ScanMalware.com

Security Scan Report: datafluxworker.system-telemetry.workers.dev

Site favicon
Submitted: Sep 12, 2026, 3:34:52 PMCompleted: Sep 12, 2026, 3:36:09 PMpubliccompleted

Summary

This website contacted 2 IPs in 1 country across 1 domain to perform 1 HTTP transaction. The main domain is datafluxworker.system-telemetry.workers.dev and was registered 7 years ago.

Submitted URL: https://datafluxworker.system-telemetry.workers.dev

AI Security Verdict

High Risk

Confidence: 78%

7
Risk Score

Primary domain flagged as malware by two independent threat feeds (auto-escalation to HIGH_RISK). Page itself shows only an unrelated design-studio portfolio with no forms, no malicious JS, and no credential capture.

Risk Factors
Multi-source corroborated malware Indicators of Compromise on the primary scanned domain
Hosted on a free instant-publish Cloudflare Workers subdomain of unknown age with a masquerading-style hostname (system-telemetry)
Domain age information unavailable

Details

Page Title

Arca Studio

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

healthcare medical

(42%)

Domain Information

The domain name 'datafluxworker.system-telemetry.workers.dev' uses the developer-focused generic top-level domain (.dev); it also runs on subdomain 'datafluxworker.system-telemetry'. The second-level label 'workers' is 7 characters long holding two vowels versus 5 consonants. It segments into one word: workers. Median word length is seven characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://datafluxworker.system-telemetry.workers.dev

Page Load Overview

5.10s
Total Load Time
1
HTTP Requests
1
Domains
N/A
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:252 chars
Detector Agreement:100%

Website Classification

Primary Category

healthcare medical42% confidence
Type: static
Method: ml+structural

All Detected Categories

healthcare medical
42%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
12--

Page Statistics

1
Requests
1
Unique Domains
1.9 KB
Total Size

Detected Technologies3

HTTP/3
40%
Cloudflare Bot Management
40%
Cloudflare
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T103617233B3A4002A9C7BC95139E0678E5420C067C4174F98B69F9B598FCF2536BD364C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

48:TBrr9Bl02sZwdqFLQC8dLVvd6E6QYcVXrKHAQpz0tP+NSV6/4uLF:TBrr9BlmODCehZYcV7qAQeZywuZ

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:3307:EgCSEAkAABKhIQAAAAAgNEAYIAIAhCBEAEBAUAEoQAIAAAgIABAAUACgKiwCAAQAAAAgEIIIUCQAIGACQAAiYkMAAAAAQEiA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffbf1f1f1f0f0fff
Perceptual Hash:9dcce1f3c613e01c
Difference Hash:8030347075181a80
Wavelet Hash:7e3f0f1f0007076e
Color Hash:#e06c94

Other Hashes

Crop Resistant:8030347075181a80

Scan History

Scan history not available

Unable to load historical scan data