payoneergw.com.cn
Categoría: Phishing
Para usar el producto con todas las funciones, debe comprar una licencia de Combo Cleaner. Hay una prueba gratuita limitada de siete días. Combo Cleaner es propiedad de y está gestionado por RCS LT, la empresa matriz de PCRisk.com.
Quttera Web Malware Removal es un servicio de suscripción de pago. Los precios, planes y disponibilidad de prueba los establece Quttera. Quttera es operado por Quttera Ltd, una empresa tercera independiente no relacionada con RCS LT. PCrisk.com puede recibir una comisión por referencia cuando los usuarios se registran a través de este enlace.
Descripción de payoneergw.com.cn
The website appears to present itself as a Chinese-language digital wallet and payment platform using the PAYONEER name and branding. Its page title and metadata describe services such as digital asset storage, asset management, multi-currency support, transfers, and security controls, while the homepage screenshot promotes registration, login, wallet features, and USDT transfers.
Based on the domain structure, this does not appear to be an official Payoneer domain. The address combines the well-known Payoneer brand name with additional letters ("gw") under a .com.cn domain, which may indicate an unofficial or look-alike site rather than a primary corporate property. The content also shifts from mainstream payments branding toward cryptocurrency-style wallet messaging, which may not align with the expected identity of the legitimate financial brand.
Evaluación de seguridad de payoneergw.com.cn
This domain shows multiple risk indicators at the time of this scan. It was flagged by 13 out of 91 security engines, with many of those detections classifying it as phishing or malicious. In addition, the domain closely resembles the Payoneer brand and may be a look-alike site intended to benefit from user trust in that name. The screenshot, title, and metadata all prominently use PAYONEER branding while promoting wallet and digital-asset functions, which raises further concern about possible impersonation.
A malware scan also reported one flagged script file (nb.js) as malicious, although blacklist databases were largely clean at the time of this scan. That combination can occur with newer or narrowly targeted phishing pages that have not yet propagated widely across blocklists. The very low trust score provided with the scan context is consistent with the broader pattern of phishing-related signals.
Based on these findings, this website may pose potential risks to visitors.
Descripción técnica
The site was reachable over HTTPS with a valid Let's Encrypt certificate expiring in July 2026. It appears to be served by nginx from IP address 154.194.137.70, hosted by Starbow Ltd in Chai Wan, Hong Kong. DNSSEC is not enabled, and WHOIS lifecycle details such as creation and expiry dates were not available in the provided scan data.
From a security perspective, the main technical concern is not the TLS setup itself but the surrounding reputation and content signals: multiple phishing detections, a flagged JavaScript file, and branding that appears inconsistent with the domain. The site also uses plain HTTP URLs for many referenced resources in the scan output, which may further weaken trust in the implementation.
Comparta su experiencia con este sitio web. ¿Era seguro? ¿Tuvo algún problema?