red-block-531fly.clyde-e0f.workers.dev
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Quttera Web Malware Removal is a paid subscription service. Pricing, plans, and trial availability are set by Quttera. Quttera is operated by Quttera Ltd, an independent third-party company unrelated to RCS LT. PCRisk.com may earn a referral commission when users sign up through this link.
Description of red-block-531fly.clyde-e0f.workers.dev
This domain appears to be a page hosted on Cloudflare Workers rather than an official standalone news website. The screenshot shows a layout closely resembling CNN, including branding, navigation labels, and article-style content blocks, which suggests the page may be presenting itself as a news portal or a copy of a well-known media homepage.
The hostname structure is unusual for a public-facing media outlet: it uses a long subdomain under workers.dev, a platform commonly used for serverless applications, testing, redirects, and temporary deployments. Based on the domain pattern and the visible page content, this site may be a hosted replica or imitation page rather than an official property operated by the news organization shown in the screenshot.
Safety Assessment for red-block-531fly.clyde-e0f.workers.dev
Several scan signals indicate elevated risk at the time of this scan. The domain was flagged by 6 out of 91 security engines, with multiple detections classifying it as phishing. In addition, a malware scan returned a suspicious result on the main page path. Although major blacklist checks shown here were clean, multi-engine phishing detections are a stronger concern than a single generic heuristic, especially when paired with a page that visually resembles a major news brand.
The domain name does not match the branding shown on the page, and the site appears to closely resemble CNN while being hosted on a workers.dev subdomain. That mismatch may indicate a look-alike page intended to imitate a trusted publisher. The lack of ranking, the unusual subdomain format, and the phishing-oriented detections further increase concern.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site is served over HTTPS with a valid TLS certificate issued by Google Trust Services, and it is hosted through Cloudflare infrastructure with an IP address geolocated to Toronto, Canada. The domain has been registered for several years and is set to expire in 2027, which can sometimes lend operational stability, although age alone does not reduce content-related risk.
DNSSEC appears to be unsigned, and the server software/protocol details were not identified in the scan data. The most notable technical concern is not the certificate or hosting layer, but the combination of Cloudflare Workers hosting, a non-brand-matching subdomain, and phishing detections from multiple security engines at the time of this scan.
Share your experience with this website. Was it safe? Did you encounter any issues?