ScanMalware.com

Security Scan Report: spring-bush-e4e9.sfersjgd.workers.dev

Redirected to:
https://spring-bush-e4e9.sfersjgd.workers.dev/device-info
Site favicon
Submitted: Jul 9, 2026, 12:45:39 PMCompleted: Jul 9, 2026, 12:49:34 PMpubliccompleted
Loading additional data...

Summary

This website contacted 10 IPs in 1 country across 7 domains to perform 19 HTTP transactions. The main domain is spring-bush-e4e9.sfersjgd.workers.dev and was registered NaN years ago.

Submitted URL: http://spring-bush-e4e9.sfersjgd.workers.dev/device-info.html

Effective URL: https://spring-bush-e4e9.sfersjgd.workers.dev/device-infoRedirected

AI Security Verdict

Low Risk

Confidence: 72%

3
Risk Score

The site is a low‑credibility contest page on an unknown workers.dev subdomain; it collects personal data but lacks credential or payment forms and shows no malicious indicators.

Risk Factors
Unknown subdomain age
Unranked / low‑reputation domain
Data‑collection form without authentication
Hosted on a generic developer platform (workers.dev)
Safety Factors
No password or payment fields
No malicious JavaScript or obfuscation
No external IoC or IDS alerts
No brand impersonation
Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 5 to 3
Domain age information unavailable

Details

Page Title

🏆 مسابقة الربح بمائة ألف ريال سعودي

Scan Type

public

Language

🇸🇦

Arabic

(80% confidence)

Category

entertainment media

(55%)

Domain Information

The domain 'spring-bush-e4e9.sfersjgd.workers.dev' uses the developer-focused generic top-level domain (.dev), featuring subdomain 'spring-bush-e4e9.sfersjgd'. Count 7 characters in 'workers' with 2 vowels and 5 consonants. Word splitting yields one word: workers. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://spring-bush-e4e9.sfersjgd.workers.dev/device-info.html

Page Load Overview

2.19s
Total Load Time
19
HTTP Requests
7
Domains
99 KB
Total Size

Language Analysis

Primary Language

🇸🇦Arabic
Code: ar
Confidence:80%
Script:Arabic
Direction:rtl

Detection Details

Language Code:ar
Detection Confidence:80%
Script Type:Arabic
HTML Lang Attribute:ar
Text Length:377 chars
Detector Agreement:100%

Website Classification

Primary Category

entertainment media55% confidence
Type: static
Method: ml+structural

All Detected Categories

entertainment media
55%
adult content
49%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
10142.251.20.94Google · CDNUnited States
AS15169Google LLC
1104.26.8.44Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1172.67.163.176Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1151.101.65.155Fastly · CDNUnited States
AS54113Fastly, Inc.
1104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1151.101.1.155Fastly · CDNUnited States
AS54113Fastly, Inc.
1104.21.42.167Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1108.181.20.43Los Angeles, California, United States
AS40676Psychz Networks
1172.217.208.95Google · CDNUnited States
AS15169Google LLC
1910--

Detected Technologies2

JQueryv3.6.0
100%
jQuery CDN
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T115C2C6952DB300116513F16DABE722087735E8039A0FDC6C7B9E1B849F8669DD6A33BC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:u06OSBNo9zVFSi8of9a+UhxtXjqKFS6VafXwT+lku+ZvhpIDq+B5+6NrdFrRJcJB:HGzeu2IhYZos/giLW

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:25814:RvDNhuQHKGCgUkFIRQIEBkAggVgICGQqiAiQCMGBChEdIUhITiVggmEh2NmARBNRIGEyq4TAsJQgmg3ZCVDAQCUCwIoEHASw

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffff181818180000
Perceptual Hash:889fa6ec98e3984b
Difference Hash:37f3f1f1f1f1c7f7
Wavelet Hash:ffff3c3c3c3c0000
Color Hash:#87a2c5

Other Hashes

Crop Resistant:0f0f3733371f170f,b6b6b696969a585e,c48082868680c0c0,f3f1f1f1f1f1c7f7

Scan History

Scan history not available

Unable to load historical scan data