ScanMalware.com

Security Scan Report: server-web-cdn.pixece7948.workers.dev

Site favicon
Submitted: Sep 13, 2026, 1:47:53 PMCompleted: Sep 13, 2026, 1:48:48 PMpubliccompleted

Summary

This website contacted 2 IPs in 1 country across 1 domain to perform 2 HTTP transactions. The main domain is server-web-cdn.pixece7948.workers.dev and was registered 7 years ago.

Submitted URL: https://server-web-cdn.pixece7948.workers.dev

AI Security Verdict

High Risk

Confidence: 82%

8
Risk Score

Primary domain matched to APT UNC2465 malware across two feeds; a bare 'IIS7' placeholder on anonymous workers.dev hosting. Treat as malicious infrastructure — do not visit or download.

Risk Factors
Threat-intel match: primary domain reported as APT UNC2465 malware (2 corroborating feeds)
Bare placeholder page ('IIS7') on anonymous free hosting subdomain, consistent with malware staging/C2 infrastructure
Subdomain on workers.dev with unknown creation date — apex age not attributable to this page
Unranked domain with zero reputation
Domain age information unavailable

Details

Page Title

IIS7

Scan Type

public

Language

🏳️

UNKNOWN

(0% confidence)

Category

unknown

(0%)

Domain Information

The domain name 'server-web-cdn.pixece7948.workers.dev' uses the developer-focused generic top-level domain (.dev) and includes subdomain 'server-web-cdn.pixece7948'. Count 7 characters in 'workers' holding two vowels versus five consonants. Segmentation suggests 1 word: workers. The median word length lands at seven characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://server-web-cdn.pixece7948.workers.dev

Page Load Overview

1.03s
Total Load Time
3
HTTP Requests
1
Domains
N/A
Total Size

Language Analysis

Primary Language

🏳️UNKNOWN
Code: unknown
Confidence:0%

Detection Details

Language Code:unknown
Detection Confidence:0%
Text Length:4 chars
Detector Agreement:0%

Website Classification

Primary Category

unknown0% confidence
Type: static
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2172.67.160.54Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.21.89.140Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
32--

Page Statistics

3
Requests
1
Unique Domains
182.9 KB
Total Size

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1460123684453424AE2D2C75461F1BE0478C1DB8BC5C6CE4CF8A2B026CF4474DF4223C8

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12:hnM9iuXI9PG6QclfVI+MYaHwy0zt84rRNFD0bWEl0iy05exQ4xXEF9rDPObSCeFu:hM0mIJGsq+M3gNhoiM0oeu1PrTueo

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:676:AAAAgEgAAAAAAACAgAAAAAAAAAAAAAAAUAAAAAAAABAAAAAAgBAAABAAAAAAAAAAAAxAAAAAAgAAAACRAAAAAAAAAAABAQAA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:c3ffc3c3ffffffff
Perceptual Hash:e464ccce73333199
Difference Hash:16b2160c20040000
Wavelet Hash:c0d8c0c0f0f0f0f0
Color Hash:#66bf40

Other Hashes

Crop Resistant:16b2160c20040000,b2f0e4f0f0f07171

Scan History

Scan history not available

Unable to load historical scan data