Security Scan Report: xmlf-ag9n-th11.mgeorgatos-netw1-com-s-account.workers.dev

Submitted: Jul 7, 2026, 12:45:15 AMCompleted: Jul 7, 2026, 12:47:06 AMpubliccompleted
Loading additional data...

Summary

This website contacted 2 IPs in 1 country across 2 domains to perform 2 HTTP transactions. The main domain is xmlf-ag9n-th11.mgeorgatos-netw1-com-s-account.workers.dev and was registered NaN years ago.

Submitted URL: https://xmlf-ag9n-th11.mgeorgatos-netw1-com-s-account.workers.dev/73603076837c4d77

AI Security Verdict

High Risk

Confidence: 88%

8
Risk Score

The site impersonates DocuSign, has confirmed IoC and phishing IDS alerts, and exhibits anti‑analysis behavior, indicating a high‑risk phishing page.

Risk Factors
Primary domain IoC match
High‑severity phishing IDS alerts
Brand impersonation of DocuSign
Anti‑analysis JavaScript (devtools/right‑click blocking)
Unknown subdomain age on hosting platform
Domain age information unavailable

Details

Page Title

DocuSign - Review Document

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

technology software

(49%)

Domain Information

You're looking at domain 'xmlf-ag9n-th11.mgeorgatos-netw1-com-s-account.workers.dev' on the developer-focused generic top-level domain (.dev) with subdomain 'xmlf-ag9n-th11.mgeorgatos-netw1-com-s-account'. The registrable portion 'workers' spans 7 characters holding two vowels versus five consonants. Word splitting yields 1 word: workers. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://xmlf-ag9n-th11.mgeorgatos-netw1-com-s-account.workers.dev/73603076837c4d77

Page Load Overview

0.42s
Total Load Time
7
HTTP Requests
3
Domains
94 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:491 chars
Detector Agreement:67%

Website Classification

Primary Category

technology software49% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
49%
documentation technical
46%
government public service
33%
corporate business
27%
adult content
26%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4192.178.183.95Google · CDNUnited States
AS15169Google LLC
3188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
72--

Page Statistics

7
Requests
3
Unique Domains
123.8 KB
Total Size

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1C472D0F6F353756C8E615C6C683D7F152E3C21AA18429020EA46CCC58DAEE5FD1D4C88

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:ndMkrJjvwo8VQ4zlcIRCdJc9xEK2ATmTttOBBM7wgToW2:nKkrJd2t4s2zxuWfToW2

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:16552:GCgBDEBAFwiiyrFgHxqAxJEU2SIGVtQACAFAEgALoJWCqORY/j1BIA7AJQAQRQFgQMWRQQggXGBQgimYlCYbkBBD0zIwQokj

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:1f1f1f1f1f1f1f1f
Perceptual Hash:98e1926f2d1e1e0f
Difference Hash:30b0303232303030
Wavelet Hash:0f0f0f1f0b0f0f0f
Color Hash:#643a78

Other Hashes

Crop Resistant:30b0303232303030

Scan History

Scan history not available

Unable to load historical scan data