Security Report: wahala-otcssz9-ec23bd.teaqueen112-a4c.workers.dev - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/a79e7278-7022-4775-a4f9-1afcb386d469 Domain and IP registration (RDAP)/api/v1/rdap/a79e7278-7022-4775-a4f9-1afcb386d469How often this domain was scanned/api/v1/domain/stats/wahala-otcssz9-ec23bd.teaqueen112-a4c.workers.dev Scan history for this domain/api/v1/domain/history/wahala-otcssz9-ec23bd.teaqueen112-a4c.workers.dev?limit=15

This website contacted 2 IPs in 1 country across 1 domain to perform 14 HTTP transactions. The main domain is workers.dev and was registered 7 years ago.

Submitted URL: https://wahala-otcssz9-ec23bd.teaqueen112-a4c.workers.dev/?k=aYzUxscrVbSOq7LtK-S3pTLc

AI Security Verdict

High Risk

Confidence: 80%

Risk Score

Fake DocuSign phishing gate on a workers.dev subdomain, using a deceptive security check and anti-analysis tricks to hide from scanners. No form fields on this page but likely leads to credential theft.

Risk Factors (4)

Impersonation of DocuSign brand on an unrelated domain

Deceptive 'security check' interstitial designed to appear legitimate

Anti-analysis techniques and right-click blocking to hinder inspection

Randomly generated hosting platform subdomain with no legitimate branding

Domain age information unavailable

Details

Page Title

DocuSign | Action Required: Identity Verification

Scan Type

public

Favicon Hash

MMH3: 723344415

MD5: 81130fd89a398bfe52659318b65c7955

Domain Name Analysis

You're looking at domain 'wahala-otcssz9-ec23bd.teaqueen112-a4c.workers.dev' on the developer-focused generic top-level domain (.dev) and includes subdomain 'wahala-otcssz9-ec23bd.teaqueen112-a4c'. The second-level label 'workers' is 7 characters long containing 2 vowels alongside five consonants. Breaking it apart gives 1 word: workers. Average segment length settles at 7 characters. No strong language cues emerged from the frequency lists.