xecloud.duckdns.org
Categorie: Phishing
Om het product met alle functies te gebruiken, moet u een licentie voor Combo Cleaner aanschaffen. Beperkte gratis proefperiode van zeven dagen beschikbaar. Combo Cleaner is eigendom van en wordt beheerd door RCS LT, het moederbedrijf van PCRisk.com.
Beschrijving van xecloud.duckdns.org
xecloud.duckdns.org appears to be a subdomain hosted under DuckDNS, a dynamic DNS platform commonly used to expose home or small-office devices and services to the internet. Based on the screenshot, the page presents an AT&T-branded "Password Required" login form asking for a username and device password, which suggests it may be attempting to imitate a router, gateway, or device-management portal rather than functioning as a general public website.
The domain itself is not a standalone commercial domain but a third-level hostname under duckdns.org, which can make attribution less clear because such subdomains are typically user-created. The visible content appears focused on credential entry rather than information, services, or normal navigation, and the page branding references AT&T and ARRIS intellectual property. Based on the available page content and classification data, this site appears to fit a phishing-oriented login portal rather than a legitimate technology information site.
Veiligheidsbeoordeling voor xecloud.duckdns.org
Multiple independent signals indicate elevated risk at the time of this scan. The domain was flagged by 21 out of 91 security engines, and several web-classification sources categorized it as phishing or fraud-related. In addition, major threat-database checks showed the URL listed for social-engineering activity, which is a stronger warning sign than a generic heuristic match. Although one malware scan reported no malicious files, that result does not outweigh the broader phishing-related consensus because credential-harvesting pages often contain little or no downloadable malware.
The screenshot also raises concern because it shows an AT&T-branded credential prompt on a DuckDNS subdomain rather than on an official-looking provider domain. That mismatch may indicate an attempt to collect usernames and device passwords by imitating a telecom or router login page. The domain's IP address is also listed on one mail-reputation blocklist, which is a secondary cautionary signal, though less important than the phishing detections and social-engineering listing.
Based on these findings, this website may pose potential risks to visitors.
Technische beschrijving
The site appears to be hosted on IP address 76.198.154.67, associated here with AT&T Corp in Atlanta, United States. The hostname is a DuckDNS subdomain, which suggests dynamic DNS usage rather than a conventional business-hosted web property. The web server software was not identified in the scan results.
TLS/SSL appears to be invalid or missing, which is a notable concern for any page requesting credentials. DNSSEC is unsigned, so DNS responses do not appear to benefit from DNSSEC validation at the time of this scan. Combined with the credential-entry page and the phishing-related detections, the technical profile does not provide reassuring trust signals.
Deel uw ervaring met deze website. Was deze veilig? Bent u problemen tegengekomen?