Security Scan: Just a moment...

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/fcd36a19-aff6-4926-9f1d-d52cc5c3c094 Domain and IP registration (RDAP)/api/v1/rdap/fcd36a19-aff6-4926-9f1d-d52cc5c3c094How often this domain was scanned/api/v1/domain/stats/7ddce2d9.7fc087fbd273b757485ac4d5.workers.dev Scan history for this domain/api/v1/domain/history/7ddce2d9.7fc087fbd273b757485ac4d5.workers.dev?limit=15

This website contacted 4 IPs in 1 country across 2 domains to perform 8 HTTP transactions. The main domain is workers.dev and was registered 7 years ago.

Submitted URL: https://7ddce2d9.7fc087fbd273b757485ac4d5.workers.dev/

AI Security Verdict

High Risk

Confidence: 88%

Risk Score

Fake self-hosted Cloudflare 'Just a moment...' Turnstile gate matching an analyst-vetted phishing kit, with two critical phishing IDS alerts; the gate likely fronts a credential page. Avoid and report.

Risk Factors (5)

Known malicious phishing kit (turnstile-gate-kit-202609) confirmed by analyst-vetted roster

Fake, self-hosted Cloudflare Turnstile challenge impersonating Cloudflare's interstitial

Critical IDS phishing alerts indicating a credential-phish landing page

Obfuscated gate that withholds its real content until the challenge is passed, hiding it from automated inspection

eval() usage plus unranked, random-hex .workers.dev subdomain consistent with throwaway phishing infrastructure

Domain age information unavailable

Details

Page Title

Just a moment...other network

Scan Type

public

Favicon Hash

MMH3: -1415437576

MD5: 72e6538fd999d7d0f60b658c3dc0b0aa

Domain Name Analysis

The domain name '7ddce2d9.7fc087fbd273b757485ac4d5.workers.dev' uses the developer-focused generic top-level domain (.dev); it also runs on subdomain '7ddce2d9.7fc087fbd273b757485ac4d5'. The second-level label 'workers' is 7 characters long containing two vowels alongside five consonants. Breaking it apart gives one word: workers. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

0.54s

Total Load Time

784 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:199 chars

Detector Agreement:100%

Website Classification

Primary Category

documentation technical67% confidence

Type: static

Method: ml+structural

All Detected Categories

documentation technical

67%

government public service

66%

blog personal website

55%

news media journalism

52%

adult content

38%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
2	172.67.219.223Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	104.18.95.41Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	104.21.24.179Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	104.18.94.41Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
8	4	-	-