Security Report: urlshort-linkms1se3cttal0.yi6x7whfkr.workers.dev - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/e2f28803-b2b2-4de1-8806-0c026975cd87 Domain and IP registration (RDAP)/api/v1/rdap/e2f28803-b2b2-4de1-8806-0c026975cd87How often this domain was scanned/api/v1/domain/stats/urlshort-linkms1se3cttal0.yi6x7whfkr.workers.dev Scan history for this domain/api/v1/domain/history/urlshort-linkms1se3cttal0.yi6x7whfkr.workers.dev?limit=15

This website contacted 4 IPs in 1 country across 2 domains to perform 4 HTTP transactions. The main domain is workers.dev and was registered 7 years ago.

Submitted URL: https://urlshort-linkms1se3cttal0.yi6x7whfkr.workers.dev/3j7qel

Effective URL:

https://urlshort-linkmrrwjc0kdzql.esu2n5lwqi.workers.dev/site/elster-m...

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 93%

Risk Score

Phishing page impersonating the German ELSTER tax portal on a random workers.dev subdomain, harvesting name, address, phone, email and IBAN under a fake 'account verification' pretext; primary domain flagged as phishing by two independent feeds.

Risk Factors (5)

Brand impersonation of ELSTER on a non-official domain

Collection of IBAN and personal/company data under the guise of tax-account verification

Multi-source corroborated phishing threat-intel match on the primary domain

Randomized workers.dev subdomains used as URL shortener/redirect infrastructure

Unranked domain with no established reputation

Domain age information unavailable

Details

Page Title

ELSTER - ELSTER

Scan Type

public

Domain Name Analysis

The domain name 'urlshort-linkms1se3cttal0.yi6x7whfkr.workers.dev' uses the developer-focused generic top-level domain (.dev) with subdomain 'urlshort-linkms1se3cttal0.yi6x7whfkr'. Its registrable label 'workers' stretches across 7 characters holding two vowels versus five consonants. Tokenizing the label suggests 1 word: workers. The median word length lands at seven characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

1.15s

Total Load Time

525 KB

Total Size

Language Analysis

Primary Language

🇩🇪German

Code: de

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:de

Text Length:2,781 chars

Detector Agreement:100%

Website Classification

Primary Category

finance banking94% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

finance banking

94%

corporate business

92%

blog personal website

86%

government public service

78%

adult content

69%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
1	188.114.97.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	104.21.94.168Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	172.67.138.69Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
1	188.114.96.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	4	-	-