Security Scan: Just a moment...

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/c607cf3c-0171-43b6-b969-a381b5044cd3 Domain and IP registration (RDAP)/api/v1/rdap/c607cf3c-0171-43b6-b969-a381b5044cd3How often this domain was scanned/api/v1/domain/stats/7ddce2d9.7fc087fbd273b757485ac4d5.workers.dev Scan history for this domain/api/v1/domain/history/7ddce2d9.7fc087fbd273b757485ac4d5.workers.dev?limit=15

This website contacted 4 IPs in 1 country across 2 domains to perform 8 HTTP transactions. The main domain is workers.dev and was registered 7 years ago.

Submitted URL: https://7ddce2d9.7fc087fbd273b757485ac4d5.workers.dev/

AI Security Verdict

Confirmed Scam

Confidence: 92%

Risk Score

Random workers.dev subdomain serving a known Turnstile-gate phishing kit: fake Cloudflare 'Just a moment...' challenge that self-submits to unlock the credential page. YARA, kit roster and two CRITICAL phishing IDS alerts confirm malicious infrastructure.

Risk Factors (5)

Known malicious phishing kit (Turnstile gate kit) identified by analyst-vetted roster and YARA

Fake Cloudflare Turnstile challenge used as a gate in front of a phishing payload

Two CRITICAL IDS phishing alerts for credential phish landing page with explicit Turnstile rendering

Obfuscated/self-submitting hidden form (cf-turnstile-response) auto-posting to the kit itself

Anonymous random-hex workers.dev subdomain with unknown age and no reputation

Domain age information unavailable

Details

Page Title

Just a moment...other network

Scan Type

public

Favicon Hash

MMH3: -1415437576

MD5: 72e6538fd999d7d0f60b658c3dc0b0aa

Domain Name Analysis

Within the developer-focused generic top-level domain (.dev), '7ddce2d9.7fc087fbd273b757485ac4d5.workers.dev' is registered and includes subdomain '7ddce2d9.7fc087fbd273b757485ac4d5'. The core label 'workers' covers 7 characters holding 2 vowels versus 5 consonants. Word splitting yields 1 word: workers. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

0.49s

Total Load Time

848 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:199 chars

Detector Agreement:100%

Website Classification

Primary Category

documentation technical67% confidence

Type: static

Method: ml+structural

All Detected Categories

documentation technical

67%

government public service

66%

blog personal website

55%

news media journalism

52%

adult content

38%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
2	104.21.24.179Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	104.18.94.41Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	172.67.219.223Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	104.18.95.41Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
8	4	-	-