Security Scan: Just a moment...

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/aac81b61-9971-45e2-a284-f12f98ff114f Domain and IP registration (RDAP)/api/v1/rdap/aac81b61-9971-45e2-a284-f12f98ff114fHow often this domain was scanned/api/v1/domain/stats/832a1f5a.6e6248522346e7b34cdee839.workers.dev Scan history for this domain/api/v1/domain/history/832a1f5a.6e6248522346e7b34cdee839.workers.dev?limit=15

This website contacted 4 IPs in 1 country across 2 domains to perform 8 HTTP transactions. The main domain is workers.dev and was registered 7 years ago.

Submitted URL: https://832a1f5a.6e6248522346e7b34cdee839.workers.dev/

AI Security Verdict

High Risk

Confidence: 88%

Risk Score

Analyst-vetted kit and a HIGH-phishing YARA rule confirm a self-hosted fake Cloudflare 'Just a moment...' Turnstile gate on a workers.dev subdomain; the real credential page loads after the gate submits. Impersonation + known kit → HIGH_RISK.

Risk Factors (4)

Known phishing kit (self-hosted fake Cloudflare Turnstile gate) confirmed by analyst-vetted roster and high-precision YARA rule

Brand impersonation of Cloudflare's security-check page on an unrelated workers.dev subdomain

Deliberate gate design: the fake challenge is a staging step that serves the actual phishing content only after the POST form submits

Randomized hex subdomain on a free instant-publishing platform with no reputation ranking

Domain age information unavailable

Details

Page Title

Just a moment...

Scan Type

public

Favicon Hash

MMH3: 535413946

MD5: 0c0b75f0a54fdcd1b905d8a1e88f2fbb

Domain Name Analysis

The domain name '832a1f5a.6e6248522346e7b34cdee839.workers.dev' uses the developer-focused generic top-level domain (.dev) and includes subdomain '832a1f5a.6e6248522346e7b34cdee839'. The registrable portion 'workers' spans 7 characters split between two vowels and 5 consonants. Breaking it apart gives one word: workers. Average segment length settles at seven characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

0.71s

Total Load Time

813 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:200 chars

Detector Agreement:100%

Website Classification

Primary Category

documentation technical66% confidence

Type: static

Method: ml+structural

All Detected Categories

documentation technical

66%

government public service

63%

blog personal website

54%

news media journalism

48%

technology software

35%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
2	104.21.23.86Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	104.18.94.41Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	172.67.209.220Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	104.18.95.41Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
8	4	-	-