Security Scan: WEBMAIL

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/ba83c34f-0d19-4f43-873d-f937a6917939 Domain and IP registration (RDAP)/api/v1/rdap/ba83c34f-0d19-4f43-873d-f937a6917939How often this domain was scanned/api/v1/domain/stats/worker-wispy-star-92b2.peterlaurie.workers.dev Scan history for this domain/api/v1/domain/history/worker-wispy-star-92b2.peterlaurie.workers.dev?limit=15

This website contacted 3 IPs in 2 countries across 3 domains to perform 6 HTTP transactions. The main domain is workers.dev and was registered 7 years ago.

Submitted URL: https://worker-wispy-star-92b2.peterlaurie.workers.dev/

AI Security Verdict

Low Risk

Confidence: 85%

Risk Score

The site hosts malicious JavaScript that exfiltrates credentials despite having no visible form, indicating a credential‑phishing operation.

Risk Factors (3)

Credential exfiltration via JavaScript

Subdomain on hosting platform with unknown age

Safety Factors (5)

No known malicious kits identified

No IoC matches against the page or its resources

No hunting rule malware patterns detected

No network IDS alerts

Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 8 to 3

Domain age information unavailable

Details

Page Title

WEBMAIL

Scan Type

public

Favicon Hash

MMH3: 164145312

MD5: 90b6cde9bb6d020c5376d68e95600170

Domain Name Analysis

You're looking at domain 'worker-wispy-star-92b2.peterlaurie.workers.dev' on the developer-focused generic top-level domain (.dev), featuring subdomain 'worker-wispy-star-92b2.peterlaurie'. The core label 'workers' covers 7 characters holding 2 vowels versus five consonants. Segmentation suggests one word: workers. No strong language cues emerged from the frequency lists.

Screenshot

oo 000 oon 000 QO moo moo 000 (0000 000 OD oon oo oo Po oo 2022-07-25 (Us M00 000 oo 0 oono Oo 2022-07-21 Daum 00 (0 000 00 O00 ooo OO 2022-04-21. ‘oom woo) oo oo 2019-10-16 UM: 1544-7078 | Copyright...

Page Load Overview

0.55s

Total Load Time

167 KB

Total Size

Language Analysis

Primary Language

🇰🇷Korean

Code: ko

Confidence:60%

Script:Hangul

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:322 chars

Detector Agreement:100%

Language mismatch: Declared as en but detected as ko

Website Classification

Primary Category

cryptocurrency blockchain82% confidence

Type: static

Method: ml+structural+ocr_tiebreaker

All Detected Categories

cryptocurrency blockchain

82%

corporate business

74%

adult content

57%

finance banking

53%

healthcare medical

51%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
2	142.251.110.95	United States	AS15169Google LLC
2	146.75.120.193	Frankfurt am Main, Hesse, Germany	AS54113Fastly, Inc.
2	104.21.76.213	United States	AS13335Cloudflare, Inc.
6	3	-	-