Security Scan: Citas CR

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/8c4ddc3e-55d7-4df0-abc3-4c5c8c91bb3a Domain and IP registration (RDAP)/api/v1/rdap/8c4ddc3e-55d7-4df0-abc3-4c5c8c91bb3aHow often this domain was scanned/api/v1/domain/stats/registro-digital-ayth-2026.cr-web.workers.dev Scan history for this domain/api/v1/domain/history/registro-digital-ayth-2026.cr-web.workers.dev?limit=15

This website contacted 2 IPs in 1 country across 1 domain to perform 40 HTTP transactions. The main domain is workers.dev and was registered 7 years ago.

Submitted URL: https://registro-digital-ayth-2026.cr-web.workers.dev

AI Security Verdict

High Risk

Confidence: 76%

Risk Score

A page wearing the Banco Central de Costa Rica brand on an unrelated free workers.dev subdomain, running an appointment/registration funnel. No credential form was captured, but the brand impersonation on a throwaway host makes it high-risk.

Risk Factors (4)

Impersonation of Banco Central de Costa Rica on a non-official, unrelated domain

Free instant-publish hosting subdomain (workers.dev) with unknown content age

Registration/appointment funnel soliciting personal data under a bank/government identity

Unranked domain mismatched with the claimed institution

Domain age information unavailable

Details

Page Title

Citas CR

Scan Type

public

Domain Name Analysis

The domain name 'registro-digital-ayth-2026.cr-web.workers.dev' uses the developer-focused generic top-level domain (.dev) and includes subdomain 'registro-digital-ayth-2026.cr-web'. The core label 'workers' covers 7 characters with two vowels and five consonants. Word splitting yields 1 word: workers. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

0.53s

Total Load Time

1.3 MB

Total Size

Language Analysis

Primary Language

🇪🇸Spanish

Code: es

Confidence:34%

Script:Latin

Direction:ltr

Detection Details

Text Length:155 chars

Detector Agreement:50%

Website Classification

Primary Category

finance banking54% confidence

Type: spa

Method: ml+structural

All Detected Categories

finance banking

54%

government public service

53%

healthcare medical

51%

adult content

51%

cryptocurrency blockchain

41%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
20	172.67.191.247Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
20	104.21.33.193Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
40	2	-	-

Detected Technologies4

HTTP/3

40%

Cloudflare Bot Management

40%

Cloudflare

40%

React

30%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T181D23C91AE88E01BF63B852E55C0F60871D9E60BFDF3085DF168D1408FD7E5E2A792A4

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:17her1YjFYjNYjOYjLYj6YjXYjXcYjeVYjGYjqYjn52Yk1K/o2bRBDcx6HfIXJ:9IhYkd21WXJ

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:30103:1EWVNKJCJgEoEyxlBGCAQAAYITgUKM1hUBsmGygShSK3EIah0AUCkgzBRwCYYUKWwgoCHGQF8CADKklCJUwA8AIKiAmAMIMA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff0006f672020000

Perceptual Hash:a4c29b9dc4f6b688

Difference Hash:f4738d86b63ebdf1

Wavelet Hash:ff0107f6ff070109

Color Hash:#99c587

Other Hashes

Crop Resistant:f4738d86b63ebdf1,3261da9d252dbaf0,8a162c495bb26749,2b3333aaac3b3ba9,f2f38ca6b63e90f0,d6992c56b6867d33

Scan History

Scan history not available

Unable to load historical scan data

Security Scan Report: registro-digital-ayth-2026.cr-web.workers.dev