Security Report: sweet-cherry-0657.bp7565357.workers.dev - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/db751970-765f-4b11-9988-103131851df5 Domain and IP registration (RDAP)/api/v1/rdap/db751970-765f-4b11-9988-103131851df5 Certificate Transparency/api/v1/ct/sweet-cherry-0657.bp7565357.workers.dev How often this domain was scanned/api/v1/domain/stats/sweet-cherry-0657.bp7565357.workers.dev Scan history for this domain/api/v1/domain/history/sweet-cherry-0657.bp7565357.workers.dev?limit=15

This website contacted 2 IPs in 1 country across 1 domain to perform 5 HTTP transactions. The main domain is sweet-cherry-0657.bp7565357.workers.dev and was registered 7 years ago.

Submitted URL: https://sweet-cherry-0657.bp7565357.workers.dev/?app_vl=aHx3j29laIeVoL2twK2XgndfpsKj1Zqerphfpn1xkGiTqaOZl3yPsg&dd=UiEnNzAlayQ1IS4iPzooNi5-ODw1Ow&[email protected]&sui=%7Bsui%7D&fn=NAUJOKAT

AI Security Verdict

High Risk

Confidence: 82%

Risk Score

FedEx-branded Swiss 'delivery failed — update your data' page hosted on an anonymous workers.dev subdomain with an unrelated base64 email parameter. Clear brand impersonation/phishing lure; do not enter any data.

Risk Factors

Impersonation of the FedEx brand on a non-FedEx domain

Delivery-failure social engineering with urgency to 'update delivery data'

Unranked shared-hosting subdomain (workers.dev) of unknown age

Base64-encoded email parameter pointing to an unrelated random-hex domain

Tracking-number form used as a lead-in to a data-collection flow ('Paket jetzt erhalten')

Domain age information unavailable

Details

Page Title

Sendung verfolgen | Schweiz

Scan Type

public

Domain Name Analysis

The domain name 'sweet-cherry-0657.bp7565357.workers.dev' uses the developer-focused generic top-level domain (.dev) and includes subdomain 'sweet-cherry-0657.bp7565357'. Its registrable label 'workers' stretches across 7 characters containing two vowels alongside five consonants. Breaking it apart gives 1 word: workers. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

4.81s

Total Load Time

58 KB

Total Size

Language Analysis

Primary Language

🇩🇪German

Code: de

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:de-CH

Text Length:1,375 chars

Detector Agreement:100%

Website Classification

Primary Category

government public service61% confidence

Type: static

Method: ml+structural+ocr_tiebreaker

All Detected Categories

government public service

61%

e-commerce shopping

57%

documentation technical

48%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
3	172.67.178.208Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	104.21.48.56Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	2	-	-

Detected Technologies3

HTTP/3

40%

Cloudflare Bot Management

40%

Cloudflare

40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1EDD1DD91C0F05532449783C27AE42F1B2FE8D61BCA4A11A1B3AD9F954FE3D82DD7B11A

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

48:/SahsVFHMB6sY4G40koXdxrL0Cgh1vN6huRwI6X9zJff/GkDxJrwj4mVTiY9eCiR:/SahsXGFY5kcdJgTv4hhh9eCrO0YDiR

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:6622:ICDNJJCEIaQCEBaQJyBCFvcJICADKCNMCQAgJAAAHBSmBSkQIBAADqkBdQMEChsEAAAMBwCaMGQoGkk0CUsIARMsKE8AAgD8

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:000000ffffffffff

Perceptual Hash:cc4d1bb3e4e43313

Difference Hash:3470b226cc4cd428

Wavelet Hash:000000f3ffe7ffc3

Color Hash:#2dd24e

Other Hashes

Crop Resistant:2666c84cccd44002,0834341670713032

Scan History

Scan history not available

Unable to load historical scan data

Security Scan Report: sweet-cherry-0657.bp7565357.workers.dev