tzr-oeknj.destiny72.workers.dev
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of tzr-oeknj.destiny72.workers.dev
This domain appears to be a subdomain hosted on the workers.dev platform, which is commonly used to deploy serverless web applications and edge-hosted content through Cloudflare infrastructure. The hostname format is machine-generated rather than brand-oriented, and there is no clear public-facing identity in the available scan data indicating a business, organization, or publisher behind it.
Based on the domain structure and the scan context, this URL may be serving temporary, programmatic, or campaign-specific content rather than a conventional website with established branding. The referenced resources point largely to Cloudflare error-handling and challenge pages, which suggests the scanned page may have been behind protective filtering, unavailable at the time of access, or configured in a way that exposed infrastructure-level content instead of normal site content.
Safety Assessment for tzr-oeknj.destiny72.workers.dev
Multiple security engines flagged this URL as phishing at the time of the scan, with 14 out of 91 detections. That level of consensus is a meaningful warning signal, especially because the detections are concentrated around phishing-related classifications rather than a single low-confidence heuristic. The domain also has no measurable traffic ranking in the provided data, which can be consistent with low-visibility or short-lived campaign infrastructure.
At the same time, some other checks were less conclusive: the malware scan did not identify flagged files, and major threat-database checks in the provided results did not report active listings for malware or phishing content at the time of this scan. However, the domain's IP address was listed on one mail-reputation blocklist, which is a minor cautionary signal but not, by itself, proof of harmful web content.
Taking the available evidence together, the phishing detections from multiple security engines outweigh the cleaner file-scan results. Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site is served through Cloudflare infrastructure on IP address 104.21.3.120, with a valid TLS certificate issued by Google Trust Services and an expiry date of 2026-09-29. The web server appears to be Cloudflare, and the domain uses Cloudflare nameservers. DNSSEC appears to be unsigned, which is not uncommon but does mean DNS responses do not benefit from DNSSEC validation.
The scanned resources mainly reference Cloudflare challenge and error-related assets, which may indicate that the page was protected, inaccessible, or returning an intermediary error state during inspection. No malicious files were identified in the limited file scan, but infrastructure-level protection pages do not offset the separate phishing detections recorded by multiple security engines.
Share your experience with this website. Was it safe? Did you encounter any issues?