cut-lunch.surge.sh
Kategorie: Phishing
Um das Produkt mit vollem Funktionsumfang zu nutzen, müssen Sie eine Lizenz für Combo Cleaner erwerben. Eine eingeschränkte kostenlose siebentägige Testversion ist verfügbar. Combo Cleaner ist Eigentum von RCS LT und wird von diesem Unternehmen betrieben, der Muttergesellschaft von PCRisk.com.
Quttera Web Malware Removal ist ein kostenpflichtiger Abonnementdienst. Preise, Tarife und die Verfügbarkeit einer Testversion werden von Quttera festgelegt. Quttera wird von Quttera Ltd betrieben, einem unabhängigen Drittunternehmen ohne Verbindung zu RCS LT. PCrisk.com kann eine Vermittlungsprovision erhalten, wenn sich Nutzer über diesen Link anmelden.
Beschreibung von cut-lunch.surge.sh
This domain appears to host a simple web page on the Surge static hosting platform. Based on the screenshot, the page presents itself as a generic webmail login portal with fields for an email address and password, along with multilingual footer links and branding that resembles a common hosting control panel login style.
The domain name itself, cut-lunch.surge.sh, does not appear to correspond to a recognizable business, organization, or official mail provider. The page title, "Welcome to Our Website," is also very generic and does not clearly identify a legitimate operator, which may indicate a temporary or single-purpose hosted page rather than a formal branded service.
Sicherheitsbewertung für cut-lunch.surge.sh
The available scan data shows multiple risk indicators. At the time of this scan, 12 out of 91 security engines flagged the URL, with several classifying it as phishing or otherwise malicious. In addition, a malware scan flagged the site's main index file as malicious. The screenshot also shows a credential-entry form styled as a webmail login page, but the domain does not appear to belong to a known mail provider, which may be consistent with credential-harvesting behavior.
Some reputation sources and blacklist databases did not list the domain at the time of this scan, which can happen with newly deployed or narrowly targeted phishing pages, or with content hosted on broader shared platforms. However, the combination of multi-engine detections, a flagged page file, a very low trust score, and a login form on an unrelated subdomain materially increases concern.
Based on these findings, this website may pose potential risks to visitors.
Technische Beschreibung
The site was reachable over HTTPS with a valid TLS certificate issued by Sectigo Limited, expiring in December 2026. It appears to be hosted on DigitalOcean infrastructure in Amsterdam and served through the Surge platform, which is commonly used for static site deployment. The domain itself is relatively old, having been created in 2014, but that age does not necessarily reflect how long the current page content has been present.
DNSSEC appears to be unsigned, and no external links, referenced domains, or iframes were identified in the provided scan. While the TLS setup appears functional, the main technical concern is the hosted page content itself: a standalone login form on a generic subdomain, combined with malicious/phishing detections from multiple security engines at the time of analysis.
Teilen Sie Ihre Erfahrung mit dieser Website. War sie sicher? Sind Probleme aufgetreten?