cq6d-kp22-3ota.talennvalyo8gy83.workers.dev
Category: Phishing
Show visitors cq6d-kp22-3ota.talennvalyo8gy83.workers.dev is safe
Add the PCrisk Trust Badge to cq6d-kp22-3ota.talennvalyo8gy83.workers.dev, re-scanned every 24 hours for malware & threats. A visible security seal reassures visitors, and that trust can turn into more sales, signups & calls.
Description of cq6d-kp22-3ota.talennvalyo8gy83.workers.dev
This domain appears to be a Cloudflare Workers-hosted page rather than a conventional standalone website. The hostname is a long, randomly generated subdomain under workers.dev, which is commonly used for serverless web applications, temporary landing pages, and custom web content delivered through Cloudflare’s edge network.
Based on the screenshot, the page presents itself as a "SharePoint File Share" interface and references a file named "Q4_Financial_Report.xlsx" with a prompt to complete a verification step before access. That presentation may indicate a document-sharing or access-gating page, but because it is hosted on a generic workers.dev subdomain instead of an obvious organizational domain, the operator and underlying purpose are not clearly identifiable from the available data.
Safety Assessment for cq6d-kp22-3ota.talennvalyo8gy83.workers.dev
At the time of this scan, automated malware and blacklist checks did not detect known malicious payloads or active blacklist listings. No threats were detected by the security engines referenced in the scan data, and the domain also appeared clean across the listed threat databases. The domain has also existed for several years, which can be a stabilizing signal when viewed in isolation.
However, the visible content raises contextual concerns that are not always captured by malware scanners alone. The page appears to imitate or reference a SharePoint-style file-sharing workflow and asks the visitor to complete a verification step to access a financial report, while being hosted on a generic workers.dev subdomain rather than a clearly branded corporate domain. That kind of mismatch may be consistent with a look-alike or access-harvesting setup, even when no malware is detected.
Based on these findings, this website may pose potential risks to visitors. While no threats were detected by automated scanners at the time of this scan, the page’s presentation and hosting context warrant caution.
Technical Description
The site is served over HTTPS with a valid TLS certificate issued by Google Trust Services, and it is hosted behind Cloudflare infrastructure on IP address 104.21.27.235. The web server is identified as Cloudflare, and the domain uses Cloudflare nameservers. This setup is common for edge-hosted applications and can provide performance and transport-layer protection.
The domain is approximately seven years old and remains registered through 2027. DNSSEC appears to be unsigned, which is not unusual but does mean DNS responses do not benefit from DNSSEC validation. No direct malware, flagged files, suspicious external links, or iframe-based issues were reported in the supplied scan data, though the use of a generic serverless subdomain for a branded document-access page may be a technical trust concern from a user-verification standpoint.
Share your experience with this website. Was it safe? Did you encounter any issues?