ScanMalware.com

Security Scan Report: wild-sunset-9c10.jernzen26.workers.dev

Redirected to:
blob:https://crimson-boat-8e3d.doyleglover7430.workers.dev/4c2210e9-3d...
Site favicon
Submitted: Sep 11, 2026, 12:45:12 AMCompleted: Sep 11, 2026, 12:46:31 AMpubliccompleted

Summary

This website contacted 4 IPs in 1 country across 4 domains to perform 2 HTTP transactions. The main domain is and was registered 7 years ago.

Submitted URL: https://wild-sunset-9c10.jernzen26.workers.dev/7f8cb480bdf8513e4643/b68c5a180dafad7/

Effective URL: blob:https://crimson-boat-8e3d.doyleglover7430.workers.dev/4c2210e9-3dc6-45a5-bffe-08451d1f3143Redirected

AI Security Verdict

High Risk

Confidence: 80%

8
Risk Score

Page impersonates Microsoft OneDrive and harvests credentials on an unknown-age, unranked subdomain – high risk of phishing.

Risk Factors
Brand impersonation on unknown-age subdomain
Credential collection via login form
Unranked domain with no reputation
Potential phishing kit layout (Microsoft branding)
External links to suspicious domains
Domain age information unavailable

Details

Page Title

OneDrive

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

unknown

(0%)

Domain Information

Domain 'wild-sunset-9c10.jernzen26.workers.dev' uses the developer-focused generic top-level domain (.dev) and includes subdomain 'wild-sunset-9c10.jernzen26'. The registrable portion 'workers' spans 7 characters containing two vowels alongside five consonants. It segments into 1 word: workers. Expect 7 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://wild-sunset-9c10.jernzen26.workers.dev/7f8cb480bdf8513e4643/b68c5a180dafad7/

Page Load Overview

5.34s
Total Load Time
6
HTTP Requests
4
Domains
61 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:469 chars
Detector Agreement:100%

Website Classification

Primary Category

unknown0% confidence
Type: webapp
Method: structural

All Detected Categories

No categories detected

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3142.251.20.95Google · CDNUnited States
AS15169Google LLC
1104.21.62.167Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1198.54.121.227United States
AS22612Namecheap, Inc.
1172.67.137.139Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
64--

Page Statistics

6
Requests
4
Unique Domains
68.0 KB
Total Size

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1F2324B895E836F9D4B90F040EECC9EFD1C3EBBD93871588D665301884964A6E5CF91EC

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:REajUCA0WoWFsWsJWHCHNZ0CMe+VuPL+seCCYnQfqS4OIg:uUUCA0PheCZljwKxrO7

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:11481:gu0YyI3GPUpvQCOLQkBk+AFAAFqAwIxJAYCDAQRBKEmKxB9HcFA8AAFyjkBLJgsSDiEikQgGBARBIbEXDUgUToBkcMcAydAC

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:e7c3c0e7e3e1ffff
Perceptual Hash:e3369863969d49d8
Difference Hash:4c4d0f4c4e8f2304
Wavelet Hash:c3c38082c2c0ffff
Color Hash:#e06ccc

Other Hashes

Crop Resistant:4c4d0f4c4e8f2304,6c4e4d444c0d4d4d

Scan History

Scan history not available

Unable to load historical scan data