Security Scan: https://primerehab.togapfoe.workers.dev/

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/8e3deee1-82aa-44dd-a629-0132e662930f Domain and IP registration (RDAP)/api/v1/rdap/8e3deee1-82aa-44dd-a629-0132e662930fHow often this domain was scanned/api/v1/domain/stats/primerehab.togapfoe.workers.dev Scan history for this domain/api/v1/domain/history/primerehab.togapfoe.workers.dev?limit=15

This website contacted 15 IPs in 2 countries across 9 domains to perform 11 HTTP transactions. The main domain is workers.dev and was registered 7 years ago.

Submitted URL: https://primerehab.togapfoe.workers.dev/

AI Security Verdict

Moderate Risk

Confidence: 65%

Risk Score

Unranked workers.dev tenant with no visible content that pulls scripts from jquery.quest / lib2.jquery.quest, hosts flagged for the magentocore skimmer family (single-source, unverified). No forms or YARA hits, but the flagged resource plus right-click blocking justifies high risk.

Risk Factors (5)

External script host flagged for the magentocore (Magecart-family) skimmer signature

Unknown-age subdomain on a free shared hosting platform (workers.dev)

Unranked domain with no reputation in Cisco Umbrella

Right-click / context-menu blocking JavaScript present

Empty or unrenderable page content, so intent is opaque

Safety Factors (6)

No forms at all: 0 password fields, 0 disguised password fields, 0 payment fields

No YARA JavaScript malware patterns and no kit-roster hits

No cross-origin credential exfiltration detected

No Google Safe Browsing or IDS phishing/malware alerts (the two Suricata alerts are informational ET INFO notices about workers.dev DNS/TLS)

Legitimate CDNs also referenced (Google APIs, cdnjs, bootstrapcdn, FontAwesome, Microsoft)

No concrete malicious signal: the threat-feed matches name third-party or shared hosts, or rest on a single feed or a reputation label, so they were not counted; no YARA / Safe-Browsing / IDS / credential form / brand impersonation either. Elevated risk rested on domain age or reputation alone; clamped from 7 to 5

Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Domain Name Analysis

Within the developer-focused generic top-level domain (.dev), 'primerehab.togapfoe.workers.dev' is registered, featuring subdomain 'primerehab.togapfoe'. The core label 'workers' covers 7 characters with two vowels and 5 consonants. It segments into one word: workers. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

0.45s

Total Load Time

331 KB

Total Size

Language Analysis

Primary Language

🏳️UNKNOWN

Code: unknown

Confidence:0%

Detection Details

Detector Agreement:0%

Website Classification

Primary Category

unknown0% confidence

Type: dynamic

Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
11	104.21.65.115Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
0	151.101.129.155Fastly · CDN	United States	AS54113Fastly, Inc.
0	104.17.25.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
0	104.18.10.207Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
0	142.251.127.95Google · CDN	United States	AS15169Google LLC
0	64.29.17.1Aws · CLOUD	United States	AS16509Amazon.com, Inc.
0	142.251.14.95Google · CDN	United States	AS15169Google LLC
0	104.21.27.152Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
0	23.52.181.212Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS16625Akamai Technologies, Inc.
0	172.67.190.21Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
11	15	-	-