Security Scan: Webmail Login

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/e1413b0a-82d0-4575-a3d0-7a44a5304fa6 Domain and IP registration (RDAP)/api/v1/rdap/e1413b0a-82d0-4575-a3d0-7a44a5304fa6How often this domain was scanned/api/v1/domain/stats/w2-geiuhsewhoictwuhetiuhwie.cloudd1.workers.dev Scan history for this domain/api/v1/domain/history/w2-geiuhsewhoictwuhetiuhwie.cloudd1.workers.dev?limit=15

This website contacted 3 IPs in 2 countries across 2 domains to perform 10 HTTP transactions. The main domain is workers.dev and was registered 7 years ago.

Submitted URL: https://w2-geiuhsewhoictwuhetiuhwie.cloudd1.workers.dev

AI Security Verdict

Confirmed Scam

Confidence: 95%

Risk Score

Fake cPanel webmail login on a random workers.dev subdomain that sends entered email and password to an unrelated compromised WordPress host (airofreshintl.com). Classic credential phishing — do not enter credentials.

Risk Factors (5)

Cross-origin password submission to an unrelated third-party domain (credential exfiltration path)

Brand impersonation of cPanel webmail on a non-official domain

Free hosting platform subdomain with random hostname and unknown creation date

No legitimate service relationship between workers.dev tenant and airofreshintl.com

Domain age information unavailable

Details

Page Title

Webmail Login

Scan Type

public

Favicon Hash

MMH3: 428589171

MD5: 31eccd8848662931aa949469697b1f11

Domain Name Analysis

The domain name 'w2-geiuhsewhoictwuhetiuhwie.cloudd1.workers.dev' uses the developer-focused generic top-level domain (.dev) and includes subdomain 'w2-geiuhsewhoictwuhetiuhwie.cloudd1'. The core label 'workers' covers 7 characters split between 2 vowels and 5 consonants. Tokenizing the label suggests 1 word: workers. Expect 7 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

2.86s

Total Load Time

110 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:938 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software50% confidence

Type: static

Method: ml+structural

All Detected Categories

technology software

50%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
4	188.114.96.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	188.114.97.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	103.104.196.106	Singapore, Singapore	AS58621Vodien Internet Solutions Pte Ltd
10	3	-	-