ScanMalware.com

Security Scan Report: registro-cita-digital-yrhan-2026.cr-web.workers.dev

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/54a6213d-88e5-44e9-86ea-cfe8f15521bcDomain and IP registration (RDAP)/api/v1/rdap/54a6213d-88e5-44e9-86ea-cfe8f15521bcHow often this domain was scanned/api/v1/domain/stats/registro-cita-digital-yrhan-2026.cr-web.workers.devScan history for this domain/api/v1/domain/history/registro-cita-digital-yrhan-2026.cr-web.workers.dev?limit=15
This website contacted 2 IPs in 1 country across 1 domain to perform 15 HTTP transactions. The main domain is workers.dev and was registered 7 years ago.

Submitted URL: https://registro-cita-digital-yrhan-2026.cr-web.workers.dev

AI Security Verdict

High Risk

Confidence: 72%

7
Risk Score

Unofficial workers.dev page impersonating the Unión Nacional de Gobiernos Locales' national declaration system. No forms yet, but the deceptive host and government-branding make it high risk.

Risk Factors (5)
Brand impersonation of a government/municipal body on a non-official domain
Deceptive hostname resembling an official registry/appointment portal
Shared free hosting subdomain (workers.dev) with unknown and potentially very recent creation
Unranked domain with no legitimate reputation supporting the government claim
Page built around collecting real-estate/asset declaration data, a common phishing lure subject
Domain age information unavailable

Details

Page Title

Trámite municipal

Scan Type

public

Domain Name Analysis

Domain 'registro-cita-digital-yrhan-2026.cr-web.workers.dev' uses the developer-focused generic top-level domain (.dev); it also runs on subdomain 'registro-cita-digital-yrhan-2026.cr-web'. Its registrable label 'workers' stretches across 7 characters with 2 vowels and 5 consonants. Breaking it apart gives one word: workers. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://registro-cita-digital-yrhan-2026.cr-web.workers.dev

Page Load Overview

1.21s
Total Load Time
126 KB
Total Size

Language Analysis

Primary Language

🇪🇸Spanish
Code: es
Confidence:29%
Script:Latin
Direction:ltr

Detection Details

Text Length:1,554 chars
Detector Agreement:33%

Website Classification

Primary Category

real estate property99% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

real estate property
99%
government public service
88%
adult content
41%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
8104.21.33.193Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7172.67.191.247Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
152--

Detected Technologies4

HTTP/3
40%
Cloudflare Bot Management
40%
Cloudflare
40%
React
30%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T178A1A4B27C858EA36997558CF006E70FA08BC51DE17A88D4F2EC978C03D1D998E958E1

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:XaNYq7utRyYjqfk4nuJDQ9DHYTeApDHvjcvyWGgL0lbw1n9J:qNYq7u6Yjq841GXvjcvyHM9J

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:5004:EoUVCByYgE0GCAjQUIUQgBAABIEAAILiARACEHCCBgARwoCCgihAkDQAYAUwAIgBYCFAgogBBAAIC1BwEAGZDBAYoKECAQIh

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00e7ffffffe7ffff
Perceptual Hash:b3010929095d7f7f
Difference Hash:97cc0c0c0c0d0c0c
Wavelet Hash:0000e6e6e6e7e7e6
Color Hash:#643a78

Other Hashes

Crop Resistant:97cc0c0c0c0d0c0c,8a8b87999aea4cca,ffff9f9c9c9fffff

Scan History

Scan history not available

Unable to load historical scan data