ldgrijsjbhj.malibu02.workers.dev
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of ldgrijsjbhj.malibu02.workers.dev
This domain is a subdomain hosted on the workers.dev platform, which is associated with serverless web applications and edge-hosted content. The hostname itself appears randomly generated rather than brand-oriented, which can make it difficult to infer a legitimate business or organizational identity from the name alone. Based on the available categorization data, the page has been associated by multiple web-classification providers with phishing and fraud-related activity.
The site appears to be delivered through Cloudflare infrastructure, and the visible resources referenced in the scan are primarily Cloudflare error-page and challenge assets. That suggests the scanned URL may be serving a protected page, an error/interstitial page, or content behind anti-bot controls rather than a conventional public-facing website with clear ownership and purpose. No clear operator identity is evident from the domain string or the supplied scan data.
Safety Assessment for ldgrijsjbhj.malibu02.workers.dev
Multiple independent security signals raise concern about this domain at the time of the scan. It was categorized by several web-classification providers as phishing or fraud-related, and 18 out of 91 security engines flagged it, with many of those detections specifically describing phishing behavior. Although blacklist databases included in this scan were largely clean and one malware scan did not identify malicious files, phishing pages often rely on deceptive forms and social engineering rather than downloadable malware, so a clean file scan does not materially offset the phishing-related classifications.
Additional context also supports caution. The domain is not ranked among widely visited sites, the hostname appears randomly generated, and it is hosted as a workers.dev subdomain rather than as a clearly branded standalone domain. While the parent workers.dev service is legitimate infrastructure, subdomains on shared platforms can be created for many different purposes, including short-lived abuse. Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site uses a valid TLS certificate issued by a mainstream certificate authority, with expiry listed as 2026-08-01. It is served through Cloudflare infrastructure from an IP address associated with Cloudflare hosting, and the web server is identified as Cloudflare. The referenced page assets also point to Cloudflare challenge and error-handling resources, which may indicate an interstitial or protected endpoint rather than a normal content page.
DNSSEC appears to be unsigned. The domain registration is several years old, but because this is a workers.dev subdomain, the age of the parent domain does not necessarily reflect the age or reputation of the specific subdomain being scanned. From a technical standpoint, the main concern in the supplied data is not TLS or hosting misconfiguration, but the concentration of phishing-related detections from security engines.
Share your experience with this website. Was it safe? Did you encounter any issues?