spring-disk-75bc.lixfaeeavflatrw.workers.dev
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of spring-disk-75bc.lixfaeeavflatrw.workers.dev
This domain is hosted on the workers.dev platform, which is a serverless web application environment commonly used to deploy lightweight web apps, redirects, APIs, and temporary web content. The hostname structure appears automatically generated rather than branded, which may indicate a disposable or campaign-specific subdomain rather than a long-established public-facing business website.
Based on the available scan context, there is no clear evidence of a conventional organization, publisher, or retailer operating this page under a recognizable brand identity. The domain does not appear to be ranked among widely visited websites, and no category metadata or visible business context was provided in the scan results, making its purpose difficult to verify from passive data alone.
Safety Assessment for spring-disk-75bc.lixfaeeavflatrw.workers.dev
Multiple security engines flagged this URL at the time of the scan, with 9 out of 91 reporting phishing or other malicious/suspicious classifications. That level of agreement is a meaningful warning sign, especially because the detections are centered on phishing-related behavior rather than a single isolated heuristic. At the same time, the malware scan summary did not identify flagged files, and major threat-database checks in the provided data did not report a direct content-malware listing.
The domain's IP address was also listed on one mail-reputation blocklist, which may indicate spam-related reputation issues on the hosting IP, although that signal is weaker than direct phishing detections and does not by itself prove harmful website content. Even so, the combination of repeated phishing classifications, lack of established traffic presence, and the generic disposable-looking subdomain pattern increases uncertainty. Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site uses a valid TLS certificate issued by Google Trust Services, with expiration shown as 2026-11-24. It is served through Cloudflare infrastructure on IP address 172.67.177.33, with Cloudflare nameservers and hosting also indicated. DNSSEC appears to be unsigned, which is not uncommon but does mean DNS responses do not benefit from DNSSEC validation.
From a security-review perspective, the infrastructure itself is mainstream, but infrastructure legitimacy should not be treated as proof of site trustworthiness. The main concerns in this scan come from reputation signals rather than transport security: several security engines flagged the URL for phishing, while the page showed no extracted files, links, or iframes in the provided scan data.
Share your experience with this website. Was it safe? Did you encounter any issues?