delicate-darkness-0d16.vu6023546.workers[.]dev
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of delicate-darkness-0d16.vu6023546.workers[.]dev
This domain is a subdomain hosted on the workers.dev platform, which is associated with serverless web applications and edge-hosted content delivery. Rather than representing a conventional standalone brand website, it appears to be a custom endpoint deployed under a shared hosting namespace, likely operated through a Cloudflare Workers account.
Based on the domain structure and the absence of clear category metadata, the site may be serving a lightweight web app, redirector, landing page, or temporary hosted content. The hostname itself does not indicate an established organization or recognizable public-facing service, and no clear business, publisher, or institutional operator can be identified from the available scan data alone.
Safety Assessment for delicate-darkness-0d16.vu6023546.workers[.]dev
The scan results indicate mixed but concerning signals. At the time of this scan, 5 out of 92 security engines flagged the URL, with detections broadly associated with phishing, malware, and spam-related behavior. While blacklist data included some clean results and not all scanners agreed, a multi-engine detection pattern of this kind is more significant than a single isolated heuristic alert.
Additional context is somewhat limited because the malware scan reported no scanned files, no flagged files, and no discovered external links or iframes. The domain is also relatively old for this type of hosting endpoint, which can sometimes reduce suspicion, but age alone does not outweigh active phishing or malware-related detections. The use of a shared workers.dev subdomain may also make attribution more difficult and can be consistent with disposable or rapidly deployed content.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site is hosted behind Cloudflare infrastructure and resolves to a Cloudflare IP address, with a valid Let's Encrypt SSL certificate observed at the time of the scan. The web server appears to be fronted by Cloudflare, and the domain uses Cloudflare nameservers. DNSSEC was not enabled according to the provided data, which is not uncommon but does mean DNS responses may have less cryptographic assurance.
No malicious files, external links, or iframe activity were identified in the supplied scan output, but that visibility was limited because the malware scan reported zero files examined. From a technical standpoint, the main concern is not TLS configuration but the reputation-based detections from multiple security engines combined with the low trust score and the ephemeral nature often associated with hosted worker subdomains.
Share your experience with this website. Was it safe? Did you encounter any issues?