Security Report: webproxy.goku8.workers.dev - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/e5ba6821-e530-48e3-8d3e-91409bcb1bbb Domain and IP registration (RDAP)/api/v1/rdap/e5ba6821-e530-48e3-8d3e-91409bcb1bbbHow often this domain was scanned/api/v1/domain/stats/webproxy.goku8.workers.dev Scan history for this domain/api/v1/domain/history/webproxy.goku8.workers.dev?limit=15

This website contacted 32 IPs in 4 countries across 19 domains to perform 96 HTTP transactions. The main domain is workers.dev and was registered 7 years ago.

Submitted URL: https://webproxy.goku8.workers.dev/http://www.wellsfargo.com/auto-loans/vehicle-financing-101/

AI Security Verdict

Confirmed Scam

Confidence: 85%

Risk Score

Open web proxy dressing itself in Wells Fargo branding (favicon, title) on workers.dev, flagged twice by Safe Browsing for social engineering. No credential form here, but treat as phishing infrastructure.

Risk Factors (4)

Safe Browsing social-engineering (phishing) detection on the URL

Wells Fargo favicon and branding served on a non-Wells Fargo domain

Open web proxy that can render arbitrary banking pages under its own hostname

Excessive cross-domain redirect chain (8 hops, 5 cross-domain)

Domain age information unavailable

Details

Page Title

A guide to new and used car loans | Wells Fargo

Scan Type

public

Favicon Hash

MMH3: 1828061046

MD5: cd112f1acb59ef6e59e09c0effd8ce2a

Domain Name Analysis

The domain 'webproxy.goku8.workers.dev' uses the developer-focused generic top-level domain (.dev) and includes subdomain 'webproxy.goku8'. Count 7 characters in 'workers' with 2 vowels and five consonants. Splitting it apart reveals 1 word: workers. Median word length comes out to seven characters. No strong language cues emerged from the frequency lists.

Screenshot

to main content ATMs/Locations [MENU] How can we help? + Find a location Ley, State or 21P [Go] © Make an appointment ick hel ‘© Customer service and FAQs © Find routing and account numbers P...

Page Load Overview

1.12s

Total Load Time

1.3 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:15,280 chars

Detector Agreement:100%

Website Classification

Primary Category

finance banking54% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

finance banking

54%

documentation technical

31%

government public service

27%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
43	188.114.97.3Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
23	23.32.242.175Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS16625Akamai Technologies, Inc.
5	3.229.29.73Aws · CLOUD	Ashburn, Virginia, United States	AS14618Amazon.com, Inc.
3	188.114.96.3Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	104.18.32.137Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	172.64.155.231Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	34.202.158.248Aws · CLOUD	Ashburn, Virginia, United States	AS14618Amazon.com, Inc.
3	63.140.62.128Aws · CLOUD	United States	AS16509Amazon.com, Inc.
3	34.246.119.54Aws · CLOUD	Dublin, Leinster, Ireland	AS16509Amazon.com, Inc.
3	107.20.157.133Aws · CLOUD	Ashburn, Virginia, United States	AS14618Amazon.com, Inc.
96	32	-	-