Security Scan Report: eoknglwe.an.r.appspot.com

Redirected to:
https://33d699cc.f00ae5aa62a9700f3d7a1922.workers.dev/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 9 IPs in 1 country across 9 domains to perform 20 HTTP transactions. The main domain is appspot.com and was registered 21 years ago.

Submitted URL: https://eoknglwe.an.r.appspot.com/

Effective URL:
https://33d699cc.f00ae5aa62a9700f3d7a1922.workers.dev/
Redirected

AI Security Verdict

High Risk

Confidence: 78%

8
Risk Score

Microsoft SharePoint Online branding on a random-hex workers.dev subdomain behind a fake 'checking your browser' hold screen — a brand-impersonating phishing landing page, not a Microsoft service.

Risk Factors (5)
Brand impersonation: Microsoft SharePoint Online presented on a non-Microsoft, random-hex workers.dev subdomain
Misspelled title 'Mutifactor Auth' plus fake 'checking your browser' hold screen typical of phishing kits
Cross-domain redirect from an unrelated free appspot subdomain to a free workers.dev tenant
Single-source (unverified) phishing threat-intel match on the qr.codes resource the page loads
Content served to residential clients is hidden from datacenter scanners behind a bot challenge
Domain age information unavailable

Details

Page Title

Mutifactor Auth

Scan Type

public

Domain Name Analysis

You're looking at domain 'eoknglwe.an.r.appspot.com' on the commercial generic top-level domain (.com) with subdomain 'eoknglwe.an.r'. Count 7 characters in 'appspot' holding two vowels versus 5 consonants. Tokenizing the label suggests two words: app, spot. Expect 3.5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://eoknglwe.an.r.appspot.com/

Page Load Overview

2.36s
Total Load Time
238 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:84%
Script:Latin
Direction:ltr

Detection Details

Text Length:103 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software64% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
64%
documentation technical
57%
government public service
38%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4142.251.14.153Google · CDNUnited States
AS15169Google LLC
2188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.20.41.165Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
216.15.254.45Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
2142.251.14.95Google · CDNUnited States
AS15169Google LLC
2142.250.154.94Google · CDNUnited States
AS15169Google LLC
2188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2172.66.172.247Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
254.231.237.10Aws · CLOUDAshburn, Virginia, United States
AS16509Amazon.com, Inc.
209--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1B85154B384F2441721019190FEB6B51DCDAEC10B9A9A5C10F5AE53BABFC1ED188AB55C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

48:wr2/ECZDUikbbai4BqaieRait0orKbapZpBtUrJRtN/lc520ipO3fE:M25ubFK10orKIMD9lc8QE

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:3008:iBEgAEBOAAB4AISBhIAAEAAAUAAgDBCAQCABAAkAAAQiAAAQIAAAAABBDAABAAgRAAMIACgWCBAjQAgAtAAB4AAIAQgBASAA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:e7e7e7e7ffffffff
Perceptual Hash:b3333399ccccc4cc
Difference Hash:080c0c0c00000000
Wavelet Hash:c3c3c3c30f0f0f0f
Color Hash:#acac53

Other Hashes

Crop Resistant:080c0c0c00000000

Scan History

Scan history not available

Unable to load historical scan data