Security Report: webproxy.goku8.workers.dev - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/9072766c-657b-4c5c-b892-ff494e85d712 Domain and IP registration (RDAP)/api/v1/rdap/9072766c-657b-4c5c-b892-ff494e85d712How often this domain was scanned/api/v1/domain/stats/webproxy.goku8.workers.dev Scan history for this domain/api/v1/domain/history/webproxy.goku8.workers.dev?limit=15

This website contacted 26 IPs in 4 countries across 19 domains to perform 85 HTTP transactions. The main domain is workers.dev and was registered 7 years ago.

Submitted URL: https://webproxy.goku8.workers.dev/http://www.wellsfargo.com/mobile/payments/

AI Security Verdict

High Risk

Confidence: 85%

Risk Score

Unranked proxy host re-serving Wells Fargo's banking page with the bank's favicon and flagged twice by Safe Browsing for social engineering. No form harvests credentials on this capture, but the impersonation and Safe Browsing hit make it unsafe.

Risk Factors (5)

Google Safe Browsing social engineering flag (2 instances)

Wells Fargo favicon used on a non-Wells Fargo host, indicating brand impersonation

Unauthenticated proxy re-serving a bank's pages from an unranked shared-hosting subdomain

Excessive redirect chain with cross-domain hops

No verifiable legitimacy signals (score 10/100) despite banking branding

Domain age information unavailable

Details

Page Title

Guide to digital wallets | Wells Fargo

Scan Type

public

Favicon Hash

MMH3: 1828061046

MD5: cd112f1acb59ef6e59e09c0effd8ce2a

Domain Name Analysis

Domain 'webproxy.goku8.workers.dev' uses the developer-focused generic top-level domain (.dev), featuring subdomain 'webproxy.goku8'. The core label 'workers' covers 7 characters holding 2 vowels versus 5 consonants. Breaking it apart gives 1 word: workers. No strong language cues emerged from the frequency lists.

Screenshot

co to main content ATMs/Locations [MENU] How can we help? + Find a location Ley, State or 21P [Go] © Make an appointment ick hel ‘© Customer service and FAQs © Find routing and account number...

Page Load Overview

1.54s

Total Load Time

1.1 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:9,086 chars

Detector Agreement:100%

All Detected Languages

🇺🇸en(98%)🇩🇪de(1%)🇪🇸es(1%)

Website Classification

Primary Category

finance banking86% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

finance banking

86%

government public service

56%

technology software

47%

e-commerce shopping

42%

documentation technical

41%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
53	188.114.96.3Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	3.229.29.73Aws · CLOUD	Ashburn, Virginia, United States	AS14618Amazon.com, Inc.
3	23.50.131.146Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
3	188.114.97.3Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	172.64.155.119Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	34.202.158.248Aws · CLOUD	Ashburn, Virginia, United States	AS14618Amazon.com, Inc.
3	63.140.62.120Aws · CLOUD	United States	AS16509Amazon.com, Inc.
3	40.180.127.30Aws · CLOUD	Dublin, Leinster, Ireland	AS16509Amazon.com, Inc.
3	44.237.111.98Aws · CLOUD	Boardman, Oregon, United States	AS16509Amazon.com, Inc.
3	142.250.154.156Google · CDN	United States	AS15169Google LLC
85	26	-	-