xorawin.com
Catégorie : Gambling, Phishing, Newly Registered
Pour utiliser le produit avec toutes ses fonctionnalités, vous devez acheter une licence pour Combo Cleaner. Essai gratuit limité à sept jours. Combo Cleaner appartient à et est exploité par RCS LT, la société mère de PCRisk.com.
Description de xorawin.com
xorawin.com appears to be a very recently registered website that, based on available classification data, may be associated with gambling-related content and potentially deceptive activity. The domain name itself does not clearly identify a known organization, publisher, or established business, and the provided scan data does not indicate a transparent operator identity on the homepage.
The captured page shown during this scan displays a "Thanks for downloading!" screen styled to resemble a Chrome download page. That presentation may indicate the site is attempting to deliver software or redirect visitors toward a browser-related download flow rather than functioning as a conventional informational website. Based on the domain age, lack of traffic ranking, and conflicting content signals, the site does not appear to represent a mature, well-established web property at the time of this scan.
Évaluation de sécurité de xorawin.com
Multiple security signals raise concern about this domain at the time of this scan. It was flagged by 16 out of 91 security engines, with several detections describing phishing, malware, or other fraudulent behavior. In addition, multiple web-classification sources categorized it as phishing-related, and one blacklist-style source also returned a malicious-object style listing. While one malware scan reported no flagged files on the sampled page, that clean result is outweighed by the broader multi-engine consensus and the suspicious page presentation.
The screenshot adds further caution because the page appears to imitate a Chrome download confirmation screen on a domain unrelated to the browser vendor. That kind of presentation may be used to mislead visitors into downloading unwanted software or trusting a page that is not affiliated with the brand it visually resembles. The domain is also only 57 days old and has no observed traffic ranking, both of which can increase uncertainty for visitors.
Blacklist data was mixed rather than fully clean: major content-malice databases in the provided scan did not detect the domain, but the domain's IP address is listed on one mail-reputation blocklist, which is a weaker signal and not conclusive on its own. Even so, taken together with the multi-engine phishing and malware detections and the deceptive-looking download page, the overall risk appears elevated. Based on these findings, this website may pose potential risks to visitors.
Description technique
The site is using a valid Let's Encrypt SSL certificate that was active at the time of the scan, which means traffic may be encrypted in transit. However, HTTPS alone does not verify the trustworthiness of the site's content or operator. The server was hosted on IP address 66.198.225.39 with hosting attributed to SKN & Telecom Ltd in New Castle, United States. The web server software and supported TLS protocol details were not identified in the provided data.
From a domain-security perspective, the registration is very recent, DNSSEC is unsigned, and the nameservers are set to ns1.nameserverhub.com and ns2.nameserverhub.com. No malicious files, external links, or iframes were identified in the limited page scan, but the absence of those artifacts on a single sampled page does not offset the broader reputation findings. The combination of a young domain, unsigned DNSSEC, and strong phishing-related detections may warrant caution.
Partagez votre expérience avec ce site web. Était-il sûr ? Avez-vous rencontré des problèmes ?