juraq-tkyr-saep[.]c-m4uro6ql[.]workers[.]dev

Analysis indicates that the subdomain juraq-tkyr-saep.c-m4uro6ql.workers.dev is currently active and hosted behind Cloudflare, Inc. The domain resolves to the IP address 188.114.96.3, and its authoritative nameserver information could not be retrieved (NS_NOT_FOUND). VirusTotal has recorded nine detections out of ninety‑one scanning engines, confirming that multiple security products have flagged the domain as malicious. The available intelligence classifies the site as generic_phishing, but no further content analysis, page title, or targeted brand information is presently available. Consequently, the exact phishing vector, credential‑stealing mechanisms, and victim profile remain uncertain. Defenders should treat the domain as high‑risk: block outbound connections to the resolved IP, add the full hostname to DNS deny‑lists, and monitor internal logs for any HTTP(S) requests to the workers.dev subdomain. Continuous traffic analysis and sandbox execution of any retrieved payloads are recommended to clarify the threat’s capabilities and to refine detection rules.