Security Scan: IIS7

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/ea990f0c-b0a0-4720-a96a-86dc121c03a6 Domain and IP registration (RDAP)/api/v1/rdap/ea990f0c-b0a0-4720-a96a-86dc121c03a6 Certificate Transparency/api/v1/ct/app-server.comof72509.workers.dev How often this domain was scanned/api/v1/domain/stats/app-server.comof72509.workers.dev Scan history for this domain/api/v1/domain/history/app-server.comof72509.workers.dev?limit=15

This website contacted 2 IPs in 1 country across 1 domain to perform 3 HTTP transactions. The main domain is app-server.comof72509.workers.dev and was registered 7 years ago.

Submitted URL: https://app-server.comof72509.workers.dev

AI Security Verdict

Confirmed Scam

Confidence: 92%

Risk Score

Multi-feed malware Indicators of Compromise (APT UNC2465) against the page's own domain and its parent namespace; page is a contentless 'IIS7'-titled lure on a free workers.dev subdomain. Malware distribution infrastructure.

Risk Factors (4)

Multi-source corroborated malware Indicators of Compromise naming an APT (UNC2465) on the primary domain of the scanned page

Same APT UNC2465 malware attribution repeated on the parent namespace, indicating dedicated malicious infrastructure

No substantive page content despite a product-style title ('IIS7'), consistent with a malware delivery lure

Unranked free-hosting subdomain with unknown creation date and no legitimate reputation

Domain age information unavailable

Details

Page Title

IIS7

Scan Type

public

Favicon Hash

MMH3: 1172844037

MD5: 19a7bd9efc19ad8ffb5600cd5fd0c36f

Domain Name Analysis

The domain name 'app-server.comof72509.workers.dev' uses the developer-focused generic top-level domain (.dev) and includes subdomain 'app-server.comof72509'. The core label 'workers' covers 7 characters containing 2 vowels alongside five consonants. Segmentation suggests one word: workers. No strong language cues emerged from the frequency lists.