2wvkut8bdw8nhkf9.lulumallapp.com
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of 2wvkut8bdw8nhkf9.lulumallapp.com
This domain appears to host an administrative login page branded for Lulu Mall Kochi, with the page title "Lulu Mall Admin" and a sign-in form requesting an email address and password. The screenshot suggests it may be intended for staff, tenants, or back-office users rather than general shoppers, and the page also references Appzoc as the platform provider.
The hostname is a long, random-looking subdomain under lulumallapp.com, which may indicate a tenant-specific, internal, or application-generated endpoint rather than a public marketing website. Based on the branding shown, the site appears to be associated with mall operations, retail management, or administrative access for a shopping-center-related service.
Safety Assessment for 2wvkut8bdw8nhkf9.lulumallapp.com
Scan results show mixed signals at the time of this scan. The domain was flagged by 2 out of 91 security engines, and one major blacklist source listed it for social-engineering/phishing-related activity. At the same time, the malware scan did not identify malicious files, no suspicious external links or iframes were reported, and several other blacklist checks were clean.
The page itself is a credential-entry screen, which naturally carries higher sensitivity because users may be asked to submit login details. The long, random-looking subdomain structure can be legitimate for application deployments, but in combination with phishing-related detections it may warrant extra caution. A valid SSL certificate is present, though HTTPS alone does not confirm legitimacy.
Based on these findings, this website may pose potential risks to visitors at the time of this scan.
Technical Description
The site presented a valid TLS certificate issued by a mainstream certificate authority, with expiry extending to 2027-01-01. It resolves to an AWS EC2 address in the ap-south-1 region and appears to run Apache/2.4.52 on Ubuntu. The domain itself is relatively old, having been registered in 2017 and set to expire in 2031, which may reduce the likelihood of a throwaway domain but does not rule out abuse on a subdomain.
DNSSEC appears to be unsigned, so DNS responses may not benefit from that additional integrity layer. No malicious files, external links, or iframe references were identified in the provided scan data, but the phishing-related detections and blacklist listing remain the main technical concern at the time of review.
Share your experience with this website. Was it safe? Did you encounter any issues?