cut-lunch.surge.sh
Kategoria: Phishing
Aby korzystać z produktu z pełną funkcjonalnością, musisz kupić licencję na Combo Cleaner. Dostępny jest ograniczony siedmiodniowy bezpłatny okres próbny. Combo Cleaner należy do RCS LT i jest obsługiwany przez tę firmę, spółkę macierzystą PCRisk.com.
Quttera Web Malware Removal to płatna usługa subskrypcyjna. Ceny, plany i dostępność wersji próbnej ustala Quttera. Quttera jest obsługiwana przez Quttera Ltd, niezależną firmę zewnętrzną niezwiązaną z RCS LT. PCrisk.com może otrzymać prowizję za polecenie, gdy użytkownicy zarejestrują się przez ten link.
Opis cut-lunch.surge.sh
This domain appears to host a simple web page on the Surge static hosting platform. Based on the screenshot, the page presents itself as a generic webmail login portal with fields for an email address and password, along with multilingual footer links and branding that resembles a common hosting control panel login style.
The domain name itself, cut-lunch.surge.sh, does not appear to correspond to a recognizable business, organization, or official mail provider. The page title, "Welcome to Our Website," is also very generic and does not clearly identify a legitimate operator, which may indicate a temporary or single-purpose hosted page rather than a formal branded service.
Ocena bezpieczeństwa cut-lunch.surge.sh
The available scan data shows multiple risk indicators. At the time of this scan, 12 out of 91 security engines flagged the URL, with several classifying it as phishing or otherwise malicious. In addition, a malware scan flagged the site's main index file as malicious. The screenshot also shows a credential-entry form styled as a webmail login page, but the domain does not appear to belong to a known mail provider, which may be consistent with credential-harvesting behavior.
Some reputation sources and blacklist databases did not list the domain at the time of this scan, which can happen with newly deployed or narrowly targeted phishing pages, or with content hosted on broader shared platforms. However, the combination of multi-engine detections, a flagged page file, a very low trust score, and a login form on an unrelated subdomain materially increases concern.
Based on these findings, this website may pose potential risks to visitors.
Opis techniczny
The site was reachable over HTTPS with a valid TLS certificate issued by Sectigo Limited, expiring in December 2026. It appears to be hosted on DigitalOcean infrastructure in Amsterdam and served through the Surge platform, which is commonly used for static site deployment. The domain itself is relatively old, having been created in 2014, but that age does not necessarily reflect how long the current page content has been present.
DNSSEC appears to be unsigned, and no external links, referenced domains, or iframes were identified in the provided scan. While the TLS setup appears functional, the main technical concern is the hosted page content itself: a standalone login form on a generic subdomain, combined with malicious/phishing detections from multiple security engines at the time of analysis.
Podziel się swoimi doświadczeniami z tą witryną. Czy była bezpieczna? Czy wystąpiły jakieś problemy?