Security Scan: Sign in ・ Cloudflare Access

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/8969ae5c-197c-4bb5-bdff-f6304662479a Domain and IP registration (RDAP)/api/v1/rdap/8969ae5c-197c-4bb5-bdff-f6304662479a Certificate Transparency/api/v1/ct/gov-pk.cloudflareaccess.com How often this domain was scanned/api/v1/domain/stats/gov-pk.workers.dev Scan history for this domain/api/v1/domain/history/gov-pk.workers.dev?limit=15

This website contacted 3 IPs in 1 country across 2 domains to perform 2 HTTP transactions. The main domain is gov-pk.cloudflareaccess.com and was registered 7 years ago.

Submitted URL: https://www.gov-pk.workers.dev

Effective URL:

https://gov-pk.cloudflareaccess.com/cdn-cgi/access/login/www.gov-pk.wo...

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 93%

Risk Score

Free workers.dev subdomain posing as Pakistani government webmail ('gov-pk'/'webmail-pnra'), gated by Cloudflare Access email capture, with malware Indicators of Compromise (APT Sidewinder) on the host — phishing.

Risk Factors (4)

Malware Indicators of Compromise on the scanned hostname (multi-source corroborated APT Sidewinder association)

Brand impersonation of a government webmail service on a free hosting subdomain

Email/identity collection form behind an access gate on a look-alike government name

Unranked domain with no legitimate business presence (legitimacy score 10/100)

Domain age information unavailable

Details

Page Title

Scan Type

public

Domain Name Analysis

Within the developer-focused generic top-level domain (.dev), 'www.gov-pk.workers.dev' is registered; it also runs on subdomain 'www.gov-pk'. The second-level label 'workers' is 7 characters long containing 2 vowels alongside 5 consonants. It segments into 1 word: workers. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

1.86s

Total Load Time

12 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:64%

Script:Latin

Direction:ltr

Detection Details

Text Length:117 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software64% confidence

Type: static

Method: ml+structural

All Detected Categories

technology software

64%

government

48%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
2	104.21.5.158Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
0	104.19.194.29Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
0	172.67.133.154Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	3	-	-