Security Scan: Sign in ・ Cloudflare Access

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/092cc79b-589f-45e3-a717-d683cc72aa28 Domain and IP registration (RDAP)/api/v1/rdap/092cc79b-589f-45e3-a717-d683cc72aa28 Certificate Transparency/api/v1/ct/gov-pk.cloudflareaccess.com How often this domain was scanned/api/v1/domain/stats/gov-pk.workers.dev Scan history for this domain/api/v1/domain/history/gov-pk.workers.dev?limit=15

This website contacted 4 IPs in 1 country across 2 domains to perform 2 HTTP transactions. The main domain is gov-pk.cloudflareaccess.com and was registered 7 years ago.

Submitted URL: https://www.gov-pk.workers.dev

Effective URL:

https://gov-pk.cloudflareaccess.com/cdn-cgi/access/login/www.gov-pk.wo...

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 92%

Risk Score

gov-pk.workers.dev — a hostname mimicking Pakistan's government namespace — is flagged by multiple feeds as APT Sidewinder malware infrastructure and serves a webmail login lure. Avoid; report.

Risk Factors (4)

Multi-source threat-intel attribution to APT Sidewinder malware infrastructure on the scanned hostname

Hostname impersonates the Government of Pakistan (gov.pk) via 'gov-pk'

Disposable Cloudflare Workers subdomain with unknown creation date used to host a webmail-themed login lure

Unranked in Cisco Umbrella; no verifiable legitimate owner or content

Domain age information unavailable

Details

Page Title

Scan Type

public

Domain Name Analysis

Within the developer-focused generic top-level domain (.dev), 'www.gov-pk.workers.dev' is registered; it also runs on subdomain 'www.gov-pk'. Its registrable label 'workers' stretches across 7 characters holding 2 vowels versus 5 consonants. Word splitting yields 1 word: workers. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

1.64s

Total Load Time

12 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:64%

Script:Latin

Direction:ltr

Detection Details

Text Length:117 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software64% confidence

Type: static

Method: ml+structural

All Detected Categories

technology software

64%

government

48%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
2	104.19.194.29Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
0	172.67.133.154Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
0	104.21.5.158Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
0	104.19.195.29Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	4	-	-