onestarmarketllc.com
Kategoria: Phishing, Newly Registered
Aby korzystać z produktu z pełną funkcjonalnością, musisz kupić licencję na Combo Cleaner. Dostępny jest ograniczony siedmiodniowy bezpłatny okres próbny. Combo Cleaner należy do RCS LT i jest obsługiwany przez tę firmę, spółkę macierzystą PCRisk.com.
Opis onestarmarketllc.com
The domain onestarmarketllc.com appears to present itself as a promotional landing page advertising mobile carrier offers, specifically an "AT&T Promotions" page promising a free iPhone 17 Pro Max and discounts on wireless bills. Based on the screenshot and metadata, the site functions more like a lead-generation or offer-claim page than a full corporate website, with simple navigation links and prominent call-to-action buttons encouraging visitors to claim an offer or call a phone number.
The domain name itself does not appear to match the branding shown on the page. Rather than using an official-looking AT&T-owned domain, it uses a generic business-style name ending in "marketllc," which may be inconsistent with the telecom branding displayed. The site appears to be hosted through shared infrastructure and uses a basic promotional layout, which may indicate a temporary campaign page or, alternatively, a page attempting to imitate a well-known brand based on available data.
Ocena bezpieczeństwa onestarmarketllc.com
Multiple risk indicators were present at the time of this scan. The domain was flagged by 14 out of 92 security engines, and several web-classification sources categorized it as phishing, fraud-related, or malware-associated. In addition, a major blacklist source listed the site for social engineering, which is a significant signal because blacklist and multi-engine consensus generally carry more weight than isolated heuristic findings.
The page content also raises concern. The site prominently uses AT&T branding while operating from a domain that does not appear to be an official AT&T domain, and it advertises an unusually generous offer involving a free high-end phone and major bill discounts. That combination may indicate brand impersonation or a deceptive lead-capture campaign. The domain is also very new, at only 22 days old, which can increase uncertainty and risk for visitors.
Although one malware scan reported no directly flagged files, it still associated the domain and linked assets with generic malicious-object heuristics. Taken together with the phishing classifications, blacklist listing, and the mismatch between the domain name and the brand presented on the page, based on these findings, this website may pose potential risks to visitors.
Opis techniczny
The site uses a valid Let's Encrypt SSL certificate, which means traffic may be encrypted in transit, but HTTPS alone should not be treated as evidence of legitimacy. The domain is hosted on Hostinger infrastructure, resolves to an IP in Paris, France, and appears to be served through an hcdn web server. The certificate was valid at the time of scanning, and the domain uses nameservers associated with dns-parking.com.
From a domain-security perspective, the registration is very recent and DNSSEC is unsigned, so DNS responses do not appear to benefit from DNSSEC validation. The combination of a newly registered domain, parking-style nameservers, phishing-related detections, and blacklist listings may be relevant technical risk indicators at the time of this scan.
Podziel się swoimi doświadczeniami z tą witryną. Czy była bezpieczna? Czy wystąpiły jakieś problemy?