tzr-ioqwek[.]destiny72[.]workers[.]dev

Analysis of tzr-ioqwek.destiny72.workers.dev as of 2026‑08‑06 shows that the domain resolves to the IPv4 address 172.67.130.173. The hosting infrastructure is provided by Cloudflare, Inc., which also appears as the registrar in the WHOIS record. A DNS query returned no explicit nameserver entries, indicating that the domain relies on Cloudflare’s proxy or that its nameserver data is not publicly exposed.

VirusTotal has processed the domain with scans from 91 independent security vendors; none of the vendors reported a detection at the time of analysis. The domain is present on a single external blocklist and is actively blocked by the PhishDestroy mitigation service, confirming that at least one security organization has taken action to prevent access. The supplied threat classification is “generic phishing,” with a risk level recorded as “under investigation” while the operational status remains “active.” No additional infrastructure attributes such as autonomous system number, country of origin, SSL certificate details, or HTTP response codes are available from the current data set, leaving those dimensions uncertain.

Defenders encountering traffic to this domain should consider adding the IP address and domain to network‑level deny lists, updating URL filtering rules, and employing DNS sinkholing where possible. Continuous monitoring is recommended, as future scans may generate detections from additional vendors and the domain could be added to further blocklists. Maintaining up‑to‑date threat intelligence feeds will aid in timely response should the domain’s activity evolve.