Security Report: auto-agreement-auth-east1.referred-east-1-auth.workers.dev - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/a635447e-d153-4745-9b19-a52f59df9afd Domain and IP registration (RDAP)/api/v1/rdap/a635447e-d153-4745-9b19-a52f59df9afdHow often this domain was scanned/api/v1/domain/stats/auto-agreement-auth-east1.referred-east-1-auth.workers.dev Scan history for this domain/api/v1/domain/history/auto-agreement-auth-east1.referred-east-1-auth.workers.dev?limit=15

This website contacted 4 IPs in 1 country across 4 domains to perform 6 HTTP transactions. The main domain is workers.dev and was registered 7 years ago.

Submitted URL: https://auto-agreement-auth-east1.referred-east-1-auth.workers.dev/

Effective URL:

blob:https://auto-agreement-auth-east1.referred-east-1-auth.workers.de...

Redirected

AI Security Verdict

High Risk

Confidence: 88%

Risk Score

DocuSign/Microsoft-branded credential lure on a workers.dev subdomain, rendered from a blob: URL. No form was captured, but the page impersonates two entities' sign-in to harvest access to a fake 'Draft_Agreement.pdf'. Do not enter credentials.

Risk Factors (5)

Brand impersonation of DocuSign and Microsoft on a non-official domain

Deceptive, machine-generated subdomain impersonating an authentication service

Credential-collection pretext (Microsoft account sign-in) with no legitimate relationship to either brand

Blob-URL page composition typical of kits that build fake login pages on the fly

Hosted on free instant-publishing workers.dev infrastructure; actual page age unknown and unranked in Cisco Umbrella

Domain age information unavailable

Details

Page Title

Scan Type

public

Domain Name Analysis

The domain name 'auto-agreement-auth-east1.referred-east-1-auth.workers.dev' uses the developer-focused generic top-level domain (.dev) and includes subdomain 'auto-agreement-auth-east1.referred-east-1-auth'. The second-level label 'workers' is 7 characters long split between 2 vowels and five consonants. Breaking it apart gives one word: workers. The median word length lands at seven characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

0.29s

Total Load Time

214 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:515 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software50% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

technology software

50%

documentation technical

43%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
3	188.114.96.3Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	104.26.8.218Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	3.33.186.135Aws · CLOUD	United States	AS16509Amazon.com, Inc.
1	172.67.69.135Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	4	-	-