qg77-ljfe-7fsc.chris-titanbooths-com-s-account.workers.dev
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of qg77-ljfe-7fsc.chris-titanbooths-com-s-account.workers.dev
This domain is a subdomain hosted on the workers.dev platform, which is commonly used to deploy serverless web applications and temporary web endpoints through Cloudflare infrastructure. The hostname structure is unusually long and machine-generated in appearance, and it incorporates the string "chris-titanbooths-com-s-account," which may suggest it was created for a specific campaign, account namespace, or delegated project rather than as a primary public-facing brand website.
Based on the available scan context, the site does not appear to represent a well-established standalone business or content platform. It is not ranked in major traffic measurements, and no clear category metadata was provided by classification sources. Given the phishing-related detections and the use of a hosted subdomain rather than a dedicated branded domain, this endpoint appears more consistent with a transient web page or campaign-style deployment than with a conventional long-term website.
Safety Assessment for qg77-ljfe-7fsc.chris-titanbooths-com-s-account.workers.dev
Multiple security engines flagged this URL at the time of this scan, with 17 out of 91 detections identifying phishing, malware, or other suspicious behavior. That level of agreement is a meaningful warning sign, especially because the detections are concentrated around credential-theft and malicious-site classifications rather than a single isolated heuristic. The domain also has no meaningful traffic ranking, which can further increase uncertainty when combined with a disposable-looking subdomain structure.
At the same time, some other checks were clean: the page-level malware scan did not identify flagged files, and several major threat databases did not list the domain at the time of review. However, the domain's IP address was listed on one mail-reputation blocklist, which is a weaker signal than direct phishing or malware listings but still worth noting. Taken together, the stronger signal here is the multi-engine phishing consensus rather than the clean file scan. Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site uses a valid SSL certificate issued by Google Trust Services, with expiry shown as 2026-11-02, and it is served through Cloudflare infrastructure on IP address 172.67.164.170. The web server and hosting both appear to be provided by Cloudflare, and the domain uses Cloudflare nameservers. DNSSEC appears to be unsigned at the time of this scan.
From a technical standpoint, the infrastructure itself is common and widely used, but that does not by itself indicate legitimacy. The combination of a workers.dev-hosted subdomain, an unusually generated hostname, lack of traffic ranking, and substantial phishing-related detections may indicate a disposable or campaign-based deployment. No malicious files were identified in the limited file scan, but that does not rule out phishing content or short-lived abuse.
Share your experience with this website. Was it safe? Did you encounter any issues?