Security Scan Report: hello-world-raspy-dust-5ec6.251422406.workers.dev

Site favicon
Submitted: Sep 20, 2026, 2:47:26 PMCompleted: Sep 20, 2026, 2:49:16 PMpubliccompleted

AI Security Verdict

Confirmed Scam

Confidence: 92%

9
Risk Score

Cloned Suning.com storefront (苏宁易购) hosted on a workers.dev subdomain with no affiliation to Suning, whose domain is flagged for APT malware by two threat feeds — confirmed malicious brand impersonation.

Risk Factors
Brand impersonation of Suning.com on an unrelated workers.dev subdomain
Threat-intelligence match: APT/malware ('apt unc6691-1') on the primary domain
Unranked domain absent from Cisco Umbrella top 1M
Free instant-publish hosting platform tenant with unknown creation date
Domain age information unavailable

Details

Page Title

苏宁易购(Suning.com)-换新到苏宁 省钱更省心!

Scan Type

public

Domain Name Analysis

Within the developer-focused generic top-level domain (.dev), 'hello-world-raspy-dust-5ec6.251422406.workers.dev' is registered with subdomain 'hello-world-raspy-dust-5ec6.251422406'. The second-level label 'workers' is 7 characters long holding 2 vowels versus five consonants. Word splitting yields 1 word: workers. Median word length comes out to 7 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://hello-world-raspy-dust-5ec6.251422406.workers.dev

Page Load Overview

75.16s
Total Load Time
3.7 MB
Total Size

Language Analysis

Primary Language

🇨🇳Chinese
Code: zh
Confidence:60%
Script:Han
Direction:ltr

Detection Details

HTML Lang Attribute:zh-cn
Text Length:8,511 chars
Detector Agreement:75%

Website Classification

Primary Category

e-commerce shopping99% confidence
Type: spa
Method: ml+structural

All Detected Categories

e-commerce shopping
99%
technology software
72%
finance banking
70%
corporate business
64%
documentation technical
64%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
30172.67.153.186Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7180.97.198.41China
AS140292CHINATELECOM Jiangsu province Suzhou 5G network
743.174.196.39Singapore
7163.181.58.177Frankfurt am Main, Hesse, Germany
AS24429Zhejiang Taobao Network Co.,Ltd
7223.109.243.10China
AS56046China Mobile communications corporation
71.194.173.140China
AS139587China Telecom Henan Zhengzhou Shujugang IDC network
7120.226.0.132China
AS56047China Mobile communications corporation
7116.162.222.199Changsha, Hunan, China
AS4837CHINA UNICOM China169 Backbone
736.158.204.131China
AS56047China Mobile communications corporation
7111.47.229.244China
AS9808China Mobile Communications Group Co., Ltd.
19825--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1F32167770D009E0D5F20E5C08F4BB419C3C7F67F60A0D554F2EC195A4AC1BDAC81A217

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

24:hdyTbSSMl2sl2FnGFdFZA7ZwEFMBKBfaKBfcj/DfDzP2Bf40mNVG:CbfHnmXaeEuwHaj3ie0r

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:1187:AAAAABQAAACQEABQIUAAAAIAAAAAgAAAAAAEABAAAAACIBAAAAAAAABABAAAUAAAAAAAAAAAAAgAAAAoAAAEIAAAoECAAAAA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:7f7f7f7f7f7f7f7f
Perceptual Hash:80ff008157ff15d5
Difference Hash:8080808080808080
Wavelet Hash:4e4e4c4c7e7e7e00
Color Hash:#d2797e

Other Hashes

Crop Resistant:8080808080808080

Scan History

Scan history not available

Unable to load historical scan data