Security Scan Report: worker-green-cherry-343b.kuibono.workers.dev

Site favicon
Submitted: Completed: publiccompleted
This website contacted 6 IPs in 1 country across 4 domains to perform 9 HTTP transactions. The main domain is workers.dev and was registered 7 years ago.

Submitted URL: https://worker-green-cherry-343b.kuibono.workers.dev/

AI Security Verdict

Moderate Risk

Confidence: 65%

5
Risk Score

A Google-branded 'unusual traffic' block page served from a workers.dev subdomain, with a reCAPTCHA key invalid for that domain. No credential or payment fields, so no phishing capture - brand mismatch only.

Risk Factors (3)
Google brand and interface reproduced on a domain that is not under google.com (impersonation of a different entity's brand)
reCAPTCHA 'invalid domain for site key' indicates the Google widget is used on an unregistered/unauthorized domain
Content hosted on a free Cloudflare Workers subdomain whose actual creation date is unknown and unranked
Safety Factors (4)
No credential, login or payment collection fields present
No JavaScript malware or obfuscated network sinks detected
No Indicators of Compromise in threat intelligence
No cross-origin credential handling or exfiltration detected
Domain age information unavailable

Details

Page Title

https://www.google.com/

Scan Type

public

Domain Name Analysis

Within the developer-focused generic top-level domain (.dev), 'worker-green-cherry-343b.kuibono.workers.dev' is registered with subdomain 'worker-green-cherry-343b.kuibono'. Count 7 characters in 'workers' holding 2 vowels versus 5 consonants. Segmentation suggests one word: workers. The median word length lands at seven characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://worker-green-cherry-343b.kuibono.workers.dev/

Page Load Overview

1.32s
Total Load Time
781 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:60%
Script:Latin
Direction:ltr

Detection Details

Text Length:1,071 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software78% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
78%
government public service
71%
documentation technical
69%
phishing scam
66%
cryptocurrency blockchain
60%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4172.67.137.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1142.251.155.119Google · CDNUnited States
AS15169Google LLC
1142.251.13.94Google · CDNUnited States
AS15169Google LLC
1104.21.46.89Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1142.251.157.119Google · CDNUnited States
AS15169Google LLC
1192.178.183.94Google · CDNUnited States
AS15169Google LLC
96--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T163A1F8B35FA0A1260B5243D0BD26F39668116306B3C1ADF43DE8DA7833D5DA74532BA8

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:Co9frbVoNpWnlcUmRYClcUJOynSuTy43zspj3hm:Co9fnVoNpylcUyvlcUouW43zQ3w

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:4923:ACETBgQAAEhAEEAASBiiEAaACUGYEhISYMQYwIwAgBYkOEEKQUgZCABnABQABgAgBAAgwACARCBANAggAAAQkCAGAIAwBSIM

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:3f3f3fffffffffff
Perceptual Hash:810307fffefcf000
Difference Hash:c0c0c00000000000
Wavelet Hash:303030f0f0f0f0f0
Color Hash:#79c8d2

Other Hashes

Crop Resistant:c0c0c00000000000

Scan History

Scan history not available

Unable to load historical scan data