ScanMalware.com

Security Scan Report: fr-empty-voice-330d.2415054122105.workers.dev

Site favicon
Submitted: Aug 9, 2026, 1:50:07 PMCompleted: Aug 9, 2026, 1:51:27 PMpubliccompleted
Loading additional data...

Summary

This website contacted 3 IPs in 1 country across 3 domains to perform 2 HTTP transactions. The main domain is fr-empty-voice-330d.2415054122105.workers.dev and was registered NaN years ago.

Submitted URL: https://fr-empty-voice-330d.2415054122105.workers.dev/

AI Security Verdict

Confirmed Scam

Confidence: 92%

10
Risk Score

Page impersonates DGFiP and harvests bank details on an unknown, unranked subdomain – confirmed scam.

Risk Factors
Brand impersonation of a government agency
Payment/credential collection form on unknown subdomain
Unranked / low‑reputation domain
Unknown creation date (potentially brand‑new)
Domain age information unavailable

Details

Page Title

Remboursement – DGFiP

Scan Type

public

Language

🇫🇷

French

(80% confidence)

Category

e-commerce

(40%)

Domain Information

The domain name 'fr-empty-voice-330d.2415054122105.workers.dev' uses the developer-focused generic top-level domain (.dev); it also runs on subdomain 'fr-empty-voice-330d.2415054122105'. The registrable portion 'workers' spans 7 characters holding 2 vowels versus five consonants. Breaking it apart gives one word: workers. Median word length comes out to seven characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://fr-empty-voice-330d.2415054122105.workers.dev/

Page Load Overview

0.81s
Total Load Time
13
HTTP Requests
5
Domains
471 KB
Total Size

Language Analysis

Primary Language

🇫🇷French
Code: fr
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:fr
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:fr
Text Length:1,715 chars
Detector Agreement:67%

Website Classification

Primary Category

e-commerce40% confidence
Type: static
Method: structural

All Detected Categories

e-commerce
40%

Detected Features

Payment

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
5172.67.208.26Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
474.125.29.95Google · CDNUnited States
AS15169Google LLC
4104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
133--

Detected Technologies3

HTTP/3
40%
Cloudflare Bot Management
40%
Cloudflare
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T157B27B5028F1ECB340DB48D919764A2A6DF84347D65A0148FBAD87FA2FFACADD233415

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:n0A+ZsBYoYXw83G2BvewVeb1DojqXP2Bm5R82BmP:n0As/FLBv5Vy1DojqXe21c

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:24910:JYAtcYuIphpIKYKgYEQgj0NQakCKGgLQ1AQgECBCwRKBic+RTr2JFMYFBxECAlJSAwHgGIEgFIEEW+I2EQ01kFKDA4KYBNon

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:7ffeffffff00ffff
Perceptual Hash:84c4df1b91a72ba9
Difference Hash:c420a68ec8510000
Wavelet Hash:3e0013634e00ffff
Color Hash:#6cb9e0

Other Hashes

Crop Resistant:c06022c6868cc851,0000000000000000,0000001010100800,0000005e88980012

Scan History

Scan history not available

Unable to load historical scan data