vdtreodooz[.]rishika42[.]workers[.]dev

The domain vdtreodooz.rishika42.workers.dev has been identified as a phishing site engaging in brand impersonation, specifically targeting Google's brand. This domain is currently taken offline, reducing its immediate threat. However, it was previously used to deceive users by mimicking Google's legitimate website, potentially leading to credential theft or other fraudulent activities. Users searching for information on whether vdtreodooz.rishika42.workers.dev is safe or a scam should be aware that it was involved in malicious activities.

Technical indicators reveal that vdtreodooz.rishika42.workers.dev was detected by 1 of 95 vendors on VirusTotal, including alphaMountain.ai. The domain was registered through Cloudflare, Inc. on March 23, 2026, and resolves to the IP address 104.21.9.252. It appears on three security blocklists: PhishDestroy, MetaMask, and SEAL. The SSL certificate was issued by Google Trust Services / WE1, and the page title observed was 'Google'. Despite these indicators, Google Safe Browsing has not flagged the site.

For those who may have interacted with vdtreodooz.rishika42.workers.dev, it is crucial to change any passwords associated with Google accounts and enable two-factor authentication as an added security measure. Users should monitor their accounts for any signs of unauthorized activity. To report phishing attempts or scams, users can contact Google's support services or use their reporting tools to alert them of such fraudulent domains.