sweet-truth-af82[.]igtyitifweh[.]workers[.]dev

This domain, sweet-truth-af82.igtyitifweh.workers.dev, poses a significant threat by impersonating the legitimate dating site OurTime.com. The domain is designed to trick users into believing they are interacting with a genuine service, potentially leading to the disclosure of sensitive personal and financial information. The threat level is high, as the domain is actively being used in phishing campaigns to deceive users over the age of 50 who are seeking connections on the OurTime platform.

Analysis indicates that the domain has been flagged by 18 out of 95 security vendors on VirusTotal, suggesting a moderate to high level of suspicion and potential danger. The domain was registered through Cloudflare, Inc. on March 01, 2026, and is currently active, resolving to the IP address 188.114.96.3, which is located in the United States and belongs to Cloudflare, Inc. (AS13335). Additionally, the domain appears on two security blocklists, PhishDestroy and PhishingDB, further confirming its malicious nature. The SSL certificate is issued by Google Trust Services, which may contribute to a false sense of security among users.

If users have visited this domain, they should immediately check their accounts for any unauthorized activity and change their passwords. It is also recommended to monitor financial statements and credit reports for signs of fraud. Users should report the incident to their respective service providers and consider enabling two-factor authentication on all critical accounts. Awareness and caution are essential when interacting with unsolicited links or emails, especially those purporting to be from trusted sources like OurTime.com.