Security Scan Report: sharedfile2.applys.workers.dev

Redirected to:
https://www.linkedin.com/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 28 IPs in 4 countries across 24 domains to perform 138 HTTP transactions. The main domain is workers.dev and was registered 7 years ago.

Submitted URL: http://sharedfile2.applys.workers.dev/

Effective URL:
https://www.linkedin.com/
Redirected

AI Security Verdict

Moderate Risk

Confidence: 92%

5
Risk Score

This disposable address only forwards visitors to a well-known site, a common way to hide a scam from security scanners — rated moderate risk on that basis.

Safety Factors (3)
Redirect terminates on the brand owner's own well-established domain (www.linkedin.com, ranked #798 in Cisco Umbrella top 1M).
Login form submits same-origin to www.linkedin.com/uas/login-submit with standard anti-CSRF tokens.
Cross-origin script hosts are ranked, mainstream services (accounts.google.com, static.licdn.com, Tealium, Demdex).
Domain age information unavailable

Details

Page Title

LinkedIn: Log In or Sign Up

Scan Type

public

Domain Name Analysis

The domain 'sharedfile2.applys.workers.dev' uses the developer-focused generic top-level domain (.dev), featuring subdomain 'sharedfile2.applys'. Count 7 characters in 'workers' split between 2 vowels and five consonants. Breaking it apart gives 1 word: workers. Average segment length settles at seven characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://sharedfile2.applys.workers.dev/

Page Load Overview

2.54s
Total Load Time
2.2 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:5,226 chars
Detector Agreement:80%

Website Classification

Primary Category

technology software75% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

technology software
75%
education learning
51%
e-commerce shopping
29%
corporate
25%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
30188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4104.18.50.34Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4104.18.41.41Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4172.64.154.50Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4104.18.33.206Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4172.64.146.215Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4142.251.150.119Google · CDNUnited States
AS15169Google LLC
4146.75.122.133Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
4150.171.74.13Azure · CLOUDUnited States
AS8075Microsoft Corporation
4150.171.73.13Azure · CLOUDUnited States
AS8075Microsoft Corporation
13828--

Detected Technologies1

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T110F3B1A162F42A37055BC5F9B921F725DDD2C11BE64EACD2F28D02562FE4C722D0B25C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:dHP3pcFSnwjjrlSnJ4IHIQtiaja7aTMwYUlbm:xHNWyweq1

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:167414:ZGVovJFVYD4DMypCcWSAIEgMgDoMBoYiFEt4gQGDrBIpgUEUYrYmMBCpFvQMaAg0CYCEgKUDxEnCcGojisb8BGRAhuJsAEGQ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffdf99d1f1ff81d1
Perceptual Hash:ecc9939664699b4a
Difference Hash:2b33333737252729
Wavelet Hash:f99999d1d1ff8080
Color Hash:#785b3a

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data