trzkdhdfge[.]df83[.]workers[.]dev

The domain trzkdhdfge.df83.workers.dev is actively impersonating a messaging service, potentially aiming to harvest user credentials under the guise of delivering a new message. With a VirusTotal score of 16 out of 95, it has been flagged as a phishing threat, and its presence on the blocklist further corroborates its malicious intent.

Registered with Cloudflare, Inc., this domain has been in existence for over seven years, suggesting a persistent use for nefarious activities. The IP address 104.21.15.23 reveals its hosting infrastructure, while the long registration period raises concerns about its ongoing capabilities to deceive users. The domain has been classified as suspicious, indicating a need for vigilance.

Currently, trzkdhdfge.df83.workers.dev remains active. PhishDestroy has reported this domain and is actively monitoring it for any further developments, reinforcing measures to mitigate its phishing attempts.