Security Scan Report: odd-bonus-8094.mikiams007.workers.dev

Site favicon
Submitted: Completed: publiccompleted
This website contacted 4 IPs in 1 country across 2 domains to perform 12 HTTP transactions. The main domain is workers.dev and was registered 7 years ago.

Submitted URL: https://odd-bonus-8094.mikiams007.workers.dev/corsproxy/?apiurl=https://login.microsoft.com/common/oauth2/token

AI Security Verdict

Confirmed Scam

Confidence: 95%

9
Risk Score

The provider serving this URL has already blocked it: the scan received the "Suspected Phishing | Cloudflare" block page, not the site. A block page of this kind is issued only after the provider classifies the host as abusive.

Risk Factors (2)
Host is blocked for abuse by the provider serving it
Independently corroborated by 1 other authoritative signal(s)
Domain age information unavailable

Details

Page Title

Sign in to your account

Scan Type

public

Domain Name Analysis

The domain name 'odd-bonus-8094.mikiams007.workers.dev' uses the developer-focused generic top-level domain (.dev); it also runs on subdomain 'odd-bonus-8094.mikiams007'. Its registrable label 'workers' stretches across 7 characters with 2 vowels and 5 consonants. Segmentation suggests 1 word: workers. Expect 7 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

HE Microsoft Sign in Sorry, but we're having trouble signing you AADSTS900561: The endpoint only accepts POST, OPTIONS requests. Received a GET request. ‘Troubleshooting details x If you contact yo...

Page Load Overview

0.52s
Total Load Time
370 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:776 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical47% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

documentation technical
47%
government public service
40%
technology software
39%
healthcare medical
30%
news media journalism
29%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3172.67.148.37Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3104.18.95.41Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3104.21.41.154Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
313.107.246.44Azure · CLOUDUnited States
AS8075Microsoft Corporation
124--

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T191232CE97EA3257F83878175F4BA7D026B7629079908C970B14CCC842FFAA5D9133A47

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:ZQFBeSDW7PCsB/1gSj8Z9TjuvhCknmaprVvPoMLaZcz42H9PseUFgTjIJ:ZQFSPHB/FIZ9Tjuokmap5vPoMLub2H94

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:48292:KUC4QZwoADsgFxyMpUtRIcE5aJFBAYIoCwAGAkEAkAEDi2GicZK1gAIS4JZdqJwFYQRCUx2EHRKCUIQIUUBEQia8GEnUpmMC

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:001c3d3f2f0f3737
Perceptual Hash:815974334e66733b
Difference Hash:88f0d9e3dbd9cee6
Wavelet Hash:001c3c3f3f0f2737
Color Hash:N/A

Other Hashes

Crop Resistant:88f0d9e3dbd9cee6

Scan History

Scan history not available

Unable to load historical scan data