18806.xyz
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of 18806.xyz
18806.xyz appears to host a Chinese-language online betting or gaming portal. The page title references "welcome-BET365," and the screenshot shows sports, live match listings, casino-style sections, and promotional bonus messaging, suggesting the site is presenting itself as a sportsbook and gambling platform.
The domain itself is a short numeric .xyz address rather than a branded corporate domain, and the site content appears oriented toward sports wagering, live events, and related gaming activity. Based on the available page content, it may be targeting users looking for online gambling services while also invoking the branding of a well-known betting company.
No clear operator identity is provided in the scan data. Given the mismatch between the numeric domain name and the BET365 branding shown on the page, the site may be attempting to attract visitors through brand association rather than operating from an official brand-owned domain.
Safety Assessment for 18806.xyz
The scan results indicate elevated risk signals at the time of this scan. The domain was flagged by 17 out of 91 security engines, with multiple detections describing the site as phishing, malicious, or fraud-related. In addition, several web-classification providers categorized it as phishing, fraud, spam-related, or gambling. The screenshot also shows the site using BET365 branding on an unrelated domain, which closely suggests it may be imitating a known gambling brand.
Other context increases caution. The domain is only 19 days old, has no established traffic ranking, and uses a generic numeric .xyz address rather than a recognizable official brand domain. While the malware scan did not detect malicious files in the limited content it checked, and major content-malice blocklists listed in the scan were clean at the time of review, the domain's IP address is listed on one mail-reputation blocklist. That listing alone is not strong proof of website abuse, but it adds a minor negative signal.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site was reachable over HTTPS with a valid Let's Encrypt certificate that was set to expire on 2026-09-18. DNSSEC appears to be unsigned, which is common but means DNS responses do not benefit from that additional integrity layer. The scan did not identify the web server software, and the site was hosted on an IP in Mong Kok, Hong Kong, under HONG KONG KOWLOON TELECOMMUNICATIONS CO., LIMITED.
From a technical-risk perspective, the strongest concerns are not the TLS setup itself but the surrounding indicators: a very newly registered domain, unsigned DNSSEC, unknown server stack, and substantial multi-engine phishing detections. The malware file scan was limited and returned clean results at the time of this scan, so the primary concern appears to be deceptive or fraudulent site behavior rather than confirmed malware delivery.
Share your experience with this website. Was it safe? Did you encounter any issues?