Security Scan Report: cool-heart-01da.1079599975.workers.dev

Site favicon
Submitted: Sep 17, 2026, 4:35:29 AMCompleted: Sep 17, 2026, 4:36:16 AMpubliccompleted

AI Security Verdict

High Risk

Confidence: 75%

7
Risk Score

Full clone of Google's About page served on a workers.dev subdomain, falsely presenting itself as Google's official site. Clear brand impersonation, though no credential or payment forms were present.

Risk Factors
Brand impersonation: presents itself as Google's official site on a non-Google domain
Uses Google's official styling, logos, meta tags and content without authorization
Unranked hosting-platform subdomain disguised as a major brand
Unknown page creation date on a shared/free hosting namespace (could be brand new)
Domain age information unavailable

Details

Page Title

About Google: Our products, technology and company information - About Google

Scan Type

public

Domain Name Analysis

The domain name 'cool-heart-01da.1079599975.workers.dev' uses the developer-focused generic top-level domain (.dev); it also runs on subdomain 'cool-heart-01da.1079599975'. Its registrable label 'workers' stretches across 7 characters containing two vowels alongside 5 consonants. Tokenizing the label suggests one word: workers. Expect 7 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://cool-heart-01da.1079599975.workers.dev/intl/en/about.html

Page Load Overview

1.26s
Total Load Time
925 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:1,706 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software78% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

technology software
78%
government public service
56%
corporate
35%
healthcare medical
33%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
5104.21.8.8Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5192.178.183.94Google · CDNUnited States
AS15169Google LLC
5142.251.14.95Google · CDNUnited States
AS15169Google LLC
5172.67.156.153Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5142.251.110.94Google · CDNUnited States
AS15169Google LLC
5142.251.13.97Google · CDNUnited States
AS15169Google LLC
5216.239.32.36Google · CDNUnited States
AS15169Google LLC
357--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1E7B143F3BBB4B82F2614C2697887B588C9524117C6E858D1F58E48671FC1EF541F31AD

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:2cXVx+9mVx+9o9BiKM2MMYVx+KiD0XYI5MsvMh6t696pSMTHfFYb:2clYgYPd27MYxDi1q+J4Ip1ZQ

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:5583:gQAaiIAEQJsrBEAYQSAeuBEhwAiREBKMAAAmBIBCAoBABBUARA6QCAAAJK5ZIlAFAWCqZgUhIgALNBAZCIA81giAIIZAJCQr

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff000000181000ff
Perceptual Hash:8deaf39ad0a8d622
Difference Hash:da3333323232726e
Wavelet Hash:ff01011b1b1b03ff
Color Hash:#e0776c

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data