Security Scan Report: formulario-cita-digital-afqv-2026.cr-web.workers.dev

Submitted: Completed: publiccompleted
This website contacted 2 IPs in 1 country across 1 domain to perform 19 HTTP transactions. The main domain is workers.dev and was registered 7 years ago.

Submitted URL: https://formulario-cita-digital-afqv-2026.cr-web.workers.dev

AI Security Verdict

High Risk

Confidence: 70%

7
Risk Score

Government-lookalike 'Sistema Nacional de Certificación Digital / Citas CR' page on an anonymous workers.dev subdomain steering users to register. No forms captured yet, but the branded impersonation makes it unsafe to engage.

Risk Factors (5)
Impersonation of a government-style 'Sistema Nacional de Certificación Digital' brand on a non-official domain
Deceptive hostname mimicking an official Costa Rican digital appointment/certificate form
Free instant-publishing hosting subdomain with no identifiable accountable operator
Registration/account-creation funnel ('Registrarse', 'Protección de Cuenta') on an unverified government-lookalike page
Unranked domain with unknown creation date
Domain age information unavailable

Details

Page Title

Citas CR

Scan Type

public

Domain Name Analysis

The domain 'formulario-cita-digital-afqv-2026.cr-web.workers.dev' uses the developer-focused generic top-level domain (.dev); it also runs on subdomain 'formulario-cita-digital-afqv-2026.cr-web'. Its registrable label 'workers' stretches across 7 characters split between two vowels and 5 consonants. Splitting it apart reveals one word: workers. Median word length comes out to 7 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://formulario-cita-digital-afqv-2026.cr-web.workers.dev

Page Load Overview

0.57s
Total Load Time
430 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:43%
Script:Latin
Direction:ltr

Detection Details

Text Length:105 chars
Detector Agreement:50%

Website Classification

Primary Category

cryptocurrency blockchain59% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

cryptocurrency blockchain
59%
phishing scam
59%
adult content
51%
government public service
50%
finance banking
47%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
10104.21.33.193Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
9172.67.191.247Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
192--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T19F5140D6DD4BCE2A01234D9DB41AAF2E605AC93EC978944CB6FCC19C02A4F9E0E4EC04

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

48:Xsz4GoGmeq7OPQdjuMHTayOCR4uYlpGdHmk4U9AtydEPKjMo340o3/SRv0ZlTIWQ:XlPCq7uxSYjxk46SydEoQSRv0z1nu

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:2681:gACBgQAQBAAAgUIQMIAAgABReAADIAACAAAAAAAAAAAAABBRgEAAAhBhCiDYAjAAIgIIQwAABgABAgABIAgAAAKFAEAAAAAA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff00761001456040
Perceptual Hash:e2bed5aad9c4c0c1
Difference Hash:4d0d84e5918d8cde
Wavelet Hash:ff01771341f76242
Color Hash:#79c8d2

Scan History

Scan history not available

Unable to load historical scan data