Security Scan Report: flao.keki.workers.dev

Submitted: Sep 7, 2026, 2:45:11 PMCompleted: Sep 7, 2026, 2:46:25 PMpubliccompleted

AI Security Verdict

Moderate Risk

Confidence: 72%

5
Risk Score

The page impersonates Visa on an unranked workers.dev subdomain without collecting credentials; treat as moderate risk.

Risk Factors (3)
Brand impersonation of a major financial brand
Unranked / low‑reputation domain
Hosted on a free subdomain platform with unknown age
Domain age information unavailable

Details

Page Title

Visa | توثيق البطاقة الائتمانية

Scan Type

public

Domain Name Analysis

The domain name 'flao.keki.workers.dev' uses the developer-focused generic top-level domain (.dev), featuring subdomain 'flao.keki'. Its registrable label 'workers' stretches across 7 characters split between 2 vowels and 5 consonants. Segmentation suggests one word: workers. Median word length comes out to 7 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://flao.keki.workers.dev/visa?chatId=5788714661

Page Load Overview

6.37s
Total Load Time
503 KB
Total Size

Language Analysis

Primary Language

🇸🇦Arabic
Code: ar
Confidence:80%
Script:Arabic
Direction:rtl

Detection Details

HTML Lang Attribute:ar
Text Length:707 chars
Detector Agreement:100%

Website Classification

Primary Category

unknown0% confidence
Type: static
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4142.251.110.95Google · CDNUnited States
AS15169Google LLC
2104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2172.67.145.67Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2192.178.183.94Google · CDNUnited States
AS15169Google LLC
2142.250.154.95Google · CDNUnited States
AS15169Google LLC
2104.21.39.120Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
146--

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T103B2F70A3563C15D3613E6AE7F721786E0A1870BC546CB76BC4CDA54CF86943EA5E338

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:M0nUL6AnwyEEu30UCtOAW2aiKkpxBwXRLS:M0nULFwHEu30UCtZW2aiKkpxBwXRW

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:24886:6AXCUAhAoSU4lhJJDqAoEcskoABYJZvqHXCgQAyesACUFKF2MAdjAQqIBDIAJCgskmogYQSIR8AbBKAAQMILAQwjkBxBQSLA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:010101193d01050d
Perceptual Hash:8a5577968c24369f
Difference Hash:d5e9d5b1b155ddfd
Wavelet Hash:0303071f3f0f1f1f
Color Hash:#93841f

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data