Security Scan: Sign in ・ Cloudflare Access

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/a4bc7cdf-c612-4330-bb36-9260c08b0314 Domain and IP registration (RDAP)/api/v1/rdap/a4bc7cdf-c612-4330-bb36-9260c08b0314 Certificate Transparency/api/v1/ct/gov-pk.cloudflareaccess.com How often this domain was scanned/api/v1/domain/stats/gov-pk.workers.dev Scan history for this domain/api/v1/domain/history/gov-pk.workers.dev?limit=15

This website contacted 3 IPs in 1 country across 2 domains to perform 2 HTTP transactions. The main domain is gov-pk.cloudflareaccess.com and was registered 9 years ago.

Submitted URL: https://www.gov-pk.workers.dev

Effective URL:

https://gov-pk.cloudflareaccess.com/cdn-cgi/access/login/www.gov-pk.wo...

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 94%

Risk Score

Government-branded workers.dev subdomain (PNRA webmail lure) with a multi-feed APT Sidewinder malware match and a corroborating malware-family indicator — a phishing/fraud page; do not enter credentials.

Risk Factors (5)

Multi-feed malware/APT threat-intelligence match on the scanned domain (APT Sidewinder)

Additional malware-family match (burrowshell/sloppylemming) on the www host

Impersonation of a Pakistani government webmail (PNRA) on a non-official disposable subdomain

Credential-collecting email/login-code flow under the impersonated brand

Disposable hosting subdomain with unknown creation date used for a government-brand lure

Domain age information unavailable

Details

Page Title

Scan Type

public

Domain Name Analysis

The domain name 'www.gov-pk.workers.dev' uses the developer-focused generic top-level domain (.dev) and includes subdomain 'www.gov-pk'. The registrable portion 'workers' spans 7 characters split between two vowels and five consonants. Tokenizing the label suggests 1 word: workers. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

3.58s

Total Load Time

12 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:64%

Script:Latin

Direction:ltr

Detection Details

Text Length:117 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software64% confidence

Type: static

Method: ml+structural

All Detected Categories

technology software

64%

government

48%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
2	104.19.194.29Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
0	104.21.5.158Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
0	172.67.133.154Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	3	-	-