nekofreegateway.dancerblade70.workers.dev
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of nekofreegateway.dancerblade70.workers.dev
This domain appears to host a small web page branded as "NekoWebFree," presenting free systems, kits, and tools for Roblox creators. Based on the page title and visible content, the site promotes downloadable or installable assets such as base kits, chat systems, carry rigs, NPCs, mounts, admin tools, music players, and camera or studio-related components intended for use in Roblox projects.
The site does not appear to represent an official Roblox property. Instead, it looks like an independently operated resource page hosted on a Cloudflare Workers subdomain rather than on a standalone branded domain. The presentation suggests a niche gaming or developer-resource website aimed at Roblox users seeking free add-ons, templates, or creator tools.
The page also references a YouTube presence and includes media assets and JavaScript libraries loaded from common third-party content sources. Based on available content, the website appears to function primarily as a promotional landing page for Roblox-related resources rather than as a broad consumer service or mainstream platform.
Safety Assessment for nekofreegateway.dancerblade70.workers.dev
Scan results indicate notable risk signals at the time of this scan. The domain was flagged by 16 out of 91 security engines, with many of those detections classifying it as phishing or malicious. Although one malware scan did not identify flagged files and several major threat databases were clean, there was also one blacklist-style listing reporting a generic malicious-object classification, which adds to the cautionary picture.
The content shown in the screenshot does not obviously display a fake login page or payment form, but the combination of a very low trust score, lack of traffic ranking, hosting on a free subdomain, and broad multi-engine phishing detections may indicate that the site or its associated behavior has raised concerns beyond what is visible on the homepage alone. Free gaming-resource pages can sometimes be abused to distribute deceptive downloads, redirect users, or imitate legitimate services, so point-in-time visual inspection should not be treated as conclusive.
Technically, some signals are neutral to positive, such as valid HTTPS and clean results from several content-malice databases at the time of this scan. However, the weight of the multi-engine detections is significant. Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site uses a valid SSL/TLS certificate issued by a mainstream certificate authority, with expiration in 2026, and it is served through Cloudflare infrastructure on IP address 104.21.0.252. Hosting on Cloudflare Workers can be legitimate, but it also makes attribution less transparent because the scanned hostname is a subdomain under a shared platform rather than a dedicated primary domain. The server appears to be fronted by Cloudflare, and the page loads common external resources including fonts, a YouTube image thumbnail, and JavaScript libraries from a public package CDN.
DNSSEC appears to be unsigned, which is not uncommon but does mean DNS responses do not benefit from that additional integrity layer. No flagged files or iframes were reported in the provided malware scan, and DNS-based blocklist checks were clean. The main technical concern is therefore not the TLS setup itself, but the reputation-based phishing detections associated with the domain at the time of this scan.
Share your experience with this website. Was it safe? Did you encounter any issues?