polished-shape-e18a[.]zikrir001[.]workers[.]dev

PhishDestroy identifies polished-shape-e18a.zikrir001.workers.dev as a live fake gaming portal posing as a top-rated 'RTP Gacor' slot site. The page title—HWGACOR - Situs Link Slot Terbaru RTP Gacor Juara #1 Terpercaya—uses high-trust keywords to trick visitors into clicking. Once on the page, users are prompted to enter credentials or payment details to access supposedly ‘exclusive’ slot games, a common tactic in credential harvesting and financial fraud campaigns. This domain was flagged by PhishDestroy’s seed a89c78 after resolving to IP 188.114.96.3 via Cloudflare, Inc. VirusTotal currently reports 1/95 detections, indicating low signature coverage despite active abuse. Registered through Cloudflare’s anonymizing service, it exploits workers.dev’s trusted subdomain space to evade traditional domain-based detection. The Let’s Encrypt SSL certificate further enhances legitimacy, increasing the chance of user deception. Users who visited polished-shape-e18a.zikrir001.workers.dev should immediately clear browser cache and cookies, avoid re-entering any login or payment information, and scan devices for malware. If credentials were entered, change passwords on all accounts using the same login and enable two-factor authentication. Report the domain to your browser’s safe browsing program and local cybersecurity teams. Do not interact further—this domain remains active and poses a direct risk of financial and identity theft.