Security Scan: Just a moment...

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/8d03676d-17b5-47e6-8795-5e8285a052dd Domain and IP registration (RDAP)/api/v1/rdap/8d03676d-17b5-47e6-8795-5e8285a052ddHow often this domain was scanned/api/v1/domain/stats/642395e2.73634c9b2b1a997bd44876e7.workers.dev Scan history for this domain/api/v1/domain/history/642395e2.73634c9b2b1a997bd44876e7.workers.dev?limit=15

This website contacted 3 IPs in 1 country across 2 domains to perform 8 HTTP transactions. The main domain is workers.dev and was registered 7 years ago.

Submitted URL: https://642395e2.73634c9b2b1a997bd44876e7.workers.dev/

AI Security Verdict

Confirmed Scam

Confidence: 92%

Risk Score

Self-hosted fake Cloudflare 'Just a moment...' gate on a disposable workers.dev subdomain; vetted phishing kit (turnstile-gate-kit-202609) with YARA hit and two critical phishing IDS alerts. Do not interact.

Risk Factors (5)

Known phishing kit (turnstile-gate-kit-202609) confirmed by YARA and analyst-vetted roster

Fake Cloudflare Turnstile challenge impersonating Cloudflare security branding

Critical IDS phishing alerts indicating credential theft landing page

Anti-analysis gate designed to hide the payload from scanners and only serve the credential page to human visitors

Unranked, randomly named subdomain on a free instant-publishing platform

Domain age information unavailable

Details

Page Title

Just a moment...other network

Scan Type

public

Favicon Hash

MMH3: 739899919

MD5: 2d8a466ceb1f8d56e3d8d9413c48f523

Domain Name Analysis

You're looking at domain '642395e2.73634c9b2b1a997bd44876e7.workers.dev' on the developer-focused generic top-level domain (.dev) and includes subdomain '642395e2.73634c9b2b1a997bd44876e7'. The core label 'workers' covers 7 characters split between two vowels and 5 consonants. Word splitting yields 1 word: workers. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

0.54s

Total Load Time

795 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:199 chars

Detector Agreement:100%

Website Classification

Primary Category

documentation technical67% confidence

Type: static

Method: ml+structural

All Detected Categories

documentation technical

67%

government public service

66%

blog personal website

55%

news media journalism

52%

adult content

38%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
4	172.67.151.67Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	104.18.95.41Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	104.18.94.41Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
8	3	-	-