Site check

Is rough-truth-e072[.]publicftpresend[.]workers[.]dev safe?

Reported for distributing malware, and still online

This address is on a current list of sites serving malware, and at least one reported URL was still online at the last check. Do not open the reported addresses and do not run anything downloaded from this site. If it is a site you know, it may have been hacked.

Malware reports

Reported URLs on this host
17
Still online at last check
2
First report in the list
Sep 17, 2026, 16:35 UTC
Latest report
Oct 8, 2026, 11:13 UTC
Tags
ascii (13), Encoded (5), xworm (5), MassLogger (3), rat (3), AgentTesla (2), RemcosRAT (2), rev-base64-loader (2)

Examples, written so they cannot be clicked:

  • hxxps://rough-truth-e072[.]publicftpresend[.]workers[.]dev/vuztqoffline · reported Oct 8, 2026
  • hxxps://rough-truth-e072[.]publicftpresend[.]workers[.]dev/abjeypoffline · reported Oct 7, 2026
  • hxxps://rough-truth-e072[.]publicftpresend[.]workers[.]dev/smpuvcjzdoffline · reported Oct 7, 2026
  • hxxps://rough-truth-e072[.]publicftpresend[.]workers[.]dev/ibxpbnzeonline · reported Oct 6, 2026
  • hxxps://rough-truth-e072[.]publicftpresend[.]workers[.]dev/lxirwcxonline · reported Oct 6, 2026
  • hxxps://rough-truth-e072[.]publicftpresend[.]workers[.]dev/evbxwojeoyoffline · reported Oct 5, 2026
  • hxxps://rough-truth-e072[.]publicftpresend[.]workers[.]dev/jbkotwooffline · reported Oct 1, 2026
  • hxxps://rough-truth-e072[.]publicftpresend[.]workers[.]dev/iwouioimnoffline · reported Oct 1, 2026
  • hxxps://rough-truth-e072[.]publicftpresend[.]workers[.]dev/svozdaroffline · reported Oct 1, 2026
  • hxxps://rough-truth-e072[.]publicftpresend[.]workers[.]dev/zipoiqoffline · reported Sep 30, 2026
  • hxxps://rough-truth-e072[.]publicftpresend[.]workers[.]dev/cruyuoffline · reported Sep 24, 2026
  • hxxps://rough-truth-e072[.]publicftpresend[.]workers[.]dev/ztpreeccloffline · reported Sep 23, 2026

Source: abuse.ch URLhaussource updated Oct 9, 2026, 06:40 UTCcovers roughly the last 30 days of reports

Domain age

This address is a subdomain of workers.dev, a hosting platform where anyone can publish a page under their own name. The platform's age says nothing about this page, so no age is shown.

Source: public registration data (RDAP) for rough-truth-e072[.]publicftpresend[.]workers[.]dev

Our removal guides

We have no guide about this address. Browse removal guides

5,441 members already hereReading, writing, commenting and voting. 0 verified · 166 joined this year
Is rough-truth-e072.publicftpresend.workers.dev safe? Malware reports and domain age — 2-Spyware