trozr-kasoj[.]allyse10[.]workers[.]dev

The domain trozr-kasoj.allyse10.workers.dev is currently classified as a generic_phishing indicator and remains active as of 16 July 2026. Registration details show the domain was provisioned through Cloudflare, Inc., a provider that also offers DNS and CDN services. DNS resolution points to the IPv4 address 188.114.96.3, and no authoritative nameserver records were returned during lookup, indicating that standard NS records are not publicly visible. VirusTotal has recorded scans from 91 security vendors; none of those vendors have raised a detection at the time of analysis, but the absence of a flag does not constitute assurance of legitimacy. The threat‑intel profile lists the risk level as under_investigation, reflecting uncertainty about the operational intent and impact. Given the phishing classification and the active status, defenders should treat the domain as potentially malicious. Recommended mitigations include adding the domain to block lists, monitoring network traffic for connections to 188.114.96.3, and employing sink‑hole or sandbox analysis if traffic is observed. Continuous re‑evaluation is advised, as additional detections or changes in infrastructure may emerge.