cut-lunch.surge.sh
Categoria: Phishing
Para usar o produto com todas as funcionalidades, tem de adquirir uma licença do Combo Cleaner. Está disponível um teste gratuito limitado de sete dias. O Combo Cleaner é propriedade e operado pela RCS LT, a empresa-mãe do PCRisk.com.
O Quttera Web Malware Removal é um serviço de subscrição paga. Os preços, planos e disponibilidade de teste são definidos pela Quttera. A Quttera é operada pela Quttera Ltd, uma empresa terceira independente sem relação com a RCS LT. O PCrisk.com pode receber uma comissão de referência quando os utilizadores aderem através desta ligação.
Descrição de cut-lunch.surge.sh
This domain appears to host a simple web page on the Surge static hosting platform. Based on the screenshot, the page presents itself as a generic webmail login portal with fields for an email address and password, along with multilingual footer links and branding that resembles a common hosting control panel login style.
The domain name itself, cut-lunch.surge.sh, does not appear to correspond to a recognizable business, organization, or official mail provider. The page title, "Welcome to Our Website," is also very generic and does not clearly identify a legitimate operator, which may indicate a temporary or single-purpose hosted page rather than a formal branded service.
Avaliação de segurança de cut-lunch.surge.sh
The available scan data shows multiple risk indicators. At the time of this scan, 12 out of 91 security engines flagged the URL, with several classifying it as phishing or otherwise malicious. In addition, a malware scan flagged the site's main index file as malicious. The screenshot also shows a credential-entry form styled as a webmail login page, but the domain does not appear to belong to a known mail provider, which may be consistent with credential-harvesting behavior.
Some reputation sources and blacklist databases did not list the domain at the time of this scan, which can happen with newly deployed or narrowly targeted phishing pages, or with content hosted on broader shared platforms. However, the combination of multi-engine detections, a flagged page file, a very low trust score, and a login form on an unrelated subdomain materially increases concern.
Based on these findings, this website may pose potential risks to visitors.
Descrição técnica
The site was reachable over HTTPS with a valid TLS certificate issued by Sectigo Limited, expiring in December 2026. It appears to be hosted on DigitalOcean infrastructure in Amsterdam and served through the Surge platform, which is commonly used for static site deployment. The domain itself is relatively old, having been created in 2014, but that age does not necessarily reflect how long the current page content has been present.
DNSSEC appears to be unsigned, and no external links, referenced domains, or iframes were identified in the provided scan. While the TLS setup appears functional, the main technical concern is the hosted page content itself: a standalone login form on a generic subdomain, combined with malicious/phishing detections from multiple security engines at the time of analysis.
Partilhe a sua experiência com este website. Era seguro? Encontrou algum problema?