onestarmarketllc.com
Catégorie : Phishing, Newly Registered
Pour utiliser le produit avec toutes ses fonctionnalités, vous devez acheter une licence pour Combo Cleaner. Essai gratuit limité à sept jours. Combo Cleaner appartient à et est exploité par RCS LT, la société mère de PCRisk.com.
Description de onestarmarketllc.com
The domain onestarmarketllc.com appears to present itself as a promotional landing page advertising mobile carrier offers, specifically an "AT&T Promotions" page promising a free iPhone 17 Pro Max and discounts on wireless bills. Based on the screenshot and metadata, the site functions more like a lead-generation or offer-claim page than a full corporate website, with simple navigation links and prominent call-to-action buttons encouraging visitors to claim an offer or call a phone number.
The domain name itself does not appear to match the branding shown on the page. Rather than using an official-looking AT&T-owned domain, it uses a generic business-style name ending in "marketllc," which may be inconsistent with the telecom branding displayed. The site appears to be hosted through shared infrastructure and uses a basic promotional layout, which may indicate a temporary campaign page or, alternatively, a page attempting to imitate a well-known brand based on available data.
Évaluation de sécurité de onestarmarketllc.com
Multiple risk indicators were present at the time of this scan. The domain was flagged by 14 out of 92 security engines, and several web-classification sources categorized it as phishing, fraud-related, or malware-associated. In addition, a major blacklist source listed the site for social engineering, which is a significant signal because blacklist and multi-engine consensus generally carry more weight than isolated heuristic findings.
The page content also raises concern. The site prominently uses AT&T branding while operating from a domain that does not appear to be an official AT&T domain, and it advertises an unusually generous offer involving a free high-end phone and major bill discounts. That combination may indicate brand impersonation or a deceptive lead-capture campaign. The domain is also very new, at only 22 days old, which can increase uncertainty and risk for visitors.
Although one malware scan reported no directly flagged files, it still associated the domain and linked assets with generic malicious-object heuristics. Taken together with the phishing classifications, blacklist listing, and the mismatch between the domain name and the brand presented on the page, based on these findings, this website may pose potential risks to visitors.
Description technique
The site uses a valid Let's Encrypt SSL certificate, which means traffic may be encrypted in transit, but HTTPS alone should not be treated as evidence of legitimacy. The domain is hosted on Hostinger infrastructure, resolves to an IP in Paris, France, and appears to be served through an hcdn web server. The certificate was valid at the time of scanning, and the domain uses nameservers associated with dns-parking.com.
From a domain-security perspective, the registration is very recent and DNSSEC is unsigned, so DNS responses do not appear to benefit from DNSSEC validation. The combination of a newly registered domain, parking-style nameservers, phishing-related detections, and blacklist listings may be relevant technical risk indicators at the time of this scan.
Partagez votre expérience avec ce site web. Était-il sûr ? Avez-vous rencontré des problèmes ?