URL THREAT INTELLIGENCE · v0.5.0 · OPERATIONAL
The full anatomy of a phishing site,
one URL at a time.
ZeroPhish renders the page, runs twelve detection signals against the DOM, certificate chain, brand fingerprint and threat feeds, and returns a typed verdict. Built for security teams and product engineers.
100 scans / day · free
·
typical scan 2–4 s
·
try
SAFE · MEDIUM CONFIDENCE
No phishing signals detected
Risk score
0.20
20 / 100 · Low risk
URL anatomy
https
://
formulario-digital-2026-apknm.cr-web
.
workers
.
dev
/
flagged
registered domain
path
protocol / query
Indicators of compromise
| URL | hxxps://formulario-digital-2026-apknm[.]cr-web[.]workers[.]dev/ | |
| Host | formulario-digital-2026-apknm[.]cr-web[.]workers[.]dev | |
| Registered domain | workers[.]dev | |
| Brand | Union Nacional de Gobiernos Locales, Lafise | |
| Screenshot | https://cdn.zerophish.ai/a5ed0f45-6ce8-4b61-bebb-f8471bcbacc6.jpg | |
| Scan ID | c855f3b6-d9b1-44b2-84f1-806e7a5d0cc1 |
Related detections
|
17 d ago
|
SUSPICIOUS | formulario-digital-2026-apknm.cr-web.workers.dev | safe |
|
17 d ago
|
SUSPICIOUS | formulario-digital-2026-apknm.cr-web.workers.dev | safe |
|
17 d ago
|
PHISHING | registro-digital-ahop-2026.cr-web.workers.dev | view → |
|
17 d ago
|
PHISHING | registro-digital-ahop-2026.cr-web.workers.dev | view → |
|
17 d ago
|
PHISHING | formulario-digital-2026-apknm.cr-web.workers.dev | view → |
|
17 d ago
|
PHISHING | formulario-digital-2026-apknm.cr-web.workers.dev | view → |
Detection signals
Brand typo-squat detected
No similar legitimate brand within edit-distance 2
critical
Domain age
Awaiting analysis
high
Threat intel blocklists
Awaiting analysis
critical
Credential collection form
No credential collection form on visible content
high
Visual similarity to known brand
Brand presentation matches the registered owner
high
Favicon impersonation
Favicon matches the registered owner
medium
SSL certificate
Served over HTTPS · certificate validated by ApiFlash
low
DNS reputation
Awaiting analysis
medium
showing 8 of 12 ·
Captured page
Brand impersonation
U
Union Nacional de Gobiernos Locales, Lafise
0%
Technical profile
| Host | formulario-digital-2026-apknm.cr-web.workers.dev |
| Registered domain | workers.dev |
| Scheme | https |
| Content length | 44139 B |
| HTTP | 200 · text/html |
Analyst summary
Initial scan
The site seems to be a local government portal for a declaration form. The branding is consistent with ‘Union Nacional de Gobiernos Locales’ and ‘Lafise’, but the URL doesn’t contain these brand names which raises some suspicions. No credential form or favicon impersonation identified.