Security Scan Report: accounts-b46aee59.marketinglacocoa3.workers.dev

Site favicon
Submitted: Sep 1, 2026, 12:45:45 AMCompleted: Sep 1, 2026, 12:49:32 AMpubliccompleted

Summary

This website contacted 3 IPs in 1 country across 2 domains to perform 2 HTTP transactions. The main domain is accounts-b46aee59.marketinglacocoa3.workers.dev and was registered 6 years ago.

Submitted URL: https://accounts-b46aee59.marketinglacocoa3.workers.dev/b46aee5961eb4c6a?sid=E77MUMmy1JsjwLsHgeXOBbOhmAHIdT91

AI Security Verdict

High Risk

Confidence: 88%

8
Risk Score

Page hosts a credential‑phishing login mimicking Microsoft Excel on an unknown, unranked subdomain; treat as high‑risk.

Risk Factors
Credential harvesting form
Brand impersonation of a major product (Excel)
Unranked / unknown‑age domain on shared hosting platform
Safe Browsing social engineering flag
Domain age information unavailable

Details

Page Title

Excel - Shared Document

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

download file sharing

(95%)

Domain Information

Within the developer-focused generic top-level domain (.dev), 'accounts-b46aee59.marketinglacocoa3.workers.dev' is registered; it also runs on subdomain 'accounts-b46aee59.marketinglacocoa3'. The registrable portion 'workers' spans 7 characters containing 2 vowels alongside five consonants. Breaking it apart gives 1 word: workers. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of accounts-b46aee59.marketinglacocoa3.workers.dev

Page Load Overview

6.79s
Total Load Time
3
HTTP Requests
2
Domains
0 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:214 chars
Detector Agreement:67%

Website Classification

Primary Category

download file sharing95% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

download file sharing
95%
technology software
56%
documentation technical
36%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1188.114.97.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1172.64.149.246Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.18.38.10Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
33--

Page Statistics

3
Requests
2
Unique Domains
41.1 KB
Total Size

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1F6D23A2A66C224B993C7C97A71EF3B1870B49403CD538A108879E57D51E7D8BF732BA4

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:+kLXl+yuXabN73hOS1zII7fQIIi6aqxIIIIHA3IfBLbTHwanXl:+kzQyuupb1zII7fQIIi6aqxIIIIHA3Iz

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:30519:XgMAEzoYTCBGwjIEGQAWwk8ExwIDIsAW2BsIAOakUHhpeIZt6CVwQlqBg8GBcAJZIwBAYaBCwKAGAGZ2MIBAAJd1gCIAAAYZ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0018001818180000
Perceptual Hash:9966669999666633
Difference Hash:08304cb2b22a0400
Wavelet Hash:0f0f071f3c3c3c3c
Color Hash:#ac7853

Other Hashes

Crop Resistant:08304cb2b22a0400

Scan History

Scan history not available

Unable to load historical scan data