Security Scan: IIS7

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/e6da320a-d21c-4d22-9d37-77db7ef346b7 Domain and IP registration (RDAP)/api/v1/rdap/e6da320a-d21c-4d22-9d37-77db7ef346b7 Certificate Transparency/api/v1/ct/server-web-cdn.rojotoc516.workers.dev How often this domain was scanned/api/v1/domain/stats/server-web-cdn.rojotoc516.workers.dev Scan history for this domain/api/v1/domain/history/server-web-cdn.rojotoc516.workers.dev?limit=15

This website contacted 2 IPs in 1 country across 1 domain to perform 3 HTTP transactions. The main domain is server-web-cdn.rojotoc516.workers.dev and was registered 7 years ago.

Submitted URL: https://server-web-cdn.rojotoc516.workers.dev

AI Security Verdict

High Risk

Confidence: 80%

Risk Score

Multi-source threat-intel attributes this workers.dev host to APT UNC2465 malware infrastructure; content is an empty 'IIS7' placeholder with no legitimate purpose. Avoid.

Risk Factors (3)

Threat-intel attribution of the primary domain to APT UNC2465 malware infrastructure

Hosted on a throwaway workers.dev subdomain with unverifiable age and no domain reputation

Minimal/non-descriptive page content (title 'IIS7' only) with no legitimate functional purpose

Domain age information unavailable

Details

Page Title

IIS7

Scan Type

public

Favicon Hash

MMH3: 1172844037

MD5: 19a7bd9efc19ad8ffb5600cd5fd0c36f

Domain Name Analysis

You're looking at domain 'server-web-cdn.rojotoc516.workers.dev' on the developer-focused generic top-level domain (.dev) and includes subdomain 'server-web-cdn.rojotoc516'. Its registrable label 'workers' stretches across 7 characters containing two vowels alongside 5 consonants. Word splitting yields one word: workers. No strong language cues emerged from the frequency lists.