Security Scan: Google

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/f5efb7e1-47b9-4d9c-a774-317640f00f70 Domain and IP registration (RDAP)/api/v1/rdap/f5efb7e1-47b9-4d9c-a774-317640f00f70How often this domain was scanned/api/v1/domain/stats/bs-deliver-e817.61d8f0e6ac62c139abd08ba5.workers.dev Scan history for this domain/api/v1/domain/history/bs-deliver-e817.61d8f0e6ac62c139abd08ba5.workers.dev?limit=15

This website contacted 18 IPs in 1 country across 6 domains to perform 40 HTTP transactions. The main domain is workers.dev and was registered 7 years ago.

Submitted URL: https://bs-deliver-e817.61d8f0e6ac62c139abd08ba5.workers.dev/gCkbDmodqAQL4IjrrQkWWhuAJ2PYdTF_1WZwH20L2aHVMYFn?r421=1785323159.3c0e206030656672.qyQob2vMkawwKx8buSeAomzK9KdAQ5r1qFA5hq7oGgo&_dy=9f1a37ab

Effective URL:

https://www.google.com/

Redirected

AI Security Verdict

High Risk

Confidence: 82%

Risk Score

Randomly-named workers.dev redirector flagged as unknown malware by two independent feeds, used to bounce visitors to a genuine Google page. The delivery URL, not the Google landing page, is the threat — avoid it.

Risk Factors (4)

Corroborated malware Indicator of Compromise on the scanned entry domain (2 feeds)

Obfuscated redirector URL: random subdomain, meaningless path, encoded query parameters

Cross-domain redirect masking the true destination (workers.dev -> google.com)

Anonymous, instantly-created hosting namespace with no attributable registration

Domain age information unavailable

Details

Page Title

Google

Scan Type

public

Favicon Hash

MMH3: 540608765

MD5: e8972ce34a4545b33c3926a20c306b71

Domain Name Analysis

Domain 'bs-deliver-e817.61d8f0e6ac62c139abd08ba5.workers.dev' uses the developer-focused generic top-level domain (.dev), featuring subdomain 'bs-deliver-e817.61d8f0e6ac62c139abd08ba5'. The second-level label 'workers' is 7 characters long with two vowels and 5 consonants. Breaking it apart gives one word: workers. Expect 7 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

0.82s

Total Load Time

1004 KB

Total Size

Language Analysis

Primary Language

🇩🇪German

Code: de

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:de

Text Length:3,683 chars

Detector Agreement:100%

Website Classification

Primary Category

adult content62% confidence

Type: spa

Method: ml+structural

All Detected Categories

adult content

62%

documentation technical

41%

news media journalism

40%

education learning

36%

social media network

32%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
6	142.251.156.119Google · CDN	United States	AS15169Google LLC
2	188.114.96.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	142.251.110.94Google · CDN	United States	AS15169Google LLC
2	142.251.157.120Google · CDN	United States	AS15169Google LLC
2	142.251.110.95Google · CDN	United States	AS15169Google LLC
2	142.251.151.7Google · CDN	United States	AS15169Google LLC
2	188.114.97.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	142.251.154.119Google · CDN	United States	AS15169Google LLC
2	142.251.153.119Google · CDN	United States	AS15169Google LLC
2	142.251.151.119Google · CDN	United States	AS15169Google LLC
40	18	-	-