sweet-base-be3a.masonscott641807.workers.dev
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of sweet-base-be3a.masonscott641807.workers.dev
This domain appears to be a subdomain hosted on the workers.dev platform, which is commonly used to deploy lightweight web applications and edge-hosted content through Cloudflare's infrastructure. The page title, "Meta for Business," suggests the site may be presenting itself as a business-related portal associated with Meta's advertising or account-management ecosystem.
Based on the available metadata, this does not appear to be a broad content website or established consumer service with its own independent branding. Instead, it looks more like a single-purpose hosted page or application endpoint. The use of a generated-looking subdomain string and a workers.dev hostname may indicate a temporary, campaign-specific, or custom-deployed page rather than an official corporate domain.
Safety Assessment for sweet-base-be3a.masonscott641807.workers.dev
Multiple security signals indicate elevated risk at the time of this scan. The domain was flagged by 15 out of 91 security engines, with the detections broadly classifying it as phishing or otherwise malicious. In addition, a major threat-database listing identified the page for social-engineering activity, and the page title "Meta for Business" raises concern because it may resemble branding associated with a well-known company while being hosted on an unrelated workers.dev subdomain.
The malware scan did not identify malicious files in the limited set of scanned resources, which can happen when a phishing page relies more on deceptive content and credential collection than on downloadable malware. The domain's IP address is also listed on one mail-reputation blocklist; this is a weaker signal than phishing detections, but it adds a small amount of caution. The domain itself is several years old, though that age likely reflects the parent workers.dev namespace rather than proving long-term legitimacy for this specific hosted page.
Following a manual review by the PCRisk team, the published trust score has been adjusted to reflect additional context. Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site is served over HTTPS with a valid TLS certificate issued by a mainstream certificate authority, and the infrastructure appears to be hosted behind Cloudflare. The resolved server IP is 188.114.97.2, with hosting geolocated to Toronto, Canada, and the web server identified as Cloudflare. DNS uses Cloudflare nameservers, and DNSSEC appears to be unsigned.
From a technical standpoint, the main concerns are reputational rather than transport-security related. The certificate validity and major CDN hosting do not by themselves indicate legitimacy, since phishing pages can also use reputable hosting and valid HTTPS. The page appears lightweight, with only a small number of scanned files and no iframes observed during this scan.
Share your experience with this website. Was it safe? Did you encounter any issues?