Security Scan Report: webproxy.goku8.workers.dev

Site favicon
Submitted: Completed: publiccompleted
This website contacted 25 IPs in 4 countries across 18 domains to perform 58 HTTP transactions. The main domain is workers.dev and was registered 7 years ago.

Submitted URL: https://webproxy.goku8.workers.dev/https://www.wellsfargo.com/checking/prime/identification-required-to-open/?collateral_code=HPPB

AI Security Verdict

High Risk

Confidence: 85%

8
Risk Score

Wells Fargo-branded page (favicon, title, bank content) served from a generic workers.dev web proxy, flagged by Google Safe Browsing for Social Engineering. Brand impersonation on a non-official host.

Risk Factors (4)
Safe Browsing Social Engineering detection
Brand impersonation: Wells Fargo favicon and branding on a non-Wells Fargo host
Content served through a generic web-proxy worker subdomain with unknown creation date
Long cross-domain redirect chain through advertising/tracking networks
Domain age information unavailable

Details

Page Title

What you'll need to open a Prime Checking account | Wells Fargo

Scan Type

public

Domain Name Analysis

The domain name 'webproxy.goku8.workers.dev' uses the developer-focused generic top-level domain (.dev) with subdomain 'webproxy.goku8'. The second-level label 'workers' is 7 characters long split between 2 vowels and 5 consonants. Breaking it apart gives one word: workers. No strong language cues emerged from the frequency lists.

Screenshot

WELLS FARGO ATMs/Locations Help Expafol Personal Investing & Wealth Management Business Banking Commercial Banking Corporate & Investment Banking About Wells Fargo What you'll need to open a Prime C...

Page Load Overview

0.95s
Total Load Time
1.1 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:5,842 chars
Detector Agreement:85%

All Detected Languages

🇺🇸en(93%)🇪🇸es(4%)🇩🇪de(2%)🇷🇴ro(1%)

Website Classification

Primary Category

government public service41% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

government public service
41%
finance banking
41%
adult content
35%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
29188.114.97.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
534.202.158.248Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
352.51.219.154Aws · CLOUDDublin, Leinster, Ireland
AS16509Amazon.com, Inc.
223.32.242.175Akamai · CDNFrankfurt am Main, Hesse, Germany
AS16625Akamai Technologies, Inc.
2188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
22.17.100.155Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
23.229.29.73Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
263.140.62.166Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
240.180.127.30Aws · CLOUDDublin, Leinster, Ireland
AS16509Amazon.com, Inc.
234.218.53.175Aws · CLOUDBoardman, Oregon, United States
AS16509Amazon.com, Inc.
5825--

Detected Technologies6

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T14834925B3AA5132BD6E38718AA527A897A21988FFE335CDDF10D43740FCC7E14C94689

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:lIYnp42nicdnLTafXBK+lib8GcBAsfa/e8Ez9JArsjzP4s2DzCkuUSeGcMG3xwMJ:9UBK+8076uihT

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:245138:gII1eOiAwNgOK6OqOXAJFgF9IArisHGgEkoJRCQg8ZpFfIfLKIEAq4GABKCKhENCSkEPyMBKDAaFe8DQi4WiDVNGcFNABikC

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00ff7f7f7f7f7f19
Perceptual Hash:80757a356a356a3e
Difference Hash:8500c0c0e0c0b1b9
Wavelet Hash:007e3e3e3f3f0e01
Color Hash:07006000000

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data