ScanMalware.com

Security Scan Report: mruvbs6736767rvbbsn67fhbfrwuisdbnmngbkjsghhmndghjnfd.djverkest.workers.dev

Site favicon
Submitted: Jul 2, 2026, 3:09:58 PMCompleted: Jul 2, 2026, 3:11:21 PMpubliccompleted
Loading additional data...

Summary

This website contacted 1 IP in 1 country across 1 domain to perform 6 HTTP transactions. The main domain is mruvbs6736767rvbbsn67fhbfrwuisdbnmngbkjsghhmndghjnfd.djverkest.workers.dev and was registered NaN years ago.

Submitted URL: https://mruvbs6736767rvbbsn67fhbfrwuisdbnmngbkjsghhmndghjnfd.djverkest.workers.dev/

AI Security Verdict

Low Risk

Confidence: 75%

3
Risk Score

The page hosts no forms but triggers critical shellcode IDS alerts, suggesting possible malware; moderate risk overall.

Risk Factors
Critical IDS alerts indicating possible shellcode
Unknown subdomain age on a generic hosting platform
Lack of reputable domain ranking
Safety Factors
No credential or payment collection forms
No known malicious IoC or YARA detections
Low JavaScript obfuscation score
Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 4 to 3
Domain age information unavailable

Details

Page Title

-

Scan Type

public

Language

🇷🇺

Russian

(60% confidence)

Category

government public service

(73%)

Domain Information

Within the developer-focused generic top-level domain (.dev), 'mruvbs6736767rvbbsn67fhbfrwuisdbnmngbkjsghhmndghjnfd.djverkest.workers.dev' is registered and includes subdomain 'mruvbs6736767rvbbsn67fhbfrwuisdbnmngbkjsghhmndghjnfd.djverkest'. The core label 'workers' covers 7 characters containing two vowels alongside five consonants. Word splitting yields one word: workers. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://mruvbs6736767rvbbsn67fhbfrwuisdbnmngbkjsghhmndghjnfd.djverkest.workers.dev/

Page Load Overview

0.29s
Total Load Time
2
HTTP Requests
1
Domains
N/A
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:60%
Script:Cyrillic
Direction:ltr

Detection Details

Language Code:ru
Detection Confidence:60%
Script Type:Cyrillic
Text Length:149 chars
Detector Agreement:100%

Website Classification

Primary Category

government public service73% confidence
Type: webapp
Method: ml+structural

All Detected Categories

government public service
73%
adult content
68%
healthcare medical
64%
news media journalism
63%
finance banking
60%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2172.67.134.235Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
21--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T179636678B102DC5EBD7368FFFCA81FD15014EE5BEECC6AC5004E846A6BE486A35181D6

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:WnW84+TjaRNpEA7hhhfBLmUQOD6vxomfJUa7oJIUKs9LwxQmWs9+QSZz9iqOhyWY:2aZDBRVhQSZ4qOh9rc

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:72627:gBQEnICKgkCFzGAB6IATR04UAMwRD5QdYcHUQSVABFQ2KBDQAhiGYQA8NkEJYxU3KpwhEGgwCgSoCDEhlUSDKp2BApMBIo6Y

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:e7e7e7e7e7e7ffff
Perceptual Hash:b333cc2333cccc33
Difference Hash:0c0c0c0c4a0c0000
Wavelet Hash:03030303c3c3ffff
Color Hash:#e0b96c

Other Hashes

Crop Resistant:0c0c0c0c4a0c0000

Scan History

Scan history not available

Unable to load historical scan data