Security Report: view-secured-document-ux0g.w-85rfst.workers.dev - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/81faa9b2-4d06-472f-85d7-3764ca6c20fa Domain and IP registration (RDAP)/api/v1/rdap/81faa9b2-4d06-472f-85d7-3764ca6c20faHow often this domain was scanned/api/v1/domain/stats/view-secured-document-ux0g.w-85rfst.workers.dev Scan history for this domain/api/v1/domain/history/view-secured-document-ux0g.w-85rfst.workers.dev?limit=15

This website contacted 4 IPs in 1 country across 3 domains to perform 75 HTTP transactions. The main domain is workers.dev and was registered 7 years ago.

Submitted URL: https://view-secured-document-ux0g.w-85rfst.workers.dev/

AI Security Verdict

High Risk

Confidence: 86%

Risk Score

Fake DocuSign 'review document' page on a free workers.dev subdomain that lures victims with a verification code into an off-page sign-in window to steal account credentials. Do not enter any DocuSign login or code.

Risk Factors (5)

Impersonation of DocuSign on a non-DocuSign workers.dev subdomain

Social-engineering 'secure document review' + verification-code flow designed to push users into a fake sign-in window

Redirect/off-page authentication step consistent with a phishing kit staging credentials elsewhere

External suspicious domain (astraterrasol.xyz) referenced in page resources

Randomised/high-entropy subdomain naming typical of mass phishing campaigns

Domain age information unavailable

Details

Page Title

DocuSign - Review Document

Scan Type

public

Favicon Hash

MMH3: 1878835767

MD5: 6b0dda4f3e93ed46edb22923b64d4c61

Domain Name Analysis

The domain 'view-secured-document-ux0g.w-85rfst.workers.dev' uses the developer-focused generic top-level domain (.dev) with subdomain 'view-secured-document-ux0g.w-85rfst'. The core label 'workers' covers 7 characters containing 2 vowels alongside 5 consonants. Word splitting yields 1 word: workers. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

0.20s

Total Load Time

88 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:577 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software49% confidence

Type: static

Method: ml+structural+ocr_tiebreaker

All Detected Categories

technology software

49%

documentation technical

45%

government public service

37%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
21	188.114.96.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
18	188.114.97.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
18	172.67.149.164Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
18	104.21.95.240Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
75	4	-	-