ScanMalware.com

Security Scan Report: 13aw2r55bh.dual3231-1.workers.dev

Site favicon
Submitted: Aug 4, 2026, 12:45:22 AMCompleted: Aug 4, 2026, 12:47:32 AMpubliccompleted
Loading additional data...

Summary

This website contacted 3 IPs in 2 countries across 3 domains to perform 3 HTTP transactions. The main domain is 13aw2r55bh.dual3231-1.workers.dev and was registered NaN years ago.

Submitted URL: https://13aw2r55bh.dual3231-1.workers.dev/l/QEWvWrkI-z0

AI Security Verdict

High Risk

Confidence: 72%

7
Risk Score

The site mimics DocuSign but lacks credential collection; treat as moderate risk due to brand impersonation on an unknown, unranked subdomain.

Risk Factors
Brand impersonation on an unranked subdomain
Unknown subdomain age (could be newly created)
Lack of legitimate branding verification
Domain age information unavailable

Details

Page Title

cd - DocuSign

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

technology software

(48%)

Domain Information

Domain '13aw2r55bh.dual3231-1.workers.dev' uses the developer-focused generic top-level domain (.dev) and includes subdomain '13aw2r55bh.dual3231-1'. Its registrable label 'workers' stretches across 7 characters holding two vowels versus five consonants. Breaking it apart gives 1 word: workers. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://13aw2r55bh.dual3231-1.workers.dev/l/QEWvWrkI-z0

Page Load Overview

4.83s
Total Load Time
4
HTTP Requests
3
Domains
0 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:403 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software48% confidence
Type: static
Method: ml+structural+ocr_tiebreaker

All Detected Categories

technology software
48%
documentation technical
44%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2172.67.141.32Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.21.81.129Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1195.181.175.41Frankfurt am Main, Hesse, Germany
AS60068Datacamp Limited
43--

Page Statistics

4
Requests
3
Unique Domains
6.8 KB
Total Size

Detected Technologies4

HTTP/3
40%
Cloudflare Bot Management
40%
Cloudflare
40%
Ghost
15%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1C5F2D8F2B181640FF607881DA1B5B38D32114247D34B9F29FEA875B2E9C65E3967239C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:M9+062pqFrHWfs8DtDPS6a6oXXssDKN1nWC:m+062pqGs8DtDPSH6oXXssDKN1nWC

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:35731:Cgklm+os0VW6wmAkAi0CzI84iAICQxAWSAhAMQBExYipUFcEEzLCBEViBUBAqGAbBDhpHVEiFhUSQCDVUYCidIXBCARaRJhV

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:1f1f1f1f1f1f1f1f
Perceptual Hash:9c169269923f6d96
Difference Hash:b4b6b4b2b2b3b3b4
Wavelet Hash:0f0f0f0f0f0b0f1f
Color Hash:#2dd267

Other Hashes

Crop Resistant:80a8908c88968ea0,ffffeff7f3efffff

Scan History

Scan history not available

Unable to load historical scan data