ScanMalware.com

Security Scan Report: 9cmw-idx4-47fs.george-vandevorde-smithinsurancellc-com-s-account.workers.dev

Submitted: Jul 13, 2026, 12:45:25 AMCompleted: Jul 13, 2026, 12:48:02 AMpubliccompleted
Loading additional data...

Summary

This website contacted 3 IPs in 1 country across 3 domains to perform 2 HTTP transactions. The main domain is 9cmw-idx4-47fs.george-vandevorde-smithinsurancellc-com-s-account.workers.dev and was registered NaN years ago.

Submitted URL: https://9cmw-idx4-47fs.george-vandevorde-smithinsurancellc-com-s-account.workers.dev/12

AI Security Verdict

High Risk

Confidence: 82%

8
Risk Score

The site impersonates DocuSign, is flagged by threat intel and IDS as phishing, and uses anti‑analysis tricks; treat as high‑risk and do not engage.

Risk Factors
Brand impersonation (DocuSign) on unknown subdomain
Threat intelligence IoC match on primary domain
High‑severity phishing IDS alerts
DevTools and right‑click blocking
Hosting on a generic workers.dev subdomain
Domain age information unavailable

Details

Page Title

DocuSign - Review Document

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

technology software

(54%)

Domain Information

The domain name '9cmw-idx4-47fs.george-vandevorde-smithinsurancellc-com-s-account.workers.dev' uses the developer-focused generic top-level domain (.dev), featuring subdomain '9cmw-idx4-47fs.george-vandevorde-smithinsurancellc-com-s-account'. Its registrable label 'workers' stretches across 7 characters holding two vowels versus 5 consonants. Word splitting yields one word: workers. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://9cmw-idx4-47fs.george-vandevorde-smithinsurancellc-com-s-account.workers.dev/12

Page Load Overview

5.88s
Total Load Time
10
HTTP Requests
4
Domains
149 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:465 chars
Detector Agreement:67%

Website Classification

Primary Category

technology software54% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
54%
documentation technical
43%
government public service
30%
corporate business
26%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4142.251.110.95Google · CDNUnited States
AS15169Google LLC
3172.67.179.140Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3172.67.129.54Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
103--

Detected Technologies3

HTTP/3
40%
Cloudflare Bot Management
40%
Cloudflare
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T17372CFF436A6EB38A522023D3F7B6F5464BC00E996428880F13A0E4571A8D878D56ABC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:39UJhupLaDfmtPoloiWYLgOWjOE77tjZZgToW2:36a/YLgOW577t1GToW2

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:16084:AAkjAbeAAJ4CQwQQEYBQwAQAKEBSiKaeS8GKhISbWACCMEEOBQICARgGwMjZABzKIgIIGCNjUEASRmLsAQAoDIQBJmAC4FCB

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffef1818180000
Perceptual Hash:999ca60c9c39be1e
Difference Hash:20041832a2300008
Wavelet Hash:ffffff5918180000
Color Hash:#c5878e

Other Hashes

Crop Resistant:20041832a2300008

Scan History

Scan history not available

Unable to load historical scan data