cfd.worksinc.app
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of cfd.worksinc.app
The domain cfd.worksinc.app appears to be a very recently registered subdomain under worksinc.app. Based on the hostname structure, the "cfd" label may refer to contracts for difference or a finance-related offering, but the available scan data does not show a normal business website, product catalog, or established service presence. The domain is not ranked among popular websites, which may indicate limited traffic or a newly deployed page.
The observed resources suggest the site was being served behind a content delivery and protection layer, with references to challenge and error-handling assets rather than clear end-user content. That can happen on legitimate sites as well as on short-lived campaign pages, so it should be treated as contextual rather than conclusive. Based on the available data, there is not enough evidence to identify a clearly established operator or a well-known organization behind this domain.
Safety Assessment for cfd.worksinc.app
This domain shows multiple risk indicators at the time of this scan. It was flagged by 18 out of 91 security engines, with many of those detections classifying it as phishing or otherwise malicious. In contrast, the malware file scan did not identify flagged files, and major blacklist databases included in the scan were largely clean. That combination can occur when a site is being identified for deceptive page behavior or credential-harvesting patterns rather than for serving malware files directly.
Additional context increases caution: the domain is only 71 days old, has no popularity ranking, and does not appear tied to a well-established public web presence based on the available data. The very low trust score provided with the scan is also consistent with a high-risk assessment. Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site was reachable through Cloudflare infrastructure, resolving to 188.114.97.2 and using Cloudflare nameservers. It presented a valid Let's Encrypt SSL certificate expiring on 2026-08-22, which indicates encrypted transport was configured at the time of testing. The web server was identified as Cloudflare, and the observed page assets included Cloudflare challenge and error-related resources.
DNSSEC appears to be unsigned, which is not uncommon but does mean DNS responses do not benefit from DNSSEC validation. The domain is very new, and the combination of recent registration, reverse-proxy hosting, and strong multi-engine phishing detections may warrant heightened scrutiny.
Share your experience with this website. Was it safe? Did you encounter any issues?