Security Report: proxy-tg-huafei080.papag8593.workers.dev - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/fa1cfa92-5777-4d69-b53b-16584d652fc9 Domain and IP registration (RDAP)/api/v1/rdap/fa1cfa92-5777-4d69-b53b-16584d652fc9How often this domain was scanned/api/v1/domain/stats/proxy-tg-huafei080.papag8593.workers.dev Scan history for this domain/api/v1/domain/history/proxy-tg-huafei080.papag8593.workers.dev?limit=15

This website contacted 8 IPs in 2 countries across 3 domains to perform 181 HTTP transactions. The main domain is workers.dev and was registered 7 years ago.

Submitted URL: https://proxy-tg-huafei080.papag8593.workers.dev/

AI Security Verdict

Low Risk

Confidence: 72%

Risk Score

Telegram channel page recruiting 'agents' for deep-discount phone/electricity/fuel top-ups, 57%-off credit-card repayment and 'record lookup' services, settled in USDT — an illegal grey-market/money-laundering operation. No forms or malware, but avoid entirely.

Risk Factors (5)

Advertising illegal discounted utility/telecom recharge agent scheme with agent recruitment and commissions

Credit-card and Huabei 'repayment' at 57-80% discount — hallmark of card fraud / money laundering

'查档' personal-data lookup service advertised

Settlement in USDT and explicit VPN/circumvention recommendations to avoid oversight

Anonymous free hosting subdomain with no verifiable operator identity

Safety Factors (4)

No credential, password or payment fields on the page (only a Telegram search form)

No JavaScript malware, YARA or kit-roster hits; no cross-origin credential exfiltration

Page does not impersonate another organisation's brand — it is a Telegram channel preview page

No concrete malicious signal: the threat-feed matches name third-party or shared hosts, or rest on a single feed or a reputation label, so they were not counted; no YARA / Safe-Browsing / IDS / credential form / brand impersonation either. Elevated risk rested on domain age or reputation alone; clamped from 7 to 3

Domain age information unavailable

Details

Page Title

查档㊙️7折话费🉑电费🉑油费直冲💯招兼职💹代理 – Telegram

Scan Type

public

Favicon Hash

MMH3: 1439995987

MD5: 02f7553e1ac3129cd1c4d0442b5a0f81

Domain Name Analysis

The domain name 'proxy-tg-huafei080.papag8593.workers.dev' uses the developer-focused generic top-level domain (.dev); it also runs on subdomain 'proxy-tg-huafei080.papag8593'. The registrable portion 'workers' spans 7 characters containing two vowels alongside five consonants. Tokenizing the label suggests 1 word: workers. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

3.33s

Total Load Time

647 KB

Total Size

Language Analysis

Primary Language

🇨🇳Chinese

Code: zh

Confidence:60%

Script:Han

Direction:ltr

Detection Details

Text Length:6,821 chars

Detector Agreement:67%

Website Classification

Primary Category

e-commerce shopping81% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

e-commerce shopping

81%

finance banking

77%

technology software

53%

corporate business

47%

adult content

45%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
27	104.21.89.60Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
22	149.154.171.236	Amsterdam, North Holland, Netherlands	AS62014Telegram Messenger Inc
22	149.154.165.137	Amsterdam, North Holland, Netherlands	AS62041Telegram Messenger Inc
22	172.67.138.73Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
22	149.154.171.237	Amsterdam, North Holland, Netherlands	AS62014Telegram Messenger Inc
22	149.154.164.25	Amsterdam, North Holland, Netherlands	AS62041Telegram Messenger Inc
22	149.154.165.133	Amsterdam, North Holland, Netherlands	AS62041Telegram Messenger Inc
22	149.154.164.24	Amsterdam, North Holland, Netherlands	AS62041Telegram Messenger Inc
181	8	-	-