Security Scan Report: formulario-cita-digital-rgbsha-2026.cr-web.workers.dev

Submitted: Completed: publiccompleted
This website contacted 2 IPs in 1 country across 1 domain to perform 19 HTTP transactions. The main domain is workers.dev and was registered 7 years ago.

Submitted URL: https://formulario-cita-digital-rgbsha-2026.cr-web.workers.dev

AI Security Verdict

High Risk

Confidence: 65%

7
Risk Score

A 'Citas CR' / national digital-certification appointment portal on a random free workers.dev subdomain — an impersonation pattern with a registration funnel, though no credential form was captured.

Risk Factors (4)
Impersonation of a government/national digital-certification service on a hostname that is clearly not its official domain
Free hosting platform subdomain with an obfuscated random identifier typical of disposable phishing deployments
Registration/account funnel presented under a government-service guise with no verifiable owner or official branding
No registered reputation, no published age, no contact or legal imprint, and no third-party verification
Domain age information unavailable

Details

Page Title

Citas CR

Scan Type

public

Domain Name Analysis

You're looking at domain 'formulario-cita-digital-rgbsha-2026.cr-web.workers.dev' on the developer-focused generic top-level domain (.dev) with subdomain 'formulario-cita-digital-rgbsha-2026.cr-web'. Its registrable label 'workers' stretches across 7 characters containing two vowels alongside five consonants. Tokenizing the label suggests one word: workers. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://formulario-cita-digital-rgbsha-2026.cr-web.workers.dev

Page Load Overview

0.83s
Total Load Time
430 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:43%
Script:Latin
Direction:ltr

Detection Details

Text Length:105 chars
Detector Agreement:50%

Website Classification

Primary Category

cryptocurrency blockchain59% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

cryptocurrency blockchain
59%
phishing scam
59%
adult content
51%
government public service
50%
finance banking
47%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
10104.21.33.193Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
9172.67.191.247Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
192--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1425162C2ED4BCE3A00176C9DB41AAF1EA41AC62DC569884CB6FC919C03A5F9E0E0ED44

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

48:rsz4GoGmeq7OPQdjuMHTay7CC767sk4U9AtydEPKjMo340o3/SRv0ZlBdIW1Bpu:rlPCq7uxUk46SydEoQSRv0v1nu

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:2519:IAACAAUAAEAAAQCBQJUgAAAEEAoAAJIAAAAhAuAACAAIAAAAAAAAkAEACAAUABAEAIAgASgECAAIAEACAACAAEAAAgEqAYAA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff00761001456040
Perceptual Hash:e2bed5aad9c4c0c1
Difference Hash:4d0d84e5918d8cde
Wavelet Hash:ff01771341f76242
Color Hash:#d22d88

Scan History

Scan history not available

Unable to load historical scan data