Suspected phishing site | Cloudflare

suspicious phishing

malicious

English

The domain 'round-shape-2ac1.eastmallmanagementltd.workers.dev' uses the developer-focused generic top-level domain (.dev); it also runs on subdomain 'round-shape-2ac1.eastmallmanagementltd'. The registrable portion 'workers' spans 7 characters with 2 vowels and five consonants. It segments into one word: workers. Average segment length settles at seven characters. Most frequently, 'workers' shows up in English. Secondary signals appear in Chinese (Pinyin) and Vietnamese. Overall, 'round-shape-2ac1.eastmallmanagementltd.workers.dev' reads as English with single-word simplicity.

html/b4/6b/b46b9b0b-004e-4236-bb86-69b9fcbf7ca6.html.gz

5743c640722924aa6974b1f602ad1abb67f4c5240cc4829ed64147cf0e6ecf83

robots

viewport

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

Abuse

Admin

Cloudflare-NOC

Cloudflare, Inc.

CLOUDFLARENET


  if (!navigator.cookieEnabled) {
    window.addEventListener('DOMContentLoaded', function () {
      var cookieEl = document.getElementById('cookie-alert');
      cookieEl.style.display = 'block';
 


    function onTurnstileSuccess(token) {
      document.getElementById("bypass-button").disabled = false;
    }
  

(function(){function d(){var b=a.getElementById("cf-footer-item-ip"),c=a.getElementById("cf-footer-ip-reveal");b&&"classList"in b&&(b.classList.remove("hidden"),c.addEventListener("click",function(){c


    window._cf_translation = {};
    
    
  

X-UA-Compatible

Cloudflare Bot Management

Cloudflare

☠️ Malicious - https://round-shape-2ac1.eastmallmanagementltd.workers.dev/norton

Requests	IP Address	Location	AS Autonomous System
6	172.67.204.230	United States	AS13335CLOUDFLARENET
0	104.18.95.41	United States	AS13335CLOUDFLARENET
0	104.18.94.41	United States	AS13335CLOUDFLARENET
0	104.21.69.52	United States	AS13335CLOUDFLARENET
0	2606:4700::6812:5f29	United States	AS13335CLOUDFLARENET
0	2606:4700:3032::6815:4534	United States	AS13335CLOUDFLARENET
0	2606:4700::6812:5e29	United States	AS13335CLOUDFLARENET
0	2606:4700:3033::ac43:cce6	United States	AS13335CLOUDFLARENET
6	8	-	-

Security Scan Report: round-shape-2ac1.eastmallmanagementltd.workers.dev

Summary

AI Security Verdict

Details

Primary Scan Blocked — Fallback Capture Shown

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History