Security Scan: cPanel Login

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/b278542d-62e2-40d5-b876-19e9c473d9c7 Domain and IP registration (RDAP)/api/v1/rdap/b278542d-62e2-40d5-b876-19e9c473d9c7How often this domain was scanned/api/v1/domain/stats/cpteyg87342y58734yih23452345g.dsharrell-aee.workers.dev Scan history for this domain/api/v1/domain/history/cpteyg87342y58734yih23452345g.dsharrell-aee.workers.dev?limit=15

This website contacted 3 IPs in 2 countries across 2 domains to perform 15 HTTP transactions. The main domain is workers.dev and was registered 7 years ago.

Submitted URL: http://cpteyg87342y58734yih23452345g.dsharrell-aee.workers.dev/

Effective URL:

https://cpteyg87342y58734yih23452345g.dsharrell-aee.workers.dev/

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 93%

Risk Score

Fake cPanel login on a workers.dev subdomain that harvests the entered cPanel password and posts it to an unrelated third-party host — clear credential phishing, not a real cPanel service.

Risk Factors (6)

Brand impersonation of cPanel on an unrelated workers.dev subdomain

Randomized/gibberish subdomain name and page hosted on a free publish-anywhere platform

CRITICAL IDS alert for heap-spray/shellcode and multiple HIGH hex-obfuscation script alerts

Domain treated as unknown age (platform apex age not attributable to this tenant); unranked with no reputation

Page mimics a legitimate control-panel service to induce users to enter credentials

Domain age information unavailable

Details

Page Title

cPanel Login

Scan Type

public

Favicon Hash

MMH3: 1873384069

MD5: 08a1f426ad5f3934ed0462d5b24d3e1e

Domain Name Analysis

The domain 'cpteyg87342y58734yih23452345g.dsharrell-aee.workers.dev' uses the developer-focused generic top-level domain (.dev), featuring subdomain 'cpteyg87342y58734yih23452345g.dsharrell-aee'. The registrable portion 'workers' spans 7 characters containing two vowels alongside 5 consonants. Splitting it apart reveals 1 word: workers. Median word length is 7 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

2.64s

Total Load Time

125 KB

Total Size

Language Analysis

Primary Language

🇪🇸Spanish

Code: es

Confidence:29%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:1,230 chars

Detector Agreement:100%

Language mismatch: Declared as en but detected as es

Website Classification

Primary Category

technology software54% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

technology software

54%

government public service

37%

news media journalism

31%

cryptocurrency blockchain

28%

adult content

28%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
5	104.21.85.154Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	103.6.196.121	Malaysia	AS46015Exa Bytes Network Sdn.Bhd.
5	172.67.207.80Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
15	3	-	-