trozr-oiwed.azulab24.workers.dev
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of trozr-oiwed.azulab24.workers.dev
The domain trozr-oiwed.azulab24.workers.dev appears to be a subdomain hosted on Cloudflare's Workers platform, which is commonly used to deploy serverless web applications, redirects, APIs, and lightweight web pages. The hostname structure suggests this is not a primary branded website but rather a custom worker endpoint under the workers.dev service.
Based on the available scan context, the page does not present a clearly identifiable business, publisher, or organization name. The domain itself appears machine-generated or non-descriptive, which can make ownership and purpose harder to verify from the hostname alone. No established website category was provided in the scan metadata, and the observed resources mainly reference Cloudflare error-handling and challenge infrastructure.
Safety Assessment for trozr-oiwed.azulab24.workers.dev
Multiple security engines flagged this URL as phishing at the time of the scan, with 8 out of 91 engines reporting malicious or phishing-related detections. That level of agreement is a meaningful warning sign, especially because the detections are specifically related to phishing rather than a vague heuristic label. Although the malware file scan did not identify malicious files, file-based scans do not always detect credential-harvesting pages or short-lived phishing content.
Blacklist and threat-database results were mixed. Several major content-focused threat databases did not list the domain at the time of the scan, but the domain's IP address was listed on one mail-reputation blocklist. That DNS-based listing is a weaker signal than direct phishing detections and may relate to IP reputation rather than website content, but it still adds some caution. The domain is several years old, which can sometimes reduce risk, yet age alone does not offset repeated phishing classifications on a hosted subdomain. Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site uses a valid TLS certificate issued by Google Trust Services, with expiry shown as 2026-09-07. It is hosted behind Cloudflare infrastructure on IP address 172.67.191.242, with Cloudflare listed as both hosting provider and web server layer. The domain uses Cloudflare nameservers and appears to be deployed through the workers.dev platform.
DNSSEC is unsigned, which is not uncommon but means DNS responses do not benefit from DNSSEC validation. No malicious files, flagged external links, or iframes were identified in the provided scan output, but the combination of a generic-looking workers.dev subdomain and multi-engine phishing detections suggests the main concern is likely page behavior or social-engineering content rather than exploit delivery.
Share your experience with this website. Was it safe? Did you encounter any issues?