Security Scan: Just a moment...

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/792c8dee-0768-4db7-a114-76754598ab66 Domain and IP registration (RDAP)/api/v1/rdap/792c8dee-0768-4db7-a114-76754598ab66How often this domain was scanned/api/v1/domain/stats/7ddce2d9.7fc087fbd273b757485ac4d5.workers.dev Scan history for this domain/api/v1/domain/history/7ddce2d9.7fc087fbd273b757485ac4d5.workers.dev?limit=15

This website contacted 4 IPs in 1 country across 2 domains to perform 8 HTTP transactions. The main domain is workers.dev and was registered 7 years ago.

Submitted URL: https://7ddce2d9.7fc087fbd273b757485ac4d5.workers.dev/

AI Security Verdict

Confirmed Scam

Confidence: 93%

Risk Score

Fake Cloudflare 'Just a moment...' Turnstile gate on a random workers.dev subdomain, confirmed by a known phishing-kit roster entry, a high-precision hunting rule and two critical phishing IDS alerts; it gates a credential-theft page. Do not interact.

Risk Factors (5)

Decoy security interstitial imitating Cloudflare served from a non-Cloudflare random-hex workers.dev subdomain

Known malicious Turnstile gate phishing kit confirmed by kit roster and hunting rule

Two critical network IDS phishing alerts indicating credential-theft landing page

Anonymous, unranked instant-publishing hosting tenant with unknown creation date

Obfuscated inline JavaScript using encoding/decoding routines to gate the next stage

Domain age information unavailable

Details

Page Title

Just a moment...other network

Scan Type

public

Favicon Hash

MMH3: -1415437576

MD5: 72e6538fd999d7d0f60b658c3dc0b0aa

Domain Name Analysis

You're looking at domain '7ddce2d9.7fc087fbd273b757485ac4d5.workers.dev' on the developer-focused generic top-level domain (.dev), featuring subdomain '7ddce2d9.7fc087fbd273b757485ac4d5'. The registrable portion 'workers' spans 7 characters split between two vowels and 5 consonants. It segments into one word: workers. Average segment length settles at seven characters. No strong language cues emerged from the frequency lists.

Screenshot

Just a moment... Please stand by, while we are checking if the site connection is secure Verify you are human ecouofrane Busy bee We need to review the security of your connection before proceeding...

Page Load Overview

0.76s

Total Load Time

1.8 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:199 chars

Detector Agreement:100%

Website Classification

Primary Category

documentation technical67% confidence

Type: static

Method: ml+structural

All Detected Categories

documentation technical

67%

government public service

66%

blog personal website

55%

news media journalism

52%

adult content

38%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
2	104.21.24.179Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	104.18.94.41Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	172.67.219.223Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	104.18.95.41Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
8	4	-	-