Security Report: webproxy.goku8.workers.dev - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/be12f376-fbf3-4aac-b7a5-4e572045730a Domain and IP registration (RDAP)/api/v1/rdap/be12f376-fbf3-4aac-b7a5-4e572045730aHow often this domain was scanned/api/v1/domain/stats/webproxy.goku8.workers.dev Scan history for this domain/api/v1/domain/history/webproxy.goku8.workers.dev?limit=15

This website contacted 25 IPs in 4 countries across 19 domains to perform 67 HTTP transactions. The main domain is workers.dev and was registered 7 years ago.

Submitted URL: https://webproxy.goku8.workers.dev/https://www.wellsfargo.com/checking/switch/?collateral_code=HPPB

AI Security Verdict

High Risk

Confidence: 82%

Risk Score

Google Safe Browsing flags this workers.dev web proxy for social engineering; it serves Wells Fargo branding and favicon from a non-Wells Fargo host, indicating brand impersonation despite having no credential form.

Risk Factors (5)

Safe Browsing Social Engineering classification

Wells Fargo favicon and branding on an unrelated workers.dev host

Proxy URL structure masks the true destination and can be repointed at will

Unknown-age, unranked free hosting subdomain

Circular/excessive redirect chain (8 hops, 5 cross-domain) through advertising and analytics networks

Domain age information unavailable

Details

Page Title

How to Switch Banks in 3 Easy Steps | Wells Fargo

Scan Type

public

Favicon Hash

MMH3: 1828061046

MD5: cd112f1acb59ef6e59e09c0effd8ce2a

Domain Name Analysis

The domain 'webproxy.goku8.workers.dev' uses the developer-focused generic top-level domain (.dev), featuring subdomain 'webproxy.goku8'. The registrable portion 'workers' spans 7 characters with two vowels and five consonants. Tokenizing the label suggests 1 word: workers. Average segment length settles at 7 characters. No strong language cues emerged from the frequency lists.

Screenshot

to main content ATMs/Locations [MENU] How can we help? + Find a location Ley, State or 21P [Go] © Make an appointment ick hel ‘© Customer service and FAQs © Find routing and account numbers P...

Page Load Overview

1.08s

Total Load Time

1.1 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:6,208 chars

Detector Agreement:100%

All Detected Languages

🇺🇸en(95%)🇪🇸es(3%)🇩🇪de(2%)

Website Classification

Primary Category

finance banking51% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

finance banking

51%

documentation technical

26%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
37	188.114.97.3Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	3.229.29.73Aws · CLOUD	Ashburn, Virginia, United States	AS14618Amazon.com, Inc.
2	2.17.100.155Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
2	172.64.155.119Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	188.114.96.3Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	23.50.131.146Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
2	104.18.32.137Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	54.229.115.211Aws · CLOUD	Dublin, Leinster, Ireland	AS16509Amazon.com, Inc.
2	142.250.154.155Google · CDN	United States	AS15169Google LLC
2	150.171.28.10Azure · CLOUD	United States	AS8075Microsoft Corporation
67	25	-	-