trnlnksdjgk.soha33.workers[.]dev
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of trnlnksdjgk.soha33.workers[.]dev
This domain appears to be a subdomain hosted on the workers.dev platform, which is commonly used to deploy serverless web applications and lightweight web endpoints through Cloudflare infrastructure. The hostname itself does not indicate a recognizable brand, organization, or public-facing service, and the available category data does not provide evidence of a clearly defined business or content purpose.
Based on the domain structure and hosting context, this URL may be part of a temporary, custom, or programmatically generated deployment rather than a conventional standalone website. Such subdomains can be used for legitimate testing or application delivery, but they may also be used for short-lived campaigns because they are easy to create and distribute.
Safety Assessment for trnlnksdjgk.soha33.workers[.]dev
Scan results indicate elevated risk signals at the time of this scan. The URL was flagged by 13 out of 94 security engines, with multiple detections describing the page as phishing or otherwise malicious. Although one malware scan did not identify infected files or suspicious embedded resources, that result does not outweigh the broader reputation-based findings from multiple independent security systems.
Additional context also raises concern: the domain has no meaningful popularity ranking, does not present a clearly attributable brand identity, and uses a random-looking subdomain on a shared hosting platform. While blacklist coverage was mixed and several threat databases did not list it at the time of review, phishing pages are often short-lived and may not appear consistently across all data sources.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site is served through Cloudflare infrastructure and resolves to an IP address associated with that network in Toronto, Canada. It presents a valid TLS certificate issued by a mainstream certificate authority, with expiration in 2026. The presence of HTTPS indicates encrypted transport, but this should not be interpreted as evidence of legitimacy because phishing pages also commonly use valid certificates.
DNSSEC appears to be unsigned, which means DNS responses may not benefit from that additional layer of authenticity protection. The domain is registered through Cloudflare and has existed for several years, but because this is a workers.dev subdomain on a shared platform, the age of the parent registration may be less meaningful than it would be for a dedicated standalone domain.
Share your experience with this website. Was it safe? Did you encounter any issues?