tzr-vdm4m.iris42.workers.dev
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of tzr-vdm4m.iris42.workers.dev
This domain appears to be a subdomain hosted on the workers.dev platform, which is associated with serverless web applications and edge-hosted content delivery. The naming pattern "tzr-vdm4m.iris42.workers.dev" does not indicate a recognizable brand, organization, or public-facing service, and the available metadata does not suggest an established standalone business website.
Based on the hosting context, the page may be part of a temporary deployment, testing environment, or dynamically generated web endpoint running through Cloudflare infrastructure. The scan data does not provide evidence of a conventional company-operated website with clear branding or published ownership details, so its purpose appears limited and somewhat opaque based on the available information.
Safety Assessment for tzr-vdm4m.iris42.workers.dev
Multiple security signals indicate elevated risk at the time of this scan. The domain was flagged by 12 out of 91 security engines, with the detections consistently classifying it as phishing-related. In addition, a major threat database listed the URL for social-engineering activity, which is a stronger indicator than a generic heuristic alert. Although the malware scan did not identify malicious files in the sampled content, phishing pages often rely on deceptive forms or redirects rather than downloadable malware, so a clean file scan does not materially offset the phishing-related findings.
There is also a secondary reputation concern: the domain's IP address appears on one mail-reputation blocklist. That signal alone would be weak evidence, but in this case it sits alongside broad phishing-related detections and a very low trust score in the scan context. The domain is several years old and uses valid HTTPS on a major hosting platform, but age and TLS do not by themselves reduce the risk implied by the phishing classifications.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site uses a valid SSL/TLS certificate issued by Google Trust Services, with expiry shown as 2026-09-28, and it is served through Cloudflare infrastructure on IP address 188.114.97.0. Hosting appears to be provided via Cloudflare's workers.dev environment, which can be used for legitimate edge applications but may also be used for short-lived or disposable deployments. The web server is identified as Cloudflare, and the nameservers also point to Cloudflare-managed DNS.
DNSSEC appears to be unsigned, which is not uncommon but means DNS responses do not benefit from DNSSEC validation. No malicious files, flagged external links, or iframes were identified in the provided content scan, but that should be interpreted cautiously because phishing activity may be present even when static file inspection is clean.
Share your experience with this website. Was it safe? Did you encounter any issues?