected-looking drop path (/wp-include/wp-includes/hrr0982234d0d9898336/cc.php) typical of a compromised site used as a phish sink

Domain age information unavailable

Details

Page Title

Webmail Login

Scan Type

public

Favicon Hash

MMH3: 1946489983

MD5: 15385e34c77d0998acf1f2f57bcbff2d

Domain Name Analysis

You're looking at domain 'w22-fghkdjgkvdfhgvdfkgss.joy-hughes.workers.dev' on the developer-focused generic top-level domain (.dev) with subdomain 'w22-fghkdjgkvdfhgvdfkgss.joy-hughes'. The registrable portion 'workers' spans 7 characters split between two vowels and five consonants. It segments into 1 word: workers. No strong language cues emerged from the frequency lists.